Stránka 1 z 3

prosim o kontrolu logu NB

Napsal: 14 pro 2011 00:16
od t420
Pratele, mam problem (aspon predpokladam) v tom, ze mi neustale bezi "Plug&Play" sluzba a jine, coz vytezuje procesor neustale na cca 25% a to ihned po startu, byt nemam spusteno defacto nic - bezi "naprazdno". Obcas se mi stane ze NB zamrzne a vypise mi modrou obrazovku - neco ohledne USB chyby (asi externi HD), nicmene dle me to ma souvislost prave s onim "Plug&Play" - pocitac neustale asi neco hleda, byt mam vzdy posledni updaty (aspon predpokladam) vseho, co pouzivam. Jsem z toho na palici, protoze pak NB neni spolehlivy - nelze je jej pouzit. Pokud se najde nekdo, kdo mi pomuze a vyresi muj problem (samozrejme mam-li problem a neni ten log v poradku), nemam problem kvalitni praci odmenit. Pokud je vse dle logu OK, omlouvam se, za zbytecny thread a smazte jej prosim.

Díky!

Logfile of random's system information tool 1.09 (written by random/random)
Run by t420 at 2011-12-13 23:45:46
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 84 GB (74%) free of 113 GB
Total RAM: 8075 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:45:50, on 13.12.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe
C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe
C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe
C:\Program Files (x86)\Sticky Password\stpass.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\MaxTo\MaxTo.exe
C:\Program Files (x86)\GIGABYTE\U8300 Utilities\CONRCtl.exe
C:\Users\t420\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\PROGRA~1\Lenovo\Zoom\TPSCREX.EXE
C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\ThinkPad\Bluetooth Software\Bluetooth Headset Helper.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11e_ActiveX.exe
C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe
C:\Program Files\trend micro\t420.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll
O2 - BHO: Lexmark Panel nástrojů - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files (x86)\Lexmark Toolbar\toolband.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Lexmark - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Lexmark Panel nástrojů - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files (x86)\Lexmark Toolbar\toolband.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [RotateImage] C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [StickyPassword] C:\Program Files (x86)\Sticky Password\stpass.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MaxTo] "C:\Program Files (x86)\MaxTo\MaxTo.exe" --start-hidden
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1821955461-2439377967-1106980377-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1821955461-2439377967-1106980377-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Dropbox.lnk = t420\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Remote Control.lnk = C:\Program Files (x86)\GIGABYTE\U8300 Utilities\CONRCtl.exe
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Open with XmlPad - res://C:\Program Files (x86)\WMHelp Software\WMHelp XmlPad\WmhASPP.dll/101
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {816BE035-1450-40D0-8A3B-BA7825A83A77} (IASRunner Class) - http://support.lenovo.com/Resources/Len ... etect2.cab
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... .5.2.0.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Protocol: wmh - {A1428E78-2D00-4590-A071-0CC9700A7768} - C:\Program Files (x86)\WMHelp Software\WMHelp XmlPad\WmhASPP.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: AcPrfMgrSvc - Lenovo - C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
O23 - Service: AcSvc - Lenovo - C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
O23 - Service: @C:\Windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\Windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: Lenovo Doze Mode Service (DozeSvc) - Lenovo. - C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HyperW7 Service (HyperW7Svc) - Lenovo Group Limited - C:\Program Files\Lenovo\RapidBoot\HyperW7Svc64.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Unknown owner - C:\Windows\system32\ibmpmsvc.exe (file missing)
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: Intel(R) Identity Protection Technology Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo Camera Mute (LENOVO.CAMMUTE) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: Lenovo Keyboard Noise Reduction (LENOVO.TPKNRSVC) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: lxeaCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\x64\3\\lxeaserv.exe
O23 - Service: lxea_device - - C:\Windows\system32\lxeacoms.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: Power Manager DBC Service - Lenovo - C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cisco EnergyWise Enabler (PwmEWSvc) - Lenovo Group Limited - C:\Program Files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\Windows\system32\SAsrv.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Screen Reading Optimizer Service Program (SROSVC) - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Unknown owner - C:\Windows\System32\TPHDEXLG64.exe (file missing)
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 16175 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\ibmpmsvc.exe
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 26848432
\??\C:\Windows\system32\conhost.exe "1447959594-1825749030422647589435759205192623437916483947-2003455969369653076
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe"
"C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe"
"C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
"C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe"
C:\Windows\system32\CxAudMsg64.exe
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\IProsetMonitor.exe
"C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe"
"C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe"
"C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe"
"C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe"
"C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe"
C:\Windows\system32\lxeacoms.exe -service
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\SysWOW64\SAsrv.exe
"C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE"
C:\Windows\System32\tcpsvcs.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k iissvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\TpShocks.exe"
"C:\Program Files\CONEXANT\ForteConfig\fmapp.exe"
"C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe"
"C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe"
"C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe"
"C:\Program Files (x86)\Sticky Password\stpass.exe"
"C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\MaxTo\MaxTo.exe" --start-hidden
"C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\GIGABYTE\U8300 Utilities\CONRCtl.exe"
"C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe"
"C:\Users\t420\AppData\Roaming\Dropbox\bin\Dropbox.exe"
"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\wbem\wmiprvse.exe
"taskhost.exe"
WLIDSvcM.exe 3532
C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
C:\PROGRA~1\Lenovo\HOTKEY\tpnumlk.exe
"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
C:\Windows\system32\rundll32.exe "C:\Program Files\LENOVO\HOTKEY\hotkey.dll",InstallAudioHotkeyHook
C:\PROGRA~1\Lenovo\Zoom\TPSCREX.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.FullScreenMagnifier
C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.OnScreenDisplay
C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
"C:\Program Files (x86)\MaxTo\MaxTo64.exe" maxto_a_do_run_run
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\SearchIndexer.exe /Embedding
taskeng.exe {A71AA93C-A760-49B5-A8E0-6560E48F0C2E}
"C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\\SRORest.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\SysWOW64\RunDll32.exe" "C:\Program Files\ThinkPad\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe" /IpNotifyInstance
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Lenovo\System Update\SUService.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files\ThinkPad\Bluetooth Software\Bluetooth Headset Helper.exe"
"C:\Program Files\ThinkPad\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files (x86)\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:4804 CREDAT:203009
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:4804 CREDAT:137475
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11e_ActiveX.exe -Embedding
"C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe" /start
"C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe8_ Global\UsGthrCtrlFltPipeMssGthrPipe8 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\t420\Downloads\RSITx64.exe"
"c:\program files\windows defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 0217F804-0CC0-B605-D907-DA37CE604AE6 -Reinvoke
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
C:\Windows\tasks\SystemToolsDailyTest.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-11-28 963064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-12-01 458416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-11-17 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]
AC-Pro - C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll [2010-06-30 97248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1017A80C-6F09-4548-A84D-EDD6AC9525F0}]
Lexmark Panel nástrojů - C:\Program Files (x86)\Lexmark Toolbar\toolband.dll [2011-08-19 528384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2011-11-10 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-11-28 809040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-12-01 342192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2C5E510-BE6D-42CC-9F61-E4F939078474}]
Lexmark - C:\Program Files\Lexmark Printable Web\bho.dll [2008-05-22 180224]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-11-10 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-11-28 963064]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-12-01 458416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]
{1017A80C-6F09-4548-A84D-EDD6AC9525F0} - Lexmark Panel nástrojů - C:\Program Files (x86)\Lexmark Toolbar\toolband.dll [2011-08-19 528384]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-11-28 809040]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-12-01 342192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-09-30 2832168]
"TpShocks"=C:\Windows\SYSTEM32\TpShocks.exe [2011-03-29 380776]
"ForteConfig"=C:\Program Files\Conexant\ForteConfig\fmapp.exe [2010-10-26 49056]
"LENOVO.TPKNRRES"=C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [2011-07-22 42344]
"lxeamon.exe"=C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe [2010-05-05 770728]
"EzPrint"=C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe [2010-05-05 148280]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-10-21 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-10-21 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-10-21 416024]
"ALCKRESI.EXE"=C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [2011-09-27 386408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"StickyPassword"=C:\Program Files (x86)\Sticky Password\stpass.exe [2011-09-29 2898776]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2011-11-18 39408]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"MaxTo"=C:\Program Files (x86)\MaxTo\MaxTo.exe [2011-10-06 708232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2011-06-06 395192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcWin7Hlpr]
C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [2011-10-20 33344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GUCI_AVS]
C:\Windows\PixArt\PAP7501\GUCI_AVS.exe [2007-12-10 323584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lenovo Registration]
C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [2011-02-09 4309184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PSQLLauncher]
C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [2011-07-14 85832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartAudio]
C:\Program Files\CONEXANT\SAII\SAIICpl.exe [2010-12-14 316032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2011-06-06 2637520]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RotateImage"=C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [2008-10-30 55808]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2011-01-17 112152]
"PWMTRV"=rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor []
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-11-28 3744552]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-10-17 284440]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
Remote Control.lnk - C:\Program Files (x86)\GIGABYTE\U8300 Utilities\CONRCtl.exe

C:\Users\t420\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\t420\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\SYSTEM32\igfxdev.dll [2011-10-21 390144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [2011-07-14 136008]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ACGina
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableCAD"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux3"=wdmaud.drv
"wave6"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux4"=wdmaud.drv
"wave7"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave8"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave9"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux6"=wdmaud.drv

======File associations======

Re: prosim o kontrolu logu NB

Napsal: 14 pro 2011 00:21
od t420
dokonceni logu :)


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open - C:\PROGRA~2\PSPADE~1\PSPad.exe "%1"

======List of files/folders created in the last 1 month======

2011-12-13 23:45:46 ----D---- C:\rsit
2011-12-13 23:45:46 ----D---- C:\Program Files\trend micro
2011-12-13 18:01:05 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-12-13 18:01:05 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-12-13 18:01:05 ----A---- C:\Windows\SYSWOW64\java.exe
2011-12-12 14:49:33 ----D---- C:\Users\t420\AppData\Roaming\Intel Corporation
2011-12-12 14:46:01 ----A---- C:\Windows\system32\drivers\iaStor.sys
2011-12-12 14:45:57 ----D---- C:\Users\t420\AppData\Roaming\InstallShield
2011-12-12 14:36:46 ----A---- C:\Windows\system32\IPROSetMonitor.exe
2011-12-12 08:51:21 ----D---- C:\Program Files (x86)\MaxTo
2011-12-12 08:39:56 ----SHD---- C:\Windows\SYSWOW64\AI_RecycleBin
2011-12-11 14:09:37 ----D---- C:\Users\t420\AppData\Roaming\Corel
2011-12-11 14:09:36 ----ASH---- C:\ProgramData\KGyGaAvL.sys
2011-12-11 01:08:24 ----D---- C:\Program Files\CCleaner
2011-12-11 00:38:53 ----D---- C:\Program Files (x86)\Trend Micro
2011-12-10 23:15:28 ----D---- C:\ProgramData\Binarysense
2011-12-10 22:29:31 ----D---- C:\Users\t420\AppData\Roaming\Lenovo
2011-12-10 21:08:36 ----D---- C:\Windows\SYSWOW64\BestPractices
2011-12-10 21:08:36 ----D---- C:\Windows\system32\BestPractices
2011-12-10 21:08:36 ----D---- C:\inetpub
2011-12-10 12:13:16 ----D---- C:\Users\t420\AppData\Roaming\Acronis
2011-12-10 11:55:15 ----D---- C:\ProgramData\Acronis
2011-12-10 11:55:00 ----A---- C:\Windows\system32\drivers\timntr.sys
2011-12-10 11:54:52 ----A---- C:\Windows\system32\drivers\vididr.sys
2011-12-10 11:54:50 ----A---- C:\Windows\system32\drivers\vsflt53.sys
2011-12-10 11:54:49 ----A---- C:\Windows\system32\drivers\snapman.sys
2011-12-10 11:54:37 ----D---- C:\Program Files (x86)\Acronis
2011-12-10 00:13:09 ----D---- C:\Program Files\Common Files\SPBA
2011-12-09 17:16:58 ----D---- C:\Program Files\ThinkVantage Fingerprint Software
2011-12-07 22:31:29 ----D---- C:\Program Files\CPUID
2011-12-07 22:31:29 ----A---- C:\Windows\system32\drivers\cpuz135_x64.sys
2011-12-06 17:54:14 -------- C:\bootsqm.dat
2011-12-06 16:24:49 ----SHD---- C:\Config.Msi
2011-11-29 21:12:51 ----A---- C:\Windows\system32\tpinspm.dll
2011-11-29 21:12:51 ----A---- C:\Windows\system32\ibmpmsvc.exe
2011-11-29 21:12:51 ----A---- C:\Windows\system32\drivers\ibmpmdrv.sys
2011-11-29 21:07:40 ----A---- C:\Windows\system32\drivers\CHDRT64.sys
2011-11-29 21:05:56 ----A---- C:\Windows\SYSWOW64\SynTPEnhPS.dll
2011-11-29 21:05:56 ----A---- C:\Windows\SYSWOW64\SynTPCOM.dll
2011-11-29 21:05:56 ----A---- C:\Windows\system32\SynTPCo9.dll
2011-11-29 21:05:56 ----A---- C:\Windows\system32\SynTPAPI.dll
2011-11-29 21:05:56 ----A---- C:\Windows\system32\drivers\SynTP.sys
2011-11-29 21:05:55 ----A---- C:\Windows\SYSWOW64\SynCtrl.dll
2011-11-29 21:05:55 ----A---- C:\Windows\SYSWOW64\SynCOM.dll
2011-11-29 21:05:55 ----A---- C:\Windows\system32\SynCtrl.dll
2011-11-29 20:39:49 ----D---- C:\ProgramData\Conexant
2011-11-27 22:37:46 ----A---- C:\Windows\ntbtlog.txt
2011-11-24 21:28:34 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2011-11-24 20:07:24 ----A---- C:\Windows\system32\PROUnstl.exe
2011-11-24 20:06:51 ----A---- C:\Windows\system32\NicInstC.dll
2011-11-24 20:06:51 ----A---- C:\Windows\system32\e1cmsg.dll
2011-11-24 20:06:51 ----A---- C:\Windows\system32\drivers\e1c62x64.sys
2011-11-24 20:05:09 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2011-11-24 20:05:09 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2011-11-24 20:05:09 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2011-11-24 20:05:09 ----A---- C:\Windows\SYSWOW64\nvoptimusmft.dll
2011-11-24 20:05:09 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2011-11-24 20:05:09 ----A---- C:\Windows\SYSWOW64\nvdecodemft.dll
2011-11-24 20:05:09 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2011-11-24 20:05:09 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2011-11-24 20:05:09 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2011-11-24 20:05:09 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2011-11-24 20:05:09 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2011-11-24 20:05:09 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2011-11-24 20:05:09 ----A---- C:\Windows\system32\OpenCL.dll
2011-11-24 20:05:09 ----A---- C:\Windows\system32\nvoptimusmft.dll
2011-11-24 20:05:09 ----A---- C:\Windows\system32\nvoglv64.dll
2011-11-24 20:05:09 ----A---- C:\Windows\system32\nvgenco6420103.dll
2011-11-24 20:05:09 ----A---- C:\Windows\system32\nvdispco6420150.dll
2011-11-24 20:05:09 ----A---- C:\Windows\system32\nvdecodemft.dll
2011-11-24 20:05:09 ----A---- C:\Windows\system32\nvd3dumx.dll
2011-11-24 20:05:09 ----A---- C:\Windows\system32\nvcuvid.dll
2011-11-24 20:05:09 ----A---- C:\Windows\system32\nvcuvenc.dll
2011-11-24 20:05:09 ----A---- C:\Windows\system32\nvcuda.dll
2011-11-24 20:05:09 ----A---- C:\Windows\system32\nvcompiler.dll
2011-11-24 20:05:09 ----A---- C:\Windows\system32\drivers\nvpciflt.sys
2011-11-24 20:05:09 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2011-11-24 20:03:57 ----A---- C:\Windows\system32\igfxCoIn_v2538.dll
2011-11-24 20:03:56 ----A---- C:\Windows\SYSWOW64\iglhsip32.dll
2011-11-24 20:03:56 ----A---- C:\Windows\SYSWOW64\iglhcp32.dll
2011-11-24 20:03:56 ----A---- C:\Windows\system32\iglhsip64.dll
2011-11-24 20:03:56 ----A---- C:\Windows\system32\iglhcp64.dll
2011-11-24 20:03:55 ----A---- C:\Windows\SYSWOW64\igfxcmrt32.dll
2011-11-24 20:03:55 ----A---- C:\Windows\SYSWOW64\igfxcmjit32.dll
2011-11-24 20:03:55 ----A---- C:\Windows\SYSWOW64\igdumdx32.dll
2011-11-24 20:03:55 ----A---- C:\Windows\system32\igfxcmrt64.dll
2011-11-24 20:03:55 ----A---- C:\Windows\system32\igfxcmjit64.dll
2011-11-24 20:03:54 ----A---- C:\Windows\SYSWOW64\igdumd32.dll
2011-11-24 20:03:54 ----A---- C:\Windows\system32\igdumd64.dll
2011-11-24 00:25:38 ----D---- C:\DRIVERS
2011-11-22 20:23:21 ----D---- C:\Windows\Minidump
2011-11-21 10:32:04 ----D---- C:\Users\t420\AppData\Roaming\Subversion
2011-11-20 23:40:43 ----D---- C:\Users\t420\AppData\Roaming\Dropbox
2011-11-20 21:11:46 ----D---- C:\Users\t420\AppData\Roaming\OpenOffice.org
2011-11-20 20:51:59 ----D---- C:\Program Files (x86)\OpenOffice.org 3
2011-11-20 20:51:54 ----D---- C:\ProgramData\Sun
2011-11-20 20:51:50 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2011-11-20 20:51:46 ----D---- C:\Program Files (x86)\Java
2011-11-20 20:39:22 ----D---- C:\Program Files (x86)\Adobe
2011-11-20 20:39:11 ----D---- C:\ProgramData\Adobe
2011-11-20 14:00:42 ----A---- C:\Windows\system32\shell32.dll
2011-11-20 14:00:41 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-11-18 22:00:26 ----AD---- C:\Users\t420\AppData\Roaming\Skype
2011-11-18 18:43:42 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-11-18 18:41:10 ----D---- C:\Program Files\Common Files\Lenovo
2011-11-18 18:40:24 ----HD---- C:\Windows\system32\WLANProfiles
2011-11-18 18:39:55 ----D---- C:\ProgramData\Intel
2011-11-18 18:39:20 ----D---- C:\Program Files (x86)\Cisco
2011-11-18 17:44:49 ----D---- C:\ProgramData\Lexmark S300-S400 Series
2011-11-18 17:12:27 ----D---- C:\Users\t420\AppData\Roaming\Google
2011-11-18 17:12:08 ----D---- C:\Windows\system32\Macromed
2011-11-18 17:12:06 ----D---- C:\Program Files\Google
2011-11-18 17:11:54 ----D---- C:\ProgramData\Google
2011-11-18 17:11:54 ----D---- C:\Program Files (x86)\Google
2011-11-18 09:07:14 ----A---- C:\Users\t420\AppData\Roaming\Drives Meter_Settings.ini
2011-11-18 09:06:07 ----A---- C:\Users\t420\AppData\Roaming\Network Meter_Settings.ini
2011-11-18 09:04:38 ----A---- C:\Users\t420\AppData\Roaming\All CPU Meter_Settings.ini
2011-11-18 09:01:08 ----D---- C:\Program Files (x86)\AutocompletePro
2011-11-17 22:08:39 ----D---- C:\Program Files\NetBeans 7.0.1
2011-11-17 22:07:19 ----A---- C:\Windows\system32\javaws.exe
2011-11-17 22:07:19 ----A---- C:\Windows\system32\javaw.exe
2011-11-17 22:07:19 ----A---- C:\Windows\system32\java.exe
2011-11-17 22:07:19 ----A---- C:\Windows\system32\deployJava1.dll
2011-11-17 22:07:16 ----D---- C:\Program Files\Java
2011-11-17 21:55:40 ----D---- C:\Program Files (x86)\GIGABYTE
2011-11-17 21:52:58 ----D---- C:\Windows\CONX
2011-11-17 20:38:29 ----RD---- C:\Program Files (x86)\Skype
2011-11-17 20:38:25 ----D---- C:\ProgramData\Skype
2011-11-17 20:34:25 ----D---- C:\Program Files (x86)\BlackCat
2011-11-17 20:30:09 ----D---- C:\Users\t420\AppData\Roaming\SQL Maestro Group
2011-11-17 20:27:13 ----D---- C:\Program Files (x86)\SQL Maestro Group
2011-11-17 20:15:44 ----D---- C:\Program Files (x86)\WinSCP
2011-11-17 19:13:34 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2011-11-17 19:13:34 ----A---- C:\Windows\system32\drivers\usbport.sys
2011-11-17 19:13:34 ----A---- C:\Windows\system32\drivers\usbohci.sys
2011-11-17 19:13:34 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-11-17 19:13:34 ----A---- C:\Windows\system32\drivers\usbehci.sys
2011-11-17 19:13:34 ----A---- C:\Windows\system32\drivers\usbd.sys
2011-11-17 19:13:34 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-11-17 19:13:34 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2011-11-17 19:13:34 ----A---- C:\Windows\system32\drivers\bthport.sys
2011-11-17 19:13:32 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2011-11-17 19:13:32 ----A---- C:\Windows\SYSWOW64\esent.dll
2011-11-17 19:13:32 ----A---- C:\Windows\system32\fsutil.exe
2011-11-17 19:13:32 ----A---- C:\Windows\system32\esent.dll
2011-11-17 19:13:32 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-11-17 19:13:32 ----A---- C:\Windows\system32\drivers\storport.sys
2011-11-17 19:13:32 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-11-17 19:13:32 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-11-17 19:13:32 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-11-17 19:13:32 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-11-17 19:13:32 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-11-17 19:13:32 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-11-17 11:14:30 ----D---- C:\Windows\SYSWOW64\Wat
2011-11-17 11:14:30 ----D---- C:\Windows\system32\Wat
2011-11-17 10:50:43 ----D---- C:\Program Files (x86)\MSXML 4.0
2011-11-17 10:47:11 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-11-17 10:47:11 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-11-17 10:47:11 ----A---- C:\Windows\system32\mshtmled.dll
2011-11-17 10:47:11 ----A---- C:\Windows\system32\iertutil.dll
2011-11-17 10:47:10 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-11-17 10:47:10 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-11-17 10:47:10 ----A---- C:\Windows\SYSWOW64\url.dll
2011-11-17 10:47:10 ----A---- C:\Windows\system32\wininet.dll
2011-11-17 10:47:10 ----A---- C:\Windows\system32\urlmon.dll
2011-11-17 10:47:10 ----A---- C:\Windows\system32\url.dll
2011-11-17 10:47:10 ----A---- C:\Windows\system32\jsproxy.dll
2011-11-17 10:47:09 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-11-17 10:47:09 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-11-17 10:47:09 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-11-17 10:47:09 ----A---- C:\Windows\system32\jscript9.dll
2011-11-17 10:47:09 ----A---- C:\Windows\system32\ieui.dll
2011-11-17 10:47:08 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-11-17 10:47:08 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-11-17 10:47:08 ----A---- C:\Windows\system32\jscript.dll
2011-11-17 10:47:07 ----A---- C:\Windows\system32\mshtml.dll
2011-11-17 10:47:06 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-11-17 10:47:06 ----A---- C:\Windows\system32\ieframe.dll
2011-11-17 10:42:32 ----D---- C:\Users\t420\AppData\Roaming\FileZilla
2011-11-17 10:40:20 ----A---- C:\Windows\system32\MRT.exe
2011-11-17 10:38:55 ----D---- C:\Program Files (x86)\FileZilla FTP Client
2011-11-17 10:38:36 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-11-17 10:38:36 ----A---- C:\Windows\system32\tzres.dll
2011-11-17 10:38:31 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2011-11-17 10:38:31 ----A---- C:\Windows\system32\xmllite.dll
2011-11-17 10:38:29 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-11-17 10:38:29 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-11-17 10:38:29 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2011-11-17 10:38:29 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2011-11-17 10:38:29 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-11-17 10:38:29 ----A---- C:\Windows\system32\odbctrac.dll
2011-11-17 10:38:29 ----A---- C:\Windows\system32\odbccu32.dll
2011-11-17 10:38:29 ----A---- C:\Windows\system32\odbccr32.dll
2011-11-17 10:38:29 ----A---- C:\Windows\system32\odbccp32.dll
2011-11-17 10:38:26 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2011-11-17 10:38:26 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-11-17 10:38:26 ----A---- C:\Windows\system32\poqexec.exe
2011-11-17 10:38:26 ----A---- C:\Windows\explorer.exe
2011-11-17 10:38:25 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2011-11-17 10:38:25 ----A---- C:\Windows\system32\tquery.dll
2011-11-17 10:38:25 ----A---- C:\Windows\system32\SearchIndexer.exe
2011-11-17 10:38:25 ----A---- C:\Windows\system32\mssrch.dll
2011-11-17 10:38:24 ----A---- C:\Windows\SYSWOW64\tquery.dll
2011-11-17 10:38:24 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2011-11-17 10:38:24 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2011-11-17 10:38:24 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2011-11-17 10:38:24 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2011-11-17 10:38:24 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2011-11-17 10:38:24 ----A---- C:\Windows\SYSWOW64\mssph.dll
2011-11-17 10:38:24 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2011-11-17 10:38:24 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2011-11-17 10:38:24 ----A---- C:\Windows\system32\SearchFilterHost.exe
2011-11-17 10:38:24 ----A---- C:\Windows\system32\mssvp.dll
2011-11-17 10:38:24 ----A---- C:\Windows\system32\mssphtb.dll
2011-11-17 10:38:24 ----A---- C:\Windows\system32\mssph.dll
2011-11-17 10:38:24 ----A---- C:\Windows\system32\msscntrs.dll
2011-11-17 10:38:22 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-11-17 10:38:22 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-11-17 10:38:22 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-11-17 10:38:21 ----A---- C:\Windows\system32\drivers\afd.sys
2011-11-17 10:38:18 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-11-17 10:38:17 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-11-17 10:38:17 ----A---- C:\Windows\system32\XpsPrint.dll
2011-11-17 10:38:10 ----A---- C:\Windows\system32\win32k.sys
2011-11-17 10:38:09 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-11-17 10:38:08 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-11-17 10:38:08 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-11-17 10:38:08 ----A---- C:\Windows\system32\drivers\srv.sys
2011-11-17 10:38:07 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2011-11-17 10:38:07 ----A---- C:\Windows\system32\psisdecd.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-11-17 10:37:45 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-11-17 10:37:45 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-11-17 10:37:45 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-11-17 10:37:45 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-11-17 10:37:45 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-11-17 10:37:45 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-11-17 10:37:45 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-11-17 10:37:45 ----A---- C:\Windows\system32\wow64win.dll
2011-11-17 10:37:45 ----A---- C:\Windows\system32\wow64cpu.dll
2011-11-17 10:37:45 ----A---- C:\Windows\system32\wow64.dll
2011-11-17 10:37:45 ----A---- C:\Windows\system32\winsrv.dll
2011-11-17 10:37:45 ----A---- C:\Windows\system32\ntvdm64.dll
2011-11-17 10:37:45 ----A---- C:\Windows\system32\KernelBase.dll
2011-11-17 10:37:45 ----A---- C:\Windows\system32\kernel32.dll
2011-11-17 10:37:45 ----A---- C:\Windows\system32\conhost.exe
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-11-17 10:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-11-17 10:37:44 ----A---- C:\Windows\SYSWOW64\user.exe
2011-11-17 10:37:40 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-11-17 10:37:40 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-11-17 10:37:40 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2011-11-17 10:37:40 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2011-11-17 10:37:40 ----A---- C:\Windows\SYSWOW64\devobj.dll
2011-11-17 10:37:40 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2011-11-17 10:37:40 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-11-17 10:37:40 ----A---- C:\Windows\system32\prevhost.exe
2011-11-17 10:37:40 ----A---- C:\Windows\system32\inetcomm.dll
2011-11-17 10:37:38 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-11-17 10:37:38 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2011-11-17 10:37:38 ----A---- C:\Windows\system32\oleaut32.dll
2011-11-17 10:37:38 ----A---- C:\Windows\system32\oleacc.dll
2011-11-17 10:37:37 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-11-17 10:37:36 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-11-17 10:37:36 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-11-17 06:11:09 ----D---- C:\Windows\CSC
2011-11-17 06:09:06 ----SHD---- C:\System Volume Information
2011-11-17 02:17:57 ----D---- C:\Users\t420\AppData\Roaming\PCDr
2011-11-17 02:08:47 ----D---- C:\Users\t420\AppData\Roaming\PSpad
2011-11-17 02:08:36 ----D---- C:\Program Files (x86)\PSPad editor
2011-11-17 02:05:20 ----D---- C:\Users\t420\AppData\Roaming\WMHelp
2011-11-17 02:05:20 ----D---- C:\Program Files (x86)\WMHelp Software
2011-11-17 01:37:41 ----A---- C:\Windows\SYSWOW64\DBCLIENT.DLL
2011-11-17 01:34:23 ----D---- C:\Stereo
2011-11-17 01:02:58 ----A---- C:\Windows\system32\drivers\aswSP.sys
2011-11-17 01:02:58 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2011-11-17 01:02:57 ----A---- C:\Windows\system32\drivers\aswFW.sys
2011-11-17 01:02:51 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2011-11-17 01:02:51 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2011-11-17 01:02:51 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2011-11-17 01:02:51 ----A---- C:\Windows\system32\drivers\aswNdis2.sys
2011-11-17 01:02:51 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2011-11-17 01:02:51 ----A---- C:\Windows\system32\aswBoot.exe
2011-11-17 01:02:39 ----A---- C:\Windows\system32\drivers\aswNdis.sys
2011-11-17 01:02:38 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2011-11-17 01:02:38 ----A---- C:\Windows\avastSS.scr
2011-11-17 01:02:31 ----D---- C:\ProgramData\AVAST Software
2011-11-17 01:02:31 ----D---- C:\Program Files\AVAST Software
2011-11-17 01:02:13 ----D---- C:\Users\t420\AppData\Roaming\gtk-2.0
2011-11-17 00:40:50 ----D---- C:\Users\t420\AppData\Roaming\Lamantine
2011-11-17 00:39:43 ----D---- C:\Program Files (x86)\Sticky Password
2011-11-17 00:12:13 ----A---- C:\Windows\system32\lxeavs.dll
2011-11-17 00:12:11 ----A---- C:\Windows\system32\lxk_g.dll
2011-11-17 00:12:11 ----A---- C:\Windows\system32\lxeacoin.dll
2011-11-17 00:12:05 ----A---- C:\Windows\system32\lxk_gf.dll
2011-11-17 00:12:05 ----A---- C:\Windows\system32\lxeagcfg.dll
2011-11-17 00:12:03 ----A---- C:\Windows\system32\lxeacuir.dll
2011-11-17 00:12:03 ----A---- C:\Windows\system32\lxeacui.dll
2011-11-17 00:11:50 ----A---- C:\Windows\system32\LXEAwupd.exe
2011-11-17 00:11:50 ----A---- C:\Windows\system32\LXEAwupd.dll
2011-11-17 00:11:38 ----D---- C:\Program Files\Lexmark Printable Web
2011-11-17 00:11:37 ----AH---- C:\Windows\system32\lxearwrd.ini
2011-11-17 00:11:36 ----A---- C:\Windows\SYSWOW64\lxealnks.dll
2011-11-17 00:11:36 ----A---- C:\Windows\SYSWOW64\LXEAinst.dll
2011-11-17 00:11:36 ----A---- C:\Windows\SYSWOW64\lxeacomx.dll
2011-11-17 00:11:35 ----A---- C:\Windows\SYSWOW64\lxeausb1.dll
2011-11-17 00:11:35 ----A---- C:\Windows\SYSWOW64\lxeapmui.dll
2011-11-17 00:11:35 ----A---- C:\Windows\SYSWOW64\lxeajswr.dll
2011-11-17 00:11:35 ----A---- C:\Windows\SYSWOW64\lxeainsr.dll
2011-11-17 00:11:35 ----A---- C:\Windows\SYSWOW64\lxeainsb.dll
2011-11-17 00:11:35 ----A---- C:\Windows\SYSWOW64\lxeains.dll
2011-11-17 00:11:35 ----A---- C:\Windows\SYSWOW64\lxeainpa.dll
2011-11-17 00:11:35 ----A---- C:\Windows\SYSWOW64\lxeaiesc.dll
2011-11-17 00:11:35 ----A---- C:\Windows\SYSWOW64\lxeacur.dll
2011-11-17 00:11:35 ----A---- C:\Windows\SYSWOW64\lxeacub.dll
2011-11-17 00:11:35 ----A---- C:\Windows\SYSWOW64\lxeacu.dll
2011-11-17 00:11:34 ----A---- C:\Windows\SYSWOW64\lxeaserv.dll
2011-11-17 00:11:34 ----A---- C:\Windows\SYSWOW64\lxealmpm.dll
2011-11-17 00:11:34 ----A---- C:\Windows\SYSWOW64\lxeaih.exe
2011-11-17 00:11:34 ----A---- C:\Windows\SYSWOW64\lxeahbn3.dll
2011-11-17 00:11:34 ----A---- C:\Windows\SYSWOW64\lxeacoms.exe
2011-11-17 00:11:34 ----A---- C:\Windows\SYSWOW64\lxeacomm.dll
2011-11-17 00:11:33 ----A---- C:\Windows\SYSWOW64\lxeacomc.dll
2011-11-17 00:11:33 ----A---- C:\Windows\SYSWOW64\lxeacfg.exe
2011-11-17 00:11:31 ----A---- C:\Windows\SYSWOW64\LXEAcfg.dll
2011-11-17 00:11:19 ----A---- C:\Windows\system32\lxeausb1.dll
2011-11-17 00:11:19 ----A---- C:\Windows\system32\LXEAinst.dll
2011-11-17 00:11:19 ----A---- C:\Windows\system32\lxeainpa.dll
2011-11-17 00:11:19 ----A---- C:\Windows\system32\lxeaiesc.dll
2011-11-17 00:11:19 ----A---- C:\Windows\system32\LXEAhcp.dll
2011-11-17 00:11:18 ----A---- C:\Windows\system32\lxeaserv.dll
2011-11-17 00:11:18 ----A---- C:\Windows\system32\lxeapmui.dll
2011-11-17 00:11:18 ----A---- C:\Windows\system32\lxealmpm.dll
2011-11-17 00:11:18 ----A---- C:\Windows\system32\lxeajswr.dll
2011-11-17 00:11:17 ----A---- C:\Windows\system32\lxeainsr.dll
2011-11-17 00:11:17 ----A---- C:\Windows\system32\lxeainsb.dll
2011-11-17 00:11:17 ----A---- C:\Windows\system32\lxeains.dll
2011-11-17 00:11:17 ----A---- C:\Windows\system32\lxeaih.exe
2011-11-17 00:11:17 ----A---- C:\Windows\system32\lxeahbn3.dll
2011-11-17 00:11:17 ----A---- C:\Windows\system32\lxeagrd.dll
2011-11-17 00:11:17 ----A---- C:\Windows\system32\lxeacub.dll
2011-11-17 00:11:16 ----A---- C:\Windows\system32\lxeacur.dll
2011-11-17 00:11:16 ----A---- C:\Windows\system32\lxeacu.dll
2011-11-17 00:11:16 ----A---- C:\Windows\system32\lxeacoms.exe
2011-11-17 00:11:16 ----A---- C:\Windows\system32\lxeacomm.dll
2011-11-17 00:11:16 ----A---- C:\Windows\system32\lxeacomc.dll
2011-11-17 00:11:16 ----A---- C:\Windows\system32\lxeacfg.exe
2011-11-17 00:11:16 ----A---- C:\Windows\system32\LXEAcfg.dll
2011-11-17 00:08:10 ----D---- C:\Lexmark ToolBar
2011-11-17 00:07:27 ----D---- C:\ProgramData\Ezprint
2011-11-17 00:06:00 ----D---- C:\ProgramData\LX_cats
2011-11-17 00:03:44 ----D---- C:\Program Files (x86)\Abbyy FineReader 6.0 Sprint
2011-11-17 00:03:36 ----D---- C:\Program Files\Lexmark Toolbar
2011-11-17 00:03:30 ----D---- C:\Program Files\Lexmark
2011-11-17 00:03:28 ----D---- C:\Program Files (x86)\Lexmark Toolbar
2011-11-17 00:03:27 ----D---- C:\Program Files (x86)\Lexmark S300-S400 Series
2011-11-17 00:01:50 ----A---- C:\ProgramData\UpdaterLog.txt
2011-11-17 00:01:35 ----D---- C:\Program Files\Lexmark S300-S400 Series
2011-11-17 00:01:35 ----A---- C:\Windows\SYSWOW64\LXEAsmr.dll
2011-11-17 00:01:34 ----A---- C:\Windows\SYSWOW64\LXEAsm.dll
2011-11-17 00:01:34 ----A---- C:\Windows\system32\lxeasmr.dll
2011-11-17 00:01:31 ----A---- C:\Windows\system32\lxeasm.dll
2011-11-16 23:54:24 ----D---- C:\Users\t420\AppData\Roaming\PwrMgr
2011-11-16 23:53:58 ----D---- C:\Windows\PixArt
2011-11-16 23:53:58 ----D---- C:\Program Files (x86)\KYE
2011-11-16 23:53:58 ----A---- C:\Windows\SYSWOW64\GUCI_AVS.ini
2011-11-16 23:53:58 ----A---- C:\Windows\SYSWOW64\GUCI_AVS.dll
2011-11-16 23:53:58 ----A---- C:\Windows\system32\drivers\GUCI_AVS.sys
2011-11-16 23:53:58 ----A---- C:\Windows\system32\COINST_080603.dll
2011-11-16 23:38:17 ----D---- C:\Users\t420\AppData\Roaming\Sylpheed
2011-11-16 23:31:29 ----D---- C:\Program Files (x86)\Sylpheed
2011-11-16 23:13:53 ----D---- C:\Windows\system32\appmgmt
2011-11-16 23:04:06 ----D---- C:\ProgramData\WinZip
2011-11-16 23:01:14 ----D---- C:\Program Files (x86)\IZArc
2011-11-16 22:59:37 ----D---- C:\Users\t420\AppData\Roaming\Macromedia
2011-11-16 22:59:37 ----D---- C:\Users\t420\AppData\Roaming\Adobe
2011-11-16 22:49:33 ----D---- C:\Users\t420\AppData\Roaming\Leadertech
2011-11-16 22:49:14 ----D---- C:\Users\t420\AppData\Roaming\Identities
2011-11-16 22:45:40 ----A---- C:\Windows\SYSWOW64\mfc71.dll
2011-11-16 22:44:29 ----D---- C:\Users\t420\AppData\Roaming\Intel
2011-11-16 22:44:27 ----SD---- C:\Users\t420\AppData\Roaming\Microsoft
2011-11-16 22:44:27 ----D---- C:\Users\t420\AppData\Roaming\Media Center Programs

======List of files/folders modified in the last 1 month======

2011-12-13 23:45:51 ----D---- C:\Windows\Temp
2011-12-13 23:45:46 ----RD---- C:\Program Files
2011-12-13 23:34:06 ----A---- C:\Windows\SYSWOW64\log.txt
2011-12-13 23:33:14 ----D---- C:\Windows\system32\config
2011-12-13 23:33:05 ----D---- C:\ProgramData\NVIDIA
2011-12-13 18:01:22 ----SHD---- C:\Windows\Installer
2011-12-13 18:01:22 ----D---- C:\Program Files (x86)\Common Files
2011-12-13 18:01:05 ----D---- C:\Windows\SysWOW64
2011-12-13 17:57:18 ----D---- C:\Windows\System32
2011-12-13 17:57:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-12-12 15:20:53 ----RSD---- C:\Windows\assembly
2011-12-12 15:20:50 ----D---- C:\Program Files\Lenovo
2011-12-12 15:20:13 ----D---- C:\Windows\system32\Tasks
2011-12-12 15:19:17 ----D---- C:\ProgramData\PCDr
2011-12-12 15:05:05 ----D---- C:\Windows\system32\catroot
2011-12-12 15:01:03 ----SD---- C:\ProgramData\Microsoft
2011-12-12 14:49:46 ----D---- C:\Windows
2011-12-12 14:49:14 ----D---- C:\Windows\SYSWOW64\NV
2011-12-12 14:49:14 ----D---- C:\Windows\system32\NV
2011-12-12 14:46:49 ----HD---- C:\ProgramData
2011-12-12 14:46:28 ----D---- C:\Windows\system32\DriverStore
2011-12-12 14:46:28 ----D---- C:\Windows\inf
2011-12-12 14:46:27 ----D---- C:\Windows\system32\drivers
2011-12-12 14:46:26 ----D---- C:\Program Files (x86)\Intel
2011-12-12 14:45:58 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-12-12 14:40:14 ----D---- C:\Windows\system32\catroot2
2011-12-12 14:36:42 ----D---- C:\Program Files\Intel
2011-12-12 14:35:06 ----D---- C:\Windows\Downloaded Program Files
2011-12-12 08:51:21 ----RD---- C:\Program Files (x86)
2011-12-12 08:39:17 ----D---- C:\Windows\Tasks
2011-12-12 08:20:39 ----D---- C:\Windows\system32\wdi
2011-12-10 23:42:12 ----RD---- C:\Users
2011-12-10 23:29:49 ----D---- C:\Windows\Registration
2011-12-10 22:54:05 ----D---- C:\Program Files (x86)\Lenovo
2011-12-10 22:29:12 ----D---- C:\Windows\Downloaded Installations
2011-12-10 22:27:18 ----SHD---- C:\$Recycle.Bin
2011-12-10 21:37:46 ----D---- C:\Windows\Microsoft.NET
2011-12-10 21:31:15 ----D---- C:\Windows\winsxs
2011-12-10 21:08:36 ----D---- C:\Windows\SYSWOW64\migration
2011-12-10 21:08:36 ----D---- C:\Windows\SYSWOW64\inetsrv
2011-12-10 21:08:36 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-12-10 21:08:36 ----D---- C:\Windows\system32\migration
2011-12-10 21:08:36 ----D---- C:\Windows\system32\inetsrv
2011-12-10 21:08:36 ----D---- C:\Windows\system32\drivers\etc
2011-12-10 21:08:36 ----D---- C:\Windows\system32\cs-CZ
2011-12-10 21:08:36 ----D---- C:\Windows\system32\cs
2011-12-10 21:08:36 ----D---- C:\Windows\PolicyDefinitions
2011-12-10 17:00:42 ----D---- C:\Windows\Prefetch
2011-12-10 16:19:59 ----D---- C:\Program Files\CONEXANT
2011-12-10 00:13:09 ----D---- C:\Program Files\Common Files
2011-12-09 00:19:43 ----D---- C:\swshare
2011-12-08 23:17:45 ----D---- C:\Windows\Logs
2011-12-06 18:03:42 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-12-02 22:58:27 ----D---- C:\Windows\system32\LogFiles
2011-11-26 19:20:26 ----A---- C:\Windows\win.ini
2011-11-24 21:20:10 ----D---- C:\Windows\system32\WinBioPlugIns
2011-11-24 21:15:37 ----D---- C:\Windows\system32\drivers\UMDF
2011-11-24 20:08:10 ----D---- C:\ProgramData\Lenovo
2011-11-24 20:07:51 ----RSD---- C:\Windows\Media
2011-11-24 20:06:22 ----D---- C:\Program Files\NVIDIA Corporation
2011-11-24 11:44:54 ----D---- C:\Windows\system32\NDF
2011-11-20 20:52:04 ----RSD---- C:\Windows\Fonts
2011-11-20 20:51:14 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-11-18 18:43:40 ----D---- C:\Windows\SoftwareDistribution
2011-11-18 18:39:20 ----D---- C:\Program Files\Common Files\Intel
2011-11-18 18:25:58 ----D---- C:\PerfLogs
2011-11-17 21:52:01 ----A---- C:\Windows\SYSWOW64\cxtvrate.dll
2011-11-17 21:52:01 ----A---- C:\Windows\system32\cxtvrate64.dll
2011-11-17 21:52:01 ----A---- C:\Windows\system32\cxtvrate.dll
2011-11-17 19:56:42 ----D---- C:\Windows\rescache
2011-11-17 19:53:04 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-11-17 19:53:04 ----D---- C:\Program Files (x86)\Windows Mail
2011-11-17 19:53:03 ----D---- C:\Program Files\Windows Sidebar
2011-11-17 19:53:03 ----D---- C:\Program Files\Windows Photo Viewer
2011-11-17 19:53:03 ----D---- C:\Program Files\Windows Media Player
2011-11-17 19:53:03 ----D---- C:\Program Files\Windows Mail
2011-11-17 19:53:03 ----D---- C:\Program Files\DVD Maker
2011-11-17 19:53:03 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-11-17 19:53:03 ----D---- C:\Program Files (x86)\Windows Media Player
2011-11-17 19:53:03 ----D---- C:\Program Files (x86)\Windows Defender
2011-11-17 19:53:02 ----D---- C:\Windows\SYSWOW64\winrm
2011-11-17 19:53:02 ----D---- C:\Windows\SYSWOW64\migwiz
2011-11-17 19:53:02 ----D---- C:\Program Files\Windows Defender
2011-11-17 19:53:01 ----D---- C:\Windows\SYSWOW64\slmgr
2011-11-17 19:53:01 ----D---- C:\Windows\SYSWOW64\en-US
2011-11-17 19:53:01 ----D---- C:\Windows\SYSWOW64\en
2011-11-17 19:53:01 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2011-11-17 19:52:56 ----D---- C:\Windows\SYSWOW64\WCN
2011-11-17 19:52:56 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2011-11-17 19:52:56 ----D---- C:\Windows\SYSWOW64\DriverStore
2011-11-17 19:52:56 ----D---- C:\Windows\SYSWOW64\Dism
2011-11-17 19:52:56 ----D---- C:\Windows\en-US
2011-11-17 19:52:55 ----D---- C:\Windows\system32\winrm
2011-11-17 19:52:55 ----D---- C:\Windows\system32\slmgr
2011-11-17 19:52:55 ----D---- C:\Windows\system32\migwiz
2011-11-17 19:52:55 ----D---- C:\Windows\system32\en
2011-11-17 19:52:55 ----D---- C:\Windows\system32\drivers\en-US
2011-11-17 19:52:55 ----D---- C:\Windows\system32\Boot
2011-11-17 19:52:54 ----D---- C:\Windows\system32\en-US
2011-11-17 19:52:48 ----D---- C:\Windows\system32\WCN
2011-11-17 19:52:48 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2011-11-17 19:52:48 ----D---- C:\Windows\system32\Dism
2011-11-17 19:52:48 ----D---- C:\Windows\Speech
2011-11-17 11:14:31 ----D---- C:\Program Files\Common Files\System
2011-11-17 11:14:30 ----D---- C:\Windows\AppPatch
2011-11-17 11:14:30 ----D---- C:\Program Files\Internet Explorer
2011-11-17 11:14:30 ----D---- C:\Program Files (x86)\Internet Explorer
2011-11-17 11:14:29 ----D---- C:\Windows\ehome
2011-11-17 10:40:21 ----D---- C:\Windows\debug
2011-11-17 06:10:03 ----D---- C:\Windows\Panther
2011-11-17 02:19:48 ----D---- C:\Program Files\PC-Doctor
2011-11-17 01:47:41 ----D---- C:\Windows\system32\restore
2011-11-17 00:11:59 ----D---- C:\Windows\twain_32
2011-11-16 22:49:08 ----D---- C:\SWTOOLS

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdis;avast! Firewall NDIS Filter Service; C:\Windows\system32\DRIVERS\aswNdis.sys [2011-09-06 12368]
R0 aswNdis2;avast! Firewall Core Firewall Service; C:\Windows\system32\drivers\aswNdis2.sys [2011-11-28 258392]
R0 DzHDD64;DzHDD64; C:\Windows\System32\DRIVERS\DzHDD64.sys [2011-10-04 31344]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-10-17 559384]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-08-12 27240]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 Shockprf;Shockprf; C:\Windows\System32\DRIVERS\Apsx64.sys [2011-03-29 139888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2011-12-10 275552]
R0 timounter;Acronis Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2011-12-10 971360]
R0 TPDIGIMN;TPDIGIMN; C:\Windows\System32\DRIVERS\ApsHM64.sys [2011-03-29 23664]
R0 vididr;Acronis Virtual Disk; C:\Windows\system32\DRIVERS\vididr.sys [2011-12-10 210016]
R0 vidsflt53;Acronis Disk Storage Filter (53); C:\Windows\system32\DRIVERS\vsflt53.sys [2011-12-10 141920]
R1 aswFW;avast! TDI Firewall driver; C:\Windows\system32\drivers\aswFW.sys [2011-11-28 140120]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-11-28 42328]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-11-28 591192]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-11-28 304472]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-11-28 58712]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 lenovo.smi;Lenovo System Interface Driver; C:\Windows\system32\DRIVERS\smiifx64.sys [2010-09-07 15472]
R1 PHCORE;PHCORE; \??\C:\Program Files\Lenovo\RapidBoot\PHCORE64.SYS [2011-07-08 32104]
R1 TPPWRIF;TPPWRIF; C:\Windows\System32\drivers\Tppwr64v.sys [2011-10-04 14960]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-11-28 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-11-28 66904]
R2 cpuz135;cpuz135; \??\C:\Windows\system32\drivers\cpuz135_x64.sys [2010-11-09 21992]
R2 risdxc;risdxc; C:\Windows\system32\DRIVERS\risdxc64.sys [2011-03-23 101376]
R2 smihlp;SMI Helper Driver (smihlp); \??\C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [2011-05-30 13128]
R3 5U877;USB Video Device; C:\Windows\system32\DRIVERS\5U877.sys [2011-03-05 166016]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2011-10-03 1577088]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2011-08-04 341680]
R3 GUCI_AVS;iLook 320; C:\Windows\system32\DRIVERS\GUCI_AVS.sys [2009-07-15 632320]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2011-08-11 39024]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-10-21 12310112]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-08-03 8604672]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2011-05-10 174184]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\Windows\system32\DRIVERS\psadd.sys [2009-12-02 40512]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-09-30 393264]
R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
R3 TVTI2C;Lenovo SM bus driver; C:\Windows\system32\DRIVERS\Tvti2c.sys [2009-09-24 41536]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 CXIR;Conexant Polaris IR Transceiver; C:\Windows\system32\drivers\cxcir64.sys [2011-11-17 44032]
S3 AMPPAL;Virtuבlnם adaptיr Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed; C:\Windows\system32\DRIVERS\AMPPAL.sys [2011-08-08 299008]
S3 AMPPALP;Protokol Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed; C:\Windows\system32\DRIVERS\amppal.sys [2011-08-08 299008]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTWAMPFL;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2011-10-17 437288]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2011-10-17 146984]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2011-10-17 164392]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-10-17 39976]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2011-10-17 21544]
S3 CXPOLARIS;Conexant Polaris Video Capture; C:\Windows\system32\drivers\cxpolar64.sys [2011-11-17 447872]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 NAL;Nal Service ; \??\C:\Windows\system32\Drivers\iqvw64e.sys [2011-10-05 32936]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 pmxdrv;pmxdrv; \??\C:\Windows\system32\drivers\pmxdrv.sys [2011-07-12 31152]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcPrfMgrSvc;AcPrfMgrSvc; C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe [2011-10-20 134208]
R2 AcSvc;AcSvc; C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe [2011-10-20 269376]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-08-08 1166848]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-11-28 44768]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2011-11-28 127192]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928]
R2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe [2011-10-17 970016]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 CxAudMsg;@C:\Windows\system32\CxAudMsg64.exe,-100; C:\Windows\system32\CxAudMsg64.exe [2010-12-17 198784]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-07-27 1517328]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-10-17 13592]
R2 IBMPMSVC;ThinkPad PM Service; C:\Windows\system32\ibmpmsvc.exe [2011-08-11 45928]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2011-09-26 178344]
R2 jhi_service;Intel(R) Identity Protection Technology Host Interface Service; C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe [2011-02-24 212944]
R2 LENOVO.CAMMUTE;Lenovo Camera Mute; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [2011-07-22 41832]
R2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2011-07-12 101736]
R2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction; C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [2011-07-22 60264]
R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [2011-07-12 133992]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-01-17 326168]
R2 lxea_device;lxea_device; C:\Windows\system32\lxeacoms.exe [2010-04-14 1052328]
R2 NVSvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-08-12 1018472]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-12 2214504]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-07-27 844560]
R2 SAService;Conexant SmartAudio service; C:\Windows\system32\SAsrv.exe []
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-07-14 10240]
R2 SROSVC;Screen Reading Optimizer Service Program; C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe [2011-09-01 446800]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-08-12 379496]
R2 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2011-07-25 28672]
R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2011-07-12 145256]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2011-07-12 142696]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-01-17 2656280]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 DozeSvc;Lenovo Doze Mode Service; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [2011-10-04 478056]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 HyperW7Svc;HyperW7 Service; C:\Program Files\Lenovo\RapidBoot\HyperW7Svc64.exe [2011-07-08 144232]
S2 lxeaCATSCustConnectService;lxeaCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxeaserv.exe [2010-04-14 45736]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2011-10-04 89152]
S3 PwmEWSvc;Cisco EnergyWise Enabler; C:\Program Files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE [2011-10-04 175168]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\Windows\System32\TPHDEXLG64.exe [2011-03-29 47728]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-11-17 1255736]
S4 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2011-06-06 1191464]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-18 136176]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-18 136176]
S4 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-11-18 182768]

-----------------EOF-----------------

Re: prosim o kontrolu logu NB

Napsal: 14 pro 2011 10:37
od vyosek
Zdravim a pekne dopoledne preji :)

:arrow: Havet nevidno, ale mrkneme poradne

:arrow: Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) (viz muj podpis)
  • Provedte aktualizaci
  • Provedte uplny sken - nic nemazte :!:
  • MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

Re: prosim o kontrolu logu NB

Napsal: 14 pro 2011 11:44
od t420
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Verze databáze: 8368

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

14.12.2011 11:42:13
mbam-log-2011-12-14 (11-42-13).txt

Typ: Úplná kontrola (C:\|E:\|F:\|P:\|)
Kontrolované objekty: 412428
Uplynulý čas: 18 minut, 2 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)


vypada to , ze nic :)

Re: prosim o kontrolu logu NB

Napsal: 14 pro 2011 11:45
od vyosek
Tak tak pustime jeste jeden poradny nastroj :)

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
:arrow: Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
  • Pokud mate Win XP spustte pod uctem Spravce\Administratora
  • Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
  • Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
  • Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
  • Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
  • Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
  • Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
  • Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Re: prosim o kontrolu logu NB

Napsal: 14 pro 2011 13:17
od t420
tak jsem to spustil dle instrukci (vse jsem povypinal, avast, firewall, apod.)
poprve se to na skoro hodinu zastavilo u "Dokoncena faze 4"
ted jsem to spustil po druhe a stojim as 10 min u stejne faze 4
pise se tam max. 20minut, tak nevim, kde je chyba, jestli u me ?

Re: prosim o kontrolu logu NB

Napsal: 14 pro 2011 13:22
od vyosek
:arrow: Restartujte PC do nouzoveho rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti)

:arrow: Prejmenujte Combofix na Beruska.com a spustte jej

Re: prosim o kontrolu logu NB

Napsal: 14 pro 2011 13:47
od t420
tak v nouzovem rezimu spusteno a probehla uvodni obrazovka, kde se rozbalil asi archiv, ale dalsi obrazovka s prubehem se nezobrazila :(
vytvoril se ovsem adresar na C "Beruska.com", ktery obsahuje:
cs-CZ adresar
en-US adresar
CF10356.3XE soubor, ktery nic nedela, kdyz ho otevru (pouze DOS okno)

Re: prosim o kontrolu logu NB

Napsal: 14 pro 2011 13:50
od vyosek
Nejak se mu nechce :?:

Pustte jeste CureIt http://www.viry.cz/forum/viewtopic.php?f=29&t=47721

Re: prosim o kontrolu logu NB

Napsal: 14 pro 2011 14:17
od t420
tak test probehl "uspesne" - nenasel nic ..

Re: prosim o kontrolu logu NB

Napsal: 14 pro 2011 14:37
od vyosek
Kdyz neni disk pripojen, bezi PC v pohode :???:

Re: prosim o kontrolu logu NB

Napsal: 14 pro 2011 17:49
od t420
prave ze ne :(
bezi naprosto stejne v dokovaci stanici s pripojenym externim USB diskem a monitorem apod. jakoz i samostatne - tzn. stejne vytezuje "Plug&Play" na 15-20% CPU,
prijde mi proste ,ze neustale neco hleda, jakoby se snazil neco nejak instalovat, napr. po otevreni okna pro nastaveni rozliseni pro grafiku nelze vubec to rozliseni zadat, ten selectbox proste na kliknuti reaguje okamzitym zavrenim..

po reinstalu OS do prvniho restartu to jede jak ma, pak ovsem opet stejna pisnicka, proto jsem predpkladal, ze tam ma nejaky svinstvo natahany na HDD,
ale jak vidno neni to chyba nybrz "vlastnost" THINKPADU :)

EDIT: a taky je pravda, ze kdykoli se NB sekl a vyhodil BSOD, tak bezel Windows Media Player, coz treba nemusi ale vubec souviset ovsem :)

EDIT2: kdyz otevru kartu nastaveni "Zarizeni a tiskarny", vylitne CPU ihned na 70%, to me jen utvrzuje, ze stale neco hleda, byt nema co - tzn opet to ukazuje na "Plug&Play" proces/sluzbu pod windows

Re: prosim o kontrolu logu NB

Napsal: 15 pro 2011 10:10
od vyosek

Re: prosim o kontrolu logu NB

Napsal: 15 pro 2011 15:17
od t420
trochu to pomohlo, nicmene v jinem smyslu, nez ze by to resilo nejak vytizeni Plug&Play, byt je asi trochu nizsi - nyni cca 15% CPU ukazuje :)

nicmene je pekne zjistit, jak placene sluzby LENOVO jsou defcto k nicemu a FREE utilitka okamzite doplni a aktualizuje potrebne drivery :D

Re: prosim o kontrolu logu NB

Napsal: 15 pro 2011 16:05
od vyosek
:arrow: Bohuzel je to kolikrat tak, ze free utilita je daleko lepsi jak nejaky placeny soft

:arrow: Stahnete OTL (viz muj podpis) a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
  • Zaskrtnete okenko Pro vsechny uzivatele
  • Zaskrtnete okenko Kontrola na havet "LOP"
  • Zaskrtnete okenko Kontrola na havet "Purity"
  • Stari souboru zmente z 30 dnu na 7 dnu
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
  • Kód: Vybrat vše

    CREATERESTOREPOINT
    
    netsvcs
    drivers32
    savembr:0
    
    /md5start
    atapi.sys
    autochk.exe
    cdrom.sys
    explorer.exe
    hal.dll
    scecli.dll
    svchost.exe
    tcpip.sys
    userinit.exe
    winlogon.exe
    /md5stop
    
    %systemroot%*.* /U /s
    %SYSTEMDRIVE%\*.exe
    %ALLUSERSPROFILE%\Application Data\*.
    %ALLUSERSPROFILE%\Application Data\*.exe /s
    %APPDATA%\*.
    %APPDATA%\*.exe /s
    %systemroot%\*. /mp /s
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\system32\drivers\*.sys /3
    %systemroot%\system32\*.* /3
    %SYSTEMDRIVE%\*.exe
    
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
    reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
    reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
    reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
    
    type c:\boot.ini >> test.txt /c
    %SystemDrive%\PhysicalMBR.bin /md5 
    
    *crack* /s
    *keygen* /s
    *loader* /s
  • Kliknete na tlacitko Prohledat
  • Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte