2 проблема :(

24 ноември 201015 г.

1-ви проблем

Значи проблема ми е такъв че на всякъде ми се появяват папки със същото име на местоположението им, малко ми е трудно да го обясня затова вижте сами...

Публикувано изображение

в папка iliapo ми се появява папка iliapo която води до my document

Публикувано изображение

в папка animals ми се появява папка animals която също води до my documents

и последно

Публикувано изображение

2-ри проблем

През определено време от уеб браузъра на Google Chrome ми излиза едно съобщение което не знам какво значи, и не знам как да го премахна защото е много дразнещо

Публикувано изображение

Цитирай

24 ноември 201015 г.

Привет, iliapo.

Следвайте следната инструкция за работа с OTL:

Изтеглете OTL.exe или OTL.scr го запазете на десктопа.
Стартирайте файла с двукратен клик на мишката.
Натиснете маркираният в лилаво бутон: Quick Scan.
Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt.
Публикувайте или прикачете в следващия си коментар (погледнете опцията "прикачени файлове", когато публикувате мнение) логовете от OTL: OTL.Txt, Extras.Txt. Може да качите файловете нa skatafka.com и да дадете линк за изтегляне.

P.S. Другата тема от раздел Програми - Проблеми и Дискусии ще бъде затворена. Пишете в тази.

Редактирано 24 ноември 201015 г. от nologo (преглед на промените)

Цитирай

24 ноември 201015 г.

Автор

Ето ги двата файла;

-OTL.TXT

- EXTRAS.TXT

Редактирано 24 ноември 201015 г. от iliapo (преглед на промените)

Цитирай

24 ноември 201015 г.

Ето какво следва:

Стартирайте пак OTL.exe и с Copy/ Paste под колонката Custom Scans/Fixes въведете скриптовия текст от текстовото поле по-долу, като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта!

:OTL
PRC - [2009.07.27 09:12:12 | 000,042,617 | ---- | M] () -- C:\Users\iliapo\AppData\Local\winlogon.exe
PRC - [2009.07.27 09:12:12 | 000,042,617 | ---- | M] () -- C:\Users\iliapo\AppData\Local\services.exe
PRC - [2009.07.27 09:12:12 | 000,042,617 | ---- | M] () -- C:\Users\iliapo\AppData\Local\lsass.exe
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
O4 - HKCU..\Run: [Tok-Cirrhatus] C:\Users\iliapo\AppData\Local\smss.exe ()
O13 - gopher Prefix: missing
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O33 - MountPoints2\{87ddf5bc-c33d-11df-9faa-001d7d716219}\Shell - "" = AutoRun
O33 - MountPoints2\{87ddf5bc-c33d-11df-9faa-001d7d716219}\Shell\AutoRun\command - "" = F:\launcher.exe -- File not found
[2010.11.15 18:07:59 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-15
[2010.11.11 00:00:00 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-11
[2010.11.10 07:01:34 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-10
[2010.11.09 20:06:32 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-9
[2010.11.08 00:00:00 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-8
[2010.11.06 23:00:01 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-7
[2010.11.05 23:00:00 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-6
[2010.11.04 23:00:00 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-5
[2010.11.03 23:00:01 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-4
[2010.11.02 23:14:47 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-3
[2010.11.02 05:37:06 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-2
[2010.10.31 23:00:00 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-1
[2010.10.30 23:00:01 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-31
[2010.10.29 23:00:01 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-30
[2010.10.28 23:00:00 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-29
[2010.10.27 23:00:00 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-28
[2010.10.26 23:15:30 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-27
[2010.10.25 23:00:00 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Bron.tok-12-26
[2010.11.24 18:16:29 | 000,012,407 | ---- | M] () -- C:\Users\iliapo\AppData\Local\Bron.tok.A12.em.bin
[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\winlogon.exe
[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\smss.exe
[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\services.exe
[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\lsass.exe
[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\Local.exe
[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\inetinfo.exe
[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\csrss.exe
[2007.07.18 04:00:34 | 000,002,257 | ---- | C] () -- C:\Users\iliapo\AppData\Local\NetMailTmp.bin
:files
recycler /alldrives
ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[emptyflash]
[Reboot]

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Публикувано изображение

Windows ще се рестартира и ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste или го прикачете в следващия си коментар.

Цитирай

1

24 ноември 201015 г.

Автор

Тъй като ми се появиха няколко нови файла ги архивирах и ги качих ТУК

Редактирано 25 ноември 201015 г. от nologo
Изтрит линк към файлове (преглед на промените)

Цитирай

24 ноември 201015 г.

Хм, това не ми върши работа. Ще може ли да направиш следното: Пусни отново OTL с Quick Scan. Дай да видим лог файла, след като OTL завърши работа.

Цитирай

24 ноември 201015 г.

Автор

Направих го но искам да изтъкна че когато направих 2-рото със въвеждането на кода, компютърът не се рестартита а заспа след като натиснах бутончето след това се събуди и ми излезнаха тези файлове които Ви пратих.

А иначе сега след като пак сканирах ми излезна ето това след целия скан

OTL logfile created on: 24.11.2010 г. 19:52:24 - Run 2

OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\iliapo\Desktop

Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation

Internet Explorer (Version = 9.0.7930.16406)

Locale: 00000402 | Country: България | Language: BGR | Date Format: d.M.yyyy 'г.'

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 61,00% Memory free

4,00 Gb Paging File | 3,00 Gb Available in Paging File | 75,00% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 97,56 Gb Total Space | 72,19 Gb Free Space | 74,00% Space Free | Partition Type: NTFS

Drive D: | 135,10 Gb Total Space | 70,87 Gb Free Space | 52,46% Space Free | Partition Type: NTFS

Computer Name: ILIAPO-PC | User Name: iliapo | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2010.11.24 18:59:12 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\iliapo\Desktop\OTL.scr

PRC - [2010.11.15 21:30:30 | 000,186,760 | ---- | M] () -- C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe

PRC - [2010.11.01 13:36:03 | 000,974,904 | ---- | M] (Google Inc.) -- C:\Users\iliapo\AppData\Local\Google\Chrome\Application\chrome.exe

PRC - [2010.10.10 14:35:13 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe

PRC - [2009.10.30 21:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe

PRC - [2009.08.23 23:27:34 | 007,719,456 | ---- | M] (Realtek Semiconductor) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

PRC - [2009.07.27 09:12:12 | 000,042,617 | ---- | M] () -- C:\Users\iliapo\AppData\Local\winlogon.exe

PRC - [2009.07.27 09:12:12 | 000,042,617 | ---- | M] () -- C:\Users\iliapo\AppData\Local\services.exe

PRC - [2009.07.27 09:12:12 | 000,042,617 | ---- | M] () -- C:\Users\iliapo\AppData\Local\lsass.exe

PRC - [2009.07.13 17:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe

PRC - [2009.07.13 17:14:28 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PING.EXE

PRC - [2009.07.13 17:14:15 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe

PRC - [2009.07.13 17:14:12 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe

PRC - [2008.01.22 09:13:32 | 001,201,448 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

PRC - [2008.01.22 09:13:20 | 000,152,872 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

PRC - [2007.09.04 07:25:58 | 000,090,112 | ---- | M] () -- C:\Program Files\TeamViewer3\TeamViewer_Host.exe

========== Modules (SafeList) ==========

MOD - [2010.11.24 18:59:12 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\iliapo\Desktop\OTL.scr

MOD - [2010.08.20 21:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll

MOD - [2009.07.13 17:16:15 | 000,099,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspicli.dll

MOD - [2009.07.13 17:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sechost.dll

MOD - [2009.07.13 17:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samcli.dll

MOD - [2009.07.13 17:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profapi.dll

MOD - [2009.07.13 17:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netutils.dll

MOD - [2009.07.13 17:15:35 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KernelBase.dll

MOD - [2009.07.13 17:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll

MOD - [2009.07.13 17:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devobj.dll

MOD - [2009.07.13 17:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptbase.dll

MOD - [2009.07.13 17:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll

========== Win32 Services (SafeList) ==========

SRV - [2010.11.15 21:30:30 | 000,186,760 | ---- | M] () [Auto | Running] -- C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe -- (ScsiAccess)

SRV - [2010.09.27 18:50:29 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)

SRV - [2010.09.22 23:21:24 | 001,493,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)

SRV - [2010.09.17 22:33:39 | 001,343,400 | ---- | M] () [unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)

SRV - [2010.08.15 22:15:05 | 000,804,864 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\FntCache.dll -- (FontCache)

SRV - [2009.07.13 17:16:21 | 000,185,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wwansvc.dll -- (WwanSvc)

SRV - [2009.07.13 17:16:17 | 000,151,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wbiosrvc.dll -- (WbioSrvc)

SRV - [2009.07.13 17:16:17 | 000,119,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\umpo.dll -- (Power)

SRV - [2009.07.13 17:16:16 | 000,037,376 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\themeservice.dll -- (Themes)

SRV - [2009.07.13 17:16:15 | 000,053,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sppuinotify.dll -- (sppuinotify)

SRV - [2009.07.13 17:16:13 | 000,043,520 | ---- | M] (Microsoft Corporation) [unknown | Running] -- C:\Windows\System32\RpcEpMap.dll -- (RpcEptMapper)

SRV - [2009.07.13 17:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)

SRV - [2009.07.13 17:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)

SRV - [2009.07.13 17:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\pnrpsvc.dll -- (PNRPsvc)

SRV - [2009.07.13 17:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\pnrpsvc.dll -- (p2pimsvc)

SRV - [2009.07.13 17:16:12 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\provsvc.dll -- (HomeGroupProvider)

SRV - [2009.07.13 17:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pnrpauto.dll -- (PNRPAutoReg)

SRV - [2009.07.13 17:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)

SRV - [2009.07.13 17:15:36 | 000,194,560 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\ListSvc.dll -- (HomeGroupListener)

SRV - [2009.07.13 17:15:11 | 000,253,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\dhcpcore.dll -- (Dhcp)

SRV - [2009.07.13 17:15:10 | 000,218,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\defragsvc.dll -- (defragsvc)

SRV - [2009.07.13 17:14:59 | 000,076,800 | ---- | M] (Microsoft Corporation) [unknown | Stopped] -- C:\Windows\System32\bdesvc.dll -- (BDESVC)

SRV - [2009.07.13 17:14:58 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AxInstSv.dll -- (AxInstSV) ActiveX Installer (AxInstSV)

SRV - [2009.07.13 17:14:53 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\appidsvc.dll -- (AppIDSvc)

SRV - [2009.07.13 17:14:29 | 003,179,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sppsvc.exe -- (sppsvc)

SRV - [2007.09.04 07:25:58 | 000,090,112 | ---- | M] () [Auto | Running] -- C:\Program Files\TeamViewer3\TeamViewer_Host.exe -- (TeamViewer)

========== Driver Services (SafeList) ==========

DRV - [2010.09.22 23:21:24 | 000,039,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\fssfltr.sys -- (fssfltr)

DRV - [2010.09.18 21:15:35 | 000,008,059 | ---- | M] (Windows ® 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)

DRV - [2010.09.18 07:46:28 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)

DRV - [2009.12.10 23:44:02 | 000,133,720 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\ksecpkg.sys -- (KSecPkg)

DRV - [2009.09.23 18:18:14 | 004,808,192 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\igdkmd32.sys -- (igfx)

DRV - [2009.08.23 23:19:10 | 002,754,336 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)

DRV - [2009.07.13 17:26:21 | 000,015,952 | ---- | M] (CMD Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\cmdide.sys -- (cmdide)

DRV - [2009.07.13 17:26:17 | 000,297,552 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\adpahci.sys -- (adpahci)

DRV - [2009.07.13 17:26:15 | 000,422,976 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\adp94xx.sys -- (adp94xx)

DRV - [2009.07.13 17:26:15 | 000,159,312 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdsbs.sys -- (amdsbs)

DRV - [2009.07.13 17:26:15 | 000,146,512 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\adpu320.sys -- (adpu320)

DRV - [2009.07.13 17:26:15 | 000,086,608 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\arcsas.sys -- (arcsas)

DRV - [2009.07.13 17:26:15 | 000,079,952 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdsata.sys -- (amdsata)

DRV - [2009.07.13 17:26:15 | 000,076,368 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\arc.sys -- (arc)

DRV - [2009.07.13 17:26:15 | 000,023,616 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\amdxata.sys -- (amdxata)

DRV - [2009.07.13 17:26:15 | 000,014,400 | ---- | M] (Acer Laboratories Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\aliide.sys -- (aliide)

DRV - [2009.07.13 17:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\nvstor.sys -- (nvstor)

DRV - [2009.07.13 17:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\nvraid.sys -- (nvraid)

DRV - [2009.07.13 17:20:44 | 000,044,624 | ---- | M] (IBM Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\nfrd960.sys -- (nfrd960)

DRV - [2009.07.13 17:20:37 | 000,089,168 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\lsi_sas.sys -- (LSI_SAS)

DRV - [2009.07.13 17:20:36 | 000,332,352 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\iaStorV.sys -- (iaStorV)

DRV - [2009.07.13 17:20:36 | 000,235,584 | ---- | M] (LSI Corporation, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\MegaSR.sys -- (MegaSR)

DRV - [2009.07.13 17:20:36 | 000,096,848 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\lsi_scsi.sys -- (LSI_SCSI)

DRV - [2009.07.13 17:20:36 | 000,095,824 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\lsi_fc.sys -- (LSI_FC)

DRV - [2009.07.13 17:20:36 | 000,054,864 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\lsi_sas2.sys -- (LSI_SAS2)

DRV - [2009.07.13 17:20:36 | 000,041,040 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\iirsp.sys -- (iirsp)

DRV - [2009.07.13 17:20:36 | 000,030,800 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\megasas.sys -- (megasas)

DRV - [2009.07.13 17:20:36 | 000,013,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\hwpolicy.sys -- (hwpolicy)

DRV - [2009.07.13 17:20:28 | 000,453,712 | ---- | M] (Emulex) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\elxstor.sys -- (elxstor)

DRV - [2009.07.13 17:20:28 | 000,070,720 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\djsvs.sys -- (aic78xx)

DRV - [2009.07.13 17:20:28 | 000,067,152 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\HpSAMD.sys -- (HpSAMD)

DRV - [2009.07.13 17:20:28 | 000,046,160 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\fsdepends.sys -- (FsDepends)

DRV - [2009.07.13 17:19:11 | 000,141,904 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vsmraid.sys -- (vsmraid)

DRV - [2009.07.13 17:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus)

DRV - [2009.07.13 17:19:10 | 000,159,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vhdmp.sys -- (vhdmp)

DRV - [2009.07.13 17:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt)

DRV - [2009.07.13 17:19:10 | 000,032,832 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vdrvroot.sys -- (vdrvroot)

DRV - [2009.07.13 17:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc)

DRV - [2009.07.13 17:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\wimmount.sys -- (WIMMount)

DRV - [2009.07.13 17:19:10 | 000,016,976 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\viaide.sys -- (viaide)

DRV - [2009.07.13 17:19:04 | 001,383,488 | ---- | M] (QLogic Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\ql2300.sys -- (ql2300)

DRV - [2009.07.13 17:19:04 | 000,173,648 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\rdyboost.sys -- (rdyboost)

DRV - [2009.07.13 17:19:04 | 000,106,064 | ---- | M] (QLogic Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\ql40xx.sys -- (ql40xx)

DRV - [2009.07.13 17:19:04 | 000,077,888 | ---- | M] (Silicon Integrated Systems) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\sisraid4.sys -- (SiSRaid4)

DRV - [2009.07.13 17:19:04 | 000,043,088 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\pcw.sys -- (pcw)

DRV - [2009.07.13 17:19:04 | 000,040,016 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\SiSRaid2.sys -- (SiSRaid2)

DRV - [2009.07.13 17:19:04 | 000,021,072 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\stexstor.sys -- (stexstor)

DRV - [2009.07.13 17:17:54 | 000,369,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\cng.sys -- (CNG)

DRV - [2009.07.13 16:57:25 | 000,272,128 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\Brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)

DRV - [2009.07.13 16:02:41 | 000,018,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rdpbus.sys -- (rdpbus)

DRV - [2009.07.13 16:01:41 | 000,007,168 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\RDPREFMP.sys -- (RDPREFMP)

DRV - [2009.07.13 15:55:00 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\agilevpn.sys -- (RasAgileVpn) WAN Miniport (IKEv2)

DRV - [2009.07.13 15:53:51 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\wfplwf.sys -- (WfpLwf)

DRV - [2009.07.13 15:52:44 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ndiscap.sys -- (NdisCap)

DRV - [2009.07.13 15:52:02 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vwifibus.sys -- (vwifibus)

DRV - [2009.07.13 15:52:00 | 000,163,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\1394ohci.sys -- (1394ohci)

DRV - [2009.07.13 15:51:35 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\umpass.sys -- (UmPass)

DRV - [2009.07.13 15:51:08 | 000,004,096 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mshidkmdf.sys -- (mshidkmdf)

DRV - [2009.07.13 15:46:55 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\MTConfig.sys -- (MTConfig)

DRV - [2009.07.13 15:45:26 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CompositeBus.sys -- (CompositeBus)

DRV - [2009.07.13 15:36:52 | 000,050,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\appid.sys -- (AppID)

DRV - [2009.07.13 15:33:50 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | Unknown | Stopped] -- C:\Windows\System32\drivers\scfilter.sys -- (scfilter)

DRV - [2009.07.13 15:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap)

DRV - [2009.07.13 15:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID)

DRV - [2009.07.13 15:24:05 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\discache.sys -- (discache)

DRV - [2009.07.13 15:16:36 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\acpipmi.sys -- (AcpiPmi)

DRV - [2009.07.13 15:11:04 | 000,052,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdppm.sys -- (AmdPPM)

DRV - [2009.07.13 14:54:14 | 000,026,624 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\hcw85cir.sys -- (hcw85cir)

DRV - [2009.07.13 14:53:33 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BrUsbMdm.sys -- (BrUsbMdm)

DRV - [2009.07.13 14:53:33 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BrUsbSer.sys -- (BrUsbSer)

DRV - [2009.07.13 14:53:32 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BrSerWdm.sys -- (BrSerWdm)

DRV - [2009.07.13 14:53:28 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\BrFiltLo.sys -- (BrFiltLo)

DRV - [2009.07.13 14:53:28 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\BrFiltUp.sys -- (BrFiltUp)

DRV - [2009.07.13 14:02:52 | 000,139,776 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rt86win7.sys -- (RTL8167)

DRV - [2009.07.13 14:02:49 | 000,229,888 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\b57nd60x.sys -- (b57nd60x)

DRV - [2009.07.13 14:02:48 | 003,100,160 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\evbdx.sys -- (ebdrv)

DRV - [2009.07.13 14:02:48 | 000,430,080 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\bxvbdx.sys -- (b06bdrv)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\URLSearchHook: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1750559

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9E 0E 92 C9 9A 56 CB 01 [binary data]

IE - HKCU\..\URLSearchHook: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.)

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010.10.10 14:36:24 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

O1 HOSTS File: ([2009.06.10 13:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts

O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)

O2 - BHO: (Windows Live Messenger Companion Helper) - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O2 - BHO: (BS Player Toolbar) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (BS Player Toolbar) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.)

O3 - HKCU\..\Toolbar\WebBrowser: (BS Player Toolbar) - {FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.)

O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)

O4 - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor)

O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)

O4 - HKCU..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)

O4 - HKCU..\Run: [Tok-Cirrhatus] C:\Users\iliapo\AppData\Local\smss.exe ()

O4 - Startup: C:\Users\iliapo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Empty.pif ()

O4 - Startup: C:\Users\iliapo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Startup.exe ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O9 - Extra Button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)

O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.222.168.98 83.222.161.131

O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)

O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation)

O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (livessp) - C:\Windows\System32\livessp.dll (Microsoft Corp.)

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2009.06.10 13:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.11.24 19:34:34 | 000,000,000 | ---D | C] -- C:\_OTL

[2010.11.24 18:59:08 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\iliapo\Desktop\OTL.scr

[2010.11.20 20:40:39 | 000,000,000 | ---D | C] -- C:\Users\iliapo\Desktop\Нова папка (3)

[2010.11.20 09:46:54 | 000,000,000 | ---D | C] -- C:\Program Files\Feedback Tool

[2010.11.20 07:33:24 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Roaming\goalbit

[2010.11.19 22:28:55 | 000,000,000 | ---D | C] -- C:\Users\iliapo\Desktop\My favorite star

[2010.11.19 18:05:10 | 000,000,000 | ---D | C] -- C:\Program Files\InhatchTeam

[2010.11.15 21:30:35 | 000,000,000 | ---D | C] -- C:\Program Files\Photodex Presenter

[2010.11.15 21:30:35 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Roaming\Netscape

[2010.11.15 21:30:35 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Roaming\Mozilla

[2010.11.15 21:30:27 | 000,000,000 | ---D | C] -- C:\Program Files\Photodex

[2010.11.15 21:27:41 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Roaming\Photodex

[2010.11.15 21:27:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Photodex

[2010.11.15 15:59:07 | 000,000,000 | ---D | C] -- C:\Users\iliapo\Desktop\Нова папка (2)

[2010.11.14 21:33:53 | 000,000,000 | ---D | C] -- C:\Users\iliapo\petar

[2010.11.14 13:39:32 | 001,340,928 | ---- | C] ((J) Software) -- C:\Users\iliapo\Desktop\2t3d3.exe

[2010.11.13 13:11:54 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Roaming\Publish Providers

[2010.11.13 12:46:04 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Roaming\Sony

[2010.11.13 12:46:04 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Sony

[2010.11.13 12:43:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony

[2010.11.13 12:43:35 | 000,000,000 | ---D | C] -- C:\Program Files\Sony

[2010.11.07 10:42:35 | 002,315,776 | ---- | C] (TeamViewer GmbH) -- C:\Users\iliapo\Team Viewer.exe

[2010.11.06 21:17:55 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software

[2010.11.06 12:02:25 | 000,000,000 | ---D | C] -- C:\Program Files\Disney Interactive

[2010.11.06 09:26:37 | 000,000,000 | -HSD | C] -- C:\Windows\ftpcache

[2010.11.06 09:26:21 | 000,000,000 | ---D | C] -- C:\Program Files\InstallShield Installation Information

[2010.11.06 09:26:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Compedia

[2010.11.05 19:37:14 | 000,000,000 | ---D | C] -- C:\Users\iliapo\Desktop\animals

[2010.11.02 20:36:49 | 000,000,000 | ---D | C] -- C:\Users\iliapo\Documents\Моите получени файлове

[2010.11.02 14:51:44 | 000,000,000 | ---D | C] -- C:\Users\iliapo\Tracing

[2010.11.02 14:47:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE

[2010.11.02 14:47:00 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live

[2010.11.02 14:45:08 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight

[2010.11.02 14:42:37 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\Windows Live

[2010.11.02 14:42:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live

[2010.10.30 19:43:17 | 000,000,000 | ---D | C] -- C:\Users\iliapo\AppData\Local\TechSmith

========== Files - Modified Within 30 Days ==========

[2010.11.24 19:51:55 | 000,012,407 | ---- | M] () -- C:\Users\iliapo\AppData\Local\Bron.tok.A12.em.bin

[2010.11.24 19:47:30 | 000,606,992 | ---- | M] () -- C:\Windows\System32\perfh009.dat

[2010.11.24 19:47:30 | 000,103,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat

[2010.11.24 19:42:27 | 000,023,971 | ---- | M] () -- C:\Users\iliapo\Desktop\Desktop.rar

[2010.11.24 19:41:01 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-674712493-138644324-1544489611-1001UA.job

[2010.11.24 19:40:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2010.11.24 19:40:10 | 1603,969,024 | -HS- | M] () -- C:\hiberfil.sys

[2010.11.24 19:38:28 | 000,000,057 | ---- | M] () -- C:\Users\iliapo\Desktop\cmd.bat

[2010.11.24 19:24:08 | 003,414,155 | ---- | M] () -- C:\Users\iliapo\Documents\IMGP5272.JPG

[2010.11.24 18:59:12 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\iliapo\Desktop\OTL.scr

[2010.11.24 15:06:31 | 000,302,607 | ---- | M] () -- C:\Users\iliapo\Desktop\Без име.png

[2010.11.24 06:54:22 | 000,021,520 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2010.11.24 06:54:22 | 000,021,520 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2010.11.24 06:41:00 | 000,001,018 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-674712493-138644324-1544489611-1001Core.job

[2010.11.23 21:54:31 | 000,111,620 | ---- | M] () -- C:\Users\iliapo\Documents\photo.jpg

[2010.11.23 19:36:30 | 000,056,054 | ---- | M] () -- C:\Users\iliapo\Documents\DSC00394.JPG

[2010.11.23 19:35:43 | 000,072,431 | ---- | M] () -- C:\Users\iliapo\Documents\DSC00378.JPG

[2010.11.22 18:25:09 | 000,002,870 | ---- | M] () -- C:\Users\iliapo\Desktop\Untitled-1.png

[2010.11.22 18:20:02 | 000,524,167 | ---- | M] () -- C:\Users\iliapo\Desktop\1280x720_HD_wallpaper_108_zixpkcom.jpg

[2010.11.20 23:19:51 | 003,599,872 | ---- | M] () -- C:\Users\iliapo\Documents\jjj.ppt

[2010.11.20 23:15:22 | 002,268,609 | ---- | M] () -- C:\Users\iliapo\Documents\prezentacia-redakt.pptx

[2010.11.20 23:14:06 | 002,268,610 | ---- | M] () -- C:\Users\iliapo\Documents\prezentacia.ppsx

[2010.11.20 12:38:20 | 000,001,984 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk

[2010.11.20 09:56:07 | 000,001,407 | ---- | M] () -- C:\Users\iliapo\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

[2010.11.19 14:40:42 | 002,107,763 | ---- | M] () -- C:\Users\iliapo\Desktop\Без име3.png

[2010.11.19 14:40:10 | 002,262,021 | ---- | M] () -- C:\Users\iliapo\Desktop\Без име2.png

[2010.11.18 20:23:05 | 001,431,514 | ---- | M] () -- C:\Users\iliapo\Documents\system_original.png

[2010.11.16 06:44:02 | 000,067,059 | ---- | M] () -- C:\Users\iliapo\77156_169350889759585_134305193264155_439527_7803291_n.jpg

[2010.11.15 22:04:09 | 000,005,632 | ---- | M] () -- C:\Users\iliapo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010.11.15 21:49:02 | 000,536,944 | ---- | M] () -- C:\Users\iliapo\ws_aurea_full_hd_2560x1600.jpg

[2010.11.15 21:46:44 | 000,125,059 | ---- | M] () -- C:\Users\iliapo\z6cs7.jpg

[2010.11.15 21:46:00 | 000,208,934 | ---- | M] () -- C:\Users\iliapo\dark_flame_hd-wide.jpg

[2010.11.15 21:30:51 | 000,002,034 | ---- | M] () -- C:\Users\Public\Desktop\ProShow Gold.lnk

[2010.11.14 13:48:16 | 000,077,504 | ---- | M] () -- C:\Users\iliapo\Без заглавие (2).wma-0-561909977-1.sfk

[2010.11.14 13:48:16 | 000,077,504 | ---- | M] () -- C:\Users\iliapo\Без заглавие (2).wma-0-561909977-0.sfk

[2010.11.14 13:35:14 | 000,077,504 | ---- | M] () -- C:\Users\iliapo\Без заглавие (2).wma.sfk

[2010.11.14 13:35:02 | 009,912,248 | ---- | M] () -- C:\Users\iliapo\Без заглавие (2).wma.sfap0

[2010.11.14 10:36:42 | 000,700,923 | ---- | M] () -- C:\Users\iliapo\Без заглавие (2).wma

[2010.11.13 17:01:16 | 030,801,675 | ---- | M] () -- C:\Users\iliapo\13112010075.mp4

[2010.11.13 16:49:34 | 028,532,480 | ---- | M] () -- C:\Users\iliapo\13112010074.mp4

[2010.11.13 12:43:53 | 000,001,878 | ---- | M] () -- C:\Users\Public\Desktop\Vegas Pro 9.0.lnk

[2010.11.11 11:35:50 | 000,430,490 | ---- | M] () -- C:\Users\iliapo\11112010925.jpg

[2010.11.11 11:34:32 | 000,512,663 | ---- | M] () -- C:\Users\iliapo\11112010923.jpg

[2010.11.11 11:34:28 | 000,632,992 | ---- | M] () -- C:\Users\iliapo\11112010922.jpg

[2010.11.11 03:04:48 | 000,000,118 | ---- | M] () -- C:\Windows\System32\MRT.INI

[2010.11.10 14:36:37 | 000,372,377 | ---- | M] () -- C:\Users\iliapo\09112010909.jpg

[2010.11.10 14:36:24 | 000,030,720 | -H-- | M] () -- C:\Users\iliapo\Desktop\photothumb.db

[2010.11.08 10:33:23 | 000,389,173 | ---- | M] () -- C:\Users\iliapo\Untitled-1 (2).jpg

[2010.11.08 10:26:45 | 001,137,929 | ---- | M] () -- C:\Users\iliapo\07112010900.jpg

[2010.11.07 10:43:29 | 002,315,776 | ---- | M] (TeamViewer GmbH) -- C:\Users\iliapo\Team Viewer.exe

[2010.11.06 21:18:24 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt

[2010.11.06 12:02:29 | 000,000,410 | ---- | M] () -- C:\Windows\Disney.ini

[2010.11.06 11:39:36 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS

[2010.11.06 11:39:36 | 000,000,000 | RHS- | M] () -- C:\IO.SYS

[2010.11.06 11:16:57 | 000,284,036 | ---- | M] () -- C:\Users\iliapo\_15_drawn_flower_brushes_by_domino_88.abr

[2010.11.06 11:08:50 | 000,970,378 | ---- | M] () -- C:\Users\iliapo\05112010882.jpg

[2010.11.06 11:02:44 | 001,554,911 | ---- | M] () -- C:\Users\iliapo\05112010883.jpg

[2010.11.06 09:26:21 | 000,000,107 | ---- | M] () -- C:\Windows\compedia.ini

[2010.11.05 14:24:54 | 000,733,061 | ---- | M] () -- C:\Users\iliapo\Documents\MOV00355.3gp

[2010.11.04 18:29:40 | 000,465,625 | ---- | M] () -- C:\Users\iliapo\Documents\IMG_04112010_193001.png

[2010.11.04 18:09:33 | 000,115,235 | ---- | M] () -- C:\Users\iliapo\Documents\11.jpg

[2010.11.04 18:09:29 | 000,150,558 | ---- | M] () -- C:\Users\iliapo\Documents\1.jpg

[2010.11.04 18:09:25 | 000,122,329 | ---- | M] () -- C:\Users\iliapo\Documents\5.jpg

[2010.11.04 18:09:18 | 000,133,110 | ---- | M] () -- C:\Users\iliapo\Documents\4.jpg

[2010.11.04 18:09:11 | 000,119,703 | ---- | M] () -- C:\Users\iliapo\Documents\9.jpg

[2010.11.04 18:09:05 | 000,110,662 | ---- | M] () -- C:\Users\iliapo\Documents\10.jpg

[2010.11.04 18:09:00 | 000,157,307 | ---- | M] () -- C:\Users\iliapo\Documents\DJAKO.jpg

[2010.11.04 18:07:40 | 000,435,879 | ---- | M] () -- C:\Users\iliapo\DSC02016.JPG

[2010.11.04 18:07:40 | 000,326,739 | ---- | M] () -- C:\Users\iliapo\DSC02015.JPG

[2010.11.04 18:07:39 | 000,384,499 | ---- | M] () -- C:\Users\iliapo\DSC02017.JPG

[2010.11.03 20:27:26 | 000,409,567 | ---- | M] () -- C:\Users\iliapo\Documents\Fahradin Fahradinov.jpg

[2010.11.03 19:39:38 | 000,132,591 | ---- | M] () -- C:\Users\iliapo\Documents\Без име.png

[2010.11.03 07:27:32 | 000,374,534 | ---- | M] () -- C:\Users\iliapo\03112010865.jpg

[2010.11.03 07:26:48 | 000,363,105 | ---- | M] () -- C:\Users\iliapo\03112010864.jpg

[2010.11.02 15:11:20 | 000,001,103 | ---- | M] () -- C:\Users\iliapo\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Microsoft Office Outlook.lnk

[2010.11.02 08:06:22 | 000,960,656 | ---- | M] () -- C:\Users\iliapo\02112010860.jpg

[2010.11.02 08:05:52 | 000,731,261 | ---- | M] () -- C:\Users\iliapo\02112010859.jpg

[2010.11.02 08:05:44 | 001,027,970 | ---- | M] () -- C:\Users\iliapo\02112010858.jpg

[2010.11.02 08:05:32 | 001,076,867 | ---- | M] () -- C:\Users\iliapo\02112010857.jpg

[2010.11.02 08:01:58 | 000,386,808 | ---- | M] () -- C:\Users\iliapo\02112010856.jpg

[2010.11.02 08:01:28 | 000,502,709 | ---- | M] () -- C:\Users\iliapo\02112010855.jpg

[2010.11.02 08:01:08 | 000,455,451 | ---- | M] () -- C:\Users\iliapo\02112010854.jpg

[2010.11.02 08:00:42 | 000,374,716 | ---- | M] () -- C:\Users\iliapo\02112010853.jpg

[2010.11.01 12:12:02 | 000,291,940 | ---- | M] () -- C:\Users\iliapo\01112010850.jpg

[2010.10.31 14:25:59 | 000,169,984 | -H-- | M] () -- C:\Users\iliapo\photothumb.db

[2010.10.30 16:42:25 | 000,445,468 | ---- | M] () -- C:\Users\iliapo\(Заричка)001.jpg

[2010.10.30 16:42:25 | 000,381,685 | ---- | M] () -- C:\Users\iliapo\(Заричка)002.jpg

[2010.10.30 14:53:02 | 000,046,941 | ---- | M] () -- C:\Users\iliapo\Documents\Zarichka.jpg

[2010.10.30 14:49:19 | 000,318,292 | ---- | M] () -- C:\Users\iliapo\Documents\taaz_makeover(3).jpg

[2010.10.30 14:47:36 | 003,432,608 | ---- | M] () -- C:\Users\iliapo\Documents\IMGP2005.JPG

[2010.10.30 14:47:08 | 003,439,717 | ---- | M] () -- C:\Users\iliapo\Documents\IMGP2001.JPG

[2010.10.30 14:45:00 | 003,656,565 | ---- | M] () -- C:\Users\iliapo\Documents\IMGP1955.JPG

[2010.10.29 18:53:05 | 000,211,968 | ---- | M] () -- C:\Users\iliapo\Desktop\ApplicationForm_Roma_Business2.doc

========== Files Created - No Company Name ==========

[2010.11.24 19:51:55 | 000,012,407 | ---- | C] () -- C:\Users\iliapo\AppData\Local\Bron.tok.A12.em.bin

[2010.11.24 19:42:27 | 000,023,971 | ---- | C] () -- C:\Users\iliapo\Desktop\Desktop.rar

[2010.11.24 19:38:28 | 000,000,057 | ---- | C] () -- C:\Users\iliapo\Desktop\cmd.bat

[2010.11.24 19:23:33 | 003,414,155 | ---- | C] () -- C:\Users\iliapo\Documents\IMGP5272.JPG

[2010.11.23 19:48:57 | 000,111,620 | ---- | C] () -- C:\Users\iliapo\Documents\photo.jpg

[2010.11.23 19:36:29 | 000,056,054 | ---- | C] () -- C:\Users\iliapo\Documents\DSC00394.JPG

[2010.11.23 19:35:41 | 000,072,431 | ---- | C] () -- C:\Users\iliapo\Documents\DSC00378.JPG

[2010.11.22 18:25:08 | 000,002,870 | ---- | C] () -- C:\Users\iliapo\Desktop\Untitled-1.png

[2010.11.22 18:20:06 | 000,524,167 | ---- | C] () -- C:\Users\iliapo\Desktop\1280x720_HD_wallpaper_108_zixpkcom.jpg

[2010.11.20 23:19:40 | 003,599,872 | ---- | C] () -- C:\Users\iliapo\Documents\jjj.ppt

[2010.11.20 23:15:10 | 002,268,609 | ---- | C] () -- C:\Users\iliapo\Documents\prezentacia-redakt.pptx

[2010.11.20 23:12:13 | 002,268,610 | ---- | C] () -- C:\Users\iliapo\Documents\prezentacia.ppsx

[2010.11.20 12:38:20 | 000,001,984 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk

[2010.11.20 09:49:04 | 000,072,533 | ---- | C] () -- C:\Windows\System32\ieuinit.inf

[2010.11.19 14:40:42 | 002,107,763 | ---- | C] () -- C:\Users\iliapo\Desktop\Без име3.png

[2010.11.19 14:40:10 | 002,262,021 | ---- | C] () -- C:\Users\iliapo\Desktop\Без име2.png

[2010.11.19 14:39:26 | 000,302,607 | ---- | C] () -- C:\Users\iliapo\Desktop\Без име.png

[2010.11.18 20:21:04 | 001,431,514 | ---- | C] () -- C:\Users\iliapo\Documents\system_original.png

[2010.11.16 06:44:07 | 000,067,059 | ---- | C] () -- C:\Users\iliapo\77156_169350889759585_134305193264155_439527_7803291_n.jpg

[2010.11.15 21:49:04 | 000,536,944 | ---- | C] () -- C:\Users\iliapo\ws_aurea_full_hd_2560x1600.jpg

[2010.11.15 21:46:47 | 000,125,059 | ---- | C] () -- C:\Users\iliapo\z6cs7.jpg

[2010.11.15 21:46:04 | 000,208,934 | ---- | C] () -- C:\Users\iliapo\dark_flame_hd-wide.jpg

[2010.11.15 21:30:51 | 000,002,034 | ---- | C] () -- C:\Users\Public\Desktop\ProShow Gold.lnk

[2010.11.14 13:45:07 | 000,077,504 | ---- | C] () -- C:\Users\iliapo\Без заглавие (2).wma-0-561909977-0.sfk

[2010.11.14 13:44:18 | 000,077,504 | ---- | C] () -- C:\Users\iliapo\Без заглавие (2).wma-0-561909977-1.sfk

[2010.11.14 13:35:04 | 000,077,504 | ---- | C] () -- C:\Users\iliapo\Без заглавие (2).wma.sfk

[2010.11.14 13:35:01 | 009,912,248 | ---- | C] () -- C:\Users\iliapo\Без заглавие (2).wma.sfap0

[2010.11.14 10:36:42 | 000,700,923 | ---- | C] () -- C:\Users\iliapo\Без заглавие (2).wma

[2010.11.13 21:34:29 | 030,801,675 | ---- | C] () -- C:\Users\iliapo\13112010075.mp4

[2010.11.13 21:34:22 | 028,532,480 | ---- | C] () -- C:\Users\iliapo\13112010074.mp4

[2010.11.13 12:43:53 | 000,001,878 | ---- | C] () -- C:\Users\Public\Desktop\Vegas Pro 9.0.lnk

[2010.11.11 19:03:33 | 000,632,992 | ---- | C] () -- C:\Users\iliapo\11112010922.jpg

[2010.11.11 19:03:31 | 000,512,663 | ---- | C] () -- C:\Users\iliapo\11112010923.jpg

[2010.11.11 19:03:28 | 000,430,490 | ---- | C] () -- C:\Users\iliapo\11112010925.jpg

[2010.11.11 03:04:48 | 000,000,118 | ---- | C] () -- C:\Windows\System32\MRT.INI

[2010.11.09 12:48:18 | 000,372,377 | ---- | C] () -- C:\Users\iliapo\09112010909.jpg

[2010.11.08 10:26:45 | 001,137,929 | ---- | C] () -- C:\Users\iliapo\07112010900.jpg

[2010.11.07 08:55:56 | 000,389,173 | ---- | C] () -- C:\Users\iliapo\Untitled-1 (2).jpg

[2010.11.06 12:02:29 | 000,000,410 | ---- | C] () -- C:\Windows\Disney.ini

[2010.11.06 11:39:36 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS

[2010.11.06 11:39:36 | 000,000,000 | RHS- | C] () -- C:\IO.SYS

[2010.11.06 11:17:01 | 000,284,036 | ---- | C] () -- C:\Users\iliapo\_15_drawn_flower_brushes_by_domino_88.abr

[2010.11.06 11:08:50 | 000,970,378 | ---- | C] () -- C:\Users\iliapo\05112010882.jpg

[2010.11.06 11:02:44 | 001,554,911 | ---- | C] () -- C:\Users\iliapo\05112010883.jpg

[2010.11.06 09:26:21 | 000,000,107 | ---- | C] () -- C:\Windows\compedia.ini

[2010.11.05 14:24:48 | 000,733,061 | ---- | C] () -- C:\Users\iliapo\Documents\MOV00355.3gp

[2010.11.04 18:29:01 | 000,465,625 | ---- | C] () -- C:\Users\iliapo\Documents\IMG_04112010_193001.png

[2010.11.04 18:09:32 | 000,115,235 | ---- | C] () -- C:\Users\iliapo\Documents\11.jpg

[2010.11.04 18:09:27 | 000,150,558 | ---- | C] () -- C:\Users\iliapo\Documents\1.jpg

[2010.11.04 18:09:24 | 000,122,329 | ---- | C] () -- C:\Users\iliapo\Documents\5.jpg

[2010.11.04 18:09:15 | 000,133,110 | ---- | C] () -- C:\Users\iliapo\Documents\4.jpg

[2010.11.04 18:09:10 | 000,119,703 | ---- | C] () -- C:\Users\iliapo\Documents\9.jpg

[2010.11.04 18:09:04 | 000,110,662 | ---- | C] () -- C:\Users\iliapo\Documents\10.jpg

[2010.11.04 18:09:00 | 000,157,307 | ---- | C] () -- C:\Users\iliapo\Documents\DJAKO.jpg

[2010.11.04 18:07:37 | 000,435,879 | ---- | C] () -- C:\Users\iliapo\DSC02016.JPG

[2010.11.04 18:07:37 | 000,384,499 | ---- | C] () -- C:\Users\iliapo\DSC02017.JPG

[2010.11.04 18:07:37 | 000,326,739 | ---- | C] () -- C:\Users\iliapo\DSC02015.JPG

[2010.11.03 20:25:48 | 000,409,567 | ---- | C] () -- C:\Users\iliapo\Documents\Fahradin Fahradinov.jpg

[2010.11.03 19:39:18 | 000,132,591 | ---- | C] () -- C:\Users\iliapo\Documents\Без име.png

[2010.11.03 18:55:13 | 000,960,656 | ---- | C] () -- C:\Users\iliapo\02112010860.jpg

[2010.11.03 18:55:09 | 001,076,867 | ---- | C] () -- C:\Users\iliapo\02112010857.jpg

[2010.11.03 18:55:09 | 000,502,709 | ---- | C] () -- C:\Users\iliapo\02112010855.jpg

[2010.11.03 18:55:09 | 000,455,451 | ---- | C] () -- C:\Users\iliapo\02112010854.jpg

[2010.11.03 18:55:09 | 000,386,808 | ---- | C] () -- C:\Users\iliapo\02112010856.jpg

[2010.11.03 18:55:09 | 000,374,716 | ---- | C] () -- C:\Users\iliapo\02112010853.jpg

[2010.11.03 18:55:02 | 001,027,970 | ---- | C] () -- C:\Users\iliapo\02112010858.jpg

[2010.11.03 18:55:02 | 000,731,261 | ---- | C] () -- C:\Users\iliapo\02112010859.jpg

[2010.11.03 18:55:02 | 000,374,534 | ---- | C] () -- C:\Users\iliapo\03112010865.jpg

[2010.11.03 18:55:02 | 000,363,105 | ---- | C] () -- C:\Users\iliapo\03112010864.jpg

[2010.11.02 15:11:20 | 000,001,103 | ---- | C] () -- C:\Users\iliapo\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Microsoft Office Outlook.lnk

[2010.10.31 14:14:23 | 000,291,940 | ---- | C] () -- C:\Users\iliapo\01112010850.jpg

[2010.10.30 14:53:01 | 000,046,941 | ---- | C] () -- C:\Users\iliapo\Documents\Zarichka.jpg

[2010.10.30 14:49:15 | 000,318,292 | ---- | C] () -- C:\Users\iliapo\Documents\taaz_makeover(3).jpg

[2010.10.30 14:46:55 | 003,432,608 | ---- | C] () -- C:\Users\iliapo\Documents\IMGP2005.JPG

[2010.10.30 14:46:22 | 003,439,717 | ---- | C] () -- C:\Users\iliapo\Documents\IMGP2001.JPG

[2010.10.30 14:44:23 | 003,656,565 | ---- | C] () -- C:\Users\iliapo\Documents\IMGP1955.JPG

[2010.10.29 18:48:37 | 000,211,968 | ---- | C] () -- C:\Users\iliapo\Desktop\ApplicationForm_Roma_Business2.doc

[2010.10.16 18:15:28 | 000,000,051 | ---- | C] () -- C:\Users\iliapo\AppData\Local\Kosong.Bron.Tok.txt

[2010.10.10 14:30:59 | 000,153,600 | ---- | C] () -- C:\Windows\System32\WSContextMenu.dll

[2010.09.30 21:21:42 | 000,005,632 | ---- | C] () -- C:\Users\iliapo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010.09.26 12:16:10 | 000,084,480 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll

[2010.09.18 21:48:55 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll

[2010.09.18 21:15:30 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini

[2010.09.18 08:04:36 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI

[2010.09.18 07:46:28 | 000,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys

[2010.09.17 11:40:25 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat

[2009.07.13 15:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll

[2009.07.13 15:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll

[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\winlogon.exe

[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\smss.exe

[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\services.exe

[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\lsass.exe

[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\inetinfo.exe

[2008.12.30 16:02:38 | 000,042,617 | ---- | C] () -- C:\Users\iliapo\AppData\Local\csrss.exe

[2003.01.07 14:05:08 | 000,002,695 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI

========== LOP Check ==========

[2010.10.16 23:11:19 | 000,000,000 | ---D | M] -- C:\Users\iliapo\AppData\Roaming\BSplayer

[2010.10.16 23:11:25 | 000,000,000 | ---D | M] -- C:\Users\iliapo\AppData\Roaming\BSplayer Pro

[2010.10.16 23:11:26 | 000,000,000 | ---D | M] -- C:\Users\iliapo\AppData\Roaming\DAEMON Tools Lite

[2010.10.16 23:11:26 | 000,000,000 | ---D | M] -- C:\Users\iliapo\AppData\Roaming\Flatcast

[2010.11.20 07:33:24 | 000,000,000 | ---D | M] -- C:\Users\iliapo\AppData\Roaming\goalbit

[2010.11.15 21:30:35 | 000,000,000 | ---D | M] -- C:\Users\iliapo\AppData\Roaming\Netscape

[2010.11.15 21:27:41 | 000,000,000 | ---D | M] -- C:\Users\iliapo\AppData\Roaming\Photodex

[2010.10.16 23:11:52 | 000,000,000 | ---D | M] -- C:\Users\iliapo\AppData\Roaming\PhotoScape

[2010.11.13 13:11:54 | 000,000,000 | ---D | M] -- C:\Users\iliapo\AppData\Roaming\Publish Providers

[2010.11.17 18:36:50 | 000,000,000 | ---D | M] -- C:\Users\iliapo\AppData\Roaming\Sony

[2010.10.30 18:47:30 | 000,000,000 | ---D | M] -- C:\Users\iliapo\AppData\Roaming\TeamViewer

[2010.11.24 19:22:46 | 000,000,000 | ---D | M] -- C:\Users\iliapo\AppData\Roaming\uTorrent

[2010.11.15 22:22:24 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

Цитирай

24 ноември 201015 г.

Сега следва една програмка на Bit Defender, която може да се изтегли от тук. Стартирай файла и виж дали има ефект. За всеки случай давам мирър на skatafka: тук.

Цитирай

1

24 ноември 201015 г.

Nologo ,от @iliapo получих съобщение по Skype преди малко,че нето му бил спрял,но сега заралията заспал най-вероятно и утре ще продължите! :ph34r:

Цитирай

25 ноември 201015 г.

Тъй като ми се появиха няколко нови файла ги архивирах и ги качих ТУК

Лога, който си качил на ето този линк: ....

има или вирус, или някакъв зловреден софтуер, защото Аваста ми изпищя, и блокира достъпа ми за повторно посещение на този линк.

Този коментар е редактиран от nologo: Линковете към този лог са премахнати, мерси.

Редактирано 25 ноември 201015 г. от nologo
Изтрит линк към файлове (преглед на промените)

Цитирай

26 ноември 201015 г.

Автор

Извинявам се за закъснението но не бях виновен, негова "милост" интернетът прекъсна. Проблема с бонтака мисля че вече е разрешен, повече това съобщение не излезе, но проблема с папките които се появяват все още не е разрешен.

Цитирай

26 ноември 201015 г.

Това въобще не е добре. Ето какво следва:

Стъпка 1

Деинсталирайте OTL. Ето как:

Стартирайте OTL.exe още веднъж и натиснете бутона CleanUp!

Публикувано изображение

При дeинсталацията на OTL ще бъдат почистени инструменти и файлове, които използвахме в темата. Ще последва рестарт на Windows.

Стъпка 2

Следвайте следната инструкция за проверка с Kaspersky Online Scanner:

Отидете на тази страница.
Прочетете условията за използване и се съгласете с натискане на Accept.
Ще последва изтегляне и инсталиране на скенера и дефинициите. Потвърдете с Run инсталацията.
След като приключи инсталацията, отидете на Settings. Проверете дали има отметки на следното: Spyware, Adware, Dialers, and other potentially dangerous programs, Archives и Mail databases.
Ако няма отметки, поставете ги и натиснете бутона Save.
Стартирайте сканирането (My Computer под Scan). Когато сканирането завърши, отидете на View Scan Report. Натиснете Save Report As и изберете формат на изходния файл - TXT. Запишете го (save as) на място, където може да го намерите.
Копирайте съдържанието на лог файла и го поставете в следващия си коментар.
Забележка: сканирането продължава доста, обикновено над един час.

Ето малко помощ за работата с Kaspersky Online Scanner:

Публикувано изображение

Стъпка 3

Следвайте следната инструкция за работа с Security Check:

Изтеглете Security Check (автор: screen317) от тук или от тук и го запишете на десктопа.
Кликнете два пъти върху SecurityCheck.exe и следвайте инструкциите.
Когато програмата завърши работата си, ще се отвори един текстов документ: checkup.txt.
Копирайте съдържанието с Копирай (Copy) на checkup.txt и с Постави (Paste) го поставете в следващия си коментар.

Цитирай

2

28 ноември 201015 г.

Автор

По време на скан ми дава някаква грешка .

Цитирай

28 ноември 201015 г.

Не разбрах с какво има проблем, с Kaspersky Online Scanner или със Security Check. Както и да е, опитай да инсталираш Avira Free. След като я инсталираш, пусни сканиране и пиши какви са резултатите от това.

P.S. Избрах Avira, защото засега се справя като че ли най-добре с остатъци от Brontok.

Цитирай

18 декември 201015 г.

Автор

Проблема го реших със преинсталация на уина, бях принуден да го направя защото даже нетът ми не работеше. Все пак благодаря Ви за помощта

Цитирай

18 декември 201015 г.

Проблема го реших със преинсталация на уина, бях принуден да го направя защото даже нетът ми не работеше. Все пак благодаря Ви за помощта

За в бъдеще си прави огледален образ на C:\ вместо да преинсталираш за щяло и нещяло.

Цитирай

24 декември 201015 г.

Автор

За в бъдеще си прави огледален образ на C:\ вместо да преинсталираш за щяло и нещяло.

В смисъл?

Цитирай

Добре дошли!

2 проблема :(

Featured Replies

Добавете отговор

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)