Problém s vypínaním PC
Napsal: 14 pro 2009 11:15
Dobrý deň, pred niekoľkými dňami sa mi začalo diať toto: Systém beží v pohode, nie sú žiadne problémy až kým ho nedám vypnúť alebo reštartovať. Vtedy sa mi vypne len antivírus, systém sa nevypína je bez známky aktivity, nedajú sa spustiť žiadne programy. Trvá to asi 5 min potom sa všetko vypne a naskočí obrazovka "odhlasuje sa" toto trvá ďalších 5 min a až potom sa PC vypne. Prosím o pomoc, prikladám log z RSIT:
Logfile of random's system information tool 1.06 (written by random/random)
Run by Darkness at 2009-12-14 11:14:54
Systém Microsoft Windows XP Professional Service Pack 3
System drive I: has 2 GB (16%) free of 10 GB
Total RAM: 1024 MB (24% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:15:14, on 14. 12. 2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
I:\WINDOWS\System32\smss.exe
I:\WINDOWS\system32\winlogon.exe
I:\WINDOWS\system32\services.exe
I:\WINDOWS\system32\lsass.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\System32\svchost.exe
I:\WINDOWS\Explorer.EXE
I:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
I:\WINDOWS\system32\spoolsv.exe
I:\Program Files\CheckPoint\ZAForceField\ForceField.exe
I:\Program Files\Avira\AntiVir Desktop\sched.exe
I:\Program Files\Avira\AntiVir Desktop\avguard.exe
J:\Program Files\Java\jre6\bin\jqs.exe
i:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
I:\Program Files\CDBurnerXP\NMSAccessU.exe
I:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\system32\LVCOMSX.EXE
I:\Program Files\Analog Devices\SoundMAX\SMTray.exe
I:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
I:\Program Files\Microcom\ADSL DeskPorte USB\CnxDslTb.exe
I:\Program Files\HP\HP Software Update\HPWuSchd2.exe
I:\Program Files\Avira\AntiVir Desktop\avgnt.exe
J:\Program Files\Java\jre6\bin\jusched.exe
I:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
I:\WINDOWS\system32\optmouse.exe
J:\Program Files\AnVir Task Manager Free\AnVir.exe
J:\Program Files\Rainlendar2\Rainlendar2.exe
J:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
I:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
I:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
I:\Program Files\PC Connectivity Solution\ServiceLayer.exe
I:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
I:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
I:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
I:\WINDOWS\system32\ZoneLabs\vsmon.exe
I:\totalcmd\TOTALCMD.EXE
I:\Program Files\Miranda pack by sssugi 2.2.1\miranda32.exe
I:\Program Files\Skype\Phone\Skype.exe
I:\Program Files\Skype\Plugin Manager\skypePM.exe
I:\Program Files\Mozilla Firefox\firefox.exe
J:\Program Files\Java\jre6\bin\javaw.exe
C:\Downloadz\RSIT.exe
I:\Program Files\trend micro\Darkness.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.disk-tools.com/download/daemon
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - I:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: ZoneAlarm Toolbar Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - I:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - J:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - J:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: ZoneAlarm Toolbar - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - I:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [LVCOMSX] I:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [Smapp] I:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [ATIPTA] I:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [CnxDslTaskBar] "I:\Program Files\Microcom\ADSL DeskPorte USB\CnxDslTb.exe" "Microcom\ADSL DeskPorte USB"
O4 - HKLM\..\Run: [HP Software Update] I:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avgnt] "I:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "J:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "I:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "J:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [CD Autorun] J:\Program Files\TweakNow PowerPack 2009\CDAuto.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "I:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [ISW] "I:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"
O4 - HKLM\..\Run: [OPTMOUSEMOUSE] I:\WINDOWS\system32\optmouse.exe
O4 - HKCU\..\Run: [AnVir Task Manager Free] "J:\Program Files\AnVir Task Manager Free\AnVir.exe" Minimized
O4 - HKCU\..\Run: [Rainlendar2] J:\Program Files\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [PC Suite Tray] "J:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = I:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://J:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - J:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - I:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - I:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: i:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD9D6989-4E04-4DC9-96D6-BF7F319C66D9}: NameServer = 195.146.132.58 195.146.128.62
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - I:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: I:\WINDOWS\system32\cssdll32.dll
O22 - SharedTaskScheduler: FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - J:\Program Files\Stardock\Fences\FencesMenu.dll
O23 - Service: Adobe LM Service - Unknown owner - I:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - I:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - I:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - I:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - I:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - J:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - i:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
O23 - Service: NMSAccessU - Unknown owner - I:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Pml Driver HPZ12 - HP - I:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - I:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - I:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - I:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 8399 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - I:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ZoneAlarm Toolbar Registrar - I:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-14 578928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-11-23 204048]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - J:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - J:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-11-23 204048]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Toolbar - I:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-14 578928]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LVCOMSX"=I:\WINDOWS\system32\LVCOMSX.EXE [2004-10-08 221184]
"Smapp"=I:\Program Files\Analog Devices\SoundMAX\SMTray.exe [2003-05-05 143360]
"ATIPTA"=I:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2003-09-11 335872]
"CnxDslTaskBar"=I:\Program Files\Microcom\ADSL DeskPorte USB\CnxDslTb.exe [2004-06-16 233472]
"HP Software Update"=I:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]
"avgnt"=I:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"Adobe Reader Speed Launcher"=J:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=I:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"SunJavaUpdateSched"=J:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"CD Autorun"=J:\Program Files\TweakNow PowerPack 2009\CDAuto.exe []
"ZoneAlarm Client"=I:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-11-22 1037192]
"ISW"=I:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2009-10-14 730480]
"OPTMOUSEMOUSE"=I:\WINDOWS\system32\optmouse.exe [2001-05-08 45056]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AnVir Task Manager Free"=J:\Program Files\AnVir Task Manager Free\AnVir.exe [2009-12-03 1709792]
"Rainlendar2"=J:\Program Files\Rainlendar2\Rainlendar2.exe [2009-08-22 5148672]
"PC Suite Tray"=J:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-25 1414144]
I:\Documents and Settings\All Users\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - I:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="I:\WINDOWS\system32\cssdll32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - J:\Program Files\Stardock\Fences\FencesMenu.dll [2009-10-02 128360]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"I:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="I:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="I:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="I:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"I:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="I:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"I:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="I:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="I:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="I:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="I:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="I:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="I:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"I:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="I:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"I:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="I:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="I:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"I:\Program Files\Skype\Plugin Manager\skypePM.exe"="I:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"I:\Program Files\Opera\opera.exe"="I:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"J:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\RpcSandraSrv.exe"="J:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service"
"J:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\sandra.mui"="J:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\sandra.mui:*:Enabled:SiSoftware Sandra Agent Service"
"I:\Program Files\Skype\Phone\Skype.exe"="I:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
======List of files/folders created in the last 1 months======
2009-12-14 11:14:55 ----D---- I:\Program Files\trend micro
2009-12-14 10:12:09 ----D---- I:\WINDOWS\CSC
2009-12-13 20:35:33 ----D---- I:\WINDOWS\system32\appmgmt
2009-12-13 20:23:40 ----D---- I:\WINDOWS\system32\NtmsData
2009-12-13 20:19:45 ----HD---- I:\WINDOWS\system32\GroupPolicy
2009-12-13 16:09:17 ----D---- I:\Documents and Settings\Darkness\Application Data\Thinstall
2009-12-13 15:52:41 ----D---- I:\Documents and Settings\Darkness\Application Data\vlc
2009-12-13 12:51:06 ----D---- I:\Documents and Settings\Darkness\Application Data\Sachy
2009-12-09 21:58:33 ----D---- I:\Program Files\Samsung
2009-12-09 21:58:33 ----A---- I:\WINDOWS\system32\OPTMOUSE.EXE
2009-12-09 21:58:33 ----A---- I:\WINDOWS\system32\OPTMOUSE.DLL
2009-12-09 21:58:33 ----A---- I:\WINDOWS\system32\Optmoucp.dll
2009-12-07 14:09:45 ----D---- I:\Program Files\ODEON
2009-12-07 11:17:44 ----D---- I:\Program Files\NSS
2009-12-06 15:22:12 ----A---- I:\WINDOWS\ModemLog_Nokia N70 USB Modem.txt
2009-12-05 19:37:46 ----D---- I:\Documents and Settings\Darkness\Application Data\Nokia
2009-12-05 19:37:31 ----D---- I:\Documents and Settings\Darkness\Application Data\PC Suite
2009-12-05 19:31:59 ----D---- I:\Program Files\PC Connectivity Solution
2009-12-05 19:31:46 ----A---- I:\WINDOWS\system32\wdfcoinstaller01007.dll
2009-12-05 19:31:46 ----A---- I:\WINDOWS\system32\nmwcdcocls.dll
2009-12-05 11:11:53 ----D---- I:\Documents and Settings\Darkness\Application Data\EurekaLog
2009-12-05 10:38:11 ----HDC---- I:\Documents and Settings\All Users\Application Data\{A87EB928-0C6C-4071-AEF1-59E32BAEDF1B}
2009-12-05 10:33:26 ----D---- I:\Documents and Settings\Darkness\Application Data\Stardock
2009-12-05 10:33:17 ----HDC---- I:\Documents and Settings\All Users\Application Data\{E94FD7CC-6945-4744-99C3-9BFF40AA2F24}
2009-12-04 20:33:16 ----D---- I:\Program Files\Karen's Power Tools
2009-12-04 20:33:04 ----D---- I:\Documents and Settings\All Users\Application Data\Karen's Power Tools
2009-12-02 16:45:13 ----D---- I:\Documents and Settings\Darkness\Application Data\r2 Studios
2009-12-02 15:30:20 ----D---- I:\Program Files\Miranda pack by sssugi 2.2.1
2009-12-02 14:33:51 ----D---- I:\Documents and Settings\Darkness\Application Data\CheckPoint
2009-12-02 14:33:23 ----D---- I:\Program Files\CheckPoint
2009-12-02 14:33:19 ----A---- I:\WINDOWS\system32\vsregexp.dll
2009-12-02 14:33:17 ----A---- I:\WINDOWS\system32\zlcommdb.dll
2009-12-02 14:33:17 ----A---- I:\WINDOWS\system32\zlcomm.dll
2009-12-02 14:33:12 ----A---- I:\WINDOWS\system32\vswmi.dll
2009-12-02 14:33:10 ----D---- I:\WINDOWS\system32\ZoneLabs
2009-12-02 14:33:10 ----A---- I:\WINDOWS\system32\zpeng25.dll
2009-12-02 14:33:10 ----A---- I:\WINDOWS\system32\vsxml.dll
2009-12-02 14:33:10 ----A---- I:\WINDOWS\system32\vspubapi.dll
2009-12-02 14:33:10 ----A---- I:\WINDOWS\system32\vsmonapi.dll
2009-12-02 14:33:08 ----D---- I:\Program Files\Zone Labs
2009-12-02 14:32:39 ----A---- I:\WINDOWS\system32\vsutil.dll
2009-12-02 14:32:39 ----A---- I:\WINDOWS\system32\vsinit.dll
2009-12-02 14:32:39 ----A---- I:\WINDOWS\system32\vsdata.dll
2009-12-02 13:57:29 ----D---- I:\Program Files\Partition Wizard Home Edition 4.2
2009-12-02 13:56:35 ----D---- I:\Program Files\NewFreeScreensavers
2009-11-30 13:54:48 ----A---- I:\Documents and Settings\All Users\Application Data\xml5B.tmp
2009-11-30 13:54:48 ----A---- I:\Documents and Settings\All Users\Application Data\xml5A.tmp
2009-11-30 13:54:44 ----A---- I:\Documents and Settings\All Users\Application Data\xml59.tmp
2009-11-30 13:54:07 ----A---- I:\WINDOWS\system32\XAudio2_5.dll
2009-11-30 13:54:07 ----A---- I:\WINDOWS\system32\xactengine3_5.dll
2009-11-30 13:54:06 ----A---- I:\WINDOWS\system32\d3dcsx_42.dll
2009-11-30 13:54:06 ----A---- I:\WINDOWS\system32\D3DCompiler_42.dll
2009-11-30 13:54:04 ----A---- I:\WINDOWS\system32\d3dx11_42.dll
2009-11-30 13:54:01 ----A---- I:\WINDOWS\system32\d3dx10_42.dll
2009-11-30 13:53:57 ----A---- I:\WINDOWS\system32\D3DX9_42.dll
2009-11-27 17:12:11 ----D---- I:\Program Files\Common Files\McAfee
2009-11-27 17:11:48 ----D---- I:\Program Files\McAfee
2009-11-27 17:11:48 ----D---- I:\Documents and Settings\All Users\Application Data\McAfee
2009-11-22 14:35:37 ----D---- I:\Documents and Settings\Darkness\Application Data\Media Player Classic
2009-11-19 12:46:20 ----A---- I:\WINDOWS\system32\ssubtmr6.dll
2009-11-17 20:17:10 ----D---- I:\WINDOWS\Internet Logs
2009-11-17 18:51:56 ----D---- I:\Documents and Settings\Darkness\Application Data\TweakNow RegCleaner
2009-11-15 12:34:08 ----A---- I:\WINDOWS\system32\javaws.exe
2009-11-15 12:34:08 ----A---- I:\WINDOWS\system32\javaw.exe
2009-11-15 12:34:08 ----A---- I:\WINDOWS\system32\java.exe
======List of files/folders modified in the last 1 months======
2009-12-14 11:14:55 ----RD---- I:\Program Files
2009-12-14 11:12:50 ----D---- I:\Documents and Settings\Darkness\Application Data\Skype
2009-12-14 11:05:37 ----D---- I:\WINDOWS\Temp
2009-12-14 10:25:02 ----A---- I:\WINDOWS\Slovnik 2005.INI
2009-12-14 10:24:25 ----D---- I:\WINDOWS
2009-12-14 10:19:09 ----D---- I:\Program Files\Mozilla Firefox
2009-12-14 10:18:35 ----D---- I:\Documents and Settings\Darkness\Application Data\skypePM
2009-12-14 10:15:44 ----A---- I:\WINDOWS\wincmd.ini
2009-12-14 10:14:54 ----D---- I:\WINDOWS\Prefetch
2009-12-14 10:12:40 ----D---- I:\WINDOWS\system32\CatRoot2
2009-12-13 22:10:47 ----D---- I:\WINDOWS\security
2009-12-13 22:10:43 ----A---- I:\WINDOWS\SchedLgU.Txt
2009-12-13 20:40:27 ----D---- I:\WINDOWS\Debug
2009-12-13 20:35:33 ----D---- I:\WINDOWS\system32
2009-12-13 20:19:30 ----D---- I:\WINDOWS\Registration
2009-12-13 18:08:36 ----A---- I:\WINDOWS\ChssBase.ini
2009-12-13 15:44:44 ----AD---- I:\Documents and Settings\All Users\Application Data\TEMP
2009-12-09 22:56:36 ----HD---- I:\WINDOWS\inf
2009-12-09 21:58:45 ----RSHDC---- I:\WINDOWS\system32\dllcache
2009-12-09 21:58:41 ----D---- I:\WINDOWS\system32\drivers
2009-12-09 21:58:37 ----D---- I:\WINDOWS\system32\ReinstallBackups
2009-12-09 21:58:32 ----HD---- I:\Program Files\InstallShield Installation Information
2009-12-09 16:44:11 ----ASH---- I:\boot.ini
2009-12-07 14:10:03 ----SHD---- I:\WINDOWS\Installer
2009-12-07 11:54:40 ----A---- I:\WINDOWS\Translator 2005.INI
2009-12-07 11:23:33 ----SD---- I:\Documents and Settings\Darkness\Application Data\Microsoft
2009-12-05 19:50:36 ----A---- I:\WINDOWS\system32\PerfStringBackup.INI
2009-12-05 19:33:15 ----DC---- I:\WINDOWS\system32\DRVSTORE
2009-12-05 19:32:14 ----D---- I:\Program Files\DIFX
2009-12-05 19:32:02 ----D---- I:\WINDOWS\system32\CatRoot
2009-12-05 19:31:31 ----D---- I:\Documents and Settings\All Users\Application Data\Installations
2009-12-05 10:39:04 ----RSD---- I:\WINDOWS\assembly
2009-12-02 14:16:26 ----D---- I:\Program Files\Your Uninstaller 2008
2009-12-02 14:15:43 ----D---- I:\Program Files\Common Files
2009-12-01 17:06:58 ----SHD---- I:\RECYCLER
2009-12-01 16:46:11 ----D---- I:\WINDOWS\system32\config
2009-11-30 13:54:09 ----D---- I:\WINDOWS\system32\DirectX
2009-11-25 12:15:22 ----D---- I:\Program Files\USDownloader135
2009-11-23 17:56:23 ----D---- I:\WINDOWS\system32\Restore
2009-11-23 12:44:18 ----D---- I:\Program Files\Opera
2009-11-22 14:30:40 ----RSD---- I:\WINDOWS\Fonts
2009-11-17 20:17:13 ----D---- I:\WINDOWS\WinSxS
2009-11-17 20:06:01 ----SD---- I:\WINDOWS\Tasks
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK7;AMD K7 Processor Driver; I:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-13 37760]
R1 avgio;avgio; \??\I:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; I:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; I:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R1 vsdatant;vsdatant; I:\WINDOWS\System32\vsdatant.sys [2009-11-22 486280]
R2 avgntflt;avgntflt; I:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-08 56816]
R2 ISWKL;ZoneAlarm Toolbar ISWKL; \??\I:\Program Files\CheckPoint\ZAForceField\ISWKL.sys []
R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS Compatible Transport Protocol; I:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;NWLink NetBIOS; I:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2004-08-04 63232]
R2 NwlnkSpx;NWLink SPX/SPXII Protocol; I:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2004-08-04 55936]
R3 aeaudio;aeaudio; I:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 ati2mtag;ati2mtag; I:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2003-08-12 594432]
R3 CnxEtP;Conexant AccessRunner USB ADSL Adapter Filter Driver; I:\WINDOWS\system32\DRIVERS\CnxEtP.sys [2004-06-16 131072]
R3 CnxEtU;Conexant AccessRunner USB ADSL Interface Device Driver; I:\WINDOWS\system32\DRIVERS\CnxEtU.sys [2004-06-16 614272]
R3 CnxTgNP;Conexant AccessRunner ADSL WAN PPPoE Adapter Driver; I:\WINDOWS\system32\DRIVERS\CnxTgNP.sys [2004-06-16 60416]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; I:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2003-01-16 40960]
R3 LVUSBSta;Logitech USB Monitor Filter; I:\WINDOWS\system32\drivers\lvusbsta.sys [2005-01-31 22016]
R3 optmoupf;Samsung OptMouse PS2 Filter Driver; I:\WINDOWS\system32\DRIVERS\optmoupf.sys [2002-04-25 9152]
R3 pepifilter;Volume Adapter; I:\WINDOWS\system32\DRIVERS\lv302af.sys [2005-01-31 7104]
R3 PID_08A0;QuickCam IM(PID_08A0); I:\WINDOWS\system32\DRIVERS\LV302AV.SYS [2005-01-31 912768]
R3 smwdm;smwdm; I:\WINDOWS\system32\drivers\smwdm.sys [2003-07-15 578368]
R3 usbaudio;USB Audio Driver (WDM); I:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Microsoft USB Generic Parent Driver; I:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; I:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; I:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; I:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 as1v6vj3;as1v6vj3; I:\WINDOWS\system32\drivers\as1v6vj3.sys []
S3 CCDECODE;Closed Caption Decoder; I:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; I:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 hamachi;Hamachi Network Interface; I:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; I:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; I:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; I:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-03-08 21744]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; I:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; I:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; I:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; I:\WINDOWS\system32\drivers\ccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; I:\WINDOWS\system32\drivers\ccdcmbo.sys [2009-02-09 22016]
S3 NTSIM;NTSIM; \??\I:\WINDOWS\system32\ntsim.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; I:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 PRODIGY;PRODIGY; I:\WINDOWS\System32\Drivers\PRODIGY.SYS [2006-08-29 32377]
S3 SANDRA;SANDRA; \??\J:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\Sandra.sys []
S3 SLIP;BDA Slip De-Framer; I:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 StarOpen;StarOpen; I:\WINDOWS\system32\drivers\StarOpen.sys [2009-09-28 7168]
S3 streamip;BDA IPSink; I:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; I:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2009-02-09 7808]
S3 usbprint;Microsoft USB PRINTER Class; I:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; I:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; I:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; I:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S3 usbstor;USB Mass Storage Driver; I:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 vsbus;Virtual Serial Bus Enumerator; I:\WINDOWS\system32\DRIVERS\vsb.sys [2008-07-23 15264]
S3 vserial;ELTIMA Virtual Serial Ports Driver; I:\WINDOWS\System32\DRIVERS\vserial.sys [2008-07-23 47744]
S3 Wdf01000;Kernel Mode Driver Frameworks service; I:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WpdUsb;WpdUsb; I:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944]
S3 WSTCODEC;World Standard Teletext Codec; I:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 IntelIde;IntelIde; I:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Prostredie podpory poskytovateľa služby Windows Socket 2.0 Non-IFS Service; I:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira AntiVir Guard; I:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; I:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 IswSvc;ZoneAlarm Toolbar IswSvc; I:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2009-10-14 476528]
R2 JavaQuickStarterService;Java Quick Starter; J:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; i:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-11-12 93320]
R2 NMSAccessU;NMSAccessU; I:\Program Files\CDBurnerXP\NMSAccessU.exe [2009-09-06 71096]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; I:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 UMWdf;Windows User Mode Driver Framework; I:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R2 vsmon;TrueVector Internet Monitor; I:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-11-22 2384240]
R3 ServiceLayer;ServiceLayer; I:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]
S2 Pml Driver HPZ12;Pml Driver HPZ12; I:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
S3 Adobe LM Service;Adobe LM Service; I:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2009-10-18 68096]
S3 aspnet_state;ASP.NET State Service; I:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; I:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; I:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; I:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; I:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; I:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; I:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Logfile of random's system information tool 1.06 (written by random/random)
Run by Darkness at 2009-12-14 11:14:54
Systém Microsoft Windows XP Professional Service Pack 3
System drive I: has 2 GB (16%) free of 10 GB
Total RAM: 1024 MB (24% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:15:14, on 14. 12. 2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
I:\WINDOWS\System32\smss.exe
I:\WINDOWS\system32\winlogon.exe
I:\WINDOWS\system32\services.exe
I:\WINDOWS\system32\lsass.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\System32\svchost.exe
I:\WINDOWS\Explorer.EXE
I:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
I:\WINDOWS\system32\spoolsv.exe
I:\Program Files\CheckPoint\ZAForceField\ForceField.exe
I:\Program Files\Avira\AntiVir Desktop\sched.exe
I:\Program Files\Avira\AntiVir Desktop\avguard.exe
J:\Program Files\Java\jre6\bin\jqs.exe
i:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
I:\Program Files\CDBurnerXP\NMSAccessU.exe
I:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\system32\LVCOMSX.EXE
I:\Program Files\Analog Devices\SoundMAX\SMTray.exe
I:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
I:\Program Files\Microcom\ADSL DeskPorte USB\CnxDslTb.exe
I:\Program Files\HP\HP Software Update\HPWuSchd2.exe
I:\Program Files\Avira\AntiVir Desktop\avgnt.exe
J:\Program Files\Java\jre6\bin\jusched.exe
I:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
I:\WINDOWS\system32\optmouse.exe
J:\Program Files\AnVir Task Manager Free\AnVir.exe
J:\Program Files\Rainlendar2\Rainlendar2.exe
J:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
I:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
I:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
I:\Program Files\PC Connectivity Solution\ServiceLayer.exe
I:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
I:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
I:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
I:\WINDOWS\system32\ZoneLabs\vsmon.exe
I:\totalcmd\TOTALCMD.EXE
I:\Program Files\Miranda pack by sssugi 2.2.1\miranda32.exe
I:\Program Files\Skype\Phone\Skype.exe
I:\Program Files\Skype\Plugin Manager\skypePM.exe
I:\Program Files\Mozilla Firefox\firefox.exe
J:\Program Files\Java\jre6\bin\javaw.exe
C:\Downloadz\RSIT.exe
I:\Program Files\trend micro\Darkness.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.disk-tools.com/download/daemon
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - I:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: ZoneAlarm Toolbar Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - I:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - J:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - J:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: ZoneAlarm Toolbar - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - I:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [LVCOMSX] I:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [Smapp] I:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [ATIPTA] I:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [CnxDslTaskBar] "I:\Program Files\Microcom\ADSL DeskPorte USB\CnxDslTb.exe" "Microcom\ADSL DeskPorte USB"
O4 - HKLM\..\Run: [HP Software Update] I:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avgnt] "I:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "J:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "I:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "J:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [CD Autorun] J:\Program Files\TweakNow PowerPack 2009\CDAuto.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "I:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [ISW] "I:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"
O4 - HKLM\..\Run: [OPTMOUSEMOUSE] I:\WINDOWS\system32\optmouse.exe
O4 - HKCU\..\Run: [AnVir Task Manager Free] "J:\Program Files\AnVir Task Manager Free\AnVir.exe" Minimized
O4 - HKCU\..\Run: [Rainlendar2] J:\Program Files\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [PC Suite Tray] "J:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = I:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://J:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - J:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - I:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - I:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: i:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD9D6989-4E04-4DC9-96D6-BF7F319C66D9}: NameServer = 195.146.132.58 195.146.128.62
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - I:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: I:\WINDOWS\system32\cssdll32.dll
O22 - SharedTaskScheduler: FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - J:\Program Files\Stardock\Fences\FencesMenu.dll
O23 - Service: Adobe LM Service - Unknown owner - I:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - I:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - I:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - I:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - I:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - J:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - i:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
O23 - Service: NMSAccessU - Unknown owner - I:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Pml Driver HPZ12 - HP - I:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - I:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - I:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - I:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 8399 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - I:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ZoneAlarm Toolbar Registrar - I:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-14 578928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-11-23 204048]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - J:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - J:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-11-23 204048]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Toolbar - I:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-14 578928]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LVCOMSX"=I:\WINDOWS\system32\LVCOMSX.EXE [2004-10-08 221184]
"Smapp"=I:\Program Files\Analog Devices\SoundMAX\SMTray.exe [2003-05-05 143360]
"ATIPTA"=I:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2003-09-11 335872]
"CnxDslTaskBar"=I:\Program Files\Microcom\ADSL DeskPorte USB\CnxDslTb.exe [2004-06-16 233472]
"HP Software Update"=I:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]
"avgnt"=I:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"Adobe Reader Speed Launcher"=J:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=I:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"SunJavaUpdateSched"=J:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"CD Autorun"=J:\Program Files\TweakNow PowerPack 2009\CDAuto.exe []
"ZoneAlarm Client"=I:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-11-22 1037192]
"ISW"=I:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2009-10-14 730480]
"OPTMOUSEMOUSE"=I:\WINDOWS\system32\optmouse.exe [2001-05-08 45056]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AnVir Task Manager Free"=J:\Program Files\AnVir Task Manager Free\AnVir.exe [2009-12-03 1709792]
"Rainlendar2"=J:\Program Files\Rainlendar2\Rainlendar2.exe [2009-08-22 5148672]
"PC Suite Tray"=J:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-25 1414144]
I:\Documents and Settings\All Users\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - I:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="I:\WINDOWS\system32\cssdll32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - J:\Program Files\Stardock\Fences\FencesMenu.dll [2009-10-02 128360]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"I:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="I:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="I:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="I:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"I:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="I:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"I:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="I:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="I:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="I:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="I:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="I:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="I:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"I:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="I:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"I:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="I:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"I:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="I:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"I:\Program Files\Skype\Plugin Manager\skypePM.exe"="I:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"I:\Program Files\Opera\opera.exe"="I:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"J:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\RpcSandraSrv.exe"="J:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service"
"J:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\sandra.mui"="J:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\sandra.mui:*:Enabled:SiSoftware Sandra Agent Service"
"I:\Program Files\Skype\Phone\Skype.exe"="I:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
======List of files/folders created in the last 1 months======
2009-12-14 11:14:55 ----D---- I:\Program Files\trend micro
2009-12-14 10:12:09 ----D---- I:\WINDOWS\CSC
2009-12-13 20:35:33 ----D---- I:\WINDOWS\system32\appmgmt
2009-12-13 20:23:40 ----D---- I:\WINDOWS\system32\NtmsData
2009-12-13 20:19:45 ----HD---- I:\WINDOWS\system32\GroupPolicy
2009-12-13 16:09:17 ----D---- I:\Documents and Settings\Darkness\Application Data\Thinstall
2009-12-13 15:52:41 ----D---- I:\Documents and Settings\Darkness\Application Data\vlc
2009-12-13 12:51:06 ----D---- I:\Documents and Settings\Darkness\Application Data\Sachy
2009-12-09 21:58:33 ----D---- I:\Program Files\Samsung
2009-12-09 21:58:33 ----A---- I:\WINDOWS\system32\OPTMOUSE.EXE
2009-12-09 21:58:33 ----A---- I:\WINDOWS\system32\OPTMOUSE.DLL
2009-12-09 21:58:33 ----A---- I:\WINDOWS\system32\Optmoucp.dll
2009-12-07 14:09:45 ----D---- I:\Program Files\ODEON
2009-12-07 11:17:44 ----D---- I:\Program Files\NSS
2009-12-06 15:22:12 ----A---- I:\WINDOWS\ModemLog_Nokia N70 USB Modem.txt
2009-12-05 19:37:46 ----D---- I:\Documents and Settings\Darkness\Application Data\Nokia
2009-12-05 19:37:31 ----D---- I:\Documents and Settings\Darkness\Application Data\PC Suite
2009-12-05 19:31:59 ----D---- I:\Program Files\PC Connectivity Solution
2009-12-05 19:31:46 ----A---- I:\WINDOWS\system32\wdfcoinstaller01007.dll
2009-12-05 19:31:46 ----A---- I:\WINDOWS\system32\nmwcdcocls.dll
2009-12-05 11:11:53 ----D---- I:\Documents and Settings\Darkness\Application Data\EurekaLog
2009-12-05 10:38:11 ----HDC---- I:\Documents and Settings\All Users\Application Data\{A87EB928-0C6C-4071-AEF1-59E32BAEDF1B}
2009-12-05 10:33:26 ----D---- I:\Documents and Settings\Darkness\Application Data\Stardock
2009-12-05 10:33:17 ----HDC---- I:\Documents and Settings\All Users\Application Data\{E94FD7CC-6945-4744-99C3-9BFF40AA2F24}
2009-12-04 20:33:16 ----D---- I:\Program Files\Karen's Power Tools
2009-12-04 20:33:04 ----D---- I:\Documents and Settings\All Users\Application Data\Karen's Power Tools
2009-12-02 16:45:13 ----D---- I:\Documents and Settings\Darkness\Application Data\r2 Studios
2009-12-02 15:30:20 ----D---- I:\Program Files\Miranda pack by sssugi 2.2.1
2009-12-02 14:33:51 ----D---- I:\Documents and Settings\Darkness\Application Data\CheckPoint
2009-12-02 14:33:23 ----D---- I:\Program Files\CheckPoint
2009-12-02 14:33:19 ----A---- I:\WINDOWS\system32\vsregexp.dll
2009-12-02 14:33:17 ----A---- I:\WINDOWS\system32\zlcommdb.dll
2009-12-02 14:33:17 ----A---- I:\WINDOWS\system32\zlcomm.dll
2009-12-02 14:33:12 ----A---- I:\WINDOWS\system32\vswmi.dll
2009-12-02 14:33:10 ----D---- I:\WINDOWS\system32\ZoneLabs
2009-12-02 14:33:10 ----A---- I:\WINDOWS\system32\zpeng25.dll
2009-12-02 14:33:10 ----A---- I:\WINDOWS\system32\vsxml.dll
2009-12-02 14:33:10 ----A---- I:\WINDOWS\system32\vspubapi.dll
2009-12-02 14:33:10 ----A---- I:\WINDOWS\system32\vsmonapi.dll
2009-12-02 14:33:08 ----D---- I:\Program Files\Zone Labs
2009-12-02 14:32:39 ----A---- I:\WINDOWS\system32\vsutil.dll
2009-12-02 14:32:39 ----A---- I:\WINDOWS\system32\vsinit.dll
2009-12-02 14:32:39 ----A---- I:\WINDOWS\system32\vsdata.dll
2009-12-02 13:57:29 ----D---- I:\Program Files\Partition Wizard Home Edition 4.2
2009-12-02 13:56:35 ----D---- I:\Program Files\NewFreeScreensavers
2009-11-30 13:54:48 ----A---- I:\Documents and Settings\All Users\Application Data\xml5B.tmp
2009-11-30 13:54:48 ----A---- I:\Documents and Settings\All Users\Application Data\xml5A.tmp
2009-11-30 13:54:44 ----A---- I:\Documents and Settings\All Users\Application Data\xml59.tmp
2009-11-30 13:54:07 ----A---- I:\WINDOWS\system32\XAudio2_5.dll
2009-11-30 13:54:07 ----A---- I:\WINDOWS\system32\xactengine3_5.dll
2009-11-30 13:54:06 ----A---- I:\WINDOWS\system32\d3dcsx_42.dll
2009-11-30 13:54:06 ----A---- I:\WINDOWS\system32\D3DCompiler_42.dll
2009-11-30 13:54:04 ----A---- I:\WINDOWS\system32\d3dx11_42.dll
2009-11-30 13:54:01 ----A---- I:\WINDOWS\system32\d3dx10_42.dll
2009-11-30 13:53:57 ----A---- I:\WINDOWS\system32\D3DX9_42.dll
2009-11-27 17:12:11 ----D---- I:\Program Files\Common Files\McAfee
2009-11-27 17:11:48 ----D---- I:\Program Files\McAfee
2009-11-27 17:11:48 ----D---- I:\Documents and Settings\All Users\Application Data\McAfee
2009-11-22 14:35:37 ----D---- I:\Documents and Settings\Darkness\Application Data\Media Player Classic
2009-11-19 12:46:20 ----A---- I:\WINDOWS\system32\ssubtmr6.dll
2009-11-17 20:17:10 ----D---- I:\WINDOWS\Internet Logs
2009-11-17 18:51:56 ----D---- I:\Documents and Settings\Darkness\Application Data\TweakNow RegCleaner
2009-11-15 12:34:08 ----A---- I:\WINDOWS\system32\javaws.exe
2009-11-15 12:34:08 ----A---- I:\WINDOWS\system32\javaw.exe
2009-11-15 12:34:08 ----A---- I:\WINDOWS\system32\java.exe
======List of files/folders modified in the last 1 months======
2009-12-14 11:14:55 ----RD---- I:\Program Files
2009-12-14 11:12:50 ----D---- I:\Documents and Settings\Darkness\Application Data\Skype
2009-12-14 11:05:37 ----D---- I:\WINDOWS\Temp
2009-12-14 10:25:02 ----A---- I:\WINDOWS\Slovnik 2005.INI
2009-12-14 10:24:25 ----D---- I:\WINDOWS
2009-12-14 10:19:09 ----D---- I:\Program Files\Mozilla Firefox
2009-12-14 10:18:35 ----D---- I:\Documents and Settings\Darkness\Application Data\skypePM
2009-12-14 10:15:44 ----A---- I:\WINDOWS\wincmd.ini
2009-12-14 10:14:54 ----D---- I:\WINDOWS\Prefetch
2009-12-14 10:12:40 ----D---- I:\WINDOWS\system32\CatRoot2
2009-12-13 22:10:47 ----D---- I:\WINDOWS\security
2009-12-13 22:10:43 ----A---- I:\WINDOWS\SchedLgU.Txt
2009-12-13 20:40:27 ----D---- I:\WINDOWS\Debug
2009-12-13 20:35:33 ----D---- I:\WINDOWS\system32
2009-12-13 20:19:30 ----D---- I:\WINDOWS\Registration
2009-12-13 18:08:36 ----A---- I:\WINDOWS\ChssBase.ini
2009-12-13 15:44:44 ----AD---- I:\Documents and Settings\All Users\Application Data\TEMP
2009-12-09 22:56:36 ----HD---- I:\WINDOWS\inf
2009-12-09 21:58:45 ----RSHDC---- I:\WINDOWS\system32\dllcache
2009-12-09 21:58:41 ----D---- I:\WINDOWS\system32\drivers
2009-12-09 21:58:37 ----D---- I:\WINDOWS\system32\ReinstallBackups
2009-12-09 21:58:32 ----HD---- I:\Program Files\InstallShield Installation Information
2009-12-09 16:44:11 ----ASH---- I:\boot.ini
2009-12-07 14:10:03 ----SHD---- I:\WINDOWS\Installer
2009-12-07 11:54:40 ----A---- I:\WINDOWS\Translator 2005.INI
2009-12-07 11:23:33 ----SD---- I:\Documents and Settings\Darkness\Application Data\Microsoft
2009-12-05 19:50:36 ----A---- I:\WINDOWS\system32\PerfStringBackup.INI
2009-12-05 19:33:15 ----DC---- I:\WINDOWS\system32\DRVSTORE
2009-12-05 19:32:14 ----D---- I:\Program Files\DIFX
2009-12-05 19:32:02 ----D---- I:\WINDOWS\system32\CatRoot
2009-12-05 19:31:31 ----D---- I:\Documents and Settings\All Users\Application Data\Installations
2009-12-05 10:39:04 ----RSD---- I:\WINDOWS\assembly
2009-12-02 14:16:26 ----D---- I:\Program Files\Your Uninstaller 2008
2009-12-02 14:15:43 ----D---- I:\Program Files\Common Files
2009-12-01 17:06:58 ----SHD---- I:\RECYCLER
2009-12-01 16:46:11 ----D---- I:\WINDOWS\system32\config
2009-11-30 13:54:09 ----D---- I:\WINDOWS\system32\DirectX
2009-11-25 12:15:22 ----D---- I:\Program Files\USDownloader135
2009-11-23 17:56:23 ----D---- I:\WINDOWS\system32\Restore
2009-11-23 12:44:18 ----D---- I:\Program Files\Opera
2009-11-22 14:30:40 ----RSD---- I:\WINDOWS\Fonts
2009-11-17 20:17:13 ----D---- I:\WINDOWS\WinSxS
2009-11-17 20:06:01 ----SD---- I:\WINDOWS\Tasks
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK7;AMD K7 Processor Driver; I:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-13 37760]
R1 avgio;avgio; \??\I:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; I:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; I:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R1 vsdatant;vsdatant; I:\WINDOWS\System32\vsdatant.sys [2009-11-22 486280]
R2 avgntflt;avgntflt; I:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-08 56816]
R2 ISWKL;ZoneAlarm Toolbar ISWKL; \??\I:\Program Files\CheckPoint\ZAForceField\ISWKL.sys []
R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS Compatible Transport Protocol; I:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;NWLink NetBIOS; I:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2004-08-04 63232]
R2 NwlnkSpx;NWLink SPX/SPXII Protocol; I:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2004-08-04 55936]
R3 aeaudio;aeaudio; I:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 ati2mtag;ati2mtag; I:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2003-08-12 594432]
R3 CnxEtP;Conexant AccessRunner USB ADSL Adapter Filter Driver; I:\WINDOWS\system32\DRIVERS\CnxEtP.sys [2004-06-16 131072]
R3 CnxEtU;Conexant AccessRunner USB ADSL Interface Device Driver; I:\WINDOWS\system32\DRIVERS\CnxEtU.sys [2004-06-16 614272]
R3 CnxTgNP;Conexant AccessRunner ADSL WAN PPPoE Adapter Driver; I:\WINDOWS\system32\DRIVERS\CnxTgNP.sys [2004-06-16 60416]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; I:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2003-01-16 40960]
R3 LVUSBSta;Logitech USB Monitor Filter; I:\WINDOWS\system32\drivers\lvusbsta.sys [2005-01-31 22016]
R3 optmoupf;Samsung OptMouse PS2 Filter Driver; I:\WINDOWS\system32\DRIVERS\optmoupf.sys [2002-04-25 9152]
R3 pepifilter;Volume Adapter; I:\WINDOWS\system32\DRIVERS\lv302af.sys [2005-01-31 7104]
R3 PID_08A0;QuickCam IM(PID_08A0); I:\WINDOWS\system32\DRIVERS\LV302AV.SYS [2005-01-31 912768]
R3 smwdm;smwdm; I:\WINDOWS\system32\drivers\smwdm.sys [2003-07-15 578368]
R3 usbaudio;USB Audio Driver (WDM); I:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Microsoft USB Generic Parent Driver; I:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; I:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; I:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; I:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 as1v6vj3;as1v6vj3; I:\WINDOWS\system32\drivers\as1v6vj3.sys []
S3 CCDECODE;Closed Caption Decoder; I:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; I:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 hamachi;Hamachi Network Interface; I:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; I:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; I:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; I:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-03-08 21744]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; I:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; I:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; I:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; I:\WINDOWS\system32\drivers\ccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; I:\WINDOWS\system32\drivers\ccdcmbo.sys [2009-02-09 22016]
S3 NTSIM;NTSIM; \??\I:\WINDOWS\system32\ntsim.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; I:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 PRODIGY;PRODIGY; I:\WINDOWS\System32\Drivers\PRODIGY.SYS [2006-08-29 32377]
S3 SANDRA;SANDRA; \??\J:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\Sandra.sys []
S3 SLIP;BDA Slip De-Framer; I:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 StarOpen;StarOpen; I:\WINDOWS\system32\drivers\StarOpen.sys [2009-09-28 7168]
S3 streamip;BDA IPSink; I:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; I:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2009-02-09 7808]
S3 usbprint;Microsoft USB PRINTER Class; I:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; I:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; I:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; I:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S3 usbstor;USB Mass Storage Driver; I:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 vsbus;Virtual Serial Bus Enumerator; I:\WINDOWS\system32\DRIVERS\vsb.sys [2008-07-23 15264]
S3 vserial;ELTIMA Virtual Serial Ports Driver; I:\WINDOWS\System32\DRIVERS\vserial.sys [2008-07-23 47744]
S3 Wdf01000;Kernel Mode Driver Frameworks service; I:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WpdUsb;WpdUsb; I:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944]
S3 WSTCODEC;World Standard Teletext Codec; I:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 IntelIde;IntelIde; I:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Prostredie podpory poskytovateľa služby Windows Socket 2.0 Non-IFS Service; I:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira AntiVir Guard; I:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; I:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 IswSvc;ZoneAlarm Toolbar IswSvc; I:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2009-10-14 476528]
R2 JavaQuickStarterService;Java Quick Starter; J:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; i:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-11-12 93320]
R2 NMSAccessU;NMSAccessU; I:\Program Files\CDBurnerXP\NMSAccessU.exe [2009-09-06 71096]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; I:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 UMWdf;Windows User Mode Driver Framework; I:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R2 vsmon;TrueVector Internet Monitor; I:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-11-22 2384240]
R3 ServiceLayer;ServiceLayer; I:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]
S2 Pml Driver HPZ12;Pml Driver HPZ12; I:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
S3 Adobe LM Service;Adobe LM Service; I:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2009-10-18 68096]
S3 aspnet_state;ASP.NET State Service; I:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; I:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; I:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; I:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; I:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; I:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; I:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------