Windows XP - Ikony na ploche
Napsal: 30 říj 2011 13:11
Používam Windows XP, facebooku som potreboval skopirovať jednu fotku na plochu. A ono mi to spravilo tiene pod ikonamy na ploche.Bod obnovenia som hneď vyskúšal,nepomohlo. Aj tie tiene pod ikonamy som skúšal v nadstavení vypnúť odfajknutie zas nič. Preto prikladám log.
Ďakujem za pomoc. A ešte niečo tu fotku čo som stiahol zmizla a nemôžem hu nájsť.
Logfile of random's system information tool 1.09 (written by random/random)
Run by ortig at 2011-10-30 12:57:11
Systém Microsoft Windows XP Professional Service Pack 3
System drive I: has 828 GB (94%) free of 881 GB
Total RAM: 3327 MB (65% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:57:36, on 30.10.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
I:\WINDOWS\System32\smss.exe
I:\PROGRA~1\AVG\AVG2012\avgrsx.exe
I:\Program Files\AVG\AVG2012\avgcsrvx.exe
I:\WINDOWS\system32\winlogon.exe
I:\WINDOWS\system32\services.exe
I:\WINDOWS\system32\lsass.exe
I:\WINDOWS\system32\svchost.exe
i:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
I:\WINDOWS\System32\svchost.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\system32\spoolsv.exe
I:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
I:\WINDOWS\Explorer.EXE
I:\Program Files\AVG\AVG2012\avgfws.exe
I:\Program Files\AVG\AVG2012\avgwdsvc.exe
I:\Program Files\Java\jre6\bin\jqs.exe
I:\Program Files\Common Files\LightScribe\LSSrvc.exe
I:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
I:\WINDOWS\system32\nvsvc32.exe
I:\Program Files\SpeechGrid\SpeechGridService.exe
I:\WINDOWS\system32\svchost.exe
I:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe
I:\Program Files\AVG\AVG2012\avgnsx.exe
I:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
I:\Program Files\AVG\AVG2012\avgcsrvx.exe
I:\WINDOWS\RTHDCPL.EXE
I:\Program Files\AVG\AVG2012\avgtray.exe
I:\WINDOWS\system32\RunDLL32.exe
I:\Program Files\PowerISO\PWRISOVM.EXE
I:\Program Files\Microsoft Security Client\msseces.exe
I:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
I:\Program Files\Logitech\SetPointP\SetPoint.exe
I:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
I:\Program Files\ASUS\GamerOSD\GamerOSD.exe
I:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
I:\Program Files\Common Files\Java\Java Update\jusched.exe
I:\WINDOWS\system32\ctfmon.exe
I:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
I:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
I:\Program Files\Mozilla Firefox\firefox.exe
I:\Program Files\Mozilla Firefox\plugin-container.exe
L:\Download\RSIT.exe
I:\Program Files\trend micro\ortig.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.zoznam.sk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - I:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - I:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - I:\Program Files\AVG\AVG2012\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - I:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - I:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - I:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - I:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - I:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - I:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - I:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - I:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AVG_TRAY] "I:\Program Files\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE I:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] I:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [PWRISOVM.EXE] I:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [MSC] "i:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [LWS] I:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [EvtMgr6] I:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
O4 - HKLM\..\Run: [ASUSGamerOSD] I:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [Adobe ARM] "I:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "I:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "I:\Documents and Settings\ortig\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SpybotSD TeaTimer] I:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-861567501-879983540-839522115-1004\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = I:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://I:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - I:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - I:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - I:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - I:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - I:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - I:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 1719450109
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - I:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - I:\Program Files\AVG\AVG2012\avgpp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - I:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - I:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\8.0.1\ViProtocol.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - I:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - I:\WINDOWS\system32\browseui.dll
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - I:\WINDOWS\ATKKBService.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - I:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - I:\Program Files\AVG\AVG2012\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - I:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - I:\Program Files\AVG\AVG2012\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - I:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - I:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - I:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - I:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - I:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - I:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - I:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: SpeechGridService - SpeechGrid - I:\Program Files\SpeechGrid\SpeechGridService.exe
O23 - Service: UMVPFSrv - Logitech Inc. - I:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service: vToolbarUpdater - Unknown owner - I:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe
O24 - Desktop Component 0: (no name) - http://www.facebook.com/></i></a></div><div class=
O24 - Desktop Component 1: (no name) - http://www.facebook.com/ajax/messaging/ ... EEjJjDFBup
--
End of file - 10014 bytes
======Scheduled tasks folder======
I:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-861567501-879983540-839522115-1003Core.job
I:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-861567501-879983540-839522115-1003UA.job
I:\WINDOWS\tasks\MP Scheduled Scan.job
I:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
=========Mozilla firefox=========
ProfilePath - I:\Documents and Settings\ortig\Application Data\Mozilla\Firefox\Profiles\tlwapz0z.default
prefs.js - "browser.startup.homepage" - "www.zoznam.sk"
prefs.js - "keyword.URL" - "http://search.avg.com/route/?d=4e32c90e ... &lng=sk&q="
"{20a82645-c095-46ed-80e3-08825760534b}"=I:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{1E73965B-8B48-48be-9C8D-68B920ABC1C4}"=I:\Program Files\AVG\AVG2012\Firefox4\
"avg@igeared"=I:\Program Files\AVG\AVG10\Toolbar\Firefox\avg@igeared
"jqs@sun.com"=I:\Program Files\Java\jre6\lib\deploy\jqs\ff
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=I:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=I:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=I:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@photodex.com/PhotodexPresenter]
"Description"=Photodex Presenter Plugin
"Path"=I:\Program Files\Photodex Presenter\npPxPlay.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=I:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
I:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
I:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
I:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml
avg_igeared.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml
I:\Documents and Settings\ortig\Application Data\Mozilla\Firefox\Profiles\tlwapz0z.default\extensions\
foxmarks@kei.com
toolbar@ask.com
{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}
I:\Documents and Settings\ortig\Application Data\Mozilla\Firefox\Profiles\tlwapz0z.default\searchplugins\
avg-secure-search.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - I:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - I:\Program Files\AVG\AVG2012\avgssie.dll [2011-09-27 2179936]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - I:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - I:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll [2011-05-30 2495816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - I:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Nero Toolbar - I:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - I:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-03 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - I:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-03 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Nero Toolbar - I:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - I:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll [2011-05-30 2495816]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=I:\WINDOWS\RTHDCPL.EXE [2007-04-12 16132608]
"Alcmtr"=I:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"AVG_TRAY"=I:\Program Files\AVG\AVG2012\avgtray.exe [2011-09-23 2404704]
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit -login []
"NvCplDaemon"=I:\WINDOWS\system32\NvCpl.dll [2011-08-03 13892200]
"nwiz"=I:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2011-07-05 1632360]
"TaskTray"= []
"PWRISOVM.EXE"=I:\Program Files\PowerISO\PWRISOVM.EXE [2009-07-27 180224]
"MSC"=i:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 997920]
"LWS"=I:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [2011-08-12 205336]
"EvtMgr6"=I:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-06-24 1386776]
"ASUSGamerOSD"=I:\Program Files\ASUS\GamerOSD\GamerOSD.exe [2007-07-12 380928]
"Adobe ARM"=I:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"SunJavaUpdateSched"=I:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=I:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
""= []
"Google Update"=I:\Documents and Settings\ortig\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-10-02 136176]
"SpybotSD TeaTimer"=I:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
I:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-18 1848648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
I:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-11 689488]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\facemoods]
I:\Program Files\facemoods.com\facemoods\1.4.17.7\facemoodssrv.exe /md I []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
I:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2011-03-04 2741616]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Vid]
I:\Program Files\Logitech\Vid HD\Vid.exe [2011-01-13 6129496]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
I:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2011-08-31 449608]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
I:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
I:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2011-09-01 966712]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
I:\Program Files\Skype\Phone\Skype.exe [2011-10-13 17351304]
I:\Documents and Settings\All Users\Start Menu\Programs\Startup
Microsoft Office.lnk - I:\Program Files\Microsoft Office\Office10\OSA.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
i:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-06-17 66328]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
I:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - I:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"I:\Program Files\Java\jre6\bin\javaw.exe"="I:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"I:\Program Files\AVG\AVG10\avgmfapx.exe"="I:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:Inštalátor produktu AVG"
"I:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe"="I:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"
"I:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="I:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"I:\Program Files\Logitech\Vid HD\Vid.exe"="I:\Program Files\Logitech\Vid HD\Vid.exe:*:Enabled:Logitech Vid HD"
"I:\Program Files\EA GAMES\Battlefield 2\BF2.exe"="I:\Program Files\EA GAMES\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2"
"I:\Program Files\AVG\AVG2012\avgmfapx.exe"="I:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Inštalátor produktu AVG"
"I:\Program Files\Skype\Phone\Skype.exe"="I:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"I:\Program Files\AVG\AVG2012\avgnsx.exe"="I:\Program Files\AVG\AVG2012\avgnsx.exe:*:Enabled:Webový štít"
"I:\Program Files\AVG\AVG2012\avgdiagex.exe"="I:\Program Files\AVG\AVG2012\avgdiagex.exe:*:Enabled:Diagnostika AVG 2012"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=I:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=I:\WINDOWS\system32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"MSVideo"=vfwwdm32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======List of files/folders created in the last 1 month======
2011-10-30 12:57:11 ----D---- I:\rsit
2011-10-30 12:57:11 ----D---- I:\Program Files\trend micro
2011-10-30 10:34:40 ----D---- I:\Program Files\Spybot - Search & Destroy
2011-10-30 09:09:28 ----A---- I:\WINDOWS\system32\PerfStringBackup.TMP
2011-10-28 20:00:25 ----HD---- I:\Documents and Settings\All Users\Application Data\CanonIJEGV
2011-10-19 14:21:05 ----D---- I:\Program Files\Common Files\Java
2011-10-19 14:20:42 ----A---- I:\WINDOWS\system32\javaws.exe
2011-10-19 14:20:42 ----A---- I:\WINDOWS\system32\javaw.exe
2011-10-19 14:20:42 ----A---- I:\WINDOWS\system32\java.exe
2011-10-13 18:56:11 ----HDC---- I:\WINDOWS\$NtUninstallKB2564958$
2011-10-13 18:49:11 ----HDC---- I:\WINDOWS\$NtUninstallKB2567053$
2011-10-13 18:49:06 ----HDC---- I:\WINDOWS\$NtUninstallKB2592799$
2011-10-13 18:44:41 ----HDC---- I:\WINDOWS\$NtUninstallKB2586448$
2011-10-07 12:28:10 ----A---- I:\WINDOWS\system32\drivers\NBVolUp.sys
2011-10-07 12:28:05 ----A---- I:\WINDOWS\system32\drivers\NBVol.sys
2011-10-07 12:23:41 ----D---- I:\Program Files\Microsoft.NET
2011-10-07 12:21:27 ----A---- I:\WINDOWS\system32\D3DCompiler_43.dll
2011-10-07 12:21:26 ----A---- I:\WINDOWS\system32\d3dcsx_43.dll
2011-10-07 12:21:25 ----A---- I:\WINDOWS\system32\d3dx11_43.dll
2011-10-07 12:21:25 ----A---- I:\WINDOWS\system32\d3dx10_43.dll
2011-10-07 12:21:24 ----A---- I:\WINDOWS\system32\D3DX9_43.dll
2011-10-07 12:20:05 ----HDC---- I:\WINDOWS\$NtUninstallKB942288-v3$
2011-10-01 09:00:25 ----HD---- I:\WINDOWS\PIF
2011-10-01 08:01:47 ----D---- I:\Program Files\Common Files\Windows Live
2011-10-01 07:28:45 ----D---- I:\Documents and Settings\ortig\Application Data\ElevatedDiagnostics
2011-10-01 07:27:11 ----D---- I:\WINDOWS\system32\windowspowershell
2011-10-01 07:27:02 ----HDC---- I:\WINDOWS\$NtUninstallKB926139-v2$
2011-10-01 07:13:40 ----D---- I:\Documents and Settings\ortig\Application Data\AskToolbar
======List of files/folders modified in the last 1 month======
2011-10-30 12:57:11 ----RD---- I:\Program Files
2011-10-30 12:22:04 ----D---- I:\WINDOWS\Temp
2011-10-30 11:45:59 ----D---- I:\Documents and Settings\All Users\Application Data\MFAData
2011-10-30 11:45:56 ----D---- I:\WINDOWS\system32\drivers\AVG
2011-10-30 11:01:39 ----SD---- I:\WINDOWS\Tasks
2011-10-30 10:57:26 ----D---- I:\WINDOWS
2011-10-30 10:57:14 ----D---- I:\WINDOWS\system32\CatRoot2
2011-10-30 10:55:29 ----A---- I:\WINDOWS\SchedLgU.Txt
2011-10-30 10:54:30 ----D---- I:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2011-10-30 10:52:47 ----D---- I:\Documents and Settings\ortig\Application Data\Skype
2011-10-30 10:38:40 ----D---- I:\WINDOWS\system32\drivers\etc
2011-10-30 10:23:16 ----D---- I:\WINDOWS\system32\drivers
2011-10-30 09:09:28 ----D---- I:\WINDOWS\system32
2011-10-30 09:07:44 ----D---- I:\Program Files\MALWAREBYTES ANTI-MALWARE
2011-10-30 09:05:34 ----D---- I:\WINDOWS\system32\config
2011-10-30 09:05:11 ----D---- I:\WINDOWS\system32\wbem
2011-10-30 09:05:10 ----D---- I:\WINDOWS\Registration
2011-10-29 22:57:50 ----D---- I:\WINDOWS\AppPatch
2011-10-29 22:42:26 ----D---- I:\WINDOWS\Prefetch
2011-10-29 22:39:51 ----HD---- I:\WINDOWS\inf
2011-10-28 20:00:22 ----SHD---- I:\Config.Msi
2011-10-28 16:00:02 ----A---- I:\WINDOWS\NeroDigital.ini
2011-10-28 08:29:40 ----D---- I:\WINDOWS\system32\Restore
2011-10-26 19:18:08 ----D---- I:\Documents and Settings\ortig\Application Data\Vso
2011-10-24 20:50:10 ----SHD---- I:\WINDOWS\Installer
2011-10-24 20:48:07 ----RSHDC---- I:\WINDOWS\system32\dllcache
2011-10-23 14:34:19 ----AD---- I:\Documents and Settings\All Users\Application Data\TEMP
2011-10-21 11:41:30 ----D---- I:\Program Files\JDownloader
2011-10-19 14:21:05 ----D---- I:\Program Files\Common Files
2011-10-19 14:20:39 ----D---- I:\Program Files\Java
2011-10-14 23:03:47 ----D---- I:\WINDOWS\Debug
2011-10-14 23:02:03 ----D---- I:\Program Files\CCleaner
2011-10-14 04:55:27 ----RSD---- I:\WINDOWS\assembly
2011-10-14 04:55:11 ----D---- I:\WINDOWS\Microsoft.NET
2011-10-13 23:21:37 ----RD---- I:\Program Files\Skype
2011-10-13 18:55:49 ----A---- I:\WINDOWS\system32\PerfStringBackup.INI
2011-10-13 18:55:22 ----D---- I:\WINDOWS\WinSxS
2011-10-13 18:49:17 ----A---- I:\WINDOWS\system32\MRT.exe
2011-10-13 18:49:06 ----HD---- I:\WINDOWS\$hf_mig$
2011-10-12 09:01:40 ----D---- I:\Program Files\Common Files\Nero
2011-10-12 08:55:32 ----D---- I:\Program Files\Nero
2011-10-11 19:23:33 ----D---- I:\WINDOWS\Logs
2011-10-11 13:58:43 ----D---- I:\WINDOWS\system32\DirectX
2011-10-09 09:56:36 ----D---- I:\Program Files\Mozilla Thunderbird
2011-10-07 12:44:25 ----D---- I:\Documents and Settings\ortig\Application Data\Nero
2011-10-07 12:43:11 ----D---- I:\WINDOWS\Cursors
2011-10-07 12:43:02 ----D---- I:\Documents and Settings\All Users\Application Data\Nero
2011-10-07 12:28:10 ----DC---- I:\WINDOWS\system32\DRVSTORE
2011-10-07 12:27:51 ----D---- I:\Program Files\Common Files\LightScribe
2011-10-07 12:20:35 ----A---- I:\WINDOWS\system32\_000121_.TMP.DLL
2011-10-07 12:20:32 ----D---- I:\WINDOWS\system32\mui
2011-10-03 04:06:03 ----A---- I:\WINDOWS\system32\deployJava1.dll
2011-10-01 08:01:30 ----SD---- I:\Documents and Settings\All Users\Application Data\Microsoft
2011-10-01 07:54:08 ----D---- I:\Program Files\Google
2011-10-01 07:13:44 ----D---- I:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSEH;AVGIDSEH; I:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys [2011-07-11 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver; I:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2011-09-13 32592]
R0 NBVol;Nero Backup Volume Filter Driver; I:\WINDOWS\system32\DRIVERS\NBVol.sys [2011-07-13 56496]
R0 NBVolUp;Nero Backup Volume Upper Filter Driver; I:\WINDOWS\system32\DRIVERS\NBVolUp.sys [2011-07-13 12464]
R0 ohci1394;VIA OHCI Compliant IEEE 1394 Host Controller; I:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; I:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 asuskbnt;Enhanced Display Driver Helper Service; I:\WINDOWS\system32\drivers\atkkbnt.sys [2007-07-12 11136]
R1 Avgldx86;AVG AVI Loader Driver; I:\WINDOWS\system32\DRIVERS\avgldx86.sys [2011-07-11 229840]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; I:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2011-08-08 40016]
R1 Avgtdix;AVG TDI Driver; I:\WINDOWS\system32\DRIVERS\avgtdix.sys [2011-07-11 295248]
R1 EIO;EIO; \??\I:\WINDOWS\system32\drivers\EIO.sys []
R1 intelppm;Intel Processor Driver; I:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 kbdhid;Keyboard HID Driver; I:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
R1 MpFilter;Microsoft Malware Protection Driver; I:\WINDOWS\system32\DRIVERS\MpFilter.sys [2011-04-18 165648]
R1 MpKslb5ba5901;MpKslb5ba5901; \??\i:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{CE00980E-106E-4ABA-95A1-89D86AF8C941}\MpKslb5ba5901.sys []
R1 SCDEmu;SCDEmu; I:\WINDOWS\system32\drivers\SCDEmu.sys [2009-07-27 58908]
R2 LBeepKE;Logitech Beep Suppression Driver; I:\WINDOWS\System32\Drivers\LBeepKE.sys [2011-04-30 12184]
R3 Arp1394;1394 ARP Client Protocol; I:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 asusgsb;ASUS Virtual Video Capture Device Driver; I:\WINDOWS\system32\drivers\asusgsb.sys [2007-07-12 12416]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller; I:\WINDOWS\system32\DRIVERS\l151x86.sys [2009-04-06 37376]
R3 Avgfwdx;Avgfwdx; I:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2011-05-23 30944]
R3 AVGIDSDriver;AVGIDSDriver; I:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys [2011-07-11 134608]
R3 AVGIDSFilter;AVGIDSFilter; I:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys [2011-07-11 24272]
R3 AVGIDSShim;AVGIDSShim; I:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys [2011-07-11 16720]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; I:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; I:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); I:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-23 4402176]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; I:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2011-04-30 41240]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; I:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2011-04-30 39064]
R3 LVRS;Logitech RightSound Filter Driver; I:\WINDOWS\system32\DRIVERS\lvrs.sys [2011-08-19 315808]
R3 LVUVC;QuickCam Orbit/Sphere AF(UVC); I:\WINDOWS\system32\DRIVERS\lvuvc.sys [2011-08-19 4334624]
R3 mouhid;Mouse HID Driver; I:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; I:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; I:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; I:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-08-03 12542592]
R3 usbaudio;USB Audio Driver (WDM); I:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Microsoft USB Generic Parent Driver; I:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbstor;USB Mass Storage Driver; I:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; I:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Video3D;ASUS Video3D Service; I:\WINDOWS\System32\Drivers\Video3D32.sys [2007-07-12 10752]
R3 Wdf01000;Kernel Mode Driver Frameworks service; I:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S1 klbugotm;klbugotm; \??\I:\WINDOWS\system32\drivers\klbugotm.sys []
S1 MpKsl66d216a1;MpKsl66d216a1; \??\i:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{FEFD8E68-69E5-4131-A364-A62B670B9070}\MpKsl66d216a1.sys []
S1 MpKsl798393d1;MpKsl798393d1; \??\i:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2CD520F7-D556-49C7-8A60-4261EB6E925B}\MpKsl798393d1.sys []
S1 MpKsle63aab18;MpKsle63aab18; \??\i:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{6BC91B02-8D4D-4881-AF44-DA9903D81FC2}\MpKsle63aab18.sys []
S1 MpKsleb2f36c3;MpKsleb2f36c3; \??\i:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{3D9A05CC-8DD8-48D2-A0F3-242470FFD7B0}\MpKsleb2f36c3.sys []
S1 qtudkgmn;qtudkgmn; \??\I:\WINDOWS\system32\drivers\qtudkgmn.sys []
S1 wgvhhdzp;wgvhhdzp; \??\I:\WINDOWS\system32\drivers\wgvhhdzp.sys []
S3 Avgfwfd;AVG network filter service; I:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2011-05-23 30944]
S3 CCDECODE;Closed Caption Decoder; I:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; I:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; I:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; I:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; I:\WINDOWS\system32\drivers\ccdcmb.sys [2011-05-18 18176]
S3 nmwcdc;Nokia USB Communication Driver; I:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-05-18 23168]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; I:\WINDOWS\system32\drivers\nmwcdnsu.sys [2011-05-18 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic; I:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2011-05-18 8576]
S3 pccsmcfd;PCCS Mode Change Filter Driver; I:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; I:\WINDOWS\System32\Drivers\RootMdm.sys [2007-07-27 5888]
S3 SLIP;BDA Slip De-Framer; I:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; I:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; I:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-05-18 8192]
S3 usbprint;Microsoft USB PRINTER Class; I:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; I:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; I:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; I:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-05-18 8192]
S3 usbvideo;USB Video Device (WDM); I:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WpdUsb;WpdUsb; I:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; I:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; I:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avgfws;AVG Firewall; I:\Program Files\AVG\AVG2012\avgfws.exe [2011-08-19 2399560]
R2 AVGIDSAgent;AVGIDSAgent; I:\Program Files\AVG\AVG2012\AVGIDSAgent.exe [2011-09-12 5265248]
R2 avgwd;AVG WatchDog; I:\Program Files\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]
R2 JavaQuickStarterService;Java Quick Starter; I:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; I:\Program Files\Common Files\LightScribe\LSSrvc.exe [2011-03-04 73728]
R2 MsMpSvc;Microsoft Antimalware Service; i:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 11736]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; I:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2010-05-18 935208]
R2 NVSvc;NVIDIA Driver Helper Service; I:\WINDOWS\system32\nvsvc32.exe [2011-08-03 146024]
R2 nvUpdatusService;NVIDIA Update Service Daemon; I:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-03 2255464]
R2 SpeechGridService;SpeechGridService; I:\Program Files\SpeechGrid\SpeechGridService.exe [2011-09-09 47984]
R2 UMVPFSrv;UMVPFSrv; I:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2011-08-19 450848]
R2 vToolbarUpdater;vToolbarUpdater; I:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe [2011-09-11 246600]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; I:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATKKeyboardService;ATK Keyboard Service; I:\WINDOWS\ATKKBService.exe [2007-07-12 257024]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; I:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; I:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; I:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe [2011-05-30 1025352]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; I:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; I:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; I:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; I:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LBTServ;Logitech Bluetooth Service; I:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-06-17 295192]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; I:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; I:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 ServiceLayer;ServiceLayer; I:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
-----------------EOF-----------------
Ďakujem za pomoc. A ešte niečo tu fotku čo som stiahol zmizla a nemôžem hu nájsť.
Logfile of random's system information tool 1.09 (written by random/random)
Run by ortig at 2011-10-30 12:57:11
Systém Microsoft Windows XP Professional Service Pack 3
System drive I: has 828 GB (94%) free of 881 GB
Total RAM: 3327 MB (65% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:57:36, on 30.10.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
I:\WINDOWS\System32\smss.exe
I:\PROGRA~1\AVG\AVG2012\avgrsx.exe
I:\Program Files\AVG\AVG2012\avgcsrvx.exe
I:\WINDOWS\system32\winlogon.exe
I:\WINDOWS\system32\services.exe
I:\WINDOWS\system32\lsass.exe
I:\WINDOWS\system32\svchost.exe
i:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
I:\WINDOWS\System32\svchost.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\system32\spoolsv.exe
I:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
I:\WINDOWS\Explorer.EXE
I:\Program Files\AVG\AVG2012\avgfws.exe
I:\Program Files\AVG\AVG2012\avgwdsvc.exe
I:\Program Files\Java\jre6\bin\jqs.exe
I:\Program Files\Common Files\LightScribe\LSSrvc.exe
I:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
I:\WINDOWS\system32\nvsvc32.exe
I:\Program Files\SpeechGrid\SpeechGridService.exe
I:\WINDOWS\system32\svchost.exe
I:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe
I:\Program Files\AVG\AVG2012\avgnsx.exe
I:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
I:\Program Files\AVG\AVG2012\avgcsrvx.exe
I:\WINDOWS\RTHDCPL.EXE
I:\Program Files\AVG\AVG2012\avgtray.exe
I:\WINDOWS\system32\RunDLL32.exe
I:\Program Files\PowerISO\PWRISOVM.EXE
I:\Program Files\Microsoft Security Client\msseces.exe
I:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
I:\Program Files\Logitech\SetPointP\SetPoint.exe
I:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
I:\Program Files\ASUS\GamerOSD\GamerOSD.exe
I:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
I:\Program Files\Common Files\Java\Java Update\jusched.exe
I:\WINDOWS\system32\ctfmon.exe
I:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
I:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
I:\Program Files\Mozilla Firefox\firefox.exe
I:\Program Files\Mozilla Firefox\plugin-container.exe
L:\Download\RSIT.exe
I:\Program Files\trend micro\ortig.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.zoznam.sk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - I:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - I:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - I:\Program Files\AVG\AVG2012\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - I:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - I:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - I:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - I:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - I:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - I:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - I:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - I:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AVG_TRAY] "I:\Program Files\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE I:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] I:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [PWRISOVM.EXE] I:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [MSC] "i:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [LWS] I:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [EvtMgr6] I:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
O4 - HKLM\..\Run: [ASUSGamerOSD] I:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [Adobe ARM] "I:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "I:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "I:\Documents and Settings\ortig\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SpybotSD TeaTimer] I:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-861567501-879983540-839522115-1004\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = I:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://I:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - I:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - I:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - I:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - I:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - I:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - I:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 1719450109
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - I:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - I:\Program Files\AVG\AVG2012\avgpp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - I:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - I:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\8.0.1\ViProtocol.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - I:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - I:\WINDOWS\system32\browseui.dll
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - I:\WINDOWS\ATKKBService.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - I:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - I:\Program Files\AVG\AVG2012\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - I:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - I:\Program Files\AVG\AVG2012\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - I:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - I:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - I:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - I:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - I:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - I:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - I:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: SpeechGridService - SpeechGrid - I:\Program Files\SpeechGrid\SpeechGridService.exe
O23 - Service: UMVPFSrv - Logitech Inc. - I:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service: vToolbarUpdater - Unknown owner - I:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe
O24 - Desktop Component 0: (no name) - http://www.facebook.com/></i></a></div><div class=
O24 - Desktop Component 1: (no name) - http://www.facebook.com/ajax/messaging/ ... EEjJjDFBup
--
End of file - 10014 bytes
======Scheduled tasks folder======
I:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-861567501-879983540-839522115-1003Core.job
I:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-861567501-879983540-839522115-1003UA.job
I:\WINDOWS\tasks\MP Scheduled Scan.job
I:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
=========Mozilla firefox=========
ProfilePath - I:\Documents and Settings\ortig\Application Data\Mozilla\Firefox\Profiles\tlwapz0z.default
prefs.js - "browser.startup.homepage" - "www.zoznam.sk"
prefs.js - "keyword.URL" - "http://search.avg.com/route/?d=4e32c90e ... &lng=sk&q="
"{20a82645-c095-46ed-80e3-08825760534b}"=I:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{1E73965B-8B48-48be-9C8D-68B920ABC1C4}"=I:\Program Files\AVG\AVG2012\Firefox4\
"avg@igeared"=I:\Program Files\AVG\AVG10\Toolbar\Firefox\avg@igeared
"jqs@sun.com"=I:\Program Files\Java\jre6\lib\deploy\jqs\ff
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=I:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=I:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=I:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@photodex.com/PhotodexPresenter]
"Description"=Photodex Presenter Plugin
"Path"=I:\Program Files\Photodex Presenter\npPxPlay.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=I:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
I:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
I:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
I:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml
avg_igeared.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml
I:\Documents and Settings\ortig\Application Data\Mozilla\Firefox\Profiles\tlwapz0z.default\extensions\
foxmarks@kei.com
toolbar@ask.com
{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}
I:\Documents and Settings\ortig\Application Data\Mozilla\Firefox\Profiles\tlwapz0z.default\searchplugins\
avg-secure-search.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - I:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - I:\Program Files\AVG\AVG2012\avgssie.dll [2011-09-27 2179936]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - I:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - I:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll [2011-05-30 2495816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - I:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Nero Toolbar - I:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - I:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-03 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - I:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-03 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Nero Toolbar - I:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - I:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll [2011-05-30 2495816]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=I:\WINDOWS\RTHDCPL.EXE [2007-04-12 16132608]
"Alcmtr"=I:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"AVG_TRAY"=I:\Program Files\AVG\AVG2012\avgtray.exe [2011-09-23 2404704]
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit -login []
"NvCplDaemon"=I:\WINDOWS\system32\NvCpl.dll [2011-08-03 13892200]
"nwiz"=I:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2011-07-05 1632360]
"TaskTray"= []
"PWRISOVM.EXE"=I:\Program Files\PowerISO\PWRISOVM.EXE [2009-07-27 180224]
"MSC"=i:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 997920]
"LWS"=I:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [2011-08-12 205336]
"EvtMgr6"=I:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-06-24 1386776]
"ASUSGamerOSD"=I:\Program Files\ASUS\GamerOSD\GamerOSD.exe [2007-07-12 380928]
"Adobe ARM"=I:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"SunJavaUpdateSched"=I:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=I:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
""= []
"Google Update"=I:\Documents and Settings\ortig\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-10-02 136176]
"SpybotSD TeaTimer"=I:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
I:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-18 1848648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
I:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-11 689488]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\facemoods]
I:\Program Files\facemoods.com\facemoods\1.4.17.7\facemoodssrv.exe /md I []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
I:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2011-03-04 2741616]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Vid]
I:\Program Files\Logitech\Vid HD\Vid.exe [2011-01-13 6129496]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
I:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2011-08-31 449608]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
I:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
I:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2011-09-01 966712]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
I:\Program Files\Skype\Phone\Skype.exe [2011-10-13 17351304]
I:\Documents and Settings\All Users\Start Menu\Programs\Startup
Microsoft Office.lnk - I:\Program Files\Microsoft Office\Office10\OSA.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
i:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-06-17 66328]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
I:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - I:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"I:\Program Files\Java\jre6\bin\javaw.exe"="I:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"I:\Program Files\AVG\AVG10\avgmfapx.exe"="I:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:Inštalátor produktu AVG"
"I:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe"="I:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"
"I:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="I:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"I:\Program Files\Logitech\Vid HD\Vid.exe"="I:\Program Files\Logitech\Vid HD\Vid.exe:*:Enabled:Logitech Vid HD"
"I:\Program Files\EA GAMES\Battlefield 2\BF2.exe"="I:\Program Files\EA GAMES\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2"
"I:\Program Files\AVG\AVG2012\avgmfapx.exe"="I:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Inštalátor produktu AVG"
"I:\Program Files\Skype\Phone\Skype.exe"="I:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"I:\Program Files\AVG\AVG2012\avgnsx.exe"="I:\Program Files\AVG\AVG2012\avgnsx.exe:*:Enabled:Webový štít"
"I:\Program Files\AVG\AVG2012\avgdiagex.exe"="I:\Program Files\AVG\AVG2012\avgdiagex.exe:*:Enabled:Diagnostika AVG 2012"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=I:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=I:\WINDOWS\system32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"MSVideo"=vfwwdm32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======List of files/folders created in the last 1 month======
2011-10-30 12:57:11 ----D---- I:\rsit
2011-10-30 12:57:11 ----D---- I:\Program Files\trend micro
2011-10-30 10:34:40 ----D---- I:\Program Files\Spybot - Search & Destroy
2011-10-30 09:09:28 ----A---- I:\WINDOWS\system32\PerfStringBackup.TMP
2011-10-28 20:00:25 ----HD---- I:\Documents and Settings\All Users\Application Data\CanonIJEGV
2011-10-19 14:21:05 ----D---- I:\Program Files\Common Files\Java
2011-10-19 14:20:42 ----A---- I:\WINDOWS\system32\javaws.exe
2011-10-19 14:20:42 ----A---- I:\WINDOWS\system32\javaw.exe
2011-10-19 14:20:42 ----A---- I:\WINDOWS\system32\java.exe
2011-10-13 18:56:11 ----HDC---- I:\WINDOWS\$NtUninstallKB2564958$
2011-10-13 18:49:11 ----HDC---- I:\WINDOWS\$NtUninstallKB2567053$
2011-10-13 18:49:06 ----HDC---- I:\WINDOWS\$NtUninstallKB2592799$
2011-10-13 18:44:41 ----HDC---- I:\WINDOWS\$NtUninstallKB2586448$
2011-10-07 12:28:10 ----A---- I:\WINDOWS\system32\drivers\NBVolUp.sys
2011-10-07 12:28:05 ----A---- I:\WINDOWS\system32\drivers\NBVol.sys
2011-10-07 12:23:41 ----D---- I:\Program Files\Microsoft.NET
2011-10-07 12:21:27 ----A---- I:\WINDOWS\system32\D3DCompiler_43.dll
2011-10-07 12:21:26 ----A---- I:\WINDOWS\system32\d3dcsx_43.dll
2011-10-07 12:21:25 ----A---- I:\WINDOWS\system32\d3dx11_43.dll
2011-10-07 12:21:25 ----A---- I:\WINDOWS\system32\d3dx10_43.dll
2011-10-07 12:21:24 ----A---- I:\WINDOWS\system32\D3DX9_43.dll
2011-10-07 12:20:05 ----HDC---- I:\WINDOWS\$NtUninstallKB942288-v3$
2011-10-01 09:00:25 ----HD---- I:\WINDOWS\PIF
2011-10-01 08:01:47 ----D---- I:\Program Files\Common Files\Windows Live
2011-10-01 07:28:45 ----D---- I:\Documents and Settings\ortig\Application Data\ElevatedDiagnostics
2011-10-01 07:27:11 ----D---- I:\WINDOWS\system32\windowspowershell
2011-10-01 07:27:02 ----HDC---- I:\WINDOWS\$NtUninstallKB926139-v2$
2011-10-01 07:13:40 ----D---- I:\Documents and Settings\ortig\Application Data\AskToolbar
======List of files/folders modified in the last 1 month======
2011-10-30 12:57:11 ----RD---- I:\Program Files
2011-10-30 12:22:04 ----D---- I:\WINDOWS\Temp
2011-10-30 11:45:59 ----D---- I:\Documents and Settings\All Users\Application Data\MFAData
2011-10-30 11:45:56 ----D---- I:\WINDOWS\system32\drivers\AVG
2011-10-30 11:01:39 ----SD---- I:\WINDOWS\Tasks
2011-10-30 10:57:26 ----D---- I:\WINDOWS
2011-10-30 10:57:14 ----D---- I:\WINDOWS\system32\CatRoot2
2011-10-30 10:55:29 ----A---- I:\WINDOWS\SchedLgU.Txt
2011-10-30 10:54:30 ----D---- I:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2011-10-30 10:52:47 ----D---- I:\Documents and Settings\ortig\Application Data\Skype
2011-10-30 10:38:40 ----D---- I:\WINDOWS\system32\drivers\etc
2011-10-30 10:23:16 ----D---- I:\WINDOWS\system32\drivers
2011-10-30 09:09:28 ----D---- I:\WINDOWS\system32
2011-10-30 09:07:44 ----D---- I:\Program Files\MALWAREBYTES ANTI-MALWARE
2011-10-30 09:05:34 ----D---- I:\WINDOWS\system32\config
2011-10-30 09:05:11 ----D---- I:\WINDOWS\system32\wbem
2011-10-30 09:05:10 ----D---- I:\WINDOWS\Registration
2011-10-29 22:57:50 ----D---- I:\WINDOWS\AppPatch
2011-10-29 22:42:26 ----D---- I:\WINDOWS\Prefetch
2011-10-29 22:39:51 ----HD---- I:\WINDOWS\inf
2011-10-28 20:00:22 ----SHD---- I:\Config.Msi
2011-10-28 16:00:02 ----A---- I:\WINDOWS\NeroDigital.ini
2011-10-28 08:29:40 ----D---- I:\WINDOWS\system32\Restore
2011-10-26 19:18:08 ----D---- I:\Documents and Settings\ortig\Application Data\Vso
2011-10-24 20:50:10 ----SHD---- I:\WINDOWS\Installer
2011-10-24 20:48:07 ----RSHDC---- I:\WINDOWS\system32\dllcache
2011-10-23 14:34:19 ----AD---- I:\Documents and Settings\All Users\Application Data\TEMP
2011-10-21 11:41:30 ----D---- I:\Program Files\JDownloader
2011-10-19 14:21:05 ----D---- I:\Program Files\Common Files
2011-10-19 14:20:39 ----D---- I:\Program Files\Java
2011-10-14 23:03:47 ----D---- I:\WINDOWS\Debug
2011-10-14 23:02:03 ----D---- I:\Program Files\CCleaner
2011-10-14 04:55:27 ----RSD---- I:\WINDOWS\assembly
2011-10-14 04:55:11 ----D---- I:\WINDOWS\Microsoft.NET
2011-10-13 23:21:37 ----RD---- I:\Program Files\Skype
2011-10-13 18:55:49 ----A---- I:\WINDOWS\system32\PerfStringBackup.INI
2011-10-13 18:55:22 ----D---- I:\WINDOWS\WinSxS
2011-10-13 18:49:17 ----A---- I:\WINDOWS\system32\MRT.exe
2011-10-13 18:49:06 ----HD---- I:\WINDOWS\$hf_mig$
2011-10-12 09:01:40 ----D---- I:\Program Files\Common Files\Nero
2011-10-12 08:55:32 ----D---- I:\Program Files\Nero
2011-10-11 19:23:33 ----D---- I:\WINDOWS\Logs
2011-10-11 13:58:43 ----D---- I:\WINDOWS\system32\DirectX
2011-10-09 09:56:36 ----D---- I:\Program Files\Mozilla Thunderbird
2011-10-07 12:44:25 ----D---- I:\Documents and Settings\ortig\Application Data\Nero
2011-10-07 12:43:11 ----D---- I:\WINDOWS\Cursors
2011-10-07 12:43:02 ----D---- I:\Documents and Settings\All Users\Application Data\Nero
2011-10-07 12:28:10 ----DC---- I:\WINDOWS\system32\DRVSTORE
2011-10-07 12:27:51 ----D---- I:\Program Files\Common Files\LightScribe
2011-10-07 12:20:35 ----A---- I:\WINDOWS\system32\_000121_.TMP.DLL
2011-10-07 12:20:32 ----D---- I:\WINDOWS\system32\mui
2011-10-03 04:06:03 ----A---- I:\WINDOWS\system32\deployJava1.dll
2011-10-01 08:01:30 ----SD---- I:\Documents and Settings\All Users\Application Data\Microsoft
2011-10-01 07:54:08 ----D---- I:\Program Files\Google
2011-10-01 07:13:44 ----D---- I:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSEH;AVGIDSEH; I:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys [2011-07-11 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver; I:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2011-09-13 32592]
R0 NBVol;Nero Backup Volume Filter Driver; I:\WINDOWS\system32\DRIVERS\NBVol.sys [2011-07-13 56496]
R0 NBVolUp;Nero Backup Volume Upper Filter Driver; I:\WINDOWS\system32\DRIVERS\NBVolUp.sys [2011-07-13 12464]
R0 ohci1394;VIA OHCI Compliant IEEE 1394 Host Controller; I:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; I:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 asuskbnt;Enhanced Display Driver Helper Service; I:\WINDOWS\system32\drivers\atkkbnt.sys [2007-07-12 11136]
R1 Avgldx86;AVG AVI Loader Driver; I:\WINDOWS\system32\DRIVERS\avgldx86.sys [2011-07-11 229840]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; I:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2011-08-08 40016]
R1 Avgtdix;AVG TDI Driver; I:\WINDOWS\system32\DRIVERS\avgtdix.sys [2011-07-11 295248]
R1 EIO;EIO; \??\I:\WINDOWS\system32\drivers\EIO.sys []
R1 intelppm;Intel Processor Driver; I:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 kbdhid;Keyboard HID Driver; I:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
R1 MpFilter;Microsoft Malware Protection Driver; I:\WINDOWS\system32\DRIVERS\MpFilter.sys [2011-04-18 165648]
R1 MpKslb5ba5901;MpKslb5ba5901; \??\i:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{CE00980E-106E-4ABA-95A1-89D86AF8C941}\MpKslb5ba5901.sys []
R1 SCDEmu;SCDEmu; I:\WINDOWS\system32\drivers\SCDEmu.sys [2009-07-27 58908]
R2 LBeepKE;Logitech Beep Suppression Driver; I:\WINDOWS\System32\Drivers\LBeepKE.sys [2011-04-30 12184]
R3 Arp1394;1394 ARP Client Protocol; I:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 asusgsb;ASUS Virtual Video Capture Device Driver; I:\WINDOWS\system32\drivers\asusgsb.sys [2007-07-12 12416]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller; I:\WINDOWS\system32\DRIVERS\l151x86.sys [2009-04-06 37376]
R3 Avgfwdx;Avgfwdx; I:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2011-05-23 30944]
R3 AVGIDSDriver;AVGIDSDriver; I:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys [2011-07-11 134608]
R3 AVGIDSFilter;AVGIDSFilter; I:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys [2011-07-11 24272]
R3 AVGIDSShim;AVGIDSShim; I:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys [2011-07-11 16720]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; I:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; I:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); I:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-23 4402176]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; I:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2011-04-30 41240]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; I:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2011-04-30 39064]
R3 LVRS;Logitech RightSound Filter Driver; I:\WINDOWS\system32\DRIVERS\lvrs.sys [2011-08-19 315808]
R3 LVUVC;QuickCam Orbit/Sphere AF(UVC); I:\WINDOWS\system32\DRIVERS\lvuvc.sys [2011-08-19 4334624]
R3 mouhid;Mouse HID Driver; I:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; I:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; I:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; I:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-08-03 12542592]
R3 usbaudio;USB Audio Driver (WDM); I:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Microsoft USB Generic Parent Driver; I:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbstor;USB Mass Storage Driver; I:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; I:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Video3D;ASUS Video3D Service; I:\WINDOWS\System32\Drivers\Video3D32.sys [2007-07-12 10752]
R3 Wdf01000;Kernel Mode Driver Frameworks service; I:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S1 klbugotm;klbugotm; \??\I:\WINDOWS\system32\drivers\klbugotm.sys []
S1 MpKsl66d216a1;MpKsl66d216a1; \??\i:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{FEFD8E68-69E5-4131-A364-A62B670B9070}\MpKsl66d216a1.sys []
S1 MpKsl798393d1;MpKsl798393d1; \??\i:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2CD520F7-D556-49C7-8A60-4261EB6E925B}\MpKsl798393d1.sys []
S1 MpKsle63aab18;MpKsle63aab18; \??\i:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{6BC91B02-8D4D-4881-AF44-DA9903D81FC2}\MpKsle63aab18.sys []
S1 MpKsleb2f36c3;MpKsleb2f36c3; \??\i:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{3D9A05CC-8DD8-48D2-A0F3-242470FFD7B0}\MpKsleb2f36c3.sys []
S1 qtudkgmn;qtudkgmn; \??\I:\WINDOWS\system32\drivers\qtudkgmn.sys []
S1 wgvhhdzp;wgvhhdzp; \??\I:\WINDOWS\system32\drivers\wgvhhdzp.sys []
S3 Avgfwfd;AVG network filter service; I:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2011-05-23 30944]
S3 CCDECODE;Closed Caption Decoder; I:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; I:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; I:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; I:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; I:\WINDOWS\system32\drivers\ccdcmb.sys [2011-05-18 18176]
S3 nmwcdc;Nokia USB Communication Driver; I:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-05-18 23168]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; I:\WINDOWS\system32\drivers\nmwcdnsu.sys [2011-05-18 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic; I:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2011-05-18 8576]
S3 pccsmcfd;PCCS Mode Change Filter Driver; I:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; I:\WINDOWS\System32\Drivers\RootMdm.sys [2007-07-27 5888]
S3 SLIP;BDA Slip De-Framer; I:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; I:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; I:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-05-18 8192]
S3 usbprint;Microsoft USB PRINTER Class; I:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; I:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; I:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; I:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-05-18 8192]
S3 usbvideo;USB Video Device (WDM); I:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WpdUsb;WpdUsb; I:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; I:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; I:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avgfws;AVG Firewall; I:\Program Files\AVG\AVG2012\avgfws.exe [2011-08-19 2399560]
R2 AVGIDSAgent;AVGIDSAgent; I:\Program Files\AVG\AVG2012\AVGIDSAgent.exe [2011-09-12 5265248]
R2 avgwd;AVG WatchDog; I:\Program Files\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]
R2 JavaQuickStarterService;Java Quick Starter; I:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; I:\Program Files\Common Files\LightScribe\LSSrvc.exe [2011-03-04 73728]
R2 MsMpSvc;Microsoft Antimalware Service; i:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 11736]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; I:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2010-05-18 935208]
R2 NVSvc;NVIDIA Driver Helper Service; I:\WINDOWS\system32\nvsvc32.exe [2011-08-03 146024]
R2 nvUpdatusService;NVIDIA Update Service Daemon; I:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-03 2255464]
R2 SpeechGridService;SpeechGridService; I:\Program Files\SpeechGrid\SpeechGridService.exe [2011-09-09 47984]
R2 UMVPFSrv;UMVPFSrv; I:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2011-08-19 450848]
R2 vToolbarUpdater;vToolbarUpdater; I:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe [2011-09-11 246600]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; I:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATKKeyboardService;ATK Keyboard Service; I:\WINDOWS\ATKKBService.exe [2007-07-12 257024]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; I:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; I:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; I:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe [2011-05-30 1025352]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; I:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; I:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; I:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; I:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LBTServ;Logitech Bluetooth Service; I:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-06-17 295192]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; I:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; I:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 ServiceLayer;ServiceLayer; I:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
-----------------EOF-----------------