Prosím o kontrolu logu

[Michal I]

Celý log z RSIT má více než 60 000 znaků. Jak ho mám prosím poslat?

Děkuji

[Michal I]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Michal at 2010-10-03 14:43:52
Microsoft Windows XP Professional Service Pack 3
System drive C: has 7 GB (21%) free of 34 GB
Total RAM: 1526 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:43:55, on 3.10.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17080)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Common Files\Virtual Token\vtserver.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\IPSSVC.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\QCONSVC.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TPHDEXLG.EXE
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe
C:\WINDOWS\Ynamyb.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\tp4serv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\TpShocks.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe
C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe
C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT.EXE
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Eraser\eraser.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\OO Software\Defrag\oodag.exe
C:\Program Files\OO Software\Defrag\oodtray.exe
c:\!instalace\www.viry.cz\RSIT.exe
C:\Program Files\trend micro\Michal.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [ControlCenter] "C:\Program Files\ThinkVantage Fingerprint Software\ctlcntr.exe" /startup
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [suScheduler] C:\Program Files\ThinkVantage\SystemUpdate\UCLauncher.exe /SCHEDULER
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe
O4 - HKLM\..\Run: [QCWLICON] C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [BLOG] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog
O4 - HKLM\..\Run: [KeePass 2 PreLoad] "C:\Program Files\KeePass Password Safe 2\KeePass.exe" --preload
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [MFNetworkScanUtility] C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Software Installer - {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - C:\Program Files\Lenovo\PkgMgr\\PkgMgr.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: IPS Core Service (IPSSVC) - Lenovo Ltd. - C:\WINDOWS\system32\IPSSVC.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: O&O Defrag Agent (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: QCONSVC - Lenovo - C:\WINDOWS\System32\QCONSVC.EXE
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.EXE
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
O23 - Service: ThinkVantage System Update (UCLauncherService) - Unknown owner - C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe
O23 - Service: Protector Suite Virtual Token (vtserver) - UPEK Inc. - C:\Program Files\Common Files\Virtual Token\vtserver.exe
O23 - Service: Windows Presentation Foundation Font Cache 4.0.0.0 (WPFFontCache_v0400) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (file missing)

--
End of file - 11305 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\PMTask.job
C:\WINDOWS\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre6\bin\ssv.dll [2010-09-19 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-19 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-09-19 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TrackPointSrv"=C:\WINDOWS\system32\tp4serv.exe [2005-07-13 94208]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-05-04 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-05-04 126976]
"TPKMAPHELPER"=C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe [2005-08-12 864256]
"TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2005-06-23 86016]
"TP4EX"=C:\WINDOWS\system32\tp4ex.exe [2005-08-02 40960]
"ControlCenter"=C:\Program Files\ThinkVantage Fingerprint Software\ctlcntr.exe [2005-07-12 125026]
"EZEJMNAP"=C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe [2005-08-10 237568]
"TPHOTKEY"=C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe [2005-08-29 94208]
"SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2004-08-06 860160]
"suScheduler"=C:\Program Files\ThinkVantage\SystemUpdate\UCLauncher.exe [2005-08-02 40960]
"LPManager"=C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe [2005-08-10 98304]
"QCWLICON"=C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE [2005-08-10 86016]
"PWRMGRTR"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor []
"BLOG"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog []
"KeePass 2 PreLoad"=C:\Program Files\KeePass Password Safe 2\KeePass.exe [2010-09-05 1655296]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-09-01 421160]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-04-09 2029640]
"MFNetworkScanUtility"=C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT.EXE [2009-06-18 479232]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-09-08 421888]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
""= []
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2010-08-30 2770760]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Eraser"=C:\Program Files\Eraser\eraser.exe [2006-12-26 643072]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-05-04 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
C:\Program Files\ThinkVantage Fingerprint Software\psfus.dll [2005-07-12 109664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\QConGina]
C:\WINDOWS\system32\QConGina.dll [2005-08-10 262144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
C:\WINDOWS\system32\notifyf2.dll [2005-07-06 28672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
C:\WINDOWS\system32\tphklock.dll [2005-06-17 24576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-11 239496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SynchronousMachineGroupPolicy"=0
"SynchronousUserGroupPolicy"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe"="C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe:*:Enabled:ThinkVantage System Update"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\QK SMTP Server 3\QKSmtpServer3.exe"="C:\Program Files\QK SMTP Server 3\QKSmtpServer3.exe:*:Enabled:QKSmtpServer3"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe"="C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe:*:Enabled:ThinkVantage System Update"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

[Michal I]

2010-10-03 14:38:16 ----D---- C:\Program Files\trend micro
2010-10-03 14:38:15 ----D---- C:\rsit
2010-10-03 14:33:29 ----D---- C:\WINDOWS\system32\oodag
2010-10-03 14:28:37 ----D---- C:\Program Files\OO Software
2010-10-03 14:22:35 ----D---- C:\Documents and Settings\Michal\Application Data\WinRAR
2010-10-03 13:53:11 ----A---- C:\WINDOWS\Ynamyb.exe
2010-10-03 13:48:45 ----A---- C:\WINDOWS\Ynamya.exe
2010-10-03 13:48:03 ----A---- C:\WINDOWS\system32\sshnas21.dll
2010-09-30 08:07:23 ----D---- C:\Documents and Settings\All Users\Application Data\Sibelius Software
2010-09-30 08:06:34 ----D---- C:\Documents and Settings\Michal\Application Data\Sibelius Software
2010-09-30 08:02:53 ----D---- C:\Program Files\Sibelius Software
2010-09-29 18:40:15 ----D---- C:\Documents and Settings\All Users\Application Data\ALM
2010-09-29 17:43:34 ----RA---- C:\WINDOWS\system32\AdobePDFUI.dll
2010-09-29 17:43:34 ----RA---- C:\WINDOWS\system32\AdobePDF.dll
2010-09-29 17:17:06 ----D---- C:\Program Files\Adobe Media Player
2010-09-29 17:12:58 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-09-29 17:00:29 ----D---- C:\Program Files\Common Files\Macrovision Shared
2010-09-29 12:34:26 ----D---- C:\WINDOWS\SxsCaPendDel
2010-09-29 12:03:02 ----D---- C:\WINDOWS\LastGood
2010-09-29 11:13:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2158563$
2010-09-29 11:13:55 ----D---- C:\WINDOWS\LastGood.Tmp
2010-09-27 21:43:16 ----A---- C:\WINDOWS\system32\drivers\port_nt.sys
2010-09-27 21:40:24 ----D---- C:\Program Files\PRO100
2010-09-24 10:06:30 ----A---- C:\WINDOWS\system32\erasext.dll
2010-09-24 10:06:30 ----A---- C:\WINDOWS\system32\eraserl.exe
2010-09-24 10:06:30 ----A---- C:\WINDOWS\system32\Eraser.dll
2010-09-24 10:06:28 ----D---- C:\Program Files\Eraser
2010-09-24 08:08:36 ----D---- C:\Program Files\QuickTime
2010-09-23 14:34:43 ----D---- C:\Program Files\Microsoft Works
2010-09-23 14:19:23 ----A---- C:\WINDOWS\iun6002.exe
2010-09-23 14:19:14 ----D---- C:\Program Files\Codec Pack - All In 1
2010-09-23 14:14:42 ----A---- C:\WINDOWS\system32\javaws.exe
2010-09-23 14:14:42 ----A---- C:\WINDOWS\system32\javaw.exe
2010-09-23 14:14:42 ----A---- C:\WINDOWS\system32\java.exe
2010-09-22 09:18:29 ----D---- C:\WINDOWS\ie7updates
2010-09-22 09:16:27 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-09-21 20:11:35 ----D---- C:\Program Files\WinXP Manager
2010-09-21 19:26:58 ----D---- C:\WINDOWS\WBEM
2010-09-21 19:23:08 ----HDC---- C:\WINDOWS\ie7
2010-09-21 19:22:19 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2010-09-21 19:21:41 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2010-09-21 15:47:55 ----D---- C:\Program Files\XStandard
2010-09-21 13:32:53 ----D---- C:\Documents and Settings\Michal\Application Data\Macromedia
2010-09-21 09:12:43 ----D---- C:\Program Files\Canon
2010-09-21 09:12:29 ----A---- C:\WINDOWS\system32\CNCMFP36.INI
2010-09-21 09:12:29 ----A---- C:\WINDOWS\system32\CNCLSU36b.DLL
2010-09-21 09:12:29 ----A---- C:\WINDOWS\system32\CNCLST36b.DLL
2010-09-21 09:12:29 ----A---- C:\WINDOWS\system32\CNCLSI36b.DLL
2010-09-21 09:12:29 ----A---- C:\WINDOWS\system32\CNCLSD36b.DLL
2010-09-21 09:12:29 ----A---- C:\WINDOWS\system32\CNCLSC36b.DLL
2010-09-21 09:12:28 ----A---- C:\WINDOWS\system32\CNCLSO36b.dll
2010-09-21 09:12:28 ----A---- C:\WINDOWS\system32\CNCL8300.DLL
2010-09-21 09:12:27 ----A---- C:\WINDOWS\system32\CNCI8300.DLL
2010-09-21 09:12:27 ----A---- C:\WINDOWS\system32\CNCC8300.DLL
2010-09-21 09:12:21 ----A---- C:\WINDOWS\system32\drivers\serscan.sys
2010-09-21 09:11:40 ----A---- C:\WINDOWS\system32\CNAS0MOK.DLL
2010-09-21 09:11:32 ----A---- C:\WINDOWS\system32\CNCENPU.dll
2010-09-21 09:11:32 ----A---- C:\WINDOWS\system32\CNCENPR.dll
2010-09-21 09:11:32 ----A---- C:\WINDOWS\system32\CNCENPM.dll
2010-09-21 09:10:12 ----HD---- C:\WINDOWS\system32\CanonMF Uninstaller Information
2010-09-21 09:09:47 ----HD---- C:\CanonMF
2010-09-21 08:35:17 ----D---- C:\Program Files\ESET
2010-09-21 08:35:17 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2010-09-20 19:41:57 ----A---- C:\WINDOWS\system32\ptpusb.dll
2010-09-20 19:41:56 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2010-09-20 19:41:55 ----A---- C:\WINDOWS\system32\ptpusd.dll
2010-09-20 19:25:14 ----D---- C:\Documents and Settings\Michal\Application Data\Apple Computer
2010-09-20 19:25:02 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2010-09-20 19:25:02 ----A---- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
2010-09-20 19:23:50 ----D---- C:\Program Files\iPod
2010-09-20 19:23:42 ----D---- C:\Program Files\iTunes
2010-09-20 19:23:42 ----D---- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-09-20 19:22:23 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2010-09-20 19:22:05 ----D---- C:\Program Files\Apple Software Update
2010-09-20 19:21:51 ----A---- C:\WINDOWS\system32\usbaaplrc.dll
2010-09-20 19:21:51 ----A---- C:\WINDOWS\system32\drivers\usbaapl.sys
2010-09-20 19:21:50 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-09-20 19:20:55 ----D---- C:\Program Files\Bonjour
2010-09-20 19:20:33 ----D---- C:\Program Files\Common Files\Apple
2010-09-20 19:20:33 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2010-09-20 15:59:53 ----D---- C:\00994c9b7a942d8256
2010-09-20 14:55:02 ----D---- C:\Documents and Settings\Michal\Application Data\Google
2010-09-20 14:52:25 ----D---- C:\Program Files\Google
2010-09-20 14:21:09 ----D---- C:\WINDOWS\Sun
2010-09-20 14:12:53 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2010-09-20 14:12:46 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-09-20 14:12:36 ----D---- C:\WINDOWS\Logs
2010-09-20 14:12:22 ----D---- C:\Program Files\Winamp
2010-09-20 14:12:22 ----D---- C:\Documents and Settings\Michal\Application Data\Winamp
2010-09-20 14:08:38 ----D---- C:\Program Files\WinRAR
2010-09-19 22:21:18 ----D---- C:\Program Files\CCleaner
2010-09-19 22:15:19 ----D---- C:\Program Files\RocketDock
2010-09-19 22:12:21 ----D---- C:\Program Files\QK SMTP Server 3
2010-09-19 22:11:57 ----D---- C:\Documents and Settings\Michal\Application Data\KeePass
2010-09-19 21:54:15 ----D---- C:\Program Files\MSBuild
2010-09-19 21:54:04 ----D---- C:\WINDOWS\system32\XPSViewer
2010-09-19 21:53:53 ----D---- C:\Program Files\Reference Assemblies
2010-09-19 21:53:04 ----N---- C:\WINDOWS\system32\spmsg2.dll
2010-09-19 21:24:23 ----D---- C:\Documents and Settings\All Users\Application Data\Sun
2010-09-19 21:24:22 ----D---- C:\Program Files\Common Files\Java
2010-09-19 21:23:59 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-09-19 21:23:35 ----D---- C:\Program Files\Java
2010-09-19 21:23:11 ----D---- C:\Documents and Settings\Michal\Application Data\Sun
2010-09-19 21:17:23 ----D---- C:\Program Files\KeePass Password Safe 2
2010-09-19 21:12:22 ----A---- C:\WINDOWS\system32\drivers\truecrypt.sys
2010-09-19 21:12:15 ----D---- C:\Program Files\TrueCrypt
2010-09-19 21:12:04 ----D---- C:\Documents and Settings\Michal\Application Data\TrueCrypt
2010-09-19 21:10:36 ----D---- C:\Documents and Settings\All Users\Application Data\FLEXnet
2010-09-19 18:21:32 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-09-19 18:20:59 ----D---- C:\Program Files\Adobe
2010-09-19 18:20:38 ----D---- C:\Documents and Settings\Michal\Application Data\Adobe
2010-09-19 18:06:00 ----D---- C:\Program Files\DAEMON Tools Lite
2010-09-19 18:05:50 ----D---- C:\Documents and Settings\Michal\Application Data\DAEMON Tools Lite
2010-09-19 18:05:47 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2010-09-19 18:04:30 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Pro
2010-09-19 17:50:40 ----D---- C:\Program Files\DAEMON Tools Pro
2010-09-19 17:50:34 ----D---- C:\Documents and Settings\Michal\Application Data\DAEMON Tools Pro
2010-09-19 17:34:08 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2010-09-19 17:29:01 ----D---- C:\WINDOWS\system32\LogFiles
2010-09-19 17:25:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2183461$
2010-09-19 17:25:01 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-09-19 17:24:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-09-19 17:24:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2010-09-19 17:24:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-09-19 17:24:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-09-19 17:24:24 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-09-19 17:24:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-09-19 17:24:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-09-19 17:23:52 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-09-19 17:23:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-09-19 17:23:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-09-19 17:23:22 ----HDC---- C:\WINDOWS\$NtUninstallKB982802$
2010-09-19 17:23:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2160329$
2010-09-19 17:23:04 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-09-19 17:22:55 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-09-19 17:22:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-09-19 17:22:32 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-09-19 17:22:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2010-09-19 17:22:18 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2010-09-19 17:14:24 ----D---- C:\Documents and Settings\Michal\Application Data\Help
2010-09-19 17:07:20 ----D---- C:\Program Files\Common Files\Adobe
2010-09-19 16:36:03 ----D---- C:\Documents and Settings\Michal\Application Data\Mozilla
2010-09-19 16:35:52 ----D---- C:\Program Files\Mozilla Firefox
2010-09-19 16:21:22 ----D---- C:\Program Files\Common Files\DESIGNER
2010-09-19 16:20:54 ----D---- C:\Program Files\Microsoft.NET
2010-09-19 16:17:52 ----D---- C:\WINDOWS\SHELLNEW
2010-09-19 16:17:14 ----D---- C:\Program Files\Microsoft Office
2010-09-19 16:17:00 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-09-19 16:15:56 ----RHD---- C:\MSOCache
2010-09-19 00:12:43 ----SHD---- C:\RECYCLER
2010-09-19 00:11:35 ----D---- C:\WINDOWS\system32\appmgmt
2010-09-18 23:56:22 ----D---- C:\!instalace
2010-09-18 23:43:16 ----D---- C:\! Michal Data
2010-09-18 23:41:57 ----A---- C:\WINDOWS\UC.PIF
2010-09-18 23:41:57 ----A---- C:\WINDOWS\RAR.PIF
2010-09-18 23:41:57 ----A---- C:\WINDOWS\PKZIP.PIF
2010-09-18 23:41:57 ----A---- C:\WINDOWS\PKUNZIP.PIF
2010-09-18 23:41:57 ----A---- C:\WINDOWS\NOCLOSE.PIF
2010-09-18 23:41:57 ----A---- C:\WINDOWS\LHA.PIF
2010-09-18 23:41:57 ----A---- C:\WINDOWS\ARJ.PIF
2010-09-18 23:37:35 ----D---- C:\Program Files\Totalcmd
2010-09-18 23:37:35 ----A---- C:\WINDOWS\wincmd.ini
2010-09-18 23:35:49 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2010-09-18 23:34:51 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-09-18 23:19:42 ----A---- C:\WINDOWS\system32\MRT.exe
2010-09-18 23:19:19 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-09-18 23:15:17 ----D---- C:\WINDOWS\Prefetch
2010-09-18 22:54:22 ----HDC---- C:\WINDOWS\$NtUninstallKB982381$
2010-09-18 22:54:11 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-09-18 22:54:02 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-09-18 22:53:46 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-09-18 22:53:32 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-09-18 22:53:22 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-09-18 22:53:11 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-09-18 22:53:01 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-09-18 22:52:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-09-18 22:52:41 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-09-18 22:52:30 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-09-18 22:52:20 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-09-18 22:52:06 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-09-18 22:51:55 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-09-18 22:51:46 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-09-18 22:51:34 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-09-18 22:51:20 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-09-18 22:51:11 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-09-18 22:50:59 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-09-18 22:50:49 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-09-18 22:50:38 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-09-18 22:50:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-09-18 22:50:16 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-09-18 22:50:05 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-09-18 22:49:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-09-18 22:49:44 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-09-18 22:49:34 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-09-18 22:49:25 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-09-18 22:49:15 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-09-18 22:49:04 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-09-18 22:48:54 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-09-18 22:48:45 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-09-18 22:48:31 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-09-18 22:48:15 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-09-18 22:47:46 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-09-18 22:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-09-18 22:47:27 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-09-18 22:47:15 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-09-18 22:47:04 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-09-18 22:46:55 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-09-18 22:45:48 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-09-18 22:45:38 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-09-18 22:45:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-09-18 22:45:08 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-09-18 22:44:53 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-09-18 22:44:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2010-09-18 22:44:30 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-09-18 22:44:20 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-09-18 22:44:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-09-18 22:43:56 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-09-18 22:43:45 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-09-18 22:43:34 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-09-18 22:43:25 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-09-18 22:43:16 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-09-18 22:43:05 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-09-18 22:42:55 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-09-18 22:42:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-09-18 22:35:43 ----D---- C:\WINDOWS\system32\en-us
2010-09-18 22:35:42 ----D---- C:\WINDOWS\system32\scripting
2010-09-18 22:35:42 ----D---- C:\WINDOWS\l2schemas
2010-09-18 22:35:41 ----D---- C:\WINDOWS\system32\en
2010-09-18 22:35:41 ----D---- C:\WINDOWS\system32\bits
2010-09-18 22:26:49 ----D---- C:\WINDOWS\network diagnostic
2010-09-18 22:20:42 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-09-18 18:38:01 ----SHD---- C:\WINDOWS\CSC
2010-09-18 18:18:12 ----D---- C:\Documents and Settings\All Users\Application Data\IBM
2010-09-18 18:16:55 ----ASH---- C:\Documents and Settings\Michal\Application Data\desktop.ini
2010-09-18 18:16:54 ----SD---- C:\Documents and Settings\Michal\Application Data\Microsoft
2010-09-18 18:16:54 ----D---- C:\Documents and Settings\Michal\Application Data\Symantec
2010-09-18 18:16:54 ----D---- C:\Documents and Settings\Michal\Application Data\Identities
2010-09-18 18:16:54 ----D---- C:\Documents and Settings\Michal\Application Data\IBM
2010-09-18 17:48:00 ----AH---- C:\BOOTLOG.TXT
2010-09-18 17:47:09 ----SHD---- C:\Recycled
2010-09-18 17:46:58 ----A---- C:\WINDOWS\smscfg.ini
2010-09-18 17:46:10 ----A---- C:\WINDOWS\PWMBTHLP.EXE
2010-09-18 17:46:09 ----A---- C:\WINDOWS\system32\drivers\TPPWRIF.SYS
2010-09-18 17:45:52 ----A---- C:\WINDOWS\system32\tvt_gina_api.dll
2010-09-18 17:45:52 ----A---- C:\WINDOWS\system32\tvt_gina.dll
2010-09-18 17:45:52 ----A---- C:\WINDOWS\system32\QCONSVC.EXE
2010-09-18 17:45:52 ----A---- C:\WINDOWS\system32\QConGina.dll
2010-09-18 17:45:50 ----A---- C:\WINDOWS\system32\drivers\qcndisif.sys
2010-09-18 17:45:50 ----A---- C:\WINDOWS\system32\drivers\IBMBLDID.SYS
2010-09-18 17:45:50 ----A---- C:\WINDOWS\system32\drivers\ANC.sys
2010-09-18 17:43:00 ----A---- C:\WINDOWS\system32\capicom.dll
2010-09-18 17:42:46 ----D---- C:\Program Files\Symantec Client Security
2010-09-18 17:42:46 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-09-18 17:42:46 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2010-09-18 17:41:52 ----D---- C:\Icons
2010-09-18 17:41:14 ----D---- C:\Program Files\IBM ThinkVantage
2010-09-18 17:40:35 ----A---- C:\WINDOWS\system32\drivers\PcdrNdisuio.sys
2010-09-18 17:40:09 ----D---- C:\Program Files\PC-Doctor for Windows
2010-09-18 17:39:20 ----A---- C:\WINDOWS\system32\MSVCR71.DLL
2010-09-18 17:39:19 ----A---- C:\WINDOWS\system32\MFC71U.DLL
2010-09-18 17:39:19 ----A---- C:\WINDOWS\system32\MFC71.DLL
2010-09-18 17:39:07 ----D---- C:\Documents and Settings\All Users\Application Data\Lenovo
2010-09-18 17:38:52 ----A---- C:\WINDOWS\system32\msxml4a.dll
2010-09-18 17:38:52 ----A---- C:\WINDOWS\system32\ahlprun.exe
2010-09-18 17:37:47 ----D---- C:\Program Files\IBM
2010-09-18 17:36:44 ----D---- C:\Program Files\ThinkVantage
2010-09-18 17:34:14 ----D---- C:\Program Files\Windows Media Connect
2010-09-18 17:33:47 ----HD---- C:\WINDOWS\$NtUninstallKB893066$
2010-09-18 17:33:01 ----HD---- C:\WINDOWS\$NtUninstallKB890859$
2010-09-18 17:32:37 ----A---- C:\WINDOWS\system32\igfxres.dll
2010-09-18 17:29:43 ----D---- C:\Program Files\Digital Line Detect
2010-09-18 17:29:40 ----D---- C:\Program Files\NetWaiting
2010-09-18 17:29:33 ----D---- C:\Program Files\CONEXANT
2010-09-18 17:29:03 ----A---- C:\WINDOWS\system32\wdmioctl.dll
2010-09-18 17:29:02 ----D---- C:\Program Files\Analog Devices
2010-09-18 17:29:02 ----A---- C:\WINDOWS\system32\SMMedia.dll
2010-09-18 17:29:02 ----A---- C:\WINDOWS\system32\DSndUp.exe
2010-09-18 17:29:02 ----A---- C:\WINDOWS\system32\CleanUp.exe
2010-09-18 17:28:47 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-09-18 17:28:44 ----D---- C:\Program Files\Fingerprint Tutorial
2010-09-18 17:28:09 ----A---- C:\WINDOWS\system32\drivers\TPInput.sys
2010-09-18 17:28:09 ----A---- C:\WINDOWS\system32\drivers\TPDiskPM.sys
2010-09-18 17:27:49 ----A---- C:\WINDOWS\system32\drivers\TSMAPIP.SYS
2010-09-18 17:27:31 ----D---- C:\Program Files\Common Files\Virtual Token
2010-09-18 17:27:30 ----D---- C:\Program Files\ThinkVantage Fingerprint Software
2010-09-18 17:27:28 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-09-18 17:27:21 ----A---- C:\WINDOWS\system32\TP4HOOK.dll
2010-09-18 17:27:21 ----A---- C:\WINDOWS\system32\TP4EX.exe
2010-09-18 17:27:21 ----A---- C:\WINDOWS\system32\tp4cross.exe
2010-09-18 17:27:21 ----A---- C:\WINDOWS\system32\FPCALL.dll
2010-09-18 17:27:05 ----A---- C:\WINDOWS\system32\results.txt
2010-09-18 17:27:01 ----A---- C:\WINDOWS\system32\drivers\AegisP.sys
2010-09-18 17:26:49 ----D---- C:\Documents and Settings\All Users\Application Data\Intel
2010-09-18 17:26:00 ----A---- C:\WINDOWS\system32\W29MLRES.DLL
2010-09-18 17:25:49 ----D---- C:\Program Files\Intel
2010-09-18 17:23:56 ----A---- C:\WINDOWS\system32\drivers\TDSMAPI.SYS
2010-09-18 17:23:55 ----A---- C:\WINDOWS\system32\drivers\SMAPINT.SYS
2010-09-18 17:23:45 ----A---- C:\WINDOWS\system32\TpShocks.exe
2010-09-18 17:23:45 ----A---- C:\WINDOWS\system32\TpShCPL.dll
2010-09-18 17:23:45 ----A---- C:\WINDOWS\system32\TPHDEXLG.exe
2010-09-18 17:23:45 ----A---- C:\WINDOWS\system32\Sensor.dll
2010-09-18 17:23:45 ----A---- C:\WINDOWS\system32\drivers\shockprf.sys
2010-09-18 17:23:45 ----A---- C:\WINDOWS\system32\drivers\ShockMgr.sys
2010-09-18 17:23:36 ----D---- C:\Program Files\Lenovo
2010-09-18 17:23:36 ----A---- C:\WINDOWS\_tpiu000.exe
2010-09-18 17:23:17 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-18 17:23:17 ----D---- C:\Program Files\ThinkPad
2010-09-18 17:23:17 ----A---- C:\WINDOWS\system32\TpKmpSvc.exe
2010-09-18 17:23:14 ----D---- C:\Program Files\Common Files\InstallShield
2010-09-18 17:23:07 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-09-18 17:21:28 ----A---- C:\WINDOWS\system32\xpsp3res.dll
2010-09-18 17:18:48 ----RSD---- C:\WINDOWS\assembly
2010-09-18 17:18:48 ----D---- C:\WINDOWS\Microsoft.NET
2010-09-18 17:18:46 ----D---- C:\WINDOWS\system32\URTTemp
2010-09-18 17:18:23 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-18 17:17:31 ----D---- C:\WINDOWS\RegisteredPackages
2010-09-18 17:16:42 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-09-18 17:16:03 ----ASH---- C:\hiberfil.sys
2010-09-18 17:14:31 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2010-09-18 17:14:27 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2010-09-18 17:14:10 ----A---- C:\WINDOWS\system32\drivers\compbatt.sys
2010-09-18 17:14:09 ----A---- C:\WINDOWS\system32\drivers\battc.sys
2010-09-18 17:14:08 ----A---- C:\WINDOWS\system32\drivers\cmbatt.sys
2010-09-18 17:13:19 ----A---- C:\WINDOWS\system32\hccoin.dll
2010-09-18 17:13:19 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2010-09-18 17:12:03 ----A---- C:\WINDOWS\system32\tp4uires.dll
2010-09-18 17:11:55 ----A---- C:\WINDOWS\system32\drivers\rasirda.sys
2010-09-18 17:11:52 ----A---- C:\WINDOWS\system32\irmon.dll
2010-09-18 17:11:52 ----A---- C:\WINDOWS\system32\irftp.exe
2010-09-18 17:11:52 ----A---- C:\WINDOWS\system32\drivers\irda.sys
2010-09-18 17:11:51 ----A---- C:\WINDOWS\system32\wshirda.dll
2010-09-18 17:11:48 ----A---- C:\WINDOWS\system32\drivers\nscirda.sys
2010-09-18 17:11:08 ----ASH---- C:\pagefile.sys
2010-09-18 17:10:34 ----A---- C:\WINDOWS\system32\OEMINFO.INI
2010-09-18 17:08:52 ----D---- C:\DRIVERS
2010-09-18 17:03:11 ----A---- C:\WINDOWS\system32\tphklock.dll
2010-09-18 17:03:11 ----A---- C:\WINDOWS\system32\drivers\TPHKDRV.sys
2010-09-18 17:03:10 ----A---- C:\WINDOWS\system32\notifyf2.dll
2010-09-18 16:58:54 ----A---- C:\WINDOWS\system32\PROCHLP.DLL
2010-09-18 16:58:54 ----A---- C:\WINDOWS\system32\IPSSVC.EXE
2010-09-18 16:58:54 ----A---- C:\WINDOWS\system32\IPSCTRL.INI
2010-09-18 16:58:54 ----A---- C:\WINDOWS\system32\drivers\PROCDD.SYS
2010-09-18 16:57:45 ----D---- C:\IBMTOOLS
2010-09-18 12:59:32 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2010-09-18 12:38:45 ----N---- C:\WINDOWS\system32\xmllite.dll
2010-09-18 12:38:39 ----N---- C:\WINDOWS\system32\wmphoto.dll
2010-09-18 12:38:35 ----N---- C:\WINDOWS\system32\wlanapi.dll
2010-09-18 12:38:31 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2010-09-18 12:38:31 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2010-09-18 12:38:26 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2010-09-18 12:38:26 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2010-09-18 12:38:25 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2010-09-18 12:38:25 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2010-09-18 12:38:25 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2010-09-18 12:38:25 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2010-09-18 12:38:25 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2010-09-18 12:38:22 ----N---- C:\WINDOWS\system32\verclsid.exe
2010-09-18 12:38:22 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2010-09-18 12:38:19 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2010-09-18 12:38:18 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2010-09-18 12:38:13 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2010-09-18 12:38:12 ----N---- C:\WINDOWS\system32\tspkg.dll
2010-09-18 12:38:12 ----N---- C:\WINDOWS\system32\tsgqec.dll
2010-09-18 12:37:56 ----N---- C:\WINDOWS\system32\spupdwxp.exe
2010-09-18 12:37:54 ----A---- C:\WINDOWS\system32\spdwnwxp.exe
2010-09-18 12:37:51 ----N---- C:\WINDOWS\system32\slserv.exe
2010-09-18 12:37:51 ----N---- C:\WINDOWS\system32\slrundll.exe
2010-09-18 12:37:51 ----N---- C:\WINDOWS\system32\slgen.dll
2010-09-18 12:37:51 ----N---- C:\WINDOWS\system32\slextspk.dll
2010-09-18 12:37:51 ----N---- C:\WINDOWS\system32\slcoinst.dll
2010-09-18 12:37:51 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2010-09-18 12:37:51 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2010-09-18 12:37:51 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2010-09-18 12:37:51 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2010-09-18 12:37:51 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2010-09-18 12:37:51 ----N---- C:\WINDOWS\slrundll.exe
2010-09-18 12:37:49 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2010-09-18 12:37:48 ----N---- C:\WINDOWS\system32\setupn.exe
2010-09-18 12:37:48 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2010-09-18 12:37:44 ----N---- C:\WINDOWS\system32\s3gnb.dll
2010-09-18 12:37:44 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2010-09-18 12:37:43 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2010-09-18 12:37:43 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2010-09-18 12:37:43 ----N---- C:\WINDOWS\system32\drivers\rfcomm.sys
2010-09-18 12:37:42 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2010-09-18 12:37:41 ----N---- C:\WINDOWS\system32\rasqec.dll
2010-09-18 12:37:41 ----N---- C:\WINDOWS\system32\qutil.dll
2010-09-18 12:37:40 ----N---- C:\WINDOWS\system32\qcliprov.dll
2010-09-18 12:37:39 ----N---- C:\WINDOWS\system32\qagentrt.dll
2010-09-18 12:37:39 ----N---- C:\WINDOWS\system32\qagent.dll
2010-09-18 12:37:37 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2010-09-18 12:37:35 ----N---- C:\WINDOWS\system32\onex.dll
2010-09-18 12:37:31 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2010-09-18 12:37:27 ----N---- C:\WINDOWS\system32\napstat.exe
2010-09-18 12:37:27 ----N---- C:\WINDOWS\system32\napmontr.dll
2010-09-18 12:37:27 ----N---- C:\WINDOWS\system32\napipsec.dll
2010-09-18 12:37:27 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2010-09-18 12:37:27 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2010-09-18 12:37:26 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2010-09-18 12:37:26 ----N---- C:\WINDOWS\system32\msxml6r.dll
2010-09-18 12:37:26 ----N---- C:\WINDOWS\system32\msxml6.dll
2010-09-18 12:37:26 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2010-09-18 12:37:26 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2010-09-18 12:37:24 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2010-09-18 12:37:23 ----N---- C:\WINDOWS\system32\mssha.dll
2010-09-18 12:37:09 ----N---- C:\WINDOWS\system32\mmcperf.exe
2010-09-18 12:37:09 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2010-09-18 12:37:09 ----N---- C:\WINDOWS\system32\mmcex.dll
2010-09-18 12:37:09 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2010-09-18 12:36:58 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2010-09-18 12:36:58 ----N---- C:\WINDOWS\system32\kmsvc.dll
2010-09-18 12:36:56 ----N---- C:\WINDOWS\system32\kbdpash.dll
2010-09-18 12:36:56 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2010-09-18 12:36:56 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2010-09-18 12:36:56 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2010-09-18 12:36:45 ----N---- C:\WINDOWS\system32\smtpapi.dll
2010-09-18 12:36:44 ----N---- C:\WINDOWS\system32\rwnh.dll
2010-09-18 12:36:42 ----N---- C:\WINDOWS\system32\drivers\irbus.sys
2010-09-18 12:36:42 ----N---- C:\WINDOWS\system32\comsdupd.exe
2010-09-18 12:36:38 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2010-09-18 12:36:38 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2010-09-18 12:36:38 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2010-09-18 12:36:38 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2010-09-18 12:36:37 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2010-09-18 12:36:37 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys
2010-09-18 12:36:37 ----N---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2010-09-18 12:36:36 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2010-09-18 12:36:32 ----N---- C:\WINDOWS\system32\faxpatch.exe
2010-09-18 12:36:32 ----A---- C:\WINDOWS\002647_.tmp
2010-09-18 12:36:31 ----N---- C:\WINDOWS\system32\eapsvc.dll
2010-09-18 12:36:31 ----N---- C:\WINDOWS\system32\eapqec.dll
2010-09-18 12:36:31 ----N---- C:\WINDOWS\system32\eappprxy.dll
2010-09-18 12:36:31 ----N---- C:\WINDOWS\system32\eapphost.dll
2010-09-18 12:36:31 ----N---- C:\WINDOWS\system32\eappgnui.dll
2010-09-18 12:36:31 ----N---- C:\WINDOWS\system32\eappcfg.dll
2010-09-18 12:36:31 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2010-09-18 12:36:31 ----N---- C:\WINDOWS\system32\eapolqec.dll
2010-09-18 12:36:29 ----N---- C:\WINDOWS\system32\dot3ui.dll
2010-09-18 12:36:29 ----N---- C:\WINDOWS\system32\dot3svc.dll
2010-09-18 12:36:29 ----N---- C:\WINDOWS\system32\dot3msm.dll
2010-09-18 12:36:29 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2010-09-18 12:36:29 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2010-09-18 12:36:29 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2010-09-18 12:36:29 ----N---- C:\WINDOWS\system32\dot3api.dll
2010-09-18 12:36:27 ----N---- C:\WINDOWS\system32\dimsroam.dll
2010-09-18 12:36:27 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2010-09-18 12:36:26 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2010-09-18 12:36:23 ----N---- C:\WINDOWS\system32\credssp.dll
2010-09-18 12:36:20 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2010-09-18 12:36:19 ----N---- C:\WINDOWS\system32\drivers\bthusb.sys
2010-09-18 12:36:19 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2010-09-18 12:36:19 ----N---- C:\WINDOWS\system32\drivers\bthpan.sys
2010-09-18 12:36:19 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys
2010-09-18 12:36:19 ----N---- C:\WINDOWS\system32\drivers\bthenum.sys
2010-09-18 12:36:19 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2010-09-18 12:36:18 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2010-09-18 12:36:18 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2010-09-18 12:36:18 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2010-09-18 12:36:18 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2010-09-18 12:36:18 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2010-09-18 12:36:18 ----N---- C:\WINDOWS\system32\azroles.dll
2010-09-18 12:36:18 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2010-09-18 12:36:17 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2010-09-18 12:36:17 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2010-09-18 12:36:17 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2010-09-18 12:36:17 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2010-09-18 12:36:17 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2010-09-18 12:36:17 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2010-09-18 12:36:17 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2010-09-18 12:36:17 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2010-09-18 12:36:17 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2010-09-18 12:36:17 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2010-09-18 12:36:17 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2010-09-18 12:36:17 ----N---- C:\WINDOWS\system32\ati3duag.dll
2010-09-18 12:36:16 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2010-09-18 12:36:16 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2010-09-18 12:36:15 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2010-09-18 12:36:15 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2010-09-18 12:36:15 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2010-09-18 12:36:15 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2010-09-18 12:36:14 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2010-09-18 12:36:14 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2010-09-18 12:36:14 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2010-09-18 12:36:14 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2010-09-18 12:36:14 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2010-09-18 12:36:13 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2010-09-18 12:36:13 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2010-09-18 12:36:13 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2010-09-18 12:36:13 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2010-09-18 12:36:13 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2010-09-18 12:36:09 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2010-09-18 12:36:09 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2010-09-18 12:36:09 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2010-09-18 12:36:09 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2010-09-18 12:36:09 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2010-09-18 12:36:09 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2010-09-18 12:36:09 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2010-09-18 12:36:08 ----N---- C:\WINDOWS\system32\aaclient.dll
2010-09-18 12:27:22 ----HDC---- C:\WINDOWS\$NtUninstallKB980218_0$
2010-09-18 12:27:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2010-09-18 12:26:46 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2010-09-18 12:24:46 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
2010-09-18 12:24:37 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2010-09-18 12:24:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2010-09-18 12:24:13 ----HDC---- C:\WINDOWS\$NtUninstallKB960859_0$
2010-09-18 12:24:03 ----HDC---- C:\WINDOWS\$NtUninstallKB971468_0$
2010-09-18 12:23:45 ----HDC---- C:\WINDOWS\$NtUninstallKB979683_0$
2010-09-18 12:23:32 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-09-18 12:23:24 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-09-18 12:23:18 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-09-18 12:23:08 ----HDC---- C:\WINDOWS\$NtUninstallKB923723$
2010-09-18 12:23:00 ----HDC---- C:\WINDOWS\$NtUninstallKB980232_0$
2010-09-18 12:22:48 ----HDC---- C:\WINDOWS\$NtUninstallKB981350$
2010-09-18 12:21:33 ----HDC---- C:\WINDOWS\$NtUninstallKB955759_0$
2010-09-18 12:21:06 ----HDC---- C:\WINDOWS\$NtUninstallKB974318_0$
2010-09-18 12:20:56 ----HDC---- C:\WINDOWS\$NtUninstallKB969059_0$
2010-09-18 12:20:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593_0$
2010-09-18 12:20:35 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2010-09-18 12:20:26 ----HDC---- C:\WINDOWS\$NtUninstallKB978037_0$
2010-09-18 12:20:15 ----HDC---- C:\WINDOWS\$NtUninstallKB975713_0$
2010-09-18 12:20:04 ----HDC---- C:\WINDOWS\$NtUninstallKB971657_0$
2010-09-18 12:19:55 ----HDC---- C:\WINDOWS\$NtUninstallKB978338_0$
2010-09-18 12:19:46 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
2010-09-18 12:19:34 ----HDC---- C:\WINDOWS\$NtUninstallKB972270_0$
2010-09-18 12:19:23 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_0$
2010-09-18 12:19:12 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_1$
2010-09-18 12:19:00 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_1$
2010-09-18 12:18:34 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
2010-09-18 12:18:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956844_0$
2010-09-18 12:18:11 ----HDC---- C:\WINDOWS\$NtUninstallKB961501_0$
2010-09-18 12:18:00 ----HDC---- C:\WINDOWS\$NtUninstallKB975561_0$
2010-09-18 12:17:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-09-18 12:17:43 ----HDC---- C:\WINDOWS\$NtUninstallKB973869_0$
2010-09-18 12:17:34 ----HDC---- C:\WINDOWS\$NtUninstallKB975025_0$
2010-09-18 12:17:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2010-09-18 12:17:06 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
2010-09-18 12:16:57 ----HDC---- C:\WINDOWS\$NtUninstallKB974571_0$
2010-09-18 12:16:47 ----HDC---- C:\WINDOWS\$NtUninstallKB975560_0$
2010-09-18 12:16:36 ----HDC---- C:\WINDOWS\$NtUninstallKB973507_0$
2010-09-18 12:16:27 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2010-09-18 12:15:40 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-09-18 12:15:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_0$
2010-09-18 12:14:46 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
2010-09-18 12:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2010-09-18 12:13:45 ----HDC---- C:\WINDOWS\$NtUninstallKB978601_0$
2010-09-18 12:13:04 ----HDC---- C:\WINDOWS\$NtUninstallKB979559_0$
2010-09-18 12:12:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2010-09-18 12:12:12 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-09-18 12:11:05 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
2010-09-18 12:10:35 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2010-09-18 12:10:12 ----HDC---- C:\WINDOWS\$NtUninstallKB974392_0$
2010-09-18 12:09:26 ----HDC---- C:\WINDOWS\$NtUninstallKB977914_0$
2010-09-18 12:08:51 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$
2010-09-18 12:08:27 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-09-18 12:08:07 ----HDC---- C:\WINDOWS\$NtUninstallKB978542_0$
2010-09-18 12:07:49 ----HDC---- C:\WINDOWS\$NtUninstallKB970238_0$
2010-09-18 12:07:35 ----HDC---- C:\WINDOWS\$NtUninstallKB979309_0$
2010-09-18 12:07:20 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-09-18 12:07:07 ----HDC---- C:\WINDOWS\$NtUninstallKB979482_0$
2010-09-18 12:06:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978706_0$
2010-09-18 12:06:32 ----D---- C:\WINDOWS\ServicePackFiles
2010-09-18 12:06:26 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2010-09-18 12:06:10 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2010-09-18 12:05:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973815_0$
2010-09-18 12:05:39 ----HDC---- C:\WINDOWS\$NtUninstallKB975562_0$
2010-09-18 12:05:04 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2010-09-18 12:04:43 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
2010-09-18 12:04:27 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
2010-09-18 12:04:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_0$
2010-09-18 12:03:20 ----HDC---- C:\WINDOWS\$NtUninstallKB982381_0$
2010-09-18 12:02:48 ----D---- C:\Program Files\MSXML 4.0
2010-09-18 12:02:10 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2010-09-18 12:01:44 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
2010-09-18 12:01:29 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_0$
2010-09-18 12:00:55 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_0$
2010-09-18 10:18:05 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-09-18 10:17:35 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2010-09-18 10:03:36 ----N---- C:\WINDOWS\system32\tzchange.exe
2010-09-18 10:01:46 ----A---- C:\WINDOWS\system32\xpsp4res.dll
2010-09-18 09:49:47 ----D---- C:\WINDOWS\system32\PreInstall
2010-09-18 09:49:45 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-09-18 09:48:47 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-09-18 09:42:51 ----D---- C:\WINDOWS\system32\SoftwareDistribution

======List of files/folders modified in the last 1 months======

2010-10-03 14:39:04 ----SD---- C:\WINDOWS\Tasks
2010-10-03 14:38:16 ----RD---- C:\Program Files
2010-10-03 14:33:29 ----AD---- C:\WINDOWS\system32
2010-10-03 14:28:56 ----SHD---- C:\WINDOWS\Installer
2010-10-03 14:28:17 ----D---- C:\WINDOWS\Temp
2010-10-03 14:27:14 ----D---- C:\WINDOWS\system32\drivers
2010-10-03 14:14:44 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-10-03 13:53:11 ----AD---- C:\WINDOWS
2010-10-02 13:51:56 ----D---- C:\WINDOWS\system32\config
2010-10-01 12:41:16 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-30 08:05:55 ----RSD---- C:\WINDOWS\Fonts
2010-09-29 17:37:59 ----D---- C:\WINDOWS\WinSxS
2010-09-29 17:12:58 ----D---- C:\Program Files\Common Files
2010-09-29 11:14:11 ----HD---- C:\WINDOWS\inf
2010-09-29 10:47:42 ----A---- C:\WINDOWS\system.ini
2010-09-24 15:12:03 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-09-23 14:31:25 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-09-22 09:19:58 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-09-22 09:19:45 ----D---- C:\Program Files\Internet Explorer
2010-09-22 09:18:49 ----D---- C:\WINDOWS\system32\CatRoot
2010-09-21 19:40:51 ----D---- C:\WINDOWS\Help
2010-09-21 19:26:26 ----D---- C:\WINDOWS\Media
2010-09-20 14:13:05 ----D---- C:\WINDOWS\system32\DirectX
2010-09-19 22:22:10 ----D---- C:\WINDOWS\Debug
2010-09-19 21:53:25 ----D---- C:\WINDOWS\system32\spool
2010-09-19 21:32:47 ----D---- C:\WINDOWS\Registration
2010-09-19 17:22:35 ----D---- C:\Program Files\Movie Maker
2010-09-19 16:25:19 ----D---- C:\WINDOWS\system32\wbem
2010-09-19 16:20:54 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-09-19 16:20:54 ----D---- C:\WINDOWS\pchealth
2010-09-19 16:18:15 ----A---- C:\WINDOWS\win.ini
2010-09-19 16:18:06 ----D---- C:\Program Files\Common Files\System
2010-09-18 23:14:04 ----D---- C:\WINDOWS\AppPatch
2010-09-18 23:14:03 ----D---- C:\WINDOWS\system32\Setup
2010-09-18 22:52:43 ----D---- C:\Program Files\Outlook Express
2010-09-18 22:43:07 ----D---- C:\Program Files\Messenger
2010-09-18 22:42:19 ----D---- C:\WINDOWS\security
2010-09-18 22:36:01 ----D---- C:\WINDOWS\system32\inetsrv
2010-09-18 22:36:00 ----D---- C:\WINDOWS\ime
2010-09-18 22:35:43 ----D---- C:\WINDOWS\system32\usmt
2010-09-18 22:35:41 ----D---- C:\WINDOWS\PeerNet
2010-09-18 22:30:51 ----D---- C:\WINDOWS\system32\Restore
2010-09-18 22:30:51 ----D---- C:\WINDOWS\system32\npp
2010-09-18 22:30:51 ----D---- C:\WINDOWS\mui
2010-09-18 22:30:48 ----D---- C:\WINDOWS\msagent
2010-09-18 22:30:45 ----D---- C:\WINDOWS\srchasst
2010-09-18 22:30:43 ----D---- C:\Program Files\NetMeeting
2010-09-18 22:30:40 ----D---- C:\WINDOWS\system32\Com
2010-09-18 22:30:35 ----D---- C:\Program Files\Windows Media Player
2010-09-18 22:30:34 ----D---- C:\Program Files\Windows NT
2010-09-18 22:29:58 ----AD---- C:\WINDOWS\system32\oobe
2010-09-18 22:29:54 ----D---- C:\WINDOWS\system
2010-09-18 22:20:41 ----D---- C:\WINDOWS\ehome
2010-09-18 18:38:32 ----SHD---- C:\System Volume Information
2010-09-18 18:21:35 ----AD---- C:\I386
2010-09-18 18:17:09 ----AH---- C:\AUTOEXEC.BAT
2010-09-18 18:16:53 ----D---- C:\Documents and Settings
2010-09-18 18:16:19 ----RASH---- C:\BOOT.INI
2010-09-18 09:43:44 ----D---- C:\WINDOWS\SoftwareDistribution

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Shockprf;Shockprf; C:\WINDOWS\system32\drivers\Shockprf.sys [2005-06-06 59904]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-09-19 436792]
R0 TPDiskPM;TPDiskPM; C:\WINDOWS\system32\drivers\TPDiskPM.sys [2005-05-26 14720]
R1 ANC;ANC; C:\WINDOWS\System32\drivers\ANC.SYS [2005-08-10 11520]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-04-09 107256]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-04-09 94360]
R1 IBMTPCHK;IBMTPCHK; C:\WINDOWS\System32\drivers\IBMBLDID.SYS [2005-08-10 2432]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 ShockMgr;ShockMgr; C:\WINDOWS\system32\drivers\ShockMgr.sys [2005-06-06 4736]
R1 Smapint;Smapint; C:\WINDOWS\System32\drivers\Smapint.sys [2005-08-10 14848]
R1 TDSMAPI;TDSMAPI; C:\WINDOWS\System32\drivers\TDSMAPI.SYS [2005-08-10 9340]
R1 TPHKDRV;TPHKDRV; C:\WINDOWS\system32\drivers\TPHKDRV.sys [2005-07-05 17699]
R1 TPPWRIF;TPPWRIF; C:\WINDOWS\System32\drivers\Tppwrif.sys [2005-08-10 4442]
R1 truecrypt;truecrypt; C:\WINDOWS\System32\drivers\truecrypt.sys [2010-09-19 223424]
R1 TSMAPIP;TSMAPIP; C:\WINDOWS\System32\drivers\TSMAPIP.SYS [2005-08-08 7168]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.1.6.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-09-18 17119]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-04-09 113960]
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R2 PMEM;PMEM; \??\C:\WINDOWS\system32\drivers\PMEMNT.SYS []
R2 port_nt;port_nt; \??\c:\windows\system32\drivers\port_nt.sys []
R2 PROCDD;IPS Helper Driver; C:\WINDOWS\system32\DRIVERS\PROCDD.SYS [2005-10-05 5120]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2004-10-15 11354]
R2 SmiHlp;SMI helper driver; \??\C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys []
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2004-05-17 133200]
R3 atmeltpm;atmeltpm; C:\WINDOWS\system32\DRIVERS\atmeltpm.sys [2005-02-24 15872]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2005-03-18 132608]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-11-11 1041664]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2004-11-11 200448]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-05-04 827996]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys [2005-06-16 13456]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-13 28672]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-02-11 260224]
R3 StillCam;Still Serial Digital Camera Driver; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-08-17 6784]
R3 TcUsb;TC USB Kernel Driver; C:\WINDOWS\System32\Drivers\tcusb.sys [2005-06-30 26240]
R3 Tp4Track;PS/2 TrackPoint Driver; C:\WINDOWS\system32\DRIVERS\tp4track.sys [2005-07-13 13840]
R3 TPInput;TPInput; C:\WINDOWS\System32\DRIVERS\TPInput.sys [2005-05-26 6400]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 w29n51;Intel(R) PRO/Wireless 2915ABG Network Connection Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2005-02-14 3255168]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-11-11 685184]
S3 azz7ktoi;azz7ktoi; C:\WINDOWS\system32\drivers\azz7ktoi.sys []
S3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-08-17 117760]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
S3 PcdrNdisuio;PCDRNDISUIO Usermode I/O Protocol; C:\WINDOWS\system32\DRIVERS\pcdrndisuio.sys [2005-02-02 12416]
S3 QCNDISIF;QCNDISIF; C:\WINDOWS\System32\drivers\qcndisif.SYS [2005-08-10 12288]
S3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SCFIDS~1\20050404.003\symidsco.sys []
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2010-04-20 41984]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S4 agp440;Intel AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
S4 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;ALI AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 sisagp;SIS AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960]
S4 viaagp;VIA AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-08-13 144672]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-07-28 345376]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-04-09 731840]
R2 EvtEng;EvtEng; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2005-02-18 86016]
R2 IBMPMSVC;ThinkPad PM Service; C:\WINDOWS\system32\ibmpmsvc.exe [2005-06-16 57344]
R2 IPSSVC;IPS Core Service; C:\WINDOWS\system32\IPSSVC.EXE [2005-10-05 73728]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-19 153376]
R2 OODefragAgent;O&O Defrag Agent; C:\Program Files\OO Software\Defrag\oodag.exe [2010-08-30 2317128]
R2 QCONSVC;QCONSVC; C:\WINDOWS\System32\QCONSVC.EXE [2005-08-10 81920]
R2 RegSrvc;RegSrvc; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2005-02-18 139264]
R2 S24EventMonitor;Spectrum24 Event Monitor; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2005-02-18 360521]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 SSHNAS;SSHNAS; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\WINDOWS\System32\TPHDEXLG.EXE [2005-06-07 77824]
R2 TpKmpSVC;IBM KCU Service; C:\WINDOWS\system32\TpKmpSVC.exe [2005-06-07 32768]
R2 UCLauncherService;ThinkVantage System Update; C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe [2005-08-02 40960]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
R2 vtserver;Protector Suite Virtual Token; C:\Program Files\Common Files\Virtual Token\vtserver.exe [2005-07-12 40551]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-09-01 820008]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-04-09 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-29 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-27 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WmcCds;Windows Media Connect (WMC); c:\program files\windows media connect\mswmccds.exe [2004-08-11 483328]
S3 WmcCdsLs;Windows Media Connect (WMC) Helper; C:\Program Files\Windows Media Connect\mswmcls.exe [2004-08-11 28160]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe []
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[motji]

Dobrý večer
Jaké máte problémy s počítačem?

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

[Michal I]

Počítač je podezřele pomalý, nalazeni nějací trojani:




alwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4052

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

4.10.2010 11:15:34
mbam-log-2010-10-04 (11-15-34).txt

Typ skenu: Úplný sken (C:\|)
Skenované objekty: 213334
Uplynulý čas: 2 hodina(y), 29 minuta(y), 28 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 3
Infikované hodnoty registru: 0
Infikované datové položky registru: 1
Infikované složky: 0
Infikované soubory: 7

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS (Trojan.Renos) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken.

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\RECYCLER\S-1-5-21-2638105869-3382402963-1321104604-1005\Dc10925.exe (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{5D527826-05BD-4A83-8416-28ACDDA14001}\RP34\A0012545.exe (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{5D527826-05BD-4A83-8416-28ACDDA14001}\RP34\A0012546.exe (Trojan.Agent.CK) -> No action taken.
C:\System Volume Information\_restore{5D527826-05BD-4A83-8416-28ACDDA14001}\RP34\A0012547.exe (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{5D527826-05BD-4A83-8416-28ACDDA14001}\RP34\A0012548.exe (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{5D527826-05BD-4A83-8416-28ACDDA14001}\RP34\A0012824.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job (Trojan.Downloader) -> No action taken.

[motji]

V mbamu vše smažte.

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

[Michal I]

omboFix 10-10-03.01 - Michal 04.10.2010 11:50:24.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.1526.1144 [GMT 2:00]
Spuštěný z: c:\!instalace\www.viry.cz\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_SSHNAS


((((((((((((((((((((((((( Soubory vytvořené od 2010-09-04 do 2010-10-04 )))))))))))))))))))))))))))))))
.

2010-10-04 07:58 . 2010-10-04 07:58 -------- d-----w- c:\documents and settings\Michal\Application Data\Canon
2010-10-04 06:43 . 2010-10-04 06:43 -------- d-----w- c:\documents and settings\Michal\Application Data\Malwarebytes
2010-10-04 06:42 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-04 06:42 . 2010-10-04 06:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-10-04 06:42 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-04 06:42 . 2010-10-04 06:42 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-10-03 12:38 . 2010-10-03 12:43 -------- d-----w- c:\program files\trend micro
2010-10-03 12:38 . 2010-10-03 12:43 -------- d-----w- C:\rsit
2010-10-03 12:33 . 2010-10-03 12:34 -------- d-----w- c:\windows\system32\oodag
2010-10-03 12:28 . 2010-10-03 12:28 -------- d-----w- c:\program files\OO Software
2010-10-03 12:27 . 2010-10-03 12:27 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Downloaded Installations
2010-10-03 11:53 . 2010-10-03 11:48 201728 ----a-w- c:\windows\Ynamyb.exe
2010-10-03 11:49 . 2010-10-03 11:49 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\O&O
2010-10-03 11:48 . 2010-10-03 11:48 201728 ----a-w- c:\windows\Ynamya.exe
2010-09-30 06:07 . 2010-09-30 06:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Sibelius Software
2010-09-30 06:06 . 2010-09-30 06:12 -------- d-----w- c:\documents and settings\Michal\Application Data\Sibelius Software
2010-09-30 06:02 . 2010-09-30 06:02 -------- d-----w- c:\program files\Sibelius Software
2010-09-29 16:40 . 2010-09-29 16:40 -------- d-----w- c:\documents and settings\All Users\Application Data\ALM
2010-09-29 15:43 . 2008-04-07 03:38 22872 ----a-r- c:\windows\system32\AdobePDFUI.dll
2010-09-29 15:43 . 2008-04-07 03:38 45392 ----a-r- c:\windows\system32\AdobePDF.dll
2010-09-29 15:17 . 2010-09-29 15:17 -------- d-----w- c:\program files\Adobe Media Player
2010-09-29 15:12 . 2010-09-29 15:12 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-09-29 15:00 . 2010-09-29 15:00 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-09-29 10:34 . 2010-09-29 10:42 -------- d-----w- c:\windows\SxsCaPendDel
2010-09-29 10:03 . 2010-09-29 10:03 -------- d-----w- c:\windows\LastGood
2010-09-27 19:43 . 2000-10-23 22:00 3608 ----a-w- c:\windows\system32\drivers\port_nt.sys
2010-09-27 19:40 . 2010-09-27 19:41 -------- d-----w- c:\program files\PRO100
2010-09-24 12:17 . 2010-09-24 12:17 42168 ---ha-w- c:\windows\system32\mlfcache.dat
2010-09-24 08:06 . 2006-12-26 00:22 286720 ----a-w- c:\windows\system32\erasext.dll
2010-09-24 08:06 . 2006-12-26 00:22 241664 ----a-w- c:\windows\system32\eraserl.exe
2010-09-24 08:06 . 2006-12-26 00:22 618496 ----a-w- c:\windows\system32\Eraser.dll
2010-09-24 08:06 . 2010-10-04 09:42 -------- d-----w- c:\program files\Eraser
2010-09-24 06:08 . 2010-09-24 06:09 -------- d-----w- c:\program files\QuickTime
2010-09-24 05:52 . 2010-09-24 05:52 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2010-09-23 12:34 . 2010-09-23 12:34 -------- d-----w- c:\program files\Microsoft Works
2010-09-23 12:19 . 2010-09-23 12:19 737280 ----a-w- c:\windows\iun6002.exe
2010-09-23 12:19 . 2010-09-23 12:19 -------- d-----w- c:\program files\Codec Pack - All In 1
2010-09-21 13:47 . 2010-09-21 13:47 -------- d-----w- c:\program files\XStandard
2010-09-21 11:26 . 2010-09-21 11:26 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\ESET
2010-09-21 07:12 . 2010-09-21 07:13 -------- d-----w- c:\program files\Canon
2010-09-21 07:12 . 2009-06-25 08:44 106496 ----a-w- c:\windows\system32\CNCLSI36b.DLL
2010-09-21 07:12 . 2009-06-25 08:44 135168 ----a-w- c:\windows\system32\CNCLSD36b.DLL
2010-09-21 07:12 . 2009-06-25 08:44 94208 ----a-w- c:\windows\system32\CNCLSC36b.DLL
2010-09-21 07:12 . 2009-06-25 08:44 102400 ----a-w- c:\windows\system32\CNCLST36b.DLL
2010-09-21 07:12 . 2009-06-25 08:44 188416 ----a-w- c:\windows\system32\CNCLSU36b.DLL
2010-09-21 07:12 . 2009-06-25 08:44 53248 ----a-w- c:\windows\system32\CNCLSO36b.dll
2010-09-21 07:12 . 2009-06-25 08:43 122880 ----a-w- c:\windows\system32\CNCL8300.DLL
2010-09-21 07:12 . 2009-06-25 08:43 86016 ----a-w- c:\windows\system32\CNCI8300.DLL
2010-09-21 07:12 . 2009-06-25 08:43 278528 ----a-w- c:\windows\system32\CNCC8300.DLL
2010-09-21 07:12 . 2001-08-17 11:53 6784 ----a-w- c:\windows\system32\drivers\serscan.sys
2010-09-21 07:12 . 2001-08-17 11:53 6784 ----a-w- c:\windows\system32\dllcache\serscan.sys
2010-09-21 07:11 . 2009-04-28 11:07 679936 ----a-w- c:\windows\system32\CNAS0MOK.DLL
2010-09-21 07:11 . 2009-06-18 10:11 204800 ----a-w- c:\windows\system32\CNCENPR.dll
2010-09-21 07:11 . 2009-06-18 10:11 110592 ----a-w- c:\windows\system32\CNCENPU.dll
2010-09-21 07:11 . 2009-06-18 10:11 139264 ----a-w- c:\windows\system32\CNCENPM.dll
2010-09-21 07:10 . 2010-09-21 07:10 -------- d--h--w- c:\windows\system32\CanonMF Uninstaller Information
2010-09-21 07:09 . 2010-09-21 07:09 -------- d-----w- C:\CanonMF
2010-09-21 06:35 . 2010-09-21 06:35 -------- d-----w- c:\program files\ESET
2010-09-21 06:35 . 2010-09-21 06:35 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2010-09-20 17:41 . 2001-08-18 05:36 5632 ----a-w- c:\windows\system32\ptpusb.dll
2010-09-20 17:41 . 2008-04-13 18:45 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2010-09-20 17:41 . 2008-04-13 18:45 15104 ----a-w- c:\windows\system32\dllcache\usbscan.sys
2010-09-20 17:41 . 2008-04-14 00:12 159232 ----a-w- c:\windows\system32\ptpusd.dll
2010-09-20 17:25 . 2010-09-24 11:54 -------- d-----w- c:\documents and settings\Michal\Application Data\Apple Computer
2010-09-20 17:25 . 2009-05-18 20:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2010-09-20 17:25 . 2008-04-17 19:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2010-09-20 17:23 . 2010-09-20 17:23 -------- d-----w- c:\program files\iPod
2010-09-20 17:23 . 2010-09-20 17:25 -------- d-----w- c:\program files\iTunes
2010-09-20 17:23 . 2010-09-20 17:25 -------- d-----w- c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-09-20 17:22 . 2010-09-20 17:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2010-09-20 17:22 . 2010-09-20 17:22 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Apple
2010-09-20 17:22 . 2010-09-20 17:22 -------- d-----w- c:\program files\Apple Software Update
2010-09-20 17:21 . 2010-04-20 03:47 3062048 ----a-w- c:\windows\system32\usbaaplrc.dll
2010-09-20 17:21 . 2010-04-20 03:47 41984 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2010-09-20 17:21 . 2010-09-20 17:25 -------- dc----w- c:\windows\system32\DRVSTORE
2010-09-20 17:20 . 2010-09-20 17:20 -------- d-----w- c:\program files\Bonjour
2010-09-20 17:20 . 2010-09-20 17:41 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2010-09-20 17:20 . 2010-09-20 17:23 -------- d-----w- c:\program files\Common Files\Apple
2010-09-20 17:20 . 2010-09-20 17:25 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Apple Computer
2010-09-20 13:59 . 2010-09-20 14:00 -------- d-----w- C:\00994c9b7a942d8256
2010-09-20 12:55 . 2010-09-20 12:55 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Google
2010-09-20 12:52 . 2010-09-20 12:52 26694 ----a-r- c:\documents and settings\Michal\Application Data\Microsoft\Installer\{D8327EDD-5FC8-40EE-AAAE-834C20C2F887}\_6FEFF9B68218417F98F549.exe
2010-09-20 12:52 . 2010-09-20 12:52 26694 ----a-r- c:\documents and settings\Michal\Application Data\Microsoft\Installer\{D8327EDD-5FC8-40EE-AAAE-834C20C2F887}\_02F7F9BA31845153EB9854.exe
2010-09-20 12:52 . 2010-09-20 12:52 -------- d-----w- c:\program files\Google
2010-09-20 12:21 . 2010-09-20 12:21 -------- d-----w- c:\windows\Sun
2010-09-20 12:12 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2010-09-20 12:12 . 2006-09-28 14:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2010-09-20 12:12 . 2010-09-20 12:12 -------- d-----w- c:\windows\Logs
2010-09-20 12:12 . 2010-09-20 12:14 -------- d-----w- c:\documents and settings\Michal\Application Data\Winamp
2010-09-20 12:12 . 2010-09-20 12:13 -------- d-----w- c:\program files\Winamp
2010-09-19 20:21 . 2010-09-19 20:21 -------- d-----w- c:\program files\CCleaner
2010-09-19 20:15 . 2010-09-19 20:15 -------- d-----w- c:\program files\RocketDock
2010-09-19 20:12 . 2010-09-19 20:13 -------- d-----w- c:\program files\QK SMTP Server 3
2010-09-19 20:11 . 2010-10-03 12:14 -------- d-----w- c:\documents and settings\Michal\Application Data\KeePass
2010-09-19 19:54 . 2010-09-19 19:54 -------- d-----w- c:\program files\MSBuild
2010-09-19 19:54 . 2010-09-20 14:01 -------- d-----w- c:\windows\system32\XPSViewer
2010-09-19 19:53 . 2010-09-19 19:53 -------- d-----w- c:\program files\Reference Assemblies
2010-09-19 19:53 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-09-19 19:53 . 2006-06-29 20:07 14048 ------w- c:\windows\system32\spmsg2.dll
2010-09-19 19:24 . 2010-09-23 12:14 -------- d-----w- c:\program files\Common Files\Java
2010-09-19 19:24 . 2010-09-19 19:24 503808 ----a-w- c:\documents and settings\Michal\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-7f7e8662-n\msvcp71.dll
2010-09-19 19:24 . 2010-09-19 19:24 499712 ----a-w- c:\documents and settings\Michal\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-7f7e8662-n\jmc.dll
2010-09-19 19:24 . 2010-09-19 19:24 348160 ----a-w- c:\documents and settings\Michal\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-7f7e8662-n\msvcr71.dll
2010-09-19 19:24 . 2010-09-19 19:24 61440 ----a-w- c:\documents and settings\Michal\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-119842dc-n\decora-sse.dll
2010-09-19 19:24 . 2010-09-19 19:24 12800 ----a-w- c:\documents and settings\Michal\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-119842dc-n\decora-d3d.dll
2010-09-19 19:23 . 2010-09-19 19:23 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-09-19 19:23 . 2010-09-23 12:14 -------- d-----w- c:\program files\Java
2010-09-19 19:17 . 2010-09-19 19:17 -------- d-----w- c:\program files\KeePass Password Safe 2
2010-09-19 19:12 . 2010-09-19 19:12 223424 ----a-w- c:\windows\system32\drivers\truecrypt.sys
2010-09-19 19:12 . 2010-09-19 19:12 -------- d-----w- c:\program files\TrueCrypt
2010-09-19 19:12 . 2010-09-20 12:58 -------- d-----w- c:\documents and settings\Michal\Application Data\TrueCrypt
2010-09-19 19:10 . 2010-09-27 16:59 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet
2010-09-19 16:16 . 2010-09-29 15:03 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Adobe
2010-09-19 16:06 . 2010-09-19 16:06 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-09-19 16:05 . 2010-09-19 16:07 -------- d-----w- c:\documents and settings\Michal\Application Data\DAEMON Tools Lite
2010-09-19 16:05 . 2010-09-19 16:05 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
2010-09-19 16:04 . 2010-09-19 16:04 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Pro
2010-09-19 15:50 . 2010-09-19 16:04 -------- d-----w- c:\program files\DAEMON Tools Pro
2010-09-19 15:50 . 2010-09-19 15:50 -------- d-----w- c:\documents and settings\Michal\Application Data\DAEMON Tools Pro
2010-09-19 15:34 . 2010-09-19 15:34 436792 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-09-19 15:29 . 2010-09-19 15:29 -------- d-----w- c:\windows\system32\LogFiles
2010-09-19 15:14 . 2010-09-19 15:14 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Help
2010-09-19 15:07 . 2010-09-29 16:50 -------- d-----w- c:\program files\Common Files\Adobe
2010-09-19 15:02 . 2009-08-13 15:16 512000 ------w- c:\windows\system32\dllcache\jscript.dll
2010-09-19 14:36 . 2010-09-19 14:36 0 ----a-w- c:\windows\nsreg.dat

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-03 08:09 . 2010-09-21 18:11 -------- d-----w- c:\program files\WinXP Manager
2010-09-30 06:07 . 2010-09-30 06:07 604 ---ha-w- c:\program files\STLL Notifier
2010-09-18 20:40 . 2004-08-09 17:54 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-09-18 20:40 . 2004-08-09 17:54 3762 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-09-18 16:17 . 2010-09-18 16:17 47 ----a-w- c:\windows\system32\drivers\IBM_2526_WMD.MRK
2010-09-18 15:43 . 2010-09-18 16:16 -------- d-----w- c:\documents and settings\Michal\Application Data\Symantec
2010-09-18 15:38 . 2010-09-18 16:16 -------- d-----w- c:\documents and settings\Michal\Application Data\IBM
2010-09-18 15:34 . 2010-09-18 16:16 136 ----a-w- c:\documents and settings\Michal\Local Settings\Application Data\fusioncache.dat
2010-09-18 15:28 . 2010-09-18 15:28 0 ---ha-r- c:\windows\system32\drivers\IBM_2526_WMD_TP.MRK
2010-09-18 15:23 . 2010-09-18 15:23 -------- d-----w- c:\program files\Lenovo
2010-09-18 15:23 . 2010-09-18 15:23 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-09-18 15:23 . 2010-09-18 15:23 -------- d-----w- c:\program files\ThinkPad
2010-09-18 15:23 . 2010-09-18 15:23 -------- d-----w- c:\program files\Common Files\InstallShield
2010-09-01 16:12 . 2010-09-01 16:12 73000 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 10.0.0.68\SetupAdmin.exe
2010-08-30 21:26 . 2010-08-30 21:26 1555272 ----a-w- c:\windows\system32\ooscrsav.scr
2010-08-30 21:25 . 2010-08-30 21:25 275272 ----a-w- c:\windows\system32\oodbs.exe
2010-08-30 21:23 . 2010-08-30 21:23 535880 ----a-w- c:\windows\system32\oodssrs.dll
2010-08-30 21:23 . 2010-08-30 21:23 9544 ----a-w- c:\windows\system32\oodbsrs.dll
2010-08-17 13:17 . 1980-01-01 07:00 58880 ----a-w- c:\windows\system32\spoolsv.exe
2010-07-28 01:44 . 2010-07-28 01:44 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-07-28 01:44 . 2010-07-28 01:44 75040 ----a-w- c:\windows\system32\jdns_sd.dll
2010-07-28 01:44 . 2010-07-28 01:44 197920 ----a-w- c:\windows\system32\dnssdX.dll
2010-07-28 01:44 . 2010-07-28 01:44 107808 ----a-w- c:\windows\system32\dns-sd.exe
2010-07-22 15:49 . 1980-01-01 07:00 590848 ----a-w- c:\windows\system32\rpcrt4.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"Eraser"="c:\program files\Eraser\eraser.exe" [2006-12-26 643072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TrackPointSrv"="tp4serv.exe" [2005-07-13 94208]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-05-04 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-05-04 126976]
"TPKMAPHELPER"="c:\program files\ThinkPad\Utilities\TpKmapAp.exe" [2005-08-12 864256]
"TpShocks"="TpShocks.exe" [2005-06-23 86016]
"TP4EX"="tp4ex.exe" [2005-08-02 40960]
"ControlCenter"="c:\program files\ThinkVantage Fingerprint Software\ctlcntr.exe" [2005-07-12 125026]
"EZEJMNAP"="c:\progra~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2005-08-10 237568]
"TPHOTKEY"="c:\progra~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe" [2005-08-29 94208]
"SoundMAXPnP"="c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 1388544]
"suScheduler"="c:\program files\ThinkVantage\SystemUpdate\UCLauncher.exe" [2005-08-02 40960]
"LPManager"="c:\progra~1\THINKV~2\PrdCtr\LPMGR.exe" [2005-08-10 98304]
"QCWLICON"="c:\program files\ThinkPad\ConnectUtilities\QCWLICON.EXE" [2005-08-10 86016]
"PWRMGRTR"="c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2005-08-10 139264]
"BLOG"="c:\progra~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2005-08-10 208896]
"KeePass 2 PreLoad"="c:\program files\KeePass Password Safe 2\KeePass.exe" [2010-09-05 1655296]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-09-01 421160]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-04-09 2029640]
"MFNetworkScanUtility"="c:\program files\Canon\Canon MF Network Scan Utility\CNMFSUT.EXE" [2009-06-18 479232]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-09-08 421888]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]
"OODefragTray"="c:\program files\OO Software\Defrag\oodtray.exe" [2010-08-30 2770760]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2010-9-18 24576]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
2005-07-12 16:45 109664 ----a-w- c:\program files\ThinkVantage Fingerprint Software\psfus.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\QConGina]
2005-08-10 10:08 262144 ----a-w- c:\windows\system32\QConGina.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2]
2005-07-06 06:45 28672 ----a-w- c:\windows\system32\notifyf2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tphotkey]
2005-06-17 05:23 24576 ----a-w- c:\windows\system32\tphklock.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ OODBS

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ThinkVantage\\SystemUpdate\\jre\\bin\\javaw.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\QK SMTP Server 3\\QKSmtpServer3.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4

R0 TPDiskPM;TPDiskPM;c:\windows\system32\drivers\TPDiskPM.sys [18.9.2010 17:28 14720]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [9.4.2009 15:18 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [9.4.2009 15:21 94360]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [9.4.2009 15:19 731840]
R2 OODefragAgent;O&O Defrag Agent;c:\program files\OO Software\Defrag\oodag.exe [30.8.2010 23:25 2317128]
R2 port_nt;port_nt;c:\windows\system32\drivers\port_nt.sys [27.9.2010 21:43 3608]
R2 SmiHlp;SMI helper driver;c:\program files\ThinkVantage Fingerprint Software\smihlp.sys [12.7.2005 18:37 3328]
R3 Tp4Track;PS/2 TrackPoint Driver;c:\windows\system32\drivers\tp4track.sys [1.1.1980 9:00 13840]
R3 TPInput;TPInput;c:\windows\system32\drivers\TPInput.sys [18.9.2010 17:28 6400]
S3 QCNDISIF;QCNDISIF;c:\windows\system32\drivers\qcndisif.sys [18.9.2010 17:45 12288]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe --> c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [?]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [19.9.2010 17:34 436792]
.
Obsah adresáře 'Naplánované úlohy'

2010-10-01 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 18:50]

2010-10-03 c:\windows\Tasks\PMTask.job
- c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2010-09-18 08:10]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Převést cíl vazby do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
FF - ProfilePath - c:\documents and settings\Michal\Application Data\Mozilla\Firefox\Profiles\wgvbjg29.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/reader/view/#overview-page
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\XStandard\Bin\NPXStandard.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

Notify-NavLogon - (no file)


.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG11.00.00.01WORKSTATION"="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"
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(908)
c:\windows\system32\vrlogon.dll
c:\program files\ThinkVantage Fingerprint Software\ExtVapi.dll
c:\program files\Common Files\Virtual Token\psutil.dll
c:\program files\Common Files\Virtual Token\resmgr.dll
c:\program files\Common Files\Virtual Token\Remote.dll
c:\program files\Common Files\Virtual Token\passport.dll
c:\program files\ThinkVantage Fingerprint Software\psfus.dll
c:\windows\system32\tphklock.dll
c:\program files\Common Files\Virtual Token\config.dll
c:\program files\Common Files\Virtual Token\LocPass.dll
c:\program files\Common Files\Virtual Token\SBioPass.dll
c:\program files\Common Files\Virtual Token\psdlg.dll
c:\program files\Common Files\Virtual Token\BGTcVer.dll
c:\program files\Common Files\Virtual Token\BTcVer.dll

- - - - - - - > 'Explorer.exe'(3724)
c:\windows\system32\WININET.dll
c:\program files\RocketDock\RocketDock.dll
c:\windows\system32\PROCHLP.DLL
c:\windows\system32\ieframe.dll
c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL
c:\progra~1\ThinkPad\UTILIT~1\US\PWRMGRRT.DLL
c:\progra~1\ThinkPad\UTILIT~1\PWRMGRIF.DLL
c:\windows\system32\Sensor.dll
c:\windows\system32\igfxdev.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Common Files\Virtual Token\vtserver.exe
c:\windows\system32\ibmpmsvc.exe
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\windows\system32\IPSSVC.EXE
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\System32\QCONSVC.EXE
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\Analog Devices\SoundMAX\SMAgent.exe
c:\windows\System32\TPHDEXLG.EXE
c:\windows\system32\TpKmpSVC.exe
c:\program files\ThinkVantage\SystemUpdate\UCLauncherService.exe
c:\windows\system32\wdfmgr.exe
c:\windows\system32\tp4serv.exe
c:\windows\system32\TpShocks.exe
c:\program files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe
c:\program files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\wscntfy.exe
c:\program files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Celkový čas: 2010-10-04 12:06:26 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-10-04 10:06

Před spuštěním: 7 559 036 928 bytes free
Po spuštění: 7 554 387 968 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect

- - End Of File - - 9DA1177F33730FD935DE1A647FBCE01D

[motji]

Otestujte na www.virustotal.com

c:\windows\Ynamyb.exe
c:\windows\Ynamya.exe
c:\windows\system32\drivers\qcndisif.sys



-Do okénka zkopírujte cestu k souboru , pokud napíše, že soubor byl už testován, dejte otestovat znovu.
-Sem vložte link s výsledky.

[Michal I]

http://www.virustotal.com/file-scan/rep ... 1286188014

http://www.virustotal.com/file-scan/rep ... 1286187989

http://www.virustotal.com/file-scan/rep ... 1286187827

[motji]

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

Collect::
c:\windows\Ynamyb.exe
c:\windows\Ynamya.exe

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

[Michal I]

ComboFix 10-10-03.01 - 04.10.2010 12:57:28.2.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.1526.995 [GMT 2:00]
Spuštěný z: c:\!instalace\www.viry.cz\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Michal\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

file zipped: c:\windows\Ynamya.exe
file zipped: c:\windows\Ynamyb.exe
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Ynamya.exe
c:\windows\Ynamyb.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-09-04 do 2010-10-04 )))))))))))))))))))))))))))))))
.

2010-10-04 07:58 . 2010-10-04 07:58 -------- d-----w- c:\documents and settings\Michal\Application Data\Canon
2010-10-04 06:43 . 2010-10-04 06:43 -------- d-----w- c:\documents and settings\Michal\Application Data\Malwarebytes
2010-10-04 06:42 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-04 06:42 . 2010-10-04 06:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-10-04 06:42 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-04 06:42 . 2010-10-04 06:42 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-10-03 12:38 . 2010-10-03 12:43 -------- d-----w- c:\program files\trend micro
2010-10-03 12:38 . 2010-10-03 12:43 -------- d-----w- C:\rsit
2010-10-03 12:33 . 2010-10-03 12:34 -------- d-----w- c:\windows\system32\oodag
2010-10-03 12:28 . 2010-10-03 12:28 -------- d-----w- c:\program files\OO Software
2010-10-03 12:27 . 2010-10-03 12:27 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Downloaded Installations
2010-10-03 11:49 . 2010-10-03 11:49 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\O&O
2010-09-30 06:07 . 2010-09-30 06:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Sibelius Software
2010-09-30 06:06 . 2010-09-30 06:12 -------- d-----w- c:\documents and settings\Michal\Application Data\Sibelius Software
2010-09-30 06:02 . 2010-09-30 06:02 -------- d-----w- c:\program files\Sibelius Software
2010-09-29 16:40 . 2010-09-29 16:40 -------- d-----w- c:\documents and settings\All Users\Application Data\ALM
2010-09-29 15:43 . 2008-04-07 03:38 22872 ----a-r- c:\windows\system32\AdobePDFUI.dll
2010-09-29 15:43 . 2008-04-07 03:38 45392 ----a-r- c:\windows\system32\AdobePDF.dll
2010-09-29 15:17 . 2010-09-29 15:17 -------- d-----w- c:\program files\Adobe Media Player
2010-09-29 15:12 . 2010-09-29 15:12 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-09-29 15:00 . 2010-09-29 15:00 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-09-29 10:34 . 2010-09-29 10:42 -------- d-----w- c:\windows\SxsCaPendDel
2010-09-29 10:03 . 2010-09-29 10:03 -------- d-----w- c:\windows\LastGood
2010-09-27 19:43 . 2000-10-23 22:00 3608 ----a-w- c:\windows\system32\drivers\port_nt.sys
2010-09-27 19:40 . 2010-09-27 19:41 -------- d-----w- c:\program files\PRO100
2010-09-24 12:17 . 2010-09-24 12:17 42168 ---ha-w- c:\windows\system32\mlfcache.dat
2010-09-24 08:06 . 2006-12-26 00:22 286720 ----a-w- c:\windows\system32\erasext.dll
2010-09-24 08:06 . 2006-12-26 00:22 241664 ----a-w- c:\windows\system32\eraserl.exe
2010-09-24 08:06 . 2006-12-26 00:22 618496 ----a-w- c:\windows\system32\Eraser.dll
2010-09-24 08:06 . 2010-10-04 09:42 -------- d-----w- c:\program files\Eraser
2010-09-24 06:08 . 2010-09-24 06:09 -------- d-----w- c:\program files\QuickTime
2010-09-24 05:52 . 2010-09-24 05:52 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2010-09-23 12:34 . 2010-09-23 12:34 -------- d-----w- c:\program files\Microsoft Works
2010-09-23 12:19 . 2010-09-23 12:19 737280 ----a-w- c:\windows\iun6002.exe
2010-09-23 12:19 . 2010-09-23 12:19 -------- d-----w- c:\program files\Codec Pack - All In 1
2010-09-21 13:47 . 2010-09-21 13:47 -------- d-----w- c:\program files\XStandard
2010-09-21 11:26 . 2010-09-21 11:26 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\ESET
2010-09-21 07:12 . 2010-09-21 07:13 -------- d-----w- c:\program files\Canon
2010-09-21 07:12 . 2009-06-25 08:44 106496 ----a-w- c:\windows\system32\CNCLSI36b.DLL
2010-09-21 07:12 . 2009-06-25 08:44 135168 ----a-w- c:\windows\system32\CNCLSD36b.DLL
2010-09-21 07:12 . 2009-06-25 08:44 94208 ----a-w- c:\windows\system32\CNCLSC36b.DLL
2010-09-21 07:12 . 2009-06-25 08:44 102400 ----a-w- c:\windows\system32\CNCLST36b.DLL
2010-09-21 07:12 . 2009-06-25 08:44 188416 ----a-w- c:\windows\system32\CNCLSU36b.DLL
2010-09-21 07:12 . 2009-06-25 08:44 53248 ----a-w- c:\windows\system32\CNCLSO36b.dll
2010-09-21 07:12 . 2009-06-25 08:43 122880 ----a-w- c:\windows\system32\CNCL8300.DLL
2010-09-21 07:12 . 2009-06-25 08:43 86016 ----a-w- c:\windows\system32\CNCI8300.DLL
2010-09-21 07:12 . 2009-06-25 08:43 278528 ----a-w- c:\windows\system32\CNCC8300.DLL
2010-09-21 07:12 . 2001-08-17 11:53 6784 ----a-w- c:\windows\system32\drivers\serscan.sys
2010-09-21 07:12 . 2001-08-17 11:53 6784 ----a-w- c:\windows\system32\dllcache\serscan.sys
2010-09-21 07:11 . 2009-04-28 11:07 679936 ----a-w- c:\windows\system32\CNAS0MOK.DLL
2010-09-21 07:11 . 2009-06-18 10:11 204800 ----a-w- c:\windows\system32\CNCENPR.dll
2010-09-21 07:11 . 2009-06-18 10:11 110592 ----a-w- c:\windows\system32\CNCENPU.dll
2010-09-21 07:11 . 2009-06-18 10:11 139264 ----a-w- c:\windows\system32\CNCENPM.dll
2010-09-21 07:10 . 2010-09-21 07:10 -------- d--h--w- c:\windows\system32\CanonMF Uninstaller Information
2010-09-21 07:09 . 2010-09-21 07:09 -------- d-----w- C:\CanonMF
2010-09-21 06:35 . 2010-09-21 06:35 -------- d-----w- c:\program files\ESET
2010-09-21 06:35 . 2010-09-21 06:35 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2010-09-20 17:41 . 2001-08-18 05:36 5632 ----a-w- c:\windows\system32\ptpusb.dll
2010-09-20 17:41 . 2008-04-13 18:45 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2010-09-20 17:41 . 2008-04-13 18:45 15104 ----a-w- c:\windows\system32\dllcache\usbscan.sys
2010-09-20 17:41 . 2008-04-14 00:12 159232 ----a-w- c:\windows\system32\ptpusd.dll
2010-09-20 17:25 . 2010-09-24 11:54 -------- d-----w- c:\documents and settings\Michal\Application Data\Apple Computer
2010-09-20 17:25 . 2009-05-18 20:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2010-09-20 17:25 . 2008-04-17 19:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2010-09-20 17:23 . 2010-09-20 17:23 -------- d-----w- c:\program files\iPod
2010-09-20 17:23 . 2010-09-20 17:25 -------- d-----w- c:\program files\iTunes
2010-09-20 17:23 . 2010-09-20 17:25 -------- d-----w- c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-09-20 17:22 . 2010-09-20 17:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2010-09-20 17:22 . 2010-09-20 17:22 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Apple
2010-09-20 17:22 . 2010-09-20 17:22 -------- d-----w- c:\program files\Apple Software Update
2010-09-20 17:21 . 2010-04-20 03:47 3062048 ----a-w- c:\windows\system32\usbaaplrc.dll
2010-09-20 17:21 . 2010-04-20 03:47 41984 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2010-09-20 17:21 . 2010-09-20 17:25 -------- dc----w- c:\windows\system32\DRVSTORE
2010-09-20 17:20 . 2010-09-20 17:20 -------- d-----w- c:\program files\Bonjour
2010-09-20 17:20 . 2010-09-20 17:41 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2010-09-20 17:20 . 2010-09-20 17:23 -------- d-----w- c:\program files\Common Files\Apple
2010-09-20 17:20 . 2010-09-20 17:25 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Apple Computer
2010-09-20 13:59 . 2010-09-20 14:00 -------- d-----w- C:\00994c9b7a942d8256
2010-09-20 12:55 . 2010-09-20 12:55 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Google
2010-09-20 12:52 . 2010-09-20 12:52 26694 ----a-r- c:\documents and settings\Michal\Application Data\Microsoft\Installer\{D8327EDD-5FC8-40EE-AAAE-834C20C2F887}\_6FEFF9B68218417F98F549.exe
2010-09-20 12:52 . 2010-09-20 12:52 26694 ----a-r- c:\documents and settings\Michal\Application Data\Microsoft\Installer\{D8327EDD-5FC8-40EE-AAAE-834C20C2F887}\_02F7F9BA31845153EB9854.exe
2010-09-20 12:52 . 2010-09-20 12:52 -------- d-----w- c:\program files\Google
2010-09-20 12:21 . 2010-09-20 12:21 -------- d-----w- c:\windows\Sun
2010-09-20 12:12 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2010-09-20 12:12 . 2006-09-28 14:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2010-09-20 12:12 . 2010-09-20 12:12 -------- d-----w- c:\windows\Logs
2010-09-20 12:12 . 2010-09-20 12:14 -------- d-----w- c:\documents and settings\Michal\Application Data\Winamp
2010-09-20 12:12 . 2010-09-20 12:13 -------- d-----w- c:\program files\Winamp
2010-09-19 20:21 . 2010-09-19 20:21 -------- d-----w- c:\program files\CCleaner
2010-09-19 20:15 . 2010-09-19 20:15 -------- d-----w- c:\program files\RocketDock
2010-09-19 20:12 . 2010-09-19 20:13 -------- d-----w- c:\program files\QK SMTP Server 3
2010-09-19 20:11 . 2010-10-04 10:55 -------- d-----w- c:\documents and settings\Michal\Application Data\KeePass
2010-09-19 19:54 . 2010-09-19 19:54 -------- d-----w- c:\program files\MSBuild
2010-09-19 19:54 . 2010-09-20 14:01 -------- d-----w- c:\windows\system32\XPSViewer
2010-09-19 19:53 . 2010-09-19 19:53 -------- d-----w- c:\program files\Reference Assemblies
2010-09-19 19:53 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-09-19 19:53 . 2006-06-29 20:07 14048 ------w- c:\windows\system32\spmsg2.dll
2010-09-19 19:24 . 2010-09-23 12:14 -------- d-----w- c:\program files\Common Files\Java
2010-09-19 19:24 . 2010-09-19 19:24 503808 ----a-w- c:\documents and settings\Michal\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-7f7e8662-n\msvcp71.dll
2010-09-19 19:24 . 2010-09-19 19:24 499712 ----a-w- c:\documents and settings\Michal\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-7f7e8662-n\jmc.dll
2010-09-19 19:24 . 2010-09-19 19:24 348160 ----a-w- c:\documents and settings\Michal\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-7f7e8662-n\msvcr71.dll
2010-09-19 19:24 . 2010-09-19 19:24 61440 ----a-w- c:\documents and settings\Michal\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-119842dc-n\decora-sse.dll
2010-09-19 19:24 . 2010-09-19 19:24 12800 ----a-w- c:\documents and settings\Michal\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-119842dc-n\decora-d3d.dll
2010-09-19 19:23 . 2010-09-19 19:23 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-09-19 19:23 . 2010-09-23 12:14 -------- d-----w- c:\program files\Java
2010-09-19 19:17 . 2010-09-19 19:17 -------- d-----w- c:\program files\KeePass Password Safe 2
2010-09-19 19:12 . 2010-09-19 19:12 223424 ----a-w- c:\windows\system32\drivers\truecrypt.sys
2010-09-19 19:12 . 2010-09-19 19:12 -------- d-----w- c:\program files\TrueCrypt
2010-09-19 19:12 . 2010-09-20 12:58 -------- d-----w- c:\documents and settings\Michal\Application Data\TrueCrypt
2010-09-19 19:10 . 2010-09-27 16:59 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet
2010-09-19 16:16 . 2010-09-29 15:03 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Adobe
2010-09-19 16:06 . 2010-09-19 16:06 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-09-19 16:05 . 2010-09-19 16:07 -------- d-----w- c:\documents and settings\Michal\Application Data\DAEMON Tools Lite
2010-09-19 16:05 . 2010-09-19 16:05 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
2010-09-19 16:04 . 2010-09-19 16:04 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Pro
2010-09-19 15:50 . 2010-09-19 16:04 -------- d-----w- c:\program files\DAEMON Tools Pro
2010-09-19 15:50 . 2010-09-19 15:50 -------- d-----w- c:\documents and settings\Michal\Application Data\DAEMON Tools Pro
2010-09-19 15:34 . 2010-09-19 15:34 436792 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-09-19 15:29 . 2010-09-19 15:29 -------- d-----w- c:\windows\system32\LogFiles
2010-09-19 15:14 . 2010-09-19 15:14 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Help
2010-09-19 15:07 . 2010-09-29 16:50 -------- d-----w- c:\program files\Common Files\Adobe
2010-09-19 15:02 . 2009-08-13 15:16 512000 ------w- c:\windows\system32\dllcache\jscript.dll
2010-09-19 14:36 . 2010-09-19 14:36 0 ----a-w- c:\windows\nsreg.dat
2010-09-19 14:36 . 2010-09-19 14:36 -------- d-----w- c:\documents and settings\Michal\Local Settings\Application Data\Mozilla
2010-09-19 14:20 . 2010-09-19 19:37 -------- d-----w- c:\program files\Microsoft.NET

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-03 08:09 . 2010-09-21 18:11 -------- d-----w- c:\program files\WinXP Manager
2010-09-30 06:07 . 2010-09-30 06:07 604 ---ha-w- c:\program files\STLL Notifier
2010-09-18 20:40 . 2004-08-09 17:54 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-09-18 20:40 . 2004-08-09 17:54 3762 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-09-18 16:17 . 2010-09-18 16:17 47 ----a-w- c:\windows\system32\drivers\IBM_2526_WMD.MRK
2010-09-18 15:43 . 2010-09-18 16:16 -------- d-----w- c:\documents and settings\Michal\Application Data\Symantec
2010-09-18 15:38 . 2010-09-18 16:16 -------- d-----w- c:\documents and settings\Michal\Application Data\IBM
2010-09-18 15:34 . 2010-09-18 16:16 136 ----a-w- c:\documents and settings\Michal\Local Settings\Application Data\fusioncache.dat
2010-09-18 15:28 . 2010-09-18 15:28 0 ---ha-r- c:\windows\system32\drivers\IBM_2526_WMD_TP.MRK
2010-09-18 15:23 . 2010-09-18 15:23 -------- d-----w- c:\program files\Lenovo
2010-09-18 15:23 . 2010-09-18 15:23 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-09-18 15:23 . 2010-09-18 15:23 -------- d-----w- c:\program files\ThinkPad
2010-09-18 15:23 . 2010-09-18 15:23 -------- d-----w- c:\program files\Common Files\InstallShield
2010-09-01 16:12 . 2010-09-01 16:12 73000 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 10.0.0.68\SetupAdmin.exe
2010-08-30 21:26 . 2010-08-30 21:26 1555272 ----a-w- c:\windows\system32\ooscrsav.scr
2010-08-30 21:25 . 2010-08-30 21:25 275272 ----a-w- c:\windows\system32\oodbs.exe
2010-08-30 21:23 . 2010-08-30 21:23 535880 ----a-w- c:\windows\system32\oodssrs.dll
2010-08-30 21:23 . 2010-08-30 21:23 9544 ----a-w- c:\windows\system32\oodbsrs.dll
2010-08-17 13:17 . 1980-01-01 07:00 58880 ----a-w- c:\windows\system32\spoolsv.exe
2010-07-28 01:44 . 2010-07-28 01:44 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-07-28 01:44 . 2010-07-28 01:44 75040 ----a-w- c:\windows\system32\jdns_sd.dll
2010-07-28 01:44 . 2010-07-28 01:44 197920 ----a-w- c:\windows\system32\dnssdX.dll
2010-07-28 01:44 . 2010-07-28 01:44 107808 ----a-w- c:\windows\system32\dns-sd.exe
2010-07-22 15:49 . 1980-01-01 07:00 590848 ----a-w- c:\windows\system32\rpcrt4.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"Eraser"="c:\program files\Eraser\eraser.exe" [2006-12-26 643072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TrackPointSrv"="tp4serv.exe" [2005-07-13 94208]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-05-04 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-05-04 126976]
"TPKMAPHELPER"="c:\program files\ThinkPad\Utilities\TpKmapAp.exe" [2005-08-12 864256]
"TpShocks"="TpShocks.exe" [2005-06-23 86016]
"TP4EX"="tp4ex.exe" [2005-08-02 40960]
"ControlCenter"="c:\program files\ThinkVantage Fingerprint Software\ctlcntr.exe" [2005-07-12 125026]
"EZEJMNAP"="c:\progra~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2005-08-10 237568]
"TPHOTKEY"="c:\progra~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe" [2005-08-29 94208]
"SoundMAXPnP"="c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 1388544]
"suScheduler"="c:\program files\ThinkVantage\SystemUpdate\UCLauncher.exe" [2005-08-02 40960]
"LPManager"="c:\progra~1\THINKV~2\PrdCtr\LPMGR.exe" [2005-08-10 98304]
"QCWLICON"="c:\program files\ThinkPad\ConnectUtilities\QCWLICON.EXE" [2005-08-10 86016]
"PWRMGRTR"="c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2005-08-10 139264]
"BLOG"="c:\progra~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2005-08-10 208896]
"KeePass 2 PreLoad"="c:\program files\KeePass Password Safe 2\KeePass.exe" [2010-09-05 1655296]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-09-01 421160]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-04-09 2029640]
"MFNetworkScanUtility"="c:\program files\Canon\Canon MF Network Scan Utility\CNMFSUT.EXE" [2009-06-18 479232]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-09-08 421888]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]
"OODefragTray"="c:\program files\OO Software\Defrag\oodtray.exe" [2010-08-30 2770760]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2010-9-18 24576]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
2005-07-12 16:45 109664 ----a-w- c:\program files\ThinkVantage Fingerprint Software\psfus.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\QConGina]
2005-08-10 10:08 262144 ----a-w- c:\windows\system32\QConGina.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2]
2005-07-06 06:45 28672 ----a-w- c:\windows\system32\notifyf2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tphotkey]
2005-06-17 05:23 24576 ----a-w- c:\windows\system32\tphklock.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ OODBS

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ThinkVantage\\SystemUpdate\\jre\\bin\\javaw.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\QK SMTP Server 3\\QKSmtpServer3.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4

R0 TPDiskPM;TPDiskPM;c:\windows\system32\drivers\TPDiskPM.sys [18.9.2010 17:28 14720]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [9.4.2009 15:18 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [9.4.2009 15:21 94360]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [9.4.2009 15:19 731840]
R2 OODefragAgent;O&O Defrag Agent;c:\program files\OO Software\Defrag\oodag.exe [30.8.2010 23:25 2317128]
R2 port_nt;port_nt;c:\windows\system32\drivers\port_nt.sys [27.9.2010 21:43 3608]
R2 SmiHlp;SMI helper driver;c:\program files\ThinkVantage Fingerprint Software\smihlp.sys [12.7.2005 18:37 3328]
R3 Tp4Track;PS/2 TrackPoint Driver;c:\windows\system32\drivers\tp4track.sys [1.1.1980 9:00 13840]
R3 TPInput;TPInput;c:\windows\system32\drivers\TPInput.sys [18.9.2010 17:28 6400]
S3 QCNDISIF;QCNDISIF;c:\windows\system32\drivers\qcndisif.sys [18.9.2010 17:45 12288]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe --> c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [?]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [19.9.2010 17:34 436792]
.
Obsah adresáře 'Naplánované úlohy'

2010-10-01 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 18:50]

2010-10-03 c:\windows\Tasks\PMTask.job
- c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2010-09-18 08:10]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Převést cíl vazby do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
FF - ProfilePath - c:\documents and settings\Michal\Application Data\Mozilla\Firefox\Profiles\wgvbjg29.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/reader/view/#overview-page
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\XStandard\Bin\NPXStandard.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG11.00.00.01WORKSTATION"="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"
"OODEFRAG14.00.00.01PROFESSIONAL"="3243053878103BB6985EDA0271FD6759170AC9307DFD473BA2C2B970E5BF2E2AE73B8566A2B343520F712B9A0FECD52EE25F4F74F290881232B18ACF515D4BBD16120C950F399F87F685066DEA56348FED51F5F9BBE54C876FF9AB2A085BF80B464BB216EC392102E4F47B6CCEFCD89AFB326172DE098D4DE9887694EF2DF774F78BA8FD9C346DF565BEAECEB7096FF2C47BC9D696EA9A1428EDD765FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C5D575E7D6A3B9808BA7FD869164D6794A6171C11EC38DE3DA6171C11EC38DE3D8772E45F800F542B12C90DB774EEF235D29F9A42F8B46D952A6C62DFD7C1DD3D7DECEE1676757433F6D9EF5C022A83E51B2869E8EC3DDE8AB2DC469E36A91107786EA7048C37D8F621371442392D7834ADF96CC2D82459789371B555EBDAF90D2EF4B0E1B1A3AF048329C2B355E1B78DD8462FCCE78B165299E4214EB14D46E087E37D6FCA2FBEAEC45D140187533B29A02391863839E3CBC4D54C5D32A13BD72384D96FAEF25C0EBEE2F7FD75B28E7C3C89C7755A97255F49C5D1D60C9AAE0E5100E2282A2875FC002FB18238D654C417D65823D6B3CFC8109B1D14529E0CE018670B64FCAF0C99CC9AD6E8DCB5C102504C201A26C0ED8AB6226FF40D39D2F1B1AD16F2DB0E324919DFD39263EE1F79BC8FCEECB6131F688C87DD59361917280BA82027EDEB12B011A1E5E242424B31E22AE72F692614EC96DD51263C10FE2E451696D5CF9266BD12E22040E0933676FD8AC279951693650D9C054784174670B614B9DA91F4009C300D6A971F6DE5DA7F7F0DE8062777615C9C0B29E3473CA168A6A094B6A5C243B06B7ED74A7CF2308841441EF53CAF37259C493DA5E044B817B4B566375B28E68FAEEBF4AA110C0FF1663D3E1AE1BC7FBCC0F57809C5D5EFB589B43600733B82F9EB1467F620EFD4476F9FF01745B6972A0E9E5742FCFA446955B0EE70ED9CD7521BAEA85EC277A0C73A666308B7C5A02B6D26D3763254F80BAA8F7F5C6E01E62F1846B900B588D6E68F63C5F9AFA9002FB03EF2C2339513A9018AD90C3BB0795C24BA9E71D922A04C17B8CDEE45335FDB87F138B3F304DD843530F33CC286975763BCDEBB355568D3DD5EB2DD39CAAA8A881DAD4F8B7C67138461CA9B947514D3DE55855CEE465F0C56A0322F6DE8144530F06189336E81FE13D45BCFE27F7FB5815DA24454AFF8B9D51E0C42E49C8F4EDAF165CFCADB42A36913A8EF86BD311A1D054A57D7DF6E5295CC06E9CB885719CB78CD7F565C839471FAB9877B5CC5CEE44E93700C353C053272E86AEE62E7CF29B2366C7A9CE297FB3D1896611B9B55729019DB2C27A0AD2E2B7F7EC0F303CC7E9F3ADD845A45A33B61D3927DCF55E5C1757C59923D20E16FE79C"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(908)
c:\windows\system32\vrlogon.dll
c:\program files\ThinkVantage Fingerprint Software\ExtVapi.dll
c:\program files\Common Files\Virtual Token\psutil.dll
c:\program files\Common Files\Virtual Token\resmgr.dll
c:\program files\Common Files\Virtual Token\Remote.dll
c:\program files\Common Files\Virtual Token\passport.dll
c:\program files\ThinkVantage Fingerprint Software\psfus.dll
c:\windows\system32\tphklock.dll
c:\program files\Common Files\Virtual Token\config.dll
c:\program files\Common Files\Virtual Token\LocPass.dll
c:\program files\Common Files\Virtual Token\SBioPass.dll
c:\program files\Common Files\Virtual Token\psdlg.dll
c:\program files\Common Files\Virtual Token\BGTcVer.dll
c:\program files\Common Files\Virtual Token\BTcVer.dll
.
Celkový čas: 2010-10-04 13:04:38
ComboFix-quarantined-files.txt 2010-10-04 11:04
ComboFix2.txt 2010-10-04 10:06

Před spuštěním: 7 556 304 896 bytes free
Po spuštění: 7 542 632 448 bytes free

- - End Of File - - 8E933851E8DF0301C213D259FD7C1757
Nahr nˇ probŘhlo ŁspŘçnŘ

[motji]

Jak to vypadá s počítačem?

[Michal I]

Zdá se, že běží všechno v pohodě. Děkuji

[motji]

Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

záložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

záložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy ok zavřít

Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?

[Michal I]

Omlouvám se za pozdní odpověď

Logfile of random's system information tool 1.08 (written by random/random)
Run by Michal at 2010-10-11 09:31:10
Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (29%) free of 34 GB
Total RAM: 1526 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:31:21, on 11.10.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17080)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Common Files\Virtual Token\vtserver.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\IPSSVC.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\OO Software\Defrag\oodag.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\QCONSVC.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TPHDEXLG.EXE
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\tp4serv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\TpShocks.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT.EXE
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\OO Software\Defrag\oodtray.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Eraser\eraser.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\!instalace\www.viry.cz\RSIT.exe
C:\Program Files\trend micro\Michal.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [ControlCenter] "C:\Program Files\ThinkVantage Fingerprint Software\ctlcntr.exe" /startup
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [suScheduler] C:\Program Files\ThinkVantage\SystemUpdate\UCLauncher.exe /SCHEDULER
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe
O4 - HKLM\..\Run: [QCWLICON] C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [BLOG] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog
O4 - HKLM\..\Run: [KeePass 2 PreLoad] "C:\Program Files\KeePass Password Safe 2\KeePass.exe" --preload
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [MFNetworkScanUtility] C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Software Installer - {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - C:\Program Files\Lenovo\PkgMgr\\PkgMgr.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: IPS Core Service (IPSSVC) - Lenovo Ltd. - C:\WINDOWS\system32\IPSSVC.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: O&O Defrag Agent (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: QCONSVC - Lenovo - C:\WINDOWS\System32\QCONSVC.EXE
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.EXE
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
O23 - Service: ThinkVantage System Update (UCLauncherService) - Unknown owner - C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe
O23 - Service: Protector Suite Virtual Token (vtserver) - UPEK Inc. - C:\Program Files\Common Files\Virtual Token\vtserver.exe
O23 - Service: Windows Presentation Foundation Font Cache 4.0.0.0 (WPFFontCache_v0400) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (file missing)

--
End of file - 11192 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\PMTask.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre6\bin\ssv.dll [2010-09-19 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-19 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-09-19 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TrackPointSrv"=C:\WINDOWS\system32\tp4serv.exe [2005-07-13 94208]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-05-04 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-05-04 126976]
"TPKMAPHELPER"=C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe [2005-08-12 864256]
"TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2005-06-23 86016]
"TP4EX"=C:\WINDOWS\system32\tp4ex.exe [2005-08-02 40960]
"ControlCenter"=C:\Program Files\ThinkVantage Fingerprint Software\ctlcntr.exe [2005-07-12 125026]
"EZEJMNAP"=C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe [2005-08-10 237568]
"TPHOTKEY"=C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe [2005-08-29 94208]
"SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
"suScheduler"=C:\Program Files\ThinkVantage\SystemUpdate\UCLauncher.exe [2005-08-02 40960]
"LPManager"=C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe [2005-08-10 98304]
"QCWLICON"=C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE [2005-08-10 86016]
"PWRMGRTR"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor []
"BLOG"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog []
"KeePass 2 PreLoad"=C:\Program Files\KeePass Password Safe 2\KeePass.exe [2010-09-05 1655296]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-09-01 421160]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-04-09 2029640]
"MFNetworkScanUtility"=C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT.EXE [2009-06-18 479232]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-09-08 421888]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2010-08-30 2770760]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"Eraser"=C:\Program Files\Eraser\eraser.exe [2006-12-26 643072]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-05-04 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
C:\Program Files\ThinkVantage Fingerprint Software\psfus.dll [2005-07-12 109664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\QConGina]
C:\WINDOWS\system32\QConGina.dll [2005-08-10 262144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
C:\WINDOWS\system32\notifyf2.dll [2005-07-06 28672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
C:\WINDOWS\system32\tphklock.dll [2005-06-17 24576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-11 239496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SynchronousMachineGroupPolicy"=0
"SynchronousUserGroupPolicy"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe"="C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe:*:Enabled:ThinkVantage System Update"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\QK SMTP Server 3\QKSmtpServer3.exe"="C:\Program Files\QK SMTP Server 3\QKSmtpServer3.exe:*:Enabled:QKSmtpServer3"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe"="C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe:*:Enabled:ThinkVantage System Update"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-10-11 09:31:10 ----D---- C:\rsit
2010-10-08 10:59:41 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-10-05 09:39:35 ----D---- C:\Program Files\DAEMON Tools Lite
2010-10-04 13:13:55 ----SHD---- C:\RECYCLER
2010-10-04 11:46:45 ----A---- C:\Boot.bak
2010-10-04 11:46:34 ----RASHD---- C:\cmdcons
2010-10-04 11:44:07 ----D---- C:\WINDOWS\ERDNT
2010-10-04 09:58:21 ----D---- C:\Documents and Settings\Michal\Application Data\Canon
2010-10-04 08:43:10 ----D---- C:\Documents and Settings\Michal\Application Data\Malwarebytes
2010-10-04 08:42:52 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-10-04 08:42:49 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-10-04 08:42:49 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-10-04 08:42:48 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-10-03 16:30:06 ----A---- C:\WINDOWS\oodjobd.INI
2010-10-03 14:38:16 ----D---- C:\Program Files\trend micro
2010-10-03 14:33:29 ----D---- C:\WINDOWS\system32\oodag
2010-10-03 14:28:37 ----D---- C:\Program Files\OO Software
2010-10-03 14:22:35 ----D---- C:\Documents and Settings\Michal\Application Data\WinRAR
2010-09-30 08:07:23 ----D---- C:\Documents and Settings\All Users\Application Data\Sibelius Software
2010-09-30 08:06:34 ----D---- C:\Documents and Settings\Michal\Application Data\Sibelius Software
2010-09-30 08:02:53 ----D---- C:\Program Files\Sibelius Software
2010-09-29 18:40:15 ----D---- C:\Documents and Settings\All Users\Application Data\ALM
2010-09-29 17:43:34 ----RA---- C:\WINDOWS\system32\AdobePDFUI.dll
2010-09-29 17:43:34 ----RA---- C:\WINDOWS\system32\AdobePDF.dll
2010-09-29 17:17:06 ----D---- C:\Program Files\Adobe Media Player
2010-09-29 17:12:58 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-09-29 17:00:29 ----D---- C:\Program Files\Common Files\Macrovision Shared
2010-09-29 12:34:26 ----D---- C:\WINDOWS\SxsCaPendDel
2010-09-29 11:13:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2158563$
2010-09-27 21:43:16 ----A---- C:\WINDOWS\system32\drivers\port_nt.sys
2010-09-27 21:40:24 ----D---- C:\Program Files\PRO100
2010-09-24 10:06:30 ----A---- C:\WINDOWS\system32\erasext.dll
2010-09-24 10:06:30 ----A---- C:\WINDOWS\system32\eraserl.exe
2010-09-24 10:06:30 ----A---- C:\WINDOWS\system32\Eraser.dll
2010-09-24 10:06:28 ----D---- C:\Program Files\Eraser
2010-09-24 08:08:36 ----D---- C:\Program Files\QuickTime
2010-09-23 14:34:43 ----D---- C:\Program Files\Microsoft Works
2010-09-23 14:19:23 ----A---- C:\WINDOWS\iun6002.exe
2010-09-23 14:19:14 ----D---- C:\Program Files\Codec Pack - All In 1
2010-09-23 14:14:42 ----A---- C:\WINDOWS\system32\javaws.exe
2010-09-23 14:14:42 ----A---- C:\WINDOWS\system32\javaw.exe
2010-09-23 14:14:42 ----A---- C:\WINDOWS\system32\java.exe
2010-09-22 09:18:29 ----D---- C:\WINDOWS\ie7updates
2010-09-22 09:16:27 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-09-21 20:11:35 ----D---- C:\Program Files\WinXP Manager
2010-09-21 19:26:58 ----D---- C:\WINDOWS\WBEM
2010-09-21 19:23:08 ----HDC---- C:\WINDOWS\ie7
2010-09-21 19:22:19 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2010-09-21 19:21:41 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2010-09-21 15:47:55 ----D---- C:\Program Files\XStandard
2010-09-21 13:32:53 ----D---- C:\Documents and Settings\Michal\Application Data\Macromedia
2010-09-21 09:12:43 ----D---- C:\Program Files\Canon
2010-09-21 09:12:29 ----A---- C:\WINDOWS\system32\CNCMFP36.INI
2010-09-21 09:12:29 ----A---- C:\WINDOWS\system32\CNCLSU36b.DLL
2010-09-21 09:12:29 ----A---- C:\WINDOWS\system32\CNCLST36b.DLL
2010-09-21 09:12:29 ----A---- C:\WINDOWS\system32\CNCLSI36b.DLL
2010-09-21 09:12:29 ----A---- C:\WINDOWS\system32\CNCLSD36b.DLL
2010-09-21 09:12:29 ----A---- C:\WINDOWS\system32\CNCLSC36b.DLL
2010-09-21 09:12:28 ----A---- C:\WINDOWS\system32\CNCLSO36b.dll
2010-09-21 09:12:28 ----A---- C:\WINDOWS\system32\CNCL8300.DLL
2010-09-21 09:12:27 ----A---- C:\WINDOWS\system32\CNCI8300.DLL
2010-09-21 09:12:27 ----A---- C:\WINDOWS\system32\CNCC8300.DLL
2010-09-21 09:12:21 ----A---- C:\WINDOWS\system32\drivers\serscan.sys
2010-09-21 09:11:40 ----A---- C:\WINDOWS\system32\CNAS0MOK.DLL
2010-09-21 09:11:32 ----A---- C:\WINDOWS\system32\CNCENPU.dll
2010-09-21 09:11:32 ----A---- C:\WINDOWS\system32\CNCENPR.dll
2010-09-21 09:11:32 ----A---- C:\WINDOWS\system32\CNCENPM.dll
2010-09-21 09:10:12 ----HD---- C:\WINDOWS\system32\CanonMF Uninstaller Information
2010-09-21 08:35:17 ----D---- C:\Program Files\ESET
2010-09-21 08:35:17 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2010-09-20 19:41:57 ----A---- C:\WINDOWS\system32\ptpusb.dll
2010-09-20 19:41:56 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2010-09-20 19:41:55 ----A---- C:\WINDOWS\system32\ptpusd.dll
2010-09-20 19:25:14 ----D---- C:\Documents and Settings\Michal\Application Data\Apple Computer
2010-09-20 19:25:02 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2010-09-20 19:25:02 ----A---- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
2010-09-20 19:23:50 ----D---- C:\Program Files\iPod
2010-09-20 19:23:42 ----D---- C:\Program Files\iTunes
2010-09-20 19:23:42 ----D---- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-09-20 19:22:23 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2010-09-20 19:22:05 ----D---- C:\Program Files\Apple Software Update
2010-09-20 19:21:51 ----A---- C:\WINDOWS\system32\usbaaplrc.dll
2010-09-20 19:21:51 ----A---- C:\WINDOWS\system32\drivers\usbaapl.sys
2010-09-20 19:21:50 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-09-20 19:20:55 ----D---- C:\Program Files\Bonjour
2010-09-20 19:20:33 ----D---- C:\Program Files\Common Files\Apple
2010-09-20 19:20:33 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2010-09-20 15:59:53 ----D---- C:\00994c9b7a942d8256
2010-09-20 14:55:02 ----D---- C:\Documents and Settings\Michal\Application Data\Google
2010-09-20 14:52:25 ----D---- C:\Program Files\Google
2010-09-20 14:21:09 ----D---- C:\WINDOWS\Sun
2010-09-20 14:12:53 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2010-09-20 14:12:46 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-09-20 14:12:36 ----D---- C:\WINDOWS\Logs
2010-09-20 14:12:22 ----D---- C:\Program Files\Winamp
2010-09-20 14:12:22 ----D---- C:\Documents and Settings\Michal\Application Data\Winamp
2010-09-20 14:08:38 ----D---- C:\Program Files\WinRAR
2010-09-19 22:21:18 ----D---- C:\Program Files\CCleaner
2010-09-19 22:15:19 ----D---- C:\Program Files\RocketDock
2010-09-19 22:12:21 ----D---- C:\Program Files\QK SMTP Server 3
2010-09-19 22:11:57 ----D---- C:\Documents and Settings\Michal\Application Data\KeePass
2010-09-19 21:54:15 ----D---- C:\Program Files\MSBuild
2010-09-19 21:54:04 ----D---- C:\WINDOWS\system32\XPSViewer
2010-09-19 21:53:53 ----D---- C:\Program Files\Reference Assemblies
2010-09-19 21:53:04 ----N---- C:\WINDOWS\system32\spmsg2.dll
2010-09-19 21:24:23 ----D---- C:\Documents and Settings\All Users\Application Data\Sun
2010-09-19 21:24:22 ----D---- C:\Program Files\Common Files\Java
2010-09-19 21:23:59 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-09-19 21:23:35 ----D---- C:\Program Files\Java
2010-09-19 21:23:11 ----D---- C:\Documents and Settings\Michal\Application Data\Sun
2010-09-19 21:17:23 ----D---- C:\Program Files\KeePass Password Safe 2
2010-09-19 21:12:22 ----A---- C:\WINDOWS\system32\drivers\truecrypt.sys
2010-09-19 21:12:15 ----D---- C:\Program Files\TrueCrypt
2010-09-19 21:12:04 ----D---- C:\Documents and Settings\Michal\Application Data\TrueCrypt
2010-09-19 21:10:36 ----D---- C:\Documents and Settings\All Users\Application Data\FLEXnet
2010-09-19 18:21:32 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-09-19 18:20:59 ----D---- C:\Program Files\Adobe
2010-09-19 18:20:38 ----D---- C:\Documents and Settings\Michal\Application Data\Adobe
2010-09-19 18:05:50 ----D---- C:\Documents and Settings\Michal\Application Data\DAEMON Tools Lite
2010-09-19 18:05:47 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2010-09-19 18:04:30 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Pro
2010-09-19 17:50:40 ----D---- C:\Program Files\DAEMON Tools Pro
2010-09-19 17:50:34 ----D---- C:\Documents and Settings\Michal\Application Data\DAEMON Tools Pro
2010-09-19 17:34:08 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2010-09-19 17:29:01 ----D---- C:\WINDOWS\system32\LogFiles
2010-09-19 17:25:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2183461$
2010-09-19 17:25:01 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-09-19 17:24:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-09-19 17:24:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2010-09-19 17:24:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-09-19 17:24:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-09-19 17:24:24 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-09-19 17:24:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-09-19 17:24:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-09-19 17:23:52 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-09-19 17:23:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-09-19 17:23:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-09-19 17:23:22 ----HDC---- C:\WINDOWS\$NtUninstallKB982802$
2010-09-19 17:23:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2160329$
2010-09-19 17:23:04 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-09-19 17:22:55 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-09-19 17:22:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-09-19 17:22:32 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-09-19 17:22:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2010-09-19 17:22:18 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2010-09-19 17:14:24 ----D---- C:\Documents and Settings\Michal\Application Data\Help
2010-09-19 17:07:20 ----D---- C:\Program Files\Common Files\Adobe
2010-09-19 16:36:03 ----D---- C:\Documents and Settings\Michal\Application Data\Mozilla
2010-09-19 16:35:52 ----D---- C:\Program Files\Mozilla Firefox
2010-09-19 16:21:22 ----D---- C:\Program Files\Common Files\DESIGNER
2010-09-19 16:20:54 ----D---- C:\Program Files\Microsoft.NET
2010-09-19 16:17:52 ----D---- C:\WINDOWS\SHELLNEW
2010-09-19 16:17:14 ----D---- C:\Program Files\Microsoft Office
2010-09-19 16:17:00 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-09-19 16:15:56 ----RD---- C:\MSOCache
2010-09-19 00:11:35 ----D---- C:\WINDOWS\system32\appmgmt
2010-09-18 23:56:22 ----D---- C:\!instalace
2010-09-18 23:43:16 ----D---- C:\! Michal Data
2010-09-18 23:41:57 ----A---- C:\WINDOWS\UC.PIF
2010-09-18 23:41:57 ----A---- C:\WINDOWS\RAR.PIF
2010-09-18 23:41:57 ----A---- C:\WINDOWS\PKZIP.PIF
2010-09-18 23:41:57 ----A---- C:\WINDOWS\PKUNZIP.PIF
2010-09-18 23:41:57 ----A---- C:\WINDOWS\NOCLOSE.PIF
2010-09-18 23:41:57 ----A---- C:\WINDOWS\LHA.PIF
2010-09-18 23:41:57 ----A---- C:\WINDOWS\ARJ.PIF
2010-09-18 23:37:35 ----D---- C:\Program Files\Totalcmd
2010-09-18 23:37:35 ----A---- C:\WINDOWS\wincmd.ini
2010-09-18 23:35:49 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2010-09-18 23:34:51 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-09-18 23:19:42 ----A---- C:\WINDOWS\system32\MRT.exe
2010-09-18 23:19:19 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-09-18 23:15:17 ----D---- C:\WINDOWS\Prefetch
2010-09-18 22:54:22 ----HDC---- C:\WINDOWS\$NtUninstallKB982381$
2010-09-18 22:54:11 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-09-18 22:54:02 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-09-18 22:53:46 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-09-18 22:53:32 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-09-18 22:53:22 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-09-18 22:53:11 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-09-18 22:53:01 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-09-18 22:52:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-09-18 22:52:41 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-09-18 22:52:30 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-09-18 22:52:20 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-09-18 22:52:06 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-09-18 22:51:55 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-09-18 22:51:46 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-09-18 22:51:34 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-09-18 22:51:20 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-09-18 22:51:11 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-09-18 22:50:59 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-09-18 22:50:49 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-09-18 22:50:38 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-09-18 22:50:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-09-18 22:50:16 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-09-18 22:50:05 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-09-18 22:49:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-09-18 22:49:44 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-09-18 22:49:34 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-09-18 22:49:25 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-09-18 22:49:15 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-09-18 22:49:04 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-09-18 22:48:54 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-09-18 22:48:45 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-09-18 22:48:31 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-09-18 22:48:15 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-09-18 22:47:46 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-09-18 22:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-09-18 22:47:27 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-09-18 22:47:15 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-09-18 22:47:04 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-09-18 22:46:55 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-09-18 22:45:48 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-09-18 22:45:38 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-09-18 22:45:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-09-18 22:45:08 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-09-18 22:44:53 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-09-18 22:44:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2010-09-18 22:44:30 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-09-18 22:44:20 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-09-18 22:44:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-09-18 22:43:56 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-09-18 22:43:45 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-09-18 22:43:34 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-09-18 22:43:25 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-09-18 22:43:16 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-09-18 22:43:05 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-09-18 22:42:55 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-09-18 22:42:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-09-18 22:35:43 ----D---- C:\WINDOWS\system32\en-us
2010-09-18 22:35:42 ----D---- C:\WINDOWS\system32\scripting
2010-09-18 22:35:42 ----D---- C:\WINDOWS\l2schemas
2010-09-18 22:35:41 ----D---- C:\WINDOWS\system32\en
2010-09-18 22:35:41 ----D---- C:\WINDOWS\system32\bits
2010-09-18 22:26:49 ----D---- C:\WINDOWS\network diagnostic
2010-09-18 22:20:42 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-09-18 18:38:01 ----SHD---- C:\WINDOWS\CSC
2010-09-18 18:18:12 ----D---- C:\Documents and Settings\All Users\Application Data\IBM
2010-09-18 18:16:55 ----ASH---- C:\Documents and Settings\Michal\Application Data\desktop.ini
2010-09-18 18:16:54 ----SD---- C:\Documents and Settings\Michal\Application Data\Microsoft
2010-09-18 18:16:54 ----D---- C:\Documents and Settings\Michal\Application Data\Symantec
2010-09-18 18:16:54 ----D---- C:\Documents and Settings\Michal\Application Data\Identities
2010-09-18 18:16:54 ----D---- C:\Documents and Settings\Michal\Application Data\IBM
2010-09-18 17:48:00 ----AH---- C:\BOOTLOG.TXT
2010-09-18 17:46:58 ----A---- C:\WINDOWS\smscfg.ini
2010-09-18 17:46:10 ----A---- C:\WINDOWS\PWMBTHLP.EXE
2010-09-18 17:46:09 ----A---- C:\WINDOWS\system32\drivers\TPPWRIF.SYS
2010-09-18 17:45:52 ----A---- C:\WINDOWS\system32\tvt_gina_api.dll
2010-09-18 17:45:52 ----A---- C:\WINDOWS\system32\tvt_gina.dll
2010-09-18 17:45:52 ----A---- C:\WINDOWS\system32\QCONSVC.EXE
2010-09-18 17:45:52 ----A---- C:\WINDOWS\system32\QConGina.dll
2010-09-18 17:45:50 ----A---- C:\WINDOWS\system32\drivers\qcndisif.sys
2010-09-18 17:45:50 ----A---- C:\WINDOWS\system32\drivers\IBMBLDID.SYS
2010-09-18 17:45:50 ----A---- C:\WINDOWS\system32\drivers\ANC.sys
2010-09-18 17:43:00 ----A---- C:\WINDOWS\system32\capicom.dll
2010-09-18 17:42:46 ----D---- C:\Program Files\Symantec Client Security
2010-09-18 17:42:46 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-09-18 17:42:46 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2010-09-18 17:41:52 ----D---- C:\Icons
2010-09-18 17:41:14 ----D---- C:\Program Files\IBM ThinkVantage
2010-09-18 17:40:35 ----A---- C:\WINDOWS\system32\drivers\PcdrNdisuio.sys
2010-09-18 17:40:09 ----D---- C:\Program Files\PC-Doctor for Windows
2010-09-18 17:39:20 ----A---- C:\WINDOWS\system32\MSVCR71.DLL
2010-09-18 17:39:19 ----A---- C:\WINDOWS\system32\MFC71U.DLL
2010-09-18 17:39:19 ----A---- C:\WINDOWS\system32\MFC71.DLL
2010-09-18 17:39:07 ----D---- C:\Documents and Settings\All Users\Application Data\Lenovo
2010-09-18 17:38:52 ----A---- C:\WINDOWS\system32\msxml4a.dll
2010-09-18 17:38:52 ----A---- C:\WINDOWS\system32\ahlprun.exe
2010-09-18 17:37:47 ----D---- C:\Program Files\IBM
2010-09-18 17:36:44 ----D---- C:\Program Files\ThinkVantage
2010-09-18 17:34:14 ----D---- C:\Program Files\Windows Media Connect
2010-09-18 17:33:47 ----HD---- C:\WINDOWS\$NtUninstallKB893066$
2010-09-18 17:33:01 ----HD---- C:\WINDOWS\$NtUninstallKB890859$
2010-09-18 17:32:37 ----A---- C:\WINDOWS\system32\igfxres.dll
2010-09-18 17:29:43 ----D---- C:\Program Files\Digital Line Detect
2010-09-18 17:29:40 ----D---- C:\Program Files\NetWaiting
2010-09-18 17:29:33 ----D---- C:\Program Files\CONEXANT
2010-09-18 17:29:03 ----A---- C:\WINDOWS\system32\wdmioctl.dll
2010-09-18 17:29:02 ----D---- C:\Program Files\Analog Devices
2010-09-18 17:29:02 ----A---- C:\WINDOWS\system32\SMMedia.dll
2010-09-18 17:29:02 ----A---- C:\WINDOWS\system32\DSndUp.exe
2010-09-18 17:29:02 ----A---- C:\WINDOWS\system32\CleanUp.exe
2010-09-18 17:28:47 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-09-18 17:28:44 ----D---- C:\Program Files\Fingerprint Tutorial
2010-09-18 17:28:09 ----A---- C:\WINDOWS\system32\drivers\TPInput.sys
2010-09-18 17:28:09 ----A---- C:\WINDOWS\system32\drivers\TPDiskPM.sys
2010-09-18 17:27:49 ----A---- C:\WINDOWS\system32\drivers\TSMAPIP.SYS
2010-09-18 17:27:31 ----D---- C:\Program Files\Common Files\Virtual Token
2010-09-18 17:27:30 ----D---- C:\Program Files\ThinkVantage Fingerprint Software
2010-09-18 17:27:28 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-09-18 17:27:21 ----A---- C:\WINDOWS\system32\TP4HOOK.dll
2010-09-18 17:27:21 ----A---- C:\WINDOWS\system32\TP4EX.exe
2010-09-18 17:27:21 ----A---- C:\WINDOWS\system32\tp4cross.exe
2010-09-18 17:27:21 ----A---- C:\WINDOWS\system32\FPCALL.dll
2010-09-18 17:27:05 ----A---- C:\WINDOWS\system32\results.txt
2010-09-18 17:27:01 ----A---- C:\WINDOWS\system32\drivers\AegisP.sys
2010-09-18 17:26:49 ----D---- C:\Documents and Settings\All Users\Application Data\Intel
2010-09-18 17:26:00 ----A---- C:\WINDOWS\system32\W29MLRES.DLL
2010-09-18 17:25:49 ----D---- C:\Program Files\Intel
2010-09-18 17:23:56 ----A---- C:\WINDOWS\system32\drivers\TDSMAPI.SYS
2010-09-18 17:23:55 ----A---- C:\WINDOWS\system32\drivers\SMAPINT.SYS
2010-09-18 17:23:45 ----A---- C:\WINDOWS\system32\TpShocks.exe
2010-09-18 17:23:45 ----A---- C:\WINDOWS\system32\TpShCPL.dll
2010-09-18 17:23:45 ----A---- C:\WINDOWS\system32\TPHDEXLG.exe
2010-09-18 17:23:45 ----A---- C:\WINDOWS\system32\Sensor.dll
2010-09-18 17:23:45 ----A---- C:\WINDOWS\system32\drivers\shockprf.sys
2010-09-18 17:23:45 ----A---- C:\WINDOWS\system32\drivers\ShockMgr.sys
2010-09-18 17:23:36 ----D---- C:\Program Files\Lenovo
2010-09-18 17:23:36 ----A---- C:\WINDOWS\_tpiu000.exe
2010-09-18 17:23:17 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-18 17:23:17 ----D---- C:\Program Files\ThinkPad
2010-09-18 17:23:17 ----A---- C:\WINDOWS\system32\TpKmpSvc.exe
2010-09-18 17:23:14 ----D---- C:\Program Files\Common Files\InstallShield
2010-09-18 17:23:07 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-09-18 17:21:28 ----A---- C:\WINDOWS\system32\xpsp3res.dll
2010-09-18 17:18:48 ----RSD---- C:\WINDOWS\assembly
2010-09-18 17:18:48 ----D---- C:\WINDOWS\Microsoft.NET
2010-09-18 17:18:46 ----D---- C:\WINDOWS\system32\URTTemp
2010-09-18 17:18:23 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-18 17:17:31 ----D---- C:\WINDOWS\RegisteredPackages
2010-09-18 17:16:42 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-09-18 17:16:03 ----ASH---- C:\hiberfil.sys
2010-09-18 17:14:31 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2010-09-18 17:14:27 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2010-09-18 17:14:10 ----A---- C:\WINDOWS\system32\drivers\compbatt.sys
2010-09-18 17:14:09 ----A---- C:\WINDOWS\system32\drivers\battc.sys
2010-09-18 17:14:08 ----A---- C:\WINDOWS\system32\drivers\cmbatt.sys
2010-09-18 17:13:19 ----A---- C:\WINDOWS\system32\hccoin.dll
2010-09-18 17:13:19 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2010-09-18 17:12:03 ----A---- C:\WINDOWS\system32\tp4uires.dll
2010-09-18 17:11:55 ----A---- C:\WINDOWS\system32\drivers\rasirda.sys
2010-09-18 17:11:52 ----A---- C:\WINDOWS\system32\irmon.dll
2010-09-18 17:11:52 ----A---- C:\WINDOWS\system32\irftp.exe
2010-09-18 17:11:52 ----A---- C:\WINDOWS\system32\drivers\irda.sys
2010-09-18 17:11:51 ----A---- C:\WINDOWS\system32\wshirda.dll
2010-09-18 17:11:48 ----A---- C:\WINDOWS\system32\drivers\nscirda.sys
2010-09-18 17:11:08 ----ASH---- C:\pagefile.sys
2010-09-18 17:10:34 ----A---- C:\WINDOWS\system32\OEMINFO.INI
2010-09-18 17:08:52 ----D---- C:\DRIVERS
2010-09-18 17:03:11 ----A---- C:\WINDOWS\system32\tphklock.dll
2010-09-18 17:03:11 ----A---- C:\WINDOWS\system32\drivers\TPHKDRV.sys
2010-09-18 17:03:10 ----A---- C:\WINDOWS\system32\notifyf2.dll
2010-09-18 16:58:54 ----A---- C:\WINDOWS\system32\PROCHLP.DLL
2010-09-18 16:58:54 ----A---- C:\WINDOWS\system32\IPSSVC.EXE
2010-09-18 16:58:54 ----A---- C:\WINDOWS\system32\IPSCTRL.INI
2010-09-18 16:58:54 ----A---- C:\WINDOWS\system32\drivers\PROCDD.SYS
2010-09-18 16:57:45 ----D---- C:\IBMTOOLS
2010-09-18 12:59:32 ----D---- C:\Documents and Settings\All Users\Application