mitenceto93

Кой от 2-та телефон е по-добре да избере .. дайте и някои други предложения до към 300 лв

вече май е добре , за сега няма проблеми можеш ли накратко да ми обесниш как точно съм нанесъл щетите на уиндолса и как да ги избегна ? п.с: благодаря много за отделеното време !!!!!

2011/01/23 23:09:24.0187 TDSS rootkit removing tool 2.4.15.0 Jan 22 2011 19:37:53 2011/01/23 23:09:24.0187 ================================================================================ 2011/01/23 23:09:24.0187 SystemInfo: 2011/01/23 23:09:24.0187 2011/01/23 23:09:24.0187 OS Version: 5.1.2600 ServicePack: 3.0 2011/01/23 23:09:24.0187 Product type: Workstation 2011/01/23 23:09:24.0187 ComputerName: DIMITAR 2011/01/23 23:09:24.0187 UserName: Димитър 2011/01/23 23:09:24.0187 Windows directory: C:\WINDOWS 2011/01/23 23:09:24.0187 System windows directory: C:\WINDOWS 2011/01/23 23:09:24.0187 Processor architecture: Intel x86 2011/01/23 23:09:24.0187 Number of processors: 2 2011/01/23 23:09:24.0187 Page size: 0x1000 2011/01/23 23:09:24.0187 Boot type: Normal boot 2011/01/23 23:09:24.0187 ================================================================================ 2011/01/23 23:09:24.0875 Initialize success 2011/01/23 23:09:33.0968 ================================================================================ 2011/01/23 23:09:33.0968 Scan started 2011/01/23 23:09:33.0968 Mode: Manual; 2011/01/23 23:09:33.0968 ================================================================================ 2011/01/23 23:09:34.0656 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 2011/01/23 23:09:34.0703 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 2011/01/23 23:09:34.0953 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 2011/01/23 23:09:35.0031 AFD (322d0e36693d6e24a2398bee62a268cd) C:\WINDOWS\System32\drivers\afd.sys 2011/01/23 23:09:36.0453 ASPI32 (5b01af89d16d562825c4db4530f20cbb) C:\WINDOWS\system32\drivers\ASPI32.sys 2011/01/23 23:09:36.0593 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 2011/01/23 23:09:36.0656 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 2011/01/23 23:09:36.0875 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 2011/01/23 23:09:37.0015 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 2011/01/23 23:09:37.0109 avgio (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Program Files\Avira\AntiVir Desktop\avgio.sys 2011/01/23 23:09:37.0203 avgntflt (47b879406246ffdced59e18d331a0e7d) C:\WINDOWS\system32\DRIVERS\avgntflt.sys 2011/01/23 23:09:37.0281 avipbb (da39805e2bad99d37fce9477dd94e7f2) C:\WINDOWS\system32\DRIVERS\avipbb.sys 2011/01/23 23:09:37.0328 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 2011/01/23 23:09:37.0437 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 2011/01/23 23:09:37.0484 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 2011/01/23 23:09:37.0656 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 2011/01/23 23:09:37.0703 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 2011/01/23 23:09:37.0781 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 2011/01/23 23:09:38.0484 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 2011/01/23 23:09:38.0578 DM9102 (51ef6ca3d57055fed6ab99021d562443) C:\WINDOWS\system32\DRIVERS\DM9PCI5.SYS 2011/01/23 23:09:38.0671 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 2011/01/23 23:09:38.0812 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 2011/01/23 23:09:38.0843 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 2011/01/23 23:09:38.0968 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 2011/01/23 23:09:39.0218 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 2011/01/23 23:09:39.0359 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 2011/01/23 23:09:39.0406 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys 2011/01/23 23:09:39.0468 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 2011/01/23 23:09:39.0578 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys 2011/01/23 23:09:39.0734 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 2011/01/23 23:09:39.0796 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 2011/01/23 23:09:39.0843 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 2011/01/23 23:09:39.0984 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 2011/01/23 23:09:40.0125 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 2011/01/23 23:09:40.0218 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 2011/01/23 23:09:40.0437 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:\WINDOWS\system32\Drivers\HTTP.sys 2011/01/23 23:09:40.0937 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 2011/01/23 23:09:41.0000 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 2011/01/23 23:09:41.0343 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 2011/01/23 23:09:41.0453 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 2011/01/23 23:09:41.0484 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 2011/01/23 23:09:41.0546 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 2011/01/23 23:09:41.0625 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 2011/01/23 23:09:41.0734 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 2011/01/23 23:09:41.0843 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 2011/01/23 23:09:41.0921 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 2011/01/23 23:09:42.0031 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 2011/01/23 23:09:42.0109 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 2011/01/23 23:09:42.0203 KSecDD (1705745d900dabf2d89f90ebaddc7517) C:\WINDOWS\system32\drivers\KSecDD.sys 2011/01/23 23:09:42.0406 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 2011/01/23 23:09:42.0515 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 2011/01/23 23:09:42.0593 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 2011/01/23 23:09:42.0703 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 2011/01/23 23:09:42.0796 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 2011/01/23 23:09:42.0984 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 2011/01/23 23:09:43.0062 MRxSmb (68755f0ff16070178b54674fe5b847b0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 2011/01/23 23:09:43.0125 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 2011/01/23 23:09:43.0250 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 2011/01/23 23:09:43.0343 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2011/01/23 23:09:43.0468 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 2011/01/23 23:09:43.0609 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 2011/01/23 23:09:43.0671 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys 2011/01/23 23:09:43.0796 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys 2011/01/23 23:09:43.0859 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 2011/01/23 23:09:43.0937 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 2011/01/23 23:09:44.0015 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 2011/01/23 23:09:44.0078 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 2011/01/23 23:09:44.0187 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 2011/01/23 23:09:44.0234 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 2011/01/23 23:09:44.0328 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys 2011/01/23 23:09:44.0390 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 2011/01/23 23:09:44.0468 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 2011/01/23 23:09:44.0578 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 2011/01/23 23:09:44.0656 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 2011/01/23 23:09:44.0718 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 2011/01/23 23:09:45.0000 nv (34da533ef41bafa187a38a78146fbe49) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 2011/01/23 23:09:45.0328 nvcap (d39a77296f39ae50c0d01dff46d4b594) C:\WINDOWS\system32\DRIVERS\nvcap.sys 2011/01/23 23:09:45.0484 NVXBAR (2c6c9c82505f5d4f89bb73c3f7feeb99) C:\WINDOWS\system32\DRIVERS\NVxbar.sys 2011/01/23 23:09:45.0531 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 2011/01/23 23:09:45.0562 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 2011/01/23 23:09:45.0625 PAC207 (3f24eaeb165328e00d687bf3b60a448a) C:\WINDOWS\system32\DRIVERS\pfc027.sys 2011/01/23 23:09:45.0687 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 2011/01/23 23:09:45.0796 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 2011/01/23 23:09:45.0843 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 2011/01/23 23:09:45.0953 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 2011/01/23 23:09:46.0218 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 2011/01/23 23:09:46.0312 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 2011/01/23 23:09:47.0234 pfc (6c1618a07b49e3873582b6449e744088) C:\WINDOWS\system32\drivers\pfc.sys 2011/01/23 23:09:47.0328 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 2011/01/23 23:09:47.0421 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 2011/01/23 23:09:47.0468 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 2011/01/23 23:09:47.0640 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys 2011/01/23 23:09:48.0328 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 2011/01/23 23:09:48.0421 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 2011/01/23 23:09:48.0515 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 2011/01/23 23:09:48.0578 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 2011/01/23 23:09:48.0687 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 2011/01/23 23:09:48.0750 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 2011/01/23 23:09:48.0843 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 2011/01/23 23:09:48.0968 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys 2011/01/23 23:09:49.0046 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 2011/01/23 23:09:49.0218 RTL8023xp (1e11171c0b9989e1bdaa59e96b2e81c4) C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys 2011/01/23 23:09:49.0312 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS 2011/01/23 23:09:49.0437 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 2011/01/23 23:09:49.0515 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 2011/01/23 23:09:49.0609 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 2011/01/23 23:09:49.0734 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 2011/01/23 23:09:49.0984 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys 2011/01/23 23:09:50.0250 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 2011/01/23 23:09:50.0343 sptd (71e276f6d189413266ea22171806597b) C:\WINDOWS\system32\Drivers\sptd.sys 2011/01/23 23:09:50.0343 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: 71e276f6d189413266ea22171806597b 2011/01/23 23:09:50.0359 sptd - detected Locked file (1) 2011/01/23 23:09:50.0453 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 2011/01/23 23:09:50.0531 Srv (5252605079810904e31c332e241cd59b) C:\WINDOWS\system32\DRIVERS\srv.sys 2011/01/23 23:09:50.0640 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys 2011/01/23 23:09:50.0781 STHDA (58f855684e163466a5c565adf0865536) C:\WINDOWS\system32\drivers\sthda.sys 2011/01/23 23:09:50.0906 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 2011/01/23 23:09:51.0000 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 2011/01/23 23:09:51.0109 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 2011/01/23 23:09:51.0703 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 2011/01/23 23:09:51.0796 Tcpip (93ea8d04ec73a85db02eb8805988f733) C:\WINDOWS\system32\DRIVERS\tcpip.sys 2011/01/23 23:09:51.0921 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 2011/01/23 23:09:52.0015 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 2011/01/23 23:09:52.0093 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 2011/01/23 23:09:52.0328 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 2011/01/23 23:09:52.0609 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 2011/01/23 23:09:52.0765 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 2011/01/23 23:09:52.0859 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 2011/01/23 23:09:52.0984 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 2011/01/23 23:09:53.0078 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 2011/01/23 23:09:53.0171 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 2011/01/23 23:09:53.0265 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 2011/01/23 23:09:53.0515 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 2011/01/23 23:09:53.0640 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 2011/01/23 23:09:53.0906 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 2011/01/23 23:09:54.0015 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 2011/01/23 23:09:54.0062 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 2011/01/23 23:09:54.0171 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 2011/01/23 23:09:54.0312 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 2011/01/23 23:09:54.0390 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 2011/01/23 23:09:54.0515 ================================================================================ 2011/01/23 23:09:54.0515 Scan finished 2011/01/23 23:09:54.0515 ================================================================================ 2011/01/23 23:09:54.0515 Detected object count: 1 2011/01/23 23:10:43.0562 Locked file(sptd) - User select action: Skip 2011/01/23 23:10:48.0546 ================================================================================ 2011/01/23 23:10:48.0546 Scan started 2011/01/23 23:10:48.0546 Mode: Manual; 2011/01/23 23:10:48.0546 ================================================================================ 2011/01/23 23:10:49.0125 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 2011/01/23 23:10:49.0171 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 2011/01/23 23:10:49.0359 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 2011/01/23 23:10:49.0406 AFD (322d0e36693d6e24a2398bee62a268cd) C:\WINDOWS\System32\drivers\afd.sys 2011/01/23 23:10:50.0531 ASPI32 (5b01af89d16d562825c4db4530f20cbb) C:\WINDOWS\system32\drivers\ASPI32.sys 2011/01/23 23:10:50.0656 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 2011/01/23 23:10:50.0718 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 2011/01/23 23:10:50.0906 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 2011/01/23 23:10:51.0015 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 2011/01/23 23:10:51.0109 avgio (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Program Files\Avira\AntiVir Desktop\avgio.sys 2011/01/23 23:10:51.0203 avgntflt (47b879406246ffdced59e18d331a0e7d) C:\WINDOWS\system32\DRIVERS\avgntflt.sys 2011/01/23 23:10:51.0312 avipbb (da39805e2bad99d37fce9477dd94e7f2) C:\WINDOWS\system32\DRIVERS\avipbb.sys 2011/01/23 23:10:51.0359 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 2011/01/23 23:10:51.0453 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 2011/01/23 23:10:51.0500 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 2011/01/23 23:10:51.0671 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 2011/01/23 23:10:51.0718 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 2011/01/23 23:10:51.0796 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 2011/01/23 23:10:52.0484 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 2011/01/23 23:10:52.0578 DM9102 (51ef6ca3d57055fed6ab99021d562443) C:\WINDOWS\system32\DRIVERS\DM9PCI5.SYS 2011/01/23 23:10:52.0718 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 2011/01/23 23:10:52.0812 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 2011/01/23 23:10:52.0859 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 2011/01/23 23:10:52.0968 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 2011/01/23 23:10:53.0171 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 2011/01/23 23:10:53.0296 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 2011/01/23 23:10:53.0328 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys 2011/01/23 23:10:53.0406 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 2011/01/23 23:10:53.0484 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys 2011/01/23 23:10:53.0625 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 2011/01/23 23:10:53.0671 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 2011/01/23 23:10:53.0718 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 2011/01/23 23:10:53.0843 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 2011/01/23 23:10:53.0984 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 2011/01/23 23:10:54.0078 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 2011/01/23 23:10:54.0265 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:\WINDOWS\system32\Drivers\HTTP.sys 2011/01/23 23:10:54.0578 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 2011/01/23 23:10:54.0625 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 2011/01/23 23:10:54.0953 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 2011/01/23 23:10:55.0046 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 2011/01/23 23:10:55.0078 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 2011/01/23 23:10:55.0140 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 2011/01/23 23:10:55.0218 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 2011/01/23 23:10:55.0312 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 2011/01/23 23:10:55.0421 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 2011/01/23 23:10:55.0484 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 2011/01/23 23:10:55.0578 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 2011/01/23 23:10:55.0687 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 2011/01/23 23:10:55.0734 KSecDD (1705745d900dabf2d89f90ebaddc7517) C:\WINDOWS\system32\drivers\KSecDD.sys 2011/01/23 23:10:55.0968 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 2011/01/23 23:10:56.0140 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 2011/01/23 23:10:56.0187 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 2011/01/23 23:10:56.0265 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 2011/01/23 23:10:56.0312 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 2011/01/23 23:10:56.0562 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 2011/01/23 23:10:56.0625 MRxSmb (68755f0ff16070178b54674fe5b847b0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 2011/01/23 23:10:56.0687 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 2011/01/23 23:10:56.0796 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 2011/01/23 23:10:56.0875 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2011/01/23 23:10:56.0968 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 2011/01/23 23:10:57.0078 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 2011/01/23 23:10:57.0140 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys 2011/01/23 23:10:57.0218 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys 2011/01/23 23:10:57.0281 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 2011/01/23 23:10:57.0328 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 2011/01/23 23:10:57.0421 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 2011/01/23 23:10:57.0500 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 2011/01/23 23:10:57.0593 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 2011/01/23 23:10:57.0640 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 2011/01/23 23:10:57.0687 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys 2011/01/23 23:10:57.0765 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 2011/01/23 23:10:57.0859 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 2011/01/23 23:10:57.0968 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 2011/01/23 23:10:58.0062 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 2011/01/23 23:10:58.0125 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 2011/01/23 23:10:58.0390 nv (34da533ef41bafa187a38a78146fbe49) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 2011/01/23 23:10:58.0593 nvcap (d39a77296f39ae50c0d01dff46d4b594) C:\WINDOWS\system32\DRIVERS\nvcap.sys 2011/01/23 23:10:58.0750 NVXBAR (2c6c9c82505f5d4f89bb73c3f7feeb99) C:\WINDOWS\system32\DRIVERS\NVxbar.sys 2011/01/23 23:10:58.0796 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 2011/01/23 23:10:58.0828 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 2011/01/23 23:10:58.0875 PAC207 (3f24eaeb165328e00d687bf3b60a448a) C:\WINDOWS\system32\DRIVERS\pfc027.sys 2011/01/23 23:10:58.0937 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 2011/01/23 23:10:59.0031 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 2011/01/23 23:10:59.0078 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 2011/01/23 23:10:59.0171 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 2011/01/23 23:10:59.0437 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 2011/01/23 23:10:59.0500 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 2011/01/23 23:11:00.0484 pfc (6c1618a07b49e3873582b6449e744088) C:\WINDOWS\system32\drivers\pfc.sys 2011/01/23 23:11:00.0593 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 2011/01/23 23:11:00.0671 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 2011/01/23 23:11:00.0718 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 2011/01/23 23:11:00.0875 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys 2011/01/23 23:11:01.0578 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 2011/01/23 23:11:01.0671 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 2011/01/23 23:11:01.0750 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 2011/01/23 23:11:01.0796 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 2011/01/23 23:11:01.0921 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 2011/01/23 23:11:02.0000 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 2011/01/23 23:11:02.0109 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 2011/01/23 23:11:02.0218 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys 2011/01/23 23:11:02.0296 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 2011/01/23 23:11:02.0515 RTL8023xp (1e11171c0b9989e1bdaa59e96b2e81c4) C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys 2011/01/23 23:11:02.0671 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS 2011/01/23 23:11:02.0796 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 2011/01/23 23:11:02.0875 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 2011/01/23 23:11:02.0937 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 2011/01/23 23:11:03.0046 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 2011/01/23 23:11:03.0250 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys 2011/01/23 23:11:03.0453 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 2011/01/23 23:11:03.0546 sptd (71e276f6d189413266ea22171806597b) C:\WINDOWS\system32\Drivers\sptd.sys 2011/01/23 23:11:03.0546 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: 71e276f6d189413266ea22171806597b 2011/01/23 23:11:03.0578 sptd - detected Locked file (1) 2011/01/23 23:11:03.0687 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 2011/01/23 23:11:03.0781 Srv (5252605079810904e31c332e241cd59b) C:\WINDOWS\system32\DRIVERS\srv.sys 2011/01/23 23:11:03.0937 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys 2011/01/23 23:11:04.0109 STHDA (58f855684e163466a5c565adf0865536) C:\WINDOWS\system32\drivers\sthda.sys 2011/01/23 23:11:04.0218 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 2011/01/23 23:11:04.0312 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 2011/01/23 23:11:04.0406 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 2011/01/23 23:11:05.0093 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 2011/01/23 23:11:05.0218 Tcpip (93ea8d04ec73a85db02eb8805988f733) C:\WINDOWS\system32\DRIVERS\tcpip.sys 2011/01/23 23:11:05.0312 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 2011/01/23 23:11:05.0390 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 2011/01/23 23:11:05.0468 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 2011/01/23 23:11:05.0718 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 2011/01/23 23:11:06.0062 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 2011/01/23 23:11:06.0218 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 2011/01/23 23:11:06.0328 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 2011/01/23 23:11:06.0484 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 2011/01/23 23:11:06.0625 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 2011/01/23 23:11:06.0734 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 2011/01/23 23:11:06.0859 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 2011/01/23 23:11:07.0265 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 2011/01/23 23:11:07.0453 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 2011/01/23 23:11:07.0812 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 2011/01/23 23:11:07.0921 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 2011/01/23 23:11:07.0953 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 2011/01/23 23:11:08.0078 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 2011/01/23 23:11:08.0468 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 2011/01/23 23:11:08.0562 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 2011/01/23 23:11:08.0671 ================================================================================ 2011/01/23 23:11:08.0671 Scan finished 2011/01/23 23:11:08.0671 ================================================================================ 2011/01/23 23:11:08.0687 Detected object count: 1 2011/01/23 23:11:54.0125 Locked file(sptd) - User select action: Skip Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 5581 Windows 5.1.2600 Service Pack 3 Internet Explorer 6.0.2900.5512 23.1.2011 г. 23:16:13 mbam-log-2011-01-23 (23-16-13).txt Scan type: Quick scan Objects scanned: 152309 Time elapsed: 2 minute(s), 6 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

лентата само за секунди се променя като на 98 и после пак става нормална .. и след това премигване започва да се бъгва всичко аудиото , скайп и интернет

ComboFix 11-01-22.03 - Димитър 01.2011 г. 20:49:00.4.2 - FAT32x86 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.2047.1658 [GMT 2:00] Running from: c:\documents and settings\Димитър\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\Димитър\Desktop\CFScript.txt AV: AntiVir Desktop *Disabled/Updated* {C19476D9-52BC-4E93-8AF3-CCF59F7AE8FE} . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\System32\regsvc.dll was missing Restored copy from - c:\windows\ServicePackFiles\i386\regsvc.dll . ((((((((((((((((((((((((( Files Created from 2010-12-23 to 2011-01-23 ))))))))))))))))))))))))))))))) . 2011-01-23 18:54 . 2008-04-14 03:42 59904 ----a-w- c:\windows\system32\regsvc.dll 2011-01-23 18:54 . 2008-04-14 03:42 59904 ----a-w- c:\windows\system32\dllcache\regsvc.dll 2011-01-23 10:39 . 2011-01-23 10:39 -------- d-----w- c:\windows\ServicePackFiles 2011-01-23 10:37 . 2006-12-28 22:31 19569 ----a-w- c:\windows\002356_.tmp 2011-01-23 10:16 . 2011-01-23 10:16 -------- d-----w- c:\windows\system32\xircom 2011-01-23 10:16 . 2011-01-23 10:16 -------- d-----w- c:\windows\system32\wbem\snmp 2011-01-23 10:16 . 2011-01-23 10:16 -------- d-----w- c:\windows\srchasst 2011-01-23 10:16 . 2011-01-23 10:16 -------- d-----w- c:\program files\microsoft frontpage 2011-01-22 19:10 . 2011-01-22 19:10 -------- d-----w- C:\_OTL 2011-01-22 15:01 . 2011-01-22 15:01 -------- d-----w- c:\documents and settings\Димитър\Application Data\Malwarebytes 2011-01-22 15:01 . 2010-12-20 16:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-01-22 15:01 . 2011-01-22 15:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2011-01-22 15:01 . 2010-12-20 16:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-01-22 15:01 . 2011-01-22 15:01 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-01-21 17:57 . 2007-01-25 14:37 4027456 ----a-r- c:\windows\system32\drivers\alcxwdm.sys 2011-01-21 17:57 . 2006-12-08 13:20 10528768 ----a-w- c:\windows\system32\RTLCPL.exe 2011-01-21 17:57 . 2006-11-17 03:42 577536 ----a-w- c:\windows\soundman.exe 2011-01-21 17:57 . 2006-11-17 03:40 18804736 ----a-w- c:\windows\system32\alsndmgr.cpl 2011-01-21 17:57 . 2006-10-18 00:53 147456 ----a-w- c:\windows\system32\RtlCPAPI.dll 2011-01-21 17:57 . 2006-08-01 13:02 49152 ----a-w- c:\windows\system32\ChCfg.exe 2011-01-21 17:57 . 2011-01-21 17:57 -------- d-----w- c:\program files\Realtek AC97 2011-01-21 17:57 . 2006-07-31 09:27 217088 ----a-w- c:\windows\alcrmv.exe 2011-01-21 17:57 . 2006-07-31 09:19 315392 ----a-w- c:\windows\alcupd.exe 2011-01-21 16:34 . 2011-01-21 16:34 -------- d-----w- c:\program files\Spybot - Search & Destroy 2011-01-21 16:34 . 2011-01-21 16:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2011-01-21 16:27 . 2011-01-21 16:27 -------- d-----w- c:\documents and settings\Димитър\Application Data\Avira 2011-01-21 16:25 . 2010-12-13 06:46 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2011-01-21 16:25 . 2010-12-13 06:46 135096 ----a-w- c:\windows\system32\drivers\avipbb.sys 2011-01-21 16:25 . 2010-06-17 12:30 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys 2011-01-21 16:25 . 2010-06-17 12:30 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys 2011-01-21 16:25 . 2011-01-21 16:25 -------- d-----w- c:\program files\Avira 2011-01-21 16:25 . 2011-01-21 16:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira 2011-01-21 12:34 . 2011-01-21 12:34 -------- d-----w- c:\windows\system32\wbem\Repository 2011-01-21 11:21 . 2011-01-21 11:21 -------- d-----w- c:\documents and settings\Димитър\Application Data\Winamp 2011-01-20 20:47 . 2011-01-20 20:47 -------- d-----w- c:\documents and settings\Димитър\Application Data\Uniblue 2011-01-20 20:47 . 2011-01-20 20:47 -------- d-----w- c:\documents and settings\All Users\Application Data\{DE8EABB5-1C85-4410-A68D-79BD8A4518F4} 2011-01-20 20:34 . 2011-01-20 20:34 -------- d-----w- c:\windows\$hf_mig$ . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-02-13 7557120] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-12-13 281768] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nlsf"="move" [X] "tscuninstall"="c:\windows\system32\tscupgrd.exe" [2006-03-06 44544] c:\documents and settings\All Users\Start Menu\Programs\Startup\ Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] FlexType 2K.lnk - c:\windows\Datecs\FType2K.exe [2007-12-27 95232] Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) "NoSMHelp"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\policies\microsoft\windows\windowsupdate\au] "NoAutoUpdate"= 1 (0x1) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "f:\\BitComet\\BitComet.exe"= "d:\\Games\\Counter-Strike\\hl.exe"= "c:\\Program Files\\Mozilla Firefox\\FIREFOX.EXE"= "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "21260:TCP"= 21260:TCP:BitComet 21260 TCP "21260:UDP"= 21260:UDP:BitComet 21260 UDP "22982:TCP"= 22982:TCP:BitComet 22982 TCP "22982:UDP"= 22982:UDP:BitComet 22982 UDP "19297:TCP"= 19297:TCP:BitComet 19297 TCP "19297:UDP"= 19297:UDP:BitComet 19297 UDP "27539:TCP"= 27539:TCP:BitComet 27539 TCP "27539:UDP"= 27539:UDP:BitComet 27539 UDP "22977:TCP"= 22977:TCP:BitComet 22977 TCP "22977:UDP"= 22977:UDP:BitComet 22977 UDP "1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015 "1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016 "500:UDP"= 500:UDP:@xpsp2res.dll,-22017 R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [8/17/2008 7:18 PM 717296] R2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files\Avira\AntiVir Desktop\avmailc.exe [1/21/2011 6:25 PM 339624] R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [1/21/2011 6:25 PM 135336] R2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files\Avira\AntiVir Desktop\avwebgrd.exe [1/21/2011 6:25 PM 403624] S3 PAC207;Trust WB-1400T Webcam;c:\windows\system32\drivers\PFC027.sys [2/24/2005 12:29 PM 162176] . . ------- Supplementary Scan ------- . uStart Page = about:blank IE: &С&валяне &с BitComet - f:\bitcomet\BitComet.exe/AddLink.htm IE: &С&валяне на всички с BitComet - f:\bitcomet\BitComet.exe/AddAllLink.htm IE: &С&валяне на всичкото видео с BitComet - f:\bitcomet\BitComet.exe/AddVideo.htm IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office10\EXCEL.EXE/3000 LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll FF - ProfilePath - c:\documents and settings\Димитър\Application Data\Mozilla\Firefox\Profiles\jrgs1s5b.default\ FF - prefs.js: browser.startup.homepage - FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2011-01-23 20:54 Windows 5.1.2600 Service Pack 3 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'explorer.exe'(2460) c:\program files\Avira\AntiVir Desktop\avsda.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . Completion time: 2011-01-23 21:03:32 ComboFix-quarantined-files.txt 2011-01-23 19:03 ComboFix2.txt 2011-01-23 18:08 ComboFix3.txt 2011-01-23 17:55 ComboFix4.txt 2011-01-22 20:25 Pre-Run: 29 158 883 328 bytes free Post-Run: 29 132 652 544 bytes free - - End Of File - - 173FC2C745BCBA945A31BB6FC00EF51D

направих го 2 пъти защото първият път нещо не направих както трябва ... дано не съм объркал ... ComboFix 11-01-22.03 - Димитър 01.2011 г. 20:00:53.3.2 - FAT32x86 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.2047.1604 [GMT 2:00] Running from: c:\documents and settings\Димитър\Desktop\ComboFix.exe AV: AntiVir Desktop *Disabled/Updated* {C19476D9-52BC-4E93-8AF3-CCF59F7AE8FE} . ((((((((((((((((((((((((( Files Created from 2010-12-23 to 2011-01-23 ))))))))))))))))))))))))))))))) . 2011-01-23 10:39 . 2011-01-23 10:39 -------- d-----w- c:\windows\ServicePackFiles 2011-01-23 10:37 . 2006-12-28 22:31 19569 ----a-w- c:\windows\002356_.tmp 2011-01-23 10:16 . 2011-01-23 10:16 -------- d-----w- c:\windows\system32\xircom 2011-01-23 10:16 . 2011-01-23 10:16 -------- d-----w- c:\windows\system32\wbem\snmp 2011-01-23 10:16 . 2011-01-23 10:16 -------- d-----w- c:\windows\srchasst 2011-01-23 10:16 . 2011-01-23 10:16 -------- d-----w- c:\program files\microsoft frontpage 2011-01-22 19:10 . 2011-01-22 19:10 -------- d-----w- C:\_OTL 2011-01-22 15:01 . 2011-01-22 15:01 -------- d-----w- c:\documents and settings\Димитър\Application Data\Malwarebytes 2011-01-22 15:01 . 2010-12-20 16:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-01-22 15:01 . 2011-01-22 15:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2011-01-22 15:01 . 2010-12-20 16:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-01-22 15:01 . 2011-01-22 15:01 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-01-21 17:57 . 2007-01-25 14:37 4027456 ----a-r- c:\windows\system32\drivers\alcxwdm.sys 2011-01-21 17:57 . 2006-12-08 13:20 10528768 ----a-w- c:\windows\system32\RTLCPL.exe 2011-01-21 17:57 . 2006-11-17 03:42 577536 ----a-w- c:\windows\soundman.exe 2011-01-21 17:57 . 2006-11-17 03:40 18804736 ----a-w- c:\windows\system32\alsndmgr.cpl 2011-01-21 17:57 . 2006-10-18 00:53 147456 ----a-w- c:\windows\system32\RtlCPAPI.dll 2011-01-21 17:57 . 2006-08-01 13:02 49152 ----a-w- c:\windows\system32\ChCfg.exe 2011-01-21 17:57 . 2011-01-21 17:57 -------- d-----w- c:\program files\Realtek AC97 2011-01-21 17:57 . 2006-07-31 09:27 217088 ----a-w- c:\windows\alcrmv.exe 2011-01-21 17:57 . 2006-07-31 09:19 315392 ----a-w- c:\windows\alcupd.exe 2011-01-21 16:34 . 2011-01-21 16:34 -------- d-----w- c:\program files\Spybot - Search & Destroy 2011-01-21 16:34 . 2011-01-21 16:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2011-01-21 16:27 . 2011-01-21 16:27 -------- d-----w- c:\documents and settings\Димитър\Application Data\Avira 2011-01-21 16:25 . 2010-12-13 06:46 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2011-01-21 16:25 . 2010-12-13 06:46 135096 ----a-w- c:\windows\system32\drivers\avipbb.sys 2011-01-21 16:25 . 2010-06-17 12:30 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys 2011-01-21 16:25 . 2010-06-17 12:30 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys 2011-01-21 16:25 . 2011-01-21 16:25 -------- d-----w- c:\program files\Avira 2011-01-21 16:25 . 2011-01-21 16:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira 2011-01-21 12:34 . 2011-01-21 12:34 -------- d-----w- c:\windows\system32\wbem\Repository 2011-01-21 11:21 . 2011-01-21 11:21 -------- d-----w- c:\documents and settings\Димитър\Application Data\Winamp 2011-01-20 20:47 . 2011-01-20 20:47 -------- d-----w- c:\documents and settings\Димитър\Application Data\Uniblue 2011-01-20 20:47 . 2011-01-20 20:47 -------- d-----w- c:\documents and settings\All Users\Application Data\{DE8EABB5-1C85-4410-A68D-79BD8A4518F4} 2011-01-20 20:34 . 2011-01-20 20:34 -------- d-----w- c:\windows\$hf_mig$ . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . . ------- Sigcheck ------- [7] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll c:\windows\System32\regsvc.dll ... is missing !! . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-02-13 7557120] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-12-13 281768] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nlsf"="move" [X] "tscuninstall"="c:\windows\system32\tscupgrd.exe" [2006-03-06 44544] c:\documents and settings\All Users\Start Menu\Programs\Startup\ Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] FlexType 2K.lnk - c:\windows\Datecs\FType2K.exe [2007-12-27 95232] Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) "NoSMHelp"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\policies\microsoft\windows\windowsupdate\au] "NoAutoUpdate"= 1 (0x1) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "f:\\BitComet\\BitComet.exe"= "d:\\Games\\Counter-Strike\\hl.exe"= "c:\\Program Files\\Mozilla Firefox\\FIREFOX.EXE"= "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "21260:TCP"= 21260:TCP:BitComet 21260 TCP "21260:UDP"= 21260:UDP:BitComet 21260 UDP "22982:TCP"= 22982:TCP:BitComet 22982 TCP "22982:UDP"= 22982:UDP:BitComet 22982 UDP "19297:TCP"= 19297:TCP:BitComet 19297 TCP "19297:UDP"= 19297:UDP:BitComet 19297 UDP "27539:TCP"= 27539:TCP:BitComet 27539 TCP "27539:UDP"= 27539:UDP:BitComet 27539 UDP "22977:TCP"= 22977:TCP:BitComet 22977 TCP "22977:UDP"= 22977:UDP:BitComet 22977 UDP "1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015 "1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016 "500:UDP"= 500:UDP:@xpsp2res.dll,-22017 R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [8/17/2008 7:18 PM 717296] R2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files\Avira\AntiVir Desktop\avmailc.exe [1/21/2011 6:25 PM 339624] R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [1/21/2011 6:25 PM 135336] R2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files\Avira\AntiVir Desktop\avwebgrd.exe [1/21/2011 6:25 PM 403624] S3 PAC207;Trust WB-1400T Webcam;c:\windows\system32\drivers\PFC027.sys [2/24/2005 12:29 PM 162176] . . ------- Supplementary Scan ------- . uStart Page = about:blank IE: &С&валяне &с BitComet - f:\bitcomet\BitComet.exe/AddLink.htm IE: &С&валяне на всички с BitComet - f:\bitcomet\BitComet.exe/AddAllLink.htm IE: &С&валяне на всичкото видео с BitComet - f:\bitcomet\BitComet.exe/AddVideo.htm IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office10\EXCEL.EXE/3000 LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll FF - ProfilePath - c:\documents and settings\Димитър\Application Data\Mozilla\Firefox\Profiles\jrgs1s5b.default\ FF - prefs.js: browser.startup.homepage - FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2011-01-23 20:05 Windows 5.1.2600 Service Pack 3 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'explorer.exe'(1492) c:\program files\Avira\AntiVir Desktop\avsda.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . Completion time: 2011-01-23 20:08:29 ComboFix-quarantined-files.txt 2011-01-23 18:08 ComboFix2.txt 2011-01-23 17:55 ComboFix3.txt 2011-01-22 20:25 Pre-Run: 29 107 093 504 bytes free Post-Run: 29 088 497 664 bytes free - - End Of File - - 4BADCFED912C9F3FFD2A928A17C28B8C

ясно сега ще го направя направих го и пак ми премигва лентата на старт менюто и спира аудиото на компютъра

добре , значи форматирам диск C и там го инсталирам , ще си запазя ли информацията от другите дискове ?

ComboFix 11-01-22.01 - Димитър 01.2011 г. 22:19:02.1.2 - FAT32x86 Microsoft Windows XP Professional 5.1.2600.2.1251.359.1033.18.2047.1503 [GMT 2:00] Running from: c:\documents and settings\Димитър\Desktop\ComboFix.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\ReadMe.txt . ((((((((((((((((((((((((( Files Created from 2010-12-22 to 2011-01-22 ))))))))))))))))))))))))))))))) . 2011-01-22 19:10 . 2011-01-22 19:10 -------- d-----w- C:\_OTL 2011-01-22 15:01 . 2011-01-22 15:01 -------- d-----w- c:\documents and settings\Димитър\Application Data\Malwarebytes 2011-01-22 15:01 . 2010-12-20 16:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-01-22 15:01 . 2011-01-22 15:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2011-01-22 15:01 . 2010-12-20 16:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-01-22 15:01 . 2011-01-22 15:01 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-01-21 17:57 . 2007-01-25 14:37 4027456 ----a-r- c:\windows\system32\drivers\alcxwdm.sys 2011-01-21 17:57 . 2006-12-08 13:20 10528768 ----a-w- c:\windows\system32\RTLCPL.exe 2011-01-21 17:57 . 2006-11-17 03:42 577536 ----a-w- c:\windows\soundman.exe 2011-01-21 17:57 . 2006-11-17 03:40 18804736 ----a-w- c:\windows\system32\alsndmgr.cpl 2011-01-21 17:57 . 2006-10-18 00:53 147456 ----a-w- c:\windows\system32\RtlCPAPI.dll 2011-01-21 17:57 . 2006-08-01 13:02 49152 ----a-w- c:\windows\system32\ChCfg.exe 2011-01-21 17:57 . 2011-01-21 17:57 -------- d-----w- c:\program files\Realtek AC97 2011-01-21 17:57 . 2006-07-31 09:27 217088 ----a-w- c:\windows\alcrmv.exe 2011-01-21 17:57 . 2006-07-31 09:19 315392 ----a-w- c:\windows\alcupd.exe 2011-01-21 16:34 . 2011-01-21 16:34 -------- d-----w- c:\program files\Spybot - Search & Destroy 2011-01-21 16:34 . 2011-01-21 16:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2011-01-21 16:27 . 2011-01-21 16:27 -------- d-----w- c:\documents and settings\Димитър\Application Data\Avira 2011-01-21 16:25 . 2010-12-13 06:46 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2011-01-21 16:25 . 2010-12-13 06:46 135096 ----a-w- c:\windows\system32\drivers\avipbb.sys 2011-01-21 16:25 . 2010-06-17 12:30 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys 2011-01-21 16:25 . 2010-06-17 12:30 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys 2011-01-21 16:25 . 2011-01-21 16:25 -------- d-----w- c:\program files\Avira 2011-01-21 16:25 . 2011-01-21 16:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira 2011-01-21 12:34 . 2011-01-21 12:34 -------- d-----w- c:\windows\system32\wbem\Repository 2011-01-21 11:21 . 2011-01-21 11:21 -------- d-----w- c:\documents and settings\Димитър\Application Data\Winamp 2011-01-20 20:47 . 2011-01-20 20:47 -------- d-----w- c:\documents and settings\Димитър\Application Data\Uniblue 2011-01-20 20:47 . 2011-01-20 20:47 -------- d-----w- c:\documents and settings\All Users\Application Data\{DE8EABB5-1C85-4410-A68D-79BD8A4518F4} 2011-01-20 20:34 . 2011-01-20 20:34 -------- d-----w- c:\windows\$hf_mig$ . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . . ------- Sigcheck ------- [-] 2006-08-14 . BB4D3A8E6F7EB1D370BC4AD27AB23368 . 360576 . . [5.1.2600.2892] . . c:\windows\system32\drivers\tcpip.sys [-] 2006-08-14 . 3516D8A18B36784B1005B950B84232E1 . 197632 . . [5.1.2600.2743] . . c:\windows\system32\netman.dll [-] 2006-08-14 . B4432F04B0507F332AA6232AB35A3233 . 398848 . . [5.1.2600.2846] . . c:\windows\system32\rpcss.dll [-] 2006-08-14 . AD3D9D191AEA7B5445FE1D82FFBB4788 . 57856 . . [5.1.2600.2696] . . c:\windows\system32\spoolsv.exe [-] 2006-08-14 . 4FA5EF9FC22F219D155D4AEF812371F1 . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll [7] 2006-03-06 . 5AF68A5E44734A082442668E9C787743 . 1050624 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll [7] 2004-08-16 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll [-] 2006-08-14 18:21 . 9975817CE32FA84099D0E3CE1F1EE520 . 243200 . . [2001.12.4414.310] . . c:\windows\system32\es.dll [-] 2006-08-14 . 0FDD84928A5DDE2510761B7EC76CCEC9 . 985088 . . [5.1.2600.2945] . . c:\windows\system32\kernel32.dll [-] 2006-08-14 . 648BF0B4DDE4F7A1156DAE7174D36EFA . 19968 . . [5.1.2600.2751] . . c:\windows\system32\linkinfo.dll [-] 2006-08-14 . D251679BD9EF0250201FB899EC40FD32 . 3058176 . . [6.00.2900.2963] . . c:\windows\system32\mshtml.dll [-] 2006-08-14 . 1418A3A6E76E5A2E3F5E43866E793A8B . 249344 . . [5.1.2600.2716] . . c:\windows\system32\tapisrv.dll [-] 2006-08-14 . 1800F293BCCC8EDE8A70E12B88D80036 . 577024 . . [5.1.2600.2622] . . c:\windows\system32\user32.dll [-] 2006-08-14 . 64CE26DB72810B30F7855EA51E1DF836 . 664576 . . [6.00.2900.2937] . . c:\windows\system32\wininet.dll [-] 2006-08-14 . 45757077A47C68A603A79B03A1A836AB . 1032192 . . [6.00.2900.2649] . . c:\windows\explorer.exe [-] 2006-08-14 . CD6470F7FDE245AEACF763422AAC36BC . 1286144 . . [5.1.2600.2846] . . c:\windows\system32\ole32.dll [-] 2004-08-03 20:39 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\system32\drivers\aec.sys [-] 2006-08-14 . 2B6DCEB39E160AA37B141E59C81B2427 . 2015232 . . [5.1.2600.2622] . . c:\windows\system32\ntkrnlpa.exe [-] 2006-08-14 . 34CABA7B91DD6A9208A5A612F87D05A6 . 2135552 . . [5.1.2600.2622] . . c:\windows\system32\ntoskrnl.exe c:\windows\System32\wuauclt.exe ... is missing !! c:\windows\System32\wscntfy.exe ... is missing !! c:\windows\System32\regsvc.dll ... is missing !! . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-02-13 7557120] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-12-13 281768] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2006-03-06 15360] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nlsf"="move" [X] "tscuninstall"="c:\windows\system32\tscupgrd.exe" [2006-03-06 44544] c:\documents and settings\All Users\Start Menu\Programs\Startup\ Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] FlexType 2K.lnk - c:\windows\Datecs\FType2K.exe [2007-12-27 95232] Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) "NoSMHelp"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\policies\microsoft\windows\windowsupdate\au] "NoAutoUpdate"= 1 (0x1) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "f:\\BitComet\\BitComet.exe"= "d:\\Games\\Counter-Strike\\hl.exe"= "c:\\Program Files\\Mozilla Firefox\\FIREFOX.EXE"= "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "21260:TCP"= 21260:TCP:BitComet 21260 TCP "21260:UDP"= 21260:UDP:BitComet 21260 UDP "22982:TCP"= 22982:TCP:BitComet 22982 TCP "22982:UDP"= 22982:UDP:BitComet 22982 UDP "19297:TCP"= 19297:TCP:BitComet 19297 TCP "19297:UDP"= 19297:UDP:BitComet 19297 UDP "27539:TCP"= 27539:TCP:BitComet 27539 TCP "27539:UDP"= 27539:UDP:BitComet 27539 UDP "22977:TCP"= 22977:TCP:BitComet 22977 TCP "22977:UDP"= 22977:UDP:BitComet 22977 UDP R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [17.8.2008 і. 19:18 717296] R2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files\Avira\AntiVir Desktop\avmailc.exe [21.1.2011 і. 18:25 339624] R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [21.1.2011 і. 18:25 135336] R2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files\Avira\AntiVir Desktop\avwebgrd.exe [21.1.2011 і. 18:25 403624] S3 PAC207;Trust WB-1400T Webcam;c:\windows\system32\drivers\PFC027.sys [24.2.2005 і. 12:29 162176] NETSVCS REQUIRES REPAIRS - current entries shown 6to4 AppMgmt AudioSrv Browser CryptSvc DMServer DHCP EventSystem FastUserSwitchingCompatibility HidServ Ias Iprip Irmon LanmanServer LanmanWorkstation Netman Nla NWCWorkstation Nwsapagent Rasauto Rasman Remoteaccess Schedule Seclogon SENS Sharedaccess SRService Tapisrv Themes TrkWks W32Time WZCSVC Wmi WmdmPmSp winmgmt xmlprov BITS ShellHWDetection helpsvc WmdmPmSN HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs . . ------- Supplementary Scan ------- . uStart Page = about:blank IE: &С&валяне &с BitComet - f:\bitcomet\BitComet.exe/AddLink.htm IE: &С&валяне на всички с BitComet - f:\bitcomet\BitComet.exe/AddAllLink.htm IE: &С&валяне на всичкото видео с BitComet - f:\bitcomet\BitComet.exe/AddVideo.htm IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office10\EXCEL.EXE/3000 LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll FF - ProfilePath - c:\documents and settings\Димитър\Application Data\Mozilla\Firefox\Profiles\jrgs1s5b.default\ FF - prefs.js: browser.startup.homepage - FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2011-01-22 22:22 Windows 5.1.2600 Service Pack 2 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2011-01-22 22:25:20 ComboFix-quarantined-files.txt 2011-01-22 20:25 Pre-Run: 29 946 593 280 bytes free Post-Run: 30 416 879 616 bytes free WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect C:\ = "Unidentified operating system on drive C." - - End Of File - - BC398E10B814D361322A5605B36F0746

направих всичко както казахте , но след като натиснах RUN FIX ми изписа следното нещо: Access violation at adress 005CC7ED in module 'OTL.exe'.Read at adress 00000000

Results of screen317's Security Check version 0.99.8 Windows XP Service Pack 2 Out of date service pack!! Internet Explorer 6 Out of date! `````````````````````````````` Antivirus/Firewall Check: Windows Security Center service is not running! This report may not be accurate! Avira AntiVir Premium WMI entry may not exist for antivirus; attempting automatic update. Avira successfully updated! ``````````````````````````````` Anti-malware/Other Utilities Check: MVPS Hosts File Malwarebytes' Anti-Malware Adobe Flash Player 10.1.102.64 Adobe Reader 7.1.0 Out of date Adobe Reader installed! ```````````````````````````````` Process Check: objlist.exe by Laurent Avira Antivir avgnt.exe Avira Antivir avguard.exe ``````````End of Log```````````` Extras.Txt OTL.Txt

Проблемът е следния : малко след като пусна компютъра лентата където се намира старт менюто става като на windows 98 ( аз съм с xp sp2 ) , сервиза Windows Audio се изключва и малко по-късно ми отказва и интернета .. На какво може да се дължи това ? П.С : направих нещатата от важната тема DDS.txt mbam-log-2011-01-22 (17-56-38).txt Attach.txt

Щом пусна компютъра всичко си е наред , но в един момент ми премигна лентата където е старт менюто и спра ли winamp-а звука ми изчезва и ми дава bad directsound ... вече никъде нямам звук , а малко след това и интернет експлорера ми отказва и мозилата също .. на какво се дължи това ?