izrudcheto

ми пише централен процесор

Имам този проблем всеки месец. Преинсталвам го компа и 1 месец е добре ама после почва да засича. Отварям диспечер на задачи и гледам там на производителност става 100 процента и много сече. Имам лаптоп HP 530 1 гб. рам 1.6 ghz процесор и 120 хард диск видео карта 128 мб. Моля да ми помогнете , че да не се мача

ne sam no posle kak da smesq 2 ta traka ??

Ми какво да обесня по-подробво вие ми обеснете по подробно как да запиша

Имам си текст имам си и бийт само дето пробвах с мн. програми, но нищо не даде резултат ПОМОЩ !!

а дале с Service Pack 3 няма да засеча и задължително ли е ??

Системата е чиста Слушам те

това с _OTL ми забива на 61 процента и стои така .. В момента си влизам навсякаде и не ме изкарва Дали вече е готово !!

ComboFix 10-12-16.05 - aygun@asie 12/21/2010 15:38:15.1.2 - x86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1015.765 [GMT 2:00] Running from: g:\pika4u\ComboFixxx.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . D:\Autorun.inf D:\kdpwmafzgrex.bat D:\kftcukrnwjyttz.bat D:\sjtymybtyh.bat E:\Autorun.inf E:\kdpwmafzgrex.bat E:\kftcukrnwjyttz.bat E:\sjtymybtyh.bat . ((((((((((((((((((((((((( Files Created from 2010-11-21 to 2010-12-21 ))))))))))))))))))))))))))))))) . 2010-12-21 13:10 . 2010-12-21 13:10 -------- d-----w- C:\_OTL . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-09-18 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-09-18 166424] "Persistence"="c:\windows\system32\igfxpers.exe" [2007-09-18 137752] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 0 (0x0) "EnableInstallerDetection"= 0 (0x0) "EnableSecureUIAPaths"= 0 (0x0) "EnableVirtualization"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ \0 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= . - - - - ORPHANS REMOVED - - - - HKLM-Run-hpWirelessAssistant - %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-12-21 15:40 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(824) c:\windows\system32\igfxdev.dll . Completion time: 2010-12-21 15:41:22 ComboFix-quarantined-files.txt 2010-12-21 13:41 Pre-Run: 15,719,460,864 bytes free Post-Run: 15,682,211,840 bytes free WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect - - End Of File - - B5ADE450C36B657C85C624144FC99E4C

Malwarebytes' Anti-Malware 1.50 www.malwarebytes.org Database version: 5214 Windows 5.1.2600 Service Pack 2 Internet Explorer 6.0.2900.2180 12/21/2010 3:20:13 PM mbam-log-2010-12-21 (15-20-13).txt Scan type: Quick scan Objects scanned: 115833 Time elapsed: 1 minute(s), 12 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 2 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Ще се създаде лог файл. Копирайте и поставете този файл в следващия си коментар. All processes killed ========== OTL ========== Process gtzaks.exe killed successfully! No active process named ihzmicnnarkjnxrnfb.exe was found! Service HidServ stopped successfully! Service HidServ deleted successfully! File C:\WINDOWS\System32\hidserv.dll File not found not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ihzmicnnarkjnxrnfb deleted successfully. C:\Documents and Settings\aygun@asie\Local Settings\Temp\ihzmicnnarkjnxrnfb.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\kdpwmafzgrex deleted successfully. C:\WINDOWS\system32\spfqkcljujaxzhzt.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-2025429265-73586283-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\\kdpwmafzgrex deleted successfully. File C:\Documents and Settings\aygun@asie\Local Settings\Temp\ihzmicnnarkjnxrnfb.exe not found. Registry value HKEY_USERS\S-1-5-21-2025429265-73586283-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\\njyibsaxhvlhipg deleted successfully. C:\WINDOWS\system32\ghbqokxzohcdjvrpjhln.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\jdqypekfnznhg deleted successfully. File C:\WINDOWS\System32\spfqkcljujaxzhzt.exe not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\zxoavoyxjzrpsbupg deleted successfully. File C:\Documents and Settings\aygun@asie\Local Settings\Temp\ihzmicnnarkjnxrnfb.exe not found. Registry value HKEY_USERS\S-1-5-21-2025429265-73586283-839522115-1003\Software\Microsoft\Windows\CurrentVersion\RunOnce\\jdqypekfnznhg deleted successfully. File C:\Documents and Settings\aygun@asie\Local Settings\Temp\ihzmicnnarkjnxrnfb.exe not found. Registry value HKEY_USERS\S-1-5-21-2025429265-73586283-839522115-1003\Software\Microsoft\Windows\CurrentVersion\RunOnce\\spfqkcljujaxzhzt deleted successfully. C:\WINDOWS\system32\zxoavoyxjzrpsbupg.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\nfqwlycvblx deleted successfully. C:\Documents and Settings\aygun@asie\Local Settings\Temp\ghbqokxzohcdjvrpjhln.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\kftcukrnwjyttz deleted successfully. C:\WINDOWS\ghbqokxzohcdjvrpjhln.exe moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3aae0356-0c2f-11e0-a022-b8437c2975e8}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3aae0356-0c2f-11e0-a022-b8437c2975e8}\ not found. G:\sjtymybtyh.bat moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3aae0356-0c2f-11e0-a022-b8437c2975e8}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3aae0356-0c2f-11e0-a022-b8437c2975e8}\ not found. G:\kftcukrnwjyttz.bat moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3aae0356-0c2f-11e0-a022-b8437c2975e8}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3aae0356-0c2f-11e0-a022-b8437c2975e8}\ not found. G:\kdpwmafzgrex.bat moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f6422d8a-0cfd-11e0-a027-001b770f1e86}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f6422d8a-0cfd-11e0-a027-001b770f1e86}\ not found. File ylvznucpzz.bat not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f6422d8a-0cfd-11e0-a027-001b770f1e86}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f6422d8a-0cfd-11e0-a027-001b770f1e86}\ not found. File qhvdvgsjxbxnuq.bat _ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f6422d8a-0cfd-11e0-a027-001b770f1e86}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f6422d8a-0cfd-11e0-a027-001b770f1e86}\ not found. File qfrxnwgvhjdr.bat _ not found. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:autocheck autochk * deleted successfully. C:\WINDOWS\zxoavoyxjzrpsbupg.exe moved successfully. C:\WINDOWS\vxsihesvlfbdkxutonsvz.exe moved successfully. C:\WINDOWS\ttmaxseftlffkvqngdg.exe moved successfully. C:\WINDOWS\spfqkcljujaxzhzt.exe moved successfully. C:\WINDOWS\mplccaptkfcfnbzzvvbfkn.exe moved successfully. C:\WINDOWS\ihzmicnnarkjnxrnfb.exe moved successfully. File C:\WINDOWS\ghbqokxzohcdjvrpjhln.exe not found. C:\autorun.inf moved successfully. C:\WINDOWS\zpycpactxfpfabmzivofxnwanyarvdn.yzk moved successfully. C:\WINDOWS\system32\zpycpactxfpfabmzivofxnwanyarvdn.yzk moved successfully. C:\Program Files\zpycpactxfpfabmzivofxnwanyarvdn.yzk moved successfully. C:\Documents and Settings\aygun@asie\Local Settings\Application Data\zpycpactxfpfabmzivofxnwanyarvdn.yzk moved successfully. C:\WINDOWS\xdcwzasztrrxizadcfovd.icf moved successfully. C:\WINDOWS\system32\xdcwzasztrrxizadcfovd.icf moved successfully. C:\Program Files\xdcwzasztrrxizadcfovd.icf moved successfully. C:\Documents and Settings\aygun@asie\Local Settings\Application Data\xdcwzasztrrxizadcfovd.icf moved successfully. File C:\WINDOWS\System32\zxoavoyxjzrpsbupg.exe not found. C:\WINDOWS\system32\vxsihesvlfbdkxutonsvz.exe moved successfully. C:\WINDOWS\system32\ttmaxseftlffkvqngdg.exe moved successfully. File C:\WINDOWS\System32\spfqkcljujaxzhzt.exe not found. C:\WINDOWS\system32\mplccaptkfcfnbzzvvbfkn.exe moved successfully. C:\WINDOWS\system32\ihzmicnnarkjnxrnfb.exe moved successfully. File C:\WINDOWS\System32\ghbqokxzohcdjvrpjhln.exe not found. C:\WINDOWS\system32\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz moved successfully. C:\WINDOWS\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz moved successfully. C:\Program Files\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz moved successfully. C:\Documents and Settings\aygun@asie\Local Settings\Application Data\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz moved successfully. File C:\autorun.inf not found. File C:\WINDOWS\zxoavoyxjzrpsbupg.exe not found. File C:\WINDOWS\vxsihesvlfbdkxutonsvz.exe not found. File C:\WINDOWS\ttmaxseftlffkvqngdg.exe not found. File C:\WINDOWS\spfqkcljujaxzhzt.exe not found. File C:\WINDOWS\mplccaptkfcfnbzzvvbfkn.exe not found. File C:\WINDOWS\ihzmicnnarkjnxrnfb.exe not found. File C:\WINDOWS\ghbqokxzohcdjvrpjhln.exe not found. File C:\WINDOWS\zpycpactxfpfabmzivofxnwanyarvdn.yzk not found. File C:\WINDOWS\System32\zpycpactxfpfabmzivofxnwanyarvdn.yzk not found. File C:\Program Files\zpycpactxfpfabmzivofxnwanyarvdn.yzk not found. File C:\Documents and Settings\aygun@asie\Local Settings\Application Data\zpycpactxfpfabmzivofxnwanyarvdn.yzk not found. File C:\WINDOWS\System32\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz not found. File C:\WINDOWS\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz not found. File C:\Program Files\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz not found. File C:\Documents and Settings\aygun@asie\Local Settings\Application Data\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz not found. File C:\WINDOWS\xdcwzasztrrxizadcfovd.icf not found. File C:\WINDOWS\System32\xdcwzasztrrxizadcfovd.icf not found. File C:\Program Files\xdcwzasztrrxizadcfovd.icf not found. File C:\Documents and Settings\aygun@asie\Local Settings\Application Data\xdcwzasztrrxizadcfovd.icf not found. File C:\WINDOWS\System32\zxoavoyxjzrpsbupg.exe not found. File C:\WINDOWS\System32\vxsihesvlfbdkxutonsvz.exe not found. File C:\WINDOWS\System32\ttmaxseftlffkvqngdg.exe not found. File C:\WINDOWS\System32\spfqkcljujaxzhzt.exe not found. File C:\WINDOWS\System32\mplccaptkfcfnbzzvvbfkn.exe not found. File C:\WINDOWS\System32\ihzmicnnarkjnxrnfb.exe not found. File C:\WINDOWS\System32\ghbqokxzohcdjvrpjhln.exe not found. File C:\Program Files\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz not found. File C:\Program Files\xdcwzasztrrxizadcfovd.icf not found. File C:\Program Files\zpycpactxfpfabmzivofxnwanyarvdn.yzk not found. File C:\autorun.inf not found. C:\kdpwmafzgrex.bat moved successfully. C:\kftcukrnwjyttz.bat moved successfully. C:\sjtymybtyh.bat moved successfully. ========== FILES ========== C:\Documents and Settings\aygun@asie\Local Settings\Temp\gtzaks.exe moved successfully. File\Folder C:\Documents and Settings\aygun@asie\Local Settings\Temp\ihzmicnnarkjnxrnfb.exe not found. C:\RECYCLER\S-1-5-21-2025429265-73586283-839522115-1003 folder moved successfully. C:\RECYCLER folder moved successfully. D:\RECYCLER\S-1-5-21-861567501-602162358-839522115-1003 folder moved successfully. D:\RECYCLER\S-1-5-21-790525478-436374069-1177238915-1003 folder moved successfully. D:\RECYCLER\S-1-5-21-527237240-789336058-1417001333-1003 folder moved successfully. D:\RECYCLER\S-1-5-21-2025429265-73586283-839522115-1003 folder moved successfully. D:\RECYCLER\S-1-5-21-2000478354-287218729-1177238915-500 folder moved successfully. D:\RECYCLER\S-1-5-21-1757981266-839522115-729563176-1003 folder moved successfully. D:\RECYCLER folder moved successfully. E:\RECYCLER\S-1-5-21-861567501-602162358-839522115-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-790525478-436374069-1177238915-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-527237240-789336058-1417001333-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-2025429265-73586283-839522115-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-2000478354-287218729-1177238915-500 folder moved successfully. E:\RECYCLER\S-1-5-21-1757981266-839522115-729563176-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-1085031214-796845957-1177238915-1003 folder moved successfully. E:\RECYCLER folder moved successfully. recycler not found in G:\ < ipconfig /flushdns /c > Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Documents and Settings\aygun@asie\Desktop\cmd.bat deleted successfully. C:\Documents and Settings\aygun@asie\Desktop\cmd.txt deleted successfully. ========== COMMANDS ========== C:\WINDOWS\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully [EMPTYTEMP] User: All Users User: aygun@asie ->Temp folder emptied: 62043549 bytes ->Temporary Internet Files folder emptied: 376777 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 402 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2142714 bytes %systemroot%\System32 .tmp files removed: 2577 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 2475 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 62.00 mb [EMPTYFLASH] User: All Users User: aygun@asie User: Default User User: LocalService User: NetworkService Total Flash Files Cleaned = 0.00 mb OTL by OldTimer - Version 3.2.18.0 log created on 12212010_151023 Files\Folders moved on Reboot... Registry entries deleted on Reboot...

добре

extras.txt : OTL Extras logfile created on: 12/21/2010 2:35:56 PM - Run 1 OTL by OldTimer - Version 3.2.18.0 Folder = C:\Documents and Settings\aygun@asie\Desktop Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 1,015.00 Mb Total Physical Memory | 753.00 Mb Available Physical Memory | 74.00% Memory free 2.00 Gb Paging File | 2.00 Gb Available in Paging File | 93.00% Paging File free Paging file location(s): C:\pagefile.sys 1524 3048 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 17.74 Gb Total Space | 14.69 Gb Free Space | 82.81% Space Free | Partition Type: NTFS Drive D: | 42.16 Gb Total Space | 14.78 Gb Free Space | 35.05% Space Free | Partition Type: NTFS Drive E: | 51.89 Gb Total Space | 16.51 Gb Free Space | 31.81% Space Free | Partition Type: NTFS Computer Name: ASIE_AYGUN | User Name: aygun@asie | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting "{D32067CD-7409-4792-BFA0-1469BCD8F0C8}" = HP Wireless Assistant "Broadcom 802.11b Network Adapter" = Broadcom 802.11 Wireless LAN Adapter "CNXT_HDAUDIO" = Conexant HD Audio "CNXT_MODEM_HDAUDIO_SprtHD5m" = HDAUDIO Soft Data Fax Modem with SmartCP "ESET Online Scanner" = ESET Online Scanner v3 "HDMI" = Intel® Graphics Media Accelerator Driver "PROSet" = Intel® PRO Network Connections Drivers ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 12/19/2010 8:08:38 AM | Computer Name = ASIE_AYGUN | Source = Application Error | ID = 1000 Description = Faulting application nod32 updateviewer2.07.4.0.exe, version 2.7.4.0, faulting module nod32 updateviewer2.07.4.0.exe, version 2.7.4.0, fault address 0x00011a73. Error - 12/20/2010 11:51:56 AM | Computer Name = ASIE_AYGUN | Source = Application Error | ID = 1000 Description = Faulting application nod32 updateviewer2.07.4.0.exe, version 2.7.4.0, faulting module nod32 updateviewer2.07.4.0.exe, version 2.7.4.0, fault address 0x00011a73. [ System Events ] Error - 12/20/2010 9:31:00 AM | Computer Name = ASIE_AYGUN | Source = W32Time | ID = 39452689 Description = Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751) Error - 12/20/2010 9:31:00 AM | Computer Name = ASIE_AYGUN | Source = W32Time | ID = 39452701 Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time. Error - 12/20/2010 9:31:00 AM | Computer Name = ASIE_AYGUN | Source = W32Time | ID = 39452701 Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time. Error - 12/20/2010 9:53:21 AM | Computer Name = ASIE_AYGUN | Source = W32Time | ID = 39452689 Description = Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751) Error - 12/20/2010 9:53:21 AM | Computer Name = ASIE_AYGUN | Source = W32Time | ID = 39452701 Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time. Error - 12/20/2010 12:16:19 PM | Computer Name = ASIE_AYGUN | Source = W32Time | ID = 39452689 Description = Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751) Error - 12/20/2010 12:16:19 PM | Computer Name = ASIE_AYGUN | Source = W32Time | ID = 39452701 Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time. Error - 12/20/2010 12:16:49 PM | Computer Name = ASIE_AYGUN | Source = W32Time | ID = 39452689 Description = Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751) Error - 12/20/2010 12:16:49 PM | Computer Name = ASIE_AYGUN | Source = W32Time | ID = 39452701 Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time. Error - 12/21/2010 7:33:44 AM | Computer Name = ASIE_AYGUN | Source = sr | ID = 1 Description = The System Restore filter encountered the unexpected error '0xC0000034' while processing the file '_filelst.cfg' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume. < End of report > OTL: OTL logfile created on: 12/21/2010 2:35:56 PM - Run 1 OTL by OldTimer - Version 3.2.18.0 Folder = C:\Documents and Settings\aygun@asie\Desktop Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 1,015.00 Mb Total Physical Memory | 753.00 Mb Available Physical Memory | 74.00% Memory free 2.00 Gb Paging File | 2.00 Gb Available in Paging File | 93.00% Paging File free Paging file location(s): C:\pagefile.sys 1524 3048 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 17.74 Gb Total Space | 14.69 Gb Free Space | 82.81% Space Free | Partition Type: NTFS Drive D: | 42.16 Gb Total Space | 14.78 Gb Free Space | 35.05% Space Free | Partition Type: NTFS Drive E: | 51.89 Gb Total Space | 16.51 Gb Free Space | 31.81% Space Free | Partition Type: NTFS Computer Name: ASIE_AYGUN | User Name: aygun@asie | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Documents and Settings\aygun@asie\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Documents and Settings\aygun@asie\Local Settings\Temp\gtzaks.exe () PRC - C:\Documents and Settings\aygun@asie\Local Settings\Temp\ihzmicnnarkjnxrnfb.exe () PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) ========== Modules (SafeList) ========== MOD - C:\Documents and Settings\aygun@asie\Desktop\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (HidServ) -- C:\WINDOWS\System32\hidserv.dll File not found ========== Driver Services (SafeList) ========== DRV - (UIUSys) -- C:\WINDOWS\System32\DRIVERS\UIUSYS.SYS File not found DRV - (NETw5x32) Intel® -- C:\WINDOWS\system32\drivers\NETw5x32.sys (Intel Corporation) DRV - (ialm) -- C:\WINDOWS\system32\drivers\igxpmp32.sys (Intel Corporation) DRV - (HdAudAddService) -- C:\WINDOWS\system32\drivers\CHDAud.sys (Conexant Systems Inc.) DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.) DRV - (HSFHWAZL) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.) DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.) DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\Hdaudbus.sys (Windows ® Server 2003 DDK provider) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2025429265-73586283-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 O1 HOSTS File: ([2004/08/04 14:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O4 - HKLM..\Run: [ihzmicnnarkjnxrnfb] C:\Documents and Settings\aygun@asie\Local Settings\Temp\ihzmicnnarkjnxrnfb.exe () O4 - HKLM..\Run: [kdpwmafzgrex] C:\WINDOWS\System32\spfqkcljujaxzhzt.exe () O4 - HKU\S-1-5-21-2025429265-73586283-839522115-1003..\Run: [kdpwmafzgrex] C:\Documents and Settings\aygun@asie\Local Settings\Temp\ihzmicnnarkjnxrnfb.exe () O4 - HKU\S-1-5-21-2025429265-73586283-839522115-1003..\Run: [njyibsaxhvlhipg] C:\WINDOWS\System32\ghbqokxzohcdjvrpjhln.exe () O4 - HKLM..\RunOnce: [jdqypekfnznhg] C:\WINDOWS\System32\spfqkcljujaxzhzt.exe () O4 - HKLM..\RunOnce: [zxoavoyxjzrpsbupg] C:\Documents and Settings\aygun@asie\Local Settings\Temp\ihzmicnnarkjnxrnfb.exe () O4 - HKU\S-1-5-21-2025429265-73586283-839522115-1003..\RunOnce: [jdqypekfnznhg] C:\Documents and Settings\aygun@asie\Local Settings\Temp\ihzmicnnarkjnxrnfb.exe () O4 - HKU\S-1-5-21-2025429265-73586283-839522115-1003..\RunOnce: [spfqkcljujaxzhzt] C:\WINDOWS\System32\zxoavoyxjzrpsbupg.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: nfqwlycvblx = C:\DOCUME~1\AYGUN@~1\LOCALS~1\Temp\ghbqokxzohcdjvrpjhln.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: kftcukrnwjyttz = ghbqokxzohcdjvrpjhln.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-2025429265-73586283-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 1 O7 - HKU\S-1-5-21-2025429265-73586283-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010/12/19 12:49:26 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2010/12/21 14:35:09 | 000,000,835 | RHS- | M] () - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010/12/21 14:35:09 | 000,000,820 | RHS- | M] () - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010/12/21 14:35:10 | 000,000,831 | RHS- | M] () - E:\autorun.inf -- [ NTFS ] O33 - MountPoints2\{3aae0356-0c2f-11e0-a022-b8437c2975e8}\Shell\AutoRun\command - "" = G:\sjtymybtyh.bat -- File not found O33 - MountPoints2\{3aae0356-0c2f-11e0-a022-b8437c2975e8}\Shell\explore\Command - "" = G:\kftcukrnwjyttz.bat -- File not found O33 - MountPoints2\{3aae0356-0c2f-11e0-a022-b8437c2975e8}\Shell\open\Command - "" = G:\kdpwmafzgrex.bat -- File not found O33 - MountPoints2\{f6422d8a-0cfd-11e0-a027-001b770f1e86}\Shell\AutoRun\command - "" = ylvznucpzz.bat O33 - MountPoints2\{f6422d8a-0cfd-11e0-a027-001b770f1e86}\Shell\explore\Command - "" = qhvdvgsjxbxnuq.bat _ O33 - MountPoints2\{f6422d8a-0cfd-11e0-a027-001b770f1e86}\Shell\open\Command - "" = qfrxnwgvhjdr.bat _ O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: 6to4 - File not found NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation) Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.) Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.) Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll () Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll () Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation) Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation) CREATERESTOREPOINT Restore point Set: OTL Restore Point (54901231209938944) ========== Files/Folders - Created Within 30 Days ========== [2010/12/21 14:29:42 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\aygun@asie\Desktop\OTL.exe [2010/12/20 14:18:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aygun@asie\Local Settings\Application Data\BVRP Software [2010/12/20 14:18:48 | 000,000,000 | ---D | C] -- C:\Program Files\NetWaiting [2010/12/20 14:02:34 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT [2010/12/20 13:50:19 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information [2010/12/20 13:50:19 | 000,000,000 | ---D | C] -- C:\Program Files\Hewlett-Packard [2010/12/20 13:50:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield [2010/12/19 14:38:44 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer [2010/12/19 14:38:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC [2010/12/19 14:38:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines [2010/12/19 14:38:39 | 000,000,000 | R--D | C] -- C:\Program Files [2010/12/19 14:38:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared [2010/12/19 14:38:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files [2010/12/19 14:38:13 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu [2010/12/19 14:38:13 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents [2010/12/19 14:38:13 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates [2010/12/19 14:38:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favorites [2010/12/19 14:38:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop [2010/12/19 14:38:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2 [2010/12/19 14:38:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot [2010/12/19 14:37:55 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft [2010/12/19 14:37:55 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data [2010/12/19 14:37:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings [2010/12/19 14:36:02 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076 [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052 [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054 [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042 [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041 [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037 [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033 [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031 [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028 [2010/12/19 14:27:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025 [2010/12/19 14:27:56 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts [2010/12/19 14:27:56 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache [2010/12/19 14:27:56 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web [2010/12/19 14:27:56 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32 [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32 [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\system [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\security [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\java [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch [2010/12/19 14:27:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins [2010/12/19 14:07:57 | 000,000,000 | ---D | C] -- C:\Program Files\Eset [2010/12/19 13:54:21 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\aygun@asie\Desktop\asd [2010/12/19 13:11:11 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2010/12/19 13:05:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups [2010/12/19 13:05:43 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\WINDOWS\System32\CSVer.dll [2010/12/19 13:05:43 | 000,000,000 | ---D | C] -- C:\Program Files\Intel [2010/12/19 13:04:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang [2010/12/19 13:04:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE [2010/12/19 13:04:45 | 000,000,000 | ---D | C] -- C:\Intel [2010/12/19 13:01:14 | 000,000,000 | ---D | C] -- C:\Program Files\Broadcom [2010/12/19 13:01:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aygun@asie\Application Data\InstallShield [2010/12/19 13:00:59 | 000,000,000 | ---D | C] -- C:\SWSetup [2010/12/19 12:54:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aygun@asie\Application Data\Identities [2010/12/19 12:54:48 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information [2010/12/19 12:54:45 | 000,000,000 | R--D | C] -- C:\Documents and Settings\aygun@asie\My Documents\My Pictures [2010/12/19 12:54:45 | 000,000,000 | R--D | C] -- C:\Documents and Settings\aygun@asie\My Documents\My Music [2010/12/19 12:54:41 | 000,000,000 | --SD | C] -- C:\Documents and Settings\aygun@asie\Application Data\Microsoft [2010/12/19 12:54:41 | 000,000,000 | --SD | C] -- C:\Documents and Settings\aygun@asie\Cookies [2010/12/19 12:54:41 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\aygun@asie\SendTo [2010/12/19 12:54:41 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\aygun@asie\Recent [2010/12/19 12:54:41 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\aygun@asie\Application Data [2010/12/19 12:54:41 | 000,000,000 | R--D | C] -- C:\Documents and Settings\aygun@asie\Start Menu [2010/12/19 12:54:41 | 000,000,000 | R--D | C] -- C:\Documents and Settings\aygun@asie\My Documents [2010/12/19 12:54:41 | 000,000,000 | R--D | C] -- C:\Documents and Settings\aygun@asie\Favorites [2010/12/19 12:54:41 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\aygun@asie\Templates [2010/12/19 12:54:41 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\aygun@asie\PrintHood [2010/12/19 12:54:41 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\aygun@asie\NetHood [2010/12/19 12:54:41 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\aygun@asie\Local Settings [2010/12/19 12:54:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aygun@asie\Local Settings\Application Data\Microsoft [2010/12/19 12:54:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aygun@asie\Desktop [2010/12/19 12:53:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution [2010/12/19 12:53:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2010/12/19 12:53:46 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft [2010/12/19 12:53:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft [2010/12/19 12:53:44 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Application Data\Microsoft [2010/12/19 12:53:27 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft [2010/12/19 12:53:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft [2010/12/19 12:51:56 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll [2010/12/19 12:51:56 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll [2010/12/19 12:51:56 | 000,026,624 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll [2010/12/19 12:50:31 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys [2010/12/19 12:49:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom [2010/12/19 12:49:48 | 000,000,000 | ---D | C] -- C:\Program Files\xerox [2010/12/19 12:49:48 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage [2010/12/19 12:48:31 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM [2010/12/19 12:48:22 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files [2010/12/19 12:48:22 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages [2010/12/19 12:48:12 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate [2010/12/19 12:47:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX [2010/12/19 12:47:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services [2010/12/19 12:47:13 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks [2010/12/19 12:47:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap [2010/12/19 12:47:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst [2010/12/19 12:47:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed [2010/12/19 12:46:58 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker [2010/12/19 12:46:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore [2010/12/19 12:46:45 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting [2010/12/19 12:46:41 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express [2010/12/19 12:46:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System [2010/12/19 12:46:30 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer [2010/12/19 12:46:29 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures [2010/12/19 12:45:53 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications [2010/12/19 12:45:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration [2010/12/19 12:45:34 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music [2010/12/19 12:45:34 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player [2010/12/19 12:45:34 | 000,000,000 | ---D | C] -- C:\Program Files\Online Services [2010/12/19 12:45:28 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger [2010/12/19 12:45:24 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone [2010/12/19 12:44:41 | 000,000,000 | ---D | C] -- C:\Program Files\MSN [2010/12/19 12:44:40 | 000,281,088 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe [2010/12/19 12:44:39 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT [2010/12/19 12:44:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc [2010/12/19 12:44:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com [2010/12/19 12:44:20 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010/12/21 14:35:34 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\zxoavoyxjzrpsbupg.exe [2010/12/21 14:35:34 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\vxsihesvlfbdkxutonsvz.exe [2010/12/21 14:35:34 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\ttmaxseftlffkvqngdg.exe [2010/12/21 14:35:34 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\spfqkcljujaxzhzt.exe [2010/12/21 14:35:34 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\mplccaptkfcfnbzzvvbfkn.exe [2010/12/21 14:35:34 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\ihzmicnnarkjnxrnfb.exe [2010/12/21 14:35:34 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\ghbqokxzohcdjvrpjhln.exe [2010/12/21 14:35:09 | 000,000,835 | RHS- | M] () -- C:\autorun.inf [2010/12/21 14:34:57 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\zpycpactxfpfabmzivofxnwanyarvdn.yzk [2010/12/21 14:34:57 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\System32\zpycpactxfpfabmzivofxnwanyarvdn.yzk [2010/12/21 14:34:57 | 000,000,416 | -H-- | M] () -- C:\Program Files\zpycpactxfpfabmzivofxnwanyarvdn.yzk [2010/12/21 14:34:57 | 000,000,416 | -H-- | M] () -- C:\Documents and Settings\aygun@asie\Local Settings\Application Data\zpycpactxfpfabmzivofxnwanyarvdn.yzk [2010/12/21 14:34:57 | 000,000,280 | -H-- | M] () -- C:\WINDOWS\xdcwzasztrrxizadcfovd.icf [2010/12/21 14:34:57 | 000,000,280 | -H-- | M] () -- C:\WINDOWS\System32\xdcwzasztrrxizadcfovd.icf [2010/12/21 14:34:57 | 000,000,280 | -H-- | M] () -- C:\Program Files\xdcwzasztrrxizadcfovd.icf [2010/12/21 14:34:57 | 000,000,280 | -H-- | M] () -- C:\Documents and Settings\aygun@asie\Local Settings\Application Data\xdcwzasztrrxizadcfovd.icf [2010/12/21 14:28:24 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\aygun@asie\Desktop\OTL.exe [2010/12/21 13:37:30 | 000,312,172 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010/12/21 13:37:30 | 000,040,394 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010/12/21 13:33:24 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\System32\zxoavoyxjzrpsbupg.exe [2010/12/21 13:33:24 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\System32\vxsihesvlfbdkxutonsvz.exe [2010/12/21 13:33:24 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\System32\ttmaxseftlffkvqngdg.exe [2010/12/21 13:33:24 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\System32\spfqkcljujaxzhzt.exe [2010/12/21 13:33:24 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\System32\mplccaptkfcfnbzzvvbfkn.exe [2010/12/21 13:33:24 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\System32\ihzmicnnarkjnxrnfb.exe [2010/12/21 13:33:24 | 000,688,128 | RHS- | M] () -- C:\WINDOWS\System32\ghbqokxzohcdjvrpjhln.exe [2010/12/21 13:33:19 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010/12/20 17:49:03 | 000,006,144 | ---- | M] () -- C:\Documents and Settings\aygun@asie\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/12/20 15:02:34 | 002,672,312 | ---- | M] () -- C:\Documents and Settings\aygun@asie\Desktop\esetsmartinstaller_enu.exe [2010/12/20 13:52:32 | 000,000,804 | ---- | M] () -- C:\Documents and Settings\aygun@asie\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk [2010/12/19 13:59:56 | 000,000,166 | ---- | M] () -- C:\Documents and Settings\aygun@asie\history.js [2010/12/19 13:59:52 | 000,000,417 | ---- | M] () -- C:\Documents and Settings\aygun@asie\rb_config.js [2010/12/19 12:56:25 | 000,004,248 | -H-- | M] () -- C:\WINDOWS\System32\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz [2010/12/19 12:56:25 | 000,004,248 | -H-- | M] () -- C:\WINDOWS\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz [2010/12/19 12:56:25 | 000,004,248 | -H-- | M] () -- C:\Program Files\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz [2010/12/19 12:56:25 | 000,004,248 | -H-- | M] () -- C:\Documents and Settings\aygun@asie\Local Settings\Application Data\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz [2010/12/19 12:55:06 | 000,000,104 | ---- | M] () -- C:\Documents and Settings\aygun@asie\Desktop\My Computer.lnk [2010/12/19 12:54:59 | 000,000,779 | ---- | M] () -- C:\Documents and Settings\aygun@asie\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2010/12/19 12:54:58 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\aygun@asie\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf [2010/12/19 12:54:37 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010/12/19 12:53:30 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD [2010/12/19 12:53:20 | 000,090,296 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/12/19 12:52:44 | 000,004,438 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010/12/19 12:52:39 | 000,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf [2010/12/19 12:49:26 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2010/12/19 12:49:26 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2010/12/19 12:49:26 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2010/12/19 12:49:26 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS [2010/12/19 12:49:26 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2010/12/19 12:49:22 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2010/12/19 12:49:22 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb [2010/12/19 12:49:22 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb [2010/12/19 12:49:09 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI [2010/12/19 12:46:06 | 000,021,640 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat [2010/12/19 12:43:18 | 000,000,211 | -HS- | M] () -- C:\boot.ini [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2010/12/21 14:35:09 | 000,000,835 | RHS- | C] () -- C:\autorun.inf [2010/12/20 16:40:28 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\zxoavoyxjzrpsbupg.exe [2010/12/20 16:40:28 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\vxsihesvlfbdkxutonsvz.exe [2010/12/20 16:40:28 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\ttmaxseftlffkvqngdg.exe [2010/12/20 16:40:28 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\spfqkcljujaxzhzt.exe [2010/12/20 16:40:28 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\mplccaptkfcfnbzzvvbfkn.exe [2010/12/20 16:40:28 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\ihzmicnnarkjnxrnfb.exe [2010/12/20 16:40:28 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\ghbqokxzohcdjvrpjhln.exe [2010/12/20 16:23:13 | 000,000,416 | -H-- | C] () -- C:\WINDOWS\zpycpactxfpfabmzivofxnwanyarvdn.yzk [2010/12/20 16:23:13 | 000,000,416 | -H-- | C] () -- C:\WINDOWS\System32\zpycpactxfpfabmzivofxnwanyarvdn.yzk [2010/12/20 16:23:13 | 000,000,416 | -H-- | C] () -- C:\Program Files\zpycpactxfpfabmzivofxnwanyarvdn.yzk [2010/12/20 16:23:13 | 000,000,416 | -H-- | C] () -- C:\Documents and Settings\aygun@asie\Local Settings\Application Data\zpycpactxfpfabmzivofxnwanyarvdn.yzk [2010/12/20 15:57:54 | 000,006,144 | ---- | C] () -- C:\Documents and Settings\aygun@asie\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/12/20 15:10:47 | 002,672,312 | ---- | C] () -- C:\Documents and Settings\aygun@asie\Desktop\esetsmartinstaller_enu.exe [2010/12/20 14:36:40 | 000,005,456 | ---- | C] () -- C:\WINDOWS\System32\e100b325.din [2010/12/20 14:13:59 | 000,144,201 | ---- | C] () -- C:\WINDOWS\System32\drivers\HSFProf.cty [2010/12/20 13:52:32 | 000,000,804 | ---- | C] () -- C:\Documents and Settings\aygun@asie\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk [2010/12/19 14:38:47 | 000,004,438 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2010/12/19 14:38:43 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010/12/19 14:38:41 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd [2010/12/19 14:38:41 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf [2010/12/19 14:38:40 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa [2010/12/19 14:38:40 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa [2010/12/19 14:38:23 | 000,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT [2010/12/19 14:38:13 | 000,141,702 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat [2010/12/19 14:38:13 | 000,110,116 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat [2010/12/19 14:38:13 | 000,031,965 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat [2010/12/19 14:38:13 | 000,024,209 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat [2010/12/19 14:38:13 | 000,011,651 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat [2010/12/19 14:38:13 | 000,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT [2010/12/19 14:38:13 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT [2010/12/19 14:38:13 | 000,007,245 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT [2010/12/19 14:38:12 | 002,012,670 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT [2010/12/19 14:38:12 | 001,042,903 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP2.CAT [2010/12/19 14:38:12 | 000,797,189 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT [2010/12/19 14:38:12 | 000,502,724 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT [2010/12/19 14:38:12 | 000,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT [2010/12/19 14:38:12 | 000,037,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT [2010/12/19 14:38:12 | 000,031,281 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT [2010/12/19 14:38:12 | 000,013,753 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT [2010/12/19 14:38:12 | 000,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT [2010/12/19 14:38:12 | 000,009,581 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT [2010/12/19 14:38:12 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat [2010/12/19 14:37:30 | 000,090,296 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/12/19 14:36:54 | 000,000,211 | -HS- | C] () -- C:\boot.ini [2010/12/19 14:36:49 | 000,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf [2010/12/19 13:59:52 | 000,000,417 | ---- | C] () -- C:\Documents and Settings\aygun@asie\rb_config.js [2010/12/19 13:59:52 | 000,000,166 | ---- | C] () -- C:\Documents and Settings\aygun@asie\history.js [2010/12/19 13:04:49 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4859.dll [2010/12/19 13:04:49 | 000,026,160 | ---- | C] () -- C:\WINDOWS\System32\igxpxs32.vp [2010/12/19 13:04:49 | 000,002,096 | ---- | C] () -- C:\WINDOWS\System32\igxpxk32.vp [2010/12/19 12:56:25 | 000,004,248 | -H-- | C] () -- C:\WINDOWS\System32\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz [2010/12/19 12:56:25 | 000,004,248 | -H-- | C] () -- C:\WINDOWS\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz [2010/12/19 12:56:25 | 000,004,248 | -H-- | C] () -- C:\Program Files\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz [2010/12/19 12:56:25 | 000,004,248 | -H-- | C] () -- C:\Documents and Settings\aygun@asie\Local Settings\Application Data\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz [2010/12/19 12:56:25 | 000,000,280 | -H-- | C] () -- C:\WINDOWS\xdcwzasztrrxizadcfovd.icf [2010/12/19 12:56:25 | 000,000,280 | -H-- | C] () -- C:\WINDOWS\System32\xdcwzasztrrxizadcfovd.icf [2010/12/19 12:56:25 | 000,000,280 | -H-- | C] () -- C:\Program Files\xdcwzasztrrxizadcfovd.icf [2010/12/19 12:56:25 | 000,000,280 | -H-- | C] () -- C:\Documents and Settings\aygun@asie\Local Settings\Application Data\xdcwzasztrrxizadcfovd.icf [2010/12/19 12:56:13 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\System32\zxoavoyxjzrpsbupg.exe [2010/12/19 12:56:13 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\System32\vxsihesvlfbdkxutonsvz.exe [2010/12/19 12:56:13 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\System32\ttmaxseftlffkvqngdg.exe [2010/12/19 12:56:13 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\System32\spfqkcljujaxzhzt.exe [2010/12/19 12:56:13 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\System32\mplccaptkfcfnbzzvvbfkn.exe [2010/12/19 12:56:13 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\System32\ihzmicnnarkjnxrnfb.exe [2010/12/19 12:56:13 | 000,688,128 | RHS- | C] () -- C:\WINDOWS\System32\ghbqokxzohcdjvrpjhln.exe [2010/12/19 12:55:06 | 000,000,104 | ---- | C] () -- C:\Documents and Settings\aygun@asie\Desktop\My Computer.lnk [2010/12/19 12:54:58 | 000,000,079 | ---- | C] () -- C:\Documents and Settings\aygun@asie\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf [2010/12/19 12:54:48 | 000,000,779 | ---- | C] () -- C:\Documents and Settings\aygun@asie\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2010/12/19 12:53:30 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD [2010/12/19 12:52:39 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010/12/19 12:51:48 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll [2010/12/19 12:51:27 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex [2010/12/19 12:51:19 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe [2010/12/19 12:51:18 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe [2010/12/19 12:51:15 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex [2010/12/19 12:51:02 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll [2010/12/19 12:50:55 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex [2010/12/19 12:50:46 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll [2010/12/19 12:50:34 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll [2010/12/19 12:49:26 | 000,002,577 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT [2010/12/19 12:49:26 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS [2010/12/19 12:49:26 | 000,000,000 | RHS- | C] () -- C:\IO.SYS [2010/12/19 12:49:26 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS [2010/12/19 12:49:26 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT [2010/12/19 12:49:22 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb [2010/12/19 12:49:22 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb [2010/12/19 12:49:20 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx [2010/12/19 12:47:57 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex [2010/12/19 12:47:25 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp [2010/12/19 12:47:25 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp [2010/12/19 12:47:18 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf [2010/12/19 12:47:05 | 000,004,639 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.exe [2010/12/19 12:46:51 | 000,376,320 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll [2010/12/19 12:46:06 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2010/12/19 12:45:09 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp [2010/12/19 12:45:09 | 000,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp [2010/12/19 12:45:09 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp [2010/12/19 12:45:08 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp [2010/12/19 12:45:08 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp [2010/12/19 12:45:08 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp [2010/12/19 12:45:08 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp [2010/12/19 12:45:08 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp [2010/12/19 12:45:08 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp [2010/12/19 12:45:08 | 000,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp [2010/12/19 12:45:08 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp [2010/12/19 12:45:05 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h [2010/12/19 12:45:05 | 000,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd [2010/12/19 12:45:04 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h [2010/12/19 12:44:57 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc [2004/08/04 14:00:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2004/08/04 14:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys ========== LOP Check ========== ========== Purity Check ========== ========== Custom Scans ========== < %APPDATA%\Microsoft\*.* > < %PROGRAMFILES%\*.* > [2010/12/19 12:56:25 | 000,004,248 | -H-- | M] () -- C:\Program Files\sjtymybtyhsjfhthrfzrkblqeqtlqzkb.zlz [2010/12/21 14:34:57 | 000,000,280 | -H-- | M] () -- C:\Program Files\xdcwzasztrrxizadcfovd.icf [2010/12/21 14:34:57 | 000,000,416 | -H-- | M] () -- C:\Program Files\zpycpactxfpfabmzivofxnwanyarvdn.yzk < %APPDATA%\Update\*.* > < %SYSTEMDRIVE%\*.* > [2010/12/19 12:49:26 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2010/12/21 14:35:09 | 000,000,835 | RHS- | M] () -- C:\autorun.inf [2010/12/20 13:53:10 | 000,000,086 | ---- | M] () -- C:\bcmwl5.log [2010/12/19 12:43:18 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2010/12/19 12:49:26 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS [2010/12/19 12:49:26 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2009/05/08 03:14:03 | 000,688,128 | RHS- | M] () -- C:\kdpwmafzgrex.bat [2009/05/04 11:16:12 | 000,688,128 | RHS- | M] () -- C:\kftcukrnwjyttz.bat [2010/12/19 12:49:26 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2004/08/04 14:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM [2004/08/04 14:00:00 | 000,250,032 | RHS- | M] () -- C:\ntldr [2010/12/21 13:33:17 | 1598,029,824 | -HS- | M] () -- C:\pagefile.sys [2009/02/14 10:16:11 | 000,688,128 | RHS- | M] () -- C:\sjtymybtyh.bat [2010/12/19 13:59:52 | 000,000,000 | ---- | M] () -- C:\WPI_Log_2010.12.19_13.59.52.txt < %APPDATA%\Adobe\Update\*.* > < %ALLUSERSPROFILE%\Favorites\*.* > < %systemroot%\*.jpg > < %systemroot%\*.png > < %systemroot%\*.scr > < %systemroot%\*._sy > < %systemroot%\Fonts\*.com > < %systemroot%\Fonts\*.dll > < %systemroot%\Fonts\*.ini > [2010/12/19 12:48:59 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\desktop.ini < %systemroot%\Fonts\*.ini2 > < %systemroot%\Fonts\*.exe > < %systemroot%\REPAIR\*.bak1 > < %systemroot%\REPAIR\*.ini > < %systemroot%\system32\*.jpg > < %systemroot%\system32\spool\prtprocs\w32x86\*.* > < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > [1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] < %systemroot%\Tasks\*.job /lockedfiles > < %PROGRAMFILES%\bak. /s > < %ALLUSERSPROFILE%\Start Menu\*.lnk /x > [2010/12/19 12:49:34 | 000,000,294 | -HS- | M] () -- C:\Documents and Settings\All Users\Start Menu\desktop.ini < %USERPROFILE%\Desktop\*.exe > [2010/12/20 15:02:34 | 002,672,312 | ---- | M] () -- C:\Documents and Settings\aygun@asie\Desktop\esetsmartinstaller_enu.exe [2010/12/21 14:28:24 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\aygun@asie\Desktop\OTL.exe < %PROGRAMFILES%\Common Files\*.* > < %systemroot%\*.config > < %systemroot%\system32\*.db > < %systemroot%\System32\config\*.sav > [2010/12/19 14:36:53 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav [2010/12/19 14:36:53 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav [2010/12/19 14:36:53 | 000,880,640 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav < %systemroot%\system32\bak. /s > < %systemroot%\system32\config\systemprofile\*.dat /x > < %systemroot%\*.src > < %systemroot%\install\*.* > < %systemroot%\system32\DLL\*.* > < %systemroot%\system32\HelpFiles\*.* > < %systemroot%\system32\rundll\*.* > < %systemroot%\winn32\*.* > < %systemroot%\Java\*.* > < %systemroot%\system32\test\*.* > < %systemroot%\system32\Rundll32\*.* > < %systemroot%\AppPatch\Custom\*.* > < %systemroot%\ADDINS\*.* > < %systemroot%\assembly\*.bak2 > < %systemroot%\Config\*.* > < %systemroot%\REPAIR\*.bak2 > < %systemroot%\SECURITY\Database\*.sdb /x > < %systemroot%\SYSTEM\*.bak2 > < %systemroot%\Web\*.bak2 > < %systemroot%\Driver Cache\*.* > < %PROGRAMFILES%\Mozilla Firefox\0*.exe > < %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x > [2010/12/19 12:54:59 | 000,000,119 | -HS- | M] () -- C:\Documents and Settings\aygun@asie\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini [2010/12/19 12:54:58 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\aygun@asie\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf < %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x > < %PROGRAMFILES%\Internet Explorer\*.tmp > < %PROGRAMFILES%\Internet Explorer\*.dat > < %USERPROFILE%\My Documents\*.exe > < %USERPROFILE%\*.exe > < %USERPROFILE%\Favorites\*.url /x > [2010/12/19 12:54:58 | 000,000,122 | -HS- | M] () -- C:\Documents and Settings\aygun@asie\Favorites\Desktop.ini < %ProgramFiles%\Microsoft Common\*.* > < %ProgramFiles%\TinyProxy. > < %systemroot%\System32\Wbem\*.exe > [2004/08/04 14:00:00 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\mofcomp.exe [2004/08/04 14:00:00 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\scrcons.exe [2004/08/04 14:00:00 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\unsecapp.exe [2004/08/04 14:00:00 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wbemtest.exe [2004/08/04 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\winmgmt.exe [2004/08/04 14:00:00 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiadap.exe [2004/08/04 14:00:00 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiapsrv.exe [2004/08/04 14:00:00 | 000,358,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmic.exe [2004/08/04 14:00:00 | 000,218,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiprvse.exe < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs > < End of report >

Проблемът ми и следния .. Влизам например в google и пиша нод32 и веднага ми затваря прозореца .. пускам да се инсталира антивирусна и ме изкарва.. Ако някой може да ми помогне МОЛЯ !!