marian12

Звъннах до Мост Компютърс,обаче я нямат в наличност.

Сичко ОК. Но дай линкове къде са тия 5 , 6 офиса и др. което си дал линк към Coole Master 1100 а аз търся 1000

Търся една кутия - Cooler Master RC 1000 но немога да я намеря в София, ако някой има идея къде в София мога да я намеря ще бъда много благодарен.. Благодаря на kaldata.com - 2 пъти ми помага надявам се и 3 ти ът защото тука сички са печени

Межу този http://www.jarcomputers.com/l_bg/?m=7&i=536834 и този http://www.jarcomputers.com/l_bg/?m=7&i=537648 като цяло кой ще е по добър за игри ще им сложа рам 2 GB на първо време на 1066 и мисля да е с Windows 7

Мерси много на вси4ки благодаря за отзивчивостта и бързията реакция казвам ЕВАЛА на този саит за втори пъм ми помага БЛАГОДАРЯ

как мога да проверя смисал дъното не е активно в момента защото още е с найлоните

http://image.www.rakuten.co.jp/computopia/img10474841994.jpeg

на моето пише 1.03г май е добре защото може да сложа phenoma ili athlona

REV 1.03G

сериозно нз аз ли съм тъп или бах....... ако правилно разбрах гледам самото дъно има секви лепенки пише сокет 940 ама др невидях

PLS виж това http://www.asus.com/product.aspx?P_ID=KjpYqzmAd9vsTM2D Cpu support list виж дали Athlona ще тръгне и какво е това "PCB трябва да е 1.03G" ако може6 да обясниш

Ем аз гледах офертите и си харесах тези двата идяята дали 1 ния има предимство спрямо другия че нали е АМ2 единия а другия е АМ3 и като цяло 1 ния работи с честота 2.3Ghz а Другия е с честота 3.0Ghz. а единия нали се пак е Phenom 2 дали е с не6то както при видео картите новото ядро да е сравнително по бързо от старото

Здравейте получих подарък за рождения си ден дъно Asus M3A78-EM http://www.asus.com/product.aspx?P_ID=KjpYqzmAd9vsTM2D Чудя се за това дъно кои ще е по добрия процесор спрях се на 2 единия е http://www.sky.bg/Details.aspx?ID=13575 AMD Phenom II X2 Dual Core 550, 3.10GHz, 2x512K (L2 Cache), 6M (L3 Cache), BOX, AM3 а алтернативата е http://www.jarcomputers.com/l_bg/?m=7&i=534774 PLS но на самото дъно пише 4е поддържа сокет Am2/Аm2+ тука идва идеята 4е AMD Phenom II X2 Dual Core 550 е със сокет АМ3 но пък го има и в списака с процесори които дъното поддържа "– Support 45nm Phenom™ II CPU" да дайте своето мнение : AMD Phenom II X2 Dual Core 550, 3.10GHz, 2x512K (L2 Cache), 6M (L3 Cache), BOX, AM3 или Phenom X4 9650 Quad Core (2,3GHz, 4MB, 95W, AM2+) BOX кой е по добрия и защо Благодаря предварително !!!!!

Ето и лога от Malwarebytes' Anti-Malware Изкам да ИЗКАЖА 111111 ГОЛЯМО БЛАГОДАРЯ НЗ КАКВО ЩЯХ ДА НАПРАВЯ БЕЗ ПОМОЩА ВИ ! Malwarebytes' Anti-Malware 1.42 Версия на базата от данни: 3415 Windows 5.1.2600 Service Pack 2 Internet Explorer 7.0.5730.13 24.12.2009 г. 15:58:41 mbam-log-2009-12-24 (15-58-41).txt Тип сканиране: Пълно сканиране (C:\|D:\|) Сканирани обекти: 153222 Изминало време: 14 minute(s), 7 second(s) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 0 Заразени стойности в регистратурата: 0 Заразени информационни обекти в регистратурата: 0 Заразени папки: 0 Заразени файлове: 66 Заразени процеси в паметта: (Не бяха открити заплахи) Заразени модули в паметта: (Не бяха открити заплахи) Заразени ключове в регистратурата: (Не бяха открити заплахи) Заразени стойности в регистратурата: (Не бяха открити заплахи) Заразени информационни обекти в регистратурата: (Не бяха открити заплахи) Заразени папки: (Не бяха открити заплахи) Заразени файлове: C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002205.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002188.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002189.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002191.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002192.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002193.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002194.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002195.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002196.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002197.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002198.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002199.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002200.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002204.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002206.bat (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002207.bat (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002208.bat (Trojan.Chydo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002231.sys (Rootkit.Agent) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002324.sys (Rootkit.Agent) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_Qoobox\Quarantine\C\lwoaismulpru.bat.vir (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_Qoobox\Quarantine\C\lysgqcyibhlqnh.bat.vir (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_Qoobox\Quarantine\C\tcsciqiodf.bat.vir (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_Qoobox\Quarantine\D\dmzhpbdmx.bat.vir (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_Qoobox\Quarantine\D\kwhoufir.bat.vir (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_Qoobox\Quarantine\D\lwoaismulpru.bat.vir (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_Qoobox\Quarantine\D\lysgqcyibhlqnh.bat.vir (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_Qoobox\Quarantine\D\mcrcmbivjfid.bat.vir (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_Qoobox\Quarantine\D\rcrblzdoblx.bat.vir (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_Qoobox\Quarantine\D\tcsciqiodf.bat.vir (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_Qoobox\Quarantine\D\uivemzepbv.bat.vir (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_Qoobox\Quarantine\D\xepvbll.bat.vir (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\aqnergfsoxemmjcem.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\haaukceutfpaddzepiic.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\jayqeuuifpxghfzclc.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\nikgyswopdpchjhobwyumg.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\tieugusezhnutphi.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\umletklayjscedycmed.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\wqrmdwzqqdoaefciuopkb.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\system32\aqnergfsoxemmjcem.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\system32\haaukceutfpaddzepiic.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\system32\jayqeuuifpxghfzclc.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\system32\nikgyswopdpchjhobwyumg.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\system32\tieugusezhnutphi.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\system32\umletklayjscedycmed.exe (Trojan.Chydo) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\12242009_120500\C_WINDOWS\system32\wqrmdwzqqdoaefciuopkb.exe (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{4889127F-21FD-4079-B269-1DE90F37F968}\RP1\A0000006.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{4889127F-21FD-4079-B269-1DE90F37F968}\RP1\A0000007.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{4889127F-21FD-4079-B269-1DE90F37F968}\RP1\A0000008.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{4889127F-21FD-4079-B269-1DE90F37F968}\RP1\A0000054.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{4889127F-21FD-4079-B269-1DE90F37F968}\RP1\A0000055.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{4889127F-21FD-4079-B269-1DE90F37F968}\RP1\A0000056.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002210.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002211.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002212.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002298.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002299.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002300.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002301.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002302.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002303.bat (Trojan.Chydo) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{8C817F3F-A556-4A51-91F1-0134AE6FC687}\RP1\A0002361.exe (Trojan.Agent) -> Quarantined and deleted successfully. D:\ALPHA Z\Y_ip-patch.exe (Backdoor.Bifrose) -> Quarantined and deleted successfully. D:\so4ko desktop\LFS\Y_ip-patch.exe (Backdoor.Bifrose) -> Quarantined and deleted successfully. D:\so4ko desktop\LFS\Y_skin-patch.exe (Backdoor.Agent) -> Quarantined and deleted successfully. D:\VSI4KO1\Program Files\vista install transformation\Total Video Converter 3.12 (Serial+Crack) & Total Video Converter 3.11 Portable\Total Video Converter 3.12 Crack.exe (Trojan.WGAPatch) -> Quarantined and deleted successfully. D:\VSI4KO1\Program Files\vista install transformation\Total Video Converter 3.12 (Serial+Crack) & Total Video Converter 3.11 Portable\Нова папка\Total Video Converter 3.12 Crack.exe (Trojan.WGAPatch) -> Quarantined and deleted successfully. Изкам да ИЗКАЖА 111111 ГОЛЯМО БЛАГОДАРЯ НЗ КАКВО ЩЯХ ДА НАПРАВЯ БЕЗ ПОМОЩА ВИ !

Ето това са резултатите от SafeBootKeyRepair.exe Reg export of SafeBoot key after repair: ======================== Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot] "AlternateShell"="cmd.exe" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\AppMgmt] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Base] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Boot Bus Extender] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Boot file system] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\CryptSvc] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\DcomLaunch] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmadmin] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmboot.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmio.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmload.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmserver] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\EventLog] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\File system] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Filter] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\HelpSvc] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Netlogon] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PCI Configuration] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PEVSystemStart] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PlugPlay] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PNP Filter] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Primary disk] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\procexp90.Sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\RpcSs] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\SCSI Class] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\sermouse.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\sr.sys] @="FSFilter System Recovery" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\SRService] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\System Bus Extender] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\vga.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\vgasave.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\WinMgmt] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}] @="Universal Serial Bus controllers" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}] @="CD-ROM Drive" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}] @="DiskDrive" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}] @="Standard floppy disk controller" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}] @="Hdc" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}] @="Keyboard" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}] @="Mouse" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}] @="PCMCIA Adapters" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}] @="SCSIAdapter" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}] @="System" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}] @="Floppy disk drive" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] @="Volume" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}] @="Human Interface Devices" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\AFD] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\AppMgmt] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Base] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Boot Bus Extender] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Boot file system] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Browser] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\CryptSvc] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\DcomLaunch] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Dhcp] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmadmin] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmboot.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmio.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmload.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmserver] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\DnsCache] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\EventLog] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\File system] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Filter] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\HelpSvc] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\ip6fw.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\ipnat.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\LanmanServer] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\LanmanWorkstation] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\LmHosts] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Messenger] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NDIS] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NDIS Wrapper] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Ndisuio] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetBIOS] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetBIOSGroup] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetBT] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetDDEGroup] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Netlogon] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetMan] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Network] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetworkProvider] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NtLmSsp] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PCI Configuration] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PEVSystemStart] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PlugPlay] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PNP Filter] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PNP_TDI] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Primary disk] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\procexp90.Sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\rdpcdd.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\rdpdd.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\rdpwd.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\rdsessmgr] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\RpcSs] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\SCSI Class] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\sermouse.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\SharedAccess] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\sr.sys] @="FSFilter System Recovery" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\SRService] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Streams Drivers] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\System Bus Extender] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Tcpip] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\TDI] @="Driver Group" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\tdpipe.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\tdtcp.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\termservice] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\vga.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\vgasave.sys] @="Driver" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\WinMgmt] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\WZCSVC] @="Service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{36FC9E60-C465-11CF-8056-444553540000}] @="Universal Serial Bus controllers" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E965-E325-11CE-BFC1-08002BE10318}] @="CD-ROM Drive" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}] @="DiskDrive" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E969-E325-11CE-BFC1-08002BE10318}] @="Standard floppy disk controller" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E96A-E325-11CE-BFC1-08002BE10318}] @="Hdc" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318}] @="Keyboard" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318}] @="Mouse" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}] @="Net" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E973-E325-11CE-BFC1-08002BE10318}] @="NetClient" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}] @="NetService" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}] @="NetTrans" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E977-E325-11CE-BFC1-08002BE10318}] @="PCMCIA Adapters" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E97B-E325-11CE-BFC1-08002BE10318}] @="SCSIAdapter" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E97D-E325-11CE-BFC1-08002BE10318}] @="System" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E980-E325-11CE-BFC1-08002BE10318}] @="Floppy disk drive" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] @="Volume" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}] @="Human Interface Devices" ======================== HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\PEVSystemStart HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\procexp90.Sys

Ето и резултати от Run Fix All processes killed ========== OTL ========== No active process named aqnergfsoxemmjcem.exe was found! Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\uanuxcr deleted successfully. C:\WINDOWS\system32\jayqeuuifpxghfzclc.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-117609710-2147117837-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\\tcsciqiodf deleted successfully. C:\WINDOWS\system32\wqrmdwzqqdoaefciuopkb.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\aixglsjoc deleted successfully. C:\WINDOWS\System32\aqnergfsoxemmjcem.exe moved successfully. C:\Qoobox\Quarantine\Registry_backups folder moved successfully. C:\Qoobox\Quarantine\D folder moved successfully. C:\Qoobox\Quarantine\C folder moved successfully. C:\Qoobox\Quarantine folder moved successfully. C:\Qoobox\BackEnv folder moved successfully. C:\Qoobox folder moved successfully. C:\Documents and Settings\MARIAN\Desktop\RootRepeal.exe moved successfully. C:\WINDOWS\wqrmdwzqqdoaefciuopkb.exe moved successfully. C:\WINDOWS\umletklayjscedycmed.exe moved successfully. C:\WINDOWS\nikgyswopdpchjhobwyumg.exe moved successfully. C:\WINDOWS\jayqeuuifpxghfzclc.exe moved successfully. C:\WINDOWS\haaukceutfpaddzepiic.exe moved successfully. C:\WINDOWS\aqnergfsoxemmjcem.exe moved successfully. C:\WINDOWS\tieugusezhnutphi.exe moved successfully. C:\WINDOWS\tcsciqiodffgzpbwxgwgmumshjjkdtfa.kak moved successfully. C:\WINDOWS\system32\tcsciqiodffgzpbwxgwgmumshjjkdtfa.kak moved successfully. C:\Program Files\tcsciqiodffgzpbwxgwgmumshjjkdtfa.kak moved successfully. C:\Documents and Settings\MARIAN\Local Settings\Application Data\tcsciqiodffgzpbwxgwgmumshjjkdtfa.kak moved successfully. C:\WINDOWS\xwccyweafxnentvgxwccyw.afx moved successfully. C:\WINDOWS\system32\xwccyweafxnentvgxwccyw.afx moved successfully. C:\Program Files\xwccyweafxnentvgxwccyw.afx moved successfully. C:\Documents and Settings\MARIAN\Local Settings\Application Data\xwccyweafxnentvgxwccyw.afx moved successfully. C:\WINDOWS\system32\kwpclwrasxaeatigkwpclwrasxaeatigkwp.lwr moved successfully. C:\WINDOWS\kwpclwrasxaeatigkwpclwrasxaeatigkwp.lwr moved successfully. C:\Program Files\kwpclwrasxaeatigkwpclwrasxaeatigkwp.lwr moved successfully. C:\Documents and Settings\MARIAN\Local Settings\Application Data\kwpclwrasxaeatigkwpclwrasxaeatigkwp.lwr moved successfully. C:\Documents and Settings\MARIAN\Desktop\tool.exe moved successfully. File C:\WINDOWS\System32\wqrmdwzqqdoaefciuopkb.exe not found. C:\WINDOWS\system32\umletklayjscedycmed.exe moved successfully. C:\WINDOWS\system32\tieugusezhnutphi.exe moved successfully. C:\WINDOWS\system32\nikgyswopdpchjhobwyumg.exe moved successfully. File C:\WINDOWS\System32\jayqeuuifpxghfzclc.exe not found. C:\WINDOWS\system32\haaukceutfpaddzepiic.exe moved successfully. File C:\WINDOWS\System32\aqnergfsoxemmjcem.exe not found. C:\WINDOWS\system32\lysgqcyibhlqnhxwboiwgsoyrxbgdxnmreym.ieo moved successfully. C:\WINDOWS\lysgqcyibhlqnhxwboiwgsoyrxbgdxnmreym.ieo moved successfully. C:\Program Files\lysgqcyibhlqnhxwboiwgsoyrxbgdxnmreym.ieo moved successfully. C:\Documents and Settings\MARIAN\Local Settings\Application Data\lysgqcyibhlqnhxwboiwgsoyrxbgdxnmreym.ieo moved successfully. C:\WINDOWS\system32\oypahqjqgjkmgxkgisjubkdkadegareac.dov moved successfully. C:\WINDOWS\oypahqjqgjkmgxkgisjubkdkadegareac.dov moved successfully. C:\Program Files\oypahqjqgjkmgxkgisjubkdkadegareac.dov moved successfully. C:\Documents and Settings\MARIAN\Local Settings\Application Data\oypahqjqgjkmgxkgisjubkdkadegareac.dov moved successfully. C:\Documents and Settings\MARIAN\Desktop\gmer.zip moved successfully. C:\WINDOWS\PEV.exe moved successfully. C:\WINDOWS\sed.exe moved successfully. C:\WINDOWS\grep.exe moved successfully. C:\WINDOWS\MBR.exe moved successfully. C:\WINDOWS\zip.exe moved successfully. ========== FILES ========== File\Folder C:\WINDOWS\system32\aqnergfsoxemmjcem.exe not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: LocalService ->Temp folder emptied: 65748 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: MARIAN ->Temp folder emptied: 499712 bytes ->Temporary Internet Files folder emptied: 15082732 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32835 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2142714 bytes %systemroot%\System32 .tmp files removed: 2577 bytes Windows Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 127242 bytes Total Files Cleaned = 17,00 mb C:\WINDOWS\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully OTL by OldTimer - Version 3.1.19.0 log created on 12242009_120500 Files\Folders moved on Reboot... Registry entries deleted on Reboot...

ПОМОЩ !!! ПРЕИНСТАЛИРАХ WINDOWS 2 ПЪТИ И ПАК НЕ СЕ ОПРАВЯ - про4етох темите о4евидно съм се заразил с толкова добре познатия ви вирус WIN32 CHUDO. И аз полу4их доста линкове от 1 приятел по скайп и тъй като ми ги пра6таше секи ден в продъмжение на 1 седмица реших да видя какво е на 1 ния от линовете пи6е6е SOFIA.exe а на другия името на скайпа ми ре6их 4е е някакъв майтап и ги изтеглих на първият ден ни6то не се слу4и оба4е на втория си разказа играта от секъде. Забелязах проблема и реших да преинсталирам компа и го направих но преинсталирам само C:\ и веднага след преинсталация влизам в D:\ тъй като там са ми програмите които 6те трябва да инсталирам като драйвери и тем подобни но както натиснах иконката на D:\ и се активира Аваст-а (забравих да спомена 4е реализа който използвам за преинсталация е с някой добавени програми) на съобщението пише 4е вирусът е "Win32:Renos-KY [Trj]" и др е не6то Win 32 KillAV-MX след което ми изписва директорията " C:\Documents and Settings\MARIAN\Local Settings\Temp\ " Marian e USER NAME-ми при 2 те преинсталации се полу4ават разли4ни EXE -a както и процеси с имената на exe-tata примерно 1 от тях бе6е не6то от сорта exeller.exe и съществува и като процес и реално exe (смисал не е скрит файла) към него като влезна в Интернет се полу4ават "TEMP" файлове на 1 от о тях (немога да ви кажа името тъй като секи път са с разли4но име) като се отвори с notepad се води не6то като дневник какво се склу4ва въобще какво отварям къде влизам си4ко. в момента exe-to на компа е с име egareasuofs.exe. Про4етох 4е трябва да изтегля OTL.exe и от него да сваля OTL.Txt и Extras.Txt 6те ги публикувам в следващия пост . PLS кажете как да премахна тая гадост защотото вече нз какво да прекарам Аваст не помага и Касперски интернет секюрити 2009 в момента съм сам с Аваст 4акам отговори и пак "МЕРСИ ПРЕДВАРИТЕЛНО" !!!!!!! Ето и OTL OTL logfile created on: 24.12.2009 г. 02:24:55 - Run 1 OTL by OldTimer - Version 3.1.19.0 Folder = C:\Documents and Settings\MARIAN\Desktop Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000402 | Country: Bulgaria | Language: BGR | Date Format: dd.M.yyyy 'г.' 511,00 Mb Total Physical Memory | 275,00 Mb Available Physical Memory | 54,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 71,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 39,07 Gb Total Space | 36,01 Gb Free Space | 92,16% Space Free | Partition Type: NTFS Drive D: | 37,61 Gb Total Space | 2,76 Gb Free Space | 7,33% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: TIGARA Current User Name: MARIAN Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: On File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\WINDOWS\system32\aqnergfsoxemmjcem.exe () PRC - C:\Documents and Settings\MARIAN\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software) PRC - C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software) PRC - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software) PRC - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software) PRC - C:\Program Files\Unlocker\UnlockerAssistant.exe () PRC - C:\WINDOWS\system32\wscntfy.exe (Microsoft Corporation) PRC - C:\WINDOWS\Datecs\Flex2K.exe () ========== Modules (SafeList) ========== MOD - C:\Documents and Settings\MARIAN\Desktop\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll (Microsoft Corporation) MOD - C:\Program Files\Unlocker\UnlockerHook.dll () MOD - C:\WINDOWS\system32\newdll.dll () ========== Win32 Services (SafeList) ========== SRV - (aswUpdSv) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software) SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software) SRV - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software) SRV - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software) ========== Driver Services (SafeList) ========== DRV - (Secdrv) -- C:\WINDOWS\system32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) DRV - (aswMon2) -- C:\WINDOWS\system32\drivers\aswmon2.sys (ALWIL Software) DRV - (aswRdr) -- C:\WINDOWS\system32\drivers\aswRdr.sys (ALWIL Software) DRV - (aswTdi) -- C:\WINDOWS\system32\drivers\aswTdi.sys (ALWIL Software) DRV - (Aavmker4) -- C:\WINDOWS\system32\drivers\aavmker4.sys (ALWIL Software) DRV - (DMusic) -- C:\WINDOWS\system32\dmusic.dll (Microsoft Corporation) DRV - (Ptilink) -- C:\WINDOWS\system32\drivers\ptilink.sys (Parallel Technologies, Inc.) DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation) DRV - (FETNDIS) -- C:\WINDOWS\system32\drivers\fetnd5.sys (VIA Technologies, Inc. ) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,AlwaysUseDefaultPrinter = yes IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,AlwaysUseDefaultPrinter = yes IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,AlwaysUseDefaultPrinter = yes IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,AlwaysUseDefaultPrinter = yes IE - HKU\S-1-5-21-117609710-2147117837-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,AlwaysUseDefaultPrinter = yes IE - HKU\S-1-5-21-117609710-2147117837-839522115-1003\S-1-5-21-117609710-2147117837-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Firefox 2.0.0.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009.12.24 12:19:06 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 2.0.0.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009.12.24 12:19:06 | 00,000,000 | ---D | M] [2009.12.24 12:19:07 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2009.12.24 12:19:07 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\[email protected] [2007.11.28 23:50:06 | 00,067,696 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\jar50.dll [2007.11.28 23:50:06 | 00,054,376 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\jsd3250.dll [2007.11.28 23:50:06 | 00,034,952 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\myspell.dll [2007.11.28 23:50:06 | 00,046,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\spellchk.dll [2007.11.28 23:50:06 | 00,172,144 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\xpinstal.dll [2006.09.14 10:02:05 | 00,001,040 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-bg.xml O1 HOSTS File: (734 bytes) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll () O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software) O4 - HKLM..\Run: [uanuxcr] C:\WINDOWS\System32\jayqeuuifpxghfzclc.exe () O4 - HKLM..\Run: [unlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe () O4 - HKU\.DEFAULT..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe () O4 - HKU\S-1-5-18..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe () O4 - HKU\S-1-5-21-117609710-2147117837-839522115-1003..\Run: [tcsciqiodf] C:\WINDOWS\System32\wqrmdwzqqdoaefciuopkb.exe () O4 - HKU\.DEFAULT..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.dll (Microsoft Corporation) O4 - HKU\S-1-5-18..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.dll (Microsoft Corporation) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\FlexType 2K.lnk = C:\WINDOWS\Datecs\Flex2K.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: aixglsjoc = aqnergfsoxemmjcem.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptbehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptbehaviorUser = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-117609710-2147117837-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-117609710-2147117837-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-117609710-2147117837-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-117609710-2147117837-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-117609710-2147117837-839522115-1003_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: Download all with Free Download Manager - C:\Program Files\Free Download Manager\dlall.htm () O8 - Extra context menu item: Download selected with Free Download Manager - C:\Program Files\Free Download Manager\dlselected.htm () O8 - Extra context menu item: Download with Free Download Manager - C:\Program Files\Free Download Manager\dllink.htm () O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Моята текуща начална страница) - about:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.12.24 12:17:08 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2009.12.24 13:27:27 | 00,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2009.12.24 13:27:27 | 00,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2009.12.24 13:27:27 | 00,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2009.12.24 13:27:27 | 00,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2009.12.24 13:27:23 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2009.12.24 13:23:47 | 00,000,000 | ---D | C] -- C:\Qoobox [2009.12.24 13:16:54 | 00,000,000 | -H-D | C] -- C:\WINDOWS\System32\GroupPolicy [2009.12.24 13:11:15 | 00,005,120 | ---- | C] (Datecs Ltd. ) -- C:\WINDOWS\System32\vga856.fon [2009.12.24 13:11:12 | 00,000,000 | ---D | C] -- C:\WINDOWS\Datecs [2009.12.24 12:42:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\MARIAN\Application Data\WinRAR [2009.12.24 12:42:08 | 00,000,000 | ---D | C] -- C:\Program Files\WinRAR [2009.12.24 12:41:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\MARIAN\Application Data\Macromedia [2009.12.24 12:41:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\MARIAN\Application Data\Adobe [2009.12.24 12:36:51 | 00,000,000 | -H-D | C] -- C:\WINDOWS\PIF [2009.12.24 12:25:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\MARIAN\Application Data\Free Download Manager [2009.12.24 12:24:32 | 00,000,000 | ---D | C] -- C:\Documents and Settings\MARIAN\Application Data\Identities [2009.12.24 12:24:30 | 00,000,000 | R--D | C] -- C:\Documents and Settings\MARIAN\My Documents\My Pictures [2009.12.24 12:24:30 | 00,000,000 | R--D | C] -- C:\Documents and Settings\MARIAN\My Documents\My Music [2009.12.24 12:24:24 | 00,000,000 | --SD | C] -- C:\Documents and Settings\MARIAN\Local Settings\Application Data\Microsoft [2009.12.24 12:24:24 | 00,000,000 | --SD | C] -- C:\Documents and Settings\MARIAN\Application Data\Microsoft [2009.12.24 12:24:24 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\MARIAN\SendTo [2009.12.24 12:24:24 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\MARIAN\Recent [2009.12.24 12:24:24 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\MARIAN\Application Data [2009.12.24 12:24:24 | 00,000,000 | R--D | C] -- C:\Documents and Settings\MARIAN\My Documents [2009.12.24 12:24:24 | 00,000,000 | R--D | C] -- C:\Documents and Settings\MARIAN\Favorites [2009.12.24 12:24:24 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\MARIAN\Cookies [2009.12.24 12:24:24 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\MARIAN\PrintHood [2009.12.24 12:24:24 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\MARIAN\NetHood [2009.12.24 12:24:24 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\MARIAN\Local Settings [2009.12.24 12:24:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\MARIAN\Application Data\uTorrent [2009.12.24 12:24:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\MARIAN\Desktop [2009.12.24 12:24:23 | 00,000,000 | R--D | C] -- C:\Documents and Settings\MARIAN\Start Menu [2009.12.24 12:24:23 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\MARIAN\Templates [2009.12.24 12:24:23 | 00,000,000 | ---D | C] -- C:\Documents and Settings\MARIAN\_avast4_ [2009.12.24 12:23:09 | 00,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft [2009.12.24 12:23:09 | 00,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2009.12.24 12:21:30 | 00,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll [2009.12.24 12:21:30 | 00,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll [2009.12.24 12:21:30 | 00,026,624 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll [2009.12.24 12:20:51 | 00,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll [2009.12.24 12:20:51 | 00,045,056 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll [2009.12.24 12:20:51 | 00,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll [2009.12.24 12:20:40 | 00,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys [2009.12.24 12:20:15 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom [2009.12.24 12:20:15 | 00,000,000 | ---D | C] -- C:\Program Files\xerox [2009.12.24 12:20:15 | 00,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage [2009.12.24 12:19:25 | 00,000,000 | ---D | C] -- C:\Program Files\uTorrent [2009.12.24 12:19:24 | 00,000,000 | ---D | C] -- C:\Program Files\Unlocker [2009.12.24 12:19:21 | 00,000,000 | ---D | C] -- C:\Program Files\The KMPlayer [2009.12.24 12:19:12 | 00,000,000 | ---D | C] -- C:\Program Files\Screamer Radio [2009.12.24 12:19:10 | 00,000,000 | ---D | C] -- C:\Program Files\RegSupreme Pro [2009.12.24 12:19:10 | 00,000,000 | ---D | C] -- C:\Program Files\Recuva [2009.12.24 12:19:08 | 00,000,000 | ---D | C] -- C:\Program Files\Free Download Manager [2009.12.24 12:19:06 | 00,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2009.12.24 12:18:59 | 00,000,000 | ---D | C] -- C:\Program Files\CCleaner [2009.12.24 12:18:58 | 00,042,912 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2009.12.24 12:18:58 | 00,023,152 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2009.12.24 12:18:57 | 00,095,608 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\AvastSS.scr [2009.12.24 12:18:57 | 00,026,624 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2009.12.24 12:18:56 | 00,094,544 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2009.12.24 12:18:56 | 00,093,264 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2009.12.24 12:18:52 | 00,837,496 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe [2009.12.24 12:18:47 | 00,000,000 | ---D | C] -- C:\Program Files\Alwil Software [2009.12.24 12:18:40 | 00,000,000 | ---D | C] -- C:\TEMP [2009.12.24 12:18:39 | 00,000,000 | ---D | C] -- C:\Program Files\AIMP2 [2009.12.24 12:17:21 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft [2009.12.24 12:17:21 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft [2009.12.24 12:17:02 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft [2009.12.24 12:17:02 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft [2009.12.24 12:16:00 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM [2009.12.24 12:15:43 | 00,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate [2009.12.24 12:15:23 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX [2009.12.24 12:14:54 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Services [2009.12.24 12:14:51 | 00,000,000 | --SD | C] -- C:\WINDOWS\Tasks [2009.12.24 12:14:51 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap [2009.12.24 12:14:47 | 00,000,000 | ---D | C] -- C:\WINDOWS\srchasst [2009.12.24 12:14:40 | 00,000,000 | ---D | C] -- C:\Program Files\Movie Maker [2009.12.24 12:14:32 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore [2009.12.24 12:14:29 | 00,000,000 | ---D | C] -- C:\Program Files\NetMeeting [2009.12.24 12:14:26 | 00,000,000 | ---D | C] -- C:\Program Files\Outlook Express [2009.12.24 12:14:20 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\System [2009.12.24 12:14:19 | 00,000,000 | ---D | C] -- C:\Program Files\Internet Explorer [2009.12.24 12:14:18 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures [2009.12.24 12:13:56 | 00,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information [2009.12.24 12:13:46 | 00,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications [2009.12.24 12:13:40 | 00,000,000 | ---D | C] -- C:\WINDOWS\Registration [2009.12.24 12:13:34 | 00,000,000 | ---D | C] -- C:\Program Files\Online Services [2009.12.24 12:13:23 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2 [2009.12.24 12:13:22 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Media Player [2009.12.24 12:13:21 | 00,000,000 | ---D | C] -- C:\Program Files\Messenger [2009.12.24 12:13:18 | 00,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone [2009.12.24 12:12:45 | 00,000,000 | ---D | C] -- C:\Program Files\MSN [2009.12.24 12:12:44 | 00,281,088 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe [2009.12.24 12:12:43 | 00,000,000 | ---D | C] -- C:\Program Files\Windows NT [2009.12.24 12:12:40 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc [2009.12.24 12:12:38 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Com [2009.12.24 12:12:30 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos [2009.12.24 04:07:11 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music [2009.12.24 04:06:55 | 00,000,000 | -HSD | C] -- C:\WINDOWS\Installer [2009.12.24 04:06:54 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC [2009.12.24 04:06:51 | 00,000,000 | R--D | C] -- C:\Program Files [2009.12.24 04:06:51 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines [2009.12.24 04:06:51 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared [2009.12.24 04:06:51 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files [2009.12.24 04:06:29 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu [2009.12.24 04:06:29 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents [2009.12.24 04:06:29 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates [2009.12.24 04:06:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favorites [2009.12.24 04:06:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop [2009.12.24 04:06:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2 [2009.12.24 04:06:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot [2009.12.24 04:05:57 | 00,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft [2009.12.24 04:05:57 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data [2009.12.24 04:05:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings [2009.12.24 04:05:37 | 00,000,000 | -HSD | C] -- C:\System Volume Information [2009.12.24 04:01:59 | 00,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files [2009.12.24 04:01:59 | 00,000,000 | R-SD | C] -- C:\WINDOWS\Fonts [2009.12.24 04:01:59 | 00,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache [2009.12.24 04:01:59 | 00,000,000 | R--D | C] -- C:\WINDOWS\Web [2009.12.24 04:01:59 | 00,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages [2009.12.24 04:01:59 | 00,000,000 | -H-D | C] -- C:\WINDOWS\inf [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\WinSxS [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\wins [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\WBEM [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\twain_32 [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\Temp [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\system32 [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\system [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\spool [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\security [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\Resources [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\repair [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ras [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\Provisioning [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\PeerNet [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\pchealth [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\npp [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\mui [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\mui [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\msapps [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\msagent [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\Media [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\l2schemas [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\java [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\IME [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\ime [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ias [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\Help [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\export [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en-us [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\ehome [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\Debug [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\Cursors [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\config [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\Config [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\AppPatch [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\addins [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\3076 [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\2052 [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1054 [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1042 [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1041 [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1037 [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1033 [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1031 [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1028 [2009.12.24 04:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1025 [2009.12.24 02:16:58 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\MARIAN\Desktop\OTL.exe [2009.12.24 02:00:35 | 00,000,000 | ---D | C] -- C:\Documents and Settings\MARIAN\Desktop\Нова папка (2) [2009.12.24 01:57:10 | 00,472,064 | ---- | C] ( ) -- C:\Documents and Settings\MARIAN\Desktop\RootRepeal.exe [2009.12.24 01:18:18 | 00,000,000 | ---D | C] -- C:\Program Files\ESET [2009.12.24 01:11:32 | 00,000,000 | ---D | C] -- C:\Documents and Settings\MARIAN\Desktop\Нова папка [2009.12.24 01:02:09 | 00,000,000 | RHSD | C] -- C:\cmdcons [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2009.12.24 13:27:39 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\wqrmdwzqqdoaefciuopkb.exe [2009.12.24 13:27:39 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\umletklayjscedycmed.exe [2009.12.24 13:27:39 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\nikgyswopdpchjhobwyumg.exe [2009.12.24 13:27:39 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\jayqeuuifpxghfzclc.exe [2009.12.24 13:27:39 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\haaukceutfpaddzepiic.exe [2009.12.24 13:27:39 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\aqnergfsoxemmjcem.exe [2009.12.24 13:27:38 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\tieugusezhnutphi.exe [2009.12.24 13:27:19 | 00,000,650 | -H-- | M] () -- C:\WINDOWS\tcsciqiodffgzpbwxgwgmumshjjkdtfa.kak [2009.12.24 13:27:19 | 00,000,650 | -H-- | M] () -- C:\WINDOWS\System32\tcsciqiodffgzpbwxgwgmumshjjkdtfa.kak [2009.12.24 13:27:19 | 00,000,650 | -H-- | M] () -- C:\Program Files\tcsciqiodffgzpbwxgwgmumshjjkdtfa.kak [2009.12.24 13:27:19 | 00,000,650 | -H-- | M] () -- C:\Documents and Settings\MARIAN\Local Settings\Application Data\tcsciqiodffgzpbwxgwgmumshjjkdtfa.kak [2009.12.24 13:27:19 | 00,000,280 | -H-- | M] () -- C:\WINDOWS\xwccyweafxnentvgxwccyw.afx [2009.12.24 13:27:19 | 00,000,280 | -H-- | M] () -- C:\WINDOWS\System32\xwccyweafxnentvgxwccyw.afx [2009.12.24 13:27:19 | 00,000,280 | -H-- | M] () -- C:\Program Files\xwccyweafxnentvgxwccyw.afx [2009.12.24 13:27:19 | 00,000,280 | -H-- | M] () -- C:\Documents and Settings\MARIAN\Local Settings\Application Data\xwccyweafxnentvgxwccyw.afx [2009.12.24 13:27:08 | 00,001,332 | -H-- | M] () -- C:\WINDOWS\System32\kwpclwrasxaeatigkwpclwrasxaeatigkwp.lwr [2009.12.24 13:27:08 | 00,001,332 | -H-- | M] () -- C:\WINDOWS\kwpclwrasxaeatigkwpclwrasxaeatigkwp.lwr [2009.12.24 13:27:08 | 00,001,332 | -H-- | M] () -- C:\Program Files\kwpclwrasxaeatigkwpclwrasxaeatigkwp.lwr [2009.12.24 13:27:08 | 00,001,332 | -H-- | M] () -- C:\Documents and Settings\MARIAN\Local Settings\Application Data\kwpclwrasxaeatigkwpclwrasxaeatigkwp.lwr [2009.12.24 13:23:13 | 03,862,657 | R--- | M] () -- C:\Documents and Settings\MARIAN\Desktop\tool.exe [2009.12.24 13:22:59 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\System32\wqrmdwzqqdoaefciuopkb.exe [2009.12.24 13:22:59 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\System32\umletklayjscedycmed.exe [2009.12.24 13:22:59 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\System32\tieugusezhnutphi.exe [2009.12.24 13:22:59 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\System32\nikgyswopdpchjhobwyumg.exe [2009.12.24 13:22:59 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\System32\jayqeuuifpxghfzclc.exe [2009.12.24 13:22:59 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\System32\haaukceutfpaddzepiic.exe [2009.12.24 13:22:59 | 00,573,440 | RHS- | M] () -- C:\WINDOWS\System32\aqnergfsoxemmjcem.exe [2009.12.24 13:21:20 | 00,096,664 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009.12.24 13:14:17 | 00,000,138 | -H-- | M] () -- C:\WINDOWS\System32\lysgqcyibhlqnhxwboiwgsoyrxbgdxnmreym.ieo [2009.12.24 13:14:17 | 00,000,138 | -H-- | M] () -- C:\WINDOWS\lysgqcyibhlqnhxwboiwgsoyrxbgdxnmreym.ieo [2009.12.24 13:14:17 | 00,000,138 | -H-- | M] () -- C:\Program Files\lysgqcyibhlqnhxwboiwgsoyrxbgdxnmreym.ieo [2009.12.24 13:14:17 | 00,000,138 | -H-- | M] () -- C:\Documents and Settings\MARIAN\Local Settings\Application Data\lysgqcyibhlqnhxwboiwgsoyrxbgdxnmreym.ieo [2009.12.24 13:13:48 | 00,004,248 | -H-- | M] () -- C:\WINDOWS\System32\oypahqjqgjkmgxkgisjubkdkadegareac.dov [2009.12.24 13:13:48 | 00,004,248 | -H-- | M] () -- C:\WINDOWS\oypahqjqgjkmgxkgisjubkdkadegareac.dov [2009.12.24 13:13:48 | 00,004,248 | -H-- | M] () -- C:\Program Files\oypahqjqgjkmgxkgisjubkdkadegareac.dov [2009.12.24 13:13:48 | 00,004,248 | -H-- | M] () -- C:\Documents and Settings\MARIAN\Local Settings\Application Data\oypahqjqgjkmgxkgisjubkdkadegareac.dov [2009.12.24 13:11:13 | 00,000,509 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\FlexType 2K.lnk [2009.12.24 12:25:03 | 00,311,604 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2009.12.24 12:25:03 | 00,039,992 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2009.12.24 12:25:02 | 00,356,120 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009.12.24 12:23:00 | 00,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD [2009.12.24 12:22:08 | 00,000,768 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf [2009.12.24 12:19:25 | 00,000,630 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\uTorrent.lnk [2009.12.24 12:19:24 | 00,000,650 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\The KMPlayer.lnk [2009.12.24 12:19:15 | 00,000,689 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\Screamer Radio.lnk [2009.12.24 12:19:11 | 00,000,713 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\RegSupreme Pro.lnk [2009.12.24 12:19:10 | 00,001,512 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\Recuva.lnk [2009.12.24 12:19:09 | 00,000,664 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\Free Download Manager.lnk [2009.12.24 12:19:07 | 00,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk [2009.12.24 12:19:00 | 00,000,641 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\CCleaner.lnk [2009.12.24 12:18:58 | 00,001,709 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\avast! Antivirus.lnk [2009.12.24 12:18:57 | 00,002,626 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2009.12.24 12:18:40 | 00,000,657 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\AIMP2 Utilities.lnk [2009.12.24 12:18:40 | 00,000,650 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\AIMP2.lnk [2009.12.24 12:17:08 | 00,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2009.12.24 12:17:08 | 00,000,000 | RHS- | M] () -- C:\IO.SYS [2009.12.24 12:17:08 | 00,000,000 | ---- | M] () -- C:\WINDOWS\control.ini [2009.12.24 12:17:08 | 00,000,000 | ---- | M] () -- C:\CONFIG.SYS [2009.12.24 12:17:08 | 00,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2009.12.24 12:17:05 | 00,000,507 | ---- | M] () -- C:\WINDOWS\win.ini [2009.12.24 12:17:01 | 00,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb [2009.12.24 12:17:01 | 00,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb [2009.12.24 12:16:59 | 00,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2009.12.24 12:16:52 | 00,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI [2009.12.24 12:15:51 | 00,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest [2009.12.24 12:15:51 | 00,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest [2009.12.24 12:15:47 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest [2009.12.24 12:15:47 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest [2009.12.24 12:15:47 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest [2009.12.24 12:15:47 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest [2009.12.24 12:15:47 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest [2009.12.24 12:15:47 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2009.12.24 12:13:54 | 00,021,640 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat [2009.12.24 12:13:44 | 00,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini [2009.12.24 12:13:44 | 00,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini [2009.12.24 12:11:08 | 00,000,211 | ---- | M] () -- C:\Boot.bak [2009.12.24 02:19:27 | 01,048,576 | -H-- | M] () -- C:\Documents and Settings\MARIAN\NTUSER.DAT [2009.12.24 02:17:02 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\MARIAN\Desktop\OTL.exe [2009.12.24 02:02:02 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009.12.24 02:01:58 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009.12.24 02:01:57 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009.12.24 02:01:56 | 53,613,7728 | -HS- | M] () -- C:\hiberfil.sys [2009.12.24 02:00:51 | 00,000,178 | -HS- | M] () -- C:\Documents and Settings\MARIAN\ntuser.ini [2009.12.24 02:00:49 | 01,970,416 | -H-- | M] () -- C:\Documents and Settings\MARIAN\Local Settings\Application Data\IconCache.db [2009.12.24 01:57:16 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\settings.dat [2009.12.24 01:57:05 | 00,464,491 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\RootRepeal.zip [2009.12.24 01:18:18 | 02,672,312 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\esetsmartinstaller_enu.exe [2009.12.24 01:08:14 | 00,284,915 | ---- | M] () -- C:\Documents and Settings\MARIAN\Desktop\gmer.zip [2009.12.24 01:05:26 | 00,000,451 | ---- | M] () -- C:\WINDOWS\system.ini [2009.12.24 01:02:12 | 00,000,281 | RHS- | M] () -- C:\boot.ini [2009.12.09 22:54:07 | 00,261,632 | ---- | M] () -- C:\WINDOWS\PEV.exe [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2009.12.24 13:27:27 | 00,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe [2009.12.24 13:27:27 | 00,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2009.12.24 13:27:27 | 00,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2009.12.24 13:27:27 | 00,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe [2009.12.24 13:27:27 | 00,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2009.12.24 13:22:38 | 03,862,657 | R--- | C] () -- C:\Documents and Settings\MARIAN\Desktop\tool.exe [2009.12.24 13:14:22 | 00,000,650 | -H-- | C] () -- C:\WINDOWS\tcsciqiodffgzpbwxgwgmumshjjkdtfa.kak [2009.12.24 13:14:22 | 00,000,650 | -H-- | C] () -- C:\WINDOWS\System32\tcsciqiodffgzpbwxgwgmumshjjkdtfa.kak [2009.12.24 13:14:22 | 00,000,650 | -H-- | C] () -- C:\Program Files\tcsciqiodffgzpbwxgwgmumshjjkdtfa.kak [2009.12.24 13:14:22 | 00,000,650 | -H-- | C] () -- C:\Documents and Settings\MARIAN\Local Settings\Application Data\tcsciqiodffgzpbwxgwgmumshjjkdtfa.kak [2009.12.24 13:14:09 | 00,001,332 | -H-- | C] () -- C:\WINDOWS\System32\kwpclwrasxaeatigkwpclwrasxaeatigkwp.lwr [2009.12.24 13:14:09 | 00,001,332 | -H-- | C] () -- C:\WINDOWS\kwpclwrasxaeatigkwpclwrasxaeatigkwp.lwr [2009.12.24 13:14:09 | 00,001,332 | -H-- | C] () -- C:\Program Files\kwpclwrasxaeatigkwpclwrasxaeatigkwp.lwr [2009.12.24 13:14:09 | 00,001,332 | -H-- | C] () -- C:\Documents and Settings\MARIAN\Local Settings\Application Data\kwpclwrasxaeatigkwpclwrasxaeatigkwp.lwr [2009.12.24 13:14:08 | 00,000,138 | -H-- | C] () -- C:\WINDOWS\System32\lysgqcyibhlqnhxwboiwgsoyrxbgdxnmreym.ieo [2009.12.24 13:14:08 | 00,000,138 | -H-- | C] () -- C:\WINDOWS\lysgqcyibhlqnhxwboiwgsoyrxbgdxnmreym.ieo [2009.12.24 13:14:08 | 00,000,138 | -H-- | C] () -- C:\Program Files\lysgqcyibhlqnhxwboiwgsoyrxbgdxnmreym.ieo [2009.12.24 13:14:08 | 00,000,138 | -H-- | C] () -- C:\Documents and Settings\MARIAN\Local Settings\Application Data\lysgqcyibhlqnhxwboiwgsoyrxbgdxnmreym.ieo [2009.12.24 13:13:48 | 00,004,248 | -H-- | C] () -- C:\WINDOWS\System32\oypahqjqgjkmgxkgisjubkdkadegareac.dov [2009.12.24 13:13:48 | 00,004,248 | -H-- | C] () -- C:\WINDOWS\oypahqjqgjkmgxkgisjubkdkadegareac.dov [2009.12.24 13:13:48 | 00,004,248 | -H-- | C] () -- C:\Program Files\oypahqjqgjkmgxkgisjubkdkadegareac.dov [2009.12.24 13:13:48 | 00,004,248 | -H-- | C] () -- C:\Documents and Settings\MARIAN\Local Settings\Application Data\oypahqjqgjkmgxkgisjubkdkadegareac.dov [2009.12.24 13:13:48 | 00,000,280 | -H-- | C] () -- C:\WINDOWS\xwccyweafxnentvgxwccyw.afx [2009.12.24 13:13:48 | 00,000,280 | -H-- | C] () -- C:\WINDOWS\System32\xwccyweafxnentvgxwccyw.afx [2009.12.24 13:13:48 | 00,000,280 | -H-- | C] () -- C:\Program Files\xwccyweafxnentvgxwccyw.afx [2009.12.24 13:13:48 | 00,000,280 | -H-- | C] () -- C:\Documents and Settings\MARIAN\Local Settings\Application Data\xwccyweafxnentvgxwccyw.afx [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\wqrmdwzqqdoaefciuopkb.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\System32\wqrmdwzqqdoaefciuopkb.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\umletklayjscedycmed.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\System32\umletklayjscedycmed.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\tieugusezhnutphi.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\System32\tieugusezhnutphi.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\System32\nikgyswopdpchjhobwyumg.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\nikgyswopdpchjhobwyumg.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\System32\jayqeuuifpxghfzclc.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\jayqeuuifpxghfzclc.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\System32\haaukceutfpaddzepiic.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\haaukceutfpaddzepiic.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\System32\aqnergfsoxemmjcem.exe [2009.12.24 13:13:34 | 00,573,440 | RHS- | C] () -- C:\WINDOWS\aqnergfsoxemmjcem.exe [2009.12.24 13:11:15 | 00,000,398 | ---- | C] () -- C:\WINDOWS\System32\kbdus.kbd [2009.12.24 13:11:14 | 00,000,509 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\FlexType 2K.lnk [2009.12.24 13:11:12 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_856.nls [2009.12.24 13:11:12 | 00,028,672 | ---- | C] () -- C:\WINDOWS\System32\newdll.dll [2009.12.24 12:24:25 | 00,001,512 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\Recuva.lnk [2009.12.24 12:24:25 | 00,000,664 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\Free Download Manager.lnk [2009.12.24 12:24:25 | 00,000,657 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\AIMP2 Utilities.lnk [2009.12.24 12:24:25 | 00,000,650 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\AIMP2.lnk [2009.12.24 12:24:25 | 00,000,641 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\CCleaner.lnk [2009.12.24 12:24:25 | 00,000,178 | -HS- | C] () -- C:\Documents and Settings\MARIAN\ntuser.ini [2009.12.24 12:24:24 | 00,000,713 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\RegSupreme Pro.lnk [2009.12.24 12:24:24 | 00,000,689 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\Screamer Radio.lnk [2009.12.24 12:24:24 | 00,000,650 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\The KMPlayer.lnk [2009.12.24 12:24:24 | 00,000,630 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\uTorrent.lnk [2009.12.24 12:24:23 | 01,048,576 | -H-- | C] () -- C:\Documents and Settings\MARIAN\NTUSER.DAT [2009.12.24 12:24:22 | 53,613,7728 | -HS- | C] () -- C:\hiberfil.sys [2009.12.24 12:23:00 | 00,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD [2009.12.24 12:22:08 | 00,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2009.12.24 12:21:56 | 00,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls [2009.12.24 12:21:25 | 00,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls [2009.12.24 12:21:25 | 00,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls [2009.12.24 12:21:06 | 00,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls [2009.12.24 12:21:05 | 01,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex [2009.12.24 12:20:54 | 00,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll [2009.12.24 12:20:39 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls [2009.12.24 12:20:37 | 00,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls [2009.12.24 12:20:37 | 00,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls [2009.12.24 12:19:07 | 00,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk [2009.12.24 12:18:58 | 00,001,709 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\avast! Antivirus.lnk [2009.12.24 12:18:52 | 00,380,928 | ---- | C] () -- C:\WINDOWS\System32\actskin4.ocx [2009.12.24 12:18:35 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_857.nls [2009.12.24 12:18:35 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls [2009.12.24 12:18:35 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls [2009.12.24 12:18:35 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls [2009.12.24 12:18:35 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10081.nls [2009.12.24 12:18:35 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls [2009.12.24 12:18:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_875.nls [2009.12.24 12:18:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls [2009.12.24 12:18:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls [2009.12.24 12:18:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS [2009.12.24 12:18:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls [2009.12.24 12:18:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS [2009.12.24 12:18:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10017.nls [2009.12.24 12:18:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls [2009.12.24 12:18:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10007.nls [2009.12.24 12:18:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls [2009.12.24 12:18:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10006.nls [2009.12.24 12:18:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls [2009.12.24 12:18:32 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_869.nls [2009.12.24 12:18:32 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls [2009.12.24 12:18:32 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_737.nls [2009.12.24 12:18:32 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls [2009.12.24 12:18:31 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_866.nls [2009.12.24 12:18:31 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls [2009.12.24 12:18:31 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_855.nls [2009.12.24 12:18:31 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls [2009.12.24 12:18:31 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls [2009.12.24 12:18:31 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS [2009.12.24 12:18:30 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10082.nls [2009.12.24 12:18:30 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls [2009.12.24 12:18:29 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_852.nls [2009.12.24 12:18:29 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_852.nls [2009.12.24 12:18:29 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10029.nls [2009.12.24 12:18:29 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls [2009.12.24 12:18:29 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10010.nls [2009.12.24 12:18:29 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls [2009.12.24 12:18:27 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls [2009.12.24 12:18:27 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls [2009.12.24 12:17:08 | 00,002,626 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT [2009.12.24 12:17:08 | 00,000,000 | RHS- | C] () -- C:\MSDOS.SYS [2009.12.24 12:17:08 | 00,000,000 | RHS- | C] () -- C:\IO.SYS [2009.12.24 12:17:08 | 00,000,000 | ---- | C] () -- C:\CONFIG.SYS [2009.12.24 12:17:08 | 00,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT [2009.12.24 12:17:01 | 00,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb [2009.12.24 12:17:01 | 00,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb [2009.12.24 12:16:59 | 00,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx [2009.12.24 12:15:51 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest [2009.12.24 12:15:51 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest [2009.12.24 12:15:47 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest [2009.12.24 12:15:47 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest [2009.12.24 12:15:47 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest [2009.12.24 12:15:47 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest [2009.12.24 12:15:47 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest [2009.12.24 12:15:47 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2009.12.24 12:15:31 | 04,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex [2009.12.24 12:15:01 | 00,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp [2009.12.24 12:15:01 | 00,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp [2009.12.24 12:14:56 | 00,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf [2009.12.24 12:14:45 | 00,004,639 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.exe [2009.12.24 12:14:34 | 00,376,320 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll [2009.12.24 12:13:54 | 00,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2009.12.24 12:13:04 | 00,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp [2009.12.24 12:13:04 | 00,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp [2009.12.24 12:13:04 | 00,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp [2009.12.24 12:13:04 | 00,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp [2009.12.24 12:13:03 | 00,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce [2009.12.24 12:13:03 | 00,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp [2009.12.24 12:13:03 | 00,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp [2009.12.24 12:13:03 | 00,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp [2009.12.24 12:13:03 | 00,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp [2009.12.24 12:13:03 | 00,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp [2009.12.24 12:13:03 | 00,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce [2009.12.24 12:13:03 | 00,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp [2009.12.24 12:13:03 | 00,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp [2009.12.24 12:13:02 | 00,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce [2009.12.24 12:13:02 | 00,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce [2009.12.24 12:13:02 | 00,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce [2009.12.24 12:13:02 | 00,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce [2009.12.24 12:13:02 | 00,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce [2009.12.24 12:13:02 | 00,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce [2009.12.24 12:13:01 | 00,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd [2009.12.24 12:13:00 | 00,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h [2009.12.24 12:12:59 | 00,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h [2009.12.24 12:12:53 | 00,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc [2009.12.24 04:06:52 | 01,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd [2009.12.24 04:06:52 | 00,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa [2009.12.24 04:06:52 | 00,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf [2009.12.24 04:06:51 | 00,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa [2009.12.24 04:06:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls [2009.12.24 04:06:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls [2009.12.24 04:06:37 | 00,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT [2009.12.24 04:06:14 | 00,141,702 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat [2009.12.24 04:06:14 | 00,110,116 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat [2009.12.24 04:06:14 | 00,037,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT [2009.12.24 04:06:14 | 00,031,965 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat [2009.12.24 04:06:14 | 00,031,281 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT [2009.12.24 04:06:14 | 00,024,209 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat [2009.12.24 04:06:14 | 00,013,753 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT [2009.12.24 04:06:14 | 00,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT [2009.12.24 04:06:14 | 00,011,651 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat [2009.12.24 04:06:14 | 00,009,581 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT [2009.12.24 04:06:14 | 00,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT [2009.12.24 04:06:14 | 00,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT [2009.12.24 04:06:14 | 00,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat [2009.12.24 04:06:14 | 00,007,245 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT [2009.12.24 04:06:13 | 02,012,670 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT [2009.12.24 04:06:13 | 01,042,903 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP2.CAT [2009.12.24 04:06:13 | 00,797,189 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT [2009.12.24 04:06:13 | 00,502,724 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT [2009.12.24 04:06:13 | 00,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT [2009.12.24 04:05:37 | 00,096,664 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009.12.24 04:05:01 | 00,000,281 | RHS- | C] () -- C:\boot.ini [2009.12.24 04:04:58 | 00,000,768 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf [2009.12.24 01:57:16 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\settings.dat [2009.12.24 01:57:01 | 00,464,491 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\RootRepeal.zip [2009.12.24 01:17:59 | 02,672,312 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\esetsmartinstaller_enu.exe [2009.12.24 01:08:12 | 00,284,915 | ---- | C] () -- C:\Documents and Settings\MARIAN\Desktop\gmer.zip [2009.12.24 01:02:12 | 00,000,211 | ---- | C] () -- C:\Boot.bak [2009.12.24 01:02:10 | 00,260,272 | ---- | C] () -- C:\cmldr ========== LOP Check ========== [2009.12.24 12:19:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Application Data\uTorrent [2009.12.24 13:26:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\MARIAN\Application Data\Free Download Manager [2009.12.24 12:19:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\MARIAN\Application Data\uTorrent ========== Purity Check ========== < End of report > Ето и Extras OTL Extras logfile created on: 24.12.2009 г. 02:24:55 - Run 1 OTL by OldTimer - Version 3.1.19.0 Folder = C:\Documents and Settings\MARIAN\Desktop Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000402 | Country: Bulgaria | Language: BGR | Date Format: dd.M.yyyy 'г.' 511,00 Mb Total Physical Memory | 275,00 Mb Available Physical Memory | 54,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 71,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 39,07 Gb Total Space | 36,01 Gb Free Space | 92,16% Space Free | Partition Type: NTFS Drive D: | 37,61 Gb Total Space | 2,76 Gb Free Space | 7,33% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: TIGARA Current User Name: MARIAN Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: On File Age = 30 Days Output = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .chm [@ = chm.file] -- "%SYSTEMROOT%\hh.exe" %1 .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* chm.file [open] -- "%SYSTEMROOT%\hh.exe" %1 cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "%programfiles%\internet explorer\iexplore.exe" ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{7CCEBC24-62DB-4280-A8EC-BFA49F167920}" = Software Update for Web Folders "{C408D81A-CB17-4CDF-98AF-2E64036B3F32}" = Windows Bulgarian Interface Pack "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "AIMP2" = AIMP2 "avast!" = avast! Antivirus "CCleaner (remove only)" = CCleaner (remove only) "ESET Online Scanner" = ESET Online Scanner v3 "FlexType 2K" = FlexType 2K "Free Download Manager_is1" = Free Download Manager 2.1 "Mozilla Firefox (2.0.0.11)" = Mozilla Firefox (2.0.0.11) "Recuva" = Recuva (remove only) "RegSupreme Pro" = RegSupreme Pro "Screamer Radio" = Screamer Radio "The KMPlayer (remove only)" = The KMPlayer (remove only) "Unlocker" = Unlocker 1.8.5 "uTorrent (remove only)" = uTorrent (remove only) "WinRAR archiver" = WinRAR archiver ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 24.12.2009 г. 04:21:31 | Computer Name = TIGARA | Source = SecurityCenter | ID = 1802 Description = The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall. Error - 24.12.2009 г. 04:21:32 | Computer Name = TIGARA | Source = Userenv | ID = 1090 Description = Windows не можа да регистрира състоянието на сеанса RSoP (Резултантно множество от правила). Опитът да се свърже с WMI беше неуспешен. За това приложение с правила няма да се правят повече RSoP регистрирания. Error - 24.12.2009 г. 04:21:32 | Computer Name = TIGARA | Source = Userenv | ID = 1090 Description = Windows не можа да регистрира състоянието на сеанса RSoP (Резултантно множество от правила). Опитът да се свърже с WMI беше неуспешен. За това приложение с правила няма да се правят повече RSoP регистрирания. Error - 24.12.2009 г. 04:51:46 | Computer Name = TIGARA | Source = SecurityCenter | ID = 1802 Description = The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall. Error - 24.12.2009 г. 04:51:46 | Computer Name = TIGARA | Source = Userenv | ID = 1090 Description = Windows не можа да регистрира състоянието на сеанса RSoP (Резултантно множество от правила). Опитът да се свърже с WMI беше неуспешен. За това приложение с правила няма да се правят повече RSoP регистрирания. Error - 24.12.2009 г. 04:51:47 | Computer Name = TIGARA | Source = Userenv | ID = 1090 Description = Windows не можа да регистрира състоянието на сеанса RSoP (Резултантно множество от правила). Опитът да се свърже с WMI беше неуспешен. За това приложение с правила няма да се правят повече RSoP регистрирания. Error - 23.12.2009 г. 16:48:13 | Computer Name = TIGARA | Source = crypt32 | ID = 131083 Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: An internal certificate chaining error has occurred. Error - 23.12.2009 г. 17:32:13 | Computer Name = TIGARA | Source = SecurityCenter | ID = 1802 Description = The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall. Error - 23.12.2009 г. 17:32:13 | Computer Name = TIGARA | Source = Userenv | ID = 1090 Description = Windows не можа да регистрира състоянието на сеанса RSoP (Резултантно множество от правила). Опитът да се свърже с WMI беше неуспешен. За това приложение с правила няма да се правят повече RSoP регистрирания. Error - 23.12.2009 г. 17:32:14 | Computer Name = TIGARA | Source = Userenv | ID = 1090 Description = Windows не можа да регистрира състоянието на сеанса RSoP (Резултантно множество от правила). Опитът да се свърже с WMI беше неуспешен. За това приложение с правила няма да се правят повече RSoP регистрирания. [ System Events ] Error - 24.12.2009 г. 03:47:25 | Computer Name = TIGARA | Source = DCOM | ID = 10005 Description = DCOM got error "%1083" attempting to start the service helpsvc with arguments "" in order to run the server: {833E4012-AFF7-4AC3-AAC2-9F24C1457BCE} Error - 24.12.2009 г. 03:52:13 | Computer Name = TIGARA | Source = Setup | ID = 60055 Description = Windows Setup encountered non-fatal errors during installation. Please check the setuperr.log found in your Windows directory for more informatio Error - 24.12.2009 г. 03:58:25 | Computer Name = TIGARA | Source = Service Control Manager | ID = 7034 Description = The Windows Installer service terminated unexpectedly. It has done this 1 time(s). Error - 24.12.2009 г. 04:01:34 | Computer Name = TIGARA | Source = Service Control Manager | ID = 7034 Description = The avast! Web Scanner service terminated unexpectedly. It has done this 1 time(s). Error - 24.12.2009 г. 04:01:36 | Computer Name = TIGARA | Source = Service Control Manager | ID = 7034 Description = The avast! Mail Scanner service terminated unexpectedly. It has done this 1 time(s). Error - 24.12.2009 г. 04:01:38 | Computer Name = TIGARA | Source = Service Control Manager | ID = 7034 Description = The avast! iAVS4 Control Service service terminated unexpectedly. It has done this 1 time(s). Error - 23.12.2009 г. 16:31:14 | Computer Name = TIGARA | Source = Service Control Manager | ID = 7034 Description = The avast! Web Scanner service terminated unexpectedly. It has done this 1 time(s). Error - 23.12.2009 г. 16:35:21 | Computer Name = TIGARA | Source = PlugPlayManager | ID = 11 Description = The device Root\LEGACY_UNLOCKERDRIVER5\0000 disappeared from the system without first being prepared for removal. < End of report >