Logfile of random's system information tool 1.09 (written by random/random)
Run by Dusan at 2012-05-17 18:03:16
Microsoft® Windows Vista™ Home Basic Service Pack 1
System drive C: has 79 GB (79%) free of 100 GB
Total RAM: 4094 MB (53% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:03:21, on 17. 5. 2012
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Program Files\ASUS\Six Engine\SixEngine.exe
C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Dusan.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 SPIRun.dll,RunDLLEntry
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 6228 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
C:\Windows\System32\spoolsv.exe
taskeng.exe {0AC8973A-1E38-4FCD-A441-F1155695D569}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {2580A03F-1C59-4164-B5DD-AC93BEE97A7A}
"C:\Program Files\ASUS\Six Engine\SixEngine.exe"
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-7662dd1e-4279-49fa-90f4-044569218316 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-666c2168-f7fd-441c-89e8-47eb3cf856ad -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-313d0875-b7b8-40dd-97e3-d7d91c208f8c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:71e3891b-09c6-46fc-a874-1bd8c4818b6c
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\System32\mobsync.exe -Embedding
"C:\Program Files\Windows Defender\MSASCui.exe" -hide
"C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
"C:\Windows\System32\rundll32.exe" SPIRun.dll,RunDLLEntry
"C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe"
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Officejet Pro 8500 A909a Series#1337264370" -Startup
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding
C:\Windows\System32\svchost.exe -k wdisvc
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot) " "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 652 656 664 65536 660
"C:\Users\Dusan\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-07 1211776]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2008-10-16 505136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-07 1211776]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1584184]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"VolPanel"=C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [2006-07-28 122880]
"P17Helper"=Rundll32 SPIRun.dll,RunDLLEntry []
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-04-06 641664]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.ACDV"=ACDV.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======List of files/folders created in the last 1 month======
2012-05-17 18:03:16 ----D---- C:\rsit
2012-05-17 18:03:16 ----D---- C:\Program Files\trend micro
2012-05-17 17:15:06 ----A---- C:\Windows\system32\drivers\aswFW.sys
2012-05-17 17:14:45 ----D---- C:\Windows\LastGood
2012-05-17 17:14:36 ----A---- C:\Windows\system32\drivers\aswNdis2.sys
2012-05-17 17:14:36 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2012-05-17 17:14:35 ----A---- C:\Windows\system32\drivers\aswNdis.sys
2012-05-17 17:02:16 ----D---- C:\Users\Dusan\AppData\Roaming\Mozilla
2012-05-17 17:02:11 ----D---- C:\ProgramData\Mozilla
2012-05-17 17:02:11 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2012-05-17 17:02:09 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-05-17 17:01:21 ----D---- C:\Program Files (x86)\AMD APP
2012-05-17 16:59:08 ----D---- C:\Program Files (x86)\ATI Technologies
2012-05-17 16:59:04 ----D---- C:\Program Files\ATI
2012-05-17 16:58:36 ----D---- C:\Program Files\ATI Technologies
2012-05-17 16:57:51 ----D---- C:\AMD
2012-05-17 16:52:22 ----D---- C:\ProgramData\TEMP
2012-05-17 16:51:59 ----A---- C:\Windows\SYSWOW64\cabview.dll
2012-05-17 16:51:59 ----A---- C:\Windows\system32\cabview.dll
2012-05-17 16:51:58 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-05-17 16:51:58 ----A---- C:\Windows\system32\wintrust.dll
2012-05-17 16:51:11 ----D---- C:\ProgramData\Simply Super Software
2012-05-17 16:51:11 ----D---- C:\Program Files (x86)\Trojan Remover
2012-05-17 16:49:44 ----D---- C:\Users\Dusan\AppData\Roaming\Macromedia
2012-05-17 16:46:17 ----A---- C:\Windows\system32\wups2.dll
2012-05-17 16:46:17 ----A---- C:\Windows\system32\wucltux.dll
2012-05-17 16:46:17 ----A---- C:\Windows\system32\wuaueng.dll
2012-05-17 16:46:17 ----A---- C:\Windows\system32\wuauclt.exe
2012-05-17 16:46:07 ----A---- C:\Windows\SYSWOW64\wups.dll
2012-05-17 16:46:07 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2012-05-17 16:46:07 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2012-05-17 16:46:07 ----A---- C:\Windows\system32\wups.dll
2012-05-17 16:46:07 ----A---- C:\Windows\system32\wudriver.dll
2012-05-17 16:46:07 ----A---- C:\Windows\system32\wuapi.dll
2012-05-17 16:46:01 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2012-05-17 16:46:01 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2012-05-17 16:46:01 ----A---- C:\Windows\system32\wuwebv.dll
2012-05-17 16:46:01 ----A---- C:\Windows\system32\wuapp.exe
2012-05-17 16:42:17 ----D---- C:\Program Files (x86)\Google
2012-05-17 16:42:16 ----A---- C:\Windows\system32\drivers\aswSP.sys
2012-05-17 16:42:16 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2012-05-17 16:42:13 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2012-05-17 16:42:13 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2012-05-17 16:42:12 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2012-05-17 16:42:11 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2012-05-17 16:42:10 ----A---- C:\Windows\system32\aswBoot.exe
2012-05-17 16:41:35 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-05-17 16:41:35 ----A---- C:\Windows\avastSS.scr
2012-05-17 16:41:25 ----D---- C:\ProgramData\AVAST Software
2012-05-17 16:41:25 ----D---- C:\Program Files\AVAST Software
2012-05-17 16:31:54 ----A---- C:\TDSSKiller.2.7.35.0_17.05.2012_16.31.54_log.txt
2012-05-17 16:28:42 ----D---- C:\ProgramData\ACD Systems
2012-05-17 16:28:42 ----D---- C:\Program Files (x86)\ACD Systems
2012-05-17 16:28:29 ----A---- C:\Windows\SYSWOW64\drivers\pfc.sys
2012-05-17 16:27:40 ----D---- C:\Windows\Downloaded Installations
2012-05-17 16:26:31 ----D---- C:\Program Files (x86)\WinRAR
2012-05-17 16:24:30 ----D---- C:\Users\Dusan\AppData\Roaming\GHISLER
2012-05-17 16:24:30 ----D---- C:\Program Files\totalcmd
2012-05-17 16:24:30 ----A---- C:\Windows\UC.PIF
2012-05-17 16:24:30 ----A---- C:\Windows\RAR.PIF
2012-05-17 16:24:30 ----A---- C:\Windows\PKZIP.PIF
2012-05-17 16:24:30 ----A---- C:\Windows\PKUNZIP.PIF
2012-05-17 16:24:30 ----A---- C:\Windows\NOCLOSE.PIF
2012-05-17 16:24:30 ----A---- C:\Windows\LHA.PIF
2012-05-17 16:24:30 ----A---- C:\Windows\ARJ.PIF
2012-05-17 16:20:19 ----D---- C:\ProgramData\WEBREG
2012-05-17 16:19:41 ----D---- C:\Users\Dusan\AppData\Roaming\Adobe
2012-05-17 16:19:40 ----D---- C:\Users\Dusan\AppData\Roaming\HP
2012-05-17 16:18:51 ----D---- C:\ProgramData\HP Product Assistant
2012-05-17 16:18:44 ----D---- C:\Windows\SYSWOW64\Macromed
2012-05-17 16:17:58 ----D---- C:\Windows\SYSWOW64\spool
2012-05-17 16:16:41 ----D---- C:\Windows\hpojp8500a909
2012-05-17 16:14:17 ----D---- C:\Program Files (x86)\Hewlett-Packard
2012-05-17 16:13:35 ----SHD---- C:\Windows\Installer
2012-05-17 16:13:30 ----A---- C:\Windows\system32\hpzids40.dll
2012-05-17 16:13:28 ----A---- C:\Windows\system32\hpf3l082.dll
2012-05-17 16:13:24 ----A---- C:\Windows\system32\hpwwiax5.dll
2012-05-17 16:13:24 ----A---- C:\Windows\system32\hpwtiop4.dll
2012-05-17 16:13:24 ----A---- C:\Windows\system32\hppldcoi.dll
2012-05-17 16:13:24 ----A---- C:\Windows\system32\hpovst11.dll
2012-05-17 16:13:07 ----D---- C:\Program Files (x86)\HP
2012-05-17 16:13:05 ----HD---- C:\Config.Msi
2012-05-17 16:12:16 ----A---- C:\Windows\hpwins22.dat
2012-05-17 16:11:27 ----D---- C:\ProgramData\HP
2012-05-17 16:07:46 ----N---- C:\Windows\Ctregrun.exe
2012-05-17 16:07:28 ----RA---- C:\Windows\system32\Ludap17.ini
2012-05-17 16:07:28 ----RA---- C:\Windows\system32\ctzapxx.ini
2012-05-17 16:07:14 ----A---- C:\Windows\system32\sfms32.dll
2012-05-17 16:07:14 ----A---- C:\Windows\system32\sfman32.dll
2012-05-17 16:07:08 ----RA---- C:\Windows\SYSWOW64\SFMS32.DLL
2012-05-17 16:07:08 ----RA---- C:\Windows\SYSWOW64\SFMAN32.DLL
2012-05-17 16:07:08 ----RA---- C:\Windows\system32\drivers\CTUSFSYN.SYS
2012-05-17 16:07:08 ----RA---- C:\Windows\system32\drivers\CTSFM2K.SYS
2012-05-17 16:07:08 ----RA---- C:\Windows\system32\drivers\CTOSS2K.SYS
2012-05-17 16:07:08 ----RA---- C:\Windows\MIDIDEF.EXE
2012-05-17 16:07:04 ----D---- C:\ProgramData\Creative
2012-05-17 16:07:04 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2012-05-17 16:07:04 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2012-05-17 16:07:04 ----A---- C:\Windows\system32\wrap_oal.dll
2012-05-17 16:07:04 ----A---- C:\Windows\system32\OpenAL32.dll
2012-05-17 16:06:52 ----A---- C:\Windows\system32\P17res.dll
2012-05-17 16:06:52 ----A---- C:\Windows\system32\CtDvInst.dll
2012-05-17 16:06:51 ----RA---- C:\Windows\SYSWOW64\tmpC562.tmp
2012-05-17 16:06:51 ----RA---- C:\Windows\SYSWOW64\SPIRUN.DLL
2012-05-17 16:06:51 ----RA---- C:\Windows\SYSWOW64\P17RES.DLL
2012-05-17 16:06:51 ----RA---- C:\Windows\SYSWOW64\P17CPI.DLL
2012-05-17 16:06:51 ----RA---- C:\Windows\SYSWOW64\EAX.DLL
2012-05-17 16:06:51 ----RA---- C:\Windows\sfsyx.ini
2012-05-17 16:06:51 ----RA---- C:\Windows\SF64.exe
2012-05-17 16:06:51 ----RA---- C:\Windows\resdef.exe
2012-05-17 16:06:51 ----RA---- C:\Windows\OALInst.exe
2012-05-17 16:06:50 ----RA---- C:\Windows\SYSWOW64\OemSpi.dll
2012-05-17 16:06:50 ----RA---- C:\Windows\SYSWOW64\A3D.DLL
2012-05-17 16:06:50 ----RA---- C:\Windows\system32\drivers\P17xFILT.SYS
2012-05-17 16:06:49 ----RA---- C:\Windows\system32\drivers\P17xfi.SYS
2012-05-17 16:05:03 ----D---- C:\Program Files (x86)\Creative
2012-05-17 15:12:04 ----D---- C:\Windows\Panther
2012-05-17 15:11:50 ----RAS---- C:\BOOTSECT.BAK
2012-05-17 15:11:49 ----SHD---- C:\Boot
2012-05-17 14:44:47 ----RA---- C:\Windows\SYSWOW64\drivers\AsIO.sys
2012-05-17 14:44:47 ----RA---- C:\Windows\SYSWOW64\AsIO.dll
2012-05-17 14:44:47 ----D---- C:\Program Files (x86)\ASUS
2012-05-17 14:44:45 ----D---- C:\Program Files\ASUS
2012-05-17 14:44:45 ----A---- C:\Windows\SYSWOW64\drivers\AsInsHelp64.sys
2012-05-17 14:44:45 ----A---- C:\Windows\SYSWOW64\drivers\AsInsHelp32.sys
2012-05-17 14:44:44 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-05-17 14:43:35 ----A---- C:\Windows\system32\drivers\mv61xx.sys
2012-05-17 14:40:19 ----A---- C:\Windows\system32\drivers\yk60x64.sys
2012-05-17 14:40:15 ----D---- C:\Program Files (x86)\Marvell
2012-05-17 14:40:14 ----D---- C:\Users\Dusan\AppData\Roaming\TMP
2012-05-17 14:31:34 ----D---- C:\Windows\AsusInstAll
2012-05-17 14:24:41 ----RA---- C:\Windows\SYSWOW64\CSVer.dll
2012-05-17 14:24:40 ----D---- C:\Program Files (x86)\Intel
2012-05-17 14:24:36 ----D---- C:\Intel
2012-05-17 14:24:15 ----A---- C:\Windows\Ascd_log.ini
2012-05-17 14:23:44 ----A---- C:\Windows\system32\drivers\ASACPI.sys
2012-05-17 14:23:30 ----A---- C:\Windows\Ascd_tmp.ini
2012-05-17 14:20:27 ----D---- C:\Users\Dusan\AppData\Roaming\Identities
2012-05-17 14:20:19 ----SD---- C:\Users\Dusan\AppData\Roaming\Microsoft
2012-05-17 14:18:35 ----D---- C:\Windows\Debug
2012-05-17 14:15:31 ----D---- C:\Windows\SoftwareDistribution
2012-05-17 14:13:01 ----D---- C:\Windows\Prefetch
2012-05-17 14:12:53 ----ASH---- C:\pagefile.sys
2012-05-17 14:12:52 ----SHD---- C:\System Volume Information
======List of files/folders modified in the last 1 month======
2012-05-17 18:03:20 ----D---- C:\Windows\Temp
2012-05-17 18:03:16 ----RD---- C:\Program Files
2012-05-17 17:48:21 ----D---- C:\Windows\SysWOW64
2012-05-17 17:43:57 ----D---- C:\Windows\system32\NDF
2012-05-17 17:41:06 ----SD---- C:\ProgramData\Microsoft
2012-05-17 17:30:38 ----D---- C:\Windows\System32
2012-05-17 17:30:38 ----D---- C:\Windows\inf
2012-05-17 17:30:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-05-17 17:25:45 ----D---- C:\Windows
2012-05-17 17:15:06 ----D---- C:\Windows\system32\drivers
2012-05-17 17:14:56 ----D---- C:\Windows\system32\catroot
2012-05-17 17:02:11 ----RD---- C:\Program Files (x86)
2012-05-17 17:02:11 ----HD---- C:\ProgramData
2012-05-17 16:59:06 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-05-17 16:54:45 ----D---- C:\Windows\system32\WDI
2012-05-17 16:54:42 ----D---- C:\Windows\winsxs
2012-05-17 16:54:42 ----D---- C:\Windows\SYSWOW64\sk-SK
2012-05-17 16:54:42 ----D---- C:\Windows\system32\sk-SK
2012-05-17 16:51:55 ----D---- C:\Windows\system32\catroot2
2012-05-17 16:51:31 ----D---- C:\Windows\Logs
2012-05-17 16:42:24 ----D---- C:\Windows\Tasks
2012-05-17 16:42:24 ----D---- C:\Windows\system32\Tasks
2012-05-17 16:28:42 ----D---- C:\Program Files (x86)\Common Files
2012-05-17 16:28:29 ----D---- C:\Windows\SYSWOW64\drivers
2012-05-17 16:19:31 ----A---- C:\Windows\win.ini
2012-05-17 16:16:07 ----D---- C:\Windows\system32\drivers\UMDF
2012-05-17 16:15:38 ----D---- C:\Windows\twain_32
2012-05-17 14:23:44 ----D---- C:\Windows\system32\restore
2012-05-17 14:20:39 ----SHD---- C:\$Recycle.Bin
2012-05-17 14:20:19 ----RD---- C:\Users
2012-05-17 14:19:48 ----D---- C:\Windows\rescache
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswNdis;avast! Firewall NDIS Filter Service; C:\Windows\system32\DRIVERS\aswNdis.sys [2012-03-07 12368]
R0 aswNdis2;avast! Firewall Core Firewall Service; C:\Windows\system32\drivers\aswNdis2.sys [2012-03-07 258904]
R0 mv61xx;mv61xx; C:\Windows\system32\DRIVERS\mv61xx.sys [2008-05-19 173096]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2007-12-17 14392]
R1 aswFW;avast! TDI Firewall driver; C:\Windows\system32\drivers\aswFW.sys [2012-03-07 141144]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2012-03-07 28504]
R1 AswRdr;aswRdr; C:\Windows\system32\drivers\AswRdr.sys [2012-03-07 43864]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-07 819032]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-07 337240]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-07 59224]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-07 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-07 69976]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-06 11174400]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-04-06 343040]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdLH6.sys [2012-02-23 92176]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\Windows\system32\DRIVERS\ctsfm2k.sys [2005-12-08 279552]
R3 CTUSFSYN;Creative SoundFont Synthesizer; C:\Windows\system32\drivers\ctusfsyn.sys [2006-08-07 291328]
R3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-21 145408]
R3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-21 19968]
R3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-21 42496]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2006-10-31 15680]
R3 ossrv;Creative OS Services Driver; C:\Windows\system32\DRIVERS\ctoss2k.sys [2005-12-08 207360]
R3 P17xfi;Sound Blaster X-Fi Xtreme Audio; C:\Windows\system32\drivers\P17xfi.sys [2006-08-15 1636864]
R3 p17xfilt;p17xfilt; C:\Windows\system32\drivers\p17xfilt.sys [2006-08-17 1696768]
R3 usbaudio;USB Audio Driver (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-21 98816]
R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 41984]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 108544]
R3 yukonx64;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x64.sys [2007-08-15 369152]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 6144]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 273920]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 11008]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 7040]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 6656]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 7936]
S3 pfc;Padus ASPI Shell; C:\Windows\system32\drivers\pfc.sys []
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 8704]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 438328]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-04-06 236544]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2012-03-07 134920]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2008-01-21 27648]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2008-01-21 27648]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 27648]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 27648]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-21 27648]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-17 136176]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-17 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-21 19968]