VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by spravca at 2014-04-14 18:47:15
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (53%) free of 19 GB
Total RAM: 511 MB (18% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:47:31, on 14.4.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\TPHDEXLG.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\system32\TpShocks.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\spravca\My Documents\Preberanie\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\spravca.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_med ... 1351417004
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_med ... 1351417004
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?utm_source=b&utm_med ... 1351417004
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.v9.com/web/?q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.v9.com/web/?q={searchTerms}
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O2 - BHO: Proxy Help - {F386E548-C533-472E-8C61-C026FB14FEA9} - C:\WINDOWS\system32\Newtabs_v9.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
O4 - HKLM\..\Run: [LENOVO.TPFNF6R] C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\System32\ibmpmsvc.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

--
End of file - 7309 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\AmiUpdXp.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{E217E282-3BC4-4335-897D-A8BB0669D046}.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\spravca\Application Data\Mozilla\Firefox\Profiles\taxnjj3j.default-1397492658759

prefs.js - "browser.startup.homepage" - "about:home"

"xz123@ya456.com"=C:\Program Files\BetterSurf\ff
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_38]
"Description"=
"Path"=C:\WINDOWS\system32\npdeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-14 597816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-04-14 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll [2013-10-09 1001936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F386E548-C533-472E-8C61-C026FB14FEA9}]
Proxy Help - C:\WINDOWS\system32\Newtabs_v9.dll [2012-08-01 66984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-04-14 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2004-09-23 860160]
""= []
"TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2009-02-02 181536]
"AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe [2003-06-27 88363]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2007-02-06 344064]
"TP4EX"=C:\WINDOWS\system32\tp4ex.exe [2005-10-17 65536]
"TPHOTKEY"=C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [2009-03-13 68976]
"LENOVO.TPFNF6R"=C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe [2009-04-14 15136]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-10-14 1938728]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-14 3854640]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-11-02 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-02-06 46080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
C:\Program Files\Lenovo\HOTKEY\notifyf2.dll [2006-09-06 34344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Disabled:Google Earth"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll

======List of files/folders created in the last 3 months======

2014-04-14 18:47:17 ----D---- C:\Program Files\trend micro
2014-04-14 18:47:15 ----D---- C:\rsit
2014-04-14 18:41:27 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-14 18:23:24 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2014-04-14 18:23:23 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-04-14 18:23:15 ----D---- C:\Program Files\Mozilla Firefox
2014-04-14 18:09:44 ----D---- C:\Program Files\CCleaner
2014-04-14 17:41:55 ----A---- C:\WINDOWS\avastSS.scr
2014-04-14 17:27:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2868626$
2014-04-14 17:27:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2922229$
2014-04-14 17:26:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2014-04-14 17:26:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2014-04-14 17:25:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2014-04-14 17:24:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2916036$
2014-04-14 17:23:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2934207$
2014-04-14 17:23:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2014-04-14 17:23:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2834886$
2014-04-14 17:23:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2014-04-14 17:23:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2014-04-14 17:23:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2014-04-14 17:22:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2014-04-14 17:22:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2900986$
2014-04-14 17:22:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2847311$
2014-04-14 17:22:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2014-04-14 17:21:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2014-04-14 17:21:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2898715$
2014-04-14 17:21:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2014-04-14 17:21:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2929961$
2014-04-14 17:21:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2014-04-14 17:20:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2862335$
2014-04-14 17:20:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2014-04-14 17:20:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2014-04-14 17:20:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2014-04-14 17:20:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2904266$
2014-04-14 17:19:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2876217$
2014-04-14 17:19:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2930275$
2014-04-14 17:19:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2864063$
2014-04-14 17:19:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2014-04-14 17:19:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2862152$
2014-04-14 17:19:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2014-04-14 17:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2014-04-14 17:18:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2850869$
2014-04-14 17:18:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2876331$
2014-04-14 17:18:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2859537$
2014-04-14 17:18:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2014-04-14 17:17:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2014-04-14 17:17:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2868038$
2014-04-14 17:17:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2820917$
2014-04-14 17:17:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2014-04-14 17:17:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2893294$
2014-04-14 17:16:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2014-04-14 17:16:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2014-04-14 17:16:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2014-04-14 17:16:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2892075$
2014-04-14 17:16:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2014-04-14 17:15:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2014-04-14 17:15:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2014-04-14 17:09:35 ----D---- C:\WINDOWS\system32\MRT
2014-04-14 17:07:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2014-04-14 17:07:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$
2014-04-14 17:07:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2862330$
2014-04-14 17:07:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2813345$
2014-04-14 17:06:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2014-04-14 17:05:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2014-04-14 17:05:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2014-04-14 17:05:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$
2014-04-14 17:05:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2914368$
2014-04-14 17:05:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2014-04-14 16:57:43 ----N---- C:\WINDOWS\system32\xp_eos.exe
2014-04-14 16:50:17 ----N---- C:\WINDOWS\system32\iacenc.dll

======List of files/folders modified in the last 3 months======

2014-04-14 18:47:19 ----D---- C:\WINDOWS\Prefetch
2014-04-14 18:47:17 ----RD---- C:\Program Files
2014-04-14 18:42:02 ----D---- C:\WINDOWS\Temp
2014-04-14 18:41:36 ----D---- C:\WINDOWS
2014-04-14 18:41:27 ----D---- C:\WINDOWS\system32
2014-04-14 18:29:31 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-04-14 18:29:26 ----D---- C:\WINDOWS\system32\CatRoot2
2014-04-14 18:16:29 ----D---- C:\Documents and Settings\spravca\Application Data\Media Player Classic
2014-04-14 18:15:49 ----D---- C:\WINDOWS\system32\LogFiles
2014-04-14 18:15:49 ----D---- C:\WINDOWS\system32\config
2014-04-14 18:15:47 ----D---- C:\WINDOWS\Minidump
2014-04-14 18:15:47 ----D---- C:\WINDOWS\Debug
2014-04-14 17:42:56 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-04-14 17:42:16 ----SD---- C:\WINDOWS\Tasks
2014-04-14 17:42:06 ----D---- C:\WINDOWS\system32\drivers
2014-04-14 17:41:55 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-04-14 17:36:47 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-04-14 17:27:24 ----HD---- C:\WINDOWS\inf
2014-04-14 17:26:48 ----D---- C:\WINDOWS\WinSxS
2014-04-14 17:25:42 ----SHD---- C:\WINDOWS\Installer
2014-04-14 17:23:22 ----HD---- C:\WINDOWS\$hf_mig$
2014-04-14 17:07:08 ----D---- C:\WINDOWS\ie8updates
2014-04-14 17:06:37 ----D---- C:\Program Files\Internet Explorer
2014-04-14 17:00:51 ----D---- C:\WINDOWS\system32\CatRoot
2014-04-14 16:47:07 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-03-31 03:51:08 ----AC---- C:\WINDOWS\system32\MRT.exe
2014-03-12 12:48:50 ----A---- C:\WINDOWS\system32\kernel32.dll
2014-03-06 19:59:23 ----N---- C:\WINDOWS\system32\occache.dll
2014-03-06 19:59:23 ----A---- C:\WINDOWS\system32\wininet.dll
2014-03-06 19:59:23 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-03-06 19:59:23 ----A---- C:\WINDOWS\system32\url.dll
2014-03-06 19:59:22 ----N---- C:\WINDOWS\system32\jsproxy.dll
2014-03-06 19:59:22 ----N---- C:\WINDOWS\system32\iepeers.dll
2014-03-06 19:59:22 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2014-03-06 19:59:22 ----A---- C:\WINDOWS\system32\mstime.dll
2014-03-06 19:59:22 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-03-06 19:59:22 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-03-06 19:59:22 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-03-06 19:59:22 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-03-06 19:59:22 ----A---- C:\WINDOWS\system32\licmgr10.dll
2014-03-06 19:59:22 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-03-06 19:59:22 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-03-06 19:59:22 ----A---- C:\WINDOWS\system32\corpol.dll
2014-03-06 06:17:24 ----N---- C:\WINDOWS\system32\ie4uinit.exe
2014-02-05 10:55:04 ----A---- C:\WINDOWS\system32\qedit.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Intel AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\agp440.sys [2008-04-14 42368]
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-04-14 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-04-14 180760]
R0 Shockprf;Shockprf; C:\WINDOWS\System32\DRIVERS\Apsx86.sys [2009-01-28 117800]
R0 TPDIGIMN;TPDIGIMN; C:\WINDOWS\System32\DRIVERS\ApsHM86.sys [2009-01-28 20520]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2014-04-14 54832]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-04-14 776976]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-04-14 411552]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2014-04-14 57672]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 lenovo.smi;Lenovo System Interface Driver; C:\WINDOWS\System32\DRIVERS\smiif32.sys [2008-05-12 13480]
R1 TPHKDRV;TPHKDRV; C:\WINDOWS\System32\DRIVERS\TPHKDRV.sys [2008-05-12 17844]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-04-14 67824]
R2 irda;IrDA Protocol; C:\WINDOWS\System32\DRIVERS\irda.sys [2008-04-14 88192]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2005-03-04 127872]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\System32\DRIVERS\AGRSM.sys [2003-06-27 1196352]
R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2007-02-06 1133568]
R3 E1000;Intel(R) PRO/1000 Network Connection Driver; C:\WINDOWS\System32\DRIVERS\e1000325.sys [2008-08-20 171152]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\System32\DRIVERS\ibmpmdrv.sys [2009-03-19 25000]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\System32\DRIVERS\nscirda.sys [2008-04-14 28672]
R3 PCX504;Cisco Systems Wireless LAN Adapter Driver; C:\WINDOWS\System32\DRIVERS\PCX504.sys [2004-05-04 119296]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\System32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-03-28 220992]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2010-10-14 1314864]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 s24trans;WLAN Transport; C:\WINDOWS\System32\DRIVERS\s24trans.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys []
S3 kptizdcx;kptizdcx; C:\WINDOWS\system32\drivers\kptizdcx.sys []
S3 TwoTrack;IBM PS/2 TrackPoint Filter Driver; C:\WINDOWS\System32\DRIVERS\TwoTrack.sys [2001-08-17 11520]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\System32\Ati2evxx.exe [2007-02-06 364544]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-14 50344]
R2 IBMPMSVC;ThinkPad PM Service; C:\WINDOWS\System32\ibmpmsvc.exe [2009-03-19 38176]
R2 Irmon;Infrared Monitor; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\WINDOWS\System32\TPHDEXLG.exe [2009-01-28 39976]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2009-05-21 62320]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-15 133104]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2009-05-21 45424]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-14 257928]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-15 133104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21 194032]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-15 119408]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v3.023 - Report created 14/04/2014 at 19:10:05
# Updated 01/04/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : spravca - OUR2
# Running from : C:\Documents and Settings\spravca\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\BetterSurf
Folder Deleted : C:\Documents and Settings\spravca\Application Data\SwvUpdater
File Deleted : C:\WINDOWS\system32\Newtabs_v9.dll
File Deleted : C:\WINDOWS\Tasks\AmiUpdXp.job

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [xz123@ya456.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dedmngkbaffkenlfdcbganndoghblmap
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ijblflkdjdopkpdgllkmlbgcffjbnfda
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F386E548-C533-472E-8C61-C026FB14FEA9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{462862BE-9A5C-49A5-9CBD-A649EAC63645}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{0113A098-06EA-4776-A011-D75590778F1E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F386E548-C533-472E-8C61-C026FB14FEA9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F386E548-C533-472E-8C61-C026FB14FEA9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F386E548-C533-472E-8C61-C026FB14FEA9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKLM\Software\BetterSurf
Key Deleted : HKLM\Software\V9Software
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [CustomizeSearch]

-\\ Mozilla Firefox v28.0 (sk)

[ File : C:\Documents and Settings\spravca\Application Data\Mozilla\Firefox\Profiles\taxnjj3j.default-1397492658759\prefs.js ]


*************************

AdwCleaner[R0].txt - [4028 octets] - [14/04/2014 19:08:49]
AdwCleaner[S0].txt - [3596 octets] - [14/04/2014 19:10:05]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3656 octets] ##########

Logfile of random's system information tool 1.09 (written by random/random)
Run by spravca at 2014-04-14 19:49:23
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (50%) free of 19 GB
Total RAM: 511 MB (21% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:49:34, on 14.4.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\TPHDEXLG.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\system32\TpShocks.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\spravca\My Documents\Preberanie\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\spravca.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
O4 - HKLM\..\Run: [LENOVO.TPFNF6R] C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\System32\ibmpmsvc.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

--
End of file - 6385 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{E217E282-3BC4-4335-897D-A8BB0669D046}.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\spravca\Application Data\Mozilla\Firefox\Profiles\taxnjj3j.default-1397492658759

prefs.js - "browser.startup.homepage" - "about:home"

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_38]
"Description"=
"Path"=C:\WINDOWS\system32\npdeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-14 597816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-04-14 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll [2013-10-09 1001936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-04-14 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2004-09-23 860160]
""= []
"TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2009-02-02 181536]
"AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe [2003-06-27 88363]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2007-02-06 344064]
"TP4EX"=C:\WINDOWS\system32\tp4ex.exe [2005-10-17 65536]
"TPHOTKEY"=C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [2009-03-13 68976]
"LENOVO.TPFNF6R"=C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe [2009-04-14 15136]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-10-14 1938728]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-14 3854640]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-11-02 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-02-06 46080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
C:\Program Files\Lenovo\HOTKEY\notifyf2.dll [2006-09-06 34344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Disabled:Google Earth"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll

======List of files/folders created in the last 1 month======

2014-04-14 19:08:45 ----D---- C:\AdwCleaner
2014-04-14 18:57:25 ----D---- C:\_tmp
2014-04-14 18:47:17 ----D---- C:\Program Files\trend micro
2014-04-14 18:47:15 ----D---- C:\rsit
2014-04-14 18:41:27 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-14 18:23:24 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2014-04-14 18:23:23 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-04-14 18:23:15 ----D---- C:\Program Files\Mozilla Firefox
2014-04-14 18:09:44 ----D---- C:\Program Files\CCleaner
2014-04-14 17:41:55 ----A---- C:\WINDOWS\avastSS.scr
2014-04-14 17:27:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2868626$
2014-04-14 17:27:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2922229$
2014-04-14 17:26:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2014-04-14 17:26:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2014-04-14 17:25:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2014-04-14 17:24:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2916036$
2014-04-14 17:23:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2934207$
2014-04-14 17:23:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2014-04-14 17:23:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2834886$
2014-04-14 17:23:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2014-04-14 17:23:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2014-04-14 17:23:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2014-04-14 17:22:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2014-04-14 17:22:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2900986$
2014-04-14 17:22:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2847311$
2014-04-14 17:22:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2014-04-14 17:21:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2014-04-14 17:21:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2898715$
2014-04-14 17:21:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2014-04-14 17:21:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2929961$
2014-04-14 17:21:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2014-04-14 17:20:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2862335$
2014-04-14 17:20:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2014-04-14 17:20:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2014-04-14 17:20:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2014-04-14 17:20:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2904266$
2014-04-14 17:19:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2876217$
2014-04-14 17:19:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2930275$
2014-04-14 17:19:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2864063$
2014-04-14 17:19:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2014-04-14 17:19:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2862152$
2014-04-14 17:19:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2014-04-14 17:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2014-04-14 17:18:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2850869$
2014-04-14 17:18:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2876331$
2014-04-14 17:18:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2859537$
2014-04-14 17:18:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2014-04-14 17:17:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2014-04-14 17:17:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2868038$
2014-04-14 17:17:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2820917$
2014-04-14 17:17:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2014-04-14 17:17:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2893294$
2014-04-14 17:16:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2014-04-14 17:16:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2014-04-14 17:16:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2014-04-14 17:16:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2892075$
2014-04-14 17:16:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2014-04-14 17:15:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2014-04-14 17:15:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2014-04-14 17:09:35 ----D---- C:\WINDOWS\system32\MRT
2014-04-14 17:07:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2014-04-14 17:07:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$
2014-04-14 17:07:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2862330$
2014-04-14 17:07:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2813345$
2014-04-14 17:06:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2014-04-14 17:05:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2014-04-14 17:05:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2014-04-14 17:05:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$
2014-04-14 17:05:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2914368$
2014-04-14 17:05:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2014-04-14 16:57:43 ----N---- C:\WINDOWS\system32\xp_eos.exe
2014-04-14 16:50:17 ----N---- C:\WINDOWS\system32\iacenc.dll

======List of files/folders modified in the last 1 month======

2014-04-14 19:27:20 ----D---- C:\WINDOWS\Prefetch
2014-04-14 19:12:25 ----D---- C:\WINDOWS\system32\LogFiles
2014-04-14 19:12:23 ----D---- C:\WINDOWS\Temp
2014-04-14 19:10:39 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-04-14 19:10:37 ----D---- C:\WINDOWS\system32\CatRoot2
2014-04-14 19:10:06 ----SD---- C:\WINDOWS\Tasks
2014-04-14 19:10:06 ----RD---- C:\Program Files
2014-04-14 19:10:06 ----D---- C:\WINDOWS\system32
2014-04-14 18:55:19 ----HD---- C:\WINDOWS\inf
2014-04-14 18:55:19 ----D---- C:\WINDOWS
2014-04-14 18:16:29 ----D---- C:\Documents and Settings\spravca\Application Data\Media Player Classic
2014-04-14 18:15:49 ----D---- C:\WINDOWS\system32\config
2014-04-14 18:15:47 ----D---- C:\WINDOWS\Minidump
2014-04-14 18:15:47 ----D---- C:\WINDOWS\Debug
2014-04-14 17:42:56 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-04-14 17:42:06 ----D---- C:\WINDOWS\system32\drivers
2014-04-14 17:41:55 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-04-14 17:36:47 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-04-14 17:26:48 ----D---- C:\WINDOWS\WinSxS
2014-04-14 17:25:42 ----SHD---- C:\WINDOWS\Installer
2014-04-14 17:23:22 ----HD---- C:\WINDOWS\$hf_mig$
2014-04-14 17:07:08 ----D---- C:\WINDOWS\ie8updates
2014-04-14 17:06:37 ----D---- C:\Program Files\Internet Explorer
2014-04-14 17:00:51 ----D---- C:\WINDOWS\system32\CatRoot
2014-04-14 16:47:07 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-03-31 03:51:08 ----AC---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Intel AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\agp440.sys [2008-04-14 42368]
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-04-14 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-04-14 180760]
R0 Shockprf;Shockprf; C:\WINDOWS\System32\DRIVERS\Apsx86.sys [2009-01-28 117800]
R0 TPDIGIMN;TPDIGIMN; C:\WINDOWS\System32\DRIVERS\ApsHM86.sys [2009-01-28 20520]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2014-04-14 54832]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-04-14 776976]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-04-14 411552]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2014-04-14 57672]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 lenovo.smi;Lenovo System Interface Driver; C:\WINDOWS\System32\DRIVERS\smiif32.sys [2008-05-12 13480]
R1 TPHKDRV;TPHKDRV; C:\WINDOWS\System32\DRIVERS\TPHKDRV.sys [2008-05-12 17844]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-04-14 67824]
R2 irda;IrDA Protocol; C:\WINDOWS\System32\DRIVERS\irda.sys [2008-04-14 88192]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2005-03-04 127872]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\System32\DRIVERS\AGRSM.sys [2003-06-27 1196352]
R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2007-02-06 1133568]
R3 E1000;Intel(R) PRO/1000 Network Connection Driver; C:\WINDOWS\System32\DRIVERS\e1000325.sys [2008-08-20 171152]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\System32\DRIVERS\ibmpmdrv.sys [2009-03-19 25000]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\System32\DRIVERS\nscirda.sys [2008-04-14 28672]
R3 PCX504;Cisco Systems Wireless LAN Adapter Driver; C:\WINDOWS\System32\DRIVERS\PCX504.sys [2004-05-04 119296]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\System32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-03-28 220992]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2010-10-14 1314864]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 s24trans;WLAN Transport; C:\WINDOWS\System32\DRIVERS\s24trans.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys []
S3 kptizdcx;kptizdcx; C:\WINDOWS\system32\drivers\kptizdcx.sys []
S3 TwoTrack;IBM PS/2 TrackPoint Filter Driver; C:\WINDOWS\System32\DRIVERS\TwoTrack.sys [2001-08-17 11520]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\System32\Ati2evxx.exe [2007-02-06 364544]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-14 50344]
R2 IBMPMSVC;ThinkPad PM Service; C:\WINDOWS\System32\ibmpmsvc.exe [2009-03-19 38176]
R2 Irmon;Infrared Monitor; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\WINDOWS\System32\TPHDEXLG.exe [2009-01-28 39976]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2009-05-21 62320]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-15 133104]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2009-05-21 45424]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-14 257928]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-15 133104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21 194032]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-15 119408]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

:files
C:\Program Files\Google\Google Toolbar
C:\Program Files\Google\GoogleToolbarNotifier
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\system32\drivers\kptizdcx.sys

:services
kptizdcx

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"KernelFaultCheck"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]

Logfile of random's system information tool 1.09 (written by random/random)
Run by spravca at 2014-04-14 20:09:37
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (55%) free of 19 GB
Total RAM: 511 MB (26% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:09:43, on 14.4.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\TPHDEXLG.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\system32\TpShocks.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\spravca\My Documents\Preberanie\RSIT.exe
C:\Program Files\trend micro\spravca.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
O4 - HKLM\..\Run: [LENOVO.TPFNF6R] C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\System32\ibmpmsvc.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

--
End of file - 5824 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{E217E282-3BC4-4335-897D-A8BB0669D046}.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\spravca\Application Data\Mozilla\Firefox\Profiles\taxnjj3j.default-1397492658759

prefs.js - "browser.startup.homepage" - "about:home"

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_38]
"Description"=
"Path"=C:\WINDOWS\system32\npdeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-14 597816]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2004-09-23 860160]
""= []
"TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2009-02-02 181536]
"AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe [2003-06-27 88363]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2007-02-06 344064]
"TP4EX"=C:\WINDOWS\system32\tp4ex.exe [2005-10-17 65536]
"TPHOTKEY"=C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [2009-03-13 68976]
"LENOVO.TPFNF6R"=C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe [2009-04-14 15136]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-10-14 1938728]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-14 3854640]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-02-06 46080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
C:\Program Files\Lenovo\HOTKEY\notifyf2.dll [2006-09-06 34344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Disabled:Google Earth"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll

======List of files/folders created in the last 1 month======

2014-04-14 20:04:18 ----D---- C:\_OTM
2014-04-14 19:08:45 ----D---- C:\AdwCleaner
2014-04-14 18:57:25 ----D---- C:\_tmp
2014-04-14 18:47:17 ----D---- C:\Program Files\trend micro
2014-04-14 18:47:15 ----D---- C:\rsit
2014-04-14 18:41:27 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-14 18:23:24 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2014-04-14 18:23:23 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-04-14 18:23:15 ----D---- C:\Program Files\Mozilla Firefox
2014-04-14 18:09:44 ----D---- C:\Program Files\CCleaner
2014-04-14 17:41:55 ----A---- C:\WINDOWS\avastSS.scr
2014-04-14 17:27:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2868626$
2014-04-14 17:27:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2922229$
2014-04-14 17:26:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2014-04-14 17:26:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2014-04-14 17:25:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2014-04-14 17:24:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2916036$
2014-04-14 17:23:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2934207$
2014-04-14 17:23:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2014-04-14 17:23:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2834886$
2014-04-14 17:23:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2014-04-14 17:23:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2014-04-14 17:23:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2014-04-14 17:22:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2014-04-14 17:22:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2900986$
2014-04-14 17:22:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2847311$
2014-04-14 17:22:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2014-04-14 17:21:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2014-04-14 17:21:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2898715$
2014-04-14 17:21:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2014-04-14 17:21:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2929961$
2014-04-14 17:21:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2014-04-14 17:20:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2862335$
2014-04-14 17:20:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2014-04-14 17:20:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2014-04-14 17:20:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2014-04-14 17:20:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2904266$
2014-04-14 17:19:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2876217$
2014-04-14 17:19:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2930275$
2014-04-14 17:19:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2864063$
2014-04-14 17:19:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2014-04-14 17:19:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2862152$
2014-04-14 17:19:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2014-04-14 17:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2014-04-14 17:18:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2850869$
2014-04-14 17:18:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2876331$
2014-04-14 17:18:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2859537$
2014-04-14 17:18:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2014-04-14 17:17:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2014-04-14 17:17:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2868038$
2014-04-14 17:17:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2820917$
2014-04-14 17:17:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2014-04-14 17:17:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2893294$
2014-04-14 17:16:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2014-04-14 17:16:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2014-04-14 17:16:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2014-04-14 17:16:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2892075$
2014-04-14 17:16:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2014-04-14 17:15:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2014-04-14 17:15:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2014-04-14 17:09:35 ----D---- C:\WINDOWS\system32\MRT
2014-04-14 17:07:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2014-04-14 17:07:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$
2014-04-14 17:07:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2862330$
2014-04-14 17:07:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2813345$
2014-04-14 17:06:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2014-04-14 17:05:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2014-04-14 17:05:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2014-04-14 17:05:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$
2014-04-14 17:05:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2914368$
2014-04-14 17:05:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2014-04-14 16:57:43 ----N---- C:\WINDOWS\system32\xp_eos.exe
2014-04-14 16:50:17 ----N---- C:\WINDOWS\system32\iacenc.dll

======List of files/folders modified in the last 1 month======

2014-04-14 20:08:15 ----D---- C:\WINDOWS\Temp
2014-04-14 20:05:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-04-14 20:04:39 ----D---- C:\WINDOWS\system32
2014-04-14 20:04:39 ----D---- C:\WINDOWS
2014-04-14 20:04:20 ----SD---- C:\WINDOWS\Tasks
2014-04-14 20:04:20 ----D---- C:\WINDOWS\Prefetch
2014-04-14 20:04:20 ----D---- C:\Program Files\Google
2014-04-14 19:12:25 ----D---- C:\WINDOWS\system32\LogFiles
2014-04-14 19:10:37 ----D---- C:\WINDOWS\system32\CatRoot2
2014-04-14 19:10:06 ----RD---- C:\Program Files
2014-04-14 18:55:19 ----HD---- C:\WINDOWS\inf
2014-04-14 18:16:29 ----D---- C:\Documents and Settings\spravca\Application Data\Media Player Classic
2014-04-14 18:15:49 ----D---- C:\WINDOWS\system32\config
2014-04-14 18:15:47 ----D---- C:\WINDOWS\Minidump
2014-04-14 18:15:47 ----D---- C:\WINDOWS\Debug
2014-04-14 17:42:56 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-04-14 17:42:06 ----D---- C:\WINDOWS\system32\drivers
2014-04-14 17:41:55 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-04-14 17:36:47 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-04-14 17:26:48 ----D---- C:\WINDOWS\WinSxS
2014-04-14 17:25:42 ----SHD---- C:\WINDOWS\Installer
2014-04-14 17:23:22 ----HD---- C:\WINDOWS\$hf_mig$
2014-04-14 17:07:08 ----D---- C:\WINDOWS\ie8updates
2014-04-14 17:06:37 ----D---- C:\Program Files\Internet Explorer
2014-04-14 17:00:51 ----D---- C:\WINDOWS\system32\CatRoot
2014-04-14 16:47:07 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-03-31 03:51:08 ----AC---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Intel AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\agp440.sys [2008-04-14 42368]
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-04-14 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-04-14 180760]
R0 Shockprf;Shockprf; C:\WINDOWS\System32\DRIVERS\Apsx86.sys [2009-01-28 117800]
R0 TPDIGIMN;TPDIGIMN; C:\WINDOWS\System32\DRIVERS\ApsHM86.sys [2009-01-28 20520]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2014-04-14 54832]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-04-14 776976]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-04-14 411552]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2014-04-14 57672]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 lenovo.smi;Lenovo System Interface Driver; C:\WINDOWS\System32\DRIVERS\smiif32.sys [2008-05-12 13480]
R1 TPHKDRV;TPHKDRV; C:\WINDOWS\System32\DRIVERS\TPHKDRV.sys [2008-05-12 17844]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-04-14 67824]
R2 irda;IrDA Protocol; C:\WINDOWS\System32\DRIVERS\irda.sys [2008-04-14 88192]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2005-03-04 127872]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\System32\DRIVERS\AGRSM.sys [2003-06-27 1196352]
R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2007-02-06 1133568]
R3 E1000;Intel(R) PRO/1000 Network Connection Driver; C:\WINDOWS\System32\DRIVERS\e1000325.sys [2008-08-20 171152]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\System32\DRIVERS\ibmpmdrv.sys [2009-03-19 25000]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\System32\DRIVERS\nscirda.sys [2008-04-14 28672]
R3 PCX504;Cisco Systems Wireless LAN Adapter Driver; C:\WINDOWS\System32\DRIVERS\PCX504.sys [2004-05-04 119296]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\System32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-03-28 220992]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2010-10-14 1314864]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 s24trans;WLAN Transport; C:\WINDOWS\System32\DRIVERS\s24trans.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys []
S3 TwoTrack;IBM PS/2 TrackPoint Filter Driver; C:\WINDOWS\System32\DRIVERS\TwoTrack.sys [2001-08-17 11520]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\System32\Ati2evxx.exe [2007-02-06 364544]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-14 50344]
R2 IBMPMSVC;ThinkPad PM Service; C:\WINDOWS\System32\ibmpmsvc.exe [2009-03-19 38176]
R2 Irmon;Infrared Monitor; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\WINDOWS\System32\TPHDEXLG.exe [2009-01-28 39976]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2009-05-21 62320]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-15 133104]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2009-05-21 45424]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-14 257928]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-15 133104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21 194032]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-15 119408]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Default user')