Prosím o pomoc s virem z FB
Napsal: 30 črc 2011 16:52
Logfile of random's system information tool 1.09 (written by random/random)
Run by ROMAN at 2011-07-30 17:36:23
Microsoft Windows 7 Home Premium
System drive C: has 155 GB (80%) free of 193 GB
Total RAM: 1790 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:36:56, on 30.7.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16800)
Boot mode: Normal
Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\TpShocks.exe
C:\Program Files\Lenovo\YouCam\YouCamTray.exe
C:\Program Files\Lenovo\VeriFace\PManage.exe
C:\Program Files\Lenovo\Energy Management\utility.exe
C:\Program Files\Lenovo\Energy Management\Energy Management.exe
C:\Windows\update.tray-7-0\svchost.exe
C:\Windows\update.tray-12-0\svchost.exe
C:\Windows\update.tray-2-0\svchost.exe
C:\Windows\l1rezerv.exe
C:\Windows\systemup.exe
C:\Windows\update.3\svchost.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\ROMAN\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe
C:\Windows\update.tray-2-0-lnk\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\mswinext.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\windows\system32\wuauclt.exe
C:\windows\system32\taskhost.exe
C:\windows\system32\taskeng.exe
C:\Users\ROMAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3QLIY7BB\RSIT[1].exe
C:\Program Files\trend micro\ROMAN.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe /FORPCEE3
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TpShocks] C:\Windows\system32\TpShocks.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0"
O4 - HKLM\..\Run: [YouCam Mirror Tray icon] "C:\Program Files\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utility.exe
O4 - HKLM\..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [wxpdrv] C:\windows\services32.exe
O4 - HKLM\..\Run: [tray_ico0] C:\windows\update.tray-7-0\svchost.exe
O4 - HKLM\..\Run: [tray_ico1] C:\windows\update.tray-12-0\svchost.exe
O4 - HKLM\..\Run: [tray_ico2] C:\windows\update.tray-2-0\svchost.exe
O4 - HKLM\..\Run: [157178.exe] "C:\Users\ROMAN\AppData\Local\Temp\157178.exe"
O4 - HKLM\..\Run: [sysdriver32.exe] "C:\windows\sysdriver32.exe" rezerv
O4 - HKLM\..\Run: [sysdriver32_.exe] "C:\windows\sysdriver32_.exe" rezerv
O4 - HKLM\..\Run: [2244880.exe] "C:\Windows\Temp\2244880.exe"
O4 - HKLM\..\Run: [78337420-loader2.exe] "C:\Windows\Temp\78337420-loader2.exe"
O4 - HKLM\..\Run: [l1rezerv.exe] "C:\windows\l1rezerv.exe"
O4 - HKLM\..\Run: [systemup] "C:\windows\systemup.exe" stand
O4 - HKLM\..\Run: [3521458.exe] "C:\Windows\Temp\3521458.exe"
O4 - HKLM\..\Run: [9162557.exe] "C:\Windows\Temp\9162557.exe"
O4 - HKLM\..\Run: [7410098.exe] "C:\Users\ROMAN\AppData\Local\Temp\7410098.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [w_distrib.exe] "C:\windows\update.3\svchost.exe" stand
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\ROMAN\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: AMD External Events Utility - AMD - C:\windows\system32\atiesrxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (file missing)
O23 - Service: ESET Service (ekrn) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IGRS - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe
O23 - Service: Lenovo ReadyComm AppSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\AppSvc.exe
O23 - Service: Lenovo ReadyComm ConnSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe
O23 - Service: srvbtcclient - Unknown owner - C:\windows\update.5.0\svchost.exe
O23 - Service: srviecheck - Unknown owner - C:\windows\update.2\svchost.exe
O23 - Service: srvsysdriver32 - Unknown owner - C:\windows\sysdriver32.exe
O23 - Service: IdeaPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\windows\System32\TPHDEXLG.exe
O23 - Service: wxpdrivers - Unknown owner - C:\windows\update.1\svchost.exe
--
End of file - 11208 bytes
======Scheduled tasks folder======
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-456043941-4262597383-1507690368-1002Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-456043941-4262597383-1507690368-1002UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27 191792]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-07-11 305328]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll [2011-07-11 1007160]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar BHO - C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll [2010-08-13 609544]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-07-07 1491920]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-07-21 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - @C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll [2010-08-13 609544]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll []
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-07-11 305328]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-07-07 1491920]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-04-20 8555040]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [2010-04-20 694816]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1594664]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-12-03 35184]
"TpShocks"=C:\Windows\system32\TpShocks.exe [2010-03-15 186272]
"UCam_Menu"=C:\Program Files\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"YouCam Mirror Tray icon"=C:\Program Files\Lenovo\YouCam\YouCamTray.exe [2010-03-03 171104]
"VeriFaceManager"=C:\Program Files\Lenovo\VeriFace\PManage.exe [2010-12-09 3122528]
"Microsoft Default Manager"=C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-10 439568]
"EnergyUtility"=C:\Program Files\Lenovo\Energy Management\utility.exe [2010-04-12 4204448]
"Energy Management"=C:\Program Files\Lenovo\Energy Management\Energy Management.exe [2010-03-18 6285216]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe []
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui []
"wxpdrv"=C:\windows\services32.exe [2011-07-25 1185280]
"tray_ico"= []
"tray_ico0"=C:\windows\update.tray-7-0\svchost.exe [2011-07-25 1185280]
"tray_ico1"=C:\windows\update.tray-12-0\svchost.exe [2011-07-25 1185280]
"tray_ico2"=C:\windows\update.tray-2-0\svchost.exe [2011-07-25 1185280]
"tray_ico3"= []
"tray_ico4"= []
"157178.exe"=C:\Users\ROMAN\AppData\Local\Temp\157178.exe [2011-07-25 247296]
"sysdriver32.exe"=C:\windows\sysdriver32.exe [2011-07-25 256000]
"sysdriver32_.exe"=C:\windows\sysdriver32_.exe [2011-07-25 256000]
"2244880.exe"=C:\Windows\Temp\2244880.exe [2011-07-25 247296]
"78337420-loader2.exe"=C:\Windows\Temp\78337420-loader2.exe [2011-07-25 247296]
"l1rezerv.exe"=C:\windows\l1rezerv.exe [2011-07-25 232960]
"systemup"=C:\windows\systemup.exe [2011-07-25 114176]
"3521458.exe"=C:\Windows\Temp\3521458.exe [2011-07-25 256000]
"9162557.exe"=C:\Windows\Temp\9162557.exe [2011-07-27 502272]
"7410098.exe"=C:\Users\ROMAN\AppData\Local\Temp\7410098.exe [2011-07-27 502272]
""= []
"ApnUpdater"=C:\Program Files\Ask.com\Updater\Updater.exe [2011-07-07 399312]
"w_distrib.exe"=C:\windows\update.3\svchost.exe [2011-07-29 272896]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe /hide /waitservice []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"Google Update"=C:\Users\ROMAN\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-02 136176]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableSecureUIAPaths"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"msacm.siren"=sirenacm.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2011-07-30 17:36:24 ----D---- C:\Program Files\trend micro
2011-07-30 17:36:23 ----D---- C:\rsit
2011-07-30 17:17:30 ----HD---- C:\windows\update.tray-2-0-lnk
2011-07-30 17:17:30 ----HD---- C:\windows\update.tray-2-0
2011-07-30 17:14:51 ----SHD---- C:\Config.Msi
2011-07-30 16:55:19 ----D---- C:\Users\ROMAN\AppData\Roaming\ATI
2011-07-29 12:16:04 ----A---- C:\windows\system32\Systemdrv.sys
2011-07-29 12:15:20 ----A---- C:\windows\system32\gdiplus.dll
2011-07-29 12:15:17 ----D---- C:\ProgramData\DVDXStudio
2011-07-29 12:15:17 ----D---- C:\Program Files\Aviosoft
2011-07-29 10:15:17 ----A---- C:\windows\w_distrib_iplist.txt
2011-07-29 10:14:48 ----HD---- C:\windows\update.3
2011-07-28 15:55:33 ----D---- C:\windows\Sun
2011-07-28 15:55:00 ----D---- C:\Program Files\Ask.com
2011-07-28 15:54:39 ----D---- C:\ProgramData\Ask
2011-07-28 15:53:43 ----A---- C:\windows\system32\javaws.exe
2011-07-28 15:53:43 ----A---- C:\windows\system32\javaw.exe
2011-07-28 15:53:43 ----A---- C:\windows\system32\java.exe
2011-07-28 15:53:43 ----A---- C:\windows\system32\deployJava1.dll
2011-07-26 21:24:08 ----HD---- C:\ProgramData\Common Files
2011-07-26 21:13:45 ----HD---- C:\windows\update.tray-12-0-lnk
2011-07-26 21:13:45 ----HD---- C:\windows\update.tray-12-0
2011-07-26 21:05:38 ----D---- C:\ProgramData\MFAData
2011-07-25 14:32:57 ----D---- C:\windows\system32\EventProviders
2011-07-25 14:01:42 ----D---- C:\windows\ufa
2011-07-25 14:01:42 ----D---- C:\windows\rpcminer
2011-07-25 14:01:42 ----D---- C:\windows\phoenix
2011-07-25 12:24:26 ----A---- C:\windows\ddh_iplist.txt
2011-07-25 12:24:04 ----A---- C:\windows\systemup.exe
2011-07-25 12:23:17 ----A---- C:\windows\iecheck_iplist.txt
2011-07-25 12:22:25 ----A---- C:\windows\btc_client_iplist.txt
2011-07-25 12:21:41 ----HD---- C:\windows\update.5.0
2011-07-25 12:20:43 ----A---- C:\windows\l1rezerv.exe
2011-07-25 12:19:33 ----HD---- C:\windows\update.2
2011-07-25 12:19:33 ----A---- C:\windows\unrar.exe
2011-07-25 12:18:43 ----A---- C:\windows\sysdriver32_.exe
2011-07-25 12:18:37 ----A---- C:\windows\iplist.txt
2011-07-25 12:18:27 ----A---- C:\windows\sysdriver32.exe
2011-07-25 12:18:10 ----A---- C:\windows\front_ip_list.txt
2011-07-25 12:18:08 ----D---- C:\windows\av_ico
2011-07-25 12:16:39 ----HD---- C:\windows\update.1
2011-07-25 12:16:36 ----HD---- C:\windows\update.tray-7-0-lnk
2011-07-25 12:16:36 ----HD---- C:\windows\update.tray-7-0
2011-07-25 12:05:21 ----A---- C:\windows\winlog-ids.txt
2011-07-25 12:05:21 ----A---- C:\windows\winlog-dirs.txt
2011-07-25 12:05:16 ----A---- C:\windows\services32.exe
2011-07-24 13:41:54 ----D---- C:\ProgramData\Microsoft Help
2011-07-19 21:45:25 ----D---- C:\ProgramData\VirtualizedApplications
2011-07-19 19:44:08 ----D---- C:\Users\ROMAN\AppData\Roaming\Windows Live Writer
2011-07-19 19:38:55 ----RHD---- C:\MSOCache
2011-07-19 19:33:25 ----D---- C:\Users\ROMAN\AppData\Roaming\SoftGrid Client
2011-07-19 19:31:26 ----D---- C:\Program Files\Common Files\DESIGNER
2011-07-19 19:31:24 ----D---- C:\Program Files\Microsoft Application Virtualization Client
2011-07-19 19:30:31 ----D---- C:\Users\ROMAN\AppData\Roaming\TP
2011-07-13 13:25:26 ----D---- C:\ProgramData\QuickMediaConverter
2011-07-13 13:25:18 ----D---- C:\Users\ROMAN\AppData\Roaming\CocoonSoftware
2011-07-13 13:24:56 ----D---- C:\Program Files\QuickMediaConverter
2011-07-13 13:18:52 ----D---- C:\Users\ROMAN\AppData\Roaming\WinRAR
2011-07-13 13:18:44 ----D---- C:\Program Files\WinRAR
2011-07-13 10:43:46 ----A---- C:\windows\system32\drivers\usbport.sys
2011-07-13 10:43:45 ----A---- C:\windows\system32\drivers\usbhub.sys
2011-07-13 10:43:45 ----A---- C:\windows\system32\drivers\usbehci.sys
2011-07-13 10:43:45 ----A---- C:\windows\system32\drivers\usbccgp.sys
2011-07-13 10:43:44 ----A---- C:\windows\system32\drivers\usbuhci.sys
2011-07-13 10:43:44 ----A---- C:\windows\system32\drivers\usbohci.sys
2011-07-13 10:43:44 ----A---- C:\windows\system32\drivers\usbd.sys
2011-07-13 10:43:39 ----A---- C:\windows\system32\esent.dll
2011-07-13 10:43:39 ----A---- C:\windows\system32\drivers\nvstor.sys
2011-07-13 10:43:39 ----A---- C:\windows\system32\drivers\nvraid.sys
2011-07-13 10:43:39 ----A---- C:\windows\system32\drivers\ntfs.sys
2011-07-13 10:43:38 ----A---- C:\windows\system32\fsutil.exe
2011-07-13 10:43:38 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2011-07-13 10:43:38 ----A---- C:\windows\system32\drivers\storport.sys
2011-07-13 10:43:38 ----A---- C:\windows\system32\drivers\iaStorV.sys
2011-07-13 10:43:38 ----A---- C:\windows\system32\drivers\amdxata.sys
2011-07-13 10:43:38 ----A---- C:\windows\system32\drivers\amdsata.sys
2011-07-13 10:43:32 ----A---- C:\windows\system32\winsrv.dll
2011-07-13 10:43:32 ----A---- C:\windows\system32\kernel32.dll
2011-07-13 10:43:32 ----A---- C:\windows\system32\conhost.exe
2011-07-13 10:43:28 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2011-07-13 10:43:28 ----A---- C:\windows\system32\drivers\bthport.sys
2011-07-13 10:43:25 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-13 10:43:25 ----A---- C:\windows\system32\KernelBase.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-13 10:43:22 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-13 10:43:22 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-13 10:43:22 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-13 10:43:22 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-13 10:43:20 ----A---- C:\windows\system32\win32k.sys
2011-07-11 06:13:12 ----HD---- C:\ProgramData\CanonBJ
2011-07-11 06:10:02 ----N---- C:\windows\system32\MpSigStub.exe
2011-07-11 05:35:46 ----D---- C:\Users\ROMAN\AppData\Roaming\Google
2011-07-11 05:31:31 ----D---- C:\ProgramData\Google
2011-07-11 05:31:09 ----D---- C:\Program Files\Google
2011-07-11 05:31:00 ----A---- C:\windows\system32\drivers\aswSP.sys
2011-07-11 05:31:00 ----A---- C:\windows\system32\drivers\aswFsBlk.sys
2011-07-11 05:30:57 ----A---- C:\windows\system32\drivers\aswRdr.sys
2011-07-11 05:30:56 ----A---- C:\windows\system32\drivers\aswTdi.sys
2011-07-11 05:30:56 ----A---- C:\windows\system32\drivers\aswSnx.sys
2011-07-11 05:30:52 ----A---- C:\windows\system32\drivers\aswMonFlt.sys
2011-07-11 05:29:55 ----A---- C:\windows\avastSS.scr
2011-07-11 05:29:53 ----A---- C:\windows\system32\aswBoot.exe
2011-07-06 09:24:31 ----D---- C:\ProgramData\Symantec
2011-07-06 09:24:12 ----D---- C:\ProgramData\Norton
2011-07-06 09:24:07 ----D---- C:\ProgramData\NortonInstaller
2011-07-05 14:29:56 ----D---- C:\Program Files\Common Files\DivX Shared
2011-07-05 14:29:09 ----D---- C:\Program Files\DivX
2011-07-05 14:28:17 ----D---- C:\ProgramData\DivX
2011-07-02 12:45:05 ----D---- C:\PFiles
2011-07-01 21:53:23 ----A---- C:\windows\system32\umpnpmgr.dll
2011-07-01 21:52:28 ----A---- C:\windows\system32\tquery.dll
2011-07-01 21:52:28 ----A---- C:\windows\system32\mssrch.dll
2011-07-01 21:52:27 ----A---- C:\windows\system32\SearchIndexer.exe
2011-07-01 21:52:27 ----A---- C:\windows\system32\mssvp.dll
2011-07-01 21:52:26 ----A---- C:\windows\system32\SearchProtocolHost.exe
2011-07-01 21:52:26 ----A---- C:\windows\system32\SearchFilterHost.exe
2011-07-01 21:52:26 ----A---- C:\windows\system32\mssphtb.dll
2011-07-01 21:52:26 ----A---- C:\windows\system32\mssph.dll
2011-07-01 21:52:26 ----A---- C:\windows\system32\msscntrs.dll
======List of files/folders modified in the last 1 month======
2011-07-30 17:36:35 ----D---- C:\windows\Prefetch
2011-07-30 17:36:26 ----D---- C:\windows\Temp
2011-07-30 17:36:24 ----RD---- C:\Program Files
2011-07-30 17:33:30 ----D---- C:\windows\system32\config
2011-07-30 17:28:27 ----D---- C:\windows\System32
2011-07-30 17:28:27 ----D---- C:\Windows
2011-07-30 17:28:22 ----D---- C:\windows\system32\Tasks
2011-07-30 17:19:52 ----D---- C:\ProgramData\VeriFace
2011-07-30 17:16:00 ----SHD---- C:\windows\Installer
2011-07-30 17:15:48 ----D---- C:\windows\system32\DriverStore
2011-07-30 17:15:48 ----D---- C:\windows\system32\drivers
2011-07-30 17:15:48 ----D---- C:\windows\system32\catroot
2011-07-30 17:15:47 ----D---- C:\windows\inf
2011-07-30 17:14:53 ----D---- C:\ProgramData
2011-07-30 17:14:46 ----SHD---- C:\System Volume Information
2011-07-30 17:07:13 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-07-30 15:01:18 ----SD---- C:\Users\ROMAN\AppData\Roaming\Microsoft
2011-07-30 15:01:18 ----SD---- C:\ProgramData\Microsoft
2011-07-29 12:35:09 ----D---- C:\windows\system32\catroot2
2011-07-28 15:53:34 ----D---- C:\Program Files\Java
2011-07-26 19:54:48 ----D---- C:\windows\Tasks
2011-07-26 19:54:48 ----D---- C:\windows\system32\wfp
2011-07-26 19:54:46 ----D---- C:\windows\system32\wbem
2011-07-26 19:54:01 ----D---- C:\windows\system32\drivers\etc
2011-07-26 19:53:57 ----D---- C:\windows\registration
2011-07-24 14:32:55 ----D---- C:\windows\Logs
2011-07-24 13:51:38 ----D---- C:\windows\Microsoft.NET
2011-07-24 13:51:37 ----RSD---- C:\windows\assembly
2011-07-24 13:45:43 ----D---- C:\windows\winsxs
2011-07-24 13:44:18 ----RSD---- C:\windows\Fonts
2011-07-24 13:44:00 ----D---- C:\windows\ShellNew
2011-07-24 13:43:57 ----D---- C:\Program Files\Common Files\microsoft shared
2011-07-24 13:43:17 ----D---- C:\Program Files\Microsoft Office
2011-07-24 13:43:16 ----D---- C:\Program Files\Microsoft.NET
2011-07-19 19:31:26 ----D---- C:\Program Files\Common Files
2011-07-17 11:54:39 ----D---- C:\windows\rescache
2011-07-13 16:28:04 ----D---- C:\windows\system32\cs-CZ
2011-07-13 15:28:44 ----A---- C:\windows\system32\MRT.exe
2011-07-11 11:36:23 ----D---- C:\ProgramData\McAfee
2011-07-11 11:36:23 ----D---- C:\Program Files\McAfee
2011-07-08 10:54:18 ----D---- C:\windows\system32\wdi
2011-07-07 18:58:43 ----D---- C:\windows\ModemLogs
2011-07-06 09:18:23 ----D---- C:\Program Files\Microsoft Silverlight
2011-07-05 21:32:42 ----D---- C:\Program Files\Windows Live
2011-07-05 20:52:37 ----D---- C:\windows\system32\drivers\UMDF
2011-07-05 14:32:46 ----D---- C:\Program Files\Windows Sidebar
2011-07-05 14:32:46 ----D---- C:\Program Files\Windows Photo Viewer
2011-07-05 14:32:46 ----D---- C:\Program Files\Windows Media Player
2011-07-05 14:32:46 ----D---- C:\Program Files\Windows Mail
2011-07-05 14:32:46 ----D---- C:\Program Files\Windows Journal
2011-07-05 14:32:46 ----D---- C:\Program Files\Internet Explorer
2011-07-05 14:32:43 ----D---- C:\windows\ehome
2011-07-05 14:32:43 ----D---- C:\Program Files\Windows Defender
2011-07-05 14:32:43 ----D---- C:\Program Files\Common Files\System
2011-07-05 14:32:42 ----D---- C:\windows\system32\winrm
2011-07-05 14:32:42 ----D---- C:\windows\system32\migwiz
2011-07-05 14:32:42 ----D---- C:\windows\servicing
2011-07-05 14:32:42 ----D---- C:\windows\PolicyDefinitions
2011-07-05 14:32:42 ----D---- C:\windows\en-US
2011-07-05 14:32:41 ----D---- C:\windows\system32\sysprep
2011-07-05 14:32:41 ----D---- C:\windows\system32\slmgr
2011-07-05 14:32:41 ----D---- C:\windows\system32\sk-SK
2011-07-05 14:32:41 ----D---- C:\windows\system32\oobe
2011-07-05 14:32:41 ----D---- C:\windows\system32\en
2011-07-05 14:32:41 ----D---- C:\windows\system32\Boot
2011-07-05 14:32:34 ----D---- C:\windows\system32\en-US
2011-07-05 14:32:34 ----D---- C:\windows\system32\drivers\en-US
2011-07-05 14:32:25 ----D---- C:\windows\system32\WCN
2011-07-05 14:32:25 ----D---- C:\windows\system32\Dism
2011-07-05 14:32:22 ----D---- C:\windows\system32\Printing_Admin_Scripts
2011-07-05 14:32:08 ----D---- C:\Program Files\DVD Maker
2011-07-05 14:31:59 ----D---- C:\windows\Speech
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\windows\system32\DRIVERS\AtiPcie.sys [2009-08-24 14392]
R0 AVGIDSEH;AVGIDSEH; C:\windows\system32\DRIVERS\AVGIDSEH.Sys [2011-02-22 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx86.sys [2011-03-16 32592]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX86.sys [2010-01-15 32352]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 Shockprf;Shockprf; C:\windows\System32\DRIVERS\Apsx86.sys [2009-12-09 119904]
R0 TPDIGIMN;TPDIGIMN; C:\windows\System32\DRIVERS\ApsHM86.sys [2009-12-09 20576]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx86.sys [2011-03-01 34896]
R1 Avgtdix;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdix.sys [2011-04-05 297168]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 epfwwfpr;epfwwfpr; C:\windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 95384]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-09-03 21256]
R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atipmdag.sys [2010-01-14 5281792]
R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2010-01-14 149504]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\windows\system32\drivers\AtiHdmi.sys [2010-01-28 100352]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl6.sys [2010-02-02 2707448]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 btusbflt;Bluetooth USB Filter; C:\windows\system32\drivers\btusbflt.sys [2010-04-08 45736]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-01-15 86056]
R3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2010-01-15 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-01-15 18472]
R3 Cam5607;Lenovo EasyCamera ; C:\windows\System32\Drivers\BisonC07.sys [2010-03-19 1313776]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2010-04-20 3078624]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x86.sys [2010-02-22 66600]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2009-12-02 550760]
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2009-12-02 195944]
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2009-12-02 21864]
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2009-12-02 19304]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-12-10 231600]
R3 wdmirror;wdmirror; C:\windows\system32\DRIVERS\WDMirror.sys [2009-07-16 11792]
S1 Avgldx86;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx86.sys [2011-01-07 248656]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\AVGIDSDriver.Sys [2011-04-14 134480]
S3 AVGIDSFilter;AVGIDSFilter; C:\windows\system32\DRIVERS\AVGIDSFilter.Sys [2011-02-10 24144]
S3 AVGIDSShim;AVGIDSShim; C:\windows\system32\DRIVERS\AVGIDSShim.Sys [2011-02-10 21968]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 Bridge0;Bridge0; C:\windows\system32\drivers\WDBridge.sys [2009-07-28 63240]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2011-04-28 393216]
S3 eamonm;eamonm; C:\windows\system32\DRIVERS\eamonm.sys [2010-12-21 137144]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
S3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60x.sys [2009-07-14 229888]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 pciide;pciide; C:\windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2009-11-11 181792]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WimFltr;WimFltr; C:\windows\system32\DRIVERS\wimfltr.sys [2008-08-06 128104]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 81704]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2010-01-14 172032]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2010-04-20 615712]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
R2 ReadyComm.DirectRouter;ReadyComm.DirectRouter; C:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-07-27 249136]
R2 sftlist;Application Virtualization Client; C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe [2009-12-02 483688]
R2 srvbtcclient;srvbtcclient; C:\windows\update.5.0\svchost.exe [2011-07-26 348672]
R2 srviecheck;srviecheck; C:\windows\update.2\svchost.exe [2011-07-27 502272]
R2 srvsysdriver32;srvsysdriver32; C:\windows\sysdriver32.exe [2011-07-25 256000]
R2 TPHDEXLGSVC;IdeaPad HDD APS Logging Service; C:\windows\System32\TPHDEXLG.exe [2009-12-09 40032]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-02 209768]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe []
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-07-11 136176]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe []
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-07-11 182768]
S3 IGRS;IGRS; C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe [2009-07-15 38152]
S3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [2009-08-14 509192]
S3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [2009-11-17 575304]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PS_MDP;ReadyComm Presentation Space Helper Service; C:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-06-28 1343400]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
-----------------EOF-----------------
Run by ROMAN at 2011-07-30 17:36:23
Microsoft Windows 7 Home Premium
System drive C: has 155 GB (80%) free of 193 GB
Total RAM: 1790 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:36:56, on 30.7.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16800)
Boot mode: Normal
Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\TpShocks.exe
C:\Program Files\Lenovo\YouCam\YouCamTray.exe
C:\Program Files\Lenovo\VeriFace\PManage.exe
C:\Program Files\Lenovo\Energy Management\utility.exe
C:\Program Files\Lenovo\Energy Management\Energy Management.exe
C:\Windows\update.tray-7-0\svchost.exe
C:\Windows\update.tray-12-0\svchost.exe
C:\Windows\update.tray-2-0\svchost.exe
C:\Windows\l1rezerv.exe
C:\Windows\systemup.exe
C:\Windows\update.3\svchost.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\ROMAN\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe
C:\Windows\update.tray-2-0-lnk\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\mswinext.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\windows\system32\wuauclt.exe
C:\windows\system32\taskhost.exe
C:\windows\system32\taskeng.exe
C:\Users\ROMAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3QLIY7BB\RSIT[1].exe
C:\Program Files\trend micro\ROMAN.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe /FORPCEE3
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TpShocks] C:\Windows\system32\TpShocks.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0"
O4 - HKLM\..\Run: [YouCam Mirror Tray icon] "C:\Program Files\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utility.exe
O4 - HKLM\..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [wxpdrv] C:\windows\services32.exe
O4 - HKLM\..\Run: [tray_ico0] C:\windows\update.tray-7-0\svchost.exe
O4 - HKLM\..\Run: [tray_ico1] C:\windows\update.tray-12-0\svchost.exe
O4 - HKLM\..\Run: [tray_ico2] C:\windows\update.tray-2-0\svchost.exe
O4 - HKLM\..\Run: [157178.exe] "C:\Users\ROMAN\AppData\Local\Temp\157178.exe"
O4 - HKLM\..\Run: [sysdriver32.exe] "C:\windows\sysdriver32.exe" rezerv
O4 - HKLM\..\Run: [sysdriver32_.exe] "C:\windows\sysdriver32_.exe" rezerv
O4 - HKLM\..\Run: [2244880.exe] "C:\Windows\Temp\2244880.exe"
O4 - HKLM\..\Run: [78337420-loader2.exe] "C:\Windows\Temp\78337420-loader2.exe"
O4 - HKLM\..\Run: [l1rezerv.exe] "C:\windows\l1rezerv.exe"
O4 - HKLM\..\Run: [systemup] "C:\windows\systemup.exe" stand
O4 - HKLM\..\Run: [3521458.exe] "C:\Windows\Temp\3521458.exe"
O4 - HKLM\..\Run: [9162557.exe] "C:\Windows\Temp\9162557.exe"
O4 - HKLM\..\Run: [7410098.exe] "C:\Users\ROMAN\AppData\Local\Temp\7410098.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [w_distrib.exe] "C:\windows\update.3\svchost.exe" stand
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\ROMAN\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: AMD External Events Utility - AMD - C:\windows\system32\atiesrxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (file missing)
O23 - Service: ESET Service (ekrn) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IGRS - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe
O23 - Service: Lenovo ReadyComm AppSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\AppSvc.exe
O23 - Service: Lenovo ReadyComm ConnSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe
O23 - Service: srvbtcclient - Unknown owner - C:\windows\update.5.0\svchost.exe
O23 - Service: srviecheck - Unknown owner - C:\windows\update.2\svchost.exe
O23 - Service: srvsysdriver32 - Unknown owner - C:\windows\sysdriver32.exe
O23 - Service: IdeaPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\windows\System32\TPHDEXLG.exe
O23 - Service: wxpdrivers - Unknown owner - C:\windows\update.1\svchost.exe
--
End of file - 11208 bytes
======Scheduled tasks folder======
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-456043941-4262597383-1507690368-1002Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-456043941-4262597383-1507690368-1002UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27 191792]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-07-11 305328]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll [2011-07-11 1007160]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar BHO - C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll [2010-08-13 609544]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-07-07 1491920]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-07-21 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - @C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - C:\Program Files\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll [2010-08-13 609544]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll []
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-07-11 305328]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-07-07 1491920]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-04-20 8555040]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [2010-04-20 694816]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1594664]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-12-03 35184]
"TpShocks"=C:\Windows\system32\TpShocks.exe [2010-03-15 186272]
"UCam_Menu"=C:\Program Files\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"YouCam Mirror Tray icon"=C:\Program Files\Lenovo\YouCam\YouCamTray.exe [2010-03-03 171104]
"VeriFaceManager"=C:\Program Files\Lenovo\VeriFace\PManage.exe [2010-12-09 3122528]
"Microsoft Default Manager"=C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-10 439568]
"EnergyUtility"=C:\Program Files\Lenovo\Energy Management\utility.exe [2010-04-12 4204448]
"Energy Management"=C:\Program Files\Lenovo\Energy Management\Energy Management.exe [2010-03-18 6285216]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe []
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui []
"wxpdrv"=C:\windows\services32.exe [2011-07-25 1185280]
"tray_ico"= []
"tray_ico0"=C:\windows\update.tray-7-0\svchost.exe [2011-07-25 1185280]
"tray_ico1"=C:\windows\update.tray-12-0\svchost.exe [2011-07-25 1185280]
"tray_ico2"=C:\windows\update.tray-2-0\svchost.exe [2011-07-25 1185280]
"tray_ico3"= []
"tray_ico4"= []
"157178.exe"=C:\Users\ROMAN\AppData\Local\Temp\157178.exe [2011-07-25 247296]
"sysdriver32.exe"=C:\windows\sysdriver32.exe [2011-07-25 256000]
"sysdriver32_.exe"=C:\windows\sysdriver32_.exe [2011-07-25 256000]
"2244880.exe"=C:\Windows\Temp\2244880.exe [2011-07-25 247296]
"78337420-loader2.exe"=C:\Windows\Temp\78337420-loader2.exe [2011-07-25 247296]
"l1rezerv.exe"=C:\windows\l1rezerv.exe [2011-07-25 232960]
"systemup"=C:\windows\systemup.exe [2011-07-25 114176]
"3521458.exe"=C:\Windows\Temp\3521458.exe [2011-07-25 256000]
"9162557.exe"=C:\Windows\Temp\9162557.exe [2011-07-27 502272]
"7410098.exe"=C:\Users\ROMAN\AppData\Local\Temp\7410098.exe [2011-07-27 502272]
""= []
"ApnUpdater"=C:\Program Files\Ask.com\Updater\Updater.exe [2011-07-07 399312]
"w_distrib.exe"=C:\windows\update.3\svchost.exe [2011-07-29 272896]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe /hide /waitservice []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"Google Update"=C:\Users\ROMAN\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-02 136176]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableSecureUIAPaths"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"msacm.siren"=sirenacm.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2011-07-30 17:36:24 ----D---- C:\Program Files\trend micro
2011-07-30 17:36:23 ----D---- C:\rsit
2011-07-30 17:17:30 ----HD---- C:\windows\update.tray-2-0-lnk
2011-07-30 17:17:30 ----HD---- C:\windows\update.tray-2-0
2011-07-30 17:14:51 ----SHD---- C:\Config.Msi
2011-07-30 16:55:19 ----D---- C:\Users\ROMAN\AppData\Roaming\ATI
2011-07-29 12:16:04 ----A---- C:\windows\system32\Systemdrv.sys
2011-07-29 12:15:20 ----A---- C:\windows\system32\gdiplus.dll
2011-07-29 12:15:17 ----D---- C:\ProgramData\DVDXStudio
2011-07-29 12:15:17 ----D---- C:\Program Files\Aviosoft
2011-07-29 10:15:17 ----A---- C:\windows\w_distrib_iplist.txt
2011-07-29 10:14:48 ----HD---- C:\windows\update.3
2011-07-28 15:55:33 ----D---- C:\windows\Sun
2011-07-28 15:55:00 ----D---- C:\Program Files\Ask.com
2011-07-28 15:54:39 ----D---- C:\ProgramData\Ask
2011-07-28 15:53:43 ----A---- C:\windows\system32\javaws.exe
2011-07-28 15:53:43 ----A---- C:\windows\system32\javaw.exe
2011-07-28 15:53:43 ----A---- C:\windows\system32\java.exe
2011-07-28 15:53:43 ----A---- C:\windows\system32\deployJava1.dll
2011-07-26 21:24:08 ----HD---- C:\ProgramData\Common Files
2011-07-26 21:13:45 ----HD---- C:\windows\update.tray-12-0-lnk
2011-07-26 21:13:45 ----HD---- C:\windows\update.tray-12-0
2011-07-26 21:05:38 ----D---- C:\ProgramData\MFAData
2011-07-25 14:32:57 ----D---- C:\windows\system32\EventProviders
2011-07-25 14:01:42 ----D---- C:\windows\ufa
2011-07-25 14:01:42 ----D---- C:\windows\rpcminer
2011-07-25 14:01:42 ----D---- C:\windows\phoenix
2011-07-25 12:24:26 ----A---- C:\windows\ddh_iplist.txt
2011-07-25 12:24:04 ----A---- C:\windows\systemup.exe
2011-07-25 12:23:17 ----A---- C:\windows\iecheck_iplist.txt
2011-07-25 12:22:25 ----A---- C:\windows\btc_client_iplist.txt
2011-07-25 12:21:41 ----HD---- C:\windows\update.5.0
2011-07-25 12:20:43 ----A---- C:\windows\l1rezerv.exe
2011-07-25 12:19:33 ----HD---- C:\windows\update.2
2011-07-25 12:19:33 ----A---- C:\windows\unrar.exe
2011-07-25 12:18:43 ----A---- C:\windows\sysdriver32_.exe
2011-07-25 12:18:37 ----A---- C:\windows\iplist.txt
2011-07-25 12:18:27 ----A---- C:\windows\sysdriver32.exe
2011-07-25 12:18:10 ----A---- C:\windows\front_ip_list.txt
2011-07-25 12:18:08 ----D---- C:\windows\av_ico
2011-07-25 12:16:39 ----HD---- C:\windows\update.1
2011-07-25 12:16:36 ----HD---- C:\windows\update.tray-7-0-lnk
2011-07-25 12:16:36 ----HD---- C:\windows\update.tray-7-0
2011-07-25 12:05:21 ----A---- C:\windows\winlog-ids.txt
2011-07-25 12:05:21 ----A---- C:\windows\winlog-dirs.txt
2011-07-25 12:05:16 ----A---- C:\windows\services32.exe
2011-07-24 13:41:54 ----D---- C:\ProgramData\Microsoft Help
2011-07-19 21:45:25 ----D---- C:\ProgramData\VirtualizedApplications
2011-07-19 19:44:08 ----D---- C:\Users\ROMAN\AppData\Roaming\Windows Live Writer
2011-07-19 19:38:55 ----RHD---- C:\MSOCache
2011-07-19 19:33:25 ----D---- C:\Users\ROMAN\AppData\Roaming\SoftGrid Client
2011-07-19 19:31:26 ----D---- C:\Program Files\Common Files\DESIGNER
2011-07-19 19:31:24 ----D---- C:\Program Files\Microsoft Application Virtualization Client
2011-07-19 19:30:31 ----D---- C:\Users\ROMAN\AppData\Roaming\TP
2011-07-13 13:25:26 ----D---- C:\ProgramData\QuickMediaConverter
2011-07-13 13:25:18 ----D---- C:\Users\ROMAN\AppData\Roaming\CocoonSoftware
2011-07-13 13:24:56 ----D---- C:\Program Files\QuickMediaConverter
2011-07-13 13:18:52 ----D---- C:\Users\ROMAN\AppData\Roaming\WinRAR
2011-07-13 13:18:44 ----D---- C:\Program Files\WinRAR
2011-07-13 10:43:46 ----A---- C:\windows\system32\drivers\usbport.sys
2011-07-13 10:43:45 ----A---- C:\windows\system32\drivers\usbhub.sys
2011-07-13 10:43:45 ----A---- C:\windows\system32\drivers\usbehci.sys
2011-07-13 10:43:45 ----A---- C:\windows\system32\drivers\usbccgp.sys
2011-07-13 10:43:44 ----A---- C:\windows\system32\drivers\usbuhci.sys
2011-07-13 10:43:44 ----A---- C:\windows\system32\drivers\usbohci.sys
2011-07-13 10:43:44 ----A---- C:\windows\system32\drivers\usbd.sys
2011-07-13 10:43:39 ----A---- C:\windows\system32\esent.dll
2011-07-13 10:43:39 ----A---- C:\windows\system32\drivers\nvstor.sys
2011-07-13 10:43:39 ----A---- C:\windows\system32\drivers\nvraid.sys
2011-07-13 10:43:39 ----A---- C:\windows\system32\drivers\ntfs.sys
2011-07-13 10:43:38 ----A---- C:\windows\system32\fsutil.exe
2011-07-13 10:43:38 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2011-07-13 10:43:38 ----A---- C:\windows\system32\drivers\storport.sys
2011-07-13 10:43:38 ----A---- C:\windows\system32\drivers\iaStorV.sys
2011-07-13 10:43:38 ----A---- C:\windows\system32\drivers\amdxata.sys
2011-07-13 10:43:38 ----A---- C:\windows\system32\drivers\amdsata.sys
2011-07-13 10:43:32 ----A---- C:\windows\system32\winsrv.dll
2011-07-13 10:43:32 ----A---- C:\windows\system32\kernel32.dll
2011-07-13 10:43:32 ----A---- C:\windows\system32\conhost.exe
2011-07-13 10:43:28 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2011-07-13 10:43:28 ----A---- C:\windows\system32\drivers\bthport.sys
2011-07-13 10:43:25 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-13 10:43:25 ----A---- C:\windows\system32\KernelBase.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-13 10:43:24 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-13 10:43:23 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-13 10:43:22 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-13 10:43:22 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-13 10:43:22 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-13 10:43:22 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-13 10:43:20 ----A---- C:\windows\system32\win32k.sys
2011-07-11 06:13:12 ----HD---- C:\ProgramData\CanonBJ
2011-07-11 06:10:02 ----N---- C:\windows\system32\MpSigStub.exe
2011-07-11 05:35:46 ----D---- C:\Users\ROMAN\AppData\Roaming\Google
2011-07-11 05:31:31 ----D---- C:\ProgramData\Google
2011-07-11 05:31:09 ----D---- C:\Program Files\Google
2011-07-11 05:31:00 ----A---- C:\windows\system32\drivers\aswSP.sys
2011-07-11 05:31:00 ----A---- C:\windows\system32\drivers\aswFsBlk.sys
2011-07-11 05:30:57 ----A---- C:\windows\system32\drivers\aswRdr.sys
2011-07-11 05:30:56 ----A---- C:\windows\system32\drivers\aswTdi.sys
2011-07-11 05:30:56 ----A---- C:\windows\system32\drivers\aswSnx.sys
2011-07-11 05:30:52 ----A---- C:\windows\system32\drivers\aswMonFlt.sys
2011-07-11 05:29:55 ----A---- C:\windows\avastSS.scr
2011-07-11 05:29:53 ----A---- C:\windows\system32\aswBoot.exe
2011-07-06 09:24:31 ----D---- C:\ProgramData\Symantec
2011-07-06 09:24:12 ----D---- C:\ProgramData\Norton
2011-07-06 09:24:07 ----D---- C:\ProgramData\NortonInstaller
2011-07-05 14:29:56 ----D---- C:\Program Files\Common Files\DivX Shared
2011-07-05 14:29:09 ----D---- C:\Program Files\DivX
2011-07-05 14:28:17 ----D---- C:\ProgramData\DivX
2011-07-02 12:45:05 ----D---- C:\PFiles
2011-07-01 21:53:23 ----A---- C:\windows\system32\umpnpmgr.dll
2011-07-01 21:52:28 ----A---- C:\windows\system32\tquery.dll
2011-07-01 21:52:28 ----A---- C:\windows\system32\mssrch.dll
2011-07-01 21:52:27 ----A---- C:\windows\system32\SearchIndexer.exe
2011-07-01 21:52:27 ----A---- C:\windows\system32\mssvp.dll
2011-07-01 21:52:26 ----A---- C:\windows\system32\SearchProtocolHost.exe
2011-07-01 21:52:26 ----A---- C:\windows\system32\SearchFilterHost.exe
2011-07-01 21:52:26 ----A---- C:\windows\system32\mssphtb.dll
2011-07-01 21:52:26 ----A---- C:\windows\system32\mssph.dll
2011-07-01 21:52:26 ----A---- C:\windows\system32\msscntrs.dll
======List of files/folders modified in the last 1 month======
2011-07-30 17:36:35 ----D---- C:\windows\Prefetch
2011-07-30 17:36:26 ----D---- C:\windows\Temp
2011-07-30 17:36:24 ----RD---- C:\Program Files
2011-07-30 17:33:30 ----D---- C:\windows\system32\config
2011-07-30 17:28:27 ----D---- C:\windows\System32
2011-07-30 17:28:27 ----D---- C:\Windows
2011-07-30 17:28:22 ----D---- C:\windows\system32\Tasks
2011-07-30 17:19:52 ----D---- C:\ProgramData\VeriFace
2011-07-30 17:16:00 ----SHD---- C:\windows\Installer
2011-07-30 17:15:48 ----D---- C:\windows\system32\DriverStore
2011-07-30 17:15:48 ----D---- C:\windows\system32\drivers
2011-07-30 17:15:48 ----D---- C:\windows\system32\catroot
2011-07-30 17:15:47 ----D---- C:\windows\inf
2011-07-30 17:14:53 ----D---- C:\ProgramData
2011-07-30 17:14:46 ----SHD---- C:\System Volume Information
2011-07-30 17:07:13 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-07-30 15:01:18 ----SD---- C:\Users\ROMAN\AppData\Roaming\Microsoft
2011-07-30 15:01:18 ----SD---- C:\ProgramData\Microsoft
2011-07-29 12:35:09 ----D---- C:\windows\system32\catroot2
2011-07-28 15:53:34 ----D---- C:\Program Files\Java
2011-07-26 19:54:48 ----D---- C:\windows\Tasks
2011-07-26 19:54:48 ----D---- C:\windows\system32\wfp
2011-07-26 19:54:46 ----D---- C:\windows\system32\wbem
2011-07-26 19:54:01 ----D---- C:\windows\system32\drivers\etc
2011-07-26 19:53:57 ----D---- C:\windows\registration
2011-07-24 14:32:55 ----D---- C:\windows\Logs
2011-07-24 13:51:38 ----D---- C:\windows\Microsoft.NET
2011-07-24 13:51:37 ----RSD---- C:\windows\assembly
2011-07-24 13:45:43 ----D---- C:\windows\winsxs
2011-07-24 13:44:18 ----RSD---- C:\windows\Fonts
2011-07-24 13:44:00 ----D---- C:\windows\ShellNew
2011-07-24 13:43:57 ----D---- C:\Program Files\Common Files\microsoft shared
2011-07-24 13:43:17 ----D---- C:\Program Files\Microsoft Office
2011-07-24 13:43:16 ----D---- C:\Program Files\Microsoft.NET
2011-07-19 19:31:26 ----D---- C:\Program Files\Common Files
2011-07-17 11:54:39 ----D---- C:\windows\rescache
2011-07-13 16:28:04 ----D---- C:\windows\system32\cs-CZ
2011-07-13 15:28:44 ----A---- C:\windows\system32\MRT.exe
2011-07-11 11:36:23 ----D---- C:\ProgramData\McAfee
2011-07-11 11:36:23 ----D---- C:\Program Files\McAfee
2011-07-08 10:54:18 ----D---- C:\windows\system32\wdi
2011-07-07 18:58:43 ----D---- C:\windows\ModemLogs
2011-07-06 09:18:23 ----D---- C:\Program Files\Microsoft Silverlight
2011-07-05 21:32:42 ----D---- C:\Program Files\Windows Live
2011-07-05 20:52:37 ----D---- C:\windows\system32\drivers\UMDF
2011-07-05 14:32:46 ----D---- C:\Program Files\Windows Sidebar
2011-07-05 14:32:46 ----D---- C:\Program Files\Windows Photo Viewer
2011-07-05 14:32:46 ----D---- C:\Program Files\Windows Media Player
2011-07-05 14:32:46 ----D---- C:\Program Files\Windows Mail
2011-07-05 14:32:46 ----D---- C:\Program Files\Windows Journal
2011-07-05 14:32:46 ----D---- C:\Program Files\Internet Explorer
2011-07-05 14:32:43 ----D---- C:\windows\ehome
2011-07-05 14:32:43 ----D---- C:\Program Files\Windows Defender
2011-07-05 14:32:43 ----D---- C:\Program Files\Common Files\System
2011-07-05 14:32:42 ----D---- C:\windows\system32\winrm
2011-07-05 14:32:42 ----D---- C:\windows\system32\migwiz
2011-07-05 14:32:42 ----D---- C:\windows\servicing
2011-07-05 14:32:42 ----D---- C:\windows\PolicyDefinitions
2011-07-05 14:32:42 ----D---- C:\windows\en-US
2011-07-05 14:32:41 ----D---- C:\windows\system32\sysprep
2011-07-05 14:32:41 ----D---- C:\windows\system32\slmgr
2011-07-05 14:32:41 ----D---- C:\windows\system32\sk-SK
2011-07-05 14:32:41 ----D---- C:\windows\system32\oobe
2011-07-05 14:32:41 ----D---- C:\windows\system32\en
2011-07-05 14:32:41 ----D---- C:\windows\system32\Boot
2011-07-05 14:32:34 ----D---- C:\windows\system32\en-US
2011-07-05 14:32:34 ----D---- C:\windows\system32\drivers\en-US
2011-07-05 14:32:25 ----D---- C:\windows\system32\WCN
2011-07-05 14:32:25 ----D---- C:\windows\system32\Dism
2011-07-05 14:32:22 ----D---- C:\windows\system32\Printing_Admin_Scripts
2011-07-05 14:32:08 ----D---- C:\Program Files\DVD Maker
2011-07-05 14:31:59 ----D---- C:\windows\Speech
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\windows\system32\DRIVERS\AtiPcie.sys [2009-08-24 14392]
R0 AVGIDSEH;AVGIDSEH; C:\windows\system32\DRIVERS\AVGIDSEH.Sys [2011-02-22 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx86.sys [2011-03-16 32592]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX86.sys [2010-01-15 32352]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 Shockprf;Shockprf; C:\windows\System32\DRIVERS\Apsx86.sys [2009-12-09 119904]
R0 TPDIGIMN;TPDIGIMN; C:\windows\System32\DRIVERS\ApsHM86.sys [2009-12-09 20576]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx86.sys [2011-03-01 34896]
R1 Avgtdix;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdix.sys [2011-04-05 297168]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 epfwwfpr;epfwwfpr; C:\windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 95384]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-09-03 21256]
R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atipmdag.sys [2010-01-14 5281792]
R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2010-01-14 149504]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\windows\system32\drivers\AtiHdmi.sys [2010-01-28 100352]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl6.sys [2010-02-02 2707448]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 btusbflt;Bluetooth USB Filter; C:\windows\system32\drivers\btusbflt.sys [2010-04-08 45736]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-01-15 86056]
R3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2010-01-15 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-01-15 18472]
R3 Cam5607;Lenovo EasyCamera ; C:\windows\System32\Drivers\BisonC07.sys [2010-03-19 1313776]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2010-04-20 3078624]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x86.sys [2010-02-22 66600]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2009-12-02 550760]
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2009-12-02 195944]
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2009-12-02 21864]
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2009-12-02 19304]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-12-10 231600]
R3 wdmirror;wdmirror; C:\windows\system32\DRIVERS\WDMirror.sys [2009-07-16 11792]
S1 Avgldx86;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx86.sys [2011-01-07 248656]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\AVGIDSDriver.Sys [2011-04-14 134480]
S3 AVGIDSFilter;AVGIDSFilter; C:\windows\system32\DRIVERS\AVGIDSFilter.Sys [2011-02-10 24144]
S3 AVGIDSShim;AVGIDSShim; C:\windows\system32\DRIVERS\AVGIDSShim.Sys [2011-02-10 21968]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 Bridge0;Bridge0; C:\windows\system32\drivers\WDBridge.sys [2009-07-28 63240]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2011-04-28 393216]
S3 eamonm;eamonm; C:\windows\system32\DRIVERS\eamonm.sys [2010-12-21 137144]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
S3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60x.sys [2009-07-14 229888]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 pciide;pciide; C:\windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2009-11-11 181792]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WimFltr;WimFltr; C:\windows\system32\DRIVERS\wimfltr.sys [2008-08-06 128104]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 81704]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2010-01-14 172032]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2010-04-20 615712]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
R2 ReadyComm.DirectRouter;ReadyComm.DirectRouter; C:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-07-27 249136]
R2 sftlist;Application Virtualization Client; C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe [2009-12-02 483688]
R2 srvbtcclient;srvbtcclient; C:\windows\update.5.0\svchost.exe [2011-07-26 348672]
R2 srviecheck;srviecheck; C:\windows\update.2\svchost.exe [2011-07-27 502272]
R2 srvsysdriver32;srvsysdriver32; C:\windows\sysdriver32.exe [2011-07-25 256000]
R2 TPHDEXLGSVC;IdeaPad HDD APS Logging Service; C:\windows\System32\TPHDEXLG.exe [2009-12-09 40032]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-02 209768]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe []
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-07-11 136176]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe []
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-07-11 182768]
S3 IGRS;IGRS; C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe [2009-07-15 38152]
S3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [2009-08-14 509192]
S3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [2009-11-17 575304]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PS_MDP;ReadyComm Presentation Space Helper Service; C:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-06-28 1343400]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
-----------------EOF-----------------