VIRY.CZ

Dobrý večer, prosím o kontrolu logu.
Skype mi odesílá všem kontaktům hahaha img
a často se mi seká pc, pomůže jedině restart.

Přikládám log.txt

Děkuji

Logfile of random's system information tool 1.09 (written by random/random)
Run by ss at 2012-02-13 23:20:22
Microsoft® Windows Vista™ Business Service Pack 1
System drive C: has 21 GB (15%) free of 141 GB
Total RAM: 2025 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:38:41, on 13.2.2012
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\pdf24\pdf24.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\ESET\ESET Online Scanner\OnlineScannerApp.exe
C:\Program Files\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
C:\xampp\xampp-control.exe
C:\Users\ss\Downloads\RSIT.exe
C:\Program Files\trend micro\ss.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?AF=108298&ba ... 16eac51966
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.army.cz:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
R3 - URLSearchHook: Download Energy Toolbar - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDown.dll
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Download Energy Toolbar - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDown.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O3 - Toolbar: Download Energy Toolbar - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDown.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [PDFPrint] C:\Program Files\pdf24\pdf24.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra 'Tools' menuitem: Lenovo Password Manager... - {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra button: (no name) - AutorunsDisabled - (no file) (HKCU)
O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing
O20 - AppInit_DLLs:
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Ac Profile Manager Service (AcPrfMgrSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
O23 - Service: Access Connections Main Service (AcSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
O23 - Service: Apache2.2 - Apache Software Foundation - c:\xampp\apache\bin\httpd.exe
O23 - Service: Alps Application Launcher Service (ApRunSvc) - Unknown owner - C:\Program Files\Apoint2K\ApRunSvc.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Windows\system32\AtService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\Windows\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: mysql - Unknown owner - C:\xampp\mysql\bin\mysqld.exe
O23 - Service: Power Manager DBC Service - Lenovo - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: SolidConverterPDFReadSpool (SCPDFReadSpool) - Solid Documents, LLC - C:\Windows\Installer\MSIC0D4.tmp
O23 - Service: System Update (SUService) - Lenovo Group Limited - c:\Program Files\Lenovo\System Update\SUService.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - c:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\Windows\System32\TPHDEXLG.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
O23 - Service: TSS Core Service (TSSCoreService) - Lenovo - C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe
O23 - Service: TVT Backup Protection Service - Unknown owner - C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe
O23 - Service: TVT Backup Service - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
O23 - Service: TVT Windows Update Monitor (TVT_UpdateMonitor) - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 10468 bytes

======Scheduled tasks folder======

C:\Windows\tasks\1-Click Maintenance.job
C:\Windows\tasks\Check Updates for Windows Live Toolbar.job
C:\Windows\tasks\Norton Security Scan for ss.job
C:\Windows\tasks\RealUpgradeScheduledTaskS-1-5-21-1404084969-4032197657-1012067246-1003.job
C:\Windows\tasks\{1B6413DF-7003-4E2B-852E-1973F6362F7E}.job
C:\Windows\tasks\{503AC2A6-3E45-4395-9783-F6752AA8862E}.job
C:\Windows\tasks\{A6D19408-C0A4-44A7-ADC6-717CD2C03153}.job
C:\Windows\tasks\{C2D793D0-8829-40A9-8609-5FDED661FF22}.job
C:\Windows\tasks\{C98388BC-B9AA-4625-9CB0-3BDA05C94C26}.job

=========Mozilla firefox=========

ProfilePath - C:\Users\ss\AppData\Roaming\Mozilla\Firefox\Profiles\8jqoawke.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}:6.0.10, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.1, firebug@software.joehewitt.com:1.6.2, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
prefs.js - "keyword.URL" - "http://search.babylon.com/?AF=108298&ba ... ac51966&q="

"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
"{6904342A-8307-11DF-A508-4AE2DFD72085}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=12.0.1.609]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=12.0.1.609]
"Description"=RealJukebox Netscape Plugin
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.609]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.609]
"Description"=12.0.1.609
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1]
"Description"=Yahoo! activeX Plug-in Bridge
"Path"=C:\Program Files\Yahoo!\Common\npyaxmpb.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{B13721C7-F507-4982-B2E5-502A71474FED}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nppl3260.xpt
nsILegitCheckPlugin.xpt
nsIQTScriptablePlugin.xpt
nsjsrealplayerplugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npLegitCheckPlugin.dll
NPOFFICE.DLL
nppdf32.dll
nppl3260.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
nprjplug.dll
nprpjplug.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
SearchquWebSearch.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\ss\AppData\Roaming\Mozilla\Firefox\Profiles\8jqoawke.default\extensions\
ffxtlbr@babylon.com
{ad708c09-d51b-45b3-9d28-4eba2681febf}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\AutorunsDisabled]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ad708c09-d51b-45b3-9d28-4eba2681febf}]
Download Energy Toolbar - C:\Program Files\Download_Energy\tbDown.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-12-28 59272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]
{ad708c09-d51b-45b3-9d28-4eba2681febf} - Download Energy Toolbar - C:\Program Files\Download_Energy\tbDown.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"NeroFilterCheck"=C:\Windows\system32\NeroCheck.exe [2001-07-09 155648]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]
"TkBellExe"=C:\Program Files\Real\RealPlayer\update\realsched.exe [2010-12-12 274608]
"PDFPrint"=C:\Program Files\pdf24\pdf24.exe [2011-11-03 220744]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-09-30 252296]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-09-27 59240]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2011-10-24 421888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ACGina

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=1
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"DisableCAD"=1
"EnableLUA"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=67108863
"NoSimpleStartMenu"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=i420vfw.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.tscc"=tsccvid.dll
"msacm.l3codec"=l3codecp.acm
"vidc.DIVX"=DivX.dll
"vidc.yv12"=yv12vfw.dll
"VIDC.FMVC"=fmcodec.dll

======List of files/folders created in the last 1 month======

2012-02-13 23:20:23 ----D---- C:\Program Files\trend micro
2012-02-13 23:20:22 ----D---- C:\rsit
2012-02-13 22:26:01 ----D---- C:\Program Files\Common Files\Symantec Shared
2012-02-13 22:25:57 ----D---- C:\Windows\system32\drivers\NSS
2012-02-13 22:25:57 ----D---- C:\ProgramData\Norton
2012-02-13 22:25:57 ----D---- C:\Program Files\Norton Security Scan
2012-02-13 22:25:56 ----D---- C:\ProgramData\NortonInstaller
2012-02-13 22:25:56 ----D---- C:\Program Files\NortonInstaller
2012-02-13 21:54:07 ----ASH---- C:\hiberfil.sys
2012-02-12 16:26:13 ----D---- C:\xampp(159)
2012-02-11 12:04:47 ----D---- C:\Program Files\ESET
2012-02-07 13:47:09 ----A---- C:\ProgramData\k4bel1vX.dat
2012-01-25 12:26:15 ----D---- C:\Program Files\PDFCreator
2012-01-15 18:09:42 ----A---- C:\Windows\system32\yv12vfw.dll
2012-01-15 18:09:42 ----A---- C:\Windows\system32\i420vfw.dll
2012-01-15 18:09:42 ----A---- C:\Windows\system32\AVSredirect.dll
2012-01-15 18:07:09 ----A---- C:\user.js
2012-01-15 18:06:58 ----D---- C:\Users\ss\AppData\Roaming\Babylon
2012-01-15 18:06:58 ----D---- C:\ProgramData\Babylon
2012-01-15 18:06:40 ----D---- C:\Program Files\eRightSoft
2012-01-15 17:57:52 ----D---- C:\Users\ss\AppData\Roaming\Apple Computer

======List of files/folders modified in the last 1 month======

2012-02-13 23:38:08 ----D---- C:\Windows\Tasks
2012-02-13 23:20:23 ----RD---- C:\Program Files
2012-02-13 22:33:23 ----D---- C:\Program Files\Mozilla Firefox
2012-02-13 22:29:49 ----D---- C:\Program Files\Bonjour
2012-02-13 22:26:01 ----D---- C:\Program Files\Common Files
2012-02-13 22:25:57 ----HD---- C:\ProgramData
2012-02-13 22:25:57 ----D---- C:\Windows\system32\drivers
2012-02-13 22:18:59 ----D---- C:\Users\ss\AppData\Roaming\Skype
2012-02-13 22:17:33 ----D---- C:\Windows\System32
2012-02-13 21:54:34 ----D---- C:\Windows\Temp
2012-02-13 21:54:28 ----A---- C:\sysiclog.txt
2012-02-13 21:54:04 ----D---- C:\Windows\system32\wbem
2012-02-13 21:54:04 ----D---- C:\Windows
2012-02-13 21:51:25 ----D---- C:\Windows\system32\config
2012-02-13 21:50:34 ----D---- C:\xampp
2012-02-13 21:50:28 ----SHD---- C:\Windows\Installer
2012-02-13 21:50:28 ----D---- C:\xampp1
2012-02-13 21:50:28 ----D---- C:\Windows\system32\spool
2012-02-13 21:50:28 ----D---- C:\Windows\system32\Msdtc
2012-02-13 21:50:28 ----D---- C:\Windows\system32\drivers\etc
2012-02-13 21:50:28 ----D---- C:\Windows\system32\CodeIntegrity
2012-02-13 21:50:28 ----D---- C:\Windows\system32\catroot2
2012-02-13 21:50:28 ----D---- C:\Windows\Minidump
2012-02-13 21:50:28 ----D---- C:\Windows\inf
2012-02-13 21:50:27 ----D---- C:\Users\ss\AppData\Roaming\PSpad
2012-02-13 21:50:21 ----D---- C:\Program Files\PSPad editor
2012-02-13 21:50:21 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2012-02-13 21:50:06 ----D---- C:\Windows\registration
2012-02-13 21:48:29 ----SHD---- C:\System Volume Information
2012-02-10 22:47:10 ----D---- C:\Windows\Debug
2012-01-25 13:51:39 ----D---- C:\Users\ss\AppData\Roaming\SolidDocuments
2012-01-25 12:26:51 ----D---- C:\Windows\winsxs
2012-01-25 12:26:49 ----D---- C:\Program Files\Common Files\Spigot
2012-01-18 11:08:10 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-01-15 18:40:48 ----D---- C:\Users\ss\AppData\Roaming\Vso
2012-01-15 18:07:15 ----RSD---- C:\Windows\Fonts

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2008-07-22 319000]
R0 Shockprf;Shockprf; C:\Windows\System32\DRIVERS\Apsx86.sys [2008-05-15 114728]
R0 TPDIGIMN;TPDIGIMN; C:\Windows\System32\DRIVERS\ApsHM86.sys [2008-05-15 19496]
R1 lenovo.smi;Lenovo System Interface Driver; C:\Windows\system32\DRIVERS\smiif32.sys [2008-05-12 13480]
R1 TPPWRIF;TPPWRIF; C:\Windows\System32\drivers\Tppwr32v.sys [2008-07-28 12080]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2008-04-09 12672]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2008-02-15 46592]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R2 tvtfilter;tvtfilter; C:\Windows\system32\DRIVERS\tvtfilter.sys [2008-08-16 33536]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2007-10-18 8704]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2008-03-07 154672]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-06-23 3698688]
R3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver; C:\Windows\System32\Drivers\ATSwpWDF.sys [2008-05-10 475136]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2007-11-29 181760]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2008-05-28 220672]
R3 HECI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2008-03-26 40832]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2008-03-25 980992]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2008-03-25 207872]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2008-02-20 22696]
R3 NETw5v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ; C:\Windows\system32\DRIVERS\NETw5v32.sys [2008-05-01 3660800]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-11-08 47360]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\Windows\system32\DRIVERS\psadd.sys [2008-08-16 30144]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2008-01-21 45624]
R3 TVTI2C;Lenovo SM bus driver; C:\Windows\system32\DRIVERS\Tvti2c.sys [2008-02-22 37312]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2008-03-25 661504]
S1 tvtumon;tvtumon; C:\Windows\system32\DRIVERS\tvtumon.sys [2008-05-24 48192]
S3 appliandMP;appliandMP; C:\Windows\system32\DRIVERS\appliand.sys []
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2011-05-18 23040]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-05-18 507904]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-05-18 30208]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2008-03-17 81960]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2008-03-17 100392]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2008-01-29 29736]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2008-03-17 17320]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\Windows\system32\DRIVERS\e1e6032.sys [2008-01-21 220672]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-04-17 149504]
S3 Ser2pl;USB-to-Serial Comm. Port; C:\Windows\system32\DRIVERS\ser2pl.sys [2007-07-20 48640]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-04-19 128104]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 RsFx0150;RsFx0150 Driver; C:\Windows\system32\DRIVERS\RsFx0150.sys [2010-04-03 240608]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcPrfMgrSvc;Ac Profile Manager Service; C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe [2008-07-30 116000]
R2 AcSvc;Access Connections Main Service; C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe [2008-07-30 238880]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 ApRunSvc;Alps Application Launcher Service; C:\Program Files\Apoint2K\ApRunSvc.exe [2007-07-23 36864]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-06-23 692224]
R2 ATService;AuthenTec Fingerprint Service; C:\Windows\system32\AtService.exe [2008-05-10 1160440]
R2 BcmSqlStartupSvc;Business Contact Manager SQL Server Startup Service; c:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2008-01-12 30312]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe [2008-03-17 518696]
R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2008-05-06 815104]
R2 IBMPMSVC;ThinkPad PM Service; C:\Windows\system32\ibmpmsvc.exe [2008-02-20 36128]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-05 112152]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2011-04-24 42872672]
R2 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE [2008-07-28 66848]
R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2008-05-06 466944]
R2 SCPDFReadSpool;SolidConverterPDFReadSpool; C:\Windows\Installer\MSIC0D4.tmp [2011-04-05 180032]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-04-03 97632]
R2 SUService;System Update; c:\Program Files\Lenovo\System Update\SUService.exe [2008-05-24 32768]
R2 ThinkVantage Registry Monitor Service;ThinkVantage Registry Monitor Service; c:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe [2008-06-14 746808]
R2 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\Windows\System32\TPHDEXLG.exe [2008-05-15 37416]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2008-03-27 58736]
R2 TSSCoreService;TSS Core Service; C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe [2008-06-14 779576]
R2 TVT Backup Protection Service;TVT Backup Protection Service; C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe [2008-05-25 520192]
R2 TVT Scheduler;TVT Scheduler; c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [2008-05-25 1155072]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2007-10-18 386560]
S2 Apache2.2;Apache2.2; c:\xampp\apache\bin\httpd.exe [2011-09-10 18432]
S2 mysql;mysql; C:\xampp\mysql\bin\mysqld.exe [2011-09-09 8158720]
S2 TVT Backup Service;TVT Backup Service; C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe [2008-05-25 950272]
S2 TVT_UpdateMonitor;TVT Windows Update Monitor; C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe [2008-05-24 253952]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-12-31 654848]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2010-04-03 44896]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-04-24 367456]
S4 SQLBrowser;SQL Server Browser; c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-04-03 267616]

-----------------EOF-----------------

vycistit s CCleanerom + MBAM + doinstalovat SP2

Tak jsem to provedl, přikládám nový log.txt.
Děkuji
Logfile of random's system information tool 1.09 (written by random/random)
Run by ss at 2012-02-14 21:17:39
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 42 GB (30%) free of 141 GB
Total RAM: 2025 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:18:08, on 14.2.2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\pdf24\pdf24.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32\SPReview\spreview.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\ss\Downloads\RSIT(1).exe
C:\Program Files\trend micro\ss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?AF=108298&ba ... 16eac51966
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.army.cz:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
R3 - URLSearchHook: Download Energy Toolbar - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDown.dll
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Download Energy Toolbar - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDown.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O3 - Toolbar: Download Energy Toolbar - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDown.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [PDFPrint] C:\Program Files\pdf24\pdf24.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra 'Tools' menuitem: Lenovo Password Manager... - {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra button: (no name) - AutorunsDisabled - (no file) (HKCU)
O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Ac Profile Manager Service (AcPrfMgrSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
O23 - Service: Access Connections Main Service (AcSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
O23 - Service: Apache2.2 - Apache Software Foundation - c:\xampp\apache\bin\httpd.exe
O23 - Service: Alps Application Launcher Service (ApRunSvc) - Unknown owner - C:\Program Files\Apoint2K\ApRunSvc.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Windows\system32\AtService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\Windows\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: mysql - Unknown owner - C:\xampp\mysql\bin\mysqld.exe
O23 - Service: Power Manager DBC Service - Lenovo - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: SolidConverterPDFReadSpool (SCPDFReadSpool) - Solid Documents, LLC - C:\Windows\Installer\MSIC0D4.tmp
O23 - Service: System Update (SUService) - Lenovo Group Limited - c:\Program Files\Lenovo\System Update\SUService.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - c:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\Windows\System32\TPHDEXLG.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
O23 - Service: TSS Core Service (TSSCoreService) - Lenovo - C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe
O23 - Service: TVT Backup Protection Service - Unknown owner - C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe
O23 - Service: TVT Backup Service - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
O23 - Service: TVT Windows Update Monitor (TVT_UpdateMonitor) - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 10858 bytes

======Scheduled tasks folder======

C:\Windows\tasks\1-Click Maintenance.job
C:\Windows\tasks\Check Updates for Windows Live Toolbar.job
C:\Windows\tasks\RealUpgradeScheduledTaskS-1-5-21-1404084969-4032197657-1012067246-1003.job
C:\Windows\tasks\{1B6413DF-7003-4E2B-852E-1973F6362F7E}.job
C:\Windows\tasks\{503AC2A6-3E45-4395-9783-F6752AA8862E}.job
C:\Windows\tasks\{A6D19408-C0A4-44A7-ADC6-717CD2C03153}.job
C:\Windows\tasks\{C2D793D0-8829-40A9-8609-5FDED661FF22}.job
C:\Windows\tasks\{C98388BC-B9AA-4625-9CB0-3BDA05C94C26}.job

=========Mozilla firefox=========

ProfilePath - C:\Users\ss\AppData\Roaming\Mozilla\Firefox\Profiles\8jqoawke.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}:6.0.10, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.1, firebug@software.joehewitt.com:1.6.2, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
prefs.js - "keyword.URL" - "http://search.babylon.com/?AF=108298&ba ... ac51966&q="

"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
"{6904342A-8307-11DF-A508-4AE2DFD72085}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=12.0.1.609]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=12.0.1.609]
"Description"=RealJukebox Netscape Plugin
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.609]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.609]
"Description"=12.0.1.609
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1]
"Description"=Yahoo! activeX Plug-in Bridge
"Path"=C:\Program Files\Yahoo!\Common\npyaxmpb.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{B13721C7-F507-4982-B2E5-502A71474FED}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nppl3260.xpt
nsILegitCheckPlugin.xpt
nsIQTScriptablePlugin.xpt
nsjsrealplayerplugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npLegitCheckPlugin.dll
NPOFFICE.DLL
nppdf32.dll
nppl3260.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
nprjplug.dll
nprpjplug.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
SearchquWebSearch.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\ss\AppData\Roaming\Mozilla\Firefox\Profiles\8jqoawke.default\extensions\
ffxtlbr@babylon.com
{ad708c09-d51b-45b3-9d28-4eba2681febf}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\AutorunsDisabled]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ad708c09-d51b-45b3-9d28-4eba2681febf}]
Download Energy Toolbar - C:\Program Files\Download_Energy\tbDown.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-12-28 59272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]
{ad708c09-d51b-45b3-9d28-4eba2681febf} - Download Energy Toolbar - C:\Program Files\Download_Energy\tbDown.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"NeroFilterCheck"=C:\Windows\system32\NeroCheck.exe [2001-07-09 155648]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]
"TkBellExe"=C:\Program Files\Real\RealPlayer\update\realsched.exe [2010-12-12 274608]
"PDFPrint"=C:\Program Files\pdf24\pdf24.exe [2011-11-03 220744]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-09-30 252296]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-09-27 59240]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2011-10-24 421888]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2012-01-13 460872]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-22 3080264]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ACGina

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=1
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"DisableCAD"=1
"EnableLUA"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=67108863
"NoSimpleStartMenu"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=i420vfw.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"vidc.tscc"=tsccvid.dll
"msacm.l3codec"=l3codecp.acm
"vidc.DIVX"=DivX.dll
"vidc.yv12"=yv12vfw.dll
"VIDC.FMVC"=fmcodec.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-02-14 20:47:57 ----D---- C:\Windows\system32\eu-ES
2012-02-14 20:47:57 ----D---- C:\Windows\system32\ca-ES
2012-02-14 20:47:56 ----D---- C:\Windows\system32\vi-VN
2012-02-14 20:37:24 ----D---- C:\Windows\system32\SPReview
2012-02-14 20:11:45 ----A---- C:\Windows\system32\scavenge.dll
2012-02-14 20:11:35 ----A---- C:\Windows\system32\compcln.exe
2012-02-14 20:04:49 ----A---- C:\Windows\system32\secur32.dll
2012-02-14 20:04:49 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2012-02-14 20:04:49 ----A---- C:\Windows\system32\SearchIndexer.exe
2012-02-14 20:04:49 ----A---- C:\Windows\system32\SearchFilterHost.exe
2012-02-14 20:04:49 ----A---- C:\Windows\system32\sdohlp.dll
2012-02-14 20:04:49 ----A---- C:\Windows\system32\sdclt.exe
2012-02-14 20:04:49 ----A---- C:\Windows\system32\drivers\sdbus.sys
2012-02-14 20:04:48 ----A---- C:\Windows\system32\samlib.dll
2012-02-14 20:04:48 ----A---- C:\Windows\system32\rwinsta.exe
2012-02-14 20:04:48 ----A---- C:\Windows\system32\rtutils.dll
2012-02-14 20:04:48 ----A---- C:\Windows\system32\rtffilt.dll
2012-02-14 20:04:48 ----A---- C:\Windows\system32\rsaenh.dll
2012-02-14 20:04:47 ----A---- C:\Windows\system32\rpchttp.dll
2012-02-14 20:04:47 ----A---- C:\Windows\system32\rpcss.dll
2012-02-14 20:04:47 ----A---- C:\Windows\system32\riched20.dll
2012-02-14 20:04:47 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2012-02-14 20:04:47 ----A---- C:\Windows\system32\drivers\rmcast.sys
2012-02-14 20:04:46 ----A---- C:\Windows\system32\scrrun.dll
2012-02-14 20:04:45 ----A---- C:\Windows\system32\scrptadm.dll
2012-02-14 20:04:45 ----A---- C:\Windows\system32\scrobj.dll
2012-02-14 20:04:45 ----A---- C:\Windows\system32\scksp.dll
2012-02-14 20:04:45 ----A---- C:\Windows\system32\SCardSvr.dll
2012-02-14 20:04:45 ----A---- C:\Windows\system32\scansetting.dll
2012-02-14 20:04:45 ----A---- C:\Windows\system32\samsrv.dll
2012-02-14 20:04:44 ----A---- C:\Windows\system32\scesrv.dll
2012-02-14 20:04:44 ----A---- C:\Windows\system32\scecli.dll
2012-02-14 20:04:43 ----A---- C:\Windows\system32\perfdisk.dll
2012-02-14 20:04:43 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2012-02-14 20:04:43 ----A---- C:\Windows\system32\pdh.dll
2012-02-14 20:04:43 ----A---- C:\Windows\system32\pcaui.dll
2012-02-14 20:04:43 ----A---- C:\Windows\system32\p2psvc.dll
2012-02-14 20:04:43 ----A---- C:\Windows\system32\P2PGraph.dll
2012-02-14 20:04:43 ----A---- C:\Windows\system32\drivers\pcmcia.sys
2012-02-14 20:04:43 ----A---- C:\Windows\system32\drivers\pci.sys
2012-02-14 20:04:43 ----A---- C:\Windows\system32\drivers\pacer.sys
2012-02-14 20:04:42 ----A---- C:\Windows\system32\powercpl.dll
2012-02-14 20:04:42 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2012-02-14 20:04:42 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2012-02-14 20:04:42 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2012-02-14 20:04:42 ----A---- C:\Windows\system32\PNPXAssoc.dll
2012-02-14 20:04:42 ----A---- C:\Windows\system32\PnPutil.exe
2012-02-14 20:04:42 ----A---- C:\Windows\system32\PnPUnattend.exe
2012-02-14 20:04:42 ----A---- C:\Windows\system32\pnpui.dll
2012-02-14 20:04:42 ----A---- C:\Windows\system32\pnpsetup.dll
2012-02-14 20:04:42 ----A---- C:\Windows\system32\pnidui.dll
2012-02-14 20:04:42 ----A---- C:\Windows\system32\photowiz.dll
2012-02-14 20:04:42 ----A---- C:\Windows\system32\drivers\portcls.sys
2012-02-14 20:04:42 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-02-14 20:04:41 ----A---- C:\Windows\system32\pmcsnap.dll
2012-02-14 20:04:41 ----A---- C:\Windows\system32\PkgMgr.exe
2012-02-14 20:04:41 ----A---- C:\Windows\system32\pidgenx.dll
2012-02-14 20:04:41 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2012-02-14 20:04:41 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2012-02-14 20:04:41 ----A---- C:\Windows\system32\ntdll.dll
2012-02-14 20:04:41 ----A---- C:\Windows\system32\nslookup.exe
2012-02-14 20:04:41 ----A---- C:\Windows\system32\drivers\npfs.sys
2012-02-14 20:04:40 ----A---- C:\Windows\system32\ntkrnlpa.exe
2012-02-14 20:04:40 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-02-14 20:04:38 ----A---- C:\Windows\system32\offfilt.dll
2012-02-14 20:04:38 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2012-02-14 20:04:38 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2012-02-14 20:04:38 ----A---- C:\Windows\system32\nlhtml.dll
2012-02-14 20:04:38 ----A---- C:\Windows\system32\drivers\ohci1394.sys
2012-02-14 20:04:37 ----A---- C:\Windows\system32\osk.exe
2012-02-14 20:04:37 ----A---- C:\Windows\system32\oobefldr.dll
2012-02-14 20:04:37 ----A---- C:\Windows\system32\onex.dll
2012-02-14 20:04:37 ----A---- C:\Windows\system32\olepro32.dll
2012-02-14 20:04:37 ----A---- C:\Windows\system32\oleprn.dll
2012-02-14 20:04:37 ----A---- C:\Windows\system32\oleaut32.dll
2012-02-14 20:04:37 ----A---- C:\Windows\system32\ole32.dll
2012-02-14 20:04:37 ----A---- C:\Windows\system32\odbccp32.dll
2012-02-14 20:04:37 ----A---- C:\Windows\system32\odbcconf.dll
2012-02-14 20:04:37 ----A---- C:\Windows\system32\odbc32.dll
2012-02-14 20:04:36 ----A---- C:\Windows\system32\ocsetup.exe
2012-02-14 20:04:36 ----A---- C:\Windows\system32\occache.dll
2012-02-14 20:04:36 ----A---- C:\Windows\system32\ntprint.dll
2012-02-14 20:04:36 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-02-14 20:04:36 ----A---- C:\Windows\system32\ntmarta.dll
2012-02-14 20:04:36 ----A---- C:\Windows\system32\drivers\nwifi.sys
2012-02-14 20:04:35 ----A---- C:\Windows\system32\rastapi.dll
2012-02-14 20:04:35 ----A---- C:\Windows\system32\rasppp.dll
2012-02-14 20:04:35 ----A---- C:\Windows\system32\rasplap.dll
2012-02-14 20:04:35 ----A---- C:\Windows\system32\rasmontr.dll
2012-02-14 20:04:35 ----A---- C:\Windows\system32\rasmans.dll
2012-02-14 20:04:35 ----A---- C:\Windows\system32\raschap.dll
2012-02-14 20:04:35 ----A---- C:\Windows\system32\rasgcw.dll
2012-02-14 20:04:35 ----A---- C:\Windows\system32\rasdlg.dll
2012-02-14 20:04:35 ----A---- C:\Windows\system32\rasdial.exe
2012-02-14 20:04:35 ----A---- C:\Windows\system32\rasdiag.dll
2012-02-14 20:04:35 ----A---- C:\Windows\system32\rasapi32.dll
2012-02-14 20:04:35 ----A---- C:\Windows\system32\query.exe
2012-02-14 20:04:35 ----A---- C:\Windows\system32\Query.dll
2012-02-14 20:04:35 ----A---- C:\Windows\system32\drivers\rassstp.sys
2012-02-14 20:04:35 ----A---- C:\Windows\system32\drivers\raspppoe.sys
2012-02-14 20:04:34 ----A---- C:\Windows\system32\reset.exe
2012-02-14 20:04:34 ----A---- C:\Windows\system32\RelMon.dll
2012-02-14 20:04:34 ----A---- C:\Windows\system32\rekeywiz.exe
2012-02-14 20:04:34 ----A---- C:\Windows\system32\regsvc.dll
2012-02-14 20:04:34 ----A---- C:\Windows\system32\RacEngn.dll
2012-02-14 20:04:34 ----A---- C:\Windows\system32\qprocess.exe
2012-02-14 20:04:34 ----A---- C:\Windows\system32\qmgr.dll
2012-02-14 20:04:34 ----A---- C:\Windows\system32\qedit.dll
2012-02-14 20:04:34 ----A---- C:\Windows\system32\drivers\rfcomm.sys
2012-02-14 20:04:33 ----A---- C:\Windows\system32\regapi.dll
2012-02-14 20:04:33 ----A---- C:\Windows\system32\reg.exe
2012-02-14 20:04:33 ----A---- C:\Windows\system32\rdpwsx.dll
2012-02-14 20:04:33 ----A---- C:\Windows\system32\rdpendp.dll
2012-02-14 20:04:33 ----A---- C:\Windows\system32\rdpencom.dll
2012-02-14 20:04:33 ----A---- C:\Windows\system32\rdpclip.exe
2012-02-14 20:04:33 ----A---- C:\Windows\system32\PresentationSettings.exe
2012-02-14 20:04:33 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2012-02-14 20:04:33 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-02-14 20:04:33 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2012-02-14 20:04:33 ----A---- C:\Windows\system32\drivers\rdbss.sys
2012-02-14 20:04:32 ----A---- C:\Windows\system32\prnntfy.dll
2012-02-14 20:04:32 ----A---- C:\Windows\system32\printui.dll
2012-02-14 20:04:32 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2012-02-14 20:04:32 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2012-02-14 20:04:32 ----A---- C:\Windows\system32\PrintBrmUi.exe
2012-02-14 20:04:32 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2012-02-14 20:04:32 ----A---- C:\Windows\system32\powrprof.dll
2012-02-14 20:04:31 ----A---- C:\Windows\system32\qdvd.dll
2012-02-14 20:04:31 ----A---- C:\Windows\system32\qappsrv.exe
2012-02-14 20:04:31 ----A---- C:\Windows\system32\QAGENTRT.DLL
2012-02-14 20:04:31 ----A---- C:\Windows\system32\puiapi.dll
2012-02-14 20:04:31 ----A---- C:\Windows\system32\propsys.dll
2012-02-14 20:04:31 ----A---- C:\Windows\system32\propdefs.dll
2012-02-14 20:04:31 ----A---- C:\Windows\system32\profsvc.dll
2012-02-14 20:04:30 ----A---- C:\Windows\system32\psisdecd.dll
2012-02-14 20:04:30 ----A---- C:\Windows\system32\PSHED.DLL
2012-02-14 20:04:29 ----A---- C:\Windows\system32\sendmail.dll
2012-02-14 20:04:28 ----A---- C:\Windows\system32\shlwapi.dll
2012-02-14 20:04:28 ----A---- C:\Windows\system32\shell32.dll
2012-02-14 20:04:28 ----A---- C:\Windows\system32\shdocvw.dll
2012-02-14 20:04:28 ----A---- C:\Windows\system32\services.exe
2012-02-14 20:04:27 ----A---- C:\Windows\system32\shadow.exe
2012-02-14 20:04:27 ----A---- C:\Windows\system32\setupapi.dll
2012-02-14 20:04:27 ----A---- C:\Windows\system32\sethc.exe
2012-02-14 20:04:27 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2012-02-14 20:04:24 ----A---- C:\Windows\system32\eapphost.dll
2012-02-14 20:04:24 ----A---- C:\Windows\system32\eappgnui.dll
2012-02-14 20:04:24 ----A---- C:\Windows\system32\drivers\ecache.sys
2012-02-14 20:04:23 ----A---- C:\Windows\system32\EhStorAPI.dll
2012-02-14 20:04:23 ----A---- C:\Windows\system32\eappcfg.dll
2012-02-14 20:04:23 ----A---- C:\Windows\system32\eapp3hst.dll
2012-02-14 20:04:23 ----A---- C:\Windows\system32\dsprop.dll
2012-02-14 20:04:23 ----A---- C:\Windows\system32\dsound.dll
2012-02-14 20:04:23 ----A---- C:\Windows\system32\drivers\Dumpata.sys
2012-02-14 20:04:22 ----A---- C:\Windows\system32\f3ahvoas.dll
2012-02-14 20:04:22 ----A---- C:\Windows\system32\extmgr.dll
2012-02-14 20:04:22 ----A---- C:\Windows\system32\ExplorerFrame.dll
2012-02-14 20:04:22 ----A---- C:\Windows\system32\evr.dll
2012-02-14 20:04:22 ----A---- C:\Windows\system32\eudcedit.exe
2012-02-14 20:04:22 ----A---- C:\Windows\system32\esent.dll
2012-02-14 20:04:22 ----A---- C:\Windows\system32\dwm.exe
2012-02-14 20:04:22 ----A---- C:\Windows\system32\drivers\exfat.sys
2012-02-14 20:04:22 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2012-02-14 20:04:22 ----A---- C:\Windows\system32\drivers\dxg.sys
2012-02-14 20:04:22 ----A---- C:\Windows\explorer.exe
2012-02-14 20:04:21 ----A---- C:\Windows\system32\es.dll
2012-02-14 20:04:21 ----A---- C:\Windows\system32\EncDec.dll
2012-02-14 20:04:21 ----A---- C:\Windows\system32\emdmgmt.dll
2012-02-14 20:04:21 ----A---- C:\Windows\system32\EhStorShell.dll
2012-02-14 20:04:21 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2012-02-14 20:04:21 ----A---- C:\Windows\system32\EhStorAuthn.dll
2012-02-14 20:04:21 ----A---- C:\Windows\system32\dimsroam.dll
2012-02-14 20:04:21 ----A---- C:\Windows\system32\diagperf.dll
2012-02-14 20:04:21 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2012-02-14 20:04:20 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2012-02-14 20:04:20 ----A---- C:\Windows\system32\drivers\disk.sys
2012-02-14 20:04:20 ----A---- C:\Windows\system32\drivers\dfsc.sys
2012-02-14 20:04:20 ----A---- C:\Windows\system32\diskraid.exe
2012-02-14 20:04:20 ----A---- C:\Windows\system32\diskpart.exe
2012-02-14 20:04:20 ----A---- C:\Windows\system32\dfsr.exe
2012-02-14 20:04:20 ----A---- C:\Windows\system32\devmgr.dll
2012-02-14 20:04:19 ----A---- C:\Windows\system32\dhcpcsvc.dll
2012-02-14 20:04:17 ----A---- C:\Windows\system32\drvstore.dll
2012-02-14 20:04:17 ----A---- C:\Windows\system32\drvinst.exe
2012-02-14 20:04:17 ----A---- C:\Windows\system32\drmv2clt.dll
2012-02-14 20:04:17 ----A---- C:\Windows\system32\drmmgrtn.dll
2012-02-14 20:04:17 ----A---- C:\Windows\system32\dpapimig.exe
2012-02-14 20:04:17 ----A---- C:\Windows\system32\dot3svc.dll
2012-02-14 20:04:17 ----A---- C:\Windows\system32\dot3msm.dll
2012-02-14 20:04:17 ----A---- C:\Windows\system32\dot3cfg.dll
2012-02-14 20:04:16 ----A---- C:\Windows\system32\hbaapi.dll
2012-02-14 20:04:16 ----A---- C:\Windows\system32\gpscript.dll
2012-02-14 20:04:16 ----A---- C:\Windows\system32\gpresult.exe
2012-02-14 20:04:16 ----A---- C:\Windows\system32\gpprnext.dll
2012-02-14 20:04:16 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2012-02-14 20:04:16 ----A---- C:\Windows\system32\dnsrslvr.dll
2012-02-14 20:04:16 ----A---- C:\Windows\system32\dnsapi.dll
2012-02-14 20:04:16 ----A---- C:\Windows\system32\dmusic.dll
2012-02-14 20:04:16 ----A---- C:\Windows\system32\dmsynth.dll
2012-02-14 20:04:15 ----A---- C:\Windows\system32\iashlpr.dll
2012-02-14 20:04:15 ----A---- C:\Windows\system32\iasdatastore.dll
2012-02-14 20:04:15 ----A---- C:\Windows\system32\iasads.dll
2012-02-14 20:04:15 ----A---- C:\Windows\system32\iasacct.dll
2012-02-14 20:04:15 ----A---- C:\Windows\system32\gpupdate.exe
2012-02-14 20:04:15 ----A---- C:\Windows\system32\gpsvc.dll
2012-02-14 20:04:15 ----A---- C:\Windows\system32\gpscript.exe
2012-02-14 20:04:14 ----A---- C:\Windows\system32\iasnap.dll
2012-02-14 20:04:14 ----A---- C:\Windows\system32\IasMigReader.exe
2012-02-14 20:04:14 ----A---- C:\Windows\system32\IasMigPlugin.dll
2012-02-14 20:04:14 ----A---- C:\Windows\system32\drivers\hidclass.sys
2012-02-14 20:04:13 ----A---- C:\Windows\system32\hidserv.dll
2012-02-14 20:04:13 ----A---- C:\Windows\system32\hdwwiz.exe
2012-02-14 20:04:13 ----A---- C:\Windows\system32\fontext.dll
2012-02-14 20:04:13 ----A---- C:\Windows\system32\drivers\hidusb.sys
2012-02-14 20:04:13 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2012-02-14 20:04:12 ----A---- C:\Windows\system32\gpapi.dll
2012-02-14 20:04:12 ----A---- C:\Windows\system32\gdi32.dll
2012-02-14 20:04:12 ----A---- C:\Windows\system32\findstr.exe
2012-02-14 20:04:12 ----A---- C:\Windows\system32\feclient.dll
2012-02-14 20:04:12 ----A---- C:\Windows\system32\fdWSD.dll
2012-02-14 20:04:12 ----A---- C:\Windows\system32\fdWCN.dll
2012-02-14 20:04:12 ----A---- C:\Windows\system32\fdSSDP.dll
2012-02-14 20:04:12 ----A---- C:\Windows\system32\fdProxy.dll
2012-02-14 20:04:12 ----A---- C:\Windows\system32\fdeploy.dll
2012-02-14 20:04:12 ----A---- C:\Windows\system32\fdBthProxy.dll
2012-02-14 20:04:12 ----A---- C:\Windows\system32\fdBth.dll
2012-02-14 20:04:12 ----A---- C:\Windows\system32\fc.exe
2012-02-14 20:04:12 ----A---- C:\Windows\system32\Faultrep.dll
2012-02-14 20:04:12 ----A---- C:\Windows\system32\drivers\fastfat.sys
2012-02-14 20:04:11 ----A---- C:\Windows\system32\gpedit.dll
2012-02-14 20:04:11 ----A---- C:\Windows\system32\gameux.dll
2012-02-14 20:04:11 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2012-02-14 20:04:11 ----A---- C:\Windows\system32\fundisc.dll
2012-02-14 20:04:11 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2012-02-14 20:04:11 ----A---- C:\Windows\system32\ftp.exe
2012-02-14 20:04:11 ----A---- C:\Windows\system32\fsquirt.exe
2012-02-14 20:04:10 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2012-02-14 20:04:10 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2012-02-14 20:04:10 ----A---- C:\Windows\system32\drivers\ataport.sys
2012-02-14 20:04:10 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2012-02-14 20:04:10 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2012-02-14 20:04:10 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2012-02-14 20:04:10 ----A---- C:\Windows\system32\autoplay.dll
2012-02-14 20:04:10 ----A---- C:\Windows\system32\autochk.exe
2012-02-14 20:04:10 ----A---- C:\Windows\system32\autofmt.exe
2012-02-14 20:04:10 ----A---- C:\Windows\system32\autoconv.exe
2012-02-14 20:04:10 ----A---- C:\Windows\system32\authz.dll
2012-02-14 20:04:10 ----A---- C:\Windows\system32\authui.dll
2012-02-14 20:04:10 ----A---- C:\Windows\system32\audiosrv.dll
2012-02-14 20:04:10 ----A---- C:\Windows\system32\AudioSes.dll
2012-02-14 20:04:10 ----A---- C:\Windows\system32\audiodg.exe
2012-02-14 20:04:10 ----A---- C:\Windows\system32\atmfd.dll
2012-02-14 20:04:09 ----A---- C:\Windows\system32\drivers\atapi.sys
2012-02-14 20:04:08 ----A---- C:\Windows\system32\drivers\bthenum.sys
2012-02-14 20:04:08 ----A---- C:\Windows\system32\drivers\bridge.sys
2012-02-14 20:04:08 ----A---- C:\Windows\system32\bthci.dll
2012-02-14 20:04:08 ----A---- C:\Windows\system32\browseui.dll
2012-02-14 20:04:08 ----A---- C:\Windows\system32\brcplsiw.dll
2012-02-14 20:04:08 ----A---- C:\Windows\system32\brcpl.dll
2012-02-14 20:04:08 ----A---- C:\Windows\system32\blackbox.dll
2012-02-14 20:04:08 ----A---- C:\Windows\system32\bitsigd.dll
2012-02-14 20:04:08 ----A---- C:\Windows\system32\bcrypt.dll
2012-02-14 20:04:08 ----A---- C:\Windows\system32\basecsp.dll
2012-02-14 20:04:08 ----A---- C:\Windows\system32\azroles.dll
2012-02-14 20:04:07 ----A---- C:\Windows\system32\drivers\acpi.sys
2012-02-14 20:04:07 ----A---- C:\Windows\system32\BFE.DLL
2012-02-14 20:04:07 ----A---- C:\Windows\system32\accessibilitycpl.dll
2012-02-14 20:04:06 ----A---- C:\Windows\system32\appmgmts.dll
2012-02-14 20:04:06 ----A---- C:\Windows\system32\Apphlpdm.dll
2012-02-14 20:04:06 ----A---- C:\Windows\system32\apphelp.dll
2012-02-14 20:04:06 ----A---- C:\Windows\system32\apds.dll
2012-02-14 20:04:05 ----A---- C:\Windows\system32\drivers\crashdmp.sys
2012-02-14 20:04:05 ----A---- C:\Windows\system32\drivers\afd.sys
2012-02-14 20:04:05 ----A---- C:\Windows\system32\conime.exe
2012-02-14 20:04:05 ----A---- C:\Windows\system32\comuid.dll
2012-02-14 20:04:05 ----A---- C:\Windows\system32\comsvcs.dll
2012-02-14 20:04:05 ----A---- C:\Windows\system32\advapi32.dll
2012-02-14 20:04:05 ----A---- C:\Windows\system32\adtschema.dll
2012-02-14 20:04:05 ----A---- C:\Windows\system32\adsmsext.dll
2012-02-14 20:04:05 ----A---- C:\Windows\system32\adsldpc.dll
2012-02-14 20:04:04 ----A---- C:\Windows\system32\crypt32.dll
2012-02-14 20:04:04 ----A---- C:\Windows\system32\credui.dll
2012-02-14 20:04:04 ----A---- C:\Windows\system32\connect.dll
2012-02-14 20:04:03 ----A---- C:\Windows\system32\comdlg32.dll
2012-02-14 20:04:03 ----A---- C:\Windows\system32\cmmon32.exe
2012-02-14 20:04:03 ----A---- C:\Windows\system32\cmdial32.dll
2012-02-14 20:04:02 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2012-02-14 20:04:02 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2012-02-14 20:04:02 ----A---- C:\Windows\system32\DevicePairing.dll
2012-02-14 20:04:02 ----A---- C:\Windows\system32\DeviceEject.exe
2012-02-14 20:04:02 ----A---- C:\Windows\system32\dbgeng.dll
2012-02-14 20:04:02 ----A---- C:\Windows\system32\davclnt.dll
2012-02-14 20:04:02 ----A---- C:\Windows\system32\dataclen.dll
2012-02-14 20:04:02 ----A---- C:\Windows\system32\d3d9.dll
2012-02-14 20:04:01 ----A---- C:\Windows\system32\drivers\csc.sys
2012-02-14 20:04:01 ----A---- C:\Windows\system32\csrstub.exe
2012-02-14 20:04:01 ----A---- C:\Windows\system32\cscui.dll
2012-02-14 20:04:01 ----A---- C:\Windows\system32\cscsvc.dll
2012-02-14 20:04:01 ----A---- C:\Windows\system32\cscript.exe
2012-02-14 20:04:01 ----A---- C:\Windows\system32\cscobj.dll
2012-02-14 20:04:01 ----A---- C:\Windows\system32\CscMig.dll
2012-02-14 20:04:01 ----A---- C:\Windows\system32\cscdll.dll
2012-02-14 20:04:01 ----A---- C:\Windows\system32\cscapi.dll
2012-02-14 20:04:01 ----A---- C:\Windows\system32\cryptui.dll
2012-02-14 20:04:01 ----A---- C:\Windows\system32\cryptsvc.dll
2012-02-14 20:04:01 ----A---- C:\Windows\system32\cdd.dll
2012-02-14 20:04:00 ----A---- C:\Windows\system32\drivers\cdrom.sys
2012-02-14 20:04:00 ----A---- C:\Windows\system32\certmgr.dll
2012-02-14 20:04:00 ----A---- C:\Windows\system32\CertEnrollUI.dll
2012-02-14 20:04:00 ----A---- C:\Windows\system32\CertEnroll.dll
2012-02-14 20:04:00 ----A---- C:\Windows\system32\certcli.dll
2012-02-14 20:03:59 ----A---- C:\Windows\system32\CHxReadingStringIME.dll
2012-02-14 20:03:59 ----A---- C:\Windows\system32\chsbrkr.dll
2012-02-14 20:03:59 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2012-02-14 20:03:59 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2012-02-14 20:03:59 ----A---- C:\Windows\system32\drivers\bthport.sys
2012-02-14 20:03:59 ----A---- C:\Windows\system32\drivers\bthmodem.sys
2012-02-14 20:03:59 ----A---- C:\Windows\system32\cipher.exe
2012-02-14 20:03:59 ----A---- C:\Windows\system32\ci.dll
2012-02-14 20:03:59 ----A---- C:\Windows\system32\cbsra.exe
2012-02-14 20:03:59 ----A---- C:\Windows\system32\bthudtask.exe
2012-02-14 20:03:59 ----A---- C:\Windows\system32\bthserv.dll
2012-02-14 20:03:58 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-02-14 20:03:58 ----A---- C:\Windows\system32\chtbrkr.dll
2012-02-14 20:03:58 ----A---- C:\Windows\system32\chgusr.exe
2012-02-14 20:03:58 ----A---- C:\Windows\system32\chgport.exe
2012-02-14 20:03:58 ----A---- C:\Windows\system32\chglogon.exe
2012-02-14 20:03:58 ----A---- C:\Windows\system32\change.exe
2012-02-14 20:03:58 ----A---- C:\Windows\system32\clfs.sys
2012-02-14 20:03:58 ----A---- C:\Windows\system32\certutil.exe
2012-02-14 20:03:58 ----A---- C:\Windows\system32\certreq.exe
2012-02-14 20:03:58 ----A---- C:\Windows\system32\certprop.dll
2012-02-14 20:03:57 ----A---- C:\Windows\system32\msihnd.dll
2012-02-14 20:03:57 ----A---- C:\Windows\system32\msiexec.exe
2012-02-14 20:03:57 ----A---- C:\Windows\system32\msi.dll
2012-02-14 20:03:57 ----A---- C:\Windows\system32\mshtmled.dll
2012-02-14 20:03:57 ----A---- C:\Windows\system32\mshtml.dll
2012-02-14 20:03:57 ----A---- C:\Windows\system32\msftedit.dll
2012-02-14 20:03:57 ----A---- C:\Windows\system32\msfeeds.dll
2012-02-14 20:03:57 ----A---- C:\Windows\system32\msexch40.dll
2012-02-14 20:03:57 ----A---- C:\Windows\system32\msexcl40.dll
2012-02-14 20:03:57 ----A---- C:\Windows\system32\msdtctm.dll
2012-02-14 20:03:56 ----A---- C:\Windows\system32\msdtcprx.dll
2012-02-14 20:03:56 ----A---- C:\Windows\system32\msctfui.dll
2012-02-14 20:03:56 ----A---- C:\Windows\system32\msctfp.dll
2012-02-14 20:03:56 ----A---- C:\Windows\system32\MsCtfMonitor.dll
2012-02-14 20:03:56 ----A---- C:\Windows\system32\msctf.dll
2012-02-14 20:03:55 ----A---- C:\Windows\system32\msimsg.dll
2012-02-14 20:03:55 ----A---- C:\Windows\system32\MPSSVC.dll
2012-02-14 20:03:55 ----A---- C:\Windows\system32\mprapi.dll
2012-02-14 20:03:55 ----A---- C:\Windows\system32\mpr.dll
2012-02-14 20:03:54 ----A---- C:\Windows\system32\mscandui.dll
2012-02-14 20:03:54 ----A---- C:\Windows\system32\modemui.dll
2012-02-14 20:03:54 ----A---- C:\Windows\system32\MMDevAPI.dll
2012-02-14 20:03:53 ----A---- C:\Windows\system32\mscories.dll
2012-02-14 20:03:53 ----A---- C:\Windows\system32\mscorier.dll
2012-02-14 20:03:53 ----A---- C:\Windows\system32\mscms.dll
2012-02-14 20:03:53 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2012-02-14 20:03:53 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2012-02-14 20:03:53 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2012-02-14 20:03:53 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2012-02-14 20:03:52 ----A---- C:\Windows\system32\NetProjW.dll
2012-02-14 20:03:52 ----A---- C:\Windows\system32\netplwiz.dll
2012-02-14 20:03:52 ----A---- C:\Windows\system32\netlogon.dll
2012-02-14 20:03:52 ----A---- C:\Windows\system32\netiohlp.dll
2012-02-14 20:03:52 ----A---- C:\Windows\system32\netcenter.dll
2012-02-14 20:03:52 ----A---- C:\Windows\system32\netapi32.dll
2012-02-14 20:03:52 ----A---- C:\Windows\system32\ncryptui.dll
2012-02-14 20:03:52 ----A---- C:\Windows\system32\ncrypt.dll
2012-02-14 20:03:52 ----A---- C:\Windows\system32\mtxclu.dll
2012-02-14 20:03:52 ----A---- C:\Windows\system32\drivers\netio.sys
2012-02-14 20:03:52 ----A---- C:\Windows\system32\drivers\netbt.sys
2012-02-14 20:03:52 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2012-02-14 20:03:52 ----A---- C:\Windows\system32\drivers\ndis.sys
2012-02-14 20:03:52 ----A---- C:\Windows\system32\drivers\mup.sys
2012-02-14 20:03:50 ----A---- C:\Windows\system32\NcdProp.dll
2012-02-14 20:03:50 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2012-02-14 20:03:50 ----A---- C:\Windows\system32\msxml6.dll
2012-02-14 20:03:48 ----A---- C:\Windows\system32\newdev.exe
2012-02-14 20:03:48 ----A---- C:\Windows\system32\newdev.dll
2012-02-14 20:03:48 ----A---- C:\Windows\system32\networkmap.dll
2012-02-14 20:03:48 ----A---- C:\Windows\system32\networkitemfactory.dll
2012-02-14 20:03:48 ----A---- C:\Windows\system32\networkexplorer.dll
2012-02-14 20:03:48 ----A---- C:\Windows\system32\netshell.dll
2012-02-14 20:03:47 ----A---- C:\Windows\system32\msscntrs.dll
2012-02-14 20:03:47 ----A---- C:\Windows\system32\msscb.dll
2012-02-14 20:03:47 ----A---- C:\Windows\system32\msrepl40.dll
2012-02-14 20:03:47 ----A---- C:\Windows\system32\msrd3x40.dll
2012-02-14 20:03:47 ----A---- C:\Windows\system32\msrating.dll
2012-02-14 20:03:47 ----A---- C:\Windows\system32\mspbde40.dll
2012-02-14 20:03:47 ----A---- C:\Windows\system32\msnetobj.dll
2012-02-14 20:03:47 ----A---- C:\Windows\system32\msltus40.dll
2012-02-14 20:03:47 ----A---- C:\Windows\system32\drivers\msrpc.sys
2012-02-14 20:03:46 ----A---- C:\Windows\system32\msvcp60.dll
2012-02-14 20:03:46 ----A---- C:\Windows\system32\msv1_0.dll
2012-02-14 20:03:46 ----A---- C:\Windows\system32\msutb.dll
2012-02-14 20:03:46 ----A---- C:\Windows\system32\msrd2x40.dll
2012-02-14 20:03:46 ----A---- C:\Windows\system32\msjtes40.dll
2012-02-14 20:03:46 ----A---- C:\Windows\system32\msjter40.dll
2012-02-14 20:03:46 ----A---- C:\Windows\system32\msjint40.dll
2012-02-14 20:03:46 ----A---- C:\Windows\system32\msjetoledb40.dll
2012-02-14 20:03:46 ----A---- C:\Windows\system32\msjet40.dll
2012-02-14 20:03:46 ----A---- C:\Windows\system32\msisip.dll
2012-02-14 20:03:46 ----A---- C:\Windows\system32\msinfo32.exe
2012-02-14 20:03:46 ----A---- C:\Windows\system32\msimtf.dll
2012-02-14 20:03:46 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2012-02-14 20:03:45 ----A---- C:\Windows\system32\msxbde40.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\mswstr10.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\mswsock.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\mswdat10.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\MSVidCtl.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\msvcrt.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\mstlsapi.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\mstime.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\mstext40.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\mssvp.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\msstrc.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\mssrch.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\mssprxy.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\mssphtb.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\mssph.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\mssitlb.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\msshsq.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\msshooks.dll
2012-02-14 20:03:45 ----A---- C:\Windows\system32\msscp.dll
2012-02-14 20:03:44 ----A---- C:\Windows\system32\InkEd.dll
2012-02-14 20:03:44 ----A---- C:\Windows\system32\infocardapi.dll
2012-02-14 20:03:44 ----A---- C:\Windows\system32\inetppui.dll
2012-02-14 20:03:44 ----A---- C:\Windows\system32\inetpp.dll
2012-02-14 20:03:42 ----A---- C:\Windows\system32\jsproxy.dll
2012-02-14 20:03:42 ----A---- C:\Windows\system32\jscript.dll
2012-02-14 20:03:42 ----A---- C:\Windows\system32\iscsilog.dll
2012-02-14 20:03:42 ----A---- C:\Windows\system32\ipsmsnap.dll
2012-02-14 20:03:42 ----A---- C:\Windows\system32\IPSECSVC.DLL
2012-02-14 20:03:42 ----A---- C:\Windows\system32\imm32.dll
2012-02-14 20:03:41 ----A---- C:\Windows\system32\ipsecsnp.dll
2012-02-14 20:03:41 ----A---- C:\Windows\system32\ipconfig.exe
2012-02-14 20:03:41 ----A---- C:\Windows\system32\input.dll
2012-02-14 20:03:40 ----A---- C:\Windows\system32\iphlpsvc.dll
2012-02-14 20:03:40 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2012-02-14 20:03:40 ----A---- C:\Windows\system32\iertutil.dll
2012-02-14 20:03:40 ----A---- C:\Windows\system32\iepeers.dll
2012-02-14 20:03:40 ----A---- C:\Windows\system32\ieframe.dll
2012-02-14 20:03:39 ----A---- C:\Windows\system32\IMJP10K.DLL
2012-02-14 20:03:39 ----A---- C:\Windows\system32\ifmon.dll
2012-02-14 20:03:39 ----A---- C:\Windows\system32\iedkcs32.dll
2012-02-14 20:03:39 ----A---- C:\Windows\system32\ieapfltr.dll
2012-02-14 20:03:39 ----A---- C:\Windows\system32\ieaksie.dll
2012-02-14 20:03:39 ----A---- C:\Windows\system32\icardres.dll
2012-02-14 20:03:39 ----A---- C:\Windows\system32\icardagt.exe
2012-02-14 20:03:39 ----A---- C:\Windows\system32\iassvcs.dll
2012-02-14 20:03:39 ----A---- C:\Windows\system32\iassdo.dll
2012-02-14 20:03:39 ----A---- C:\Windows\system32\iassam.dll
2012-02-14 20:03:39 ----A---- C:\Windows\system32\iasrecst.dll
2012-02-14 20:03:39 ----A---- C:\Windows\system32\iasrad.dll
2012-02-14 20:03:39 ----A---- C:\Windows\system32\iaspolcy.dll
2012-02-14 20:03:38 ----A---- C:\Windows\system32\imapi2fs.dll
2012-02-14 20:03:38 ----A---- C:\Windows\system32\imapi2.dll
2012-02-14 20:03:38 ----A---- C:\Windows\system32\imapi.dll
2012-02-14 20:03:38 ----A---- C:\Windows\system32\IKEEXT.DLL
2012-02-14 20:03:37 ----A---- C:\Windows\system32\mfplat.dll
2012-02-14 20:03:36 ----A---- C:\Windows\system32\mfc42u.dll
2012-02-14 20:03:36 ----A---- C:\Windows\system32\mfc42.dll
2012-02-14 20:03:36 ----A---- C:\Windows\system32\mf.dll
2012-02-14 20:03:35 ----A---- C:\Windows\system32\mimefilt.dll
2012-02-14 20:03:35 ----A---- C:\Windows\system32\milcore.dll
2012-02-14 20:03:34 ----A---- C:\Windows\system32\mmcndmgr.dll
2012-02-14 20:03:34 ----A---- C:\Windows\system32\mmcico.dll
2012-02-14 20:03:34 ----A---- C:\Windows\system32\mmci.dll
2012-02-14 20:03:34 ----A---- C:\Windows\system32\mmc.exe
2012-02-14 20:03:34 ----A---- C:\Windows\system32\midimap.dll
2012-02-14 20:03:33 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-02-14 20:03:33 ----A---- C:\Windows\system32\drivers\ks.sys
2012-02-14 20:03:32 ----A---- C:\Windows\system32\l2nacp.dll
2012-02-14 20:03:32 ----A---- C:\Windows\system32\korwbrkr.dll
2012-02-14 20:03:32 ----A---- C:\Windows\system32\kd1394.dll
2012-02-14 20:03:31 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2012-02-14 20:03:31 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2012-02-14 20:03:31 ----A---- C:\Windows\system32\mblctr.exe
2012-02-14 20:03:31 ----A---- C:\Windows\system32\kerberos.dll
2012-02-14 20:03:31 ----A---- C:\Windows\system32\kdusb.dll
2012-02-14 20:03:31 ----A---- C:\Windows\system32\kdcom.dll
2012-02-14 20:03:30 ----A---- C:\Windows\system32\logman.exe
2012-02-14 20:03:30 ----A---- C:\Windows\system32\logagent.exe
2012-02-14 20:03:30 ----A---- C:\Windows\system32\localspl.dll
2012-02-14 20:03:29 ----A---- C:\Windows\system32\Magnify.exe
2012-02-14 20:03:29 ----A---- C:\Windows\system32\logoff.exe
2012-02-14 20:03:28 ----A---- C:\Windows\system32\wercon.exe
2012-02-14 20:03:28 ----A---- C:\Windows\system32\wer.dll
2012-02-14 20:03:28 ----A---- C:\Windows\system32\webcheck.dll
2012-02-14 20:03:28 ----A---- C:\Windows\system32\WebClnt.dll
2012-02-14 20:03:28 ----A---- C:\Windows\system32\wdscore.dll
2012-02-14 20:03:28 ----A---- C:\Windows\system32\shsetup.dll
2012-02-14 20:03:28 ----A---- C:\Windows\system32\lsasrv.dll
2012-02-14 20:03:27 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2012-02-14 20:03:27 ----A---- C:\Windows\system32\WindowsCodecs.dll
2012-02-14 20:03:27 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2012-02-14 20:03:27 ----A---- C:\Windows\system32\wdc.dll
2012-02-14 20:03:26 ----A---- C:\Windows\system32\wininet.dll
2012-02-14 20:03:26 ----A---- C:\Windows\system32\winhttp.dll
2012-02-14 20:03:26 ----A---- C:\Windows\system32\win32spl.dll
2012-02-14 20:03:26 ----A---- C:\Windows\system32\win32k.sys
2012-02-14 20:03:26 ----A---- C:\Windows\system32\whealogr.dll
2012-02-14 20:03:26 ----A---- C:\Windows\system32\wevtutil.exe
2012-02-14 20:03:26 ----A---- C:\Windows\system32\wevtsvc.dll
2012-02-14 20:03:26 ----A---- C:\Windows\system32\wevtapi.dll
2012-02-14 20:03:26 ----A---- C:\Windows\system32\wersvc.dll
2012-02-14 20:03:26 ----A---- C:\Windows\system32\WerFaultSecure.exe
2012-02-14 20:03:26 ----A---- C:\Windows\system32\WerFault.exe
2012-02-14 20:03:25 ----A---- C:\Windows\system32\wiaservc.dll
2012-02-14 20:03:25 ----A---- C:\Windows\system32\wiaaut.dll
2012-02-14 20:03:25 ----A---- C:\Windows\system32\version.dll
2012-02-14 20:03:25 ----A---- C:\Windows\system32\vdsutil.dll
2012-02-14 20:03:25 ----A---- C:\Windows\system32\vdsdyn.dll
2012-02-14 20:03:25 ----A---- C:\Windows\system32\vds.exe
2012-02-14 20:03:25 ----A---- C:\Windows\system32\vdmdbg.dll
2012-02-14 20:03:25 ----A---- C:\Windows\system32\vbscript.dll
2012-02-14 20:03:24 ----A---- C:\Windows\system32\uxsms.dll
2012-02-14 20:03:24 ----A---- C:\Windows\system32\Utilman.exe
2012-02-14 20:03:24 ----A---- C:\Windows\system32\userenv.dll
2012-02-14 20:03:24 ----A---- C:\Windows\system32\user32.dll
2012-02-14 20:03:24 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2012-02-14 20:03:24 ----A---- C:\Windows\system32\drivers\usbport.sys
2012-02-14 20:03:23 ----A---- C:\Windows\system32\wcnwiz2.dll
2012-02-14 20:03:23 ----A---- C:\Windows\system32\wcnwiz.dll
2012-02-14 20:03:23 ----A---- C:\Windows\system32\WcnNetsh.dll
2012-02-14 20:03:23 ----A---- C:\Windows\system32\wcncsvc.dll
2012-02-14 20:03:23 ----A---- C:\Windows\system32\wbengine.exe
2012-02-14 20:03:23 ----A---- C:\Windows\system32\usp10.dll
2012-02-14 20:03:23 ----A---- C:\Windows\system32\usercpl.dll
2012-02-14 20:03:23 ----A---- C:\Windows\system32\drivers\watchdog.sys
2012-02-14 20:03:23 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2012-02-14 20:03:22 ----A---- C:\Windows\system32\WSDMon.dll
2012-02-14 20:03:22 ----A---- C:\Windows\system32\wsdchngr.dll
2012-02-14 20:03:22 ----A---- C:\Windows\system32\wscisvif.dll
2012-02-14 20:03:22 ----A---- C:\Windows\system32\WscEapPr.dll
2012-02-14 20:03:22 ----A---- C:\Windows\system32\wscapi.dll
2012-02-14 20:03:22 ----A---- C:\Windows\system32\w32time.dll
2012-02-14 20:03:22 ----A---- C:\Windows\system32\VSSVC.exe
2012-02-14 20:03:22 ----A---- C:\Windows\system32\vssapi.dll
2012-02-14 20:03:22 ----A---- C:\Windows\system32\drivers\volsnap.sys
2012-02-14 20:03:21 ----A---- C:\Windows\system32\wscsvc.dll
2012-02-14 20:03:21 ----A---- C:\Windows\system32\wscript.exe
2012-02-14 20:03:21 ----A---- C:\Windows\system32\wscntfy.dll
2012-02-14 20:03:21 ----A---- C:\Windows\system32\wow32.dll
2012-02-14 20:03:21 ----A---- C:\Windows\system32\WMVXENCD.DLL
2012-02-14 20:03:21 ----A---- C:\Windows\system32\WMVSDECD.DLL
2012-02-14 20:03:21 ----A---- C:\Windows\system32\WMVENCOD.DLL
2012-02-14 20:03:21 ----A---- C:\Windows\system32\WMVCORE.DLL
2012-02-14 20:03:20 ----A---- C:\Windows\system32\xmlfilter.dll
2012-02-14 20:03:20 ----A---- C:\Windows\system32\wusa.exe
2012-02-14 20:03:20 ----A---- C:\Windows\system32\wshext.dll
2012-02-14 20:03:20 ----A---- C:\Windows\system32\wshbth.dll
2012-02-14 20:03:20 ----A---- C:\Windows\system32\wsepno.dll
2012-02-14 20:03:19 ----A---- C:\Windows\system32\wsnmp32.dll
2012-02-14 20:03:19 ----A---- C:\Windows\system32\wlanui.dll
2012-02-14 20:03:19 ----A---- C:\Windows\system32\wlansvc.dll
2012-02-14 20:03:19 ----A---- C:\Windows\system32\wlanpref.dll
2012-02-14 20:03:19 ----A---- C:\Windows\system32\wlanmsm.dll
2012-02-14 20:03:19 ----A---- C:\Windows\system32\wlangpui.dll
2012-02-14 20:03:19 ----A---- C:\Windows\system32\wisptis.exe
2012-02-14 20:03:18 ----A---- C:\Windows\system32\wlgpclnt.dll
2012-02-14 20:03:18 ----A---- C:\Windows\system32\Wldap32.dll
2012-02-14 20:03:18 ----A---- C:\Windows\system32\WinSCard.dll
2012-02-14 20:03:18 ----A---- C:\Windows\system32\WinSAT.exe
2012-02-14 20:03:18 ----A---- C:\Windows\system32\winrnr.dll
2012-02-14 20:03:18 ----A---- C:\Windows\system32\winresume.exe
2012-02-14 20:03:18 ----A---- C:\Windows\system32\winmm.dll
2012-02-14 20:03:18 ----A---- C:\Windows\system32\winlogon.exe
2012-02-14 20:03:18 ----A---- C:\Windows\system32\winload.exe
2012-02-14 20:03:17 ----A---- C:\Windows\system32\wmpmde.dll
2012-02-14 20:03:17 ----A---- C:\Windows\system32\WMPhoto.dll
2012-02-14 20:03:17 ----A---- C:\Windows\system32\wmpeffects.dll
2012-02-14 20:03:17 ----A---- C:\Windows\system32\WMNetMgr.dll
2012-02-14 20:03:15 ----A---- C:\Windows\system32\wmdrmsdk.dll
2012-02-14 20:03:15 ----A---- C:\Windows\system32\sud.dll
2012-02-14 20:03:15 ----A---- C:\Windows\system32\Storprop.dll
2012-02-14 20:03:15 ----A---- C:\Windows\system32\stobject.dll
2012-02-14 20:03:15 ----A---- C:\Windows\system32\drivers\stream.sys
2012-02-14 20:03:15 ----A---- C:\Windows\system32\drivers\Storport.sys
2012-02-14 20:03:14 ----A---- C:\Windows\system32\srvsvc.dll
2012-02-14 20:03:14 ----A---- C:\Windows\system32\srchadmin.dll
2012-02-14 20:03:14 ----A---- C:\Windows\system32\srcore.dll
2012-02-14 20:03:14 ----A---- C:\Windows\system32\drivers\srvnet.sys
2012-02-14 20:03:14 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-02-14 20:03:14 ----A---- C:\Windows\system32\drivers\srv.sys
2012-02-14 20:03:13 ----A---- C:\Windows\system32\sysmain.dll
2012-02-14 20:03:13 ----A---- C:\Windows\system32\sysclass.dll
2012-02-14 20:03:13 ----A---- C:\Windows\system32\SyncCenter.dll
2012-02-14 20:03:13 ----A---- C:\Windows\system32\swprv.dll
2012-02-14 20:03:12 ----A---- C:\Windows\system32\smss.exe
2012-02-14 20:03:12 ----A---- C:\Windows\system32\SMBHelperClass.dll
2012-02-14 20:03:12 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2012-02-14 20:03:12 ----A---- C:\Windows\system32\slwmi.dll
2012-02-14 20:03:12 ----A---- C:\Windows\system32\drivers\smb.sys
2012-02-14 20:03:11 ----A---- C:\Windows\system32\SmiEngine.dll
2012-02-14 20:03:10 ----A---- C:\Windows\system32\slwga.dll
2012-02-14 20:03:10 ----A---- C:\Windows\system32\SLUINotify.dll
2012-02-14 20:03:10 ----A---- C:\Windows\system32\SLUI.exe
2012-02-14 20:03:10 ----A---- C:\Windows\system32\SLsvc.exe
2012-02-14 20:03:10 ----A---- C:\Windows\system32\slmgr.vbs
2012-02-14 20:03:10 ----A---- C:\Windows\system32\SLLUA.exe
2012-02-14 20:03:10 ----A---- C:\Windows\system32\slcinst.dll
2012-02-14 20:03:10 ----A---- C:\Windows\system32\SLCExt.dll
2012-02-14 20:03:10 ----A---- C:\Windows\system32\slcc.dll
2012-02-14 20:03:10 ----A---- C:\Windows\system32\SLC.dll
2012-02-14 20:03:10 ----A---- C:\Windows\system32\shwebsvc.dll
2012-02-14 20:03:10 ----A---- C:\Windows\system32\shsvcs.dll
2012-02-14 20:03:09 ----A---- C:\Windows\system32\spp.dll
2012-02-14 20:03:09 ----A---- C:\Windows\system32\spoolsv.exe
2012-02-14 20:03:09 ----A---- C:\Windows\system32\spoolss.dll
2012-02-14 20:03:09 ----A---- C:\Windows\system32\spinstall.exe
2012-02-14 20:03:09 ----A---- C:\Windows\system32\spcmsg.dll
2012-02-14 20:03:09 ----A---- C:\Windows\system32\SLCommDlg.dll
2012-02-14 20:03:08 ----A---- C:\Windows\system32\sqlsrv32.dll
2012-02-14 20:03:08 ----A---- C:\Windows\system32\spwizui.dll
2012-02-14 20:03:08 ----A---- C:\Windows\system32\spwinsat.dll
2012-02-14 20:03:08 ----A---- C:\Windows\system32\spreview.exe
2012-02-14 20:03:08 ----A---- C:\Windows\system32\sperror.dll
2012-02-14 20:03:08 ----A---- C:\Windows\system32\SndVol.exe
2012-02-14 20:03:08 ----A---- C:\Windows\system32\drivers\spsys.sys
2012-02-14 20:03:07 ----A---- C:\Windows\system32\TsWpfWrp.exe
2012-02-14 20:03:07 ----A---- C:\Windows\system32\TSTheme.exe
2012-02-14 20:03:07 ----A---- C:\Windows\system32\softkbd.dll
2012-02-14 20:03:07 ----A---- C:\Windows\system32\SnippingTool.exe
2012-02-14 20:03:06 ----A---- C:\Windows\system32\tskill.exe
2012-02-14 20:03:06 ----A---- C:\Windows\system32\tsdiscon.exe
2012-02-14 20:03:06 ----A---- C:\Windows\system32\drivers\udfs.sys
2012-02-14 20:03:05 ----A---- C:\Windows\system32\zipfldr.dll
2012-02-14 20:03:05 ----A---- C:\Windows\system32\urlmon.dll
2012-02-14 20:03:05 ----A---- C:\Windows\system32\untfs.dll
2012-02-14 20:03:05 ----A---- C:\Windows\system32\drivers\usbhub.sys
2012-02-14 20:03:05 ----A---- C:\Windows\system32\drivers\usbehci.sys
2012-02-14 20:03:05 ----A---- C:\Windows\system32\drivers\USBCAMD.sys
2012-02-14 20:03:05 ----A---- C:\Windows\system32\drivers\usb8023.sys
2012-02-14 20:03:04 ----A---- C:\Windows\system32\umrdp.dll
2012-02-14 20:03:04 ----A---- C:\Windows\system32\umpnpmgr.dll
2012-02-14 20:03:04 ----A---- C:\Windows\system32\ulib.dll
2012-02-14 20:03:04 ----A---- C:\Windows\system32\uDWM.dll
2012-02-14 20:03:04 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2012-02-14 20:03:03 ----A---- C:\Windows\system32\systemcpl.dll
2012-02-14 20:02:59 ----A---- C:\Windows\system32\tscon.exe
2012-02-14 20:02:59 ----A---- C:\Windows\system32\tscfgwmi.dll
2012-02-14 20:02:59 ----A---- C:\Windows\system32\tquery.dll
2012-02-14 20:02:59 ----A---- C:\Windows\system32\termsrv.dll
2012-02-14 20:02:59 ----A---- C:\Windows\system32\tcpmon.dll
2012-02-14 20:02:59 ----A---- C:\Windows\system32\tcpipcfg.dll
2012-02-14 20:02:59 ----A---- C:\Windows\system32\tapisrv.dll
2012-02-14 20:02:58 ----A---- C:\Windows\system32\themeui.dll
2012-02-14 20:02:58 ----A---- C:\Windows\system32\themecpl.dll
2012-02-14 20:02:58 ----A---- C:\Windows\system32\thawbrkr.dll
2012-02-14 20:02:58 ----A---- C:\Windows\system32\telnet.exe
2012-02-14 20:02:58 ----A---- C:\Windows\system32\drivers\termdd.sys
2012-02-14 20:02:58 ----A---- C:\Windows\system32\drivers\tdx.sys
2012-02-14 19:58:27 ----D---- C:\Windows\system32\EventProviders
2012-02-14 19:26:30 ----D---- C:\ProgramData\ESET
2012-02-14 16:01:42 ----D---- C:\Users\ss\AppData\Roaming\Malwarebytes
2012-02-14 16:01:34 ----D---- C:\ProgramData\Malwarebytes
2012-02-14 16:01:33 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-02-14 16:01:33 ----A---- C:\Windows\system32\drivers\mbam.sys
2012-02-13 23:20:23 ----D---- C:\Program Files\trend micro
2012-02-13 23:20:22 ----D---- C:\rsit
2012-02-13 22:26:01 ----D---- C:\Program Files\Common Files\Symantec Shared
2012-02-13 22:25:57 ----D---- C:\ProgramData\Norton
2012-02-13 22:25:56 ----D---- C:\ProgramData\NortonInstaller
2012-02-13 21:54:07 ----ASH---- C:\hiberfil.sys
2012-02-12 16:26:13 ----D---- C:\xampp(159)
2012-02-11 12:04:47 ----D---- C:\Program Files\ESET
2012-02-07 13:47:09 ----A---- C:\ProgramData\k4bel1vX.dat
2012-01-25 12:26:15 ----D---- C:\Program Files\PDFCreator
2012-01-15 18:09:42 ----A---- C:\Windows\system32\yv12vfw.dll
2012-01-15 18:09:42 ----A---- C:\Windows\system32\i420vfw.dll
2012-01-15 18:09:42 ----A---- C:\Windows\system32\AVSredirect.dll
2012-01-15 18:07:09 ----A---- C:\user.js
2012-01-15 18:06:58 ----D---- C:\Users\ss\AppData\Roaming\Babylon
2012-01-15 18:06:58 ----D---- C:\ProgramData\Babylon
2012-01-15 18:06:40 ----D---- C:\Program Files\eRightSoft
2012-01-15 17:57:52 ----D---- C:\Users\ss\AppData\Roaming\Apple Computer

======List of files/folders modified in the last 1 month======

2012-02-14 21:18:03 ----D---- C:\Windows\Temp
2012-02-14 21:04:43 ----D---- C:\Windows\System32
2012-02-14 21:04:43 ----D---- C:\Windows\inf
2012-02-14 21:04:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-02-14 21:00:26 ----D---- C:\Windows
2012-02-14 20:57:37 ----D---- C:\Windows\system32\catroot
2012-02-14 20:56:28 ----A---- C:\sysiclog.txt
2012-02-14 20:48:35 ----D---- C:\Program Files\Windows Sidebar
2012-02-14 20:48:35 ----D---- C:\Program Files\Windows Media Player
2012-02-14 20:48:35 ----D---- C:\Program Files\Windows Mail
2012-02-14 20:48:35 ----D---- C:\Program Files\Windows Journal
2012-02-14 20:48:35 ----D---- C:\Program Files\Windows Collaboration
2012-02-14 20:48:35 ----D---- C:\Program Files\Windows Calendar
2012-02-14 20:48:35 ----D---- C:\Program Files\Movie Maker
2012-02-14 20:48:35 ----D---- C:\Program Files\Internet Explorer
2012-02-14 20:48:34 ----D---- C:\Program Files\Windows Photo Gallery
2012-02-14 20:48:34 ----D---- C:\Program Files\Common Files\System
2012-02-14 20:48:33 ----D---- C:\Windows\servicing
2012-02-14 20:48:33 ----D---- C:\Program Files\Windows Defender
2012-02-14 20:48:28 ----D---- C:\Windows\system32\lv-LV
2012-02-14 20:48:28 ----D---- C:\Windows\PolicyDefinitions
2012-02-14 20:48:28 ----D---- C:\Windows\IME
2012-02-14 20:48:27 ----D---- C:\Windows\system32\XPSViewer
2012-02-14 20:48:27 ----D---- C:\Windows\system32\sk-SK
2012-02-14 20:48:27 ----D---- C:\Windows\system32\oobe
2012-02-14 20:48:27 ----D---- C:\Windows\system32\migration
2012-02-14 20:48:27 ----D---- C:\Windows\system32\ko-KR
2012-02-14 20:48:27 ----D---- C:\Windows\system32\it-IT
2012-02-14 20:48:27 ----D---- C:\Windows\system32\hr-HR
2012-02-14 20:48:27 ----D---- C:\Windows\system32\et-EE
2012-02-14 20:48:27 ----D---- C:\Windows\system32\en-US
2012-02-14 20:48:27 ----D---- C:\Windows\system32\el-GR
2012-02-14 20:48:27 ----D---- C:\Windows\system32\de-DE
2012-02-14 20:48:27 ----D---- C:\Windows\system32\da-DK
2012-02-14 20:48:26 ----D---- C:\Windows\system32\sv-SE
2012-02-14 20:48:26 ----D---- C:\Windows\system32\setup
2012-02-14 20:48:26 ----D---- C:\Windows\system32\ru-RU
2012-02-14 20:48:26 ----D---- C:\Windows\system32\he-IL
2012-02-14 20:48:26 ----D---- C:\Windows\system32\fr-FR
2012-02-14 20:48:26 ----D---- C:\Windows\system32\AdvancedInstallers
2012-02-14 20:48:25 ----D---- C:\Windows\system32\fi-FI
2012-02-14 20:48:25 ----D---- C:\Windows\system32\cs-CZ
2012-02-14 20:48:25 ----D---- C:\Windows\system32\cs
2012-02-14 20:48:24 ----D---- C:\Windows\system32\SLUI
2012-02-14 20:48:24 ----D---- C:\Windows\system32\pt-PT
2012-02-14 20:48:24 ----D---- C:\Windows\system32\hu-HU
2012-02-14 20:48:23 ----D---- C:\Windows\system32\zh-TW
2012-02-14 20:48:23 ----D---- C:\Windows\system32\zh-CN
2012-02-14 20:48:23 ----D---- C:\Windows\system32\uk-UA
2012-02-14 20:48:23 ----D---- C:\Windows\system32\sr-Latn-CS
2012-02-14 20:48:23 ----D---- C:\Windows\system32\sl-SI
2012-02-14 20:48:23 ----D---- C:\Windows\system32\pl-PL
2012-02-14 20:48:23 ----D---- C:\Windows\system32\manifeststore
2012-02-14 20:48:23 ----D---- C:\Windows\system32\ja-JP
2012-02-14 20:48:23 ----D---- C:\Windows\system32\inetsrv
2012-02-14 20:48:23 ----D---- C:\Windows\system32\es-ES
2012-02-14 20:48:23 ----D---- C:\Windows\system32\bg-BG
2012-02-14 20:48:21 ----D---- C:\Windows\system32\wbem
2012-02-14 20:48:21 ----D---- C:\Windows\system32\tr-TR
2012-02-14 20:48:21 ----D---- C:\Windows\system32\th-TH
2012-02-14 20:48:21 ----D---- C:\Windows\system32\ro-RO
2012-02-14 20:48:21 ----D---- C:\Windows\system32\drivers\cs-CZ
2012-02-14 20:48:21 ----D---- C:\Windows\system32\drivers
2012-02-14 20:48:20 ----D---- C:\Windows\system32\pt-BR
2012-02-14 20:48:20 ----D---- C:\Windows\system32\nl-NL
2012-02-14 20:48:20 ----D---- C:\Windows\system32\nb-NO
2012-02-14 20:48:20 ----D---- C:\Windows\system32\migwiz
2012-02-14 20:48:20 ----D---- C:\Windows\system32\lt-LT
2012-02-14 20:48:20 ----D---- C:\Windows\system32\ar-SA
2012-02-14 20:48:02 ----RSD---- C:\Windows\Fonts
2012-02-14 20:48:02 ----D---- C:\Windows\AppPatch
2012-02-14 20:47:56 ----D---- C:\Windows\system32\Boot
2012-02-14 20:45:31 ----D---- C:\Windows\system32\drivers\UMDF
2012-02-14 20:34:05 ----D---- C:\Windows\winsxs
2012-02-14 20:31:56 ----A---- C:\Windows\fonts\GlobalUserInterface.CompositeFont
2012-02-14 20:26:33 ----D---- C:\Windows\system32\catroot2
2012-02-14 20:05:06 ----D---- C:\Windows\Tasks
2012-02-14 20:00:48 ----SHD---- C:\System Volume Information
2012-02-14 19:29:37 ----SHD---- C:\Windows\Installer
2012-02-14 19:26:30 ----HD---- C:\ProgramData
2012-02-14 16:01:33 ----RD---- C:\Program Files
2012-02-14 10:49:50 ----D---- C:\Windows\Minidump
2012-02-13 22:33:23 ----D---- C:\Program Files\Mozilla Firefox
2012-02-13 22:29:49 ----D---- C:\Program Files\Bonjour
2012-02-13 22:26:01 ----D---- C:\Program Files\Common Files
2012-02-13 22:18:59 ----D---- C:\Users\ss\AppData\Roaming\Skype
2012-02-13 21:51:25 ----D---- C:\Windows\system32\config
2012-02-13 21:50:34 ----D---- C:\xampp
2012-02-13 21:50:28 ----D---- C:\xampp1
2012-02-13 21:50:28 ----D---- C:\Windows\system32\spool
2012-02-13 21:50:28 ----D---- C:\Windows\system32\Msdtc
2012-02-13 21:50:28 ----D---- C:\Windows\system32\drivers\etc
2012-02-13 21:50:28 ----D---- C:\Windows\system32\CodeIntegrity
2012-02-13 21:50:27 ----D---- C:\Users\ss\AppData\Roaming\PSpad
2012-02-13 21:50:21 ----D---- C:\Program Files\PSPad editor
2012-02-13 21:50:21 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2012-02-13 21:50:06 ----D---- C:\Windows\registration
2012-02-10 22:47:10 ----D---- C:\Windows\Debug
2012-01-25 13:51:39 ----D---- C:\Users\ss\AppData\Roaming\SolidDocuments
2012-01-25 12:26:49 ----D---- C:\Program Files\Common Files\Spigot
2012-01-15 18:40:48 ----D---- C:\Users\ss\AppData\Roaming\Vso

pokračování log.txt


======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2008-07-22 319000]
R0 Shockprf;Shockprf; C:\Windows\System32\DRIVERS\Apsx86.sys [2008-05-15 114728]
R0 TPDIGIMN;TPDIGIMN; C:\Windows\System32\DRIVERS\ApsHM86.sys [2008-05-15 19496]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 lenovo.smi;Lenovo System Interface Driver; C:\Windows\system32\DRIVERS\smiif32.sys [2008-05-12 13480]
R1 TPPWRIF;TPPWRIF; C:\Windows\System32\drivers\Tppwr32v.sys [2008-07-28 12080]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2011-08-09 163424]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2011-08-04 103112]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2008-04-09 12672]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2008-02-15 46592]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R2 tvtfilter;tvtfilter; C:\Windows\system32\DRIVERS\tvtfilter.sys [2008-08-16 33536]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2007-10-18 8704]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2008-03-07 154672]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-06-23 3698688]
R3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver; C:\Windows\System32\Drivers\ATSwpWDF.sys [2008-05-10 475136]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2007-11-29 181760]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2008-05-28 220672]
R3 HECI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2008-03-26 40832]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2008-03-25 980992]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2008-03-25 207872]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2008-02-20 22696]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-12-10 20464]
R3 NETw5v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ; C:\Windows\system32\DRIVERS\NETw5v32.sys [2008-05-01 3660800]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-11-08 47360]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\Windows\system32\DRIVERS\psadd.sys [2008-08-16 30144]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-10 89088]
R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2008-01-21 45624]
R3 TVTI2C;Lenovo SM bus driver; C:\Windows\system32\DRIVERS\Tvti2c.sys [2008-02-22 37312]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2008-03-25 661504]
S1 tvtumon;tvtumon; C:\Windows\system32\DRIVERS\tvtumon.sys [2008-05-24 48192]
S3 appliandMP;appliandMP; C:\Windows\system32\DRIVERS\appliand.sys []
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-10 22528]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-10 507904]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-10 29696]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2008-03-17 81960]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2008-03-17 100392]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2008-01-29 29736]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2008-03-17 17320]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\Windows\system32\DRIVERS\e1e6032.sys [2008-01-21 220672]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-10 148992]
S3 Ser2pl;USB-to-Serial Comm. Port; C:\Windows\system32\DRIVERS\ser2pl.sys [2007-07-20 48640]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-04-19 128104]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 RsFx0150;RsFx0150 Driver; C:\Windows\system32\DRIVERS\RsFx0150.sys [2010-04-03 240608]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcPrfMgrSvc;Ac Profile Manager Service; C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe [2008-07-30 116000]
R2 AcSvc;Access Connections Main Service; C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe [2008-07-30 238880]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 ApRunSvc;Alps Application Launcher Service; C:\Program Files\Apoint2K\ApRunSvc.exe [2007-07-23 36864]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-06-23 692224]
R2 ATService;AuthenTec Fingerprint Service; C:\Windows\system32\AtService.exe [2008-05-10 1160440]
R2 BcmSqlStartupSvc;Business Contact Manager SQL Server Startup Service; c:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2008-01-12 30312]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe [2008-03-17 518696]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-09-22 974944]
R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2008-05-06 815104]
R2 IBMPMSVC;ThinkPad PM Service; C:\Windows\system32\ibmpmsvc.exe [2008-02-20 36128]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-05 112152]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2011-04-24 42872672]
R2 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE [2008-07-28 66848]
R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2008-05-06 466944]
R2 SCPDFReadSpool;SolidConverterPDFReadSpool; C:\Windows\Installer\MSIC0D4.tmp [2011-04-05 180032]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-04-03 97632]
R2 SUService;System Update; c:\Program Files\Lenovo\System Update\SUService.exe [2008-05-24 32768]
R2 ThinkVantage Registry Monitor Service;ThinkVantage Registry Monitor Service; c:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe [2008-06-14 746808]
R2 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\Windows\System32\TPHDEXLG.exe [2008-05-15 37416]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2008-03-27 58736]
R2 TSSCoreService;TSS Core Service; C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe [2008-06-14 779576]
R2 TVT Backup Protection Service;TVT Backup Protection Service; C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe [2008-05-25 520192]
R2 TVT Scheduler;TVT Scheduler; c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [2008-05-25 1155072]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2007-10-18 386560]
S2 Apache2.2;Apache2.2; c:\xampp\apache\bin\httpd.exe [2011-09-10 18432]
S2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
S2 mysql;mysql; C:\xampp\mysql\bin\mysqld.exe [2011-09-09 8158720]
S2 TVT Backup Service;TVT Backup Service; C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe [2008-05-25 950272]
S2 TVT_UpdateMonitor;TVT Windows Update Monitor; C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe [2008-05-24 253952]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-12-31 654848]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2010-04-03 44896]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-04-24 367456]
S4 SQLBrowser;SQL Server Browser; c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-04-03 267616]

-----------------EOF-----------------

R3 - URLSearchHook: (no name) - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
FIXni v HijackThis - inac OK

Hotovo, děkuji moc a přeji pěkný den,

Pepis

rado sa stalo
maj sa fajn