Проблем с компа . [РЕШЕН]

2 ноември 200916 г.

Автор

Не сам забелязал .

2 ноември 200916 г.

Автор

Sophos Anti-Virus

Version 4.47.0 [Win32/Intel]

Virus data version 4.47E, November 2009

Includes detection for 1133592 viruses, trojans and worms

System time 15:01:33, System date 02 November 2009

Command line qualifiers are: -DI -p=C:\VIRUSLOG.TXT

IDE directory is: C:\111

Using IDE file zbot-ip.ide

Using IDE file dloa-cvd.ide

Using IDE file fake-aey.ide

Using IDE file zbot-iq.ide

Using IDE file alure-e.ide

Using IDE file agen-ljn.ide

Using IDE file pdfex-ce.ide

Using IDE file agen-ljr.ide

Using IDE file sasfis-a.ide

Using IDE file fake-afb.ide

Using IDE file bank-euo.ide

Using IDE file vbinje-k.ide

Using IDE file drop-dz.ide

Using IDE file agen-lka.ide

Using IDE file pdload-a.ide

Using IDE file swfdlr-q.ide

Using IDE file pdfjs-ds.ide

Using IDE file pws-ben.ide

Using IDE file fake-afe.ide

Using IDE file hiloti-h.ide

Using IDE file fakea-qp.ide

Using IDE file auto-ast.ide

Using IDE file bancdl-e.ide

Using IDE file zbot-iu.ide

Using IDE file agen-lkm.ide

Using IDE file zipcar-e.ide

Using IDE file rimecu-b.ide

Using IDE file zbot-iv.ide

Using IDE file zbot-jb.ide

Using IDE file jsdown-s.ide

Using IDE file auto-asx.ide

Using IDE file agen-lkx.ide

Using IDE file zbot-jg.ide

Using IDE file fake-afh.ide

Using IDE file agen-lky.ide

Using IDE file downln-h.ide

Using IDE file realbo-b.ide

Using IDE file fakea-qq.ide

Using IDE file zbot-jj.ide

Using IDE file dload-gy.ide

Using IDE file agen-lli.ide

Using IDE file agen-llj.ide

Using IDE file bckd-qzo.ide

Using IDE file psw-hh.ide

Using IDE file pdfjs-ea.ide

Using IDE file agen-lkz.ide

Using IDE file fakev-pk.ide

Using IDE file buzus-bk.ide

Using IDE file fake-afm.ide

Using IDE file psyme-ks.ide

Using IDE file pws-bex.ide

Using IDE file xed-b.ide

Using IDE file dwnl-hxo.ide

Using IDE file lnkzip-b.ide

Using IDE file dloa-cvo.ide

Using IDE file dloa-cvp.ide

Using IDE file vbinje-l.ide

Using IDE file vbinje-m.ide

Using IDE file ircb-afr.ide

Using IDE file bredo-m.ide

Using IDE file tdss-bh.ide

Using IDE file bank-eus.ide

Using IDE file start-ci.ide

Using IDE file mdro-cgx.ide

Using IDE file start-cj.ide

Using IDE file dloa-cvr.ide

Using IDE file harni-bz.ide

Using IDE file litis-a.ide

Using IDE file fake-afo.ide

Using IDE file docdro-n.ide

Using IDE file dloa-cvs.ide

Using IDE file zipmal-b.ide

Using IDE file renos-dy.ide

Using IDE file gpcode-e.ide

Using IDE file agen-lmx.ide

Using IDE file voter-f.ide

Using IDE file dldr-cb.ide

Using IDE file dnschg-a.ide

Using IDE file fake-afw.ide

Using IDE file agen-lne.ide

Using IDE file agen-lng.ide

Using IDE file dloa-cvx.ide

Using IDE file bank-eut.ide

Using IDE file vb-ejl.ide

Using IDE file bho-oc.ide

Using IDE file ifram-dd.ide

Using IDE file agen-lll.ide

Using IDE file jsred-ab.ide

Using IDE file bredo-n.ide

Using IDE file agen-lno.ide

Using IDE file dldr-cc.ide

Using IDE file spy-ef.ide

Using IDE file bckd-qzr.ide

Using IDE file backd-au.ide

Using IDE file fake-agg.ide

Using IDE file bredo-o.ide

Using IDE file bckd-qzs.ide

Using IDE file vbinje-o.ide

Using IDE file jsredi-o.ide

Using IDE file keyge-de.ide

Using IDE file agen-lna.ide

Using IDE file swizz-qa.ide

Using IDE file injec-kh.ide

Using IDE file bckd-qzu.ide

Using IDE file dwnl-hxz.ide

Using IDE file bredav-a.ide

Using IDE file spybo-ou.ide

Using IDE file meredr-c.ide

Using IDE file zbot-jo.ide

Using IDE file bredoz-m.ide

Using IDE file zbot-jq.ide

Using IDE file swfldr-i.ide

Using IDE file fakeal-p.ide

Using IDE file agen-lot.ide

Using IDE file zbot-jr.ide

Using IDE file injec-kj.ide

Using IDE file agen-lmn.ide

Using IDE file dwnl-hye.ide

Using IDE file agen-lov.ide

Using IDE file banc-bgh.ide

Using IDE file orbina-c.ide

Using IDE file obfjs-cl.ide

Using IDE file auto-aua.ide

Using IDE file poiso-bn.ide

Using IDE file agen-lpk.ide

Using IDE file ifram-de.ide

Using IDE file pdfjs-el.ide

Using IDE file imaut-f.ide

Using IDE file zbot-jt.ide

Using IDE file zbot-ju.ide

Using IDE file fake-agk.ide

Using IDE file zbot-jv.ide

Using IDE file dropr-ce.ide

Using IDE file ircb-afu.ide

Using IDE file agen-lnr.ide

Using IDE file buzus-bj.ide

Using IDE file fake-agc.ide

Using IDE file mdro-chb.ide

Using IDE file pws-bfa.ide

Using IDE file agen-lnz.ide

Using IDE file hupig-bc.ide

Using IDE file mdro-chc.ide

Using IDE file fake-agm.ide

Using IDE file agen-lob.ide

Using IDE file keylo-lv.ide

Using IDE file agen-lpu.ide

Using IDE file auto-atl.ide

Using IDE file bckd-qzx.ide

Quick Scanning

Could not open C:\hiberfil.sys

>>> Virus 'Mal/Generic-A' found in file C:\System Volume Information\_restore{F5B3F59A-DBBA-4405-8967-993F530DCFD3}\RP13\A0005735.exe

2 boot sectors swept.

31135 files swept in 16 minutes and 41 seconds.

1 error was encountered.

1 virus was discovered.

1 file out of 31135 was infected.

Please send infected samples to Sophos for analysis.

For advice consult www.sophos.com, email [email protected]

or telephone +44 1235 559933

Ending Sophos Anti-Virus.

2 ноември 200916 г.

Oстана ни само едно нещо преди да преинсталираме начисто. => REPAIR INSTALL (да, може би трябваше да го препоръчам по-рано, но явно сте били заразен с нов вариант на Parite). Чистата преинсталация би била най-доброто решение, но и отнема повече време...с REPAIR INSTALL-a, ще се възстановят файловете, които липсват или са повредени и ще се запазят поне повечето ви настройки и инсталирани програми. Да, сигурно някои програми ще се наложи да ги преинсталирате отново, но е трудно да се предскаже кои ще са те. Затова да пристъпим към действия:

Заредете пак от диска с Windows XP, но не натискайте "R", а натиснете "Enter"

Там вече по-стандартната процедура натиснете "F8" за да се съгласите с лицензионното споразумение.

След като се появи това меню тук вече натиснете "R"

Продължете все едно правите стандартна преинсталация...

За финал, направете нова проверка с Combofix и публикувайте резултата.

2 ноември 200916 г.

Автор

ComboFix 09-11-01.04 - gichu 11.2009 ?. 22:54.5.1 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.511.137 [GMT 2:00]

Running from: c:\documents and settings\gichu\Desktop\Tool.exe.exe

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\program files\\setup.exe

c:\program files\remove.exe

.

((((((((((((((((((((((((( Files Created from 2009-10-02 to 2009-11-02 )))))))))))))))))))))))))))))))

.

2009-11-02 20:35 . 2009-11-02 20:35 -------- d-----w- c:\windows\NVIEW

2009-11-02 20:35 . 2002-06-28 09:07 33792 ----a-w- c:\windows\system32\getvpdc.exe

2009-11-02 20:35 . 2001-09-13 05:58 7012 ----a-w- c:\windows\system32\drivers\PMEMNT.sys

2009-11-02 20:35 . 2001-09-13 05:58 28672 ----a-w- c:\windows\system32\PMEMW.dll

2009-11-02 20:11 . 2004-08-03 23:56 221184 ----a-w- c:\windows\system32\wmpns.dll

2009-11-02 20:04 . 2004-08-03 21:59 44544 ----a-w- c:\windows\system32\tscupgrd.exe

2009-11-02 19:51 . 2001-08-23 12:00 24661 ----a-w- c:\windows\system32\spxcoins.dll

2009-11-02 19:51 . 2001-08-23 12:00 13312 ----a-w- c:\windows\system32\irclass.dll

2009-11-02 12:54 . 2009-11-02 12:59 -------- d-----w- C:\111

2009-10-30 11:41 . 2009-10-30 11:42 -------- d-----w- C:\sav32cil

2009-10-30 08:03 . 2009-10-30 08:03 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite

2009-10-30 08:02 . 2009-10-30 08:02 -------- d-----w- c:\documents and settings\gichu\Application Data\DAEMON Tools Lite

2009-10-28 21:48 . 2008-04-13 20:04 63663 ----a-w- c:\windows\system32\drivers\ati1rvxx.sys

2009-10-27 16:43 . 2009-10-27 19:32 -------- d-----w- c:\windows\BDOSCAN8

2009-10-27 08:18 . 2009-10-28 21:20 -------- d-----w- c:\program files\Panda Security

2009-10-25 10:40 . 2009-10-25 10:46 331805736 ----a-w- C:\windowsxp-kb936929-sp3-x86-enu_c81472f7eeea2eca421e116cd4c03e2300ebfde4.exe

2009-10-23 20:39 . 2009-10-23 20:39 -------- d-----w- c:\documents and settings\gichu\DoctorWeb

2009-10-23 03:14 . 2009-10-23 03:14 -------- d-----w- c:\windows\Sun

2009-10-23 03:13 . 2009-10-23 03:13 411368 ----a-w- c:\windows\system32\deploytk.dll

2009-10-23 03:13 . 2009-10-23 03:13 -------- d-----w- c:\program files\Java

2009-10-22 07:00 . 2009-10-22 07:00 -------- d-----w- c:\windows\system32\xircom

2009-10-22 07:00 . 2009-10-22 07:00 -------- d-----w- c:\windows\system32\wbem\snmp

2009-10-22 07:00 . 2009-10-22 07:00 -------- d-----w- c:\program files\microsoft frontpage

2009-10-21 19:37 . 2009-10-21 19:38 -------- d-----w- C:\hijack

2009-10-21 18:30 . 2009-10-21 18:30 -------- d-----w- c:\documents and settings\gichu\Application Data\Malwarebytes

2009-10-21 18:30 . 2009-10-21 18:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

2009-10-20 18:13 . 2009-10-20 18:13 -------- d-----w- c:\program files\Webshots

2009-10-20 18:13 . 2009-10-20 18:13 -------- d-----w- c:\documents and settings\gichu\Application Data\Webshots

2009-10-19 14:28 . 2009-10-19 14:28 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\ESET

2009-10-19 14:28 . 2009-10-19 14:28 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\ESET

2009-10-19 14:26 . 2009-10-19 14:26 -------- d-----w- c:\documents and settings\gichu\Local Settings\Application Data\ESET

2009-10-19 14:26 . 2009-10-23 03:08 -------- d-----w- c:\program files\ESET

2009-10-19 14:26 . 2009-10-19 14:26 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET

2009-10-16 08:57 . 2009-10-16 08:58 -------- d-----w- C:\games

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-11-02 20:47 . 2009-04-03 18:36 -------- d-----w- c:\program files\SiSLan

2009-11-02 20:06 . 2009-04-03 18:21 22720 ----a-w- c:\windows\system32\emptyregdb.dat

2009-11-02 20:06 . 2009-04-03 18:21 -------- d-----w- c:\program files\Windows Media Connect 2

2009-11-02 19:39 . 2009-04-03 18:45 -------- d-----w- c:\documents and settings\gichu\Application Data\uTorrent

2009-11-02 19:21 . 2009-04-03 18:53 -------- d-----w- c:\documents and settings\gichu\Application Data\Skype

2009-10-30 08:03 . 2009-09-29 15:59 -------- d-----w- c:\program files\DAEMON Tools Toolbar

2009-10-30 08:03 . 2009-09-29 15:59 -------- d-----w- c:\program files\DAEMON Tools Lite

2009-10-29 14:39 . 2009-09-26 18:31 -------- d-----w- c:\program files\Garena

2009-10-28 21:18 . 2009-05-19 14:32 -------- d-----w- c:\documents and settings\All Users\Application Data\Nero

2009-10-19 15:36 . 2009-04-03 23:30 14768 ----a-w- c:\documents and settings\gichu\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-10-19 14:57 . 2009-04-03 18:35 9524224 ----a-w- c:\windows\system32\RTLCPL.EXE

2009-10-19 14:57 . 2008-07-29 17:35 326656 ----a-w- c:\windows\system32\PresentationHost.exe

2009-10-19 14:56 . 2008-07-29 16:24 622080 ----a-w- c:\windows\system32\icardagt.exe

2009-10-19 14:56 . 2009-01-08 22:45 6144 ----a-w- c:\windows\system32\FontReg.exe

2009-10-19 14:56 . 2009-04-03 18:35 40960 ----a-w- c:\windows\system32\ChCfg.exe

2009-10-19 14:50 . 2009-04-03 18:59 -------- d-----w- c:\program files\Winamp

2009-10-19 14:49 . 2009-04-03 18:26 -------- d-----w- c:\program files\uTorrent

2009-10-19 14:49 . 2009-04-03 19:07 -------- d-----w- c:\program files\PowerISO

2009-10-19 14:46 . 2009-09-27 20:31 -------- d-----w- c:\program files\Microsoft IntelliPoint

2009-10-19 14:46 . 2009-09-26 12:16 -------- d-----w- c:\program files\Microsoft IntelliPoint 5.2

2009-10-19 14:46 . 2009-04-03 18:26 -------- d-----w- c:\program files\K-Lite Codec Pack

2009-10-19 14:43 . 2009-04-03 18:35 -------- d-----w- c:\program files\AvRack

2009-10-01 11:07 . 2009-10-01 11:07 -------- d-----w- c:\program files\Common Files\DirectX

2009-09-29 15:59 . 2009-09-29 15:59 -------- d-----w- c:\documents and settings\gichu\Application Data\DAEMON Tools

2009-09-29 15:50 . 2009-09-29 15:50 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Pro

2009-09-29 15:47 . 2009-09-29 15:47 -------- d-----w- c:\documents and settings\gichu\Application Data\DAEMON Tools Pro

2009-09-29 15:41 . 2009-04-03 18:34 -------- d--h--w- c:\program files\InstallShield Installation Information

2009-09-29 14:08 . 2009-09-29 14:08 -------- d-----w- c:\documents and settings\gichu\Application Data\Thinstall

2009-09-24 00:09 . 2009-09-24 00:09 -------- d-----w- c:\program files\MSBuild

2009-09-24 00:09 . 2009-09-24 00:09 -------- d-----w- c:\program files\Reference Assemblies

2009-09-10 10:20 . 2009-09-09 23:08 -------- d-----w- c:\program files\HLTooLz

2009-09-09 23:08 . 2009-09-09 23:08 286720 ----a-w- c:\windows\Setup1.exe

2009-09-09 23:08 . 2009-09-09 23:08 73216 ----a-w- c:\windows\ST6UNST.EXE

2001-09-25 13:33 . 2009-11-02 20:46 158676 ------r- c:\program files\DIAG.EXE

2001-08-28 11:56 . 2009-11-02 20:46 1642 ------r- c:\program files\SETUP.TXT

2001-08-07 08:52 . 2009-11-02 20:46 4608 ------r- c:\program files\INST2000.DLL

2001-07-31 08:39 . 2009-11-02 20:46 180 ------r- c:\program files\SETUP.INI

2001-04-18 14:18 . 2009-11-02 20:46 64224 ------r- c:\program files\SETUP.INS

2001-01-16 14:06 . 2009-11-02 20:46 38036 ------r- c:\program files\REFRESH.EXE

2000-11-09 00:50 . 2009-11-02 20:46 81716 ------r- c:\program files\_USER1.CAB

2000-11-09 00:50 . 2009-11-02 20:46 377 ------r- c:\program files\SETUP.LID

2000-11-09 00:50 . 2009-11-02 20:46 353 ------r- c:\program files\LAYOUT.BIN

2000-11-09 00:50 . 2009-11-02 20:46 3014 ------r- c:\program files\DATA1.CAB

2000-11-09 00:50 . 2009-11-02 20:46 9868900 ------r- c:\program files\_SYS1.CAB

2000-10-24 14:07 . 2009-11-02 20:46 99024 ------r- c:\program files\IPDETECT.EXE

2000-08-18 20:11 . 2009-11-02 20:46 42900 ------r- c:\program files\INF2CAT.EXE

2000-08-16 09:46 . 2009-11-02 20:46 5336 ------r- c:\program files\DIAG.TXT

2000-04-07 02:08 . 2009-11-02 20:46 304 ------r- c:\program files\SETUP.ISS

1998-01-28 03:07 . 2009-11-02 20:46 8704 ------r- c:\program files\_ISDEL.EXE

1998-01-23 10:54 . 2009-11-02 20:46 290733 ------r- c:\program files\_INST32I.EX_

1997-10-20 23:20 . 2009-11-02 20:46 4525 ------r- c:\program files\LANG.DAT

1997-05-07 03:15 . 2009-11-02 20:46 417 ------r- c:\program files\OS.DAT

1995-11-27 23:53 . 2009-11-02 20:46 128760 ------r- c:\program files\MAIN.BMP

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-04-06 39424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-23 149280]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"_nltide_2"="shell32" [X]

"ShowDeskFix"="shell32" [X]

"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-03 44544]

"_nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2007-04-15 124928]

"IE7-11"="advpack.dll" - c:\windows\system32\advpack.dll [2007-04-15 124928]

c:\documents and settings\gichu\Start Menu\Programs\Startup\

Webshots.lnk - c:\program files\Webshots\Launcher.exe [2009-10-20 45056]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"MemCheckBoxInRunDlg"= 1 (0x1)

"StartMenuFavorites"= 0 (0x0)

"Start_ShowHelp"= 0 (0x0)

"Start_ShowMyComputer"= 1 (0x1)

"Start_ShowMyDocs"= 1 (0x1)

"Start_ShowMyMusic"= 0 (0x0)

"Start_ShowRun"= 1 (0x1)

"Start_ShowSearch"= 1 (0x1)

"Start_ShowNetConn"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"MemCheckBoxInRunDlg"= 1 (0x1)

"NoResolveTrack"= 1 (0x1)

"NoSMConfigurePrograms"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]

"MemCheckBoxInRunDlg"= 1 (0x1)

"NoResolveTrack"= 1 (0x1)

"ForceClassicControlPanel"= 1 (0x1)

"NoSMConfigurePrograms"= 1 (0x1)

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^FlexType 2K.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\FlexType 2K.lnk

backup=c:\windows\pss\FlexType 2K.lnkCommon Startup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\uTorrent\\uTorrent.exe"=

"c:\\Program Files\\Garena\\Garena.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015

"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016

"500:UDP"= 500:UDP:@xpsp2res.dll,-22017

R3 GarenaPEngine;GarenaPEngine;c:\docume~1\gichu\LOCALS~1\Temp\TIFE3.tmp [x]

--- Other Services/Drivers In Memory ---

*Deregistered* - mbr

.

------- Supplementary Scan -------

.

uStart Page = hxxp://www.garena.com/portal/

uSearchMigratedDefaultURL = hxxp://www.thegreatforum.org/index.php?act=Search

uSearchURL,(Default) = hxxp://www.google.com/keyword/%s

FF - ProfilePath - c:\documents and settings\gichu\Application Data\Mozilla\Firefox\Profiles\0bmexgnj.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.bg/firefox?client=firefox-a&rls=org.mozilla:bg:official

FF - component: c:\documents and settings\gichu\Application Data\Mozilla\Firefox\Profiles\0bmexgnj.default\extensions\[email protected]\components\DTToolbarFF.dll

FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----

c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-11-02 22:59

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]

"ImagePath"="\??\c:\docume~1\gichu\LOCALS~1\Temp\TIFE3.tmp"

.

--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(564)

c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(1408)

c:\windows\system32\ieframe.dll

c:\windows\system32\wpdshserviceobj.dll

c:\windows\system32\portabledevicetypes.dll

c:\windows\system32\portabledeviceapi.dll

.

------------------------ Other Running Processes ------------------------

.

c:\windows\system32\Ati2evxx.exe

c:\program files\Java\jre6\bin\jqs.exe

c:\windows\system32\wscntfy.exe

c:\program files\Webshots\webshots.scr

.

**************************************************************************

.

Completion time: 2009-11-02 23:01 - machine was rebooted

ComboFix-quarantined-files.txt 2009-11-02 21:01

ComboFix2.txt 2009-10-28 22:14

Pre-Run: 1 820 520 448 bytes free

Post-Run: 1 839 951 872 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4

- - End Of File - - 1CC987B2A4EFB270CE9420037069AB89

2 ноември 200916 г.

Това вече е нещо друго.

*. Отворете notepad и въведете чрез copy/paste:

KILLALL::

Folder::

C:\111

C:\sav32cil

c:\windows\BDOSCAN8

c:\program files\Panda Security

c:\documents and settings\gichu\DoctorWeb

C:\hijack

Registry::

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SunJavaUpdateSched"=-

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"_nltide_2"=-

"ShowDeskFix"=-

DDS::

uSearchMigratedDefaultURL = hxxp://www.thegreatforum.org/index.php?act=Search

FixCSet::

*. Запазeте файла с име CFScript и го провлачете чрез drag/drop в Combofix.exe (както е на картинката)

*. По времето на сканиране от страна на ComboFix не стартирайте никакви други приложения, не натискайте клавиши от клавиатурата и не местете мишката !

*. Публикувайте лог файла, който ще се създаде след рестарта на компютъра в следващия си пост.

2 ноември 200916 г.

Автор

ComboFix 09-11-01.04 - gichu 11.2009 ?. 0:05.6.1 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.511.183 [GMT 2:00]

Running from: c:\documents and settings\gichu\Desktop\Tool.exe.exe

Command switches used :: c:\documents and settings\gichu\Desktop\CFScript.txt

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\111

c:\111\agen-ljn.ide

c:\111\agen-ljr.ide

c:\111\agen-lka.ide

c:\111\agen-lkm.ide

c:\111\agen-lkx.ide

c:\111\agen-lky.ide

c:\111\agen-lkz.ide

c:\111\agen-lli.ide

c:\111\agen-llj.ide

c:\111\agen-lll.ide

c:\111\agen-lmn.ide

c:\111\agen-lmx.ide

c:\111\agen-lna.ide

c:\111\agen-lne.ide

c:\111\agen-lng.ide

c:\111\agen-lno.ide

c:\111\agen-lnr.ide

c:\111\agen-lnz.ide

c:\111\agen-lob.ide

c:\111\agen-lot.ide

c:\111\agen-lov.ide

c:\111\agen-lpk.ide

c:\111\agen-lpu.ide

c:\111\alure-e.ide

c:\111\APPC01.VDB

c:\111\auto-ast.ide

c:\111\auto-asx.ide

c:\111\auto-atl.ide

c:\111\auto-aua.ide

c:\111\backd-au.ide

c:\111\banc-bgh.ide

c:\111\bancdl-e.ide

c:\111\bank-euo.ide

c:\111\bank-eus.ide

c:\111\bank-eut.ide

c:\111\bckd-qzo.ide

c:\111\bckd-qzr.ide

c:\111\bckd-qzs.ide

c:\111\bckd-qzu.ide

c:\111\bckd-qzx.ide

c:\111\bho-oc.ide

c:\111\bredav-a.ide

c:\111\bredo-m.ide

c:\111\bredo-n.ide

c:\111\bredo-o.ide

c:\111\bredoz-m.ide

c:\111\buzus-bj.ide

c:\111\buzus-bk.ide

c:\111\dldr-cb.ide

c:\111\dldr-cc.ide

c:\111\dloa-cvd.ide

c:\111\dloa-cvo.ide

c:\111\dloa-cvp.ide

c:\111\dloa-cvr.ide

c:\111\dloa-cvs.ide

c:\111\dloa-cvx.ide

c:\111\dload-gy.ide

c:\111\dnschg-a.ide

c:\111\docdro-n.ide

c:\111\downln-h.ide

c:\111\drop-dz.ide

c:\111\dropr-ce.ide

c:\111\dwnl-hxo.ide

c:\111\dwnl-hxz.ide

c:\111\dwnl-hye.ide

c:\111\fake-aey.ide

c:\111\fake-afb.ide

c:\111\fake-afe.ide

c:\111\fake-afh.ide

c:\111\fake-afm.ide

c:\111\fake-afo.ide

c:\111\fake-afw.ide

c:\111\fake-agc.ide

c:\111\fake-agg.ide

c:\111\fake-agk.ide

c:\111\fake-agm.ide

c:\111\fakea-qp.ide

c:\111\fakea-qq.ide

c:\111\fakeal-p.ide

c:\111\fakev-pk.ide

c:\111\gpcode-e.ide

c:\111\harni-bz.ide

c:\111\hiloti-h.ide

c:\111\hupig-bc.ide

c:\111\ifram-dd.ide

c:\111\ifram-de.ide

c:\111\imaut-f.ide

c:\111\injec-kh.ide

c:\111\injec-kj.ide

c:\111\ircb-afr.ide

c:\111\ircb-afu.ide

c:\111\jsdown-s.ide

c:\111\jsred-ab.ide

c:\111\jsredi-o.ide

c:\111\keyge-de.ide

c:\111\keylo-lv.ide

c:\111\litis-a.ide

c:\111\lnkzip-b.ide

c:\111\mdro-cgx.ide

c:\111\mdro-chb.ide

c:\111\mdro-chc.ide

c:\111\meredr-c.ide

c:\111\obfjs-cl.ide

c:\111\orbina-c.ide

c:\111\OSDP.DLL

c:\111\pdfex-ce.ide

c:\111\pdfjs-ds.ide

c:\111\pdfjs-ea.ide

c:\111\pdfjs-el.ide

c:\111\pdload-a.ide

c:\111\poiso-bn.ide

c:\111\psw-hh.ide

c:\111\psyme-ks.ide

c:\111\pws-ben.ide

c:\111\pws-bex.ide

c:\111\pws-bfa.ide

c:\111\READCLI.TXT

c:\111\realbo-b.ide

c:\111\renos-dy.ide

c:\111\rimecu-b.ide

c:\111\sasfis-a.ide

c:\111\SAV32CLI.EXE

c:\111\SAVI.DLL

c:\111\SAVMSCM.DLL

c:\111\spy-ef.ide

c:\111\spybo-ou.ide

c:\111\start-ci.ide

c:\111\start-cj.ide

c:\111\SUS01.VDB

c:\111\SVEXT.DAT

c:\111\swfdlr-q.ide

c:\111\swfldr-i.ide

c:\111\swizz-qa.ide

c:\111\tdss-bh.ide

c:\111\vb-ejl.ide

c:\111\vbinje-k.ide

c:\111\vbinje-l.ide

c:\111\vbinje-m.ide

c:\111\vbinje-o.ide

c:\111\VDL.DAT

c:\111\VDL01.VDB

c:\111\VDL02.VDB

c:\111\VDL03.VDB

c:\111\VDL04.VDB

c:\111\VDL05.VDB

c:\111\VDL06.VDB

c:\111\VDL07.VDB

c:\111\VDL08.VDB

c:\111\VDL09.VDB

c:\111\VDL10.VDB

c:\111\VDL11.VDB

c:\111\VDL12.VDB

c:\111\VDL13.VDB

c:\111\VDL14.VDB

c:\111\VDL15.VDB

c:\111\VDL16.VDB

c:\111\VDL17.VDB

c:\111\VDL18.VDB

c:\111\VDL19.VDB

c:\111\VDL20.VDB

c:\111\VDL21.VDB

c:\111\VDL22.VDB

c:\111\VDL23.VDB

c:\111\VDL24.VDB

c:\111\VDL25.VDB

c:\111\VDL26.VDB

c:\111\VDL27.VDB

c:\111\VDL28.VDB

c:\111\VDL29.VDB

c:\111\VDL30.VDB

c:\111\VDL31.VDB

c:\111\VDL32.VDB

c:\111\VDL33.VDB

c:\111\VDL34.VDB

c:\111\VDL35.VDB

c:\111\VDL36.VDB

c:\111\VDL37.VDB

c:\111\VEEX.DLL

c:\111\voter-f.ide

c:\111\xed-b.ide

c:\111\XVDL01.VDB

c:\111\XVDL02.VDB

c:\111\XVDL03.VDB

c:\111\XVDL04.VDB

c:\111\XVDL05.VDB

c:\111\XVDL06.VDB

c:\111\XVDL07.VDB

c:\111\XVDL08.VDB

c:\111\XVDL09.VDB

c:\111\XVDL10.VDB

c:\111\XVDL11.VDB

c:\111\XVDL12.VDB

c:\111\XVDL13.VDB

c:\111\XVDL14.VDB

c:\111\XVDL15.VDB

c:\111\XVDL16.VDB

c:\111\XVDL17.VDB

c:\111\XVDL18.VDB

c:\111\XVDL19.VDB

c:\111\zbot-ip.ide

c:\111\zbot-iq.ide

c:\111\zbot-iu.ide

c:\111\zbot-iv.ide

c:\111\zbot-jb.ide

c:\111\zbot-jg.ide

c:\111\zbot-jj.ide

c:\111\zbot-jo.ide

c:\111\zbot-jq.ide

c:\111\zbot-jr.ide

c:\111\zbot-jt.ide

c:\111\zbot-ju.ide

c:\111\zbot-jv.ide

c:\111\zipcar-e.ide

c:\111\zipmal-b.ide

c:\documents and settings\gichu\DoctorWeb

c:\documents and settings\gichu\DoctorWeb\CureIt.log

C:\hijack

c:\hijack\hijackthis.log

c:\hijack\hijackthis2.txt

c:\hijack\kaldata.exe.exe

c:\program files\Panda Security

C:\sav32cil

c:\sav32cil\agen-ljn.ide

c:\sav32cil\agen-ljr.ide

c:\sav32cil\agen-lka.ide

c:\sav32cil\agen-lkm.ide

c:\sav32cil\agen-lkx.ide

c:\sav32cil\agen-lky.ide

c:\sav32cil\agen-lkz.ide

c:\sav32cil\agen-lli.ide

c:\sav32cil\agen-llj.ide

c:\sav32cil\agen-lll.ide

c:\sav32cil\agen-lmn.ide

c:\sav32cil\agen-lmx.ide

c:\sav32cil\agen-lna.ide

c:\sav32cil\agen-lne.ide

c:\sav32cil\agen-lng.ide

c:\sav32cil\agen-lno.ide

c:\sav32cil\agen-lot.ide

c:\sav32cil\agen-lov.ide

c:\sav32cil\agen-lpk.ide

c:\sav32cil\alure-e.ide

c:\sav32cil\auto-ast.ide

c:\sav32cil\auto-asx.ide

c:\sav32cil\auto-aua.ide

c:\sav32cil\backd-au.ide

c:\sav32cil\banc-bgh.ide

c:\sav32cil\bancdl-e.ide

c:\sav32cil\bank-euo.ide

c:\sav32cil\bank-eus.ide

c:\sav32cil\bank-eut.ide

c:\sav32cil\bckd-qzo.ide

c:\sav32cil\bckd-qzr.ide

c:\sav32cil\bckd-qzs.ide

c:\sav32cil\bckd-qzu.ide

c:\sav32cil\bho-oc.ide

c:\sav32cil\bredav-a.ide

c:\sav32cil\bredo-m.ide

c:\sav32cil\bredo-n.ide

c:\sav32cil\bredo-o.ide

c:\sav32cil\bredoz-m.ide

c:\sav32cil\buzus-bk.ide

c:\sav32cil\dldr-cb.ide

c:\sav32cil\dldr-cc.ide

c:\sav32cil\dloa-cvd.ide

c:\sav32cil\dloa-cvo.ide

c:\sav32cil\dloa-cvp.ide

c:\sav32cil\dloa-cvr.ide

c:\sav32cil\dloa-cvs.ide

c:\sav32cil\dloa-cvx.ide

c:\sav32cil\dload-gy.ide

c:\sav32cil\dnschg-a.ide

c:\sav32cil\docdro-n.ide

c:\sav32cil\downln-h.ide

c:\sav32cil\drop-dz.ide

c:\sav32cil\dropr-ce.ide

c:\sav32cil\dwnl-hxo.ide

c:\sav32cil\dwnl-hxz.ide

c:\sav32cil\dwnl-hye.ide

c:\sav32cil\fake-aey.ide

c:\sav32cil\fake-afb.ide

c:\sav32cil\fake-afe.ide

c:\sav32cil\fake-afh.ide

c:\sav32cil\fake-afm.ide

c:\sav32cil\fake-afo.ide

c:\sav32cil\fake-afw.ide

c:\sav32cil\fake-agg.ide

c:\sav32cil\fake-agk.ide

c:\sav32cil\fakea-qp.ide

c:\sav32cil\fakea-qq.ide

c:\sav32cil\fakeal-p.ide

c:\sav32cil\fakev-pk.ide

c:\sav32cil\gpcode-e.ide

c:\sav32cil\harni-bz.ide

c:\sav32cil\hiloti-h.ide

c:\sav32cil\ifram-dd.ide

c:\sav32cil\ifram-de.ide

c:\sav32cil\imaut-f.ide

c:\sav32cil\injec-kh.ide

c:\sav32cil\injec-kj.ide

c:\sav32cil\ircb-afr.ide

c:\sav32cil\ircb-afu.ide

c:\sav32cil\jsdown-s.ide

c:\sav32cil\jsred-ab.ide

c:\sav32cil\jsredi-o.ide

c:\sav32cil\keyge-de.ide

c:\sav32cil\litis-a.ide

c:\sav32cil\lnkzip-b.ide

c:\sav32cil\mdro-cgx.ide

c:\sav32cil\meredr-c.ide

c:\sav32cil\obfjs-cl.ide

c:\sav32cil\orbina-c.ide

c:\sav32cil\pdfex-ce.ide

c:\sav32cil\pdfjs-ds.ide

c:\sav32cil\pdfjs-ea.ide

c:\sav32cil\pdfjs-el.ide

c:\sav32cil\pdload-a.ide

c:\sav32cil\poiso-bn.ide

c:\sav32cil\psw-hh.ide

c:\sav32cil\psyme-ks.ide

c:\sav32cil\pws-ben.ide

c:\sav32cil\pws-bex.ide

c:\sav32cil\realbo-b.ide

c:\sav32cil\renos-dy.ide

c:\sav32cil\rimecu-b.ide

c:\sav32cil\sasfis-a.ide

c:\sav32cil\sav32sfx.exe

c:\sav32cil\spy-ef.ide

c:\sav32cil\spybo-ou.ide

c:\sav32cil\start-ci.ide

c:\sav32cil\start-cj.ide

c:\sav32cil\swfdlr-q.ide

c:\sav32cil\swfldr-i.ide

c:\sav32cil\swizz-qa.ide

c:\sav32cil\tdss-bh.ide

c:\sav32cil\vb-ejl.ide

c:\sav32cil\vbinje-k.ide

c:\sav32cil\vbinje-l.ide

c:\sav32cil\vbinje-m.ide

c:\sav32cil\vbinje-o.ide

c:\sav32cil\voter-f.ide

c:\sav32cil\xed-b.ide

c:\sav32cil\zbot-ip.ide

c:\sav32cil\zbot-iq.ide

c:\sav32cil\zbot-iu.ide

c:\sav32cil\zbot-iv.ide

c:\sav32cil\zbot-jb.ide

c:\sav32cil\zbot-jg.ide

c:\sav32cil\zbot-jj.ide

c:\sav32cil\zbot-jo.ide

c:\sav32cil\zbot-jq.ide

c:\sav32cil\zbot-jr.ide

c:\sav32cil\zbot-jt.ide

c:\sav32cil\zbot-ju.ide

c:\sav32cil\zbot-jv.ide

c:\sav32cil\zipcar-e.ide

c:\sav32cil\zipmal-b.ide

c:\windows\BDOSCAN8

c:\windows\BDOSCAN8\avxdisk.dll

c:\windows\BDOSCAN8\avxs.dll

c:\windows\BDOSCAN8\avxt.dll

c:\windows\BDOSCAN8\bdcore.dll

c:\windows\BDOSCAN8\bdoscan.ini

c:\windows\BDOSCAN8\bdoscan.log

c:\windows\BDOSCAN8\boot.xmd

c:\windows\BDOSCAN8\ipsupd.dll

c:\windows\BDOSCAN8\lang.ini

c:\windows\BDOSCAN8\libfn.dll

c:\windows\BDOSCAN8\librtvr.dll

c:\windows\BDOSCAN8\live.ini

c:\windows\BDOSCAN8\oscan82.ocx

c:\windows\BDOSCAN8\plugins.htm

c:\windows\BDOSCAN8\Plugins\7zip.xmd

c:\windows\BDOSCAN8\Plugins\access.xmd

c:\windows\BDOSCAN8\Plugins\ace.xmd

c:\windows\BDOSCAN8\Plugins\adsntfs.xmd

c:\windows\BDOSCAN8\Plugins\alz.xmd

c:\windows\BDOSCAN8\Plugins\arc.xmd

c:\windows\BDOSCAN8\Plugins\arj.xmd

c:\windows\BDOSCAN8\Plugins\aspy_emu.cvd

c:\windows\BDOSCAN8\Plugins\bach.xmd

c:\windows\BDOSCAN8\Plugins\boot.xmd

c:\windows\BDOSCAN8\Plugins\bzip2.xmd

c:\windows\BDOSCAN8\Plugins\cab.xmd

c:\windows\BDOSCAN8\Plugins\ceva_dll.cvd

c:\windows\BDOSCAN8\Plugins\ceva_emu.cvd

c:\windows\BDOSCAN8\Plugins\ceva_vfs.cvd

c:\windows\BDOSCAN8\Plugins\ceva_vfs.ivd

c:\windows\BDOSCAN8\Plugins\cevakrnl.cvd

c:\windows\BDOSCAN8\Plugins\cevakrnl.ivd

c:\windows\BDOSCAN8\Plugins\cevakrnl.rv0

c:\windows\BDOSCAN8\Plugins\cevakrnl.rvd

c:\windows\BDOSCAN8\Plugins\cevakrnl.xmd

c:\windows\BDOSCAN8\Plugins\chm.xmd

c:\windows\BDOSCAN8\Plugins\cookie.cvd

c:\windows\BDOSCAN8\Plugins\cookie.xmd

c:\windows\BDOSCAN8\Plugins\cpio.xmd

c:\windows\BDOSCAN8\Plugins\cran.cvd

c:\windows\BDOSCAN8\Plugins\cran.ivd

c:\windows\BDOSCAN8\Plugins\cran.xmd

c:\windows\BDOSCAN8\Plugins\dbx.xmd

c:\windows\BDOSCAN8\Plugins\docfile.xmd

c:\windows\BDOSCAN8\Plugins\dummyarch.xmd

c:\windows\BDOSCAN8\Plugins\dummyscan.xmd

c:\windows\BDOSCAN8\Plugins\e_spyw.cvd

c:\windows\BDOSCAN8\Plugins\e_spyw.i01

c:\windows\BDOSCAN8\Plugins\e_spyw.i02

c:\windows\BDOSCAN8\Plugins\e_spyw.i03

c:\windows\BDOSCAN8\Plugins\e_spyw.i04

c:\windows\BDOSCAN8\Plugins\e_spyw.i05

c:\windows\BDOSCAN8\Plugins\e_spyw.i06

c:\windows\BDOSCAN8\Plugins\e_spyw.i07

c:\windows\BDOSCAN8\Plugins\e_spyw.i08

c:\windows\BDOSCAN8\Plugins\e_spyw.i09

c:\windows\BDOSCAN8\Plugins\e_spyw.i10

c:\windows\BDOSCAN8\Plugins\e_spyw.i11

c:\windows\BDOSCAN8\Plugins\e_spyw.i12

c:\windows\BDOSCAN8\Plugins\e_spyw.i13

c:\windows\BDOSCAN8\Plugins\e_spyw.i14

c:\windows\BDOSCAN8\Plugins\e_spyw.i15

c:\windows\BDOSCAN8\Plugins\e_spyw.i16

c:\windows\BDOSCAN8\Plugins\e_spyw.i17

c:\windows\BDOSCAN8\Plugins\e_spyw.i18

c:\windows\BDOSCAN8\Plugins\e_spyw.i19

c:\windows\BDOSCAN8\Plugins\e_spyw.i20

c:\windows\BDOSCAN8\Plugins\e_spyw.i21

c:\windows\BDOSCAN8\Plugins\e_spyw.i22

c:\windows\BDOSCAN8\Plugins\e_spyw.i23

c:\windows\BDOSCAN8\Plugins\e_spyw.i24

c:\windows\BDOSCAN8\Plugins\e_spyw.i25

c:\windows\BDOSCAN8\Plugins\e_spyw.i26

c:\windows\BDOSCAN8\Plugins\e_spyw.i27

c:\windows\BDOSCAN8\Plugins\e_spyw.i28

c:\windows\BDOSCAN8\Plugins\e_spyw.i29

c:\windows\BDOSCAN8\Plugins\e_spyw.i30

c:\windows\BDOSCAN8\Plugins\e_spyw.i31

c:\windows\BDOSCAN8\Plugins\e_spyw.i32

c:\windows\BDOSCAN8\Plugins\e_spyw.i33

c:\windows\BDOSCAN8\Plugins\e_spyw.i34

c:\windows\BDOSCAN8\Plugins\e_spyw.i35

c:\windows\BDOSCAN8\Plugins\e_spyw.i36

c:\windows\BDOSCAN8\Plugins\e_spyw.i37

c:\windows\BDOSCAN8\Plugins\e_spyw.i38

c:\windows\BDOSCAN8\Plugins\e_spyw.i39

c:\windows\BDOSCAN8\Plugins\e_spyw.i40

c:\windows\BDOSCAN8\Plugins\e_spyw.i41

c:\windows\BDOSCAN8\Plugins\e_spyw.i42

c:\windows\BDOSCAN8\Plugins\e_spyw.i43

c:\windows\BDOSCAN8\Plugins\e_spyw.i44

c:\windows\BDOSCAN8\Plugins\e_spyw.i45

c:\windows\BDOSCAN8\Plugins\e_spyw.i46

c:\windows\BDOSCAN8\Plugins\e_spyw.i47

c:\windows\BDOSCAN8\Plugins\e_spyw.i48

c:\windows\BDOSCAN8\Plugins\e_spyw.i49

c:\windows\BDOSCAN8\Plugins\e_spyw.ivd

c:\windows\BDOSCAN8\Plugins\emalware.001

c:\windows\BDOSCAN8\Plugins\emalware.002

c:\windows\BDOSCAN8\Plugins\emalware.003

c:\windows\BDOSCAN8\Plugins\emalware.004

c:\windows\BDOSCAN8\Plugins\emalware.005

c:\windows\BDOSCAN8\Plugins\emalware.006

c:\windows\BDOSCAN8\Plugins\emalware.007

c:\windows\BDOSCAN8\Plugins\emalware.008

c:\windows\BDOSCAN8\Plugins\emalware.009

c:\windows\BDOSCAN8\Plugins\emalware.010

c:\windows\BDOSCAN8\Plugins\emalware.011

c:\windows\BDOSCAN8\Plugins\emalware.012

c:\windows\BDOSCAN8\Plugins\emalware.013

c:\windows\BDOSCAN8\Plugins\emalware.014

c:\windows\BDOSCAN8\Plugins\emalware.015

c:\windows\BDOSCAN8\Plugins\emalware.016

c:\windows\BDOSCAN8\Plugins\emalware.017

c:\windows\BDOSCAN8\Plugins\emalware.018

c:\windows\BDOSCAN8\Plugins\emalware.019

c:\windows\BDOSCAN8\Plugins\emalware.020

c:\windows\BDOSCAN8\Plugins\emalware.021

c:\windows\BDOSCAN8\Plugins\emalware.022

c:\windows\BDOSCAN8\Plugins\emalware.023

c:\windows\BDOSCAN8\Plugins\emalware.024

c:\windows\BDOSCAN8\Plugins\emalware.025

c:\windows\BDOSCAN8\Plugins\emalware.026

c:\windows\BDOSCAN8\Plugins\emalware.027

c:\windows\BDOSCAN8\Plugins\emalware.028

c:\windows\BDOSCAN8\Plugins\emalware.029

c:\windows\BDOSCAN8\Plugins\emalware.030

c:\windows\BDOSCAN8\Plugins\emalware.031

c:\windows\BDOSCAN8\Plugins\emalware.032

c:\windows\BDOSCAN8\Plugins\emalware.033

c:\windows\BDOSCAN8\Plugins\emalware.034

c:\windows\BDOSCAN8\Plugins\emalware.035

c:\windows\BDOSCAN8\Plugins\emalware.036

c:\windows\BDOSCAN8\Plugins\emalware.037

c:\windows\BDOSCAN8\Plugins\emalware.038

c:\windows\BDOSCAN8\Plugins\emalware.039

c:\windows\BDOSCAN8\Plugins\emalware.040

c:\windows\BDOSCAN8\Plugins\emalware.041

c:\windows\BDOSCAN8\Plugins\emalware.042

c:\windows\BDOSCAN8\Plugins\emalware.043

c:\windows\BDOSCAN8\Plugins\emalware.044

c:\windows\BDOSCAN8\Plugins\emalware.045

c:\windows\BDOSCAN8\Plugins\emalware.046

c:\windows\BDOSCAN8\Plugins\emalware.047

c:\windows\BDOSCAN8\Plugins\emalware.048

c:\windows\BDOSCAN8\Plugins\emalware.049

c:\windows\BDOSCAN8\Plugins\emalware.050

c:\windows\BDOSCAN8\Plugins\emalware.051

c:\windows\BDOSCAN8\Plugins\emalware.052

c:\windows\BDOSCAN8\Plugins\emalware.053

c:\windows\BDOSCAN8\Plugins\emalware.054

c:\windows\BDOSCAN8\Plugins\emalware.055

c:\windows\BDOSCAN8\Plugins\emalware.056

c:\windows\BDOSCAN8\Plugins\emalware.057

c:\windows\BDOSCAN8\Plugins\emalware.058

c:\windows\BDOSCAN8\Plugins\emalware.059

c:\windows\BDOSCAN8\Plugins\emalware.060

c:\windows\BDOSCAN8\Plugins\emalware.061

c:\windows\BDOSCAN8\Plugins\emalware.062

c:\windows\BDOSCAN8\Plugins\emalware.063

c:\windows\BDOSCAN8\Plugins\emalware.064

c:\windows\BDOSCAN8\Plugins\emalware.065

c:\windows\BDOSCAN8\Plugins\emalware.066

c:\windows\BDOSCAN8\Plugins\emalware.067

c:\windows\BDOSCAN8\Plugins\emalware.068

c:\windows\BDOSCAN8\Plugins\emalware.069

c:\windows\BDOSCAN8\Plugins\emalware.070

c:\windows\BDOSCAN8\Plugins\emalware.071

c:\windows\BDOSCAN8\Plugins\emalware.072

c:\windows\BDOSCAN8\Plugins\emalware.073

c:\windows\BDOSCAN8\Plugins\emalware.074

c:\windows\BDOSCAN8\Plugins\emalware.075

c:\windows\BDOSCAN8\Plugins\emalware.076

c:\windows\BDOSCAN8\Plugins\emalware.077

c:\windows\BDOSCAN8\Plugins\emalware.078

c:\windows\BDOSCAN8\Plugins\emalware.079

c:\windows\BDOSCAN8\Plugins\emalware.080

c:\windows\BDOSCAN8\Plugins\emalware.081

c:\windows\BDOSCAN8\Plugins\emalware.082

c:\windows\BDOSCAN8\Plugins\emalware.083

c:\windows\BDOSCAN8\Plugins\emalware.084

c:\windows\BDOSCAN8\Plugins\emalware.085

c:\windows\BDOSCAN8\Plugins\emalware.086

c:\windows\BDOSCAN8\Plugins\emalware.087

c:\windows\BDOSCAN8\Plugins\emalware.088

c:\windows\BDOSCAN8\Plugins\emalware.089

c:\windows\BDOSCAN8\Plugins\emalware.090

c:\windows\BDOSCAN8\Plugins\emalware.091

c:\windows\BDOSCAN8\Plugins\emalware.092

c:\windows\BDOSCAN8\Plugins\emalware.093

c:\windows\BDOSCAN8\Plugins\emalware.094

c:\windows\BDOSCAN8\Plugins\emalware.095

c:\windows\BDOSCAN8\Plugins\emalware.096

c:\windows\BDOSCAN8\Plugins\emalware.097

c:\windows\BDOSCAN8\Plugins\emalware.098

c:\windows\BDOSCAN8\Plugins\emalware.099

c:\windows\BDOSCAN8\Plugins\emalware.100

c:\windows\BDOSCAN8\Plugins\emalware.101

c:\windows\BDOSCAN8\Plugins\emalware.102

c:\windows\BDOSCAN8\Plugins\emalware.103

c:\windows\BDOSCAN8\Plugins\emalware.104

c:\windows\BDOSCAN8\Plugins\emalware.105

c:\windows\BDOSCAN8\Plugins\emalware.106

c:\windows\BDOSCAN8\Plugins\emalware.107

c:\windows\BDOSCAN8\Plugins\emalware.108

c:\windows\BDOSCAN8\Plugins\emalware.109

c:\windows\BDOSCAN8\Plugins\emalware.110

c:\windows\BDOSCAN8\Plugins\emalware.111

c:\windows\BDOSCAN8\Plugins\emalware.112

c:\windows\BDOSCAN8\Plugins\emalware.113

c:\windows\BDOSCAN8\Plugins\emalware.114

c:\windows\BDOSCAN8\Plugins\emalware.115

c:\windows\BDOSCAN8\Plugins\emalware.116

c:\windows\BDOSCAN8\Plugins\emalware.117

c:\windows\BDOSCAN8\Plugins\emalware.118

c:\windows\BDOSCAN8\Plugins\emalware.119

c:\windows\BDOSCAN8\Plugins\emalware.120

c:\windows\BDOSCAN8\Plugins\emalware.121

c:\windows\BDOSCAN8\Plugins\emalware.122

c:\windows\BDOSCAN8\Plugins\emalware.123

c:\windows\BDOSCAN8\Plugins\emalware.124

c:\windows\BDOSCAN8\Plugins\emalware.125

c:\windows\BDOSCAN8\Plugins\emalware.126

c:\windows\BDOSCAN8\Plugins\emalware.127

c:\windows\BDOSCAN8\Plugins\emalware.128

c:\windows\BDOSCAN8\Plugins\emalware.129

c:\windows\BDOSCAN8\Plugins\emalware.130

c:\windows\BDOSCAN8\Plugins\emalware.131

c:\windows\BDOSCAN8\Plugins\emalware.132

c:\windows\BDOSCAN8\Plugins\emalware.133

c:\windows\BDOSCAN8\Plugins\emalware.134

c:\windows\BDOSCAN8\Plugins\emalware.135

c:\windows\BDOSCAN8\Plugins\emalware.136

c:\windows\BDOSCAN8\Plugins\emalware.137

c:\windows\BDOSCAN8\Plugins\emalware.138

c:\windows\BDOSCAN8\Plugins\emalware.139

c:\windows\BDOSCAN8\Plugins\emalware.140

c:\windows\BDOSCAN8\Plugins\emalware.141

c:\windows\BDOSCAN8\Plugins\emalware.142

c:\windows\BDOSCAN8\Plugins\emalware.143

c:\windows\BDOSCAN8\Plugins\emalware.144

c:\windows\BDOSCAN8\Plugins\emalware.145

c:\windows\BDOSCAN8\Plugins\emalware.146

c:\windows\BDOSCAN8\Plugins\emalware.147

c:\windows\BDOSCAN8\Plugins\emalware.148

c:\windows\BDOSCAN8\Plugins\emalware.149

c:\windows\BDOSCAN8\Plugins\emalware.150

c:\windows\BDOSCAN8\Plugins\emalware.151

c:\windows\BDOSCAN8\Plugins\emalware.152

c:\windows\BDOSCAN8\Plugins\emalware.153

c:\windows\BDOSCAN8\Plugins\emalware.154

c:\windows\BDOSCAN8\Plugins\emalware.155

c:\windows\BDOSCAN8\Plugins\emalware.156

c:\windows\BDOSCAN8\Plugins\emalware.157

c:\windows\BDOSCAN8\Plugins\emalware.158

c:\windows\BDOSCAN8\Plugins\emalware.159

c:\windows\BDOSCAN8\Plugins\emalware.160

c:\windows\BDOSCAN8\Plugins\emalware.161

c:\windows\BDOSCAN8\Plugins\emalware.162

c:\windows\BDOSCAN8\Plugins\emalware.163

c:\windows\BDOSCAN8\Plugins\emalware.164

c:\windows\BDOSCAN8\Plugins\emalware.165

c:\windows\BDOSCAN8\Plugins\emalware.166

c:\windows\BDOSCAN8\Plugins\emalware.167

c:\windows\BDOSCAN8\Plugins\emalware.168

c:\windows\BDOSCAN8\Plugins\emalware.169

c:\windows\BDOSCAN8\Plugins\emalware.170

c:\windows\BDOSCAN8\Plugins\emalware.171

c:\windows\BDOSCAN8\Plugins\emalware.172

c:\windows\BDOSCAN8\Plugins\emalware.173

c:\windows\BDOSCAN8\Plugins\emalware.174

c:\windows\BDOSCAN8\Plugins\emalware.175

c:\windows\BDOSCAN8\Plugins\emalware.176

c:\windows\BDOSCAN8\Plugins\emalware.177

c:\windows\BDOSCAN8\Plugins\emalware.178

c:\windows\BDOSCAN8\Plugins\emalware.179

c:\windows\BDOSCAN8\Plugins\emalware.180

c:\windows\BDOSCAN8\Plugins\emalware.181

c:\windows\BDOSCAN8\Plugins\emalware.182

c:\windows\BDOSCAN8\Plugins\emalware.183

c:\windows\BDOSCAN8\Plugins\emalware.184

c:\windows\BDOSCAN8\Plugins\emalware.185

c:\windows\BDOSCAN8\Plugins\emalware.186

c:\windows\BDOSCAN8\Plugins\emalware.187

c:\windows\BDOSCAN8\Plugins\emalware.188

c:\windows\BDOSCAN8\Plugins\emalware.189

c:\windows\BDOSCAN8\Plugins\emalware.190

c:\windows\BDOSCAN8\Plugins\emalware.191

c:\windows\BDOSCAN8\Plugins\emalware.192

c:\windows\BDOSCAN8\Plugins\emalware.193

c:\windows\BDOSCAN8\Plugins\emalware.194

c:\windows\BDOSCAN8\Plugins\emalware.195

c:\windows\BDOSCAN8\Plugins\emalware.196

c:\windows\BDOSCAN8\Plugins\emalware.197

c:\windows\BDOSCAN8\Plugins\emalware.198

c:\windows\BDOSCAN8\Plugins\emalware.199

c:\windows\BDOSCAN8\Plugins\emalware.200

c:\windows\BDOSCAN8\Plugins\emalware.201

c:\windows\BDOSCAN8\Plugins\emalware.202

c:\windows\BDOSCAN8\Plugins\emalware.203

c:\windows\BDOSCAN8\Plugins\emalware.204

c:\windows\BDOSCAN8\Plugins\emalware.205

c:\windows\BDOSCAN8\Plugins\emalware.206

c:\windows\BDOSCAN8\Plugins\emalware.207

c:\windows\BDOSCAN8\Plugins\emalware.208

c:\windows\BDOSCAN8\Plugins\emalware.209

c:\windows\BDOSCAN8\Plugins\emalware.210

c:\windows\BDOSCAN8\Plugins\emalware.211

c:\windows\BDOSCAN8\Plugins\emalware.212

c:\windows\BDOSCAN8\Plugins\emalware.213

c:\windows\BDOSCAN8\Plugins\emalware.214

c:\windows\BDOSCAN8\Plugins\emalware.215

c:\windows\BDOSCAN8\Plugins\emalware.216

c:\windows\BDOSCAN8\Plugins\emalware.217

c:\windows\BDOSCAN8\Plugins\emalware.218

c:\windows\BDOSCAN8\Plugins\emalware.219

c:\windows\BDOSCAN8\Plugins\emalware.220

c:\windows\BDOSCAN8\Plugins\emalware.221

c:\windows\BDOSCAN8\Plugins\emalware.222

c:\windows\BDOSCAN8\Plugins\emalware.223

c:\windows\BDOSCAN8\Plugins\emalware.224

c:\windows\BDOSCAN8\Plugins\emalware.225

c:\windows\BDOSCAN8\Plugins\emalware.226

c:\windows\BDOSCAN8\Plugins\emalware.227

c:\windows\BDOSCAN8\Plugins\emalware.228

c:\windows\BDOSCAN8\Plugins\emalware.229

c:\windows\BDOSCAN8\Plugins\emalware.230

c:\windows\BDOSCAN8\Plugins\emalware.231

c:\windows\BDOSCAN8\Plugins\emalware.232

c:\windows\BDOSCAN8\Plugins\emalware.233

c:\windows\BDOSCAN8\Plugins\emalware.234

c:\windows\BDOSCAN8\Plugins\emalware.235

c:\windows\BDOSCAN8\Plugins\emalware.236

c:\windows\BDOSCAN8\Plugins\emalware.237

c:\windows\BDOSCAN8\Plugins\emalware.238

c:\windows\BDOSCAN8\Plugins\emalware.239

c:\windows\BDOSCAN8\Plugins\emalware.240

c:\windows\BDOSCAN8\Plugins\emalware.241

c:\windows\BDOSCAN8\Plugins\emalware.242

c:\windows\BDOSCAN8\Plugins\emalware.243

c:\windows\BDOSCAN8\Plugins\emalware.244

c:\windows\BDOSCAN8\Plugins\emalware.245

c:\windows\BDOSCAN8\Plugins\emalware.246

c:\windows\BDOSCAN8\Plugins\emalware.247

c:\windows\BDOSCAN8\Plugins\emalware.248

c:\windows\BDOSCAN8\Plugins\emalware.249

c:\windows\BDOSCAN8\Plugins\emalware.250

c:\windows\BDOSCAN8\Plugins\emalware.251

c:\windows\BDOSCAN8\Plugins\emalware.252

c:\windows\BDOSCAN8\Plugins\emalware.253

c:\windows\BDOSCAN8\Plugins\emalware.254

c:\windows\BDOSCAN8\Plugins\emalware.255

c:\windows\BDOSCAN8\Plugins\emalware.256

c:\windows\BDOSCAN8\Plugins\emalware.257

c:\windows\BDOSCAN8\Plugins\emalware.258

c:\windows\BDOSCAN8\Plugins\emalware.259

c:\windows\BDOSCAN8\Plugins\emalware.260

c:\windows\BDOSCAN8\Plugins\emalware.261

c:\windows\BDOSCAN8\Plugins\emalware.262

c:\windows\BDOSCAN8\Plugins\emalware.263

c:\windows\BDOSCAN8\Plugins\emalware.264

c:\windows\BDOSCAN8\Plugins\emalware.265

c:\windows\BDOSCAN8\Plugins\emalware.266

c:\windows\BDOSCAN8\Plugins\emalware.267

c:\windows\BDOSCAN8\Plugins\emalware.268

c:\windows\BDOSCAN8\Plugins\emalware.269

c:\windows\BDOSCAN8\Plugins\emalware.270

c:\windows\BDOSCAN8\Plugins\emalware.271

c:\windows\BDOSCAN8\Plugins\emalware.272

c:\windows\BDOSCAN8\Plugins\emalware.273

c:\windows\BDOSCAN8\Plugins\emalware.274

c:\windows\BDOSCAN8\Plugins\emalware.275

c:\windows\BDOSCAN8\Plugins\emalware.276

c:\windows\BDOSCAN8\Plugins\emalware.277

c:\windows\BDOSCAN8\Plugins\emalware.278

c:\windows\BDOSCAN8\Plugins\emalware.279

c:\windows\BDOSCAN8\Plugins\emalware.280

c:\windows\BDOSCAN8\Plugins\emalware.281

c:\windows\BDOSCAN8\Plugins\emalware.282

c:\windows\BDOSCAN8\Plugins\emalware.283

c:\windows\BDOSCAN8\Plugins\emalware.284

c:\windows\BDOSCAN8\Plugins\emalware.285

c:\windows\BDOSCAN8\Plugins\emalware.286

c:\windows\BDOSCAN8\Plugins\emalware.287

c:\windows\BDOSCAN8\Plugins\emalware.288

c:\windows\BDOSCAN8\Plugins\emalware.289

c:\windows\BDOSCAN8\Plugins\emalware.290

c:\windows\BDOSCAN8\Plugins\emalware.291

c:\windows\BDOSCAN8\Plugins\emalware.292

c:\windows\BDOSCAN8\Plugins\emalware.293

c:\windows\BDOSCAN8\Plugins\emalware.294

c:\windows\BDOSCAN8\Plugins\emalware.295

c:\windows\BDOSCAN8\Plugins\emalware.296

c:\windows\BDOSCAN8\Plugins\emalware.297

c:\windows\BDOSCAN8\Plugins\emalware.298

c:\windows\BDOSCAN8\Plugins\emalware.299

c:\windows\BDOSCAN8\Plugins\emalware.300

c:\windows\BDOSCAN8\Plugins\emalware.301

c:\windows\BDOSCAN8\Plugins\emalware.302

c:\windows\BDOSCAN8\Plugins\emalware.303

c:\windows\BDOSCAN8\Plugins\emalware.304

c:\windows\BDOSCAN8\Plugins\emalware.305

c:\windows\BDOSCAN8\Plugins\emalware.306

c:\windows\BDOSCAN8\Plugins\emalware.307

c:\windows\BDOSCAN8\Plugins\emalware.308

c:\windows\BDOSCAN8\Plugins\emalware.309

c:\windows\BDOSCAN8\Plugins\emalware.310

c:\windows\BDOSCAN8\Plugins\emalware.311

c:\windows\BDOSCAN8\Plugins\emalware.312

c:\windows\BDOSCAN8\Plugins\emalware.313

c:\windows\BDOSCAN8\Plugins\emalware.314

c:\windows\BDOSCAN8\Plugins\emalware.315

c:\windows\BDOSCAN8\Plugins\emalware.316

c:\windows\BDOSCAN8\Plugins\emalware.317

c:\windows\BDOSCAN8\Plugins\emalware.318

c:\windows\BDOSCAN8\Plugins\emalware.319

c:\windows\BDOSCAN8\Plugins\emalware.320

c:\windows\BDOSCAN8\Plugins\emalware.321

c:\windows\BDOSCAN8\Plugins\emalware.322

c:\windows\BDOSCAN8\Plugins\emalware.323

c:\windows\BDOSCAN8\Plugins\emalware.324

c:\windows\BDOSCAN8\Plugins\emalware.325

c:\windows\BDOSCAN8\Plugins\emalware.326

c:\windows\BDOSCAN8\Plugins\emalware.327

c:\windows\BDOSCAN8\Plugins\emalware.328

c:\windows\BDOSCAN8\Plugins\emalware.329

c:\windows\BDOSCAN8\Plugins\emalware.330

c:\windows\BDOSCAN8\Plugins\emalware.331

c:\windows\BDOSCAN8\Plugins\emalware.332

c:\windows\BDOSCAN8\Plugins\emalware.333

c:\windows\BDOSCAN8\Plugins\emalware.334

c:\windows\BDOSCAN8\Plugins\emalware.335

c:\windows\BDOSCAN8\Plugins\emalware.336

c:\windows\BDOSCAN8\Plugins\emalware.337

c:\windows\BDOSCAN8\Plugins\emalware.338

c:\windows\BDOSCAN8\Plugins\emalware.339

c:\windows\BDOSCAN8\Plugins\emalware.340

c:\windows\BDOSCAN8\Plugins\emalware.341

c:\windows\BDOSCAN8\Plugins\emalware.342

c:\windows\BDOSCAN8\Plugins\emalware.343

c:\windows\BDOSCAN8\Plugins\emalware.344

c:\windows\BDOSCAN8\Plugins\emalware.345

c:\windows\BDOSCAN8\Plugins\emalware.346

c:\windows\BDOSCAN8\Plugins\emalware.347

c:\windows\BDOSCAN8\Plugins\emalware.348

c:\windows\BDOSCAN8\Plugins\emalware.349

c:\windows\BDOSCAN8\Plugins\emalware.350

c:\windows\BDOSCAN8\Plugins\emalware.351

c:\windows\BDOSCAN8\Plugins\emalware.352

c:\windows\BDOSCAN8\Plugins\emalware.353

c:\windows\BDOSCAN8\Plugins\emalware.354

c:\windows\BDOSCAN8\Plugins\emalware.355

c:\windows\BDOSCAN8\Plugins\emalware.356

c:\windows\BDOSCAN8\Plugins\emalware.357

c:\windows\BDOSCAN8\Plugins\emalware.358

c:\windows\BDOSCAN8\Plugins\emalware.359

c:\windows\BDOSCAN8\Plugins\emalware.360

c:\windows\BDOSCAN8\Plugins\emalware.361

c:\windows\BDOSCAN8\Plugins\emalware.362

c:\windows\BDOSCAN8\Plugins\emalware.363

c:\windows\BDOSCAN8\Plugins\emalware.364

c:\windows\BDOSCAN8\Plugins\emalware.365

c:\windows\BDOSCAN8\Plugins\emalware.366

c:\windows\BDOSCAN8\Plugins\emalware.367

c:\windows\BDOSCAN8\Plugins\emalware.368

c:\windows\BDOSCAN8\Plugins\emalware.369

c:\windows\BDOSCAN8\Plugins\emalware.c00

c:\windows\BDOSCAN8\Plugins\emalware.c01

c:\windows\BDOSCAN8\Plugins\emalware.c02

c:\windows\BDOSCAN8\Plugins\emalware.c03

c:\windows\BDOSCAN8\Plugins\emalware.c04

c:\windows\BDOSCAN8\Plugins\emalware.c05

c:\windows\BDOSCAN8\Plugins\emalware.c06

c:\windows\BDOSCAN8\Plugins\emalware.c07

c:\windows\BDOSCAN8\Plugins\emalware.c08

c:\windows\BDOSCAN8\Plugins\emalware.c09

c:\windows\BDOSCAN8\Plugins\emalware.c10

c:\windows\BDOSCAN8\Plugins\emalware.c11

c:\windows\BDOSCAN8\Plugins\emalware.cvd

c:\windows\BDOSCAN8\Plugins\emalware.i01

c:\windows\BDOSCAN8\Plugins\emalware.i02

c:\windows\BDOSCAN8\Plugins\emalware.i03

c:\windows\BDOSCAN8\Plugins\emalware.i04

c:\windows\BDOSCAN8\Plugins\emalware.i05

c:\windows\BDOSCAN8\Plugins\emalware.i06

c:\windows\BDOSCAN8\Plugins\emalware.i07

c:\windows\BDOSCAN8\Plugins\emalware.i08

c:\windows\BDOSCAN8\Plugins\emalware.i09

c:\windows\BDOSCAN8\Plugins\emalware.i10

c:\windows\BDOSCAN8\Plugins\emalware.i11

c:\windows\BDOSCAN8\Plugins\emalware.i12

c:\windows\BDOSCAN8\Plugins\emalware.i13

c:\windows\BDOSCAN8\Plugins\emalware.i14

c:\windows\BDOSCAN8\Plugins\emalware.i15

c:\windows\BDOSCAN8\Plugins\emalware.i16

c:\windows\BDOSCAN8\Plugins\emalware.i17

c:\windows\BDOSCAN8\Plugins\emalware.i18

c:\windows\BDOSCAN8\Plugins\emalware.i19

c:\windows\BDOSCAN8\Plugins\emalware.i20

c:\windows\BDOSCAN8\Plugins\emalware.i21

c:\windows\BDOSCAN8\Plugins\emalware.i22

c:\windows\BDOSCAN8\Plugins\emalware.i23

c:\windows\BDOSCAN8\Plugins\emalware.i24

c:\windows\BDOSCAN8\Plugins\emalware.i25

c:\windows\BDOSCAN8\Plugins\emalware.i26

c:\windows\BDOSCAN8\Plugins\emalware.i27

c:\windows\BDOSCAN8\Plugins\emalware.i28

c:\windows\BDOSCAN8\Plugins\emalware.i29

c:\windows\BDOSCAN8\Plugins\emalware.i30

c:\windows\BDOSCAN8\Plugins\emalware.i31

c:\windows\BDOSCAN8\Plugins\emalware.i32

c:\windows\BDOSCAN8\Plugins\emalware.i33

c:\windows\BDOSCAN8\Plugins\emalware.i34

c:\windows\BDOSCAN8\Plugins\emalware.i35

c:\windows\BDOSCAN8\Plugins\emalware.i36

c:\windows\BDOSCAN8\Plugins\emalware.i37

c:\windows\BDOSCAN8\Plugins\emalware.i38

c:\windows\BDOSCAN8\Plugins\emalware.i39

c:\windows\BDOSCAN8\Plugins\emalware.i40

c:\windows\BDOSCAN8\Plugins\emalware.i41

c:\windows\BDOSCAN8\Plugins\emalware.i42

c:\windows\BDOSCAN8\Plugins\emalware.i43

c:\windows\BDOSCAN8\Plugins\emalware.i44

c:\windows\BDOSCAN8\Plugins\emalware.i45

c:\windows\BDOSCAN8\Plugins\emalware.i46

c:\windows\BDOSCAN8\Plugins\emalware.i47

c:\windows\BDOSCAN8\Plugins\emalware.i48

c:\windows\BDOSCAN8\Plugins\emalware.i49

c:\windows\BDOSCAN8\Plugins\emalware.i50

c:\windows\BDOSCAN8\Plugins\emalware.i51

c:\windows\BDOSCAN8\Plugins\emalware.i52

c:\windows\BDOSCAN8\Plugins\emalware.i53

c:\windows\BDOSCAN8\Plugins\emalware.i54

c:\windows\BDOSCAN8\Plugins\emalware.i55

c:\windows\BDOSCAN8\Plugins\emalware.i56

c:\windows\BDOSCAN8\Plugins\emalware.i57

c:\windows\BDOSCAN8\Plugins\emalware.i58

c:\windows\BDOSCAN8\Plugins\emalware.i59

c:\windows\BDOSCAN8\Plugins\emalware.i60

c:\windows\BDOSCAN8\Plugins\emalware.i61

c:\windows\BDOSCAN8\Plugins\emalware.i62

c:\windows\BDOSCAN8\Plugins\emalware.i63

c:\windows\BDOSCAN8\Plugins\emalware.i64

c:\windows\BDOSCAN8\Plugins\emalware.i65

c:\windows\BDOSCAN8\Plugins\emalware.i66

c:\windows\BDOSCAN8\Plugins\emalware.i67

c:\windows\BDOSCAN8\Plugins\emalware.i68

c:\windows\BDOSCAN8\Plugins\emalware.i69

c:\windows\BDOSCAN8\Plugins\emalware.i70

c:\windows\BDOSCAN8\Plugins\emalware.i71

c:\windows\BDOSCAN8\Plugins\emalware.i72

c:\windows\BDOSCAN8\Plugins\emalware.i73

c:\windows\BDOSCAN8\Plugins\emalware.i74

c:\windows\BDOSCAN8\Plugins\emalware.i75

c:\windows\BDOSCAN8\Plugins\emalware.i76

c:\windows\BDOSCAN8\Plugins\emalware.i77

c:\windows\BDOSCAN8\Plugins\emalware.i78

c:\windows\BDOSCAN8\Plugins\emalware.i79

c:\windows\BDOSCAN8\Plugins\emalware.i80

c:\windows\BDOSCAN8\Plugins\emalware.i81

c:\windows\BDOSCAN8\Plugins\emalware.i82

c:\windows\BDOSCAN8\Plugins\emalware.i83

c:\windows\BDOSCAN8\Plugins\emalware.i84

c:\windows\BDOSCAN8\Plugins\emalware.i85

c:\windows\BDOSCAN8\Plugins\emalware.i86

c:\windows\BDOSCAN8\Plugins\emalware.i87

c:\windows\BDOSCAN8\Plugins\emalware.i88

c:\windows\BDOSCAN8\Plugins\emalware.i89

c:\windows\BDOSCAN8\Plugins\emalware.i90

c:\windows\BDOSCAN8\Plugins\emalware.i91

c:\windows\BDOSCAN8\Plugins\emalware.i92

c:\windows\BDOSCAN8\Plugins\emalware.i93

c:\windows\BDOSCAN8\Plugins\emalware.i94

c:\windows\BDOSCAN8\Plugins\emalware.i95

c:\windows\BDOSCAN8\Plugins\emalware.i96

c:\windows\BDOSCAN8\Plugins\emalware.i97

c:\windows\BDOSCAN8\Plugins\emalware.i98

c:\windows\BDOSCAN8\Plugins\emalware.i99

c:\windows\BDOSCAN8\Plugins\emalware.ivd

c:\windows\BDOSCAN8\Plugins\emalware.xmd

c:\windows\BDOSCAN8\Plugins\epoc.xmd

c:\windows\BDOSCAN8\Plugins\gvmscripts.cvd

c:\windows\BDOSCAN8\Plugins\gzip.xmd

c:\windows\BDOSCAN8\Plugins\ha.xmd

c:\windows\BDOSCAN8\Plugins\hlp.xmd

c:\windows\BDOSCAN8\Plugins\hpe.cvd

c:\windows\BDOSCAN8\Plugins\hpe.xmd

c:\windows\BDOSCAN8\Plugins\hqx.xmd

c:\windows\BDOSCAN8\Plugins\html.xmd

c:\windows\BDOSCAN8\Plugins\imp.xmd

c:\windows\BDOSCAN8\Plugins\inno.xmd

c:\windows\BDOSCAN8\Plugins\instyler.xmd

c:\windows\BDOSCAN8\Plugins\iso.xmd

c:\windows\BDOSCAN8\Plugins\java.cvd

c:\windows\BDOSCAN8\Plugins\java.xmd

c:\windows\BDOSCAN8\Plugins\jpeg.xmd

c:\windows\BDOSCAN8\Plugins\lha.xmd

c:\windows\BDOSCAN8\Plugins\lnk.xmd

c:\windows\BDOSCAN8\Plugins\mbox.xmd

c:\windows\BDOSCAN8\Plugins\mbx.xmd

c:\windows\BDOSCAN8\Plugins\mdx.xmd

c:\windows\BDOSCAN8\Plugins\mdx_97.cvd

c:\windows\BDOSCAN8\Plugins\mdx_97.ivd

c:\windows\BDOSCAN8\Plugins\mdx_w95.cvd

c:\windows\BDOSCAN8\Plugins\mdx_x95.cvd

c:\windows\BDOSCAN8\Plugins\mdx_xf.cvd

c:\windows\BDOSCAN8\Plugins\mime.xmd

c:\windows\BDOSCAN8\Plugins\mobmalware.cvd

c:\windows\BDOSCAN8\Plugins\mobmalware.xmd

c:\windows\BDOSCAN8\Plugins\mso.xmd

c:\windows\BDOSCAN8\Plugins\na.cvd

c:\windows\BDOSCAN8\Plugins\na.xmd

c:\windows\BDOSCAN8\Plugins\nelf.cvd

c:\windows\BDOSCAN8\Plugins\nelf.xmd

c:\windows\BDOSCAN8\Plugins\nsis.xmd

c:\windows\BDOSCAN8\Plugins\objd.xmd

c:\windows\BDOSCAN8\Plugins\orice.rvd

c:\windows\BDOSCAN8\Plugins\pdf.xmd

c:\windows\BDOSCAN8\Plugins\proc.xmd

c:\windows\BDOSCAN8\Plugins\pst.xmd

c:\windows\BDOSCAN8\Plugins\rar.xmd

c:\windows\BDOSCAN8\Plugins\regarch.cvd

c:\windows\BDOSCAN8\Plugins\regarch.xmd

c:\windows\BDOSCAN8\Plugins\regscan.cvd

c:\windows\BDOSCAN8\Plugins\regscan.xmd

c:\windows\BDOSCAN8\Plugins\rpm.xmd

c:\windows\BDOSCAN8\Plugins\rtf.xmd

c:\windows\BDOSCAN8\Plugins\rup.cvd

c:\windows\BDOSCAN8\Plugins\rup.xmd

c:\windows\BDOSCAN8\Plugins\sdx.cvd

c:\windows\BDOSCAN8\Plugins\sdx.ivd

c:\windows\BDOSCAN8\Plugins\sdx.xmd

c:\windows\BDOSCAN8\Plugins\sfx.xmd

c:\windows\BDOSCAN8\Plugins\swf.xmd

c:\windows\BDOSCAN8\Plugins\tar.xmd

c:\windows\BDOSCAN8\Plugins\td0.xmd

c:\windows\BDOSCAN8\Plugins\thebat.xmd

c:\windows\BDOSCAN8\Plugins\tnef.xmd

c:\windows\BDOSCAN8\Plugins\uif.xmd

c:\windows\BDOSCAN8\Plugins\unpack.cvd

c:\windows\BDOSCAN8\Plugins\unpack.ivd

c:\windows\BDOSCAN8\Plugins\unpack.xmd

c:\windows\BDOSCAN8\Plugins\update.txt

c:\windows\BDOSCAN8\Plugins\uudecode.xmd

c:\windows\BDOSCAN8\Plugins\ve.cvd

c:\windows\BDOSCAN8\Plugins\ve.ivd

c:\windows\BDOSCAN8\Plugins\ve.xmd

c:\windows\BDOSCAN8\Plugins\vedata.cvd

c:\windows\BDOSCAN8\Plugins\viza.xmd

c:\windows\BDOSCAN8\Plugins\wise.xmd

c:\windows\BDOSCAN8\Plugins\xar.xmd

c:\windows\BDOSCAN8\Plugins\xcookies.xmd

c:\windows\BDOSCAN8\Plugins\xishield.xmd

c:\windows\BDOSCAN8\Plugins\xlmrd.cvd

c:\windows\BDOSCAN8\Plugins\xlmrd.ivd

c:\windows\BDOSCAN8\Plugins\z.xmd

c:\windows\BDOSCAN8\Plugins\zip.xmd

c:\windows\BDOSCAN8\Plugins\zoo.xmd

c:\windows\BDOSCAN8\rtvr.html

c:\windows\BDOSCAN8\rtvr2.html

c:\windows\BDOSCAN8\scanoptions.tsi

c:\windows\BDOSCAN8\scanoptions.tsk

c:\windows\BDOSCAN8\scanrep.html

c:\windows\BDOSCAN8\scanres.html

c:\windows\BDOSCAN8\scanres2.html

c:\windows\BDOSCAN8\versions.dat.E1C5D885B85ECDBC2003620A013AC736

c:\windows\BDOSCAN8\versions.dat.E658AEFE91DB8F659AA487CA0F96AD22

.

((((((((((((((((((((((((( Files Created from 2009-10-02 to 2009-11-02 )))))))))))))))))))))))))))))))

.

2009-11-02 21:35 . 2009-11-02 21:35 -------- d-----w- c:\program files\SystemRequirementsLab

2009-11-02 21:35 . 2009-11-02 21:35 -------- d-----w- c:\documents and settings\gichu\Application Data\SystemRequirementsLab