Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Zpráva

Blluemartin · #1 Příspěvek od **Blluemartin** » 05 úno 2010 17:27

info.txt logfile of random's system information tool 1.06 2010-02-05 16:50:25

======Uninstall list======

-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Extra Settings-->MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings-->MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
Adobe Flash Player 10 ActiveX-->MsiExec.exe /X{2BD2FA21-B51D-4F01-94A7-AC16737B2163}
Adobe Flash Player 10 Plugin-->MsiExec.exe /X{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B}
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3-->C:\Program Files\Common Files\Adobe\Installers\2ac78060bc5856b0c1cf873bb919b58\Setup.exe
Adobe Photoshop CS3-->MsiExec.exe /I{0046FA01-C5B9-4985-BACB-398DC480FC05}
Adobe Reader 9.2 - Slovak-->MsiExec.exe /I{AC76BA86-7AD7-1051-7B44-A92000000001}
Adobe Setup-->MsiExec.exe /I{D1BB4446-AE9C-4256-9A7F-4D46604D2462}
Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
Advanced SystemCare 3-->"D:\Program files\Advanced SystemCare 3\unins000.exe"
Aktualizácia Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-041B-0000-0000000FF1CE} /uninstall {9A8C39B0-D27F-4F81-BE74-2FECF164707E}
Aktualizácia Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-041B-0000-0000000FF1CE} /uninstall {CE23B3DC-18CC-46FC-A309-81D6670F8D3D}
Aktualizácia Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-041B-0000-0000000FF1CE} /uninstall {D6DBF512-87C0-4F6A-8FB9-AC3A389D9DE5}
avast! Antivirus-->C:\Program Files\Avast4\aswRunDll.exe "C:\Program Files\Avast4\Setup\setiface.dll",RunSetup
Broadcom Gigabit Integrated Controller-->MsiExec.exe /X{F870B987-18BC-45FC-9BE8-35C02DCDA10F}
Broadcom WLAN-->C:\Program Files\InstallShield Installation Information\{8991E763-21F5-4DEA-A938-5D9D77DCB488}\setup.exe -runfromtemp -l0x0009 -removeonly
CCleaner-->"D:\Program files\CCleaner\uninst.exe"
CwdStudio 1.0.5-->"D:\Program files\CwdStudio\unins000.exe"
Defraggler (remove only)-->"D:\Program files\Defraggler\uninst.exe"
Energy Management-->C:\Program Files\InstallShield Installation Information\{AE1E24C2-E720-42D5-B8E1-48F71A97B4DB}\setup.exe -runfromtemp -l0x0009 -removeonly
FastStone Image Viewer 3.9-->C:\Program Files\FastStone Image Viewer\uninst.exe
GTK+ 2.10.13 runtime environment-->"D:\Program files\2.0\setup\unins000.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915800-v4)-->"C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
ICQ6.5-->"C:\Program Files\InstallShield Installation Information\{60DE4033-9503-48D1-A483-7846BD217CA9}\setup.exe" -runfromtemp -l0x0009 -removeonly
Icy Tower v1.4-->"D:\Program files\icytower1.4\unins000.exe"
Instant Photo Effects 2.0-->D:\Program filesPhotoFun\Uninstall.exe
Intel(R) Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall
IrfanView (remove only)-->D:\Program files\IrfanView\iv_uninstall.exe
Java(TM) 6 Update 18-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216018FF}
K-Lite Mega Codec Pack 5.0.5-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
LanSchool Student-->MsiExec.exe /X{2CD0E849-1DB0-4597-8433-CEB5BB57F728}
Lenovo Bluetooth with Enhanced Data Rate Software-->MsiExec.exe /X{84814E6B-2581-46EC-926A-823BD1C670F6}
Lenovo Quick Start-->MsiExec.exe /X{808E299D-B223-4B06-ACB7-68F3705D9EC6}
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Base Smart Card Cryptographic Service Provider Package-->"C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-041B-0000-0000000FF1CE} /uninstall {F69A7281-8297-47E2-B583-36EAA37C89EE}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-041B-0000-0000000FF1CE} /uninstall {F69A7281-8297-47E2-B583-36EAA37C89EE}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-041B-0000-0000000FF1CE} /uninstall {F69A7281-8297-47E2-B583-36EAA37C89EE}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-041B-0000-0000000FF1CE} /uninstall {8AF3A9EB-FBB9-449F-AC11-94CE39930037}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-041B-0000-0000000FF1CE} /uninstall {F69A7281-8297-47E2-B583-36EAA37C89EE}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0016-041B-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Slovak) 2007-->MsiExec.exe /X{90120000-00A1-041B-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0018-041B-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Hungarian) 2007-->MsiExec.exe /X{90120000-001F-040E-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Slovak) 2007-->MsiExec.exe /X{90120000-002C-041B-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0405-0000-0000000FF1CE} /uninstall {294B4278-CF7B-40B9-86A1-2D3FF0C2C524}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040E-0000-0000000FF1CE} /uninstall {573CA1BB-C8A3-46C4-993E-DB4043D9BFCD}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-041B-0000-0000000FF1CE} /uninstall {10EC59E5-9BCE-4884-BB1A-E28627220232}
Microsoft Office Shared MUI (Slovak) 2007-->MsiExec.exe /X{90120000-006E-041B-0000-0000000FF1CE}
Microsoft Office Word MUI (Slovak) 2007-->MsiExec.exe /X{90120000-001B-041B-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mozilla Firefox (3.6)-->D:\Program files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 4.0 SP2 and SOAP Toolkit 3.0-->MsiExec.exe /I{32343DB6-9A52-40C9-87E4-5E7C79791C87}
MSXML 6.0 Parser-->MsiExec.exe /I{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}
PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PhotoFiltre Studio-->"D:\Program files\PhotoFiltre Studio\Uninst.exe"
PhotoImpression-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFF8A42A-0814-4864-92D7-52EFB3048ABD}\Setup.exe" -l0x9
Realtek Card Reader-->C:\Program Files\InstallShield Installation Information\{D10CB652-9332-4242-B7A9-2D61570144F7}\setup.exe -runfromtemp -l0x0009 -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x9 -removeonly
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB973704)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {E626DC89-A787-4553-9BB3-DC2EC7E1593F}
Security Update for Microsoft Office Excel 2007 (KB973593)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7D6255E3-3423-4D8B-A328-F6F8D28DD5FE}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Security Update for Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB974455)-->"C:\WINDOWS\ie7updates\KB974455-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 8 (KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 8 (KB978207)-->"C:\WINDOWS\ie8updates\KB978207-IE8\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Security Update for Windows Search 4 - KB963093-->"C:\WINDOWS\$NtUninstallKB963093$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Security Update for Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Security Update for Windows XP (KB961371-v2)-->"C:\WINDOWS\$NtUninstallKB961371-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Security Update for Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Security Update for Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Security Update for Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Security Update for Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Security Update for Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Security Update for Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Stellarium 0.10.3-->"D:\Program files\Stellarium\unins000.exe"
Student DOG 1.9-->"D:\Program files\Student DOG\unins000.exe"
SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Total Commander (Remove or Repair)-->C:\Program Files\Total Commander\tcuninst.exe
UIM-->C:\WINDOWS\uninst.exe -f"d:\program files\UMELA INTELIGENCIA\DeIsL1.isu" -c"d:\program files\UMELA INTELIGENCIA\_ISREG32.DLL"
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Microsoft Office InfoPath 2007 (KB976416)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7}
Update for Microsoft Office Word 2007 (KB974561)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0CDDBAA2-2111-4A0E-A1B0-76C40C635331}
Update for Microsoft Windows (KB971513)-->"C:\WINDOWS\$NtUninstallKB971513$\spuninst\spuninst.exe"
Update for Windows Internet Explorer 8 (KB973874)-->"C:\WINDOWS\ie8updates\KB973874-IE8\spuninst\spuninst.exe"
Update for Windows Internet Explorer 8 (KB975364)-->"C:\WINDOWS\ie8updates\KB975364-IE8\spuninst\spuninst.exe"
Update for Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
Update for Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Update for Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Update for Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
Update for Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Update for Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Update for Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Update for Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Update for Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
VeriFace III-->C:\Program Files\Lenovo\VeriFaceIII\Uninstall.exe
VLC media player 1.0.5-->D:\Program files\VLC\uninstall.exe
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Search 4.0-->"C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.exe"
WinRAR archivátor-->C:\Program Files\WinRAR\uninstall.exe
YouTube Downloader 2.5.3-->"D:\Program files\YouTube Downloader\uninstall.exe"
ZoneAlarm-->D:\Program files\ZoneAlarm\zauninst.exe

=====HijackThis Backups=====

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') [2010-01-30]
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') [2010-01-30]
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-01-30]
O20 - Winlogon Notify: PicNotify - C:\WINDOWS\SYSTEM32\PicNotify.dll [2010-01-30]

======Security center information======

AV: avast! antivirus 4.8.1368 [VPS 100204-1]
FW: ZoneAlarm Firewall

======System event log======

Computer Name: POCITAC
Event Code: 7023
Message: Služba Application Management bola ukončená s nasledujúcou chybou:
Zadaný modul sa nepodarilo nájsť.

Record Number: 22079
Source Name: Service Control Manager
Time Written: 20100123114801.000000+060
Event Type: chyba
User:

Computer Name: POCITAC
Event Code: 7036
Message: Služba Application Management vstúpila do stavu Zastavené.

Record Number: 22078
Source Name: Service Control Manager
Time Written: 20100123114801.000000+060
Event Type: informácie
User:

Computer Name: POCITAC
Event Code: 7035
Message: Službe Application Management bolo úspešne odoslané riadenie Spustené.

Record Number: 22077
Source Name: Service Control Manager
Time Written: 20100123114801.000000+060
Event Type: informácie
User: POCITAC\Lenovo

Computer Name: POCITAC
Event Code: 7023
Message: Služba Application Management bola ukončená s nasledujúcou chybou:
Zadaný modul sa nepodarilo nájsť.

Record Number: 22076
Source Name: Service Control Manager
Time Written: 20100123114801.000000+060
Event Type: chyba
User:

Computer Name: POCITAC
Event Code: 7036
Message: Služba Application Management vstúpila do stavu Zastavené.

Record Number: 22075
Source Name: Service Control Manager
Time Written: 20100123114801.000000+060
Event Type: informácie
User:

=====Application event log=====

Computer Name: CINKANIC
Event Code: 11335
Message: Produkt: TuneUp Utilities -- Chyba 1335. Súbor kabinetu TUU.cab, ktorý je potrebný na túto inštaláciu, je poškodený a nemožno ho použiť. Mohlo by to znamenať sieťovú chybu, chybu pri čítaní z disku CD-ROM alebo problém súvisiaci s týmto balíkom.

Record Number: 1736
Source Name: MsiInstaller
Time Written: 20091214183346.000000+060
Event Type: chyba
User: POCITAC\Lenovo

Computer Name: CINKANIC
Event Code: 11335
Message: Produkt: TuneUp Utilities -- Chyba 1335. Súbor kabinetu TUU.cab, ktorý je potrebný na túto inštaláciu, je poškodený a nemožno ho použiť. Mohlo by to znamenať sieťovú chybu, chybu pri čítaní z disku CD-ROM alebo problém súvisiaci s týmto balíkom.

Record Number: 1735
Source Name: MsiInstaller
Time Written: 20091214183344.000000+060
Event Type: chyba
User: POCITAC\Lenovo

Computer Name: CINKANIC
Event Code: 11335
Message: Produkt: TuneUp Utilities -- Chyba 1335. Súbor kabinetu TUU.cab, ktorý je potrebný na túto inštaláciu, je poškodený a nemožno ho použiť. Mohlo by to znamenať sieťovú chybu, chybu pri čítaní z disku CD-ROM alebo problém súvisiaci s týmto balíkom.

Record Number: 1734
Source Name: MsiInstaller
Time Written: 20091214183343.000000+060
Event Type: chyba
User: POCITAC\Lenovo

Computer Name: CINKANIC
Event Code: 11335
Message: Produkt: TuneUp Utilities -- Chyba 1335. Súbor kabinetu TUU.cab, ktorý je potrebný na túto inštaláciu, je poškodený a nemožno ho použiť. Mohlo by to znamenať sieťovú chybu, chybu pri čítaní z disku CD-ROM alebo problém súvisiaci s týmto balíkom.

Record Number: 1733
Source Name: MsiInstaller
Time Written: 20091214183342.000000+060
Event Type: chyba
User: POCITAC\Lenovo

Computer Name: CINKANIC
Event Code: 11335
Message: Produkt: TuneUp Utilities -- Chyba 1335. Súbor kabinetu TUU.cab, ktorý je potrebný na túto inštaláciu, je poškodený a nemožno ho použiť. Mohlo by to znamenať sieťovú chybu, chybu pri čítaní z disku CD-ROM alebo problém súvisiaci s týmto balíkom.

Record Number: 1732
Source Name: MsiInstaller
Time Written: 20091214183340.000000+060
Event Type: chyba
User: POCITAC\Lenovo

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 28 Stepping 2, GenuineIntel
"PROCESSOR_REVISION"=1c02
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;c:\Program Files\Common Files\Lenovo;D:\Program files\2.0\bin
"tvdumpflags"=8
"LANG"=sk

-----------------EOF-----------------
Dakujem

#2 Příspěvek od **Caroprd111** » 05 úno 2010 17:54

Zdravím

Vložte sem druhý log který se nachází v C:\log.txt

Blluemartin · #3 Příspěvek od **Blluemartin** » 05 úno 2010 18:01

V C ziadny l

og.txt nemam iba v zlozke rsit, ale tento log sa mi zda nejaky iny od ostatnych to je asi nejke info
tu je log ktor som nasiel v rsit

Logfile of random's system information tool 1.06 (written by random/random)
Run by Lenovo at 2010-02-05 16:49:52
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 30 GB (74%) free of 41 GB
Total RAM: 1014 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:50:20, on 5.2.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avast4\aswUpdSv.exe
C:\Program Files\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\QSTART.SYS\config\DVMExportService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LanSchool\student.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Avast4\ashMaiSv.exe
C:\Program Files\Avast4\ashWebSv.exe
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Lenovo\Energy Management\utility.exe
C:\Program Files\Lenovo\Energy Management\Energy Management.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
D:\Program files\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Documents and Settings\All Users\Application Data\Family007\nwrs.exe
D:\Program files\Mozilla Firefox\firefox.exe
D:\Program files\CCleaner\CCleaner.exe
D:\Moje dokumenty\Desktop\RSIT\RSIT.exe
C:\Program Files\trend micro\Lenovo.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Internet Explorer Web Blocker - {1935E690-1AC1-4AA5-BA23-3D9D0CEB3A00} - C:\WINDOWS\system32\Lsk_iBlk.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [EnergyUtility] "C:\Program Files\Lenovo\Energy Management\utility.exe"
O4 - HKLM\..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe
O4 - HKLM\..\Run: [RTHDCPL] "RTHDCPL.EXE"
O4 - HKLM\..\Run: [Teacher] "C:\Program Files\LanSchool\student.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program files\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [StudentDOG] D:\Program files\Student DOG\StudentDOG.exe -h
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\Program files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\Program files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftup ... 6559585796
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 9162241593
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - D:\Program files\superantispyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe
O23 - Service: DeviceVM Meta Data Export Service (DvmMDES) - DeviceVM - C:\QSTART.SYS\config\DVMExportService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LanSchool Student Service (LanSchoolStudent) - LanSchool Technologies, llc - C:\Program Files\LanSchool\student.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 7857 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\firefox.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{695F01B1-5DF4-4A48-A411-74C692A807C6}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1935E690-1AC1-4AA5-BA23-3D9D0CEB3A00}]
lsk_WebBlk Class - C:\WINDOWS\system32\Lsk_iBlk.dll [2009-11-06 148784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-22 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-01-22 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast!"=C:\PROGRA~1\Avast4\ashDisp.exe [2009-11-25 81000]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-05-23 1146880]
"EnergyUtility"=C:\Program Files\Lenovo\Energy Management\utility.exe [2008-07-10 4456448]
"Energy Management"=C:\Program Files\Lenovo\Energy Management\Energy Management.exe [2008-08-28 1283984]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-02-17 17508864]
"Teacher"=C:\Program Files\LanSchool\student.exe [2009-11-06 1041712]
"ZoneAlarm Client"=D:\Program files\ZoneAlarm\zlclient.exe [2009-11-22 1037192]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"StudentDOG"=D:\Program files\Student DOG\StudentDOG.exe [2009-12-27 2278912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
D:\Program files\superantispyware\SASWINLO.dll [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-02-15 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=D:\Program files\superantispyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LanSchoolStudent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanSchoolStudent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
"DisableChangePassword"=0
"DisableLockWorkstation"=0
"HideFastUserSwitching"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoClose"=0
"NoLogoff"=0
"StartMenuLogOff"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoResolveSearch"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\LanSchool\student.exe"="C:\Program Files\LanSchool\student.exe:*:Enabled:LanSchool Student"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Total Commander\TOTALCMD.EXE"="C:\Program Files\Total Commander\TOTALCMD.EXE:*:Disabled:Total Commander 32 bit international version, file manager replacement for Windows"
"D:\Program files\Warcraft III\Warcraft III.exe"="D:\Program files\Warcraft III\Warcraft III.exe:*:Disabled:Warcraft III"
"D:\Program files\ICQ6.5\ICQ.exe"="D:\Program files\ICQ6.5\ICQ.exe:*:Enabled:ICQ.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\LanSchool\student.exe"="C:\Program Files\LanSchool\student.exe:*:Enabled:LanSchool Student"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"D:\Program files\ICQ6.5\ICQ.exe"="D:\Program files\ICQ6.5\ICQ.exe:*:Enabled:ICQ.exe"

======List of files/folders created in the last 1 months======

2010-02-05 16:25:16 ----D---- C:\Documents and Settings\All Users\Application Data\OptiTex
2010-02-05 16:21:46 ----D---- C:\Program Files\Common Files\DAZ
2010-02-05 16:15:08 ----AH---- C:\WINDOWS\family007.ini
2010-02-05 16:15:06 ----D---- C:\Documents and Settings\All Users\Application Data\Family007
2010-02-05 15:47:53 ----D---- C:\Documents and Settings\Lenovo\Application Data\vlc
2010-02-04 19:18:53 ----HD---- C:\dvmexp
2010-02-04 19:10:26 ----A---- C:\WINDOWS\SpeederXP.INI
2010-02-04 18:52:34 ----D---- C:\Documents and Settings\Lenovo\Application Data\Stellarium
2010-02-04 18:34:14 ----D---- C:\rsit
2010-02-04 18:34:14 ----D---- C:\Documents and Settings\Lenovo\Application Data\TweakNow PowerPack 2009
2010-02-04 18:34:13 ----D---- C:\Program Files\OpenOffice.org 3
2010-02-04 18:34:12 ----D---- C:\Program Files\Webroot
2010-02-04 18:34:12 ----D---- C:\Program Files\Sun
2010-02-04 18:34:12 ----D---- C:\Program Files\Google
2010-02-04 15:45:11 ----D---- C:\Documents and Settings\Lenovo\Application Data\FreeStone Group
2010-02-04 13:59:17 ----A---- C:\WINDOWS\tmps41.txt
2010-02-03 14:54:06 ----A---- C:\WINDOWS\system32\vsregexp.dll
2010-02-03 14:54:02 ----A---- C:\WINDOWS\system32\zlcommdb.dll
2010-02-03 14:54:02 ----A---- C:\WINDOWS\system32\zlcomm.dll
2010-02-03 14:53:54 ----A---- C:\WINDOWS\system32\vswmi.dll
2010-02-03 14:53:52 ----A---- C:\WINDOWS\system32\zpeng25.dll
2010-02-03 14:53:52 ----A---- C:\WINDOWS\system32\vsxml.dll
2010-02-03 14:53:51 ----D---- C:\WINDOWS\system32\ZoneLabs
2010-02-03 14:53:51 ----A---- C:\WINDOWS\system32\vspubapi.dll
2010-02-03 14:53:51 ----A---- C:\WINDOWS\system32\vsmonapi.dll
2010-02-03 14:52:47 ----D---- C:\WINDOWS\Internet Logs
2010-02-03 14:52:46 ----A---- C:\WINDOWS\system32\vsutil.dll
2010-02-03 14:52:46 ----A---- C:\WINDOWS\system32\vsinit.dll
2010-02-03 14:52:46 ----A---- C:\WINDOWS\system32\vsdata.dll
2010-02-03 14:51:41 ----HDC---- C:\Documents and Settings\All Users\Application Data\{C4C0E335-EDDF-46A0-A57D-F3802AE44275}
2010-02-03 14:13:39 ----D---- C:\Documents and Settings\Lenovo\Application Data\Kecal
2010-02-03 13:52:19 ----D---- C:\Program Files\Common Files\SWF Studio
2010-02-03 13:52:18 ----SHD---- C:\Documents and Settings\Lenovo\Application Data\.#
2010-01-31 15:25:18 ----D---- C:\Documents and Settings\Lenovo\Application Data\Kingston
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\PCDLIB32.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\NPPLG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTWND90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTTWN90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTTHK90W.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTKRN90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTISI90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTIMG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTFIL90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTEFX90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTDLG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTDIS90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTANN90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFWPG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFWMF90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFWFX90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFTIF90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFTGA90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFRAS90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPSD90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPNG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPCX90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPCT90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPCD90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFMSP90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFMAC90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFLMB90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFLMA90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFKODAK.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFIMG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFICA90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFGIF90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFFPX90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFFPX7.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFFAX90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFEPS90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFDIC90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFCMP90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFCAL90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFBMP90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFAWD90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFAVI90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWVIEW32.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWRESX32.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWDENC32.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWDCXC32.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWCODC32.DLL
2010-01-29 14:25:09 ----D---- C:\Documents and Settings\All Users\Application Data\FLEXnet
2010-01-29 14:09:13 ----D---- C:\Program Files\Bonjour
2010-01-29 13:56:32 ----D---- C:\Program Files\Common Files\Macrovision Shared
2010-01-28 18:11:42 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2010-01-27 13:13:57 ----SHD---- C:\RECYCLER
2010-01-27 09:48:28 ----D---- C:\WINDOWS\ERDNT
2010-01-25 14:25:21 ----D---- C:\Program Files\trend micro
2010-01-25 09:52:51 ----D---- C:\Documents and Settings\Lenovo\Application Data\ArcSoft
2010-01-25 09:50:17 ----A---- C:\WINDOWS\PI_SETUP.ini
2010-01-25 09:50:17 ----A---- C:\WINDOWS\PCDLIB32.DLL
2010-01-24 19:43:48 ----D---- C:\Documents and Settings\Lenovo\Application Data\IObit
2010-01-22 09:50:29 ----D---- C:\Documents and Settings\All Users\Application Data\Sun
2010-01-22 09:50:26 ----D---- C:\Program Files\Common Files\Java
2010-01-22 09:50:04 ----A---- C:\WINDOWS\system32\javaws.exe
2010-01-22 09:50:04 ----A---- C:\WINDOWS\system32\javaw.exe
2010-01-22 09:50:04 ----A---- C:\WINDOWS\system32\java.exe
2010-01-22 09:49:28 ----D---- C:\Program Files\Java
2010-01-21 19:33:39 ----A---- C:\WINDOWS\system32\pdfmonnt.dll
2010-01-21 19:22:40 ----A---- C:\WINDOWS\system32\ss2uinst.exe
2010-01-19 18:06:26 ----D---- C:\Documents and Settings\Lenovo\Application Data\ICQ
2010-01-18 15:06:10 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-01-17 14:54:57 ----D---- C:\Documents and Settings\Lenovo\Application Data\iolo
2010-01-17 14:54:57 ----D---- C:\Documents and Settings\All Users\Application Data\iolo
2010-01-17 11:05:43 ----A---- C:\Documents and Settings\All Users\Application Data\Microsoft.SqlServer.Compact.351.32.bc
2010-01-17 11:00:10 ----D---- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
2010-01-17 10:57:32 ----D---- C:\Documents and Settings\Lenovo\Application Data\NCH Swift Sound
2010-01-17 10:14:44 ----D---- C:\Program Files\Microsoft Office 2003 Developer Resources
2010-01-16 18:50:58 ----D---- C:\Program Files\MSXML 4.0
2010-01-16 15:58:47 ----D---- C:\WINDOWS\pss
2010-01-16 12:56:31 ----A---- C:\WINDOWS\system32\diarbp64.exe
2010-01-16 12:56:14 ----A---- C:\WINDOWS\system32\diarbp32.exe
2010-01-16 11:07:27 ----SHD---- C:\WINDOWS\ftpcache
2010-01-16 10:50:05 ----D---- C:\Program Files\MSSOAP
2010-01-15 15:06:27 ----A---- C:\WINDOWS\War3Unin.exe
2010-01-15 14:49:15 ----D---- C:\Program Files\Adobe
2010-01-15 14:49:04 ----D---- C:\Config.Msi
2010-01-14 10:36:33 ----D---- C:\Program Files\Adobe(2)
2010-01-13 16:30:40 ----D---- C:\Documents and Settings\Lenovo\Application Data\SoftLogica
2010-01-13 08:22:09 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-12 17:51:19 ----N---- C:\WINDOWS\Setup1.exe
2010-01-12 17:51:17 ----A---- C:\WINDOWS\ST6UNST.EXE
2010-01-12 16:30:04 ----A---- C:\WINDOWS\iun6002.exe
2010-01-11 17:54:18 ----D---- C:\Documents and Settings\Lenovo\Application Data\Mozilla
2010-01-11 14:38:45 ----A---- C:\WINDOWS\didakta.ini
2010-01-10 10:35:04 ----D---- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2010-01-10 10:34:54 ----D---- C:\Documents and Settings\Lenovo\Application Data\SUPERAntiSpyware.com
2010-01-10 09:35:16 ----D---- C:\Documents and Settings\Lenovo\Application Data\Sun
2010-01-09 17:38:08 ----D---- C:\TP
2010-01-08 14:08:48 ----A---- C:\WINDOWS\system32\msvcr70.dll
2010-01-08 14:08:48 ----A---- C:\WINDOWS\system32\msvcp70.dll
2010-01-08 14:08:47 ----A---- C:\WINDOWS\system32\mfc70.dll
2010-01-07 13:55:01 ----A---- C:\WINDOWS\ARCHPR.INI

======List of files/folders modified in the last 1 months======

2010-02-05 16:48:55 ----AD---- C:\WINDOWS
2010-02-05 16:39:00 ----AD---- C:\WINDOWS\system32
2010-02-05 16:23:20 ----SHD---- C:\WINDOWS\Installer
2010-02-05 16:23:18 ----D---- C:\WINDOWS\WinSxS
2010-02-05 16:21:46 ----D---- C:\Program Files\Common Files
2010-02-05 16:20:23 ----D---- C:\Program Files\LanSchool
2010-02-05 14:11:31 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-05 14:11:08 ----D---- C:\WINDOWS\Temp
2010-02-05 09:08:05 ----D---- C:\temp
2010-02-04 19:20:26 ----D---- C:\LanSchool Files
2010-02-04 19:19:42 ----D---- C:\WINDOWS\Prefetch
2010-02-04 19:17:45 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-02-04 18:34:58 ----D---- C:\WINDOWS\system32\config
2010-02-04 18:34:45 ----D---- C:\WINDOWS\system32\wbem
2010-02-04 18:34:44 ----D---- C:\WINDOWS\Registration
2010-02-04 18:34:15 ----D---- C:\Program Files\Windows Desktop Search
2010-02-04 18:34:15 ----D---- C:\Program Files
2010-02-04 18:25:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-04 16:08:14 ----D---- C:\Documents and Settings\Lenovo\Application Data\Adobe
2010-02-03 19:25:00 ----HD---- C:\WINDOWS\inf
2010-02-03 19:25:00 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-02-03 19:25:00 ----D---- C:\WINDOWS\system32\drivers
2010-02-03 14:45:38 ----ASHDC---- C:\WINDOWS\system32\dllcache
2010-01-30 18:29:59 ----SD---- C:\WINDOWS\Tasks
2010-01-29 14:10:35 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-01-29 14:09:09 ----D---- C:\Program Files\Common Files\Adobe
2010-01-29 14:05:35 ----RSD---- C:\WINDOWS\Fonts
2010-01-28 19:49:07 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-01-27 10:00:07 ----A---- C:\WINDOWS\system.ini
2010-01-27 09:54:20 ----D---- C:\WINDOWS\AppPatch
2010-01-26 17:21:03 ----SD---- C:\Documents and Settings\Lenovo\Application Data\Microsoft
2010-01-25 18:20:07 ----D---- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2010-01-25 09:49:42 ----D---- C:\Documents and Settings\Lenovo\Application Data\Skype
2010-01-25 08:49:48 ----D---- C:\Documents and Settings\Lenovo\Application Data\skypePM
2010-01-24 20:00:22 ----D---- C:\WINDOWS\system32\MsDtc
2010-01-24 20:00:22 ----D---- C:\WINDOWS\system32\(null)
2010-01-24 20:00:22 ----D---- C:\WINDOWS\repair
2010-01-24 20:00:22 ----D---- C:\Program Files\Windows Live Toolbar
2010-01-24 20:00:22 ----D---- C:\Program Files\K-Lite Codec Pack
2010-01-24 20:00:22 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2010-01-24 20:00:22 ----D---- C:\Documents and Settings
2010-01-24 10:16:24 ----D---- C:\Documents and Settings\All Users\Application Data\VeriFace
2010-01-22 19:53:45 ----D---- C:\WINDOWS\system32\CatRoot
2010-01-22 19:11:02 ----D---- C:\Program Files\Internet Explorer
2010-01-22 16:36:10 ----A---- C:\WINDOWS\win.ini
2010-01-22 13:58:24 ----D---- C:\WINDOWS\ie8updates
2010-01-22 13:58:08 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-22 09:49:34 ----A---- C:\WINDOWS\system32\deploytk.dll
2010-01-20 18:45:00 ----D---- C:\Program Files\Avast4
2010-01-20 09:44:23 ----D---- C:\Program Files\Microsoft Silverlight
2010-01-19 18:53:32 ----A---- C:\WINDOWS\wincmd.ini
2010-01-19 13:00:37 ----D---- C:\WINDOWS\Network Diagnostic
2010-01-17 13:21:57 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2010-01-15 14:48:58 ----D---- C:\Program Files\Total Commander
2010-01-15 14:48:57 ----D---- C:\Program Files\WinRAR
2010-01-15 14:48:18 ----D---- C:\WINDOWS\system32\Restore
2010-01-13 16:08:29 ----D---- C:\WINDOWS\Debug
2010-01-13 14:33:18 ----D---- C:\WINDOWS\Downloaded Installations
2010-01-13 14:33:05 ----D---- C:\WINDOWS\Help
2010-01-12 18:53:37 ----D---- C:\Documents and Settings\Lenovo\Application Data\Student dog
2010-01-12 17:42:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-12 09:00:06 ----A---- C:\WINDOWS\wcx_ftp.ini
2010-01-06 10:14:56 ----D---- C:\Program Files\Common Files\Microsoft Shared

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-09-15 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SASDIFSV;SASDIFSV; \??\D:\Program files\superantispyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\D:\Program files\superantispyware\SASKUTIL.sys []
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-11-22 486280]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-09-15 94160]
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R2 PMEM;PMEM; \??\C:\WINDOWS\system32\drivers\PMEMNT.SYS []
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\WINDOWS\system32\DRIVERS\AcpiVpc.sys [2008-01-11 9472]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2008-06-20 176640]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2008-09-11 1386624]
R3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2008-05-30 534568]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2008-02-04 37160]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2009-01-07 991784]
R3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2008-07-24 156816]
R3 btwhid;btwhid; C:\WINDOWS\system32\DRIVERS\btwhid.sys [2008-03-10 57384]
R3 btwmodem;Bluetooth Modem; C:\WINDOWS\system32\DRIVERS\btwmodem.sys [2008-02-04 37032]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-10-30 47272]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 FPTECTORDRV;FPTECTORDRV; \??\C:\Documents and Settings\All Users\Application Data\Family007\FPTECTORDRV.sys []
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-02-15 5854752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-02-18 5028352]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\WINDOWS\system32\DRIVERS\psadd.sys [2007-02-19 21376]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 RSUSBSTOR;RTS5121.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RTS5121.sys [2008-07-23 157696]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-05-23 225280]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
R4 WS2IFSL;Prostredie podpory poskytovateľa služby Windows Socket 2.0 Non-IFS Service; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2008-04-14 12032]
S1 eusk2par;EUTRON SmartKey Parallel Driver; \??\C:\WINDOWS\system32\Drivers\eusk2par.sys []
S1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nhcDriverDevice;Notebook Hardware Control Driver; \??\C:\WINDOWS\system32\drivers\nhcDriver.sys []
S3 PcdrNdisuio;PCDRNDISUIO Usermode I/O Protocol; C:\WINDOWS\system32\DRIVERS\pcdrndisuio.sys []
S3 Rts516xIR;Realtek IR Driver; C:\WINDOWS\system32\DRIVERS\Rts516xIR.sys []
S3 SASENUM;SASENUM; \??\D:\Program files\superantispyware\SASENUM.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\WINDOWS\system32\DRIVERS\Rts5161ccid.sys []
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys []
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 agp440;Intel AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-14 42368]
S4 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-14 44928]
S4 alim1541;ALI AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-14 42752]
S4 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-14 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2008-04-14 5504]
S4 sisagp;SIS AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-14 40960]
S4 viaagp;VIA AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-14 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Avast4\ashServ.exe [2009-11-25 138680]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe [2009-01-17 346720]
R2 DvmMDES;DeviceVM Meta Data Export Service; C:\QSTART.SYS\config\DVMExportService.exe [2008-11-20 307200]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-01-22 153376]
R2 LanSchoolStudent;LanSchool Student Service; C:\Program Files\LanSchool\student.exe [2009-11-06 1041712]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-11-22 2384240]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Avast4\ashWebSv.exe [2009-11-25 352920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-01-29 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]

-----------------EOF-----------------

#4 Příspěvek od **Caroprd111** » 05 úno 2010 18:13

Ano, to je on. Omlouvám se, napsal jsem špatnou cestu.

Vydržte, podívám se na to

#5 Příspěvek od **Caroprd111** » 05 úno 2010 18:47

Tohle znáte

C:\Documents and Settings\All Users\Application Data\Family007\nwrs.exe
C:\Documents and Settings\All Users\Application Data\Family007\FPTECTORDRV.sys

Pokud ne, otestujte na virustotal http://www.virustotal.com/cs/
(Soubor nehledejte, jenom vložíte tučně označenou cestu, v případě hlášky "Soubor již byl testován" dejte otestovat znovu. Výsledek analýzy sem vložte.)

Start - spustit - napsat
cmd - Enter
Do černého okénka

Kód: Vybrat vše

sc delete "catchme"

stiskněte Enter

Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

- Spusťte, pro potvrzení volby mačkejte klávesu A, Enter
- Po použití program vymažte. Pozor,antiviry ho mohou falešně označit za vir.

Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe
- Spusťte.
- Klikněte na "CleanUp!". Potvrďte hlášky stiskem "Yes" (Bude následovat restart)

Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478
- Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.

Záložka Čistič
- Dejte analyzovat, po dokončení dejte Spustit Ccleaner.

Záložka Registry
- Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.

OK

Zavřít

Stáhněte a uložte, nejlépe na plochu http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypněte všechny rezidentní bezpečnostní programy - firewally, antiviry, antispywary

Spusťte aplikaci pod účtem s oprávněním Administrátora (Správce), ihned po startu se zobrází stránka s licenčnímy podmínkami, pokračujte stisknutím tlačítka "Ano"

Dále postupujte dle pokynů, během scanu nespouštějte jiné aplikace a neklikejte do zobrazujícího se okna

Scan by měl trvat okolo 5 - 10 minut, po dokončení Combofix zobrazí log C:\ComboFix.txt , který sem vložte.

Během skenování může být počítač restartován.

Jsou s PC nějaké problémy

Blluemartin · #6 Příspěvek od **Blluemartin** » 05 úno 2010 18:51

Ten program family ci co som skusil ze co je o ale hlupost to bola, odinstaloval som to a az teraz som is vsimol ze nie celkom aj este ten proces family.exe sa mi zdal cudny..
PS: ten combofix nemam rad (uzsom ho pouzil) ale aj tak skusim

a co tam mam za virusy

priblizne pred tyzdnom som combofix pouzil a znova...ac tie virusy

#7 Příspěvek od **Caroprd111** » 05 úno 2010 18:58

Viry v logu nevidím, přes ComboFix smažeme to "Family007" a uděláme hloubkovější kontrolu.

Nepoužívejte COMBOFIX bez doporučení rádce! Při špatné manipulaci může dojít k poškození systému !

Blluemartin · #8 Příspěvek od **Blluemartin** » 05 úno 2010 19:00

Caroprd111 píše: Viry v logu nevidím, přes ComboFix smažeme to "Family007" a uděláme hloubkovější kontrolu.

Nepoužívejte COMBOFIX bez doporučení rádce! Při špatné manipulaci může dojít k poškození systému !

ten combofix som pouzil s pomocou ineho radcu

#9 Příspěvek od **Caroprd111** » 05 úno 2010 19:00

V tom případě je to OK. Počkám na ten log.

Blluemartin · #10 Příspěvek od **Blluemartin** » 05 úno 2010 19:04

Uz na to idem, v prvom mi na virustotal nnic nenaslo, a v druhom pisalo ze subor sa neda najst..

Dufam ze to nieje zle

#11 Příspěvek od **Caroprd111** » 05 úno 2010 19:06

Nevadí, až dáte log z ComboFix, tak se uvidí

Blluemartin · #12 Příspěvek od **Blluemartin** » 05 úno 2010 19:53

Vyskytol sa problem

Spustil som T-cleaner: bez komplikacii
Combofix: Bez komplikacii
OTL: bez komplikacii, ale po restate ani stopa po combofixe log je fuč

Asi ma porazi OTL som mal spustit pred combofixom vsak?!
Ale v logus som si vsimol ze combofix vymazal twain _ 32.sys a nieco v aplicationdata/"." a nejaky znak
Ale to family nevimazalo
hrozneee

a vy ste sa tak na ten log tesili vask

#13 Příspěvek od **Caroprd111** » 05 úno 2010 19:57

Ano, OTC jste měl aplikovat před použitím ComboFixu.

Spusťte ComboFix znovu a dejte log z něj.

Blluemartin · #14 Příspěvek od **Blluemartin** » 06 úno 2010 09:55

ComboFix 10-02-05.01 - Lenovo 05.02.2010 20:08:20.3.2 - x86
Systém Microsoft Windows XP Home Edition 5.1.2600.3.1250.421.1033.18.1014.615 [GMT 1:00]
Running from: d:\moje dokumenty\Desktop\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 100205-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ZoneAlarm Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2010-01-05 to 2010-02-05 )))))))))))))))))))))))))))))))
.

2010-02-05 18:26 . 2010-02-05 18:26 -------- d--h--w- c:\temp\dvmexp
2010-02-05 18:26 . 2010-02-05 18:26 -------- d-----w- C:\dvmexp
2010-02-05 15:25 . 2010-02-05 15:25 -------- d-----w- c:\documents and settings\All Users\Application Data\OptiTex
2010-02-05 15:21 . 2010-02-05 15:21 -------- d-----w- c:\program files\Common Files\DAZ
2010-02-05 15:15 . 2010-02-05 18:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Family007
2010-02-05 14:47 . 2010-02-05 18:41 -------- d-----w- c:\documents and settings\Lenovo\Application Data\vlc
2010-02-04 17:52 . 2010-02-04 17:52 -------- d-----w- c:\documents and settings\Lenovo\Application Data\Stellarium
2010-02-04 17:34 . 2010-02-04 17:34 -------- d-----w- c:\windows\system32\wbem\Repository
2010-02-04 17:34 . 2010-02-04 17:34 -------- d-----w- c:\documents and settings\Lenovo\Local Settings\Application Data\PCHealth
2010-02-04 17:34 . 2010-02-04 17:34 -------- d-----w- c:\documents and settings\Lenovo\Local Settings\Application Data\Google
2010-02-04 17:34 . 2010-02-04 17:34 -------- d-----w- c:\documents and settings\Lenovo\Application Data\TweakNow PowerPack 2009
2010-02-04 17:34 . 2010-02-04 17:34 -------- d-----w- c:\documents and settings\Lenovo\ahoj
2010-02-04 17:34 . 2010-02-04 17:34 -------- d-----w- c:\program files\OpenOffice.org 3
2010-02-04 17:34 . 2010-02-05 13:07 -------- d-----w- c:\program files\Google
2010-02-04 17:34 . 2010-02-04 17:39 -------- d-----w- c:\program files\Sun
2010-02-04 17:34 . 2010-02-04 17:34 -------- d-----w- c:\program files\Webroot
2010-02-04 14:45 . 2010-02-04 14:45 -------- d-----w- c:\documents and settings\Lenovo\Application Data\FreeStone Group
2010-02-03 13:54 . 2010-02-03 13:54 4212 ---ha-w- c:\windows\system32\zllictbl.dat
2010-02-03 13:54 . 2009-11-22 14:42 69000 ----a-w- c:\windows\system32\zlcomm.dll
2010-02-03 13:54 . 2009-11-22 14:42 103816 ----a-w- c:\windows\system32\zlcommdb.dll
2010-02-03 13:53 . 2009-11-22 14:42 1238408 ----a-w- c:\windows\system32\zpeng25.dll
2010-02-03 13:53 . 2010-02-03 13:54 -------- d-----w- c:\windows\system32\ZoneLabs
2010-02-03 13:52 . 2010-02-05 18:29 -------- d-----w- c:\windows\Internet Logs
2010-02-03 13:51 . 2010-02-03 13:51 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{C4C0E335-EDDF-46A0-A57D-F3802AE44275}
2010-02-03 13:13 . 2010-02-03 13:13 -------- d-----w- c:\documents and settings\Lenovo\Application Data\Kecal
2010-02-03 12:52 . 2010-02-03 12:52 -------- d-----w- c:\program files\Common Files\SWF Studio
2010-01-31 14:25 . 2010-02-04 17:16 -------- d-----w- c:\documents and settings\Lenovo\Application Data\Kingston
2010-01-31 14:25 . 2008-09-18 14:32 1839104 ---ha-w- c:\documents and settings\Lenovo\Application Data\Kingston\SecureTravelerA.exe
2010-01-29 13:52 . 2010-01-29 13:52 45 ---h--w- c:\windows\dwin9134.dat
2010-01-29 13:25 . 2010-01-29 13:25 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet
2010-01-29 13:09 . 2010-01-29 13:09 -------- d-----w- c:\program files\Bonjour
2010-01-29 12:56 . 2010-01-29 12:56 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-01-28 17:11 . 2010-01-14 10:12 181120 ------w- c:\windows\system32\MpSigStub.exe
2010-01-25 08:52 . 2010-01-25 08:52 -------- d-----w- c:\documents and settings\Lenovo\Application Data\ArcSoft
2010-01-25 08:50 . 2001-10-16 09:23 163840 ----a-w- c:\windows\system32\PhotoImpression Screen Saver.scr
2010-01-25 08:50 . 1995-07-31 12:44 212480 ----a-w- c:\windows\PCDLIB32.DLL
2010-01-24 18:43 . 2010-01-24 19:00 -------- d-----w- c:\documents and settings\Lenovo\Application Data\IObit
2010-01-24 16:58 . 2010-02-04 19:00 -------- d-----w- c:\documents and settings\All Users\Data aplikací
2010-01-22 08:50 . 2010-01-22 08:50 503808 ----a-w- c:\documents and settings\Lenovo\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3df04d95-n\msvcp71.dll
2010-01-22 08:50 . 2010-01-22 08:50 348160 ----a-w- c:\documents and settings\Lenovo\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3df04d95-n\msvcr71.dll
2010-01-22 08:50 . 2010-01-22 08:50 499712 ----a-w- c:\documents and settings\Lenovo\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3df04d95-n\jmc.dll
2010-01-22 08:50 . 2010-01-22 08:50 61440 ----a-w- c:\documents and settings\Lenovo\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-52b7ae25-n\decora-sse.dll
2010-01-22 08:50 . 2010-01-22 08:50 12800 ----a-w- c:\documents and settings\Lenovo\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-52b7ae25-n\decora-d3d.dll
2010-01-22 08:50 . 2010-01-22 08:50 -------- d-----w- c:\program files\Common Files\Java
2010-01-22 08:49 . 2010-01-22 08:49 -------- d-----w- c:\program files\Java
2010-01-21 18:33 . 2001-10-29 00:42 116224 ----a-w- c:\windows\system32\pdfmonnt.dll
2010-01-21 18:22 . 2010-01-21 18:22 434688 ----a-w- c:\windows\system32\ss2uinst.exe
2010-01-19 17:06 . 2010-01-19 17:19 -------- d-----w- c:\documents and settings\Lenovo\Application Data\ICQ
2010-01-18 14:07 . 2010-01-18 14:07 52224 ----a-w- c:\documents and settings\Lenovo\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-01-18 14:07 . 2010-02-05 17:27 117760 ----a-w- c:\documents and settings\Lenovo\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-01-18 14:06 . 2010-01-18 14:06 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-17 13:54 . 2010-01-17 13:54 -------- d-----w- c:\documents and settings\Lenovo\Application Data\iolo
2010-01-17 13:54 . 2010-01-17 13:54 -------- d-----w- c:\documents and settings\All Users\Application Data\iolo
2010-01-17 13:10 . 2010-01-17 13:10 -------- d-----w- c:\documents and settings\Lenovo\.thumbnails
2010-01-17 11:49 . 2010-01-17 11:56 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-01-17 10:00 . 2010-01-17 10:00 -------- d-----w- c:\documents and settings\All Users\Application Data\NCH Swift Sound
2010-01-17 09:57 . 2010-01-17 09:57 -------- d-----w- c:\documents and settings\Lenovo\Application Data\NCH Swift Sound
2010-01-17 09:14 . 2010-01-17 09:14 -------- d-----w- c:\program files\Microsoft Office 2003 Developer Resources
2010-01-16 17:50 . 2010-01-16 17:50 -------- d-----w- c:\program files\MSXML 4.0
2010-01-16 11:56 . 2007-06-20 11:12 394752 ----a-w- c:\windows\system32\diarbp64.exe
2010-01-16 11:56 . 2007-06-20 11:14 394752 ----a-w- c:\windows\system32\diarbp32.exe
2010-01-16 10:07 . 2010-01-16 10:07 -------- d-sh--w- c:\windows\ftpcache
2010-01-16 10:04 . 2010-01-16 10:04 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2010-01-16 09:50 . 2010-01-16 09:50 -------- d-----w- c:\program files\MSSOAP
2010-01-16 09:46 . 2010-01-16 09:46 164 ----a-w- c:\windows\install.dat
2010-01-15 18:15 . 2010-01-15 18:15 -------- d-----w- c:\documents and settings\Lenovo\WINDOWSTEMPDIR_FONTCONFIG_CACHE
2010-01-15 14:06 . 2010-01-15 14:24 2829 ----a-w- c:\windows\War3Unin.pif
2010-01-15 14:06 . 2010-01-15 14:24 139264 ----a-w- c:\windows\War3Unin.exe
2010-01-14 14:44 . 2010-01-15 14:27 67520 ----a-w- c:\windows\War3Unin.dat
2010-01-14 09:36 . 2010-01-15 13:49 -------- d-----w- c:\program files\Adobe(2)
2010-01-13 15:30 . 2010-01-13 15:30 -------- d-----w- c:\documents and settings\Lenovo\Application Data\SoftLogica
2010-01-13 14:58 . 2009-12-17 14:02 123280 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2010-01-13 14:57 . 2009-12-17 14:02 41616 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2010-01-12 16:51 . 2010-01-12 16:51 253952 ------w- c:\windows\Setup1.exe
2010-01-12 16:51 . 2010-01-12 16:51 73216 ----a-w- c:\windows\ST6UNST.EXE
2010-01-12 15:30 . 2010-01-12 15:29 720896 ----a-w- c:\windows\iun6002.exe
2010-01-11 18:18 . 2010-01-11 18:21 42 ----a-w- C:\notes.bin
2010-01-10 09:35 . 2010-01-10 09:35 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2010-01-10 09:34 . 2010-01-18 14:07 -------- d-----w- c:\documents and settings\Lenovo\Application Data\SUPERAntiSpyware.com
2010-01-10 07:13 . 2010-01-30 17:29 -------- d-----w- c:\documents and settings\Lenovo\Local Settings\Application Data\Temp
2010-01-09 16:38 . 2010-01-09 16:38 -------- d-----w- C:\TP
2010-01-08 13:08 . 2002-01-05 19:37 344064 ----a-w- c:\windows\system32\msvcr70.dll
2010-01-08 13:08 . 2002-01-05 13:40 487424 ----a-w- c:\windows\system32\msvcp70.dll
2010-01-08 13:08 . 2002-01-05 14:48 974848 ----a-w- c:\windows\system32\mfc70.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-05 19:05 . 2009-10-27 01:46 105416 ----a-w- c:\documents and settings\Lenovo\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-02-05 18:52 . 2009-11-27 08:21 -------- d-----w- c:\program files\LanSchool
2010-02-04 17:34 . 2009-10-26 12:50 -------- d-----w- c:\program files\Windows Desktop Search
2010-02-04 17:25 . 2009-08-07 01:22 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-29 13:09 . 2009-10-26 15:07 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-25 17:39 . 2010-02-03 13:29 8530 ----a-w- c:\windows\pchealth\helpctr\Config\Cache\Personal_32_1051.dat
2010-01-25 17:20 . 2009-12-15 15:16 -------- d-----w- c:\documents and settings\All Users\Application Data\TuneUp Software
2010-01-25 08:49 . 2009-12-04 15:36 -------- d-----w- c:\documents and settings\Lenovo\Application Data\Skype
2010-01-25 07:49 . 2009-12-04 15:44 -------- d-----w- c:\documents and settings\Lenovo\Application Data\skypePM
2010-01-24 19:00 . 2009-10-27 01:47 -------- d-----w- c:\program files\Windows Live Toolbar
2010-01-24 19:00 . 2009-10-26 15:00 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-01-24 19:00 . 2009-08-07 01:34 -------- d-----w- c:\documents and settings\All Users\Application Data\WLInstaller
2010-01-24 09:16 . 2009-08-07 01:29 -------- d-----w- c:\documents and settings\All Users\Application Data\VeriFace
2010-01-22 08:49 . 2009-12-06 18:53 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-01-20 17:45 . 2009-10-26 15:21 -------- d-----w- c:\program files\Avast4
2010-01-20 08:44 . 2009-10-26 13:01 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-17 12:21 . 2009-12-29 18:40 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2010-01-15 13:48 . 2009-10-26 15:03 -------- d-----w- c:\program files\Total Commander
2010-01-12 17:53 . 2009-12-23 18:34 -------- d-----w- c:\documents and settings\Lenovo\Application Data\Student dog
2010-01-04 16:57 . 2009-12-15 15:11 549 ---ha-w- C:\os357577.bin
2010-01-04 16:01 . 2010-01-03 09:59 0 ----a-w- c:\windows\IntIgn0xF28456.dat
2009-12-29 18:56 . 2009-12-13 18:35 401928 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-12-26 11:09 . 2009-12-26 11:09 -------- d-----w- c:\program files\Common Files\EverAd Shared
2009-12-25 15:47 . 2009-12-25 15:47 129 ----a-w- c:\documents and settings\Lenovo\Local Settings\Application Data\fusioncache.dat
2009-12-25 15:47 . 2009-12-25 15:47 -------- d-----w- c:\documents and settings\Lenovo\Application Data\Windows Live Writer
2009-12-25 11:14 . 2009-12-25 11:14 22528 ----a-w- c:\windows\system32\drivers\nhcDriver.sys
2009-12-21 19:14 . 2008-07-21 20:04 916480 ------w- c:\windows\system32\wininet.dll
2009-12-21 17:49 . 2009-08-07 01:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-12-15 16:00 . 2009-12-15 16:00 -------- d-----w- c:\documents and settings\LocalService\Application Data\TuneUp Software
2009-12-14 17:32 . 2009-12-14 17:32 -------- d-sh--w- c:\documents and settings\All Users\Application Data\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2009-12-13 12:26 . 2009-12-12 11:30 -------- d-----w- c:\documents and settings\Lenovo\Application Data\LangSoft
2009-12-12 11:30 . 2009-12-12 11:30 -------- d-----w- c:\documents and settings\All Users\Application Data\LangSoft
2009-12-08 09:48 . 2009-12-05 18:01 3140 --sha-w- c:\documents and settings\All Users\Application Data\KGyGaAvL.sys
2009-12-08 09:48 . 2009-12-05 18:01 3140 --sha-w- c:\documents and settings\All Users\Application Data\KGyGaAvL.sys
2009-12-08 09:48 . 2009-12-05 18:01 88 --sh--r- c:\documents and settings\All Users\Application Data\87F9D435FF.sys
2009-12-08 09:48 . 2009-12-05 18:01 88 --sh--r- c:\documents and settings\All Users\Application Data\87F9D435FF.sys
2009-12-08 09:45 . 2009-12-08 09:45 -------- d-----w- c:\program files\Common Files\Totem Shared
2009-12-04 18:14 . 2009-12-04 18:14 0 ----a-w- c:\windows\nsreg.dat
2009-12-04 15:44 . 2009-12-04 15:44 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-11-24 23:54 . 2009-10-26 15:21 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2009-11-24 23:51 . 2009-10-26 15:21 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-11-24 23:49 . 2009-10-26 15:21 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-11-24 23:48 . 2009-10-26 15:21 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-11-24 23:47 . 2009-10-26 15:21 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-11-24 23:47 . 2009-10-26 15:21 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-11-21 15:51 . 2008-07-21 20:04 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2009-08-07 01:29 241752 ----a-w- c:\windows\system32\IcnOvrly.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StudentDOG"="d:\program files\Student DOG\StudentDOG.exe" [2009-12-27 2278912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="c:\progra~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-05-23 1146880]
"EnergyUtility"="c:\program files\Lenovo\Energy Management\utility.exe" [2008-07-09 4456448]
"Energy Management"="c:\program files\Lenovo\Energy Management\Energy Management.exe" [2008-08-28 1283984]
"RTHDCPL"="RTHDCPL.EXE" [2009-02-17 17508864]
"Teacher"="c:\program files\LanSchool\student.exe" [2009-11-06 1041712]
"ZoneAlarm Client"="d:\program files\ZoneAlarm\zlclient.exe" [2009-11-22 1037192]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"HideFastUserSwitching"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "d:\program files\superantispyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 13:21 548352 ----a-w- d:\program files\superantispyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LanSchoolStudent]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 12:42 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"StudentDOG"=d:\program files\Student DOG\StudentDOG.exe -h

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\LanSchool\\student.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Total Commander\\TOTALCMD.EXE"=
"d:\\Program files\\Warcraft III\\Warcraft III.exe"=
"d:\\Program files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [26.10.2009 16:21 114768]
R1 SASDIFSV;SASDIFSV;d:\program files\superantispyware\sasdifsv.sys [5.1.2010 7:56 9968]
R1 SASKUTIL;SASKUTIL;d:\program files\superantispyware\SASKUTIL.SYS [5.1.2010 7:56 74480]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [26.10.2009 16:21 20560]
R2 DvmMDES;DeviceVM Meta Data Export Service;c:\qstart.sys\config\DVMExportService.exe [20.11.2008 17:15 307200]
R2 LanSchoolStudent;LanSchool Student Service;c:\program files\LanSchool\student.exe [6.11.2009 14:38 1041712]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\drivers\AcpiVpc.sys [7.8.2009 2:22 9472]
R3 RSUSBSTOR;RTS5121.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RTS5121.sys [7.8.2009 2:27 157696]
S1 eusk2par;EUTRON SmartKey Parallel Driver;c:\windows\system32\drivers\eusk2par.sys [14.12.2009 14:56 24786]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [7.8.2009 2:22 1684736]
S3 FPTECTORDRV;FPTECTORDRV;\??\c:\documents and settings\All Users\Application Data\Family007\FPTECTORDRV.sys --> c:\documents and settings\All Users\Application Data\Family007\FPTECTORDRV.sys [?]
S3 Rts516xIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys --> c:\windows\system32\DRIVERS\Rts516xIR.sys [?]
S3 SASENUM;SASENUM;d:\program files\superantispyware\SASENUM.SYS [5.1.2010 7:56 7408]
S3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys --> c:\windows\system32\DRIVERS\VBoxNetFlt.sys [?]
.
Contents of the 'Scheduled Tasks' folder

2010-01-19 c:\windows\Tasks\firefox.job
- d:\program files\Mozilla Firefox\firefox.exe [2010-01-11 03:19]

2010-02-05 c:\windows\Tasks\User_Feed_Synchronization-{695F01B1-5DF4-4A48-A411-74C692A807C6}.job
- c:\windows\system32\msfeedssync.exe [2007-08-14 03:31]
.
.
------- Supplementary Scan -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki...
IE: Send to &Bluetooth Device... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send To Bluetooth - c:\program files\Lenovo\Bluetooth Software\btsendto_ie.htm
FF - ProfilePath - c:\documents and settings\Lenovo\Application Data\Mozilla\Firefox\Profiles\o34pe17o.default\
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: d:\program files\VLC\npvlc.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
FF - user.js: browser.cache.memory.capacity - 16000
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.max.tokenizing.time - 3000000
FF - user.js: content.maxtextrun - 4095
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 1000000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 1000000
FF - user.js: dom.disable_window_status_change - true
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 1000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
d:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
d:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
d:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
d:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
d:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".sk");
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-05 20:18
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1524)
d:\program files\superantispyware\SASWINLO.dll
c:\windows\system32\WININET.dll

- - - - - - - > 'explorer.exe'(212)
c:\windows\system32\WININET.dll
c:\windows\system32\IcnOvrly.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2010-02-05 20:24:34
ComboFix-quarantined-files.txt 2010-02-05 19:24

Pre-Run: 32 514 330 624 bytes free
Post-Run: 13 adresárov, 32 467 296 256 voľných bajtov

- - End Of File - - D673E2CA99A54DBD653F1404E3681D79

#15 Příspěvek od **Caroprd111** » 06 úno 2010 10:04

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok a zkopírujte do něj text z bílého okénka.

Kód: Vybrat vše

Folder::
c:\documents and settings\All Users\Application Data\Family007

Driver::
FPTECTORDRV

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a přesuňte ho nad ikonu Combofixu, kde ho upustíte:
Obrázek

-po aplikaci na Vás vypadne další log,vložte ho sem

Může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

VIRY.CZ

Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci

Re: Prosim o kontrolu logu pomalejsie zapinanie pc aine veci