валката

2011/02/28 20:24:18.0252 4888 TDSS rootkit removing tool 2.4.18.0 Feb 21 2011 11:08:08 2011/02/28 20:24:18.0955 4888 ================================================================================ 2011/02/28 20:24:18.0955 4888 SystemInfo: 2011/02/28 20:24:18.0955 4888 2011/02/28 20:24:18.0955 4888 OS Version: 5.1.2600 ServicePack: 3.0 2011/02/28 20:24:18.0955 4888 Product type: Workstation 2011/02/28 20:24:18.0955 4888 ComputerName: VAL-715ECFA680E 2011/02/28 20:24:18.0955 4888 UserName: valio 2011/02/28 20:24:18.0955 4888 Windows directory: C:\WINDOWS 2011/02/28 20:24:18.0955 4888 System windows directory: C:\WINDOWS 2011/02/28 20:24:18.0955 4888 Processor architecture: Intel x86 2011/02/28 20:24:18.0955 4888 Number of processors: 1 2011/02/28 20:24:18.0955 4888 Page size: 0x1000 2011/02/28 20:24:18.0955 4888 Boot type: Normal boot 2011/02/28 20:24:18.0955 4888 ================================================================================ 2011/02/28 20:24:19.0908 4888 Initialize success 2011/02/28 20:24:38.0455 4996 ================================================================================ 2011/02/28 20:24:38.0455 4996 Scan started 2011/02/28 20:24:38.0455 4996 Mode: Manual; 2011/02/28 20:24:38.0455 4996 ================================================================================ 2011/02/28 20:24:40.0158 4996 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 2011/02/28 20:24:40.0268 4996 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 2011/02/28 20:24:40.0533 4996 AFD (38d7b715504da4741df35e3594fe2099) C:\WINDOWS\System32\drivers\afd.sys 2011/02/28 20:24:40.0940 4996 ALCXWDM (34149a136b2b7525113950233f259ec1) C:\WINDOWS\system32\drivers\ALCXWDM.SYS 2011/02/28 20:24:41.0346 4996 AmdK7 (8fce268cdbdd83b23419d1f35f42c7b1) C:\WINDOWS\system32\DRIVERS\amdk7.sys 2011/02/28 20:24:41.0533 4996 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys 2011/02/28 20:24:41.0846 4996 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 2011/02/28 20:24:42.0080 4996 ati2mtag (d72ae3e4042ce3b3cedf7e7861619321) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys 2011/02/28 20:24:42.0236 4996 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 2011/02/28 20:24:42.0346 4996 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 2011/02/28 20:24:42.0424 4996 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 2011/02/28 20:24:42.0580 4996 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 2011/02/28 20:24:42.0768 4996 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys 2011/02/28 20:24:43.0049 4996 Disk (47b6aaec570f2c11d8bad80a064d8ed1) C:\WINDOWS\system32\DRIVERS\disk.sys 2011/02/28 20:24:43.0127 4996 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 2011/02/28 20:24:43.0252 4996 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 2011/02/28 20:24:43.0299 4996 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 2011/02/28 20:24:43.0455 4996 dvine (7fdf438d89a90ac7fb9b0a2142e0bf24) C:\WINDOWS\system32\drivers\mbapjaaluachn.sys 2011/02/28 20:24:43.0533 4996 eamon (1ceb779239965000b8f6adee17d4515b) C:\WINDOWS\system32\DRIVERS\eamon.sys 2011/02/28 20:24:43.0596 4996 ehdrv (7d300a43a7bd8769e0f901bf9e1ae367) C:\WINDOWS\system32\DRIVERS\ehdrv.sys 2011/02/28 20:24:43.0752 4996 EIO (4e60d89388edbb852112fd63779d4274) C:\WINDOWS\system32\drivers\EIO.sys 2011/02/28 20:24:43.0846 4996 epfw (15bfe00f030ea20955117bb0677e9668) C:\WINDOWS\system32\DRIVERS\epfw.sys 2011/02/28 20:24:43.0971 4996 Epfwndis (52310e0e603d7da79ecca7d764937a91) C:\WINDOWS\system32\DRIVERS\Epfwndis.sys 2011/02/28 20:24:44.0049 4996 epfwtdi (bdde7dd8fcdb1de7e879bb320b0605c0) C:\WINDOWS\system32\DRIVERS\epfwtdi.sys 2011/02/28 20:24:44.0143 4996 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 2011/02/28 20:24:44.0236 4996 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 2011/02/28 20:24:44.0315 4996 fgxlsahqpq (7fdf438d89a90ac7fb9b0a2142e0bf24) C:\WINDOWS\system32\drivers\fcxfprzhhme.sys 2011/02/28 20:24:44.0361 4996 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 2011/02/28 20:24:44.0440 4996 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 2011/02/28 20:24:44.0533 4996 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys 2011/02/28 20:24:44.0596 4996 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 2011/02/28 20:24:44.0643 4996 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 2011/02/28 20:24:44.0705 4996 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys 2011/02/28 20:24:44.0783 4996 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 2011/02/28 20:24:44.0908 4996 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 2011/02/28 20:24:45.0049 4996 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 2011/02/28 20:24:45.0190 4996 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 2011/02/28 20:24:45.0268 4996 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 2011/02/28 20:24:45.0440 4996 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 2011/02/28 20:24:45.0533 4996 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 2011/02/28 20:24:45.0611 4996 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 2011/02/28 20:24:45.0690 4996 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 2011/02/28 20:24:45.0752 4996 KSecDD (c6ebf1d6ad71df30db49b8d3287e1368) C:\WINDOWS\system32\drivers\KSecDD.sys 2011/02/28 20:24:45.0877 4996 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 2011/02/28 20:24:45.0955 4996 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 2011/02/28 20:24:46.0002 4996 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 2011/02/28 20:24:46.0080 4996 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 2011/02/28 20:24:46.0158 4996 MRxDAV (65e818c473e220b6ab762e1966296fd1) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 2011/02/28 20:24:46.0236 4996 MRxSmb (d09b9f0b9960dd41e73127b7814c115f) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 2011/02/28 20:24:46.0283 4996 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 2011/02/28 20:24:46.0361 4996 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 2011/02/28 20:24:46.0440 4996 Mup (6546fe6639499fa4bef180bdf08266a1) C:\WINDOWS\system32\drivers\Mup.sys 2011/02/28 20:24:46.0533 4996 NDIS (b5b1080d35974c0e718d64280761bcd5) C:\WINDOWS\system32\drivers\NDIS.sys 2011/02/28 20:24:46.0580 4996 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 2011/02/28 20:24:46.0674 4996 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 2011/02/28 20:24:46.0736 4996 NdisWan (b053a8411045fd0664b389a090cb2bbc) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 2011/02/28 20:24:46.0799 4996 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 2011/02/28 20:24:46.0861 4996 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 2011/02/28 20:24:46.0940 4996 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 2011/02/28 20:24:47.0096 4996 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys 2011/02/28 20:24:47.0252 4996 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 2011/02/28 20:24:47.0377 4996 Ntfs (4c51d5275ae8a16999edfe7e647d00de) C:\WINDOWS\system32\drivers\Ntfs.sys 2011/02/28 20:24:47.0580 4996 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 2011/02/28 20:24:47.0752 4996 ohci1394 (2553f7c60b8d291b5a812245e6d4da6e) C:\WINDOWS\system32\DRIVERS\ohci1394.sys 2011/02/28 20:24:47.0893 4996 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 2011/02/28 20:24:48.0018 4996 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 2011/02/28 20:24:48.0096 4996 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 2011/02/28 20:24:48.0252 4996 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 2011/02/28 20:24:48.0330 4996 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 2011/02/28 20:24:48.0377 4996 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 2011/02/28 20:24:48.0565 4996 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 2011/02/28 20:24:48.0627 4996 PQNTDrv (04f3971b70a7855f04d351aa4bee7799) C:\WINDOWS\system32\drivers\PQNTDrv.sys 2011/02/28 20:24:48.0705 4996 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 2011/02/28 20:24:48.0799 4996 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 2011/02/28 20:24:48.0861 4996 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys 2011/02/28 20:24:49.0190 4996 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 2011/02/28 20:24:49.0283 4996 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 2011/02/28 20:24:49.0346 4996 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 2011/02/28 20:24:49.0393 4996 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 2011/02/28 20:24:49.0455 4996 Rdbss (77050c6615f6eb5402f832b27fd695e0) C:\WINDOWS\system32\DRIVERS\rdbss.sys 2011/02/28 20:24:49.0533 4996 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 2011/02/28 20:24:49.0721 4996 rdpdr (c694a927eb7c354f7ae97955043a9641) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 2011/02/28 20:24:50.0002 4996 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 2011/02/28 20:24:50.0190 4996 rspndr (743d7d59767073a617b1dcc6c546f234) C:\WINDOWS\system32\DRIVERS\rspndr.sys 2011/02/28 20:24:50.0330 4996 RTL8023 (29f9879a1fd386f7251ae9fdadb2cbf1) C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys 2011/02/28 20:24:50.0596 4996 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 2011/02/28 20:24:50.0643 4996 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 2011/02/28 20:24:50.0846 4996 Sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 2011/02/28 20:24:50.0908 4996 Srv (70cd8b8dd2a680b128617c19eb0ab94f) C:\WINDOWS\system32\DRIVERS\srv.sys 2011/02/28 20:24:51.0002 4996 StarOpen (306521935042fc0a6988d528643619b3) C:\WINDOWS\system32\drivers\StarOpen.sys 2011/02/28 20:24:51.0065 4996 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 2011/02/28 20:24:51.0330 4996 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 2011/02/28 20:24:51.0471 4996 Tcpip (367de8e5f638c091f49273144274f629) C:\WINDOWS\system32\DRIVERS\tcpip.sys 2011/02/28 20:24:51.0549 4996 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 2011/02/28 20:24:51.0736 4996 uagp35 (d85938f272d1bcf3db3a31fc0a048928) C:\WINDOWS\system32\DRIVERS\uagp35.sys 2011/02/28 20:24:51.0815 4996 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 2011/02/28 20:24:51.0971 4996 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 2011/02/28 20:24:52.0096 4996 usbehci (152ee0baa614388273a0b9ae9c9fd5a0) C:\WINDOWS\system32\DRIVERS\usbehci.sys 2011/02/28 20:24:52.0190 4996 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 2011/02/28 20:24:52.0268 4996 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 2011/02/28 20:24:52.0346 4996 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 2011/02/28 20:24:52.0424 4996 viaagp1 (4b039bbd037b01f5db5a144c837f283a) C:\WINDOWS\system32\DRIVERS\viaagp1.sys 2011/02/28 20:24:52.0486 4996 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys 2011/02/28 20:24:52.0533 4996 viasraid (1493f351e5a4b915fb5bbb735c14004b) C:\WINDOWS\system32\DRIVERS\viasraid.sys 2011/02/28 20:24:52.0580 4996 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 2011/02/28 20:24:52.0721 4996 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 2011/02/28 20:24:52.0893 4996 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 2011/02/28 20:24:53.0221 4996 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 2011/02/28 20:24:53.0471 4996 WudfPf (6ff66513d372d479ef1810223c8d20ce) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 2011/02/28 20:24:53.0643 4996 \HardDisk0 - detected Rootkit.Win32.TDSS.tdl4 (0) 2011/02/28 20:24:53.0658 4996 ================================================================================ 2011/02/28 20:24:53.0658 4996 Scan finished 2011/02/28 20:24:53.0658 4996 ================================================================================ 2011/02/28 20:24:53.0721 4988 Detected object count: 1 2011/02/28 20:25:28.0408 4988 \HardDisk0 - will be cured after reboot 2011/02/28 20:25:28.0408 4988 Rootkit.Win32.TDSS.tdl4(\HardDisk0) - User select action: Cure 2011/02/28 20:25:56.0830 4880 Deinitialize success 2011/02/28 20:24:18.0252 4888 TDSS rootkit removing tool 2.4.18.0 Feb 21 2011 11:08:08 2011/02/28 20:24:18.0955 4888 ================================================================================ 2011/02/28 20:24:18.0955 4888 SystemInfo: 2011/02/28 20:24:18.0955 4888 2011/02/28 20:24:18.0955 4888 OS Version: 5.1.2600 ServicePack: 3.0 2011/02/28 20:24:18.0955 4888 Product type: Workstation 2011/02/28 20:24:18.0955 4888 ComputerName: VAL-715ECFA680E 2011/02/28 20:24:18.0955 4888 UserName: valio 2011/02/28 20:24:18.0955 4888 Windows directory: C:\WINDOWS 2011/02/28 20:24:18.0955 4888 System windows directory: C:\WINDOWS 2011/02/28 20:24:18.0955 4888 Processor architecture: Intel x86 2011/02/28 20:24:18.0955 4888 Number of processors: 1 2011/02/28 20:24:18.0955 4888 Page size: 0x1000 2011/02/28 20:24:18.0955 4888 Boot type: Normal boot 2011/02/28 20:24:18.0955 4888 ================================================================================ 2011/02/28 20:24:19.0908 4888 Initialize success 2011/02/28 20:24:38.0455 4996 ================================================================================ 2011/02/28 20:24:38.0455 4996 Scan started 2011/02/28 20:24:38.0455 4996 Mode: Manual; 2011/02/28 20:24:38.0455 4996 ================================================================================ 2011/02/28 20:24:40.0158 4996 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 2011/02/28 20:24:40.0268 4996 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 2011/02/28 20:24:40.0533 4996 AFD (38d7b715504da4741df35e3594fe2099) C:\WINDOWS\System32\drivers\afd.sys 2011/02/28 20:24:40.0940 4996 ALCXWDM (34149a136b2b7525113950233f259ec1) C:\WINDOWS\system32\drivers\ALCXWDM.SYS 2011/02/28 20:24:41.0346 4996 AmdK7 (8fce268cdbdd83b23419d1f35f42c7b1) C:\WINDOWS\system32\DRIVERS\amdk7.sys 2011/02/28 20:24:41.0533 4996 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys 2011/02/28 20:24:41.0846 4996 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 2011/02/28 20:24:42.0080 4996 ati2mtag (d72ae3e4042ce3b3cedf7e7861619321) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys 2011/02/28 20:24:42.0236 4996 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 2011/02/28 20:24:42.0346 4996 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 2011/02/28 20:24:42.0424 4996 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 2011/02/28 20:24:42.0580 4996 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 2011/02/28 20:24:42.0768 4996 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys 2011/02/28 20:24:43.0049 4996 Disk (47b6aaec570f2c11d8bad80a064d8ed1) C:\WINDOWS\system32\DRIVERS\disk.sys 2011/02/28 20:24:43.0127 4996 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 2011/02/28 20:24:43.0252 4996 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 2011/02/28 20:24:43.0299 4996 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 2011/02/28 20:24:43.0455 4996 dvine (7fdf438d89a90ac7fb9b0a2142e0bf24) C:\WINDOWS\system32\drivers\mbapjaaluachn.sys 2011/02/28 20:24:43.0533 4996 eamon (1ceb779239965000b8f6adee17d4515b) C:\WINDOWS\system32\DRIVERS\eamon.sys 2011/02/28 20:24:43.0596 4996 ehdrv (7d300a43a7bd8769e0f901bf9e1ae367) C:\WINDOWS\system32\DRIVERS\ehdrv.sys 2011/02/28 20:24:43.0752 4996 EIO (4e60d89388edbb852112fd63779d4274) C:\WINDOWS\system32\drivers\EIO.sys 2011/02/28 20:24:43.0846 4996 epfw (15bfe00f030ea20955117bb0677e9668) C:\WINDOWS\system32\DRIVERS\epfw.sys 2011/02/28 20:24:43.0971 4996 Epfwndis (52310e0e603d7da79ecca7d764937a91) C:\WINDOWS\system32\DRIVERS\Epfwndis.sys 2011/02/28 20:24:44.0049 4996 epfwtdi (bdde7dd8fcdb1de7e879bb320b0605c0) C:\WINDOWS\system32\DRIVERS\epfwtdi.sys 2011/02/28 20:24:44.0143 4996 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 2011/02/28 20:24:44.0236 4996 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 2011/02/28 20:24:44.0315 4996 fgxlsahqpq (7fdf438d89a90ac7fb9b0a2142e0bf24) C:\WINDOWS\system32\drivers\fcxfprzhhme.sys 2011/02/28 20:24:44.0361 4996 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 2011/02/28 20:24:44.0440 4996 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 2011/02/28 20:24:44.0533 4996 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys 2011/02/28 20:24:44.0596 4996 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 2011/02/28 20:24:44.0643 4996 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 2011/02/28 20:24:44.0705 4996 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys 2011/02/28 20:24:44.0783 4996 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 2011/02/28 20:24:44.0908 4996 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 2011/02/28 20:24:45.0049 4996 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 2011/02/28 20:24:45.0190 4996 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 2011/02/28 20:24:45.0268 4996 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 2011/02/28 20:24:45.0440 4996 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 2011/02/28 20:24:45.0533 4996 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 2011/02/28 20:24:45.0611 4996 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 2011/02/28 20:24:45.0690 4996 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 2011/02/28 20:24:45.0752 4996 KSecDD (c6ebf1d6ad71df30db49b8d3287e1368) C:\WINDOWS\system32\drivers\KSecDD.sys 2011/02/28 20:24:45.0877 4996 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 2011/02/28 20:24:45.0955 4996 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 2011/02/28 20:24:46.0002 4996 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 2011/02/28 20:24:46.0080 4996 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 2011/02/28 20:24:46.0158 4996 MRxDAV (65e818c473e220b6ab762e1966296fd1) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 2011/02/28 20:24:46.0236 4996 MRxSmb (d09b9f0b9960dd41e73127b7814c115f) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 2011/02/28 20:24:46.0283 4996 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 2011/02/28 20:24:46.0361 4996 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 2011/02/28 20:24:46.0440 4996 Mup (6546fe6639499fa4bef180bdf08266a1) C:\WINDOWS\system32\drivers\Mup.sys 2011/02/28 20:24:46.0533 4996 NDIS (b5b1080d35974c0e718d64280761bcd5) C:\WINDOWS\system32\drivers\NDIS.sys 2011/02/28 20:24:46.0580 4996 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 2011/02/28 20:24:46.0674 4996 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 2011/02/28 20:24:46.0736 4996 NdisWan (b053a8411045fd0664b389a090cb2bbc) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 2011/02/28 20:24:46.0799 4996 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 2011/02/28 20:24:46.0861 4996 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 2011/02/28 20:24:46.0940 4996 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 2011/02/28 20:24:47.0096 4996 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys 2011/02/28 20:24:47.0252 4996 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 2011/02/28 20:24:47.0377 4996 Ntfs (4c51d5275ae8a16999edfe7e647d00de) C:\WINDOWS\system32\drivers\Ntfs.sys 2011/02/28 20:24:47.0580 4996 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 2011/02/28 20:24:47.0752 4996 ohci1394 (2553f7c60b8d291b5a812245e6d4da6e) C:\WINDOWS\system32\DRIVERS\ohci1394.sys 2011/02/28 20:24:47.0893 4996 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 2011/02/28 20:24:48.0018 4996 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 2011/02/28 20:24:48.0096 4996 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 2011/02/28 20:24:48.0252 4996 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 2011/02/28 20:24:48.0330 4996 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 2011/02/28 20:24:48.0377 4996 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 2011/02/28 20:24:48.0565 4996 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 2011/02/28 20:24:48.0627 4996 PQNTDrv (04f3971b70a7855f04d351aa4bee7799) C:\WINDOWS\system32\drivers\PQNTDrv.sys 2011/02/28 20:24:48.0705 4996 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 2011/02/28 20:24:48.0799 4996 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 2011/02/28 20:24:48.0861 4996 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys 2011/02/28 20:24:49.0190 4996 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 2011/02/28 20:24:49.0283 4996 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 2011/02/28 20:24:49.0346 4996 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 2011/02/28 20:24:49.0393 4996 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 2011/02/28 20:24:49.0455 4996 Rdbss (77050c6615f6eb5402f832b27fd695e0) C:\WINDOWS\system32\DRIVERS\rdbss.sys 2011/02/28 20:24:49.0533 4996 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 2011/02/28 20:24:49.0721 4996 rdpdr (c694a927eb7c354f7ae97955043a9641) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 2011/02/28 20:24:50.0002 4996 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 2011/02/28 20:24:50.0190 4996 rspndr (743d7d59767073a617b1dcc6c546f234) C:\WINDOWS\system32\DRIVERS\rspndr.sys 2011/02/28 20:24:50.0330 4996 RTL8023 (29f9879a1fd386f7251ae9fdadb2cbf1) C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys 2011/02/28 20:24:50.0596 4996 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 2011/02/28 20:24:50.0643 4996 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 2011/02/28 20:24:50.0846 4996 Sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 2011/02/28 20:24:50.0908 4996 Srv (70cd8b8dd2a680b128617c19eb0ab94f) C:\WINDOWS\system32\DRIVERS\srv.sys 2011/02/28 20:24:51.0002 4996 StarOpen (306521935042fc0a6988d528643619b3) C:\WINDOWS\system32\drivers\StarOpen.sys 2011/02/28 20:24:51.0065 4996 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 2011/02/28 20:24:51.0330 4996 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 2011/02/28 20:24:51.0471 4996 Tcpip (367de8e5f638c091f49273144274f629) C:\WINDOWS\system32\DRIVERS\tcpip.sys 2011/02/28 20:24:51.0549 4996 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 2011/02/28 20:24:51.0736 4996 uagp35 (d85938f272d1bcf3db3a31fc0a048928) C:\WINDOWS\system32\DRIVERS\uagp35.sys 2011/02/28 20:24:51.0815 4996 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 2011/02/28 20:24:51.0971 4996 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 2011/02/28 20:24:52.0096 4996 usbehci (152ee0baa614388273a0b9ae9c9fd5a0) C:\WINDOWS\system32\DRIVERS\usbehci.sys 2011/02/28 20:24:52.0190 4996 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 2011/02/28 20:24:52.0268 4996 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 2011/02/28 20:24:52.0346 4996 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 2011/02/28 20:24:52.0424 4996 viaagp1 (4b039bbd037b01f5db5a144c837f283a) C:\WINDOWS\system32\DRIVERS\viaagp1.sys 2011/02/28 20:24:52.0486 4996 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys 2011/02/28 20:24:52.0533 4996 viasraid (1493f351e5a4b915fb5bbb735c14004b) C:\WINDOWS\system32\DRIVERS\viasraid.sys 2011/02/28 20:24:52.0580 4996 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 2011/02/28 20:24:52.0721 4996 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 2011/02/28 20:24:52.0893 4996 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 2011/02/28 20:24:53.0221 4996 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 2011/02/28 20:24:53.0471 4996 WudfPf (6ff66513d372d479ef1810223c8d20ce) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 2011/02/28 20:24:53.0643 4996 \HardDisk0 - detected Rootkit.Win32.TDSS.tdl4 (0) 2011/02/28 20:24:53.0658 4996 ================================================================================ 2011/02/28 20:24:53.0658 4996 Scan finished 2011/02/28 20:24:53.0658 4996 ================================================================================ 2011/02/28 20:24:53.0721 4988 Detected object count: 1 2011/02/28 20:25:28.0408 4988 \HardDisk0 - will be cured after reboot 2011/02/28 20:25:28.0408 4988 Rootkit.Win32.TDSS.tdl4(\HardDisk0) - User select action: Cure 2011/02/28 20:25:56.0830 4880 Deinitialize success DDS (Ver_10-12-12.02) - NTFSx86 Run by valio at 21:18:08,03 on 28.02.2011 Ј. Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.511.155 [GMT 2:00] AV: ESET Smart Security 4.2 *Enabled/Outdated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} FW: ESET Personal firewall *Enabled* ============== Running Processes =============== C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost -k DcomLaunch C:\WINDOWS\system32\svchost -k rpcss C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Azasye.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\ESET\ESET Smart Security\egui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\VIA\RAID\raid_tool.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\TEMP\ipya\setup.exe C:\Program Files\Application Updater\ApplicationUpdater.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\System32\alg.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\taskmgr.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Documents and Settings\valio\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\valio\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\valio\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\valio\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\valio\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\DOCUME~1\valio\LOCALS~1\Temp\Ahq.exe C:\Documents and Settings\valio\Desktop\dds.scr C:\WINDOWS\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== uStart Page = hxxp://fullarticles.net uInternet Connection Wizard,ShellNext = iexplore uURLSearchHooks: Winamp Search Class: {57bca5fa-5dbb-45a2-b558-1755c3f6253b} - c:\program files\winamp toolbar\winamptb.dll {e312764e-7706-43f1-8dab-fcdd2b1e416d} uURLSearchHooks: H - No File mURLSearchHooks: Winamp Search Class: {57bca5fa-5dbb-45a2-b558-1755c3f6253b} - c:\program files\winamp toolbar\winamptb.dll mWinlogon: SfcDisable=-99 (0xffffff9d) BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll BHO: Winamp Toolbar Loader: {25cee8ec-5730-41bc-8b58-22ddc8ab8c20} - c:\program files\winamp toolbar\winamptb.dll BHO: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\ConduitEngine.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5612.1312\swg.dll BHO: {b922d405-6d13-4a2b-ae89-08a030da4402} - pdfforge Toolbar BHO: PandoraTV Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll {e312764e-7706-43f1-8dab-fcdd2b1e416d} BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll BHO: OfferBox: {fc0d62c2-9640-4aeb-a5d5-cf25df11fa8c} - c:\program files\offerbox\OfferBoxBHO.dll TB: Winamp Toolbar: {ebf2ba02-9094-4c5a-858b-bb198f3d8de2} - c:\program files\winamp toolbar\winamptb.dll TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll TB: pdfforge Toolbar: {b922d405-6d13-4a2b-ae89-08a030da4402} - TB: PandoraTV Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll TB: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\ConduitEngine.dll TB: {414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - No File uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [userini] c:\windows\system32\userini.exe uRun: [wuaucldt] c:\documents and settings\valio\wuaucldt.exe uRun: [iiXjeGP0] c:\documents and settings\all users\application data\iiXjeGP0.exe uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe" uRun: [CE8SIIFGSU] c:\docume~1\valio\locals~1\temp\Ahk.exe uRun: [LKGGOPABUH] c:\docume~1\valio\locals~1\temp\Ahq.exe uRun: [LKGGOPABUH] c:\docume~1\valio\locals~1\temp\Ahq.exe mRun: [ATIPTA] c:\program files\ati technologies\ati control panel\atiptaxx.exe mRun: [HP Software Update] "c:\program files\hp\hp software update\HPWuSchd2.exe" mRun: [HP Component Manager] "c:\program files\hp\hpcoretech\hpcmpmgr.exe" mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice mRun: [Regedit32] c:\windows\system32\regedit.exe mRun: [Regedit32] c:\windows\system32\regedit.exe dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE dRunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N dRunOnce: [showDeskFix] regsvr32 /s /n /i:u shell32 uExplorerRun: [userini] c:\windows\system32\userini.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpimag~1.lnk - c:\program files\hp\digital imaging\bin\hpqthb08.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\viarai~1.lnk - c:\program files\via\raid\raid_tool.exe uPolicies-system: Y = IE: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?s=100000349&p=ZNxpt437YYBG&si=&a=Y5NZlw9PW2opnl2UnJ5_Sg&n=20101126 11 IE: &Winamp Search - c:\documents and settings\all users\application data\winamp toolbar\ietoolbar\resources\en-us\local\search.html IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab TCP: {117D813E-7750-434F-B7AF-0A3D62CFA5AB} = 84.54.128.9 84.54.129.94 Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - c:\program files\hp\hpcoretech\comp\hpuiprot.dll Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: AtiExtEvent - Ati2evxx.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll mASetup: {D58F39FF-953E-4F45-898F-59F243B9A523} - RUNDLL32 advpack.dll,LaunchINFSection Sidebar.inf,Register ============= SERVICES / DRIVERS =============== R?2 AMService;AMService;c:\windows\temp\ipya\setup.exe run --> c:\windows\temp\ipya\setup.exe run [?] R0 viasraid;viasraid;c:\windows\system32\drivers\viasraid.sys [2009-6-25 75904] R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2010-7-29 115008] R2 Application Updater;Application Updater;c:\program files\application updater\ApplicationUpdater.exe [2010-1-8 380928] R2 ekrn;ESET Service;c:\program files\eset\eset smart security\ekrn.exe [2010-11-4 810144] R2 SSHNAS;SSHNAS;c:\windows\system32\svchost.exe -k netsvcs [2008-4-14 14336] S0 dvine;dvine;c:\windows\system32\drivers\mbapjaaluachn.sys [2011-2-5 52096] S0 fgxlsahqpq;fgxlsahqpq;c:\windows\system32\drivers\fcxfprzhhme.sys [2011-2-5 52096] S0 qhrrzh;qhrrzh;c:\windows\system32\drivers\qhrrzh.sys [2011-2-5 0] S2 eqyiueiiu26o;Crystal Report Application Server;c:\windows\system32\goocouj.exe --> c:\windows\system32\goocouj.exe [?] S2 imapiapi.exe;Imapiapi;c:\windows\system32\imapiapi.exe [2011-2-27 562688] =============== Created Last 30 ================ 2011-02-28 18:54:29 132608 ----a-w- c:\windows\Azasye.exe 2011-02-28 18:27:56 132608 ----a-w- c:\windows\Azasyd.exe 2011-02-27 21:58:59 -------- d-----w- c:\windows\system32\2E2214BEBDC1EB7F6F1AF36239AE4736 2011-02-27 21:58:42 562688 ----a-w- c:\windows\system32\imapiapi.exe 2011-02-26 14:15:40 -------- d-----w- c:\docume~1\valio\locals~1\applic~1\uTorrentBar 2011-02-26 13:33:10 223744 ----a-w- c:\windows\Azasyc.exe 2011-02-25 21:46:55 66048 ----a-w- c:\docume~1\valio\applic~1\44B8.tmp 2011-02-25 20:25:28 66048 ----a-w- c:\docume~1\valio\applic~1\40E8.tmp 2011-02-25 13:47:00 170496 ----a-w- c:\docume~1\valio\applic~1\7.tmp 2011-02-25 13:26:09 61952 ----a-w- c:\docume~1\valio\applic~1\195.tmp 2011-02-25 13:16:02 170496 ----a-w- c:\docume~1\valio\applic~1\A.tmp 2011-02-25 12:33:03 223744 ----a-w- c:\windows\Azasyb.exe 2011-02-25 01:32:11 64912 ----a-w- c:\docume~1\valio\applic~1\53D9.tmp 2011-02-24 22:09:17 65024 ----a-w- c:\docume~1\valio\applic~1\472C.tmp 2011-02-24 17:09:19 5789 ----a-w- C:\huadio.tmp 2011-02-24 13:55:58 61440 ----a-w- c:\docume~1\valio\applic~1\1274.tmp 2011-02-24 13:54:19 208896 ----a-w- c:\docume~1\valio\applic~1\126D.tmp 2011-02-24 13:53:28 61440 ----a-w- c:\docume~1\valio\applic~1\1207.tmp 2011-02-23 18:49:28 -------- d-----w- c:\program files\Emsisoft Anti-Malware 2011-02-23 17:15:08 -------- d-----w- c:\docume~1\alluse~1\applic~1\Comodo Downloader 2011-02-23 09:59:42 223744 ----a-w- c:\windows\Azasya.exe 2011-02-23 06:31:48 -------- d-----w- C:\spoolerlogs 2011-02-22 18:46:51 193 ----a-w- c:\docume~1\valio\applic~1\2ABC.tmp 2011-02-21 15:58:06 -------- d-----w- c:\docume~1\valio\applic~1\OfferBox 2011-02-21 15:58:04 -------- d-----w- c:\program files\OfferBox 2011-02-21 13:27:48 174592 ----a-w- c:\windows\system32\sshnas21.dll 2011-02-09 19:34:53 74880 ----a-w- c:\windows\system32\drivers\wmalazfy.sys 2011-02-09 19:34:53 18298 ----a-w- c:\windows\system32\MAIF4.tmp 2011-02-05 17:33:02 52096 ----a-w- c:\windows\system32\drivers\mbapjaaluachn.sys 2011-02-05 17:33:02 18300 ----a-w- c:\windows\system32\MAIDB.tmp 2011-02-05 16:22:14 52096 ----a-w- c:\windows\system32\drivers\fcxfprzhhme.sys 2011-02-05 16:22:14 18300 ----a-w- c:\windows\system32\MAIFF.tmp 2011-02-05 16:22:03 0 ----a-w- c:\windows\system32\drivers\qhrrzh.sys 2011-02-04 06:57:02 182912 ----a-w- c:\windows\system32\dllcache\ndis.sys 2011-02-04 06:56:56 58880 ----a-w- c:\documents and settings\valio\etdtojyn.exe 2011-02-03 16:50:22 49152 ----a-w- c:\windows\system32\ChCfg.exe 2011-02-03 16:47:56 -------- d-----w- c:\program files\Realtek AC97 2011-02-03 16:47:38 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\ctor.dll 2011-02-03 16:47:38 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\DotNetInstaller.exe 2011-02-03 16:47:38 274432 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iscript.dll 2011-02-03 16:47:38 204800 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iuser.dll 2011-02-03 16:47:37 757760 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iKernel.dll 2011-02-03 16:47:22 200836 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iGdi.dll 2011-02-03 16:47:19 331908 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\setup.dll 2011-02-02 09:09:39 0 ----a-w- c:\windows\system32\drivers\rfwxum.sys ==================== Find3M ==================== 2011-02-15 06:12:50 1033728 ----a-w- c:\windows\explorer.exe 2011-01-29 04:06:19 181 ----a-w- C:\winshg.exe 2011-01-28 06:13:21 184 ----a-w- C:\m23.exe 2011-01-25 05:36:01 28 ----a-w- C:\d.exe 2010-12-26 17:48:32 73728 ----a-w- c:\windows\system32\javacpl.cpl 2010-12-26 17:48:32 472808 ----a-w- c:\windows\system32\deployJava1.dll 2010-11-30 21:21:11 0 ----a-w- c:\windows\system32\ConduitEngine.tmp =================== ROOTKIT ==================== Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net Windows 5.1.2600 Disk: ST380013 rev.3.19 -> Harddisk0\DR0 -> \Device\Scsi\viasraid1 device: opened successfully user: MBR read successfully Disk trace: called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x821DB439]<< _asm { PUSH EBP; MOV EBP, ESP; PUSH ECX; MOV EAX, [EBP+0x8]; CMP EAX, [0x821e17b8]; MOV EAX, [0x821e1834]; PUSH EBX; PUSH ESI; MOV ESI, [EBP+0xc]; MOV EBX, [ESI+0x60]; PUSH EDI; JNZ 0x20; MOV [EBP+0x8], EAX; } 1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x82F66AB8] 3 CLASSPNP[0xF86D6FD7] -> nt!IofCallDriver[0x804E37D5] -> [0x82DBAAB0] \Driver\viasraid[0x82AE4678] -> IRP_MJ_CREATE -> 0x821DB439 kernel: MBR read successfully _asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; STI ; PUSH AX; POP ES; PUSH AX; POP DS; CLD ; MOV SI, 0x7c1b; MOV DI, 0x61b; PUSH AX; PUSH DI; MOV CX, 0x1e5; REP MOVSB ; RETF ; MOV BP, 0x7be; MOV CL, 0x4; CMP [bP+0x0], CH; JL 0x2e; JNZ 0x3a; } detected disk devices: \Device\Scsi\viasraid1Port2Path0Target0Lun0 -> \??\SCSI#Disk&Ven_ST380013&Prod_AS&Rev_3.19#4&3a171b29&0&000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} device not found detected hooks: user & kernel MBR OK Warning: possible TDL3 rootkit infection ! ============= FINISH: 21:19:32,18 =============== Ask.com toolbar не успях да разкарам, мога единствено да му изтрия папката... UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT DDS (Ver_10-12-12.02) Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 25.6.2009 г. 00:15:21 System Uptime: 28.2.2011 г. 20:53:56 (1 hours ago) Motherboard: Gigabyte Technology Co., Ltd. | | GA-7VT880 Processor: AMD Sempron 2800+ | Socket A | 2003/167mhz ==== Disk Partitions ========================= A: is Removable C: is FIXED (NTFS) - 20 GiB total, 2,927 GiB free. D: is FIXED (NTFS) - 55 GiB total, 23,096 GiB free. E: is CDROM () ==== Disabled Device Manager Items ============= Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318} Description: Microsoft Kernel Audio Splitter Device ID: SW\{2F412AB5-ED3A-4590-AB24-B0CE2AA77D3C}\{9B365890-165F-11D0-A195-0020AFD156E4} Manufacturer: Microsoft Name: Microsoft Kernel Audio Splitter PNP Device ID: SW\{2F412AB5-ED3A-4590-AB24-B0CE2AA77D3C}\{9B365890-165F-11D0-A195-0020AFD156E4} Service: splitter Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318} Description: Microsoft Kernel Acoustic Echo Canceller Device ID: SW\{4245FF73-1DB4-11D2-86E4-98AE20524153}\{9B365890-165F-11D0-A195-0020AFD156E4} Manufacturer: Microsoft Name: Microsoft Kernel Acoustic Echo Canceller PNP Device ID: SW\{4245FF73-1DB4-11D2-86E4-98AE20524153}\{9B365890-165F-11D0-A195-0020AFD156E4} Service: aec Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318} Description: Microsoft Kernel GS Wavetable Synthesizer Device ID: SW\{6C1B9F60-C0A9-11D0-96D8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4} Manufacturer: Microsoft Name: Microsoft Kernel GS Wavetable Synthesizer PNP Device ID: SW\{6C1B9F60-C0A9-11D0-96D8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4} Service: swmidi Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318} Description: Microsoft Kernel DLS Synthesizer Device ID: SW\{8C07DD50-7A8D-11D2-8F8C-00C04FBF8FEF}\DMUSIC Manufacturer: Microsoft Name: Microsoft Kernel DLS Synthesizer PNP Device ID: SW\{8C07DD50-7A8D-11D2-8F8C-00C04FBF8FEF}\DMUSIC Service: DMusic Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318} Description: Microsoft Kernel Wave Audio Mixer Device ID: SW\{B7EAFDC0-A680-11D0-96D8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4} Manufacturer: Microsoft Name: Microsoft Kernel Wave Audio Mixer PNP Device ID: SW\{B7EAFDC0-A680-11D0-96D8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4} Service: kmixer Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318} Description: Microsoft Kernel DRM Audio Descrambler Device ID: SW\{EEC12DB6-AD9C-4168-8658-B03DAEF417FE}\{ABD61E00-9350-47E2-A632-4438B90C6641} Manufacturer: Microsoft Name: Microsoft Kernel DRM Audio Descrambler PNP Device ID: SW\{EEC12DB6-AD9C-4168-8658-B03DAEF417FE}\{ABD61E00-9350-47E2-A632-4438B90C6641} Service: drmkaud Class GUID: {EEC5AD98-8080-425F-922A-DABF3DE3F69A} Description: Nokia 5130c-2 Device ID: ROOT\WPD\0000 Manufacturer: Nokia Name: Nokia 5130c-2 PNP Device ID: ROOT\WPD\0000 Service: WUDFRd ==== System Restore Points =================== No restore point in system. ==== Installed Programs ====================== %WS4_ARP_DISPLAY% 1310 1310_Help 1310Tour 1310Trb ABBYY FineReader 7.0 Professional Edition Adobe Flash Player 10 ActiveX Adobe Reader 8.1.6 AiO_Scan AiOSoftware Ask Toolbar ATI - Software Uninstall Utility ATI Control Panel ATI Display Driver Bonjour BufferChm Bulgarian(Phonetic-ici) CCleaner Copy CreativeProjects CreativeProjectsTemplates CueTour Destinations Director DocProc DocumentViewer Easy MP3 Cutter 2.9 Enable S3 for USB Device ESET Smart Security FastStone Photo Resizer 3.0 Fax FlexType 2K GIMP 2.6.6 Google Chrome Google Toolbar for Internet Explorer Hotfix for Windows XP (KB2158563) Hotfix for Windows XP (KB2443685) Hotfix for Windows XP (KB976002-v5) Hotfix for Windows XP (KB976098-v2) Hotfix for Windows XP (KB979306) Hotfix for Windows XP (KB981793) HP Diagnostic Assistant HP Image Zone 4.2 HP PSC & OfficeJet 4.2 HP Software Update HPSystemDiagnostics InstantShare iTunes Java Auto Updater Java 6 Update 22 Malwarebytes' Anti-Malware Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Security Update (KB2416447) Microsoft .NET Framework 1.1 Security Update (KB979906) Microsoft AppLocale Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 Microsoft Office 2007 Recent Documents Gadget Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Project 2007 Service Pack 2 (SP2) Microsoft Office Project MUI (English) 2007 Microsoft Office Project Professional 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Visio 2007 Service Pack 2 (SP2) Microsoft Office Visio MUI (English) 2007 Microsoft Office Visio Professional 2007 Microsoft Office Word MUI (English) 2007 Microsoft Silverlight Microsoft Software Update for Web Folders (English) 12 Microsoft User-Mode Driver Framework Feature Pack 1.7 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Windows Application Compatibility Database MSVC80_x86_v2 MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) MV2Player (remove only) Nero 6 Ultra Edition Nokia Connectivity Cable Driver Nokia PC Suite Norton PartitionMagic Norton PartitionMagic 8.0 OfferBox Browser Overland PC Connectivity Solution PDFCreator pdfforge Toolbar v1.1.2 PhotoGallery PrintScreen ProductContext QFolder QuickProjects QuickTime Readme Realtek AC'97 Audio REALTEK Gigabit and Fast Ethernet NIC Driver SAMSUNG CDMA Modem Driver Set SAMSUNG Mobile Composite Device Software Samsung Mobile phone USB driver Software SAMSUNG Mobile USB Modem 1.0 Software SAMSUNG Mobile USB Modem Software Samsung PC Studio 3 Samsung Samples Installer Scan Security Update for 2007 Microsoft Office System (KB2288621) Security Update for 2007 Microsoft Office System (KB2288931) Security Update for 2007 Microsoft Office System (KB2289158) Security Update for 2007 Microsoft Office System (KB2344875) Security Update for 2007 Microsoft Office System (KB2345043) Security Update for 2007 Microsoft Office System (KB969559) Security Update for 2007 Microsoft Office System (KB976321) Security Update for CAPICOM (KB931906) Security Update for Microsoft Office Access 2007 (KB979440) Security Update for Microsoft Office Excel 2007 (KB2345035) Security Update for Microsoft Office InfoPath 2007 (KB979441) Security Update for Microsoft Office PowerPoint 2007 (KB982158) Security Update for Microsoft Office PowerPoint Viewer (KB2413381) Security Update for Microsoft Office Publisher 2007 (KB2284697) Security Update for Microsoft Office system 2007 (972581) Security Update for Microsoft Office system 2007 (KB974234) Security Update for Microsoft Office Visio 2007 (KB982127) Security Update for Microsoft Office Visio Viewer 2007 (KB973709) Security Update for Microsoft Office Word 2007 (KB2344993) Security Update for Windows Internet Explorer 7 (KB974455) Security Update for Windows Internet Explorer 7 (KB976325) Security Update for Windows Internet Explorer 8 (KB2183461) Security Update for Windows Internet Explorer 8 (KB2360131) Security Update for Windows Internet Explorer 8 (KB2416400) Security Update for Windows Internet Explorer 8 (KB971961) Security Update for Windows Internet Explorer 8 (KB976325) Security Update for Windows Internet Explorer 8 (KB978207) Security Update for Windows Internet Explorer 8 (KB981332) Security Update for Windows Internet Explorer 8 (KB982381) Security Update for Windows Media Player (KB2378111) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB968816) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player (KB975558) Security Update for Windows Media Player (KB978695) Security Update for Windows Search 4 - KB963093 Security Update for Windows XP (KB2079403) Security Update for Windows XP (KB2115168) Security Update for Windows XP (KB2121546) Security Update for Windows XP (KB2160329) Security Update for Windows XP (KB2229593) Security Update for Windows XP (KB2259922) Security Update for Windows XP (KB2279986) Security Update for Windows XP (KB2286198) Security Update for Windows XP (KB2296011) Security Update for Windows XP (KB2296199) Security Update for Windows XP (KB2347290) Security Update for Windows XP (KB2360937) Security Update for Windows XP (KB2387149) Security Update for Windows XP (KB2419632) Security Update for Windows XP (KB2423089) Security Update for Windows XP (KB2436673) Security Update for Windows XP (KB2440591) Security Update for Windows XP (KB2443105) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956744) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB958869) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961371-v2) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB969947) Security Update for Windows XP (KB970238) Security Update for Windows XP (KB970430) Security Update for Windows XP (KB971468) Security Update for Windows XP (KB971486) Security Update for Windows XP (KB971557) Security Update for Windows XP (KB971633) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB971961) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973354) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973525) Security Update for Windows XP (KB973869) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975561) Security Update for Windows XP (KB975562) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977165) Security Update for Windows XP (KB977816) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978037) Security Update for Windows XP (KB978251) Security Update for Windows XP (KB978262) Security Update for Windows XP (KB978338) Security Update for Windows XP (KB978542) Security Update for Windows XP (KB978601) Security Update for Windows XP (KB978706) Security Update for Windows XP (KB979309) Security Update for Windows XP (KB979482) Security Update for Windows XP (KB979559) Security Update for Windows XP (KB979683) Security Update for Windows XP (KB979687) Security Update for Windows XP (KB980195) Security Update for Windows XP (KB980218) Security Update for Windows XP (KB980232) Security Update for Windows XP (KB980436) Security Update for Windows XP (KB981322) Security Update for Windows XP (KB981852) Security Update for Windows XP (KB981957) Security Update for Windows XP (KB981997) Security Update for Windows XP (KB982132) Security Update for Windows XP (KB982214) Security Update for Windows XP (KB982665) Security Update for Windows XP (KB982802) SkinsHP1 Skype Toolbars Skype™ 3.8 SopCast 3.2.9 Spelling Dictionaries Support For Adobe Reader 8 The KMPlayer (remove only) TrayApp Unload Update for 2007 Microsoft Office System (KB967642) Update for Microsoft Office OneNote 2007 (KB980729) Update for Microsoft Office Outlook 2007 (KB2412171) Update for Outlook 2007 Junk Email Filter (KB2483110) Update for Windows Internet Explorer 7 (KB976749) Update for Windows Internet Explorer 8 (KB976662) Update for Windows Internet Explorer 8 (KB980182) Update for Windows XP (KB2141007) Update for Windows XP (KB2345886) Update for Windows XP (KB2467659) Update for Windows XP (KB955759) Update for Windows XP (KB967715) Update for Windows XP (KB968389) Update for Windows XP (KB971737) Update for Windows XP (KB973687) Update for Windows XP (KB973815) VIA Integrated Setup Wizard WebFldrs XP WebReg Winamp Winamp Toolbar Windows Driver Package - Nokia Modem (06/01/2009 7.01.0.4) Windows Driver Package - Nokia Modem (10/05/2009 4.2) Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0) Windows Genuine Advantage Notifications (KB905474) Windows Internet Explorer 8 Windows Media Format 11 runtime Windows Media Player 11 Windows Rights Management Client Backwards Compatibility SP2 Windows Rights Management Client with Service Pack 2 Windows Sidebar съ»і°рсєё ёЅтµрфµ№с ·° Nero Burning Rom v6.6.1.4 ррхёІ°тѕр WinRAR µTorrent ==== Event Viewer Messages From Past Week ======== 28.2.2011 і. 21:15:40, error: Service Control Manager [7034] - The Imapiapi service terminated unexpectedly. It has done this 1 time(s). 28.2.2011 і. 21:10:40, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 20:57:31, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 20:22:44, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 20:21:53, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 20:01:17, error: Service Control Manager [7031] - The Print Spooler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. 28.2.2011 і. 18:24:50, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 17:30:19, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 12:42:50, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 12:40:04, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 11:32:02, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 10:56:22, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 03:42:22, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 02:51:11, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 01:59:31, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 01:41:05, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 01:02:38, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 00:42:46, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 00:23:49, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 28.2.2011 і. 00:04:08, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 23:29:42, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 22:47:37, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 22:16:55, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 21:57:39, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 21:40:49, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 20:49:50, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 19:57:28, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 19:19:45, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 18:56:45, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 18:33:17, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 18:14:03, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 17:56:24, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 17:21:53, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 17:01:42, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 16:26:51, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 15:36:24, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 14:44:06, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 14:27:03, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 13:51:16, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 13:31:34, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 12:53:33, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 12:01:18, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 11:10:06, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 10:16:26, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 09:42:56, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 09:25:24, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 09:06:42, error: Service Control Manager [7034] - The AMService service terminated unexpectedly. It has done this 1 time(s). 27.2.2011 і. 08:49:13, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 08:44:03, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 08:43:12, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 08:39:48, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 27.2.2011 і. 08:36:57, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751) 27.2.2011 і. 08:36:56, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751) 27.2.2011 і. 00:05:37, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 23:30:21, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 23:29:19, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 23:10:47, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 22:35:03, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 22:17:44, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 21:28:48, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 21:09:33, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 21:05:18, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 20:19:25, error: Service Control Manager [7034] - The AMService service terminated unexpectedly. It has done this 1 time(s). 26.2.2011 і. 19:19:33, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 19:15:39, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 19:15:32, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 19:15:15, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 19:13:07, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 16:49:23, error: Service Control Manager [7034] - The AMService service terminated unexpectedly. It has done this 1 time(s). 26.2.2011 і. 16:11:39, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 15:40:17, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 15:34:05, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 15:24:30, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 26.2.2011 і. 15:23:14, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 25.2.2011 і. 16:00:33, error: Service Control Manager [7034] - The AMService service terminated unexpectedly. It has done this 1 time(s). 25.2.2011 і. 15:47:08, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 25.2.2011 і. 15:16:30, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 25.2.2011 і. 15:16:08, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 25.2.2011 і. 14:54:47, error: Service Control Manager [7034] - The AMService service terminated unexpectedly. It has done this 1 time(s). 24.2.2011 і. 19:33:52, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 24.2.2011 і. 17:09:34, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 24.2.2011 і. 15:55:33, error: Dhcp [1008] - Your computer was unable to initialize a Network Interface attached to the system. The error code is: A device attached to the system is not functioning. . 23.2.2011 і. 21:43:41, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 23.2.2011 і. 21:10:37, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 23.2.2011 і. 20:21:31, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 23.2.2011 і. 19:30:20, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 23.2.2011 і. 19:29:20, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 23.2.2011 і. 19:09:44, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 23.2.2011 і. 18:49:47, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 23.2.2011 і. 18:49:45, error: Service Control Manager [7031] - The Print Spooler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. 23.2.2011 і. 18:48:36, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 23.2.2011 і. 17:05:29, error: Service Control Manager [7034] - The AMService service terminated unexpectedly. It has done this 1 time(s). 23.2.2011 і. 16:32:38, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 23.2.2011 і. 13:46:28, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 23.2.2011 і. 12:52:19, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 23.2.2011 і. 12:01:14, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 23.2.2011 і. 08:31:48, error: Service Control Manager [7031] - The Print Spooler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. 23.2.2011 і. 08:31:43, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 23.2.2011 і. 08:31:03, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 23.2.2011 і. 03:50:47, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 23.2.2011 і. 01:55:21, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 22.2.2011 і. 21:22:10, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 22.2.2011 і. 17:53:33, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 22.2.2011 і. 16:59:28, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 22.2.2011 і. 03:03:40, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 22.2.2011 і. 03:03:11, error: DCOM [10000] - Unable to start a DCOM Server: {A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}. The error: "%2" Happened while starting this command: "C:\Program Files\OfferBox\OfferBox.exe" -Embedding 21.2.2011 і. 16:32:17, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} ==== End Of File ===========================

Здравейте компа ми има проблем рестартира се сам ,изчезнаха ми драйверите на звука , блокира ми юсб жходовете и когато го включа го чакам по лколо половин час да зареди .Почиствах го с нод ,малауер .Изчистих доста гадинки но все си е тая мисли и се рестартва сам .Ако някой мойе да помогне снещо благодаря предварително! Attach.txt DDS.txt