krisss96

Благодаря и на Вас

Не, мисля че вече няма проблеми. Благодаря много за всичко.

Мисля за сега да не сканирам, но Ви благодаря много за помощта

Инсталирах Avira AntiVir и след това излезе това. Вече всичко наред ли е? Avira AntiVir Personal Report file date: вторник, Април 05, 2011 22:03 Scanning for 2566504 virus strains and unwanted programs. The program is running as an unrestricted full version. Online services are available: Licensee : Avira AntiVir Personal - FREE Antivirus Serial number : 0000149996-ADJIE-0000001 Platform : Windows XP Windows version : (Service Pack 3) [5.1.2600] Boot mode : Normally booted Username : user Computer name : USER-D628024881 Version information: BUILD.DAT : 10.0.0.635 31822 Bytes 3/7/2011 12:15:00 AVSCAN.EXE : 10.0.3.5 435368 Bytes 3/4/2011 11:36:52 AVSCAN.DLL : 10.0.3.0 46440 Bytes 4/1/2010 09:57:04 LUKE.DLL : 10.0.3.2 104296 Bytes 3/4/2011 11:36:59 LUKERES.DLL : 10.0.0.1 12648 Bytes 2/10/2010 20:40:49 VBASE000.VDF : 7.10.0.0 19875328 Bytes 11/6/2009 06:05:36 VBASE001.VDF : 7.11.0.0 13342208 Bytes 12/14/2010 11:37:07 VBASE002.VDF : 7.11.3.0 1950720 Bytes 2/9/2011 11:37:08 VBASE003.VDF : 7.11.3.1 2048 Bytes 2/9/2011 11:37:08 VBASE004.VDF : 7.11.3.2 2048 Bytes 2/9/2011 11:37:08 VBASE005.VDF : 7.11.3.3 2048 Bytes 2/9/2011 11:37:08 VBASE006.VDF : 7.11.3.4 2048 Bytes 2/9/2011 11:37:08 VBASE007.VDF : 7.11.3.5 2048 Bytes 2/9/2011 11:37:08 VBASE008.VDF : 7.11.3.6 2048 Bytes 2/9/2011 11:37:08 VBASE009.VDF : 7.11.3.7 2048 Bytes 2/9/2011 11:37:08 VBASE010.VDF : 7.11.3.8 2048 Bytes 2/9/2011 11:37:08 VBASE011.VDF : 7.11.3.9 2048 Bytes 2/9/2011 11:37:09 VBASE012.VDF : 7.11.3.10 2048 Bytes 2/9/2011 11:37:09 VBASE013.VDF : 7.11.3.59 157184 Bytes 2/14/2011 11:37:09 VBASE014.VDF : 7.11.3.97 120320 Bytes 2/16/2011 11:37:09 VBASE015.VDF : 7.11.3.148 128000 Bytes 2/19/2011 11:37:09 VBASE016.VDF : 7.11.3.183 140288 Bytes 2/22/2011 11:37:09 VBASE017.VDF : 7.11.3.216 124416 Bytes 2/24/2011 15:02:23 VBASE018.VDF : 7.11.3.251 159232 Bytes 2/28/2011 13:08:03 VBASE019.VDF : 7.11.4.33 148992 Bytes 3/2/2011 15:30:49 VBASE020.VDF : 7.11.4.73 150016 Bytes 3/6/2011 13:14:47 VBASE021.VDF : 7.11.4.108 122880 Bytes 3/8/2011 19:01:47 VBASE022.VDF : 7.11.4.150 133120 Bytes 3/10/2011 19:01:48 VBASE023.VDF : 7.11.4.183 122368 Bytes 3/14/2011 19:01:49 VBASE024.VDF : 7.11.4.228 123392 Bytes 3/16/2011 19:01:50 VBASE025.VDF : 7.11.5.8 246272 Bytes 3/21/2011 19:01:52 VBASE026.VDF : 7.11.5.38 137216 Bytes 3/23/2011 19:01:53 VBASE027.VDF : 7.11.5.82 151552 Bytes 3/27/2011 19:01:54 VBASE028.VDF : 7.11.5.122 154112 Bytes 3/30/2011 19:01:55 VBASE029.VDF : 7.11.5.174 206336 Bytes 4/4/2011 19:01:57 VBASE030.VDF : 7.11.5.175 2048 Bytes 4/4/2011 19:01:57 VBASE031.VDF : 7.11.5.201 107520 Bytes 4/5/2011 19:01:58 Engineversion : 8.2.4.202 AEVDF.DLL : 8.1.2.1 106868 Bytes 3/4/2011 11:36:49 AESCRIPT.DLL : 8.1.3.58 1266042 Bytes 4/5/2011 19:02:19 AESCN.DLL : 8.1.7.2 127349 Bytes 3/4/2011 11:36:48 AESBX.DLL : 8.1.3.2 254324 Bytes 3/4/2011 11:36:48 AERDL.DLL : 8.1.9.9 639347 Bytes 4/5/2011 19:02:16 AEPACK.DLL : 8.2.4.15 524662 Bytes 4/5/2011 19:02:14 AEOFFICE.DLL : 8.1.1.20 205177 Bytes 4/5/2011 19:02:12 AEHEUR.DLL : 8.1.2.96 3412341 Bytes 4/5/2011 19:02:11 AEHELP.DLL : 8.1.16.1 246134 Bytes 3/4/2011 11:36:41 AEGEN.DLL : 8.1.5.4 397684 Bytes 4/5/2011 19:02:00 AEEMU.DLL : 8.1.3.0 393589 Bytes 3/4/2011 11:36:40 AECORE.DLL : 8.1.19.2 196983 Bytes 3/4/2011 11:36:40 AEBB.DLL : 8.1.1.0 53618 Bytes 3/4/2011 11:36:39 AVWINLL.DLL : 10.0.0.0 19304 Bytes 3/4/2011 11:36:53 AVPREF.DLL : 10.0.0.0 44904 Bytes 3/4/2011 11:36:52 AVREP.DLL : 10.0.0.8 62209 Bytes 6/17/2010 11:27:13 AVREG.DLL : 10.0.3.2 53096 Bytes 3/4/2011 11:36:52 AVSCPLR.DLL : 10.0.3.2 84328 Bytes 3/4/2011 11:36:53 AVARKT.DLL : 10.0.22.6 231784 Bytes 3/4/2011 11:36:50 AVEVTLOG.DLL : 10.0.0.8 203112 Bytes 3/4/2011 11:36:51 SQLITE3.DLL : 3.6.19.0 355688 Bytes 6/17/2010 11:27:22 AVSMTP.DLL : 10.0.0.17 63848 Bytes 3/4/2011 11:36:53 NETNT.DLL : 10.0.0.0 11624 Bytes 6/17/2010 11:27:21 RCIMAGE.DLL : 10.0.0.26 2550120 Bytes 3/4/2011 11:37:12 RCTEXT.DLL : 10.0.58.0 97128 Bytes 3/4/2011 11:37:12 Configuration settings for the scan: Jobname.............................: Short system scan after installation Configuration file..................: c:\program files\avira\antivir desktop\setupprf.dat Logging.............................: low Primary action......................: interactive Secondary action....................: ignore Scan master boot sector.............: on Scan boot sector....................: on Process scan........................: on Scan registry.......................: on Search for rootkits.................: off Integrity checking of system files..: off Scan all files......................: Intelligent file selection Scan archives.......................: on Recursion depth.....................: 20 Smart extensions....................: on Macro heuristic.....................: on File heuristic......................: medium Start of the scan: вторник, Април 05, 2011 22:03 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'avconfig.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'avshadow.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'setup.exe' - '1' Module(s) have been scanned Scan process 'msiexec.exe' - '1' Module(s) have been scanned Scan process 'presetup.exe' - '1' Module(s) have been scanned Scan process 'avira_antivir_personal_en.exe' - '1' Module(s) have been scanned Scan process 'flashget.exe' - '1' Module(s) have been scanned Scan process 'hpswp_clipbook.exe' - '1' Module(s) have been scanned Scan process 'iexplore.exe' - '1' Module(s) have been scanned Scan process 'iexplore.exe' - '1' Module(s) have been scanned Scan process 'hpqgpc01.exe' - '1' Module(s) have been scanned Scan process 'hpqbam08.exe' - '1' Module(s) have been scanned Scan process 'hpqSTE08.exe' - '1' Module(s) have been scanned Scan process 'cli.exe' - '1' Module(s) have been scanned Scan process 'cli.exe' - '1' Module(s) have been scanned Scan process 'wscntfy.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'RegSrvc.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'hpqtra08.exe' - '1' Module(s) have been scanned Scan process 'FType2K.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'HPWuSchd2.exe' - '1' Module(s) have been scanned Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned Scan process 'winampa.exe' - '1' Module(s) have been scanned Scan process 'rundll32.exe' - '1' Module(s) have been scanned Scan process 'EOUWiz.exe' - '1' Module(s) have been scanned Scan process 'ifrmewrk.exe' - '1' Module(s) have been scanned Scan process 'ZCfgSvc.exe' - '1' Module(s) have been scanned Scan process 'cli.exe' - '1' Module(s) have been scanned Scan process 'RTHDCPL.EXE' - '1' Module(s) have been scanned Scan process 'Explorer.EXE' - '1' Module(s) have been scanned Scan process 'Ati2evxx.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'S24EvMon.exe' - '1' Module(s) have been scanned Scan process 'EvtEng.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'Ati2evxx.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned Starting master boot sector scan: Master boot sector HD0 [iNFO] No virus was found! Start scanning boot sectors: Starting to scan executable files (registry). The registry was scanned ( '416' files ). End of the scan: вторник, Април 05, 2011 22:04 Used time: 00:47 Minute(s) The scan has been done completely. 0 Scanned directories 906 Files were scanned 0 Viruses and/or unwanted programs were found 0 Files were classified as suspicious 0 files were deleted 0 Viruses and unwanted programs were repaired 0 Files were moved to quarantine 0 Files were renamed 0 Files cannot be scanned 906 Files not concerned 3 Archives were scanned 0 Warnings 0 Notes

Пише че системата иска reboot да натисна ли ок?

A някакви допълнителни настройки в OTL? Само отбелязвам Scan all users.

ROOTREPEAL © AD, 2007-2009 ================================================== Scan Start Time: 2011/04/05 21:29 Program Version: Version 1.3.5.0 Windows Version: Windows XP SP3 ================================================== Drivers ------------------- Name: dump_atapi.sys Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys Address: 0xAA77D000 Size: 98304 File Visible: No Signed: - Status: - Name: dump_WMILIB.SYS Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS Address: 0xF8A5F000 Size: 8192 File Visible: No Signed: - Status: - Name: rootrepeal.sys Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys Address: 0xAA795000 Size: 49152 File Visible: No Signed: - Status: - Hidden/Locked Files ------------------- Path: c:\documents and settings\user\local settings\temp\~df66e5.tmp Status: Allocation size mismatch (API: 16384, Raw: 0) Path: c:\documents and settings\user\local settings\temp\~df7533.tmp Status: Allocation size mismatch (API: 262144, Raw: 16384) ==EOF==

OTL logfile created on: 4/5/2011 9:17:14 PM - Run 2 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\user\Desktop Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000402 | Country: United States | Language: ENU | Date Format: M/d/yyyy 510.00 Mb Total Physical Memory | 96.00 Mb Available Physical Memory | 19.00% Memory free 1.00 Gb Paging File | 1.00 Gb Available in Paging File | 63.00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 58.59 Gb Total Space | 54.79 Gb Free Space | 93.50% Space Free | Partition Type: NTFS Drive D: | 174.28 Gb Total Space | 173.63 Gb Free Space | 99.63% Space Free | Partition Type: NTFS Computer Name: USER-D628024881 | User Name: user | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Documents and Settings\user\Desktop\OTL.scr (OldTimer Tools) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Program Files\Winamp\winampa.exe () PRC - C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe (Intel Corporation) PRC - C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe (Intel Corporation) PRC - C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe (Intel Corporation) PRC - C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe (ATI Technologies Inc.) PRC - C:\Program Files\Datecs\FlexType 2K\FType2K.exe () ========== Modules (SafeList) ========== MOD - C:\Documents and Settings\user\Desktop\OTL.scr (OldTimer Tools) MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) MOD - C:\WINDOWS\system32\newdll.dll () ========== Win32 Services (SafeList) ========== ========== Driver Services (SafeList) ========== DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys (Realtek Semiconductor Corp.) DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.) DRV - (s24trans) -- C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation) DRV - (tifm21) -- C:\WINDOWS\system32\drivers\tifm21.sys (Texas Instruments) DRV - (b57w2k) -- C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation) DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.) DRV - (HSFHWAZL) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.) DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.bg/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = bg IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9C F6 4C 69 A9 E0 CB 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..extensions.enabledItems: [email protected]:4.5 FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011/03/20 15:03:45 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/03/13 08:39:53 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/05 07:30:31 | 000,000,000 | ---D | M] [2011/03/13 08:40:19 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Application Data\Mozilla\Extensions [2011/03/13 08:40:19 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\itsinawa.default\extensions [2011/03/12 11:49:43 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011/03/20 15:03:45 | 000,000,000 | ---D | M] (HP Smart Web Printing) -- C:\PROGRAM FILES\HP\DIGITAL IMAGING\SMART WEB PRINTING\MOZILLAADDON3 [2009/11/03 04:57:59 | 000,001,083 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\911bg.xml [2009/11/03 04:57:59 | 000,002,442 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\diribg.xml [2009/11/03 04:57:59 | 000,001,515 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pe-bg.xml [2009/11/03 04:57:59 | 000,001,857 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\portalbgdict.xml [2009/11/03 04:57:59 | 000,001,220 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-bg.xml O1 HOSTS File: ([2008/04/14 12:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O2 - BHO: (FGCatchUrl) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll (www.flashget.com) O2 - BHO: (FlashGet GetFlash Class) - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll (www.flashget.com) O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.) O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [bluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation) O4 - HKLM..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe (Intel Corporation) O4 - HKLM..\Run: [intelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation) O4 - HKLM..\Run: [intelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe () O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\FlexType 2K.lnk = C:\Program Files\Datecs\FlexType 2K\FType2K.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\JC_ALL.HTM () O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\JC_LINK.HTM () O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (FlashGet.com) O9 - Extra 'Tools' menuitem : FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (FlashGet.com) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Моята текуща начална страница) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011/03/12 11:15:39 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011/04/05 20:55:27 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2011/04/05 20:54:57 | 000,000,000 | ---D | C] -- C:\_OTL [2011/04/05 20:20:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt [2011/04/05 19:58:54 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\user\Desktop\OTL.scr [2011/04/05 19:54:41 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\user\Desktop\OTL.exe [2011/04/05 19:30:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Malwarebytes [2011/04/05 19:30:02 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2011/04/05 19:30:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware [2011/04/05 19:30:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2011/04/05 19:29:58 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2011/04/05 19:29:57 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011/03/29 15:45:17 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\user\IECompatCache [2011/03/20 17:41:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\Identities [2011/03/20 16:12:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\HP [2011/03/20 15:15:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Yahoo! [2011/03/20 15:15:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\HPAppData [2011/03/20 15:11:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\HPSSUPPLY [2011/03/20 15:10:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\HP [2011/03/20 15:10:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\HPAppData [2011/03/20 15:07:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\WEBREG [2011/03/20 15:07:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Macromedia [2011/03/20 15:07:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe [2011/03/20 15:06:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\HP [2011/03/20 15:04:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion [2011/03/20 15:04:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Yahoo! [2011/03/20 15:04:03 | 000,000,000 | ---D | C] -- C:\Program Files\Yahoo! [2011/03/20 15:02:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\HP Product Assistant [2011/03/20 15:00:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\HP [2011/03/20 15:00:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\HP [2011/03/20 14:59:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\HP [2011/03/20 14:59:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Hewlett-Packard [2011/03/20 14:58:00 | 000,000,000 | -H-D | C] -- C:\Config.Msi [2011/03/20 14:48:59 | 000,000,000 | ---D | C] -- C:\Program Files\HP [2011/03/19 21:16:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\Ahead [2011/03/19 14:19:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Nero [2011/03/13 09:33:36 | 000,000,000 | ---D | C] -- C:\Downloads [2011/03/13 08:39:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla [2011/03/13 08:39:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Mozilla [2011/03/12 16:00:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\Temp [2011/03/12 15:58:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2011/03/12 15:57:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe [2011/03/12 15:57:19 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2011/03/12 15:57:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR [2011/03/12 15:57:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\Adobe [2011/03/12 15:57:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Adobe [2011/03/12 15:34:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Macromedia [2011/03/12 14:57:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\skypePM [2011/03/12 14:34:14 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\user\PrivacIE [2011/03/12 13:05:53 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music [2011/03/12 13:05:29 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer [2011/03/12 13:05:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC [2011/03/12 13:05:24 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines [2011/03/12 13:05:23 | 000,000,000 | R--D | C] -- C:\Program Files [2011/03/12 13:05:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared [2011/03/12 13:05:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files [2011/03/12 13:04:45 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup [2011/03/12 13:04:45 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu [2011/03/12 13:04:45 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents [2011/03/12 13:04:45 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates [2011/03/12 13:04:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favorites [2011/03/12 13:04:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop [2011/03/12 13:04:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2 [2011/03/12 13:04:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot [2011/03/12 13:04:22 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft [2011/03/12 13:04:22 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data [2011/03/12 13:03:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings [2011/03/12 13:03:42 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2011/03/12 12:57:57 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts [2011/03/12 12:57:57 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache [2011/03/12 12:57:57 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web [2011/03/12 12:57:57 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32 [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\system [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\security [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\java [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi [2011/03/12 12:57:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033 [2011/03/12 12:57:56 | 000,000,000 | ---D | C] -- C:\WINDOWS [2011/03/12 12:57:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32 [2011/03/12 12:57:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers [2011/03/12 12:57:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config [2011/03/12 12:55:23 | 000,081,920 | ---- | C] (Synaptics, Inc.) -- C:\WINDOWS\System32\SynTPCo2.dll [2011/03/12 12:55:23 | 000,069,721 | ---- | C] (Synaptics, Inc.) -- C:\WINDOWS\System32\SynTPFcs.dll [2011/03/12 12:55:21 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics [2011/03/12 12:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT [2011/03/12 12:01:19 | 001,568,768 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagX7.dll [2011/03/12 12:01:19 | 000,476,320 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagXpr7.dll [2011/03/12 12:01:19 | 000,471,040 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagXRA7.dll [2011/03/12 12:01:19 | 000,364,544 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\TwnLib4.dll [2011/03/12 12:01:19 | 000,262,144 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagXR7.dll [2011/03/12 12:01:19 | 000,106,496 | ---- | C] (Pegasus Software) -- C:\WINDOWS\System32\TwnLib20.dll [2011/03/12 12:00:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ahead [2011/03/12 12:00:34 | 000,000,000 | ---D | C] -- C:\Program Files\Ahead [2011/03/12 11:56:08 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2011/03/12 11:56:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ESET [2011/03/12 11:53:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Winamp [2011/03/12 11:53:46 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp [2011/03/12 11:52:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Start Menu\Programs\The KMPlayer [2011/03/12 11:52:54 | 000,000,000 | ---D | C] -- C:\Program Files\The KMPlayer [2011/03/12 11:52:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Start Menu\Programs\FlashGet [2011/03/12 11:52:10 | 000,000,000 | ---D | C] -- C:\Program Files\FlashGet [2011/03/12 11:50:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Datecs Applications [2011/03/12 11:50:48 | 000,000,000 | ---D | C] -- C:\Program Files\Datecs [2011/03/12 11:49:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox [2011/03/12 11:49:42 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2011/03/12 11:48:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office [2011/03/12 11:48:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Skype [2011/03/12 11:48:33 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft ActiveSync [2011/03/12 11:48:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2011/03/12 11:48:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW [2011/03/12 11:48:10 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET [2011/03/12 11:48:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2011/03/12 11:47:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Skype [2011/03/12 11:47:48 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2011/03/12 11:47:48 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2011/03/12 11:47:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Skype [2011/03/12 11:43:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\ATI [2011/03/12 11:43:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\ATI [2011/03/12 11:43:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang [2011/03/12 11:43:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\ApplicationHistory [2011/03/12 11:41:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\tiinst [2011/03/12 11:39:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Intel PROSet Wireless [2011/03/12 11:39:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Intel [2011/03/12 11:39:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Intel [2011/03/12 11:39:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE [2011/03/12 11:38:30 | 000,000,000 | ---D | C] -- C:\Program Files\Broadcom [2011/03/12 11:36:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Catalyst Control Center [2011/03/12 11:34:57 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly [2011/03/12 11:34:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET [2011/03/12 11:34:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\URTTemp [2011/03/12 11:34:38 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2011/03/12 11:33:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\RTCOM [2011/03/12 11:33:34 | 002,809,856 | ---- | C] (RealTek Semicoductor Corp.) -- C:\WINDOWS\alcwzrd.exe [2011/03/12 11:33:34 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information [2011/03/12 11:33:34 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2011/03/12 11:33:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield [2011/03/12 11:32:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups [2011/03/12 11:32:28 | 000,000,000 | ---D | C] -- C:\Program Files\Intel [2011/03/12 11:32:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\WinRAR [2011/03/12 11:31:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Start Menu\Programs\WinRAR [2011/03/12 11:31:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR [2011/03/12 11:31:14 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2011/03/12 11:27:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss [2011/03/12 11:25:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Identities [2011/03/12 11:25:33 | 000,000,000 | R--D | C] -- C:\Documents and Settings\user\My Documents\My Pictures [2011/03/12 11:25:33 | 000,000,000 | R--D | C] -- C:\Documents and Settings\user\My Documents\My Music [2011/03/12 11:25:33 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information [2011/03/12 11:25:14 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\user\IETldCache [2011/03/12 11:25:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage [2011/03/12 11:25:09 | 000,000,000 | --SD | C] -- C:\Documents and Settings\user\Application Data\Microsoft [2011/03/12 11:25:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\user\SendTo [2011/03/12 11:25:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\user\Recent [2011/03/12 11:25:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\user\Application Data [2011/03/12 11:25:09 | 000,000,000 | R--D | C] -- C:\Documents and Settings\user\Start Menu\Programs\Startup [2011/03/12 11:25:09 | 000,000,000 | R--D | C] -- C:\Documents and Settings\user\Start Menu [2011/03/12 11:25:09 | 000,000,000 | R--D | C] -- C:\Documents and Settings\user\My Documents [2011/03/12 11:25:09 | 000,000,000 | R--D | C] -- C:\Documents and Settings\user\Favorites [2011/03/12 11:25:09 | 000,000,000 | R--D | C] -- C:\Documents and Settings\user\Start Menu\Programs\Accessories [2011/03/12 11:25:09 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\user\Cookies [2011/03/12 11:25:09 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\user\Templates [2011/03/12 11:25:09 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\user\PrintHood [2011/03/12 11:25:09 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\user\NetHood [2011/03/12 11:25:09 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\user\Local Settings [2011/03/12 11:25:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\Microsoft [2011/03/12 11:25:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Desktop [2011/03/12 11:24:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution [2011/03/12 11:24:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2011/03/12 11:24:33 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft [2011/03/12 11:24:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft [2011/03/12 11:24:32 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Application Data\Microsoft [2011/03/12 11:24:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft [2011/03/12 11:24:17 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft [2011/03/12 11:22:26 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll [2011/03/12 11:22:26 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll [2011/03/12 11:22:26 | 000,029,184 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll [2011/03/12 11:20:59 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys [2011/03/12 11:20:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom [2011/03/12 11:20:25 | 000,000,000 | ---D | C] -- C:\Program Files\xerox [2011/03/12 11:20:25 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage [2011/03/12 11:20:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bg-Bg [2011/03/12 11:18:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM [2011/03/12 11:17:39 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8 [2011/03/12 11:16:15 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$ [2011/03/12 11:14:39 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM [2011/03/12 11:14:29 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files [2011/03/12 11:14:29 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages [2011/03/12 11:14:19 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate [2011/03/12 11:13:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX [2011/03/12 11:13:30 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services [2011/03/12 11:13:27 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks [2011/03/12 11:13:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap [2011/03/12 11:13:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst [2011/03/12 11:13:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed [2011/03/12 11:13:10 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker [2011/03/12 11:12:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore [2011/03/12 11:12:37 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting [2011/03/12 11:12:32 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express [2011/03/12 11:12:24 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System [2011/03/12 11:12:20 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer [2011/03/12 11:12:19 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures [2011/03/12 11:11:55 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Games [2011/03/12 11:11:44 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications [2011/03/12 11:11:36 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools [2011/03/12 11:11:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration [2011/03/12 11:11:28 | 000,000,000 | ---D | C] -- C:\Program Files\Online Services [2011/03/12 11:11:16 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2 [2011/03/12 11:11:14 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player [2011/03/12 11:11:12 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger [2011/03/12 11:11:07 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone [2011/03/12 11:10:20 | 000,000,000 | ---D | C] -- C:\Program Files\MSN [2011/03/12 11:10:19 | 000,281,088 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe [2011/03/12 11:10:17 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT [2011/03/12 11:10:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US [2011/03/12 11:10:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc [2011/03/12 11:10:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com [2011/03/12 11:09:53 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos [2011/03/12 11:09:29 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Accessories ========== Files - Modified Within 30 Days ========== [2011/04/05 21:10:35 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011/04/05 21:10:20 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011/04/05 20:51:17 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk [2011/04/05 19:59:01 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Desktop\OTL.scr [2011/04/05 19:55:27 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Desktop\OTL.exe [2011/04/05 19:30:03 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2011/04/05 19:09:38 | 000,625,664 | ---- | M] () -- C:\Documents and Settings\user\Desktop\dds.scr [2011/04/04 09:13:21 | 000,383,588 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011/04/04 09:13:21 | 000,053,942 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011/03/20 16:10:56 | 000,118,152 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011/03/20 15:07:03 | 000,166,884 | ---- | M] () -- C:\WINDOWS\hpoins36.dat [2011/03/20 15:02:27 | 000,000,886 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Shop for HP Supplies.lnk [2011/03/20 15:01:52 | 000,001,018 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\HP Solution Center.lnk [2011/03/20 15:01:08 | 000,001,808 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2011/03/20 15:00:27 | 000,001,985 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Windows Live Photo Gallery.lnk [2011/03/13 08:39:56 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat [2011/03/12 15:59:32 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader X.lnk [2011/03/12 14:57:37 | 000,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat [2011/03/12 13:08:26 | 000,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF [2011/03/12 12:02:00 | 000,001,257 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart.lnk [2011/03/12 12:02:00 | 000,001,239 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Nero StartSmart.lnk [2011/03/12 11:53:53 | 000,000,672 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk [2011/03/12 11:53:53 | 000,000,654 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Winamp.lnk [2011/03/12 11:52:59 | 000,000,710 | ---- | M] () -- C:\Documents and Settings\user\Desktop\KMPlayer.lnk [2011/03/12 11:52:11 | 000,000,700 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\FlashGet.lnk [2011/03/12 11:52:11 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\user\Desktop\FlashGet.lnk [2011/03/12 11:50:56 | 000,000,729 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\FlexType 2K.lnk [2011/03/12 11:49:44 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk [2011/03/12 11:49:44 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk [2011/03/12 11:49:03 | 000,000,376 | ---- | M] () -- C:\WINDOWS\ODBC.INI [2011/03/12 11:43:31 | 000,940,794 | ---- | M] () -- C:\WINDOWS\System32\LoopyMusic.wav [2011/03/12 11:43:31 | 000,146,650 | ---- | M] () -- C:\WINDOWS\System32\BuzzingBee.wav [2011/03/12 11:43:29 | 000,000,127 | ---- | M] () -- C:\Documents and Settings\user\Local Settings\Application Data\fusioncache.dat [2011/03/12 11:36:50 | 000,001,875 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Catalyst Control Center.lnk [2011/03/12 11:27:14 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2011/03/12 11:25:47 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Стартиране на браузъра Internet Explorer.lnk [2011/03/12 11:25:46 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf [2011/03/12 11:24:22 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD [2011/03/12 11:23:11 | 000,000,342 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf [2011/03/12 11:15:39 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2011/03/12 11:15:39 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2011/03/12 11:15:39 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2011/03/12 11:15:39 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS [2011/03/12 11:15:39 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2011/03/12 11:15:32 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb [2011/03/12 11:15:32 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb [2011/03/12 11:15:31 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2011/03/12 11:15:22 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI [2011/03/12 11:11:53 | 000,021,640 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat ========== Files Created - No Company Name ========== [2011/04/05 19:30:03 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2011/04/05 19:09:32 | 000,625,664 | ---- | C] () -- C:\Documents and Settings\user\Desktop\dds.scr [2011/03/20 15:02:27 | 000,000,886 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Shop for HP Supplies.lnk [2011/03/20 15:01:52 | 000,001,018 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\HP Solution Center.lnk [2011/03/20 15:01:08 | 000,001,808 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2011/03/20 15:00:27 | 000,001,985 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Windows Live Photo Gallery.lnk [2011/03/20 14:47:55 | 000,166,884 | ---- | C] () -- C:\WINDOWS\hpoins36.dat [2011/03/20 14:47:54 | 000,000,652 | ---- | C] () -- C:\WINDOWS\hpomdl36.dat [2011/03/13 08:39:56 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011/03/12 15:59:31 | 000,001,804 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader X.lnk [2011/03/12 15:59:31 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader X.lnk [2011/03/12 14:57:37 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2011/03/12 13:08:26 | 000,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF [2011/03/12 13:05:28 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011/03/12 13:05:26 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd [2011/03/12 13:05:26 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf [2011/03/12 13:05:25 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa [2011/03/12 13:05:24 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa [2011/03/12 13:04:54 | 000,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT [2011/03/12 13:04:42 | 000,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT [2011/03/12 13:04:42 | 000,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat [2011/03/12 13:04:42 | 000,112,918 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat [2011/03/12 13:04:42 | 000,037,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT [2011/03/12 13:04:42 | 000,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat [2011/03/12 13:04:42 | 000,034,063 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT [2011/03/12 13:04:42 | 000,026,991 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat [2011/03/12 13:04:42 | 000,016,535 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT [2011/03/12 13:04:42 | 000,014,433 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat [2011/03/12 13:04:42 | 000,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT [2011/03/12 13:04:42 | 000,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT [2011/03/12 13:04:42 | 000,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT [2011/03/12 13:04:42 | 000,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT [2011/03/12 13:04:42 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT [2011/03/12 13:04:42 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat [2011/03/12 13:04:41 | 002,144,487 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT [2011/03/12 13:04:41 | 001,296,669 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT [2011/03/12 13:04:41 | 000,797,189 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT [2011/03/12 13:04:41 | 000,522,220 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT [2011/03/12 13:03:42 | 000,118,152 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011/03/12 13:02:53 | 000,000,211 | -HS- | C] () -- C:\boot.ini [2011/03/12 13:02:48 | 000,000,342 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf [2011/03/12 12:52:52 | 000,133,221 | ---- | C] () -- C:\WINDOWS\System32\drivers\HSFProf.cty [2011/03/12 12:02:00 | 000,001,257 | ---- | C] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart.lnk [2011/03/12 12:02:00 | 000,001,239 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Nero StartSmart.lnk [2011/03/12 11:53:53 | 000,000,672 | ---- | C] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk [2011/03/12 11:53:53 | 000,000,654 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Winamp.lnk [2011/03/12 11:52:59 | 000,000,710 | ---- | C] () -- C:\Documents and Settings\user\Desktop\KMPlayer.lnk [2011/03/12 11:52:11 | 000,000,700 | ---- | C] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\FlashGet.lnk [2011/03/12 11:52:11 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\user\Desktop\FlashGet.lnk [2011/03/12 11:50:56 | 000,000,729 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\FlexType 2K.lnk [2011/03/12 11:50:52 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\newdll.dll [2011/03/12 11:49:44 | 000,001,620 | ---- | C] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk [2011/03/12 11:49:44 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk [2011/03/12 11:49:02 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2011/03/12 11:47:49 | 000,002,265 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk [2011/03/12 11:43:31 | 000,940,794 | ---- | C] () -- C:\WINDOWS\System32\LoopyMusic.wav [2011/03/12 11:43:31 | 000,146,650 | ---- | C] () -- C:\WINDOWS\System32\BuzzingBee.wav [2011/03/12 11:43:29 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\user\Local Settings\Application Data\fusioncache.dat [2011/03/12 11:36:50 | 000,001,875 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Catalyst Control Center.lnk [2011/03/12 11:34:23 | 001,114,674 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativcaxx.cpa [2011/03/12 11:34:23 | 000,058,560 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativckxx.vp [2011/03/12 11:34:23 | 000,025,600 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativvpxx.vp [2011/03/12 11:34:23 | 000,000,929 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativcaxx.vp [2011/03/12 11:34:22 | 000,112,425 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2011/03/12 11:34:22 | 000,006,024 | ---- | C] () -- C:\WINDOWS\System32\atifglpf.xml [2011/03/12 11:33:57 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2011/03/12 11:33:57 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2011/03/12 11:25:47 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Стартиране на браузъра Internet Explorer.lnk [2011/03/12 11:25:47 | 000,000,803 | ---- | C] () -- C:\Documents and Settings\user\Start Menu\Programs\Internet Explorer.lnk [2011/03/12 11:25:46 | 000,000,079 | ---- | C] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf [2011/03/12 11:25:38 | 000,000,738 | ---- | C] () -- C:\Documents and Settings\user\Start Menu\Programs\Outlook Express.lnk [2011/03/12 11:25:10 | 000,001,599 | ---- | C] () -- C:\Documents and Settings\user\Start Menu\Programs\Remote Assistance.lnk [2011/03/12 11:25:09 | 000,000,788 | ---- | C] () -- C:\Documents and Settings\user\Start Menu\Programs\Windows Media Player.lnk [2011/03/12 11:24:22 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD [2011/03/12 11:23:12 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011/03/12 11:22:19 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll [2011/03/12 11:21:57 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex [2011/03/12 11:21:48 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe [2011/03/12 11:21:47 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe [2011/03/12 11:21:44 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex [2011/03/12 11:21:29 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll [2011/03/12 11:21:21 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex [2011/03/12 11:21:16 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll [2011/03/12 11:21:03 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll [2011/03/12 11:15:39 | 000,002,577 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT [2011/03/12 11:15:39 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS [2011/03/12 11:15:39 | 000,000,000 | RHS- | C] () -- C:\IO.SYS [2011/03/12 11:15:39 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS [2011/03/12 11:15:39 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT [2011/03/12 11:15:32 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb [2011/03/12 11:15:32 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb [2011/03/12 11:15:31 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx [2011/03/12 11:14:18 | 000,000,786 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk [2011/03/12 11:14:05 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex [2011/03/12 11:13:41 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp [2011/03/12 11:13:41 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp [2011/03/12 11:13:34 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf [2011/03/12 11:12:45 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll [2011/03/12 11:11:55 | 000,000,609 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows Messenger.lnk [2011/03/12 11:11:54 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2011/03/12 11:11:28 | 000,001,986 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\MSN.lnk [2011/03/12 11:10:49 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp [2011/03/12 11:10:49 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp [2011/03/12 11:10:49 | 000,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp [2011/03/12 11:10:49 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp [2011/03/12 11:10:49 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp [2011/03/12 11:10:48 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp [2011/03/12 11:10:48 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp [2011/03/12 11:10:48 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp [2011/03/12 11:10:48 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp [2011/03/12 11:10:48 | 000,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp [2011/03/12 11:10:48 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp [2011/03/12 11:10:45 | 000,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd [2011/03/12 11:10:44 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h [2011/03/12 11:10:43 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h [2011/03/12 11:10:37 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc [2008/04/14 12:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2008/04/14 12:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2008/04/14 12:00:00 | 000,383,588 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2008/04/14 12:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2008/04/14 12:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2008/04/14 12:00:00 | 000,053,942 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2008/04/14 12:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2008/04/14 12:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2008/04/14 12:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2008/04/14 12:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2008/04/14 12:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin [2008/04/14 12:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2003/01/07 18:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI ========== LOP Check ========== [2011/03/12 11:56:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET ========== Purity Check ========== < End of report >

Да.Сега какво да правя?

Готово рестартирах.Сега?

Izliza mi dispe4er na zada4ite OTL izpalnqva se i Internet Explorer izpalnqva se. Molq pomognete mi kakvo da napravq?

A sega lentata mi otdolo se izgubi i ne se sazdava log fail. Kakvo da pravq? Molq pomognete start lentata mi q nqma

Готово. Сега какво да правя? Extras.Txt OTL.Txt

Като деинсталирам иска да рестартирам. Да го направя ли? Не може ли и без да деинсталирам тези програми?

Но на мен ми излиза само Scan all users без include 64bit scans

Рестартирах го но еset отново ми дава същото съобщение.

Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 6279 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 4/5/2011 7:38:30 PM mbam-log-2011-04-05 (19-38-30).txt Scan type: Quick scan Objects scanned: 145169 Time elapsed: 6 minute(s), 21 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 3 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) Сега иска да го рестартирам. Да го направя ли?

. DDS (Ver_11-03-05.01) - NTFSx86 Run by user at 19:11:53.23 on ўІ®°­ЁЄ 04/05/2011 Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.510.317 [GMT 3:00] . AV: ESET NOD32 Antivirus 3.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} . ============== Running Processes =============== . C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Datecs\FlexType 2K\FType2K.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe svchost.exe svchost.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\WINDOWS\system32\svchost.exe -k hpdevmgmt C:\WINDOWS\System32\svchost.exe -k HPZ12 C:\WINDOWS\System32\svchost.exe -k HPZ12 C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe C:\Documents and Settings\user\Desktop\dds.scr . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.bg/ mURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: FGCatchUrl: {2f364306-aa45-47b5-9f9d-39a8b94e7ef7} - c:\program files\flashget\jccatch.dll BHO: FlashGet GetFlash Class: {f156768e-81ef-470c-9057-481ba8380dba} - c:\program files\flashget\getflash.dll BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn\YTSingleInstance.dll BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [RTHDCPL] RTHDCPL.EXE mRun: [Alcmtr] ALCMTR.EXE mRun: [AzMixerSel] c:\program files\realtek\installshield\AzMixerSel.exe mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay mRun: [intelZeroConfig] "c:\program files\intel\wireless\bin\ZCfgSvc.exe" mRun: [intelWireless] "c:\program files\intel\wireless\bin\ifrmewrk.exe" /tf Intel PROSet/Wireless mRun: [EOUApp] "c:\program files\intel\wireless\bin\EOUWiz.exe" mRun: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent mRun: [WinampAgent] c:\program files\winamp\winampa.exe mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 10.0\reader\Reader_sl.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\flexty~1.lnk - c:\program files\datecs\flextype 2k\FType2K.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe IE: &Download All with FlashGet - c:\program files\flashget\jc_all.htm IE: &Download with FlashGet - c:\program files\flashget\jc_link.htm IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - c:\program files\flashget\FlashGet.exe IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: AtiExtEvent - Ati2evxx.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\wpdshserviceobj.dll . ================= FIREFOX =================== . FF - ProfilePath - c:\docume~1\user\applic~1\mozilla\firefox\profiles\itsinawa.default\ FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpClipBook.dll FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpClipBookDB.dll FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpNeoLogger.dll FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSaturn.dll FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSeymour.dll FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSmartSelect.dll FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSmartWebPrinting.dll FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSWPOperation.dll FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXPLogging.dll FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXPMTC.dll FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXPMTL.dll FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXREStub.dll FF - plugin: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\plugins\nphpclipbook.dll FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: HP Smart Web Printing: [email protected] - c:\program files\hp\digital imaging\smart web printing\MozillaAddOn3 . ============= SERVICES / DRIVERS =============== . R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2008-3-13 33800] R2 ekrn;Eset Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2008-3-13 472320] S2 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\system32\regedt32.exe [2008-4-14 3584] . =============== Created Last 30 ================ . 2011-03-29 12:45:17 -------- d-sh--w- c:\documents and settings\user\IECompatCache 2011-03-20 14:41:33 -------- d-----w- c:\docume~1\user\locals~1\applic~1\Identities 2011-03-20 12:07:13 -------- d-----w- c:\docume~1\alluse~1\applic~1\WEBREG 2011-03-20 12:04:35 974848 ----a-r- c:\windows\system32\hpost_p02b.dll 2011-03-20 12:04:35 737280 ----a-r- c:\windows\system32\hposwia_p02b.dll 2011-03-20 12:04:35 307200 ----a-r- c:\windows\system32\hposc_p02a.dll 2011-03-20 12:04:03 -------- d-----w- c:\program files\Yahoo! 2011-03-20 12:00:39 -------- d-----w- c:\program files\common files\HP 2011-03-20 11:59:43 -------- d-----w- c:\program files\common files\Hewlett-Packard 2011-03-20 11:58:14 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys 2011-03-20 11:58:14 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys 2011-03-20 11:48:59 -------- d-----w- c:\program files\HP 2011-03-20 11:47:55 16496 ----a-r- c:\windows\system32\drivers\HPZipr12.sys 2011-03-20 11:47:51 49920 ----a-r- c:\windows\system32\drivers\HPZid412.sys 2011-03-20 11:47:38 315392 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\hpfpp083.dll 2011-03-20 11:47:38 271704 ----a-r- c:\windows\system32\hpzids01.dll 2011-03-20 11:47:38 121344 ----a-w- c:\windows\system32\hpf3l083.dll 2011-03-20 11:47:16 309760 ----a-r- c:\windows\system32\difxapi.dll 2011-03-20 11:47:15 372736 ----a-r- c:\windows\system32\hppldcoi.dll 2011-03-20 11:47:15 21568 ----a-r- c:\windows\system32\drivers\HPZius12.sys 2011-03-19 18:16:05 -------- d-----w- c:\docume~1\user\locals~1\applic~1\Ahead 2011-03-13 13:35:26 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys 2011-03-13 13:35:26 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys 2011-03-13 13:35:03 32128 -c--a-w- c:\windows\system32\dllcache\usbccgp.sys 2011-03-13 13:35:03 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2011-03-13 06:33:36 -------- d-----w- C:\Downloads 2011-03-13 05:39:49 -------- d-----w- c:\docume~1\user\locals~1\applic~1\Mozilla 2011-03-12 13:00:00 -------- d-----w- c:\docume~1\user\locals~1\applic~1\Temp 2011-03-12 12:57:10 -------- d-----w- c:\docume~1\user\locals~1\applic~1\Adobe 2011-03-12 11:34:14 -------- d-sh--w- c:\documents and settings\user\PrivacIE 2011-03-12 10:08:15 3072 ----a-w- c:\windows\system32\drivers\audstub.sys 2011-03-12 10:07:42 57600 ----a-w- c:\windows\system32\drivers\redbook.sys 2011-03-12 10:07:11 6400 ----a-w- c:\windows\system32\drivers\enum1394.sys 2011-03-12 10:06:54 74240 -c--a-w- c:\windows\system32\dllcache\usbui.dll 2011-03-12 10:06:54 74240 ----a-w- c:\windows\system32\usbui.dll 2011-03-12 10:06:42 10240 ----a-w- c:\windows\system32\drivers\compbatt.sys 2011-03-12 10:06:41 14208 ----a-w- c:\windows\system32\drivers\battc.sys 2011-03-12 10:06:41 13952 ----a-w- c:\windows\system32\drivers\CmBatt.sys 2011-03-12 10:04:57 85020 -c--a-w- c:\windows\system32\dllcache\dgsetup.dll 2011-03-12 10:03:43 -------- d-----w- C:\Documents and Settings . ==================== Find3M ==================== . . ============= FINISH: 19:12:22.37 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_11-03-05.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 3/12/2011 10:23:06 AM System Uptime: 4/5/2011 6:25:34 PM (1 hours ago) . Motherboard: BenQ | | JoyBook S73 Processor: Intel® Celeron® M CPU 430 @ 1.73GHz | CPU | 1698/533mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 59 GiB total, 53.574 GiB free. D: is FIXED (NTFS) - 174 GiB total, 173.63 GiB free. E: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: Ethernet Controller Device ID: PCI\VEN_168C&DEV_001C&SUBSYS_7112144F&REV_01\4&20975680&0&00E1 Manufacturer: Name: Ethernet Controller PNP Device ID: PCI\VEN_168C&DEV_001C&SUBSYS_7112144F&REV_01\4&20975680&0&00E1 Service: . Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: Device ID: ACPI\MTC0301\4&38462492&0 Manufacturer: Name: PNP Device ID: ACPI\MTC0301\4&38462492&0 Service: . ==== System Restore Points =================== . RP1: 3/12/2011 10:25:53 AM - Контролна точка на системата RP2: 3/12/2011 10:33:34 AM - Installed Realtek High Definition Audio Driver RP3: 3/12/2011 10:36:06 AM - Installed ATI Catalyst Control Center RP4: 3/12/2011 10:38:29 AM - Installed Broadcom Gigabit Integrated Controller RP5: 3/12/2011 10:41:40 AM - Installed TIPCI RP6: 3/12/2011 10:48:05 AM - Installed Microsoft Office Professional Edition 2003 RP7: 3/12/2011 10:56:07 AM - Installed ESET NOD32 Antivirus RP8: 3/12/2011 2:58:36 PM - Installed Adobe Reader X (10.0.1). RP9: 3/14/2011 6:04:56 PM - Контролна точка на системата RP10: 3/16/2011 5:37:23 PM - Контролна точка на системата RP11: 3/18/2011 5:15:41 PM - Контролна точка на системата RP12: 3/20/2011 3:34:20 PM - Контролна точка на системата RP13: 3/21/2011 6:26:03 PM - Контролна точка на системата RP14: 3/22/2011 7:50:18 PM - Контролна точка на системата RP15: 3/23/2011 8:20:20 PM - Контролна точка на системата RP16: 3/26/2011 7:58:54 AM - Контролна точка на системата RP17: 3/30/2011 9:08:52 AM - Контролна точка на системата RP18: 4/2/2011 4:21:18 PM - Контролна точка на системата RP19: 4/4/2011 8:45:20 PM - Контролна точка на системата . ==== Installed Programs ====================== . 32 Bit HP CIO Components Installer Adobe AIR Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader X (10.0.1) ATI - Software Uninstall Utility ATI Catalyst Control Center ATI Display Driver Broadcom Gigabit Integrated Controller BufferChm C4600 Destinations DeviceDiscovery ESET NOD32 Antivirus FlashGet 1.9.6.1073 FlexType 2K GPBaseService2 HDAUDIO Soft Data Fax Modem with SmartCP Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB970653-v3) HP Customer Participation Program 13.0 HP Imaging Device Functions 13.0 HP Photosmart C4600 All-In-One Driver Software 13.0 Rel .5 HP Print Projects 1.0 HP Smart Web Printing 4.5 HP Solution Center 13.0 HP Update hpPrintProjects HPProductAssistant HPSSupply hpWLPGInstaller Intel® PROSet/Wireless Software MarketResearch mCore mDriver mDrWiFi mEoU mHelp Microsoft .NET Framework 1.1 Microsoft Office Professional Edition 2003 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 mIWA mLogView mMHouse Mozilla Firefox (3.5.5) mPfMgr mPfWiz mProSafe mWlsSafe mXML mZConfig Nero 6 Ultra Edition NOD32 v3.0.642 FiX1.2 by TemDono (31 days remaining forever up PS_AIO_05_C4600_Software_Min Realtek High Definition Audio Driver Scan Security Update for Windows Media Player 11 (KB954154) Security Update for Windows XP (KB923789) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB973346) Shop for HP Supplies Skype™ 4.1 SmartWebPrinting SolutionCenter Status Synaptics Pointing Device Driver Texas Instruments PCIxx21/x515/xx12 drivers. The KMPlayer (remove only) TIPCI Toolbox TrayApp WebFldrs XP WebReg Winamp (remove only) Windows Internet Explorer 8 WinRAR archiver Yahoo! Toolbar . ==== Event Viewer Messages From Past Week ======== . 4/4/2011 11:06:10 AM, error: Tcpip [4199] - The system detected an address conflict for IP address 192.168.1.2 with the system having network hardware address 0C:EE:E6:B4:EB:FC. Network operations on this system may be disrupted as a result. 4/2/2011 9:00:17 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Eset Nod32 Boot service to connect. 4/2/2011 9:00:17 AM, error: Service Control Manager [7000] - The Eset Nod32 Boot service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 4/2/2011 4:25:16 PM, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0040D09EE186. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server. 4/2/2011 3:50:58 PM, error: Dhcp [1002] - The IP address lease 192.168.1.2 for the Network Card with network address 0040D09EE186 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message). 4/1/2011 9:12:59 AM, error: Service Control Manager [7023] - The Server service terminated with the following error: Access is denied. 4/1/2011 9:12:59 AM, error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: Access is denied. 3/29/2011 1:17:39 PM, error: Dhcp [1002] - The IP address lease 192.168.1.3 for the Network Card with network address 0040D09EE186 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message). . ==== End Of File ===========================

Антивирусната ми eset ми дава заплаха от този файл. Сега не знам какво да правя??