Премигващ дисплей, мърдаща се мишка, процеси...

14 февруари 201016 г.

Реших да сканирам лаптопа на сестра ми поради причините:

1. Проблема с премигването на дисплея --> http://www.kaldata.com/forums/index.php?showtopic=149193 ;

2. От време на време мишката се мърда сама и доста често отива в горния десен ъгъл, на дисплея;

3. Има доста процеси;

4. И някой от тях са непознати;

5. Лаптопа не е сканиран от почти година и половина, понеже сестра ми не разбира от такива неща;

6. Профилактика.

Malwarebytes' Anti-Malware

Malwarebytes' Anti-Malware 1.44

Версия на базата от данни: 3739

Windows 5.1.2600 Service Pack 2

Internet Explorer 8.0.6001.18702

14.02.2010 19:43:27

mbam-log-2010-02-14 (19-43-27).txt

Тип сканиране: Пълно сканиране (C:\|)

Сканирани обекти: 190953

Изминало време: 30 minute(s), 51 second(s)

Заразени процеси в паметта: 0

Заразени модули в паметта: 0

Заразени ключове в регистратурата: 6

Заразени стойности в регистратурата: 10

Заразени информационни обекти в регистратурата: 0

Заразени папки: 2

Заразени файлове: 13

Заразени процеси в паметта:

(Не бяха открити заплахи)

Заразени модули в паметта:

(Не бяха открити заплахи)

Заразени ключове в регистратурата:

HKEY_CLASSES_ROOT\lpvideo.lpvideoplugin.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\lpvideo.lpvideoplugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\AppID\LPVideo.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\lpvideo.xmldomdocumenteventssink (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\LPVideoPlugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\lpvideo.xmldomdocumenteventssink.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Заразени стойности в регистратурата:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\yur3544.exe (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\yur1d92.exe (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\yur1c27.exe (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\yur3c18.exe (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\yur1d.exe (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\yur1d92.exe (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\yur1d6f.exe (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\yur1d60.exe (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\yur1d60.exe (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\yur78f.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Заразени информационни обекти в регистратурата:

(Не бяха открити заплахи)

Заразени папки:

C:\Program Files\LPVideoPlugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Program Files\PCHealthCenter (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Заразени файлове:

C:\Program Files\PCHealthCenter\3.gif (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Program Files\PCHealthCenter\2.ico (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Program Files\PCHealthCenter\sc.html (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Program Files\PCHealthCenter\foo.txt (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Program Files\PCHealthCenter\0.gif (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Program Files\PCHealthCenter\1.ico (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Program Files\PCHealthCenter\1.gif (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Program Files\PCHealthCenter\2.gif (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Program Files\LPVideoPlugin\5378.exe (Trojan.Dropper) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\1.ico (Malware.Trace) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\2.ico (Malware.Trace) -> Quarantined and deleted successfully.

C:\Documents and Settings\user\My Documents\ПепЗз ;]]\Други Неща ;]\rozi.EXE (Backdoor.Hupigon) -> Quarantined and deleted successfully.

C:\WINDOWS\security\lsass.exe (Backdoor.Agent) -> Quarantined and deleted successfully.

HijackThis

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 22:06:02, on 14.02.2010

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\WLTRYSVC.EXE

C:\WINDOWS\System32\bcmwltry.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe

C:\Program Files\Eset\nod32kui.exe

C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

C:\WINDOWS\system32\WLTRAY.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Program Files\DAEMON Tools\daemon.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\USB Disk Win98 Driver\Res.EXE

C:\WINDOWS\system32\igfxsrvc.exe

C:\Program Files\Datakey\Crypt32\DkMonitor.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\BitComet\BitComet.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Documents and Settings\user\My Documents\ПепЗз ;]]\Други Неща ;]\Christmas.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\WINDOWS\system32\agrsmsvc.exe

C:\MICRO\IMANAGER.EXE

C:\WINDOWS\system32\ntvdm.exe

C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

C:\WINDOWS\system32\ntvdm.exe

C:\WINDOWS\system32\ftusbsrv.exe

C:\WINDOWS\system32\ftusbsrvc.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

C:\Program Files\Eset\nod32krn.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\dkcktkn.exe

C:\WINDOWS\system32\CNAB4RPK.EXE

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\NOTEPAD.EXE

C:\Documents and Settings\user\Desktop\Kaldata\Kaldata.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

O2 - BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (file missing)

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"

O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE

O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"

O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 0

O4 - HKLM\..\Run: [sigmatelSysTrayApp] stsystra.exe

O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [uSB Storage Toolbox] C:\Program Files\USB Disk Win98 Driver\Res.EXE

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [DkAutoReg.exe] C:\Program Files\Datakey\Crypt32\DkAutoReg.exe

O4 - HKLM\..\Run: [DkMonitor.exe] C:\Program Files\Datakey\Crypt32\DkMonitor.exe

O4 - HKLM\..\Run: [DkStartup] C:\Program Files\Datakey\Crypt32\DkStartup.exe

O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [bitComet] "C:\Program Files\BitComet\BitComet.exe" /tray

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [ChristmasTree] C:\Documents and Settings\user\My Documents\ПепЗз ;]]\Други Неща ;]\Christmas.exe

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: Microinvest Internet Мениджър.lnk = C:\MICRO\IMANAGER.EXE

O4 - Startup: Microinvest Recover.lnk = C:\MICRO\RECOVER.EXE

O4 - Startup: Microinvest Архиватор.lnk = C:\MICRO\ARCHI.EXE

O4 - Startup: Microinvest Мениджър.lnk = C:\MICRO\MST_UTIL.EXE

O4 - Global Startup: BlueSoleil.lnk = ?

O4 - Global Startup: Bluetooth.lnk = ?

O4 - Global Startup: BTTray.lnk = ?

O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm

O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm

O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll

O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Преведи - {60237576-b24c-4ba9-9740-c9f3ec9db557} - C:\PROGRA~1\SkyCode\WEBTRA~1\wt2ie.dll

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1191510137777

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1191510084730

O16 - DPF: {A996E48C-D3DC-4244-89F7-AFA33EC60679} (Settings Class) - https://ebb.ubb.bg/CAPICOM/capicom.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

O23 - Service: Datakey's Log Service (DkLogger) - Datakey, Inc. - C:\WINDOWS\System32\DkLog.exe

O23 - Service: Datakey's Token Service (DkTknSrv) - Datakey, Inc. - C:\WINDOWS\System32\dkcktkn.exe

O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe

O23 - Service: USB over Network (Server) service (ftusbsrv) - FabulaTech - C:\WINDOWS\system32\ftusbsrv.exe

O23 - Service: USB over Network (Client) service (ftusbsrvc) - FabulaTech - C:\WINDOWS\system32\ftusbsrvc.exe

O23 - Service: Услуга Google Update (gupdate1c9e38d3332b5a8) (gupdate1c9e38d3332b5a8) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe

O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\WINDOWS\system32\STacSV.exe

O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

O24 - Desktop Component 0: (no name) - http://img.######/bitbucket/pnd.2007.dvdrip-scr1.jpg

--

End of file - 11795 bytes

NOD32

Scan performed at: 14.02.2010 20:07:53

Scanning Log

NOD32 version 4865 (20100214) NT

Operating memory - is OK

Date: 14.2.2010 Time: 20:09:01

Anti-Stealth technology is enabled.

Scanned disks, folders and files: C:

C:\hiberfil.sys - error opening (File locked) [4]

C:\pagefile.sys - error opening (File locked) [4]

C:\x - Win32/Adware.Antivirus2008 application

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterAntiVirusDisableNotify.zip »ZIP »sbRecovery.reg - error - password-protected file

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterAntiVirusDisableNotify.zip »ZIP »sbRecovery.ini - error - password-protected file

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterFirewallDisableNotify.zip »ZIP »sbRecovery.reg - error - password-protected file

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterFirewallDisableNotify.zip »ZIP »sbRecovery.ini - error - password-protected file

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterUpdateDisableNotify.zip »ZIP »sbRecovery.reg - error - password-protected file

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterUpdateDisableNotify.zip »ZIP »sbRecovery.ini - error - password-protected file

C:\Documents and Settings\LocalService\NTUSER.DAT - error opening (File locked) [4]

C:\Documents and Settings\LocalService\ntuser.dat.LOG - error opening (File locked) [4]

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening (File locked) [4]

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening (File locked) [4]

C:\Documents and Settings\NetworkService\NTUSER.DAT - error opening (File locked) [4]

C:\Documents and Settings\NetworkService\ntuser.dat.LOG - error opening (File locked) [4]

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening (File locked) [4]

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening (File locked) [4]

C:\Documents and Settings\user\NTUSER.DAT - error opening (File locked) [4]

C:\Documents and Settings\user\ntuser.dat.LOG - error opening (File locked) [4]

C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\rtp2tj39.default\parent.lock - error opening (File locked) [4]

C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\CardSpace\CardSpace.db - error opening (Access denied) [4]

C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\CardSpace\CardSpace.db.shadow - error opening (Access denied) [4]

C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\CardSpace\CardSpaceSP2.db - error opening (Access denied) [4]

C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\CardSpace\CardSpaceSP2.db.shadow - error opening (Access denied) [4]

C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening (File locked) [4]

C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening (File locked) [4]

C:\Documents and Settings\user\Local Settings\Temp\RarSFX0\OFFICE.000 »ZIP »ARCHI.EXE - archive damaged

C:\Documents and Settings\user\Local Settings\Temp\RarSFX1\OFFICE.000 »ZIP »ARCHI.EXE - archive damaged

C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\05RMX7GL\driveragent[1].cab »CAB »driveragent.ocx - archive damaged - the file could not be extracted.

C:\Downloads\New Folder\USB\m_ofs200.exe »RAR »OFFICE.000 »ZIP »ARCHI.EXE - archive damaged

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00001.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00002.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00003.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00004.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00005.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00006.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00007.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00008.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00009.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00010.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00011.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00012.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00013.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00014.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00015.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00016.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00017.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00018.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00019.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00020.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00021.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00022.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00023.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00024.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00025.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00026.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00027.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00028.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00029.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00030.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00031.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00032.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00033.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00034.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00035.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00036.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00037.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00038.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00039.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00040.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00041.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00042.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00043.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00044.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00045.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00046.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00047.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00048.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00049.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00050.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00051.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00052.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00053.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00054.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00055.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00056.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/REC00057.MDB - error - password-protected file

C:\MICRO\RECOVER.M00 »ZIP »MICRO/RECOVER.TXT - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00001.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00002.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00003.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00004.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00005.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00006.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00007.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00008.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00009.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00010.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00011.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00012.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00013.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00014.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00015.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00016.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00017.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00018.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00019.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00020.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00021.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00022.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00023.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00024.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00025.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00026.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00027.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00028.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00029.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00030.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00031.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00032.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00033.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00034.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00035.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00036.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00037.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00038.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00039.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00040.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00041.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00042.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00043.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00044.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00045.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00046.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00047.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00048.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00049.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00050.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00051.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00052.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00053.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00054.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00055.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00056.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/REC00057.MDB - error - password-protected file

C:\MICRO\RECOVER.M01 »ZIP »MICRO/RECOVER.TXT - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00001.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00002.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00003.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00004.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00005.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00006.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00007.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00008.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00009.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00010.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00011.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00012.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00013.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00014.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00015.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00016.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00017.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00018.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00019.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00020.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00021.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00022.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00023.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00024.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00025.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00026.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00027.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00028.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00029.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00030.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00031.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00032.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00033.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00034.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00035.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00036.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00037.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00038.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00039.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00040.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00041.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00042.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00043.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00044.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00045.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00046.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00047.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00048.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00049.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00050.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00051.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00052.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00053.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00054.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00055.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00056.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/REC00057.MDB - error - password-protected file

C:\MICRO\RECOVER.M02 »ZIP »MICRO/RECOVER.TXT - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00001.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00002.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00003.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00004.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00005.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00006.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00007.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00008.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00009.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00010.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00011.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00012.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00013.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00014.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00015.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00016.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00017.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00018.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00019.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00020.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00021.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00022.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00023.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00024.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00025.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00026.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00027.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00028.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00029.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00030.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00031.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00032.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00033.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00034.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00035.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00036.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00037.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00038.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00039.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00040.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00041.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00042.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00043.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00044.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00045.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00046.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00047.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00048.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00049.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00050.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00051.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00052.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00053.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00054.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00055.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00056.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/REC00057.MDB - error - password-protected file

C:\MICRO\RECOVER.M03 »ZIP »MICRO/RECOVER.TXT - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00001.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00002.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00003.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00004.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00005.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00006.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00007.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00008.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00009.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00010.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00011.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00012.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00013.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00014.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00015.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00016.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00017.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00018.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00019.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00020.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00021.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00022.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00023.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00024.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00025.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00026.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00027.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00028.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00029.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00030.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00031.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00032.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00033.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00034.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00035.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00036.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00037.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00038.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00039.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00040.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00041.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00042.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00043.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00044.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00045.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00046.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00047.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00048.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00049.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00050.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00051.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00052.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00053.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00054.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00055.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00056.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/REC00057.MDB - error - password-protected file

C:\MICRO\RECOVER.M04 »ZIP »MICRO/RECOVER.TXT - error - password-protected file

C:\Nina\Flashka\Folder\m_ofs200.exe »RAR »OFFICE.000 »ZIP »ARCHI.EXE - archive damaged

C:\Program Files\Scrapbook MAX! Trial\StarBurn_VideoCD.iso »ISO »AVSEQ01.DAT - archive damaged

C:\System Volume Information\MountPointManagerRemoteDatabase - error opening (Access denied) [4]

C:\WINDOWS\system32\config\default - error opening (File locked) [4]

C:\WINDOWS\system32\config\default.LOG - error opening (File locked) [4]

C:\WINDOWS\system32\config\SAM - error opening (File locked) [4]

C:\WINDOWS\system32\config\SAM.LOG - error opening (File locked) [4]

C:\WINDOWS\system32\config\SECURITY - error opening (File locked) [4]

C:\WINDOWS\system32\config\SECURITY.LOG - error opening (File locked) [4]

C:\WINDOWS\system32\config\software - error opening (File locked) [4]

C:\WINDOWS\system32\config\software.LOG - error opening (File locked) [4]

C:\WINDOWS\system32\config\system - error opening (File locked) [4]

C:\WINDOWS\system32\config\system.LOG - error opening (File locked) [4]

C:\WINDOWS\system32\drivers\sptd.sys - error opening (File locked) [4]

C:\WINDOWS\Temp\~RMS1D15.TMP - error opening (File locked) [4]

C:\WINDOWS\Temp\~RMS1D6F.TMP - error opening (File locked) [4]

C:\WINDOWS\Temp\~ZIP1E66.TMP »ZIP »MICRO/REC00001.MDB - error - password-protected file

C:\WINDOWS\Temp\~ZIP1E66.TMP »ZIP - archive damaged

C:\WINDOWS\Temp\~ZIP2A25.TMP »ZIP »MICRO/REC00001.MDB - error - password-protected file

C:\WINDOWS\Temp\~ZIP2A25.TMP »ZIP - archive damaged

Number of scanned files: 185631

Number of threats found: 1

Number of active threats: 1

Time of completion: 20:33:22 Total scanning time: 1461 sec (00:24:21)

Notes:

[4] File cannot be opened. It may be in use by another application or operating system.

Поразрових се малко в интернет и разбрах, че си имаме trojan.media-codec.l --> http://spyware.scanspyware.net/spyware-removal/trojan.media-codec.l.html?lang=bg .

Да не би да премигва от него?

14 февруари 201016 г.

Разумно,коректно и израз на уважение към хората отделящи от свободното си време за да помогнат с опита си е тези процедури по премахване на вируси и всякакви гадинки да са минати преди търсене на адекватна помощ.При срещане на проблем с премахването им -се споменава,ама година и половина да не е сканиран и хората,които се опитват да помагат-да гадаят,НЕ Е КОРЕКТНО.

1

15 февруари 201016 г.

Автор

Повтарям, лаптопа не е мой, а е на сестра ми и тя не разбира от такива неща. Когато веднъж се опитах да и го сканирам, тя ми вдигна скандал и поиска да седне на него, помолих я да изчака и тя изчака с 300 зора, и от тогава не съм и го сканирал, понеже тя е много скиптична към вирусите и вика: "аз нямам вируси" и не ми е позволявала да и го сканирам, а нали на сила хубост не става. Пък нали и без това по-старите вируси са по-лесни за намиране, от колкото някакъв нов, туко що излезнал. Един вирус независимо дали е в 1 компютър 3 години или 3 минути, ако програмата, с която се търси е добра, би трябвало да го намери, така си мисля поне де. Следвах инструкцийте в тази тема --> http://www.kaldata.com/forums/index.php?showtopic=132819 и не разбирам кое не е коректно. :cool:

1

15 февруари 201016 г.

Не са желателни безсъдържателните мнения!

http://www.kaldata.com/forums/index.php?app=forums&module=extras&section=boardrules

mihnev_sz

15 февруари 201016 г.

Автор

Аз не съм казал, че разбирам, а че разбирам повече от нея.

1

15 февруари 201016 г.

Leon 0 и invio, принципно уважавам мнението на другите, но пък мога да кажа едно "браво" за търпението на момчето, което е почнало тази тема. И не защото прави нещо, което ще е от полза на другите, а защото най-търпеливо изчаква да спрете да му пишете неща, от които нито той, нито пък другите имат какво да научат.

Много бързо забравяте, че и вие като него сте имали същите питания и за разлика от вас, той преди да напише темата е прегледал форума и е направил някой основни стъпки, които са посочили хората, които знаят как и могат да му помогнат. Забравихте, че също така на вас са ви помогнали хора, които нито за миг не са се направили на велики с заключения "некоректно" и "не разбираш". Сега, когато сте спокойни, че всичко ви е наред с машината правите някакви забележки, сякаш преди 4 мин сте решили проблема на някой друг и сега идва неговия ред. Ако можете да му помогнете, което ме съмнява му помогнете, ако не просто оставете някой, който разбира да го направи.

3

15 февруари 201016 г.

Един ъпдейтнат Касперски, би му свършил чудесна работа. В практиката ми NOD32 почти никога не е успявала да премахне проблема, без да убие нещо друго около него. От две години не съм я ползвал(имам предвид, не съм се сблъсквал с нея), но като гледам из форумите нещата около нея не са се променили. Не разбирам на кой му трябва антивирусна, която не премахна безболезнено проблема, а само вика "Има вирус! Има вирус!"?!

bennito, никога не съм питал тук за подобен проблем! И преди 10 години като питах, не съм се правил на разбирач.

15 февруари 201016 г.

Здравейте, SAKATAR. Тази зараза обикновено не идва сама, дърпа от нета разни други екстри. Добре ще е да бъдат почистени.

Като начало изтеглете DDS: от bleepingcomputer или от forospyware.

След изтегляне на файла го запишете (бутон Save -> Save as) DDS на вашия десктоп, снимка:

След като изтеглите DDS на десктопа, иконката на програмата би трябвало да изглежда така:

Прекратете временно работата на всички скрипт блокиращи приложения, ако има такива или разрешете изпълнението на dds.scr. След това стартирайте DDS с двоен клик на иконката, като потвърдите с Run.

След приключване на работата на DDS копирайте с Copy текста от двата файлови лога, които ще се появят в Notepad: DDS.txt и Attach.txt. После използвайте Paste и поставете двата лога в следващия си коментар по темата. Също така запазете двата файла (бутон Save -> Save as) на десктопа.

15 февруари 201016 г.

Автор

Здравейте, nologo.

Ето ги:

DDS.txt

Attach.txt

15 февруари 201016 г.

Хм, доста е занемарена софтуерната поддръжка на операционната система, програмата за сигурност и приложенията. Има доста излишни неща и наложителни обновявания, но за това по-късно. Една хардуерна диагностика на лаптопа в сервиз няма да е излишна, като гледах другата тема.

Ще е добре да пробваме още едно тулче. Следвайте инструкцията за работа с OTL:

Моля изтеглете OTL.exe и го запазете на десктопа.

Стартирайте файла с двукратен клик на мишката.

Направете следните настройки:

Под "Custom Scans/Fixes" с copy/paste въведете следната информация:

netsvcs
msconfig

safebootminimal

safebootnetwork

activex

drivers32

%SYSTEMDRIVE%\*.*

/md5start

eventlog.dll

scecli.dll

netlogon.dll

cngaudit.dll

sceclt.dll

ntelogon.dll

logevent.dll

iaStor.sys

nvstor.sys

atapi.sys

IdeChnDr.sys

viasraid.sys

AGP440.sys

vaxscsi.sys

nvatabus.sys

viamraid.sys

nvata.sys

nvgts.sys

iastorv.sys

ViPrt.sys

eNetHook.dll

ahcix86.sys

KR10N.sys

nvstor32.sys

ahcix86s.sys

nvrd32.sys

/md5stop

%systemroot%\*. /mp /s

%systemroot%\system32\*.dll /lockedfiles

%systemroot%\Tasks\*.job /lockedfiles

%PROGRAMFILES%\*.

%userprofile%\Desktop\*.*

%userprofile%\Desktop\*.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

Натиснете маркираният в синьо бутон: .

Като приключи проверката публикувайте двата лог файла - OTL.Txt и Extras.Txt. Ако логовете са големи, прикачете ги към следващия си коментар.

P.S. Тази вечер ще съм зает, така че е възможно да се включа в темата по-късно. Или утре.

16 февруари 201016 г.

Автор

Малко след като сканирах с DDS, премигването се оправи (може би само за сега).

P.S. Тази вечер ще съм зает, така че е възможно да се включа в темата по-късно. Или утре.

ОК, няма проблем.

Ето ги:

OTL.Txt

Extras.Txt

След като стартирах OTL, тази функция липсваше --> Include 64bit Scans -->

По време на сканирането с OTL, NOD-a показа следното съобщение:

Искам да допълня, че изтрих всички зарази, които Malwarebytes' Anti-Malware откри, но тази едната от NOD-a (C:\x), не съм, защото искам да се консултирам с някой какво да я правя.

Добре дошли!

Премигващ дисплей, мърдаща се мишка, процеси...

Featured Replies

Регистрирайте се или влезете в профила си за да коментирате

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)