ronka7a

добре мерси вече е деинсталиран

http://4storing.com/kqyrl/ca04919d21b24851...e76b1ed6f5.html така ето го линкчето , а въпросния файл + abwv66kh File not found: C:\WINDOWS\System32\Drivers\abwv66kh.sys 4-тири пъти проверих дали го има но го няма до тук всичко направих сега махам и тея от адд и ремув и съм готова ... има ли още ? Freecorder Toolbar 3.02 Application - за това като дам да се махне ми изписва някфа грешка че не може да се изтрие

http://4storing.com/njjhj/e62c2781bfbcf253...48329ff273.html - ето го първото; действам по второто. http://4storing.com/vv264/8c7eb99f27acd6b6...c32855816b.html - ето го и второто.

Scan Log Version of virus signature database: 3815 (20090131) Date: 2009-01-31 Time: 8:21:43 PM Scanned disks, folders and files: C:\;D:\ C:\pagefile.sys - error opening [4] C:\Documents and Settings\All Users\Application Data\Installations\{9C05FA75-0337-4523-AA57-9D3511018887}\Nokia_PC_Suite_rel_6_86_9_3_eng.exe » 7ZIP » - error reading archive C:\Documents and Settings\LocalService\NTUSER.DAT - error opening [4] C:\Documents and Settings\LocalService\ntuser.dat.LOG - error opening [4] C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening [4] C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening [4] C:\Documents and Settings\multiskype.RONKSI\ntuser.dat - error opening [4] C:\Documents and Settings\multiskype.RONKSI\NTUSER.DAT.LOG - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\call256.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\callmember256.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\chat256.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\chat512.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\chatmember256.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\chatmsg256.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\chatmsg512.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\contactgroup256.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\index2.dat - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\main.lock - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\profile16384.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\user1024.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\user16384.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\user256.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\user32768.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Application Data\Skype\irena.sladkata\user4096.dbb - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening [4] C:\Documents and Settings\multiskype.RONKSI\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening [4] C:\Documents and Settings\NetworkService\NTUSER.DAT - error opening [4] C:\Documents and Settings\NetworkService\ntuser.dat.LOG - error opening [4] C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening [4] C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening [4] C:\Documents and Settings\Ronksi\ntuser.dat - error opening [4] C:\Documents and Settings\Ronksi\NTUSER.DAT.LOG - error opening [4] C:\Documents and Settings\Ronksi\Application Data\ICQ\Application.mdb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\ICQ\486418997\Messages.mdb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\ICQ\486418997\Owner.mdb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\call256.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\callmember256.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chat1024.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chat2048.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chat256.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chat4096.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chat512.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chat8192.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chatmember256.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chatmsg1024.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chatmsg16384.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chatmsg2048.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chatmsg256.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chatmsg32768.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chatmsg4096.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chatmsg512.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\chatmsg8192.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\contactgroup256.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\conversation256.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\index2.dat - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\main.lock - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\participant256.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\profile16384.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\transfer256.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\transfer512.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\user1024.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\user16384.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\user256.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\user32768.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\user4096.dbb - error opening [4] C:\Documents and Settings\Ronksi\Application Data\Skype\ronksi\voicemail256.dbb - error opening [4] C:\Documents and Settings\Ronksi\Cookies\[email protected][1].txt » MIME - is OK (internal scanning not performed) C:\Documents and Settings\Ronksi\Cookies\ronksi@mylivepage[2].txt » MIME - is OK (internal scanning not performed) C:\Documents and Settings\Ronksi\Local Settings\Application Data\Identities\{254F66E2-76D0-4B2B-8B4F-4830207973AE}\Microsoft\Outlook Express\Inbox.dbx » DBX - is OK (internal scanning not performed) C:\Documents and Settings\Ronksi\Local Settings\Application Data\Identities\{254F66E2-76D0-4B2B-8B4F-4830207973AE}\Microsoft\Outlook Express\Outbox.dbx » DBX - is OK (internal scanning not performed) C:\Documents and Settings\Ronksi\Local Settings\Application Data\Microsoft\Messenger\[email protected]\SharingMetadata\pending.dat - error opening [4] C:\Documents and Settings\Ronksi\Local Settings\Application Data\Microsoft\Messenger\[email protected]\SharingMetadata\Working\database_F2B8_290A_B828_CEC3\dfsr.db - error opening [4] C:\Documents and Settings\Ronksi\Local Settings\Application Data\Microsoft\Messenger\[email protected]\SharingMetadata\Working\database_F2B8_290A_B828_CEC3\fsr.log - error opening [4] C:\Documents and Settings\Ronksi\Local Settings\Application Data\Microsoft\Messenger\[email protected]\SharingMetadata\Working\database_F2B8_290A_B828_CEC3\fsrtmp.log - error opening [4] C:\Documents and Settings\Ronksi\Local Settings\Application Data\Microsoft\Messenger\[email protected]\SharingMetadata\Working\database_F2B8_290A_B828_CEC3\tmp.edb - error opening [4] C:\Documents and Settings\Ronksi\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening [4] C:\Documents and Settings\Ronksi\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening [4] C:\Documents and Settings\Ronksi\Local Settings\Temp\JET2E3F.tmp - error opening [4] C:\Documents and Settings\Ronksi\Local Settings\Temp\Nokia_PC_Suite_rel_6_86_9_3_eng.exe » 7ZIP » - error reading archive C:\Documents and Settings\Ronksi\Local Settings\Temp\ICQ603_25_52\toolbarfirefox\chrome.manifest » MIME - is OK (internal scanning not performed) C:\Documents and Settings\Ronksi\Local Settings\Temp\ICQ617_34_20\toolbarfirefox\chrome.manifest » MIME - is OK (internal scanning not performed) C:\Documents and Settings\Ronksi\Local Settings\Temporary Internet Files\Content.IE5\GZ0A2CVN\.eml[1] » MIME - is OK (internal scanning not performed) C:\Documents and Settings\Ronksi\Local Settings\Temporary Internet Files\Content.IE5\IXZ0LK32\.eml[1] » MIME - is OK (internal scanning not performed) C:\Documents and Settings\Ronksi\Local Settings\Temporary Internet Files\Content.IE5\P80W99EF\zone[1] - error opening [4] C:\Program Files\Ahead\Nero\CDI\CDI_VCD.CFG » MIME - is OK (internal scanning not performed) C:\Program Files\BitComet\fav\search_en_us.mht » MIME - is OK (internal scanning not performed) C:\Program Files\BitComet\fav\search_zh_cn.mht » MIME - is OK (internal scanning not performed) C:\Program Files\BS.Player ControlBar\bsplayer234.980_clip.exe » NSIS » cmdline.txt » MIME - is OK (internal scanning not performed) C:\Program Files\Common Files\Java\Update\Base Images\jre1.6.0.b105\core3.zip » ZIP » lib/deploy/ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}/chrome.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Common Files\Java\Update\Base Images\jre1.6.0.b105\core3.zip » ZIP » lib/resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Common Files\Java\Update\Base Images\jre1.6.0.b105\core3.zip » ZIP » lib/resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Common Files\Java\Update\Base Images\jre1.6.0.b105\core3.zip » ZIP » lib/resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_01\lib\resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_01\lib\resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_01\lib\resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_01\lib\deploy\ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}/chrome.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_02\lib\resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_02\lib\resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_02\lib\resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_02\lib\deploy\ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}/chrome.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_03\lib\resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_03\lib\resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_03\lib\resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_03\lib\deploy\ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}/chrome.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_05\lib\resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_05\lib\resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_05\lib\resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_05\lib\deploy\ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}/chrome.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_07\lib\resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_07\lib\resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_07\lib\resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre1.6.0_07\lib\deploy\ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}/chrome.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre6\lib\resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre6\lib\resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre6\lib\resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre6\lib\deploy\ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}/chrome.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Java\jre6\lib\deploy\jqs\ff\chrome.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\Firefox Setup 3.0.5.exe » 7ZIP » nonlocalized/chrome/browser.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\Firefox Setup 3.0.5.exe » 7ZIP » nonlocalized/chrome/comm.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\Firefox Setup 3.0.5.exe » 7ZIP » nonlocalized/chrome/pippki.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\Firefox Setup 3.0.5.exe » 7ZIP » nonlocalized/chrome/reporter.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\Firefox Setup 3.0.5.exe » 7ZIP » nonlocalized/chrome/toolkit.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\chrome\browser.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\chrome\comm.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\chrome\pippki.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\chrome\reporter.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\chrome\toolkit.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\chrome.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\chrome.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\chrome.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\chrome.manifest » MIME - is OK (internal scanning not performed) C:\Program Files\Nero\Nero Burning ROM 6.6.1.4.exe » RAR » Nero\CDI\CDI_VCD.CFG » MIME - is OK (internal scanning not performed) C:\Program Files\Nero\Nero Burning ROM 6.6.1.4.exe » RAR » setup\Eula_esm.txt » MIME - is OK (internal scanning not performed) C:\Program Files\Nero\Nero Burning ROM 6.6.1.4.exe » RAR » setup\Eula_esp.txt » MIME - is OK (internal scanning not performed) C:\Program Files\Nero\Nero Burning ROM 6.6.1.4.exe » RAR » setup\Eula_fra.txt » MIME - is OK (internal scanning not performed) C:\Program Files\Nero\Nero Burning ROM 6.6.1.4.exe » RAR » setup\Eula_frc.txt » MIME - is OK (internal scanning not performed) C:\Program Files\Nero\Nero Burning ROM 6.6.1.4.exe » RAR » setup\Eula_ita.txt » MIME - is OK (internal scanning not performed) C:\Program Files\Nero\Nero Burning ROM 6.6.1.4.exe » RAR » setup\Eula_ptg.txt » MIME - is OK (internal scanning not performed) C:\Program Files\Nokia\Nokia_PC_Suite_rel_6_85_14_1_eng_web.exe » 7ZIP » - error reading archive C:\Program Files\Webteh\BSplayer\doc\cmdline.txt » MIME - is OK (internal scanning not performed) C:\Program Files\Winamp\winamp5531_full_emusic-7plus_en-us.exe » NSIS » file.bin - error - unknown compression method C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Data\Sea_Bottom.eld - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Data\Cam_Track1.evd - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Data\Map.emp - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\boat.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\Capt.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\CaptWall.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\dfg.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\fish1.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\jakor.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\parusa.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\rock01.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\rock03.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\rock04.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\rock05.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\rock06.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\rock07.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\shark.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\shell2.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\Ship.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\skala1.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\stone1.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\Trum.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\TrumWall.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\TST.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\vodor10.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\vodor2.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\vodor8.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\vodor9.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\fish1.ESA - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\Parusa.ESA - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\shark.ESA - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\TST.esa - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\vodor10.esa - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\vodor2.ESA - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\vodor8.ESA - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\vodor9.ESA - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\Sphere.ms3d - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\fish2.ESA - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\fish2.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\fish3.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\fish3.ESA - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\FISH4.ESA - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\FISH4.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\FISH5.ESA - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Meshes\FISH5.EMD - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\ground03.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\Plankton.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\Rays.bmp - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust11.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust12.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust13.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust14.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust15.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust16.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust17.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust18.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust19.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust20.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust21.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust22.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust23.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust24.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust25.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust26.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust27.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust28.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust29.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust30.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust31.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust00.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust01.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust02.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust03.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust04.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust05.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust06.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust07.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust08.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust09.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\caust10.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\Sun.JPG - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\Cur.BMP - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\Cur_alpha.BMP - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\InfoBar.BMP - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\Sphere.bmp - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\bruki.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\carpet_fancy3.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\flag.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\fuc.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\glass.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\green01.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\lam01.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\lam02.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\lam03.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\odeshda.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\plav01.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\red01.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\red02.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\red03.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\rukav.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\trunk1drk.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\wodorosli.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\wood03.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\wood04.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\bed.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\bochka.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\book.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\book_c02.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\book_c03.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\book_c04.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\bottle.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\bottle2.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\candle.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\corona.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\cwood_mo5c.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\debri_m01.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\desk_c04.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\door01.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\fish01.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\gold.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\gold2.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\kanat.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\kuvsh.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\lantern.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\meshok.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\metal01.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\metall01.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\minen_post.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\pattern_marq1.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\PLATE.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\pol_02.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\potolok.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\rock.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\ROCK01.JPG - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\shark.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\shell.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\shell2.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\skilet.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\skull.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\sp_wdtrim_townhall.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\sunduk.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\text.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\tool_m02.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\trim_c09.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\w_01.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\w_02.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\w_03.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\w_04.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\w_05.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\w_06.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\w_07.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\w_09.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\w_10.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\w_11.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\wood_c06.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\wood_c11.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\wood_nar.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\wood_nar2.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\wood01.JPG - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\wood06.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\wood08.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\wood09.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\yashik.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\loader.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\fish02.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\fish03.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\fish04.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\fish05.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\plav02.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\plav03.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\plav04.tga - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\White.JPG - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\Bubbles.jpg - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\oceangradient.bmp - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\mpcarentan_up.JPG - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » Texture\Waterbump3.JPG - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » shaders\OceanWater.psh - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\Pirate Ship 3D Screensaver.scr » RAR » shaders\OceanWater.vsh - Incorrect file checksum (CRC); the file is probably password protected. C:\WINDOWS\system32\CatRoot2\edb.log - error opening [4] C:\WINDOWS\system32\CatRoot2\edbtmp.log - error opening [4] C:\WINDOWS\system32\CatRoot2\tmp.edb - error opening [4] C:\WINDOWS\system32\config\default - error opening [4] C:\WINDOWS\system32\config\default.LOG - error opening [4] C:\WINDOWS\system32\config\SAM - error opening [4] C:\WINDOWS\system32\config\SAM.LOG - error opening [4] C:\WINDOWS\system32\config\SECURITY - error opening [4] C:\WINDOWS\system32\config\SECURITY.LOG - error opening [4] C:\WINDOWS\system32\config\software - error opening [4] C:\WINDOWS\system32\config\software.LOG - error opening [4] C:\WINDOWS\system32\config\system - error opening [4] C:\WINDOWS\system32\config\system.LOG - error opening [4] C:\WINDOWS\system32\drivers\sptd.sys - error opening [4] D:\ba5a460b943155c3eff25d\admparse.dll - error opening [4] D:\ba5a460b943155c3eff25d\admparse.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\advpack.dll - error opening [4] D:\ba5a460b943155c3eff25d\advpack.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\browseui.dll - error opening [4] D:\ba5a460b943155c3eff25d\corpol.dll - error opening [4] D:\ba5a460b943155c3eff25d\custsat.dll - error opening [4] D:\ba5a460b943155c3eff25d\dxtmsft.dll - error opening [4] D:\ba5a460b943155c3eff25d\dxtrans.dll - error opening [4] D:\ba5a460b943155c3eff25d\extmgr.dll - error opening [4] D:\ba5a460b943155c3eff25d\extmgr.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\feeddisc.wav - error opening [4] D:\ba5a460b943155c3eff25d\hmmapi.dll - error opening [4] D:\ba5a460b943155c3eff25d\hmmapi.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\html.iec - error opening [4] D:\ba5a460b943155c3eff25d\html.iec.mui - error opening [4] D:\ba5a460b943155c3eff25d\icardie.dll - error opening [4] D:\ba5a460b943155c3eff25d\icardie.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\icrav03.rat - error opening [4] D:\ba5a460b943155c3eff25d\ie4uinit.exe - error opening [4] D:\ba5a460b943155c3eff25d\ie4uinit.exe.mui - error opening [4] D:\ba5a460b943155c3eff25d\ieakeng.dll - error opening [4] D:\ba5a460b943155c3eff25d\ieakeng.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\ieakmmc.chm - error opening [4] D:\ba5a460b943155c3eff25d\ieaksie.dll - error opening [4] D:\ba5a460b943155c3eff25d\ieaksie.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\ieakui.dll - error opening [4] D:\ba5a460b943155c3eff25d\ieakui.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\ieapfltr.dat - error opening [4] D:\ba5a460b943155c3eff25d\ieapfltr.dll - error opening [4] D:\ba5a460b943155c3eff25d\iedkcs32.dll - error opening [4] D:\ba5a460b943155c3eff25d\iedkcs32.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\iedw.exe - error opening [4] D:\ba5a460b943155c3eff25d\iedw.exe.mui - error opening [4] D:\ba5a460b943155c3eff25d\ieencode.dll - error opening [4] D:\ba5a460b943155c3eff25d\ieeula.chm - error opening [4] D:\ba5a460b943155c3eff25d\ieframe.dll - error opening [4] D:\ba5a460b943155c3eff25d\ieframe.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\iepeers.dll - error opening [4] D:\ba5a460b943155c3eff25d\iepeers.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\ieproxy.dll - error opening [4] D:\ba5a460b943155c3eff25d\iernonce.dll - error opening [4] D:\ba5a460b943155c3eff25d\iernonce.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\iertutil.dll - error opening [4] D:\ba5a460b943155c3eff25d\iesetup.dll - error opening [4] D:\ba5a460b943155c3eff25d\iesetup.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\iesupp.chm - error opening [4] D:\ba5a460b943155c3eff25d\ieudinit.exe - error opening [4] D:\ba5a460b943155c3eff25d\ieui.dll - error opening [4] D:\ba5a460b943155c3eff25d\ieui.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\ieuinit.inf - error opening [4] D:\ba5a460b943155c3eff25d\ieunatt.exe.mui - error opening [4] D:\ba5a460b943155c3eff25d\iexplore.chm - error opening [4] D:\ba5a460b943155c3eff25d\iexplore.exe - error opening [4] D:\ba5a460b943155c3eff25d\iexplore.exe.mui - error opening [4] D:\ba5a460b943155c3eff25d\imgutil.dll - error opening [4] D:\ba5a460b943155c3eff25d\inetcorp.iem - error opening [4] D:\ba5a460b943155c3eff25d\inetcpl.cpl - error opening [4] D:\ba5a460b943155c3eff25d\inetcpl.cpl.mui - error opening [4] D:\ba5a460b943155c3eff25d\inetres.adm - error opening [4] D:\ba5a460b943155c3eff25d\inetset.iem - error opening [4] D:\ba5a460b943155c3eff25d\infobar.wav - error opening [4] D:\ba5a460b943155c3eff25d\inseng.dll - error opening [4] D:\ba5a460b943155c3eff25d\inseng.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\install.ins - error opening [4] D:\ba5a460b943155c3eff25d\jscript.dll - error opening [4] D:\ba5a460b943155c3eff25d\jsproxy.dll - error opening [4] D:\ba5a460b943155c3eff25d\licmgr10.dll - error opening [4] D:\ba5a460b943155c3eff25d\licmgr10.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\msfeeds.dll - error opening [4] D:\ba5a460b943155c3eff25d\msfeeds.mof - error opening [4] D:\ba5a460b943155c3eff25d\msfeedsbs.dll - error opening [4] D:\ba5a460b943155c3eff25d\msfeedsbs.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\msfeedsbs.mof - error opening [4] D:\ba5a460b943155c3eff25d\msfeedssync.exe - error opening [4] D:\ba5a460b943155c3eff25d\mshta.exe - error opening [4] D:\ba5a460b943155c3eff25d\mshta.exe.mui - error opening [4] D:\ba5a460b943155c3eff25d\mshtml.dll - error opening [4] D:\ba5a460b943155c3eff25d\mshtml.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\mshtml.tlb - error opening [4] D:\ba5a460b943155c3eff25d\mshtmled.dll - error opening [4] D:\ba5a460b943155c3eff25d\mshtmled.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\mshtmler.dll - error opening [4] D:\ba5a460b943155c3eff25d\mshtmler.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\msls31.dll - error opening [4] D:\ba5a460b943155c3eff25d\msrating.dll - error opening [4] D:\ba5a460b943155c3eff25d\msrating.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\mstime.dll - error opening [4] D:\ba5a460b943155c3eff25d\navstart.wav - error opening [4] D:\ba5a460b943155c3eff25d\occache.dll - error opening [4] D:\ba5a460b943155c3eff25d\occache.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\occache.ini - error opening [4] D:\ba5a460b943155c3eff25d\pngfilt.dll - error opening [4] D:\ba5a460b943155c3eff25d\popupblk.wav - error opening [4] D:\ba5a460b943155c3eff25d\shdocvw.dll - error opening [4] D:\ba5a460b943155c3eff25d\shlwapi.dll - error opening [4] D:\ba5a460b943155c3eff25d\spmsg.dll - error opening [4] D:\ba5a460b943155c3eff25d\spuninst.exe - error opening [4] D:\ba5a460b943155c3eff25d\spupdsvc.exe - error opening [4] D:\ba5a460b943155c3eff25d\tdc.ocx - error opening [4] D:\ba5a460b943155c3eff25d\ticrf.rat - error opening [4] D:\ba5a460b943155c3eff25d\url.dll - error opening [4] D:\ba5a460b943155c3eff25d\urlmon.dll - error opening [4] D:\ba5a460b943155c3eff25d\urlmon.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\vbscript.dll - error opening [4] D:\ba5a460b943155c3eff25d\vgx.dll - error opening [4] D:\ba5a460b943155c3eff25d\webcheck.dll - error opening [4] D:\ba5a460b943155c3eff25d\webcheck.dll.mui - error opening [4] D:\ba5a460b943155c3eff25d\webcheck.ini - error opening [4] D:\ba5a460b943155c3eff25d\winfxdocobj.exe - error opening [4] D:\ba5a460b943155c3eff25d\winfxdocobj.exe.mui - error opening [4] D:\ba5a460b943155c3eff25d\wininet.dll - error opening [4] D:\ba5a460b943155c3eff25d\wininet.dll.mui - error opening [4] D:\Dokumenti\Studio Dance Zone-ceni.mht » MIME - is OK (internal scanning not performed) D:\Dokumenti\STUDIO DANCE ZONE-kontakti.mht » MIME - is OK (internal scanning not performed) D:\Dokumenti\Studio Dance Zone.mht » MIME - is OK (internal scanning not performed) D:\Dokumenti\Новините от днешния ден.mht » MIME - is OK (internal scanning not performed) D:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\YS561401.CAB » CAB » VIDEO.MHT_1033 » MIME - is OK (internal scanning not performed) Number of scanned objects: 394785 Number of threats found: 0 Time of completion: 9:59:45 PM Total scanning time: 5882 sec (01:38:02) Notes: [4] Object cannot be opened. It may be in use by another application or operating system.

ами ще видиме ако се махнат проблемите ще видя какво ще правя с нод-а а иначе нямам против легалното ползване но не съм особено на пред с паричките нали се сещаш и не мога да си позволя като доста маниаци на тема пц да харча яко за всякакви програми ако програмите не бяха скъпи4ки нямам против да ги ползвам но не всички са ми по джоба ... абе както и да е мерси за мненията радвам се че и някой друг ми обърна малко внимание а за нода ще видиме след махането на проблема чак какво да го правя

ами виж аз незнам дали нод-а е легален защото както казах не разбирам много а и не съм го сваляла аз а ми го пратиха ето прикачвам ти едно файлче да видиш сам пише че траяла е 14 хил. и незнам си колко дни сам прецени какъв е a и още нещо не съм писала другаде защото това е първият форум в който въобще някога влизам и не знаех къде въобще трябва да търся и да пиша и за това произволно хванах темичките за a-squared Anti-Malware и другата за Нод-а untitled2.bmp

Ами мерси за мнението ама смятам да се консултирам с Fixer и тогава да правя каквото и да било първо защото само той ми обърна внимание на проблема и ми помага а и мисля че се справя добре ... а и не искам да се спирам на едно мнение нека да чуеме и други гледни точки и нека повече хора споделят мнение пък тогава ще правя корекции сега най-важно и е да си изчитя пц-то от това което е нахлуло в него и тогава ще му мисля

ами аз до сега проблеми не съм имала сега от два дни за пръв път имам такъв проблем и за това се допитвам точно защото аз не знам искам мнение а не давам такова ... просто казах какво мисля за програмките иначе ако някои ми даде компетентен съвет няма да ги държа и двете но сега не съм получила някфо мнение по въпроса и за това ги ползвам и двете

хммм направих всичо и инструкциите изпулних без една която беше за програмата Ewido micro защото тя не ми тръгва въобще и пише на нея отгоре на прозореца Ерор и толкова и не зарежда иначе сичко друго направих ей сега преди малко свърши сканирането през Safe mode и сканира почти час и нещо и така ... сега да правя ли нещо или ? ей това ми излезна точно преди 5 мин явно нешата отиват на зле ? ? ? untitled.bmp

хмммм еми не съм само с НОД имам ги и двете и нод-а и a-squared Anti-Malware но от нода ми излиза от два дни някъв вирус и сега с Fixer се бориме за отстраняването незнам но момчето според мен си разбира нещата за това му се доверявам на него ... дам искам да си запазя a-squared Anti-Malware и да не я инсталвам през 30 дни ама ще се примиря защото от нея съм доволна ама и нода едва ли бих сменила имах предвид че когато е само нод-а не бях мн сигурна само с нея защото има пъти в които е имала пропуски ама се пак аз не разбирам много така че няма да се мешам в неща и теми в които не съм компетентна , но се радвам че попаднах на Fixer

ComboFix 09-01-31.01 - Ronksi 2009-02-01 15:49:11.4 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.1023.607 [GMT -8:00] Running from: c:\documents and settings\Ronksi\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\Ronksi\Desktop\CFScript.txt AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system\smsc32.exe . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_WINSPOOLER32 -------\Service_WinSpooler32 ((((((((((((((((((((((((( Files Created from 2009-01-01 to 2009-02-01 ))))))))))))))))))))))))))))))) . 2009-02-01 15:07 . 2009-02-01 15:07 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\Malwarebytes 2009-02-01 15:06 . 2009-02-01 15:12 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware 2009-02-01 15:06 . 2009-02-01 15:06 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-02-01 15:06 . 2009-01-14 16:11 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2009-02-01 15:06 . 2009-01-14 16:11 15,504 --a------ c:\windows\system32\drivers\mbam.sys 2009-02-01 13:20 . 2009-02-01 13:20 <DIR> d-------- c:\documents and settings\Ronksi\dwhelper 2009-01-28 20:02 . 2009-01-28 20:02 <DIR> d-------- c:\program files\Sagasoft 2009-01-27 18:26 . 2009-01-27 20:03 <DIR> d-------- c:\program files\MSN Messenger 2009-01-27 17:17 . 2009-01-27 17:30 <DIR> d-------- c:\documents and settings\Ronksi\Contacts 2009-01-27 16:31 . 2009-01-27 16:32 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\MSNInstaller 2009-01-27 15:52 . 2009-01-27 15:52 <DIR> d-------- c:\program files\Common Files\Windows Live 2009-01-27 13:35 . 2009-01-27 13:35 <DIR> d--hs---- C:\found.000 2009-01-27 13:30 . 2009-01-27 13:30 <DIR> d-------- c:\program files\Adobe Media Player 2009-01-22 15:37 . 2009-02-01 12:54 <DIR> d-------- c:\documents and settings\multiskype.RONKSI\Application Data\Skype 2009-01-22 15:37 . 2009-01-27 13:32 <DIR> d-------- c:\documents and settings\multiskype.RONKSI 2009-01-22 12:43 . 2008-10-16 12:38 459,264 -----c--- c:\windows\system32\dllcache\msfeeds.dll 2009-01-22 12:43 . 2008-10-16 12:38 383,488 -----c--- c:\windows\system32\dllcache\ieapfltr.dll 2009-01-22 12:43 . 2008-10-16 12:38 267,776 -----c--- c:\windows\system32\dllcache\iertutil.dll 2009-01-22 12:43 . 2008-10-16 12:38 63,488 -----c--- c:\windows\system32\dllcache\icardie.dll 2009-01-22 12:43 . 2008-10-16 12:38 52,224 -----c--- c:\windows\system32\dllcache\msfeedsbs.dll 2009-01-22 12:43 . 2008-10-16 05:11 13,824 -----c--- c:\windows\system32\dllcache\ieudinit.exe 2009-01-22 12:42 . 2008-10-16 12:38 6,066,176 -----c--- c:\windows\system32\dllcache\ieframe.dll 2009-01-22 12:42 . 2007-04-17 01:32 2,455,488 -----c--- c:\windows\system32\dllcache\ieapfltr.dat 2009-01-22 12:42 . 2007-03-07 21:10 991,232 -----c--- c:\windows\system32\dllcache\ieframe.dll.mui 2009-01-22 12:25 . 2009-01-22 12:24 410,984 --a------ c:\windows\system32\deploytk.dll 2009-01-17 17:41 . 2009-01-17 17:41 <DIR> d-------- c:\program files\Webteh 2009-01-17 17:41 . 2009-01-17 17:43 <DIR> d-------- c:\program files\BS.Player ControlBar 2009-01-17 17:41 . 2009-01-17 17:41 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\BSplayer Pro 2009-01-17 17:41 . 2009-01-17 20:23 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\BSplayer 2009-01-16 11:41 . 2009-01-16 11:41 323,584 --a------ c:\windows\system32\AUDIOGENIE2.DLL 2009-01-16 11:40 . 2009-01-16 11:40 <DIR> d-------- c:\windows\Freecorder Toolbar 2009-01-16 11:39 . 2009-01-16 11:39 <DIR> d-------- c:\windows\Replay Media Catcher 2009-01-16 11:39 . 2009-01-16 11:42 <DIR> d-------- c:\program files\Replay Media Catcher 2009-01-16 11:38 . 2009-01-16 11:38 <DIR> d-------- c:\windows\Applian FLV Player 2009-01-16 11:38 . 2009-01-16 11:43 <DIR> d-------- c:\program files\FLV Player 2009-01-14 16:56 . 2008-08-19 18:08 1,435,272 --a------ c:\windows\system32\Flash8.ocx 2009-01-12 13:24 . 2009-01-12 13:25 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\Super-Cow . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-02-01 23:53 --------- d-----w c:\documents and settings\Ronksi\Application Data\Skype 2009-02-01 21:03 --------- d-----w c:\documents and settings\Ronksi\Application Data\skypePM 2009-02-01 21:02 --------- d-----w c:\documents and settings\Ronksi\Application Data\VoozieMaker 2009-02-01 05:57 --------- d-----w c:\program files\a-squared Anti-Malware 2009-01-30 01:06 --------- d-----w c:\documents and settings\Ronksi\Application Data\ICQ 2009-01-29 10:33 --------- d-----w c:\documents and settings\Ronksi\Application Data\Any Video Converter 2009-01-28 23:39 --------- d-----w c:\program files\multiskype 2009-01-28 04:51 --------- d-----w c:\program files\Common Files\Skype 2009-01-28 04:51 --------- d-----w c:\documents and settings\All Users\Application Data\Skype 2009-01-28 04:51 --------- d-----r c:\program files\Skype 2009-01-28 00:12 --------- d-----w c:\documents and settings\All Users\Application Data\Make A Voozie 2009-01-27 20:45 --------- d-----w c:\program files\IncrediGames 2009-01-27 20:36 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-01-23 02:35 --------- d-----w c:\program files\Winamp 2009-01-22 20:24 --------- d-----w c:\program files\Java 2009-01-19 01:10 --------- d-----w c:\program files\Favorite-Games 2009-01-15 01:37 --------- d--h--w c:\program files\InstallShield Installation Information 2009-01-13 07:00 --------- d-----w c:\program files\SA Dictionary 2004 Datacenter 2009-01-12 21:56 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP 2009-01-12 21:23 --------- d-----w c:\program files\Oberon Media 2009-01-12 02:56 --------- d-----w c:\documents and settings\Ronksi\Application Data\Flood Light Games 2009-01-12 02:56 --------- d-----w c:\documents and settings\All Users\Application Data\Flood Light Games 2009-01-09 21:45 --------- d-----w c:\documents and settings\Ronksi\Application Data\Winamp 2008-12-28 02:30 --------- d-----w c:\program files\Common Files\BOONTY Shared 2008-12-16 01:56 --------- d-----w c:\program files\ESET 2008-12-12 02:41 --------- d-----w c:\documents and settings\Ronksi\Application Data\Nokia . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NBJ"="c:\program files\Ahead\Nero BackItUp\NBJ.exe" [2005-10-11 1961984] "Magentic"="c:\progra~1\Magentic\bin\Magentic.exe" [2008-05-19 832824] "BitComet"="c:\program files\BitComet\BitComet.exe" [2005-09-07 2600960] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PCSync2.exe" [2008-03-26 1232896] "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 6\PCSuite.exe" [2008-04-16 1079808] "ICQ"="c:\program files\ICQ6\ICQ.exe" [2008-09-01 173304] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "msnmsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-07 21633320] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-12-13 7323648] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-12-13 86016] "DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2006-11-12 157592] "Make A Voozie"="c:\documents and settings\All Users\Application Data\Make A Voozie\VoozieMaker.exe" [2008-02-20 64000] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "VMSnap3"="c:\windows\VMSnap3.EXE" [2006-08-30 49152] "Domino"="c:\windows\Domino.EXE" [2006-06-28 49152] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2007-12-21 1443072] "a-squared"="c:\program files\a-squared Anti-Malware\a2guard.exe" [2009-01-27 2784912] "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-04-01 36352] "nwiz"="nwiz.exe" [2005-12-13 c:\windows\system32\nwiz.exe] "SkyTel"="SkyTel.EXE" [2006-05-16 c:\windows\SkyTel.exe] "RTHDCPL"="RTHDCPL.EXE" [2006-06-27 c:\windows\RTHDCPL.exe] c:\documents and settings\All Users\Start Menu\Programs\Startup\ Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [12/13/2004 5:44:06 PM 29696] FlexType 2K.lnk - c:\windows\Datecs\Flex2K.exe [8/8/2008 10:32:40 PM 145920] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB] 2001-12-20 22:34 24576 c:\program files\AlienGUIse\fastload.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Authentication Packages REG_MULTI_SZ msv1_0 nwprovau [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\BitComet\\BitComet.exe"= "c:\\Program Files\\ICQ6\\ICQ.exe"= "c:\\Program Files\\Magentic\\bin\\magentic_install.exe"= "c:\\Program Files\\Magentic\\bin\\Magentic.exe"= "c:\\Program Files\\Magentic\\bin\\MgImp.exe"= "c:\\Program Files\\Magentic\\bin\\MgApp.exe"= "c:\\WINDOWS\\ServicePackFiles\\i386\\tcptest.exe"= "c:\\WINDOWS\\system32\\mmc.exe"= "c:\\Program Files\\SopCast\\SopCast.exe"= "c:\\Program Files\\SopCast\\adv\\SopAdver.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "c:\\Program Files\\MSN Messenger\\livecall.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [12/21/2007 7:21:56 AM 33800] R3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys [6/9/2008 9:33:20 PM 428160] R4 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [12/21/2007 7:21:16 AM 468224] R4 NwSapAgent;SAP Agent;c:\windows\system32\svchost.exe -k netsvcs [8/3/2004 3:56:58 PM 14336] . Contents of the 'Scheduled Tasks' folder 2009-02-01 c:\windows\Tasks\User_Feed_Synchronization-{1A65FC88-7467-47E1-B9DD-5D27F270F940}.job - c:\windows\system32\msfeedssync.exe [2007-08-13 18:36] . . ------- Supplementary Scan ------- . uStart Page = hxxp://mystart.magentic.com/english/ uInternet Connection Wizard,ShellNext = iexplore IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: {22A2CADE-1F4B-4E19-BC3F-24888EE7672D} = 84.238.220.1 DPF: {6CE31B8D-8340-4DBD-B78E-BF59620924DC} - hxxp://www.quest3d.com/webplugin/download/quest3dactivex2.cab DPF: {EAC139A9-D22D-4C29-8D1C-252BE63750F9} - hxxp://piclens.com/shared/plinstll.cab FF - ProfilePath - c:\documents and settings\Ronksi\Application Data\Mozilla\Firefox\Profiles\tb3x7mbd.default\ FF - prefs.js: browser.search.selectedEngine - Google.bg FF - prefs.js: browser.startup.homepage - hxxp://mystart.magentic.com/ FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-02-01 15:52:45 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(700) c:\program files\AlienGUIse\fastload.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\savedump.exe c:\program files\a-squared Anti-Malware\a2service.exe c:\windows\ATKKBService.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\nvsvc32.exe c:\windows\system32\wscntfy.exe c:\program files\PC Connectivity Solution\ServiceLayer.exe c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe c:\program files\PC Connectivity Solution\Transports\NclIrSrv.exe c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe c:\program files\Common Files\Nokia\MPAPI\MPAPI3s.exe c:\program files\MSN Messenger\usnsvc.exe . ************************************************************************** . Completion time: 2009-02-01 15:55:45 - machine was rebooted ComboFix-quarantined-files.txt 2009-02-01 23:55:23 ComboFix2.txt 2009-02-01 23:04:40 ComboFix3.txt 2009-02-01 21:06:16 Pre-Run: 5,659,058,176 bytes free Post-Run: 5,640,105,984 bytes free 203 --- E O F --- 2008-06-08 10:07:01 Tолкова ли е зле ?

Благодаря и на B-Boy[styLe] ... окси свалям безплатната и запо4вам под ред ComboFix 09-01-31.01 - Ronksi 2009-02-01 14:56:01.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.1023.567 [GMT -8:00] Running from: c:\documents and settings\Ronksi\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\Ronksi\Desktop\CFScript.txt AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) * Created a new restore point * Resident AV is active WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! FILE :: c:\windows\system32\msvcrt2.dll . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system\smsc32.exe c:\windows\system32\drivers\sysdrv32.sys c:\windows\system32\msvcrt2.dll c:\windows\system32\x.exe c:\windows\temp c:\windows\temp\35.exe . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_SYSDRV32 -------\Service_sysdrv32 ((((((((((((((((((((((((( Files Created from 2009-01-01 to 2009-02-01 ))))))))))))))))))))))))))))))) . 2009-02-01 13:20 . 2009-02-01 13:20 <DIR> d-------- c:\documents and settings\Ronksi\dwhelper 2009-01-28 20:02 . 2009-01-28 20:02 <DIR> d-------- c:\program files\Sagasoft 2009-01-27 18:26 . 2009-01-27 20:03 <DIR> d-------- c:\program files\MSN Messenger 2009-01-27 17:17 . 2009-01-27 17:30 <DIR> d-------- c:\documents and settings\Ronksi\Contacts 2009-01-27 16:31 . 2009-01-27 16:32 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\MSNInstaller 2009-01-27 15:52 . 2009-01-27 15:52 <DIR> d-------- c:\program files\Common Files\Windows Live 2009-01-27 13:35 . 2009-01-27 13:35 <DIR> d--hs---- C:\found.000 2009-01-27 13:30 . 2009-01-27 13:30 <DIR> d-------- c:\program files\Adobe Media Player 2009-01-22 15:37 . 2009-02-01 12:54 <DIR> d-------- c:\documents and settings\multiskype.RONKSI\Application Data\Skype 2009-01-22 15:37 . 2009-01-27 13:32 <DIR> d-------- c:\documents and settings\multiskype.RONKSI 2009-01-22 12:43 . 2008-10-16 12:38 459,264 -----c--- c:\windows\system32\dllcache\msfeeds.dll 2009-01-22 12:43 . 2008-10-16 12:38 383,488 -----c--- c:\windows\system32\dllcache\ieapfltr.dll 2009-01-22 12:43 . 2008-10-16 12:38 267,776 -----c--- c:\windows\system32\dllcache\iertutil.dll 2009-01-22 12:43 . 2008-10-16 12:38 63,488 -----c--- c:\windows\system32\dllcache\icardie.dll 2009-01-22 12:43 . 2008-10-16 12:38 52,224 -----c--- c:\windows\system32\dllcache\msfeedsbs.dll 2009-01-22 12:43 . 2008-10-16 05:11 13,824 -----c--- c:\windows\system32\dllcache\ieudinit.exe 2009-01-22 12:42 . 2008-10-16 12:38 6,066,176 -----c--- c:\windows\system32\dllcache\ieframe.dll 2009-01-22 12:42 . 2007-04-17 01:32 2,455,488 -----c--- c:\windows\system32\dllcache\ieapfltr.dat 2009-01-22 12:42 . 2007-03-07 21:10 991,232 -----c--- c:\windows\system32\dllcache\ieframe.dll.mui 2009-01-22 12:25 . 2009-01-22 12:24 410,984 --a------ c:\windows\system32\deploytk.dll 2009-01-17 17:41 . 2009-01-17 17:41 <DIR> d-------- c:\program files\Webteh 2009-01-17 17:41 . 2009-01-17 17:43 <DIR> d-------- c:\program files\BS.Player ControlBar 2009-01-17 17:41 . 2009-01-17 17:41 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\BSplayer Pro 2009-01-17 17:41 . 2009-01-17 20:23 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\BSplayer 2009-01-16 11:41 . 2009-01-16 11:41 323,584 --a------ c:\windows\system32\AUDIOGENIE2.DLL 2009-01-16 11:40 . 2009-01-16 11:40 <DIR> d-------- c:\windows\Freecorder Toolbar 2009-01-16 11:39 . 2009-01-16 11:39 <DIR> d-------- c:\windows\Replay Media Catcher 2009-01-16 11:39 . 2009-01-16 11:42 <DIR> d-------- c:\program files\Replay Media Catcher 2009-01-16 11:38 . 2009-01-16 11:38 <DIR> d-------- c:\windows\Applian FLV Player 2009-01-16 11:38 . 2009-01-16 11:43 <DIR> d-------- c:\program files\FLV Player 2009-01-14 16:56 . 2008-08-19 18:08 1,435,272 --a------ c:\windows\system32\Flash8.ocx 2009-01-12 13:24 . 2009-01-12 13:25 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\Super-Cow . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-02-01 23:02 --------- d-----w c:\documents and settings\Ronksi\Application Data\Skype 2009-02-01 21:03 --------- d-----w c:\documents and settings\Ronksi\Application Data\skypePM 2009-02-01 21:02 --------- d-----w c:\documents and settings\Ronksi\Application Data\VoozieMaker 2009-02-01 05:57 --------- d-----w c:\program files\a-squared Anti-Malware 2009-01-30 01:06 --------- d-----w c:\documents and settings\Ronksi\Application Data\ICQ 2009-01-29 10:33 --------- d-----w c:\documents and settings\Ronksi\Application Data\Any Video Converter 2009-01-28 23:39 --------- d-----w c:\program files\multiskype 2009-01-28 04:51 --------- d-----w c:\program files\Common Files\Skype 2009-01-28 04:51 --------- d-----w c:\documents and settings\All Users\Application Data\Skype 2009-01-28 04:51 --------- d-----r c:\program files\Skype 2009-01-28 00:12 --------- d-----w c:\documents and settings\All Users\Application Data\Make A Voozie 2009-01-27 20:45 --------- d-----w c:\program files\IncrediGames 2009-01-27 20:36 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-01-23 02:35 --------- d-----w c:\program files\Winamp 2009-01-22 20:24 --------- d-----w c:\program files\Java 2009-01-19 01:10 --------- d-----w c:\program files\Favorite-Games 2009-01-15 01:37 --------- d--h--w c:\program files\InstallShield Installation Information 2009-01-13 07:00 --------- d-----w c:\program files\SA Dictionary 2004 Datacenter 2009-01-12 21:56 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP 2009-01-12 21:23 --------- d-----w c:\program files\Oberon Media 2009-01-12 02:56 --------- d-----w c:\documents and settings\Ronksi\Application Data\Flood Light Games 2009-01-12 02:56 --------- d-----w c:\documents and settings\All Users\Application Data\Flood Light Games 2009-01-09 21:45 --------- d-----w c:\documents and settings\Ronksi\Application Data\Winamp 2008-12-28 02:30 --------- d-----w c:\program files\Common Files\BOONTY Shared 2008-12-16 01:56 --------- d-----w c:\program files\ESET 2008-12-12 02:41 --------- d-----w c:\documents and settings\Ronksi\Application Data\Nokia . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NBJ"="c:\program files\Ahead\Nero BackItUp\NBJ.exe" [2005-10-11 1961984] "Magentic"="c:\progra~1\Magentic\bin\Magentic.exe" [2008-05-19 832824] "BitComet"="c:\program files\BitComet\BitComet.exe" [2005-09-07 2600960] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PCSync2.exe" [2008-03-26 1232896] "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 6\PCSuite.exe" [2008-04-16 1079808] "ICQ"="c:\program files\ICQ6\ICQ.exe" [2008-09-01 173304] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "msnmsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-07 21633320] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-12-13 7323648] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-12-13 86016] "DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2006-11-12 157592] "Make A Voozie"="c:\documents and settings\All Users\Application Data\Make A Voozie\VoozieMaker.exe" [2008-02-20 64000] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "VMSnap3"="c:\windows\VMSnap3.EXE" [2006-08-30 49152] "Domino"="c:\windows\Domino.EXE" [2006-06-28 49152] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2007-12-21 1443072] "a-squared"="c:\program files\a-squared Anti-Malware\a2guard.exe" [2009-01-27 2784912] "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-04-01 36352] "nwiz"="nwiz.exe" [2005-12-13 c:\windows\system32\nwiz.exe] "SkyTel"="SkyTel.EXE" [2006-05-16 c:\windows\SkyTel.exe] "RTHDCPL"="RTHDCPL.EXE" [2006-06-27 c:\windows\RTHDCPL.exe] c:\documents and settings\All Users\Start Menu\Programs\Startup\ Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [12/13/2004 5:44:06 PM 29696] FlexType 2K.lnk - c:\windows\Datecs\Flex2K.exe [8/8/2008 10:32:40 PM 145920] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB] 2001-12-20 22:34 24576 c:\program files\AlienGUIse\fastload.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Authentication Packages REG_MULTI_SZ msv1_0 nwprovau [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinSpooler32] @="Service" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\BitComet\\BitComet.exe"= "c:\\Program Files\\ICQ6\\ICQ.exe"= "c:\\Program Files\\Magentic\\bin\\magentic_install.exe"= "c:\\Program Files\\Magentic\\bin\\Magentic.exe"= "c:\\Program Files\\Magentic\\bin\\MgImp.exe"= "c:\\Program Files\\Magentic\\bin\\MgApp.exe"= "c:\\WINDOWS\\ServicePackFiles\\i386\\tcptest.exe"= "c:\\WINDOWS\\system32\\mmc.exe"= "c:\\Program Files\\SopCast\\SopCast.exe"= "c:\\Program Files\\SopCast\\adv\\SopAdver.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "c:\\Program Files\\MSN Messenger\\livecall.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [12/21/2007 7:21:56 AM 33800] R3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys [6/9/2008 9:33:20 PM 428160] R4 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [12/21/2007 7:21:16 AM 468224] R4 NwSapAgent;SAP Agent;c:\windows\system32\svchost.exe -k netsvcs [8/3/2004 3:56:58 PM 14336] S4 WinSpooler32;Windows System Memory Manager;"c:\windows\system\smsc32.exe" --> c:\windows\system\smsc32.exe [?] . Contents of the 'Scheduled Tasks' folder 2009-02-01 c:\windows\Tasks\User_Feed_Synchronization-{1A65FC88-7467-47E1-B9DD-5D27F270F940}.job - c:\windows\system32\msfeedssync.exe [2007-08-13 18:36] . . ------- Supplementary Scan ------- . uStart Page = hxxp://mystart.magentic.com/english/ uInternet Connection Wizard,ShellNext = iexplore IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: {22A2CADE-1F4B-4E19-BC3F-24888EE7672D} = 84.238.220.1 DPF: {6CE31B8D-8340-4DBD-B78E-BF59620924DC} - hxxp://www.quest3d.com/webplugin/download/quest3dactivex2.cab DPF: {EAC139A9-D22D-4C29-8D1C-252BE63750F9} - hxxp://piclens.com/shared/plinstll.cab FF - ProfilePath - c:\documents and settings\Ronksi\Application Data\Mozilla\Firefox\Profiles\tb3x7mbd.default\ FF - prefs.js: browser.search.selectedEngine - Google.bg FF - prefs.js: browser.startup.homepage - hxxp://mystart.magentic.com/ FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-02-01 15:02:15 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(692) c:\program files\AlienGUIse\fastload.dll . ------------------------ Other Running Processes ------------------------ . c:\program files\a-squared Anti-Malware\a2service.exe c:\windows\ATKKBService.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\nvsvc32.exe c:\windows\system32\wscntfy.exe c:\program files\PC Connectivity Solution\ServiceLayer.exe c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe c:\program files\PC Connectivity Solution\Transports\NclIrSrv.exe c:\program files\Common Files\Nokia\MPAPI\MPAPI3s.exe c:\program files\AlienGUIse\AlienwareDock\ObjectDock.exe c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe c:\program files\MSN Messenger\usnsvc.exe . ************************************************************************** . Completion time: 2009-02-01 15:04:38 - machine was rebooted ComboFix-quarantined-files.txt 2009-02-01 23:04:17 ComboFix2.txt 2009-02-01 21:06:16 Pre-Run: 5,464,420,352 bytes free Post-Run: 5,464,326,144 bytes free 208 --- E O F --- 2008-06-08 10:07:01 Malwarebytes' Anti-Malware 1.33 Database version: 1712 Windows 5.1.2600 Service Pack 3 2009-02-01 15:11:12 mbam-log-2009-02-01 (15-11-12).txt Scan type: Quick Scan Objects scanned: 50873 Time elapsed: 2 minute(s), 7 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 12 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 2 Files Infected: 17 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWay) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\WINDOWS\RSM (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\Program Files\Real Spy Monitor (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. Files Infected: C:\WINDOWS\RSM\1.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\10.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\11.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\12.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\13.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\2.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\3.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\4.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\5.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\6.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\7.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\8.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\9.jpg (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\Filelog.txt (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\Photo.txt (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\ProgramEnd.txt (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully. C:\WINDOWS\RSM\Title.txt (Spyware.RealSpyMonitor) -> Quarantined and deleted successfully.

ами сладур аз тая програма я нямам аз имам a-squared Anti-Malware и нямам представа от къде да го намеря това което ти ми пускаш ако знаеш от къде да я сваля ок ама аз даже не съм я виждала до сега

ок до тук вси1ко ми е ясно само не мога да намеря това MalwareBytes къде се намира а на мене malware-a ми е на бг ако е от самата програма да вляза ок ама иначе не мога да зацепя къде да търся тфа MalwareBytes нали съм индианец и малко бавно става с мене .... ако ти се занимава ако искаш пиши на скайп че май там по-бързичко ще стане работата още веднъж благодаря че ми помагаш

ComboFix 09-01-31.01 - Ronksi 2009-02-01 12:56:23.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.1023.520 [GMT -8:00] Running from: c:\documents and settings\Ronksi\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\Ronksi\Desktop\CFScript.txt AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! FILE :: C:\found.000 c:\windows\system\smsc32.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system\smsc32.exe c:\windows\system32\drivers\sysdrv32.sys c:\windows\system32\sysmgr.exe c:\windows\temp\50.exe . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_SYSDRV32 -------\Legacy_WINSPOOLER32 -------\Service_sysdrv32 -------\Service_WinSpooler32 ((((((((((((((((((((((((( Files Created from 2009-01-01 to 2009-02-01 ))))))))))))))))))))))))))))))) . 2009-02-01 06:30 . 2009-02-01 06:30 102,632 --a------ c:\windows\system32\msvcrt2.dll 2009-01-28 20:02 . 2009-01-28 20:02 <DIR> d-------- c:\program files\Sagasoft 2009-01-27 18:26 . 2009-01-27 20:03 <DIR> d-------- c:\program files\MSN Messenger 2009-01-27 17:17 . 2009-01-27 17:30 <DIR> d-------- c:\documents and settings\Ronksi\Contacts 2009-01-27 16:31 . 2009-01-27 16:32 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\MSNInstaller 2009-01-27 15:52 . 2009-01-27 15:52 <DIR> d-------- c:\program files\Common Files\Windows Live 2009-01-27 13:35 . 2009-01-27 13:35 <DIR> d--hs---- C:\found.000 2009-01-27 13:30 . 2009-01-27 13:30 <DIR> d-------- c:\program files\Adobe Media Player 2009-01-22 15:37 . 2009-02-01 12:54 <DIR> d-------- c:\documents and settings\multiskype.RONKSI\Application Data\Skype 2009-01-22 15:37 . 2009-01-27 13:32 <DIR> d-------- c:\documents and settings\multiskype.RONKSI 2009-01-22 12:43 . 2008-10-16 12:38 459,264 -----c--- c:\windows\system32\dllcache\msfeeds.dll 2009-01-22 12:43 . 2008-10-16 12:38 383,488 -----c--- c:\windows\system32\dllcache\ieapfltr.dll 2009-01-22 12:43 . 2008-10-16 12:38 267,776 -----c--- c:\windows\system32\dllcache\iertutil.dll 2009-01-22 12:43 . 2008-10-16 12:38 63,488 -----c--- c:\windows\system32\dllcache\icardie.dll 2009-01-22 12:43 . 2008-10-16 12:38 52,224 -----c--- c:\windows\system32\dllcache\msfeedsbs.dll 2009-01-22 12:43 . 2008-10-16 05:11 13,824 -----c--- c:\windows\system32\dllcache\ieudinit.exe 2009-01-22 12:42 . 2008-10-16 12:38 6,066,176 -----c--- c:\windows\system32\dllcache\ieframe.dll 2009-01-22 12:42 . 2007-04-17 01:32 2,455,488 -----c--- c:\windows\system32\dllcache\ieapfltr.dat 2009-01-22 12:42 . 2007-03-07 21:10 991,232 -----c--- c:\windows\system32\dllcache\ieframe.dll.mui 2009-01-22 12:25 . 2009-01-22 12:24 410,984 --a------ c:\windows\system32\deploytk.dll 2009-01-17 17:41 . 2009-01-17 17:41 <DIR> d-------- c:\program files\Webteh 2009-01-17 17:41 . 2009-01-17 17:43 <DIR> d-------- c:\program files\BS.Player ControlBar 2009-01-17 17:41 . 2009-01-17 17:41 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\BSplayer Pro 2009-01-17 17:41 . 2009-01-17 20:23 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\BSplayer 2009-01-16 11:41 . 2009-01-16 11:41 323,584 --a------ c:\windows\system32\AUDIOGENIE2.DLL 2009-01-16 11:40 . 2009-01-16 11:40 <DIR> d-------- c:\windows\Freecorder Toolbar 2009-01-16 11:39 . 2009-01-16 11:39 <DIR> d-------- c:\windows\Replay Media Catcher 2009-01-16 11:39 . 2009-01-16 11:42 <DIR> d-------- c:\program files\Replay Media Catcher 2009-01-16 11:38 . 2009-01-16 11:38 <DIR> d-------- c:\windows\Applian FLV Player 2009-01-16 11:38 . 2009-01-16 11:43 <DIR> d-------- c:\program files\FLV Player 2009-01-14 16:56 . 2008-08-19 18:08 1,435,272 --a------ c:\windows\system32\Flash8.ocx 2009-01-12 13:24 . 2009-01-12 13:25 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\Super-Cow . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-02-01 21:03 --------- d-----w c:\documents and settings\Ronksi\Application Data\skypePM 2009-02-01 21:03 --------- d-----w c:\documents and settings\Ronksi\Application Data\Skype 2009-02-01 21:02 --------- d-----w c:\documents and settings\Ronksi\Application Data\VoozieMaker 2009-02-01 05:57 --------- d-----w c:\program files\a-squared Anti-Malware 2009-01-30 01:06 --------- d-----w c:\documents and settings\Ronksi\Application Data\ICQ 2009-01-29 10:33 --------- d-----w c:\documents and settings\Ronksi\Application Data\Any Video Converter 2009-01-28 23:39 --------- d-----w c:\program files\multiskype 2009-01-28 04:51 --------- d-----w c:\program files\Common Files\Skype 2009-01-28 04:51 --------- d-----w c:\documents and settings\All Users\Application Data\Skype 2009-01-28 04:51 --------- d-----r c:\program files\Skype 2009-01-28 00:12 --------- d-----w c:\documents and settings\All Users\Application Data\Make A Voozie 2009-01-27 20:45 --------- d-----w c:\program files\IncrediGames 2009-01-27 20:36 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-01-23 02:35 --------- d-----w c:\program files\Winamp 2009-01-22 20:24 --------- d-----w c:\program files\Java 2009-01-19 01:10 --------- d-----w c:\program files\Favorite-Games 2009-01-15 01:37 --------- d--h--w c:\program files\InstallShield Installation Information 2009-01-13 07:00 --------- d-----w c:\program files\SA Dictionary 2004 Datacenter 2009-01-12 21:56 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP 2009-01-12 21:23 --------- d-----w c:\program files\Oberon Media 2009-01-12 02:56 --------- d-----w c:\documents and settings\Ronksi\Application Data\Flood Light Games 2009-01-12 02:56 --------- d-----w c:\documents and settings\All Users\Application Data\Flood Light Games 2009-01-09 21:45 --------- d-----w c:\documents and settings\Ronksi\Application Data\Winamp 2008-12-28 02:30 --------- d-----w c:\program files\Common Files\BOONTY Shared 2008-12-16 01:56 --------- d-----w c:\program files\ESET 2008-12-12 02:41 --------- d-----w c:\documents and settings\Ronksi\Application Data\Nokia . ((((((((((((((((((((((((((((((((((((((( System Restore ))))))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\IEToolbar\Lubimi toolbar\clearhist.exe 2007-09-19 03:50 53248 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149654.exe c:\program files\IEToolbar\Lubimi toolbar\Lubimitoolbar_v2.0.exe 2009-01-22 16:25 937826 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149656.exe c:\program files\IEToolbar\Lubimi toolbar\new toolbar.bat 2009-01-12 17:40 408 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149657.bat c:\program files\IEToolbar\Lubimi toolbar\newtoolbar.bat 2009-01-13 09:58 421 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149658.bat c:\program files\IEToolbar\Lubimi toolbar\tbhelper.dll 2007-10-18 05:51 339968 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149659.dll c:\program files\IEToolbar\Lubimi toolbar\toolbar.dll 2007-10-18 05:51 2265088 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149660.dll c:\program files\IEToolbar\Lubimi toolbar\uninstall.exe 2007-09-19 03:50 49152 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149661.exe c:\program files\IEToolbar\Lubimi toolbar\update.exe 2007-09-28 06:20 77824 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149662.exe c:\windows\system\smsc32.exe 2009-01-30 23:03 25600 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149663.exe 2009-02-01 06:30 25600 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP288\A0150733.exe c:\windows\system32\drivers\sysdrv32.sys 2009-01-30 23:03 11656 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149655.sys 2009-02-01 06:30 11656 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP288\A0150734.sys c:\windows\system32\hellfire.exe 2008-12-07 20:15 0 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149665.exe c:\windows\system32\push.exe 2009-01-03 18:45 0 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149666.exe c:\windows\system32\quicktime.exe 2008-12-09 23:01 0 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149667.exe c:\windows\system32\sysmgr.exe 2009-02-01 06:30 65015 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP288\A0150735.exe c:\windows\system32\wt.exe 2008-12-01 20:42 0 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149668.exe c:\windows\system32\y.exe 2008-11-23 10:19 0 {2832C248-D63B-46EC-9930-4AC49DF0F0E3}\RP287\A0149669.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NBJ"="c:\program files\Ahead\Nero BackItUp\NBJ.exe" [2005-10-11 1961984] "Magentic"="c:\progra~1\Magentic\bin\Magentic.exe" [2008-05-19 832824] "BitComet"="c:\program files\BitComet\BitComet.exe" [2005-09-07 2600960] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PCSync2.exe" [2008-03-26 1232896] "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 6\PCSuite.exe" [2008-04-16 1079808] "ICQ"="c:\program files\ICQ6\ICQ.exe" [2008-09-01 173304] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "msnmsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-07 21633320] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-12-13 7323648] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-12-13 86016] "DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2006-11-12 157592] "Make A Voozie"="c:\documents and settings\All Users\Application Data\Make A Voozie\VoozieMaker.exe" [2008-02-20 64000] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "VMSnap3"="c:\windows\VMSnap3.EXE" [2006-08-30 49152] "Domino"="c:\windows\Domino.EXE" [2006-06-28 49152] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2007-12-21 1443072] "a-squared"="c:\program files\a-squared Anti-Malware\a2guard.exe" [2009-01-27 2784912] "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-04-01 36352] "nwiz"="nwiz.exe" [2005-12-13 c:\windows\system32\nwiz.exe] "SkyTel"="SkyTel.EXE" [2006-05-16 c:\windows\SkyTel.exe] "RTHDCPL"="RTHDCPL.EXE" [2006-06-27 c:\windows\RTHDCPL.exe] c:\documents and settings\All Users\Start Menu\Programs\Startup\ Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [12/13/2004 5:44:06 PM 29696] FlexType 2K.lnk - c:\windows\Datecs\Flex2K.exe [8/8/2008 10:32:40 PM 145920] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB] 2001-12-20 22:34 24576 c:\program files\AlienGUIse\fastload.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Authentication Packages REG_MULTI_SZ msv1_0 nwprovau [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\BitComet\\BitComet.exe"= "c:\\Program Files\\ICQ6\\ICQ.exe"= "c:\\Program Files\\Magentic\\bin\\magentic_install.exe"= "c:\\Program Files\\Magentic\\bin\\Magentic.exe"= "c:\\Program Files\\Magentic\\bin\\MgImp.exe"= "c:\\Program Files\\Magentic\\bin\\MgApp.exe"= "c:\\WINDOWS\\ServicePackFiles\\i386\\tcptest.exe"= "c:\\WINDOWS\\system32\\mmc.exe"= "c:\\Program Files\\SopCast\\SopCast.exe"= "c:\\Program Files\\SopCast\\adv\\SopAdver.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "c:\\Program Files\\MSN Messenger\\livecall.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [12/21/2007 7:21:56 AM 33800] R3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys [6/9/2008 9:33:20 PM 428160] R4 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [12/21/2007 7:21:16 AM 468224] R4 NwSapAgent;SAP Agent;c:\windows\system32\svchost.exe -k netsvcs [8/3/2004 3:56:58 PM 14336] . Contents of the 'Scheduled Tasks' folder 2009-02-01 c:\windows\Tasks\User_Feed_Synchronization-{1A65FC88-7467-47E1-B9DD-5D27F270F940}.job - c:\windows\system32\msfeedssync.exe [2007-08-13 18:36] . - - - - ORPHANS REMOVED - - - - HKLM-Run-Microsoft® System Manager - c:\windows\system32\sysmgr.exe . ------- Supplementary Scan ------- . uStart Page = hxxp://mystart.magentic.com/english/ uInternet Connection Wizard,ShellNext = iexplore IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: {22A2CADE-1F4B-4E19-BC3F-24888EE7672D} = 84.238.220.1 DPF: {6CE31B8D-8340-4DBD-B78E-BF59620924DC} - hxxp://www.quest3d.com/webplugin/download/quest3dactivex2.cab DPF: {EAC139A9-D22D-4C29-8D1C-252BE63750F9} - hxxp://piclens.com/shared/plinstll.cab FF - ProfilePath - c:\documents and settings\Ronksi\Application Data\Mozilla\Firefox\Profiles\tb3x7mbd.default\ FF - prefs.js: browser.search.selectedEngine - Google.bg FF - prefs.js: browser.startup.homepage - hxxp://mystart.magentic.com/ FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-02-01 13:03:02 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... c:\windows\TEMP\HTT50.tmp 2141 bytes scan completed successfully hidden files: 1 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(700) c:\program files\AlienGUIse\fastload.dll . ------------------------ Other Running Processes ------------------------ . c:\program files\a-squared Anti-Malware\a2service.exe c:\windows\ATKKBService.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\nvsvc32.exe c:\windows\system32\wscntfy.exe c:\program files\PC Connectivity Solution\ServiceLayer.exe c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe c:\program files\PC Connectivity Solution\Transports\NclIrSrv.exe c:\program files\Common Files\Nokia\MPAPI\MPAPI3s.exe c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe c:\program files\MSN Messenger\usnsvc.exe . ************************************************************************** . Completion time: 2009-02-01 13:06:14 - machine was rebooted ComboFix-quarantined-files.txt 2009-02-01 21:05:58 Pre-Run: 5,371,645,952 bytes free Post-Run: 5,541,007,360 bytes free 243 --- E O F --- 2008-06-08 10:07:01 ок направих го и това обаче пак иконата на експлорера както ти бях написала се смени с друга и като цукна на старата ми излиза това което излиза като цукнеш пропъртис не знам защо така става и пак прозорците и старт лентата ми се прецакаха и станаха обикновенни .... хмм а и преди малко гледах филм и НОД-а пак показа тфа с цифрите което първоначално бях пуснала което наподобява ИП явно с това което правиме проблема не се отстранява И ако може да ми обясниш какво ми трие секи път ще съм ти благодарна щото малко ме притеснява така като не знам какво става

ок направих и това само не мога да разберя защо прозорците и старт лентата са ми като обикновенни в смисъл сичко се промени тфа яко неща изтри а и като цукна на иконката на интернет експлорера ми се появява прозореца които излиза като цъкнеш пропъртис а не ми зарежда експлорера някак си нещата се преебаха дано няма други поражения за сега това открих

ComboFix 09-01-31.01 - Ronksi 2009-01-31 23:25:36.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.1023.538 [GMT -8:00] Running from: c:\documents and settings\Ronksi\desktop\combofix.exe Command switches used :: /killall AV: ESET NOD32 Antivirus 3.0 *On-access scanning enabled* (Updated) * Created a new restore point * Resident AV is active WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\IEToolbar c:\program files\IEToolbar\Lubimi toolbar\534750-3-a.jpg c:\program files\IEToolbar\Lubimi toolbar\basis.xml c:\program files\IEToolbar\Lubimi toolbar\clearhist.exe c:\program files\IEToolbar\Lubimi toolbar\icons.bmp c:\program files\IEToolbar\Lubimi toolbar\info.txt c:\program files\IEToolbar\Lubimi toolbar\logo.gif c:\program files\IEToolbar\Lubimi toolbar\logotoolbar.gif c:\program files\IEToolbar\Lubimi toolbar\Lubimitoolbar_v2.0.exe c:\program files\IEToolbar\Lubimi toolbar\new toolbar.bat c:\program files\IEToolbar\Lubimi toolbar\newtoolbar.bat c:\program files\IEToolbar\Lubimi toolbar\tbhelper.dll c:\program files\IEToolbar\Lubimi toolbar\tbs_include_script_008582.js c:\program files\IEToolbar\Lubimi toolbar\tbs_include_script_014629.js c:\program files\IEToolbar\Lubimi toolbar\tbs_include_script_025256.js c:\program files\IEToolbar\Lubimi toolbar\tbs_include_script_031343.js c:\program files\IEToolbar\Lubimi toolbar\toolbar.crc c:\program files\IEToolbar\Lubimi toolbar\toolbar.dll c:\program files\IEToolbar\Lubimi toolbar\toplogo.gif c:\program files\IEToolbar\Lubimi toolbar\uninstall.exe c:\program files\IEToolbar\Lubimi toolbar\update.exe c:\program files\IEToolbar\Lubimi toolbar\version.txt c:\program files\IEToolbar\Lubimi toolbar\your_logo.png c:\windows\IE4 Error Log.txt c:\windows\system\smsc32.exe c:\windows\system32\drivers\sysdrv32.sys c:\windows\system32\hellfire.exe c:\windows\system32\i c:\windows\system32\push.exe c:\windows\system32\quicktime.exe c:\windows\system32\wt.exe c:\windows\system32\y.exe . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_SYSDRV32 -------\Service_sysdrv32 ((((((((((((((((((((((((( Files Created from 2009-01-01 to 2009-02-01 ))))))))))))))))))))))))))))))) . 2009-01-28 20:02 . 2009-01-28 20:02 <DIR> d-------- c:\program files\Sagasoft 2009-01-27 18:26 . 2009-01-27 20:03 <DIR> d-------- c:\program files\MSN Messenger 2009-01-27 17:17 . 2009-01-27 17:30 <DIR> d-------- c:\documents and settings\Ronksi\Contacts 2009-01-27 16:31 . 2009-01-27 16:32 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\MSNInstaller 2009-01-27 15:52 . 2009-01-27 15:52 <DIR> d-------- c:\program files\Common Files\Windows Live 2009-01-27 13:35 . 2009-01-27 13:35 <DIR> d--hs---- C:\found.000 2009-01-27 13:30 . 2009-01-27 13:30 <DIR> d-------- c:\program files\Adobe Media Player 2009-01-22 15:37 . 2009-01-31 22:34 <DIR> d-------- c:\documents and settings\multiskype.RONKSI\Application Data\Skype 2009-01-22 15:37 . 2009-01-27 13:32 <DIR> d-------- c:\documents and settings\multiskype.RONKSI 2009-01-22 12:43 . 2008-10-16 12:38 459,264 -----c--- c:\windows\system32\dllcache\msfeeds.dll 2009-01-22 12:43 . 2008-10-16 12:38 383,488 -----c--- c:\windows\system32\dllcache\ieapfltr.dll 2009-01-22 12:43 . 2008-10-16 12:38 267,776 -----c--- c:\windows\system32\dllcache\iertutil.dll 2009-01-22 12:43 . 2008-10-16 12:38 63,488 -----c--- c:\windows\system32\dllcache\icardie.dll 2009-01-22 12:43 . 2008-10-16 12:38 52,224 -----c--- c:\windows\system32\dllcache\msfeedsbs.dll 2009-01-22 12:43 . 2008-10-16 05:11 13,824 -----c--- c:\windows\system32\dllcache\ieudinit.exe 2009-01-22 12:42 . 2008-10-16 12:38 6,066,176 -----c--- c:\windows\system32\dllcache\ieframe.dll 2009-01-22 12:42 . 2007-04-17 01:32 2,455,488 -----c--- c:\windows\system32\dllcache\ieapfltr.dat 2009-01-22 12:42 . 2007-03-07 21:10 991,232 -----c--- c:\windows\system32\dllcache\ieframe.dll.mui 2009-01-22 12:25 . 2009-01-22 12:24 410,984 --a------ c:\windows\system32\deploytk.dll 2009-01-17 17:41 . 2009-01-17 17:41 <DIR> d-------- c:\program files\Webteh 2009-01-17 17:41 . 2009-01-17 17:43 <DIR> d-------- c:\program files\BS.Player ControlBar 2009-01-17 17:41 . 2009-01-17 17:41 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\BSplayer Pro 2009-01-17 17:41 . 2009-01-17 20:23 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\BSplayer 2009-01-16 11:41 . 2009-01-16 11:41 323,584 --a------ c:\windows\system32\AUDIOGENIE2.DLL 2009-01-16 11:40 . 2009-01-16 11:40 <DIR> d-------- c:\windows\Freecorder Toolbar 2009-01-16 11:39 . 2009-01-16 11:39 <DIR> d-------- c:\windows\Replay Media Catcher 2009-01-16 11:39 . 2009-01-16 11:42 <DIR> d-------- c:\program files\Replay Media Catcher 2009-01-16 11:38 . 2009-01-16 11:38 <DIR> d-------- c:\windows\Applian FLV Player 2009-01-16 11:38 . 2009-01-16 11:43 <DIR> d-------- c:\program files\FLV Player 2009-01-14 16:56 . 2008-08-19 18:08 1,435,272 --a------ c:\windows\system32\Flash8.ocx 2009-01-12 13:24 . 2009-01-12 13:25 <DIR> d-------- c:\documents and settings\Ronksi\Application Data\Super-Cow . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-02-01 07:34 --------- d-----w c:\documents and settings\Ronksi\Application Data\skypePM 2009-02-01 07:34 --------- d-----w c:\documents and settings\Ronksi\Application Data\Skype 2009-02-01 07:32 --------- d-----w c:\documents and settings\Ronksi\Application Data\VoozieMaker 2009-02-01 05:57 --------- d-----w c:\program files\a-squared Anti-Malware 2009-01-30 01:06 --------- d-----w c:\documents and settings\Ronksi\Application Data\ICQ 2009-01-29 10:33 --------- d-----w c:\documents and settings\Ronksi\Application Data\Any Video Converter 2009-01-28 23:39 --------- d-----w c:\program files\multiskype 2009-01-28 04:51 --------- d-----w c:\program files\Common Files\Skype 2009-01-28 04:51 --------- d-----w c:\documents and settings\All Users\Application Data\Skype 2009-01-28 04:51 --------- d-----r c:\program files\Skype 2009-01-28 00:12 --------- d-----w c:\documents and settings\All Users\Application Data\Make A Voozie 2009-01-27 20:45 --------- d-----w c:\program files\IncrediGames 2009-01-27 20:36 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-01-23 02:35 --------- d-----w c:\program files\Winamp 2009-01-22 20:24 --------- d-----w c:\program files\Java 2009-01-19 01:10 --------- d-----w c:\program files\Favorite-Games 2009-01-15 01:37 --------- d--h--w c:\program files\InstallShield Installation Information 2009-01-13 07:00 --------- d-----w c:\program files\SA Dictionary 2004 Datacenter 2009-01-12 21:56 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP 2009-01-12 21:23 --------- d-----w c:\program files\Oberon Media 2009-01-12 02:56 --------- d-----w c:\documents and settings\Ronksi\Application Data\Flood Light Games 2009-01-12 02:56 --------- d-----w c:\documents and settings\All Users\Application Data\Flood Light Games 2009-01-09 21:45 --------- d-----w c:\documents and settings\Ronksi\Application Data\Winamp 2008-12-28 02:30 --------- d-----w c:\program files\Common Files\BOONTY Shared 2008-12-16 01:56 --------- d-----w c:\program files\ESET 2008-12-12 02:41 --------- d-----w c:\documents and settings\Ronksi\Application Data\Nokia . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NBJ"="c:\program files\Ahead\Nero BackItUp\NBJ.exe" [2005-10-11 1961984] "Magentic"="c:\progra~1\Magentic\bin\Magentic.exe" [2008-05-19 832824] "BitComet"="c:\program files\BitComet\BitComet.exe" [2005-09-07 2600960] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PCSync2.exe" [2008-03-26 1232896] "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 6\PCSuite.exe" [2008-04-16 1079808] "ICQ"="c:\program files\ICQ6\ICQ.exe" [2008-09-01 173304] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "msnmsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-07 21633320] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-12-13 7323648] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-12-13 86016] "DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2006-11-12 157592] "Make A Voozie"="c:\documents and settings\All Users\Application Data\Make A Voozie\VoozieMaker.exe" [2008-02-20 64000] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "VMSnap3"="c:\windows\VMSnap3.EXE" [2006-08-30 49152] "Domino"="c:\windows\Domino.EXE" [2006-06-28 49152] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2007-12-21 1443072] "a-squared"="c:\program files\a-squared Anti-Malware\a2guard.exe" [2009-01-27 2784912] "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-04-01 36352] "nwiz"="nwiz.exe" [2005-12-13 c:\windows\system32\nwiz.exe] "SkyTel"="SkyTel.EXE" [2006-05-16 c:\windows\SkyTel.exe] "RTHDCPL"="RTHDCPL.EXE" [2006-06-27 c:\windows\RTHDCPL.exe] c:\documents and settings\All Users\Start Menu\Programs\Startup\ Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [12/13/2004 5:44:06 PM 29696] FlexType 2K.lnk - c:\windows\Datecs\Flex2K.exe [8/8/2008 10:32:40 PM 145920] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB] 2001-12-20 22:34 24576 c:\program files\AlienGUIse\fastload.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Authentication Packages REG_MULTI_SZ msv1_0 nwprovau [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinSpooler32] @="Service" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\BitComet\\BitComet.exe"= "c:\\Program Files\\ICQ6\\ICQ.exe"= "c:\\Program Files\\Magentic\\bin\\magentic_install.exe"= "c:\\Program Files\\Magentic\\bin\\Magentic.exe"= "c:\\Program Files\\Magentic\\bin\\MgImp.exe"= "c:\\Program Files\\Magentic\\bin\\MgApp.exe"= "c:\\WINDOWS\\ServicePackFiles\\i386\\tcptest.exe"= "c:\\WINDOWS\\system32\\mmc.exe"= "c:\\Program Files\\SopCast\\SopCast.exe"= "c:\\Program Files\\SopCast\\adv\\SopAdver.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "c:\\Program Files\\MSN Messenger\\livecall.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [12/21/2007 7:21:56 AM 33800] R3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys [6/9/2008 9:33:20 PM 428160] R4 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [12/21/2007 7:21:16 AM 468224] R4 NwSapAgent;SAP Agent;c:\windows\system32\svchost.exe -k netsvcs [8/3/2004 3:56:58 PM 14336] S4 WinSpooler32;Windows System Memory Manager;"c:\windows\system\smsc32.exe" --> c:\windows\system\smsc32.exe [?] . Contents of the 'Scheduled Tasks' folder 2009-01-31 c:\windows\Tasks\User_Feed_Synchronization-{1A65FC88-7467-47E1-B9DD-5D27F270F940}.job - c:\windows\system32\msfeedssync.exe [2007-08-13 18:36] . - - - - ORPHANS REMOVED - - - - BHO-{5B191525-F44B-4D90-AE51-B4A77BEF55E7} - c:\program files\IEToolbar\Lubimi toolbar\toolbar.dll Toolbar-{3E96C5E8-6726-4FFE-BA3D-DF8285C39B7D} - c:\program files\IEToolbar\Lubimi toolbar\toolbar.dll WebBrowser-{F5513F84-F2CE-4B1F-9BA7-799EE30E86C7} - (no file) WebBrowser-{3E96C5E8-6726-4FFE-BA3D-DF8285C39B7D} - c:\program files\IEToolbar\Lubimi toolbar\toolbar.dll HKCU-Run-SpybotSD TeaTimer - c:\program files\Spybot - Search & Destroy\TeaTimer.exe HKCU-Run-SightSpeed - c:\program files\SightSpeed\SightSpeed.exe HKCU-Run-Orb - c:\program files\Winamp Remote\bin\OrbTray.exe HKCU-Run-SMS by Jeko Ianev - c:\program files\sms\sms.exe HKCU-Run-brastk - c:\windows\system32\brastk.exe HKLM-Run-PCSuiteTrayApplication - c:\progra~1\Nokia\NOKIAP~1\LAUNCH~1.EXE HKLM-Run-BigDog303 - c:\windows\VM303_STI.EXE . ------- Supplementary Scan ------- . uInternet Connection Wizard,ShellNext = iexplore IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: {22A2CADE-1F4B-4E19-BC3F-24888EE7672D} = 84.238.220.1 DPF: {6CE31B8D-8340-4DBD-B78E-BF59620924DC} - hxxp://www.quest3d.com/webplugin/download/quest3dactivex2.cab DPF: {EAC139A9-D22D-4C29-8D1C-252BE63750F9} - hxxp://piclens.com/shared/plinstll.cab FF - ProfilePath - c:\documents and settings\Ronksi\Application Data\Mozilla\Firefox\Profiles\tb3x7mbd.default\ FF - prefs.js: browser.search.selectedEngine - Google.bg FF - prefs.js: browser.startup.homepage - hxxp://mystart.magentic.com/ FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-31 23:33:00 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run BigDog303 = c:\windows\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)????????????????0?????????@?????????????? scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\S-1-5-21-1343024091-261903793-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID] @Denied: (Full) (LocalSystem) . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(692) c:\program files\AlienGUIse\fastload.dll . ------------------------ Other Running Processes ------------------------ . c:\program files\a-squared Anti-Malware\a2service.exe c:\windows\ATKKBService.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\nvsvc32.exe c:\windows\system32\wscntfy.exe c:\program files\Magentic\bin\MgApp.exe c:\program files\PC Connectivity Solution\ServiceLayer.exe c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe c:\program files\AlienGUIse\AlienwareDock\ObjectDock.exe c:\program files\PC Connectivity Solution\Transports\NclIrSrv.exe c:\program files\Common Files\Nokia\MPAPI\MPAPI3s.exe c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe c:\program files\Skype\Plugin Manager\skypePM.exe c:\program files\MSN Messenger\usnsvc.exe . ************************************************************************** . Completion time: 2009-01-31 23:36:48 - machine was rebooted ComboFix-quarantined-files.txt 2009-02-01 07:36:30 Pre-Run: 502 272 000 bytes free Post-Run: 5,461,676,032 bytes free 249 --- E O F --- 2008-06-08 10:07:01

даммм направих всичко и сега какво ? Сори че трябва да ми се обяснява като на индианец

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:46:07, on 31.1.2009 г. Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\a-squared Anti-Malware\a2service.exe C:\WINDOWS\ATKKBService.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\alg.exe C:\Program Files\AlienGUIse\wbload.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\VMSnap3.EXE C:\WINDOWS\Domino.EXE C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\a-squared Anti-Malware\a2guard.exe C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\BitComet\BitComet.exe C:\Program Files\ICQ6\ICQ.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\WINDOWS\Datecs\Flex2K.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Skype\Phone\skype.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system\smsc32.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\HijackThis\HijackThis\HijackThis.exe C:\WINDOWS\system32\wbem\wmiprvse.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.magentic.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll (file missing) O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll (file missing) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~2\SDHelper.dll (file missing) O2 - BHO: TBSB07281 - {5B191525-F44B-4D90-AE51-B4A77BEF55E7} - C:\Program Files\IEToolbar\Lubimi toolbar\toolbar.dll O2 - BHO: (no name) - {75727671-A812-4462-BCAC-92D87BFDD430} - (no file) O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: (no name) - {EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA} - (no file) O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll O3 - Toolbar: Lubimi toolbar - {3E96C5E8-6726-4FFE-BA3D-DF8285C39B7D} - C:\Program Files\IEToolbar\Lubimi toolbar\toolbar.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [skyTel] SkyTel.EXE O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [Make A Voozie] "C:\Documents and Settings\All Users\Application Data\Make A Voozie\VoozieMaker.exe" /startup O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.EXE O4 - HKLM\..\Run: [bigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe" /d=60 O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF O4 - HKLM\..\Run: [brastk] C:\WINDOWS\system32\brastk.exe O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [bitComet] "C:\Program Files\BitComet\BitComet.exe" O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe" /NoDialog O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray O4 - HKCU\..\Run: [sightSpeed] "C:\Program Files\SightSpeed\SightSpeed.exe -minimized" O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background O4 - HKCU\..\Run: [iCQ] "C:\Program Files\ICQ6\ICQ.exe" silent O4 - HKCU\..\Run: [iCQUpdater] "C:\DOCUME~1\Ronksi\LOCALS~1\Temp\IcqUpdater.exe" -update 1828 "C:\PROGRA~1\ICQ6\updates" "C:\PROGRA~1\ICQ6" "C:\PROGRA~1\ICQ6\ICQ.exe noupdater=1" /autorun O4 - HKCU\..\Run: [sMS by Jeko Ianev] C:\Program Files\sms\sms.exe O4 - HKCU\..\Run: [brastk] C:\WINDOWS\system32\brastk.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKUS\S-1-5-21-1343024091-261903793-725345543-1020\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'multiskype') O4 - Startup: Adobe Media Player.lnk = C:\Program Files\Adobe Media Player\Adobe Media Player.exe O4 - Startup: Alienware Dock.lnk = C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: FlexType 2K.lnk = C:\WINDOWS\Datecs\Flex2K.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab O16 - DPF: {6CE31B8D-8340-4DBD-B78E-BF59620924DC} (Quest3DCtlr2 Class) - http://www.quest3d.com/webplugin/download/...t3dactivex2.cab O16 - DPF: {EAC139A9-D22D-4C29-8D1C-252BE63750F9} - http://piclens.com/shared/plinstll.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{22A2CADE-1F4B-4E19-BC3F-24888EE7672D}: NameServer = 84.238.220.1 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Windows System Memory Manager (WinSpooler32) - Unknown owner - C:\WINDOWS\system\smsc32.exe -- End of file - 10479 bytes

хммммм емииии честно да ти кажа въобще не разбирам от пц-та и това което ми пишеш ми е малко чуждо за лог файловетв и т.н. просто исках да знам дали може да ми прецака нещо по пц-то или не и не е толкова периодично появи се вчера веднъж а днес 2 пъти но ме притеснява

Иииии все пак какво да правя сега аз сега имам a-squared Anti-Malware ама като не знам каква версия е ... а тази 4.0 за която говорите кое е по-различното , а и въпроса ми беше малко по-друг дали има място от където мога да си сваля същата като пробната версия и как става платено ли е не е ли ? Честно нз дали НОД-а и a-squared Anti-Malware си пасват ама за сега съм доволна от 2-рата а като бях само с НОД-а просто пълна скръб за това не бих се отказала от a-squared Anti-Malware просто искам да си я имам постоянно а не на всеки 30 дни да си правя регистрации на нов мейл

31.1.2009 г. 20:07:35 HTTP filter file http://84.238.220.69:25572/x Win32/Virut.AW virus connection terminated - quarantined NT AUTHORITY\SYSTEM Threat was detected upon access to web by the application: C:\WINDOWS\system32\svchost.exe. Много ще съм ви благодарна ако някой ми каже какво трябва да е това и как да го махна от два дни ми излиза на антивирусната а тя е ESET NOD32 и ме притеснява че не мога да со махна или че може да ми прецака пц-то а аз грам не разбирам от техника трудно успявам да се справям сама и да се уча за това малко помощ няма да ми е излишна много благодаря за вниманието и помощта

az sega iskam da popitam neshto poneje si imam super malko ponqtie ot pc-ta reshih da popitam za da znam ... zna4i predi vreme imah virusi v pc-to i reshih da potursq neshti4ko na slqpo v neta za da imam po-dobra zashtita namerih a-squared Anti-Malware i si q svalihhh ... oba4e problema e 4e e samo probna versiq i nz ot kude moga da si q svalq cqlata za da q imam postoqnno , a i drug vupros imam poneje imam eset nod32 na pc-to zaedno s a-squared-a dali trqbva da go mahna i ako go mahna kakvo drugo da svalq zashtoto se pak trqbva da imam nqkakva postoqnna zashtita zashtoto na vseki 30 dni mi se nalaga da si parvq nov mail za da si registriram programkata ako nqkoi moje d mi pomogne shte sum vi adski blagodarna sorry ako ne sum pisala na to4noto mqsto no ne znaeh kude druga da pisha i da pitam ... blagodarq predvaritelno za sudeistvieto упс сори за езика не знаех че трябва на бг още веднъж извинявам се , пиша го защото ме скастриха че във форуми трябва да пиша на бг и малко съм зле с техниката но ще се радвам на помощ от тези които разбират