Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.

Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

не мога да отворя контролния панел

Featured Replies

Здравейте, имам проблем с отварянето на контролния панел, диск С: ми е почти пълен, но не мога да видя с какво точно, нямам диск с Windows, ето и двата файла от сканирането, моля за помощ, благодаря ви предварително!

Attach.txt

DDS.txt

Привет, eliska777! Бих искал да погледна логовете, които ще създадат две програми. Затова моля да следвате написаното по-долу:

Стъпка 1

  • Изтеглете Malwarebytes' Anti-Malware от тук, като изберете Download Free Version.
  • Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата. При инсталацията изберете английски език (English).
  • Уверете се, че има отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware, след това кликнете на Finish. Ако има намерени по-нови обновления, тя ще ги изтегли и инсталира.
  • Стартирайте програмата и изберете Perform Quick Scan, след това кликнете на Scan.
  • Сканирането ще отнеме малко време, затова моля бъдете търпеливи.
  • Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.
  • Уверете се, че на всички редове има отметки, и кликнете Remove Selected.
  • Когато всичко бъде премахнато, логът ще бъде отворен в Notepad. Копирайте лога и го публикувайте в следващия си коментар в темата.
Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

Стъпка 2

  • Изтеглете Security Check от тук или от тук и го запишете на десктопа.
  • Кликнете два пъти върху SecurityCheck.exe и следвайте инструкциите.
  • Когато програмата завърши работата си, ще се отвори един текстов документ: checkup.txt.
  • Копирайте съдържанието с Копирай (Copy) на checkup.txt и с Постави (Paste) го поставете в следващия си коментар.
  • Автор

Здравейте,

направих двете стъпки както ми казахте, ето и резултата от вторият тест-

Results of screen317's Security Check version 0.99.12

Windows Vista Service Pack 2 (UAC is enabled)

Internet Explorer 7 Out of date!

``````````````````````````````

Antivirus/Firewall Check:

Windows Firewall Enabled!

avast! Free Antivirus

WMI entry may not exist for antivirus; attempting automatic update.

```````````````````````````````

Anti-malware/Other Utilities Check:

Malwarebytes' Anti-Malware

Flash Player Out of Date!

Adobe Flash Player 10.2.159.1

Adobe Reader 8.1.3

Out of date Adobe Reader installed!

````````````````````````````````

Process Check:

objlist.exe by Laurent

Windows Defender MSASCui.exe

Malwarebytes' Anti-Malware mbamservice.exe

Malwarebytes' Anti-Malware mbamgui.exe

Windows Defender MSASCui.exe

Mozilla Firefox AvastSvc.exe -?-

Alwil Software Avast5 AvastUI.exe

``````````End of Log````````````

Привет отново. Ще може ли все пак лог сканиране за Malwarebytes' Anti-Malware? Последните логове се намират ето тук (Logs):

Публикувано изображение

Кликнете на полследния лог и ще се отвори Notepad. Копирайте и поставете съдържанието на лога в следващия си коментар.

  • Автор

22:04:16 PC IP-BLOCK 89.28.106.23 (Type: incoming, Port: 10545, Process: utorrent.exe) 22:04:49 PC IP-BLOCK 93.183.194.234 (Type: outgoing, Port: 10545, Process: utorrent.exe) 22:05:30 PC IP-BLOCK 89.28.101.22 (Type: incoming, Port: 10545, Process: utorrent.exe) 22:05:54 PC IP-BLOCK 89.28.30.87 (Type: incoming, Port: 10545, Process: utorrent.exe) 22:08:12 PC IP-BLOCK 89.28.26.9 (Type: incoming, Port: 10545, Process: utorrent.exe)

Не е това, което очаквах. Вероятно сте инсталирали пробна версия за платения вариант на Malwarebytes' Anti-Malware. Както и да е, следва:

  • Изтеглете OTL.exe и го запазете на десктопа.
  • Стартирайте файла Публикувано изображение с двукратен клик на мишката.
  • Направете следните настройки:
Публикувано изображение

  • Под Публикувано изображение с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):
netsvcs
drivers32 /all
%SYSTEMDRIVE%\*.*
%PROGRAMFILES%\*.*
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
  • Натиснете маркираният в синьо бутон: Публикувано изображение.
  • Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt. Прикачете тези два файла в следващия си коментар (погледнете опцията "прикачени файлове", когато публикувате мнение).
  • Автор

Extras.Txt.Notepad

OTL Extras logfile created on: 6.6.2011 г. 17:13:44 - Run 1

OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\PC\Downloads

Windows Vista Service Pack 1, v.275 (Version = 6.0.6001) - Type = NTWorkstation

Internet Explorer (Version = 7.0.6001.16659)

Locale: 00000402 | Country: България | Language: BGR | Date Format: d.M.yyyy 'г.'

1014,66 Mb Total Physical Memory | 319,80 Mb Available Physical Memory | 31,52% Memory free

2,23 Gb Paging File | 1,20 Gb Available in Paging File | 53,99% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 29,30 Gb Total Space | 3,03 Gb Free Space | 10,34% Space Free | Partition Type: NTFS

Drive D: | 45,23 Gb Total Space | 36,13 Gb Free Space | 79,87% Space Free | Partition Type: NTFS

Computer Name: PC-PC | User Name: PC | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)

.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-3804988563-3351539712-772153893-1000\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()

Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)

Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)

Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)

Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

"VistaSp1" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{52129228-E867-4958-8E75-DC1330521184}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{04BEB26E-60A4-45CC-8DBF-82D5B266F1A7}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |

"{12537164-ED80-4DE5-918C-A52921F07D5E}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |

"{193A7F28-0175-4D11-B6B4-77F0F61DFD90}" = dir=in | app=c:\program files\skype\phone\skype.exe |

"{2859FF0D-2755-4541-96FB-3A803B7E3DF2}" = protocol=17 | dir=in | app=c:\program files\winamp remote\bin\orb.exe |

"{300B992E-5839-4FAA-9EFF-23EAECED0BF7}" = protocol=6 | dir=in | app=c:\program files\winamp remote\bin\orbstreamerclient.exe |

"{3069B7FF-DC53-4FE3-AB56-7EF35076D516}" = protocol=17 | dir=in | app=c:\program files\winamp remote\bin\orbstreamerclient.exe |

"{364D1CB5-0904-43B9-A709-AFCBEC025645}" = protocol=6 | dir=in | app=c:\program files\winamp remote\bin\orb.exe |

"{5A162E68-F0C5-4616-BEEA-8634CE218BB1}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |

"{5B1DA693-0631-47AE-9E26-D0B795B8B01C}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |

"{687C8A31-2321-49B9-8BC0-BA9F257F5E42}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |

"{84072FBA-06DF-4668-8EE4-A0893F83FC2F}" = protocol=6 | dir=in | app=c:\program files\winamp remote\bin\orbtray.exe |

"{8BED3D6A-4E61-49B3-813E-08BC01B175C8}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |

"{8CB7C24E-A483-4A97-86B1-BD48B197AA73}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |

"{D60BBA51-35CF-40F1-9FC5-5F2446EC37BA}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |

"{E357B182-C340-42E8-9E4A-CCEAF816BB73}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |

"{E3CAB7F6-AEDB-4F39-B3C4-21D21B81BB5F}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |

"{FF865BB1-055B-4371-95C5-24957D092225}" = protocol=17 | dir=in | app=c:\program files\winamp remote\bin\orbtray.exe |

"TCP Query User{19498F3C-3B7F-4290-8881-C15553B26577}C:\program files\google\chrome\application\chrome.exe" = protocol=6 | dir=in | app=c:\program files\google\chrome\application\chrome.exe |

"TCP Query User{401A5BA8-796F-4480-86A2-398718228DB3}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |

"TCP Query User{6C604004-A9EB-4D8A-B3F7-A02D0B96FF74}C:\program files\bitcomet\bitcomet.exe" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |

"TCP Query User{860685B9-DAA7-4346-8B0C-F13558A1A60A}C:\program files\winamp remote\bin\orbtray.exe" = protocol=6 | dir=in | app=c:\program files\winamp remote\bin\orbtray.exe |

"TCP Query User{88011E73-FDA4-48D9-B88B-373E2B095F5A}C:\program files\winamp remote\bin\orb.exe" = protocol=6 | dir=in | app=c:\program files\winamp remote\bin\orb.exe |

"TCP Query User{9947C99C-B5A1-474A-A0B3-B6E567952487}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |

"TCP Query User{B8224B9A-C758-4E73-83D3-4B8342C41F29}C:\program files\bitcomet\bitcomet.exe" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |

"TCP Query User{DF8E5931-0FB2-449A-B706-16270DF6F26B}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |

"UDP Query User{0D2C7B1C-C1C3-4CC9-83A4-420E5C241E59}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |

"UDP Query User{3E8637C4-C48F-4798-B923-57FB743F8FCA}C:\program files\winamp remote\bin\orbtray.exe" = protocol=17 | dir=in | app=c:\program files\winamp remote\bin\orbtray.exe |

"UDP Query User{5DB06CC3-248B-4495-8189-5E2248B3F789}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |

"UDP Query User{716A6B54-9206-4675-B7ED-0E9B36DAC2AA}C:\program files\bitcomet\bitcomet.exe" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |

"UDP Query User{AAFFD395-555E-4CE0-9662-072522553586}C:\program files\winamp remote\bin\orb.exe" = protocol=17 | dir=in | app=c:\program files\winamp remote\bin\orb.exe |

"UDP Query User{C87B05F9-C0EA-472C-AE9C-5EF9316139BB}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |

"UDP Query User{CD2C2082-6FD1-494F-B4B2-77D5463634DD}C:\program files\google\chrome\application\chrome.exe" = protocol=17 | dir=in | app=c:\program files\google\chrome\application\chrome.exe |

"UDP Query User{F5419F76-48C8-44B1-9FD7-E89F6723CDCD}C:\program files\bitcomet\bitcomet.exe" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{15AC0C5D-A6FB-4CE2-8CD0-28179EEB5625}" = Nokia Connectivity Cable Driver

"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86

"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer

"{2CCBABCB-6427-4A55-B091-49864623C43F}" = Google Toolbar for Firefox

"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons 6.30 J1

"{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Земя

"{497A1721-088F-41EF-8876-B43C9DA5528B}" = Software Suite

"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime

"{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}" = Nokia PC Suite

"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin

"{6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}" = Safari

"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{779DECD7-E072-4B56-9B6B-BEB5973EEEB5}" = MobileMe Control Panel

"{7987E039-159B-4A0F-963E-696F04704E5C}" = Nokia Download!

"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112614887}" = Big City Adventure San Francisco

"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-114643957}" = Big City Adventure Sydney

"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115050127}" = Mystery PI The Vegas Heist

"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115228113}" = The Clumsys

"{853A4763-6643-4604-8D64-28BDD8925F4C}" = Apple Application Support

"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask.com Toolbar

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{90120000-0012-0000-0000-0000000FF1CE}" = Microsoft Office Standard 2007

"{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)

"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007

"{90120000-0016-0409-0000-0000000FF1CE}_STANDARD_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)

"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007

"{90120000-0018-0409-0000-0000000FF1CE}_STANDARD_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)

"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007

"{90120000-001A-0409-0000-0000000FF1CE}_STANDARD_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)

"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007

"{90120000-001B-0409-0000-0000000FF1CE}_STANDARD_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)

"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007

"{90120000-001F-0409-0000-0000000FF1CE}_STANDARD_{3EC77D26-799B-4CD8-914F-C1565E796173}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)

"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007

"{90120000-001F-040C-0000-0000000FF1CE}_STANDARD_{430971B1-C31E-45DA-81E0-72C095BAB72C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)

"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007

"{90120000-001F-0C0A-0000-0000000FF1CE}_STANDARD_{F7A31780-33C4-4E39-951A-5EC9B91D7BF1}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)

"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007

"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007

"{90120000-006E-0409-0000-0000000FF1CE}_STANDARD_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)

"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007

"{90120000-0115-0409-0000-0000000FF1CE}_STANDARD_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)

"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3

"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager

"{9333DA9B-4F8C-4580-88A7-F12D7B10DC2A}" = Nokia Music

"{93D44E47-EBE0-43FC-A427-8AC3CD026536}" = Vista Default Settings

"{97CB5A86-4887-4919-A251-FBF6414A200D}" = Philips SPC220NC Webcam

"{9A9DBEBC-C800-4776-A970-D76D6AA405B1}" = PHOTOfunSTUDIO -viewer-

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.3

"{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour

"{C38F2799-C974-4FED-96E1-D586B32FE52B}" = Player 1.3.0.3

"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update

"{CACAEB5F-174D-4C7C-AC56-A33289A807CA}" = Apple Mobile Device Support

"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection

"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars

"{CECB7782-F35F-45CE-97C0-74BBBDC51C22}" = Webcam Video Viewer

"{D32067CD-7409-4792-BFA0-1469BCD8F0C8}" = HP Wireless Assistant

"{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}" = Full Tilt Poker

"{D848D140-41C3-4A53-86D8-E866A100B4CD}" = PC Connectivity Solution

"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1

"{F59A9E08-A6A4-4ACF-91F2-D0344956C30B}" = iTunes

"{FF11004C-F42A-4A31-9BCF-7F5C8FDBE53C}" = Adobe Setup

"0C5EDC3653FED5B121F464339EAC12534D253B25" = Windows Driver Package - Nokia Modem (02/15/2007 3.1)

"504244733D18C8F63FF584AEB290E3904E791693" = Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)

"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Adobe Photoshop 6.0" = Adobe Photoshop 6.0

"Adobe SVG Viewer" = Adobe SVG Viewer

"Adobe_719d6f144d0c086a0dfa7ff76bb9ac1" = Adobe Photoshop CS3

"avast" = avast! Free Antivirus

"B726756F5B5A5AA9D798B399386FC6205A45F19E" = Windows Driver Package - Nokia Modem (02/15/2007 3.1)

"Big City Adventure - San Francisco" = Big City Adventure - San Francisco

"Big City Adventures-Sydney Australia1.0" = Big City Adventures-Sydney Australia

"Broadcom 802.11b Network Adapter" = Broadcom 802.11 адаптер за безжични мрежи

"BSPlayerf" = BS.Player FREE powered by AdVantage

"CD8424B9400BFF7D34AA18F816C71322AC4BDAA7" = Windows Driver Package - Nokia Modem (05/24/2007 6.84.0.1)

"CNXT_AUDIO_HDA" = Conexant HD Audio

"CNXT_MODEM_HDA_HSF" = HDAUDIO Soft Data Fax Modem with SmartCP

"conduitEngine" = Conduit Engine

"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0

"FlashGet(JetCar)" = FlashGet(JetCar)

"Google Chrome" = Google Chrome

"Google Updater" = Google Updater

"HDMI" = Intel® Graphics Media Accelerator Driver

"KLiteCodecPack_is1" = K-Lite Codec Pack 2.71 Full

"Mozilla Firefox 4.0.1 (x86 bg)" = Mozilla Firefox 4.0.1 (x86 bg)

"Nokia PC Suite" = Nokia PC Suite

"Orb" = Winamp Remote

"SA Dictionary 2005 T2" = SA Dictionary 2005 T2

"Samantha Swift and the Golden Touch_is1" = Samantha Swift and the Golden Touch

"STANDARD" = Microsoft Office Standard 2007

"SynTPDeinstKey" = Synaptics Pointing Device Driver

"uTorrent" = µTorrent

"VLC media player" = VLC media player 1.1.9

"Winamp" = Winamp

"Winamp Toolbar for Firefox" = Winamp Toolbar for Firefox

"WinRAR archiver" = WinRAR archiver

"Yahoo! Companion" = Yahoo! Toolbar

"Yahoo! Toolbar" = Yahoo! Toolbar

========== Last 10 Event Log Errors ==========

[ Application Events ]

Error - 3.6.2011 г. 01:54:37 | Computer Name = PC-PC | Source = Software Licensing Service | ID = 8193

Description = License Activation Scheduler (SLUINotify.dll) failed with the following

error code: 0x80004005

Error - 4.6.2011 г. 01:51:55 | Computer Name = PC-PC | Source = Software Licensing Service | ID = 8193

Description = License Activation Scheduler (SLUINotify.dll) failed with the following

error code: 0x80004005

Error - 4.6.2011 г. 02:32:26 | Computer Name = PC-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description =

Error - 4.6.2011 г. 02:45:41 | Computer Name = PC-PC | Source = WinMgmt | ID = 10

Description =

Error - 4.6.2011 г. 03:00:40 | Computer Name = PC-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description =

Error - 4.6.2011 г. 03:00:43 | Computer Name = PC-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description =

Error - 4.6.2011 г. 03:00:47 | Computer Name = PC-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description =

Error - 4.6.2011 г. 17:10:02 | Computer Name = PC-PC | Source = Software Licensing Service | ID = 8193

Description = License Activation Scheduler (SLUINotify.dll) failed with the following

error code: 0x80004005

Error - 5.6.2011 г. 15:54:36 | Computer Name = PC-PC | Source = Software Licensing Service | ID = 8193

Description = License Activation Scheduler (SLUINotify.dll) failed with the following

error code: 0x80004005

Error - 6.6.2011 г. 09:43:47 | Computer Name = PC-PC | Source = WinMgmt | ID = 10

Description =

[ System Events ]

Error - 6.2.2010 г. 18:37:08 | Computer Name = PC-PC | Source = Ntfs | ID = 262199

Description = The file system structure on the disk is corrupt and unusable. Please

run the chkdsk utility on the volume C:.

Error - 6.2.2010 г. 18:37:08 | Computer Name = PC-PC | Source = Ntfs | ID = 262199

Description = The file system structure on the disk is corrupt and unusable. Please

run the chkdsk utility on the volume C:.

Error - 6.2.2010 г. 18:37:08 | Computer Name = PC-PC | Source = Ntfs | ID = 262199

Description = The file system structure on the disk is corrupt and unusable. Please

run the chkdsk utility on the volume C:.

Error - 6.2.2010 г. 18:38:25 | Computer Name = PC-PC | Source = Ntfs | ID = 262199

Description = The file system structure on the disk is corrupt and unusable. Please

run the chkdsk utility on the volume C:.

Error - 6.2.2010 г. 18:38:25 | Computer Name = PC-PC | Source = Ntfs | ID = 262199

Description = The file system structure on the disk is corrupt and unusable. Please

run the chkdsk utility on the volume C:.

Error - 6.2.2010 г. 18:38:25 | Computer Name = PC-PC | Source = Ntfs | ID = 262199

Description = The file system structure on the disk is corrupt and unusable. Please

run the chkdsk utility on the volume C:.

Error - 6.2.2010 г. 18:38:25 | Computer Name = PC-PC | Source = Ntfs | ID = 262199

Description = The file system structure on the disk is corrupt and unusable. Please

run the chkdsk utility on the volume C:.

Error - 6.2.2010 г. 18:39:04 | Computer Name = PC-PC | Source = Ntfs | ID = 262199

Description = The file system structure on the disk is corrupt and unusable. Please

run the chkdsk utility on the volume C:.

Error - 6.2.2010 г. 19:19:39 | Computer Name = PC-PC | Source = Service Control Manager | ID = 7024

Description =

Error - 6.2.2010 г. 20:24:20 | Computer Name = PC-PC | Source = Service Control Manager | ID = 7024

Description =

< End of report >

OTL.Txt-Notepad

OTL logfile created on: 6.6.2011 г. 17:13:43 - Run 1

OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\PC\Downloads

Windows Vista Service Pack 1, v.275 (Version = 6.0.6001) - Type = NTWorkstation

Internet Explorer (Version = 7.0.6001.16659)

Locale: 00000402 | Country: България | Language: BGR | Date Format: d.M.yyyy 'г.'

1014,66 Mb Total Physical Memory | 319,80 Mb Available Physical Memory | 31,52% Memory free

2,23 Gb Paging File | 1,20 Gb Available in Paging File | 53,99% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 29,30 Gb Total Space | 3,03 Gb Free Space | 10,34% Space Free | Partition Type: NTFS

Drive D: | 45,23 Gb Total Space | 36,13 Gb Free Space | 79,87% Space Free | Partition Type: NTFS

Computer Name: PC-PC | User Name: PC | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\PC\Downloads\OTL.exe (OldTimer Tools)

PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)

PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

PRC - C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)

PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)

PRC - C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)

PRC - C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe ()

PRC - C:\Program Files\Winamp Remote\bin\orbtray.exe (Orb Networks)

PRC - C:\Program Files\Winamp Remote\bin\Orb.exe (Orb Networks, Inc.)

PRC - C:\Program Files\Panasonic\PHOTOfunSTUDIO -viewer-\PhAutoRun.exe (Matsushita Electric Industrial Co., Ltd.)

PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)

PRC - C:\Windows\explorer.exe (Microsoft Corporation)

PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

PRC - C:\Program Files\Philips\Philips SPC220NC Webcam\TrayMin220.exe ()

PRC - C:\Windows\Philips\SPC220NC\Monitor.exe (PixArt Imaging Incorporation)

========== Modules (SafeList) ==========

MOD - C:\Users\PC\Downloads\OTL.exe (OldTimer Tools)

MOD - C:\Program Files\Alwil Software\Avast5\snxhk.dll (AVAST Software)

MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.16659_none_5cdfda200835e6c0\comctl32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)

SRV - (ACDaemon) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)

SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)

SRV - (IAANTMON) Intel® -- C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe (Intel Corporation)

SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)

SRV - (Com4Qlb) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe (Hewlett-Packard Development Company, L.P.)

========== Driver Services (SafeList) ==========

DRV - (aswSnx) -- C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)

DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (AVAST Software)

DRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)

DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (AVAST Software)

DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software)

DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)

DRV - (UsbserFilt) -- C:\Windows\System32\drivers\usbser_lowerfltj.sys (Windows ® Codename Longhorn DDK provider)

DRV - (nmwcdc) -- C:\Windows\System32\drivers\ccdcmbo.sys (Nokia)

DRV - (nmwcd) -- C:\Windows\System32\drivers\ccdcmb.sys (Nokia)

DRV - (upperdev) -- C:\Windows\System32\drivers\usbser_lowerflt.sys (Windows ® Codename Longhorn DDK provider)

DRV - (pccsmcfd) -- C:\Windows\System32\drivers\pccsmcfd.sys (Nokia)

DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()

DRV - (CnxtHdAudService) -- C:\Windows\System32\drivers\CHDRT32.sys (Conexant Systems Inc.)

DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)

DRV - (HpqKbFiltr) -- C:\Windows\System32\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)

DRV - (HdAudAddService) -- C:\Windows\System32\drivers\CHDART.sys (Conexant Systems Inc.)

DRV - (SPC220NC) -- C:\Windows\System32\drivers\SPC220NC.SYS (PixArt Imaging Inc.)

DRV - (HBtnKey) -- C:\Windows\System32\drivers\CPQBttn.sys (Hewlett-Packard Development Company, L.P.)

DRV - (Afc) -- C:\Windows\System32\drivers\afc.sys (Arcsoft, Inc.)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr9/*http://www.yahoo.com/ext/search/search.html

IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)

IE - HKLM\..\URLSearchHook: {ce0c2586-da36-452b-acdb-320d9bcb19bf} - File not found

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.Google.com

IE - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.Google.com

IE - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.Google.com/

IE - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/

IE - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1

IE - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.Google.com/

IE - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.Google.com/

IE - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)

IE - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google"

FF - prefs.js..browser.search.defaultthis.engineName: " "

FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=3&q={searchTerms}"

FF - prefs.js..browser.search.selectedEngine: "DAEMON Search"

FF - prefs.js..browser.search.suggest.enabled: false

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "http://www.google.bg/"

FF - prefs.js..keyword.URL: "http://www.google.com/search?sourceid=navclient&hl=bg&q="

FF - prefs.js..network.proxy.no_proxies_on: "*.local"

FF - prefs.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2011.01.07 00:16:47 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.05.11 18:45:41 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.05.11 18:45:41 | 000,000,000 | ---D | M]

[2010.10.25 22:13:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\Extensions

[2011.01.07 01:16:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\Firefox\Profiles\b01lbo5j.default\extensions

[2010.11.18 13:53:44 | 000,000,863 | ---- | M] () -- C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\b01lbo5j.default\searchplugins\conduit.xml

[2010.10.25 22:12:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions

File not found (No name found) --

[2011.01.07 00:16:47 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\PROGRAMDATA\GOOGLE\TOOLBAR FOR FIREFOX\{3112CA9C-DE6D-4884-A869-9855DE68056C}

[2011.05.09 14:25:36 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll

[2011.05.09 14:25:39 | 000,001,083 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\911bg.xml

[2011.05.09 14:25:39 | 000,002,442 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\diribg.xml

[2011.05.09 14:25:39 | 000,001,515 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pe-bg.xml

[2011.05.09 14:25:39 | 000,001,857 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\portalbgdict.xml

[2011.05.09 14:25:39 | 000,001,220 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-bg.xml

O1 HOSTS File: ([2006.09.19 00:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O1 - Hosts: ::1 localhost

O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - File not found

O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)

O2 - BHO: (IeCatch2 Class) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll (Amaze Soft)

O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)

O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)

O2 - BHO: (iWin Toolbar) - {ce0c2586-da36-452b-acdb-320d9bcb19bf} - File not found

O2 - BHO: (Ask.com Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - File not found

O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - File not found

O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (iWin Toolbar) - {ce0c2586-da36-452b-acdb-320d9bcb19bf} - File not found

O3 - HKLM\..\Toolbar: (Ask.com Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - File not found

O3 - HKLM\..\Toolbar: (FlashGet Bar) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll (Amaze Soft)

O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - File not found

O3 - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)

O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)

O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)

O4 - HKLM..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)

O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] File not found

O4 - HKLM..\Run: [Monitor] C:\Windows\Philips\SPC220NC\Monitor.exe (PixArt Imaging Incorporation)

O4 - HKLM..\Run: [Nokia FastStart] File not found

O4 - HKLM..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe ()

O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)

O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

O4 - HKU\.DEFAULT..\Run: [Nokia.PCSync] File not found

O4 - HKU\S-1-5-18..\Run: [Nokia.PCSync] File not found

O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)

O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)

O4 - HKU\S-1-5-21-3804988563-3351539712-772153893-1000..\Run: [bitComet] File not found

O4 - HKU\S-1-5-21-3804988563-3351539712-772153893-1000..\Run: [PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)

O4 - HKU\S-1-5-21-3804988563-3351539712-772153893-1000..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)

O4 - HKU\S-1-5-21-3804988563-3351539712-772153893-1000..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)

O8 - Extra context menu item: Download All by FlashGet - C:\PROGRA~1\FlashGet\jc_all.htm ()

O8 - Extra context menu item: Download using FlashGet - C:\PROGRA~1\FlashGet\jc_link.htm ()

O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll (Google Inc.)

O9 - Extra Button: StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - File not found

O9 - Extra 'Tools' menuitem : StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - File not found

O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)

O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - File not found

O9 - Extra 'Tools' menuitem : &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - File not found

O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O13 - gopher Prefix: missing

O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab (Facebook Photo Uploader 5 Control)

O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files/Dream%20Day%20Wedding%20-%20Viva%20Las%20Vegas/Images/stg_drm.ocx (SpinTop DRM Control)

O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab (HpProductDetection Class)

O16 - DPF: {7A408D93-67FD-43FC-8DD4-D46701A7A07D} http://91.191.210.46/nvEPLMedia.dll (AEPLMedia Class)

O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files/Fishdom%20H2O%20-%20Hidden%20Odyssey/Images/armhelper.ocx (ArmHelper Control)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O24 - Desktop WallPaper: C:\Users\PC\AppData\Roaming\Microsoft\Windows Photo Gallery\Тапет от фотогалерията на Windows.jpg

O24 - Desktop BackupWallPaper: C:\Users\PC\AppData\Roaming\Microsoft\Windows Photo Gallery\Тапет от фотогалерията на Windows.jpg

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2006.09.19 00:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found

NetSvcs: Ias - File not found

NetSvcs: Nla - File not found

NetSvcs: Ntmssvc - File not found

NetSvcs: NWCWorkstation - File not found

NetSvcs: Nwsapagent - File not found

NetSvcs: SRService - File not found

NetSvcs: WmdmPmSp - File not found

NetSvcs: LogonHours - File not found

NetSvcs: PCAudit - File not found

NetSvcs: helpsvc - File not found

NetSvcs: uploadmgr - File not found

Drivers32: aux - C:\Windows\System32\wdmaud.drv (Microsoft Corporation)

Drivers32: midi - C:\Windows\System32\wdmaud.drv (Microsoft Corporation)

Drivers32: midimapper - C:\Windows\System32\midimap.dll (Microsoft Corporation)

Drivers32: mixer - C:\Windows\System32\wdmaud.drv (Microsoft Corporation)

Drivers32: msacm.ac3acm - C:\Windows\System32\ac3acm.acm (fccHandler)

Drivers32: msacm.imaadpcm - C:\Windows\System32\imaadp32.acm (Microsoft Corporation)

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.l3fhg - C:\Windows\System32\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.msadpcm - C:\Windows\System32\msadp32.acm (Microsoft Corporation)

Drivers32: msacm.msg711 - C:\Windows\System32\msg711.acm (Microsoft Corporation)

Drivers32: msacm.msgsm610 - C:\Windows\System32\msgsm32.acm (Microsoft Corporation)

Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)

Drivers32: VIDC.3iv2 - C:\Windows\System32\3ivxVfWCodec.dll (3ivx.com)

Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)

Drivers32: VIDC.DIVX - C:\Windows\System32\divx.dll (DivX, Inc.)

Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()

Drivers32: vidc.i420 - C:\Windows\System32\iyuv_32.dll (Microsoft Corporation)

Drivers32: VIDC.IYUV - C:\Windows\System32\iyuv_32.dll (Microsoft Corporation)

Drivers32: vidc.mrle - C:\Windows\System32\msrle32.dll (Microsoft Corporation)

Drivers32: vidc.msvc - C:\Windows\System32\msvidc32.dll (Microsoft Corporation)

Drivers32: VIDC.UYVY - C:\Windows\System32\msyuv.dll (Microsoft Corporation)

Drivers32: VIDC.VP31 - C:\Windows\System32\vp31vfw.dll (On2.com)

Drivers32: VIDC.VP60 - C:\Windows\System32\vp6vfw.dll (On2.com)

Drivers32: VIDC.VP61 - C:\Windows\System32\vp6vfw.dll (On2.com)

Drivers32: VIDC.VP62 - C:\Windows\System32\vp6vfw.dll (On2.com)

Drivers32: VIDC.VP70 - C:\Windows\System32\vp7vfw.dll (On2.com)

Drivers32: VIDC.wmv3 - C:\Windows\System32\WMV9VCM.dll (Microsoft Corporation)

Drivers32: VIDC.X264 - C:\Windows\System32\x264vfw.dll ()

Drivers32: VIDC.XVID - C:\Windows\System32\xvidvfw.dll ()

Drivers32: VIDC.YUY2 - C:\Windows\System32\msyuv.dll (Microsoft Corporation)

Drivers32: VIDC.YVU9 - C:\Windows\System32\tsbyuv.dll (Microsoft Corporation)

Drivers32: VIDC.YVYU - C:\Windows\System32\msyuv.dll (Microsoft Corporation)

Drivers32: wave - C:\Windows\System32\wdmaud.drv (Microsoft Corporation)

Drivers32: wavemapper - C:\Windows\System32\msacm32.drv (Microsoft Corporation)

========== Files/Folders - Created Within 30 Days ==========

[2011.06.04 09:31:02 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Malwarebytes

[2011.06.04 09:30:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2011.06.02 18:46:45 | 000,441,176 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys

[2011.05.31 09:14:41 | 000,606,738 | R--- | C] (Swearware) -- C:\Users\PC\Desktop\dds.scr

[2011.05.24 22:17:34 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\dvdcss

[2011.05.24 21:37:14 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\PC\AppData\Roaming\pcouffin.sys

[2011.05.24 21:37:14 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Vso

[2011.05.24 21:37:14 | 000,000,000 | ---D | C] -- C:\Users\PC\Documents\PcSetup

[2011.05.23 10:34:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

[2011.05.22 21:19:25 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Local\Sony Corporation

[2011.05.22 21:01:40 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Media Player Classic

[2011.05.11 18:52:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

[2011.05.11 18:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\iPod

[2011.05.11 18:50:32 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes

[2011.05.11 18:50:32 | 000,000,000 | ---D | C] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

[2011.05.11 18:44:37 | 000,000,000 | ---D | C] -- C:\Program Files\MpcStar

[2011.05.11 18:44:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer

[2011.05.11 18:43:29 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update

[2011.05.11 18:39:13 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour

[2011.05.11 18:39:07 | 000,000,000 | -HSD | C] -- C:\Config.Msi

[2009.01.28 21:57:02 | 007,321,032 | ---- | C] (DT Soft Ltd.) -- C:\Users\PC\AppData\Roaming\daemon4303-lite.exe

========== Files - Modified Within 30 Days ==========

[2011.06.06 17:15:06 | 000,004,784 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2011.06.06 17:15:06 | 000,004,784 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2011.06.06 17:12:30 | 000,000,986 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2011.06.06 17:11:12 | 000,001,971 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2011.06.06 16:49:51 | 000,595,342 | ---- | M] () -- C:\Windows\System32\perfh009.dat

[2011.06.06 16:49:51 | 000,104,544 | ---- | M] () -- C:\Windows\System32\perfc009.dat

[2011.06.06 16:45:49 | 000,000,868 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job

[2011.06.06 16:43:23 | 000,000,982 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2011.06.06 16:42:37 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2011.06.06 16:42:33 | 1064,755,200 | -HS- | M] () -- C:\hiberfil.sys

[2011.06.02 18:46:44 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt

[2011.06.01 08:55:46 | 004,450,103 | ---- | M] () -- C:\Users\PC\Desktop\IMGP9592.JPG

[2011.06.01 08:55:46 | 003,508,642 | ---- | M] () -- C:\Users\PC\Desktop\IMGP9602.JPG

[2011.05.31 09:14:56 | 000,606,738 | R--- | M] (Swearware) -- C:\Users\PC\Desktop\dds.scr

[2011.05.24 22:17:17 | 000,026,624 | ---- | M] () -- C:\Users\PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011.05.24 21:37:14 | 000,087,608 | ---- | M] () -- C:\Users\PC\AppData\Roaming\inst.exe

[2011.05.24 21:37:14 | 000,047,360 | ---- | M] (VSO Software) -- C:\Users\PC\AppData\Roaming\pcouffin.sys

[2011.05.24 21:37:14 | 000,007,887 | ---- | M] () -- C:\Users\PC\AppData\Roaming\pcouffin.cat

[2011.05.24 21:37:14 | 000,001,144 | ---- | M] () -- C:\Users\PC\AppData\Roaming\pcouffin.inf

[2011.05.23 10:34:18 | 000,000,859 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk

[2011.05.17 08:44:27 | 000,001,854 | ---- | M] () -- C:\Users\Public\Desktop\Safari.lnk

[2011.05.11 18:52:06 | 000,001,664 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk

[2011.05.11 18:45:09 | 000,001,925 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk

[2011.05.10 15:10:59 | 000,040,112 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr

[2011.05.10 15:10:55 | 000,199,304 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe

[2011.05.10 15:03:54 | 000,441,176 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys

[2011.05.10 15:03:44 | 000,307,928 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys

[2011.05.10 15:02:37 | 000,049,240 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys

[2011.05.10 14:59:56 | 000,025,432 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys

[2011.05.10 14:59:44 | 000,053,592 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys

[2011.05.10 14:59:35 | 000,019,544 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys

========== Files Created - No Company Name ==========

[2011.06.01 08:56:45 | 003,508,642 | ---- | C] () -- C:\Users\PC\Desktop\IMGP9602.JPG

[2011.06.01 08:56:39 | 004,450,103 | ---- | C] () -- C:\Users\PC\Desktop\IMGP9592.JPG

[2011.05.24 21:37:14 | 000,087,608 | ---- | C] () -- C:\Users\PC\AppData\Roaming\inst.exe

[2011.05.24 21:37:14 | 000,007,887 | ---- | C] () -- C:\Users\PC\AppData\Roaming\pcouffin.cat

[2011.05.24 21:37:14 | 000,001,144 | ---- | C] () -- C:\Users\PC\AppData\Roaming\pcouffin.inf

[2011.05.23 10:34:18 | 000,000,859 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk

[2011.05.17 08:44:27 | 000,001,854 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk

[2011.05.11 18:52:06 | 000,001,664 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk

[2011.05.11 18:45:09 | 000,001,925 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk

[2011.05.09 14:25:47 | 000,000,858 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

[2008.12.11 17:14:02 | 000,141,248 | ---- | C] () -- C:\Users\PC\AppData\Roaming\NMM-MetaData.db

[2008.09.30 11:47:29 | 000,000,000 | ---- | C] () -- C:\Windows\PROTOCOL.INI

[2008.08.14 22:20:06 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat

[2008.08.14 22:20:06 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat

[2008.08.14 22:20:06 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat

[2008.08.14 22:20:06 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat

[2008.08.14 22:20:06 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat

[2008.08.14 22:20:06 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat

[2008.08.14 22:20:06 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat

[2008.08.14 22:20:06 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat

[2008.08.14 22:20:06 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat

[2008.08.14 22:20:06 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat

[2008.08.14 22:20:06 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat

[2008.08.14 22:20:06 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat

[2008.08.14 22:20:06 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat

[2008.08.14 22:20:06 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat

[2008.08.14 22:20:06 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat

[2008.08.14 22:20:06 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat

[2008.08.14 22:20:06 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat

[2008.08.14 22:20:06 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat

[2008.08.14 22:20:06 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini

[2008.07.22 17:45:51 | 000,000,518 | ---- | C] () -- C:\Windows\System32\SPC220NC.INI

[2008.06.19 11:19:38 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat

[2008.06.17 21:56:09 | 000,024,206 | ---- | C] () -- C:\Users\PC\AppData\Roaming\UserTile.png

[2008.06.16 22:50:37 | 000,000,290 | RHS- | C] () -- C:\ProgramData\ntuser.pol

[2008.06.16 22:47:10 | 000,026,624 | ---- | C] () -- C:\Users\PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2008.06.13 17:35:56 | 000,540,178 | ---- | C] () -- C:\Windows\System32\x264vfw.dll

[2008.06.13 17:35:55 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll

[2008.06.13 17:35:54 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll

[2008.06.13 17:35:51 | 000,006,144 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll

[2008.06.13 17:35:48 | 000,019,968 | ---- | C] () -- C:\Windows\System32\cpuinf32.dll

[2008.06.13 17:30:35 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI

[2007.09.18 02:29:21 | 000,100,043 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin

[2007.08.25 01:46:48 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1322.dll

[2007.03.29 23:00:40 | 000,203,264 | ---- | C] () -- C:\Windows\System32\CddbCdda.dll

[2006.11.02 15:53:49 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat

[2006.11.02 15:44:53 | 000,333,872 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT

[2006.11.02 13:33:01 | 000,595,342 | ---- | C] () -- C:\Windows\System32\perfh009.dat

[2006.11.02 13:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat

[2006.11.02 13:33:01 | 000,104,544 | ---- | C] () -- C:\Windows\System32\perfc009.dat

[2006.11.02 13:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat

[2006.11.02 13:25:21 | 000,249,856 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll

[2006.11.02 13:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat

[2006.11.02 11:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin

[2006.11.02 11:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT

[2006.11.02 10:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini

[2006.11.02 10:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat

[2006.11.02 10:22:43 | 000,018,271 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin

[2006.03.09 09:58:00 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll

[2005.10.14 12:56:50 | 000,921,600 | ---- | C] () -- C:\Windows\System32\VorbisEnc.dll

[2005.10.14 12:56:50 | 000,778,240 | ---- | C] () -- C:\Windows\System32\DivXsm.exe

[2005.10.14 12:56:50 | 000,761,856 | ---- | C] () -- C:\Windows\System32\xvidcore.dll

[2005.10.14 12:56:50 | 000,344,064 | ---- | C] () -- C:\Windows\System32\xvid.dll

[2005.10.14 12:56:50 | 000,237,568 | ---- | C] () -- C:\Windows\System32\OggDS.dll

[2005.10.14 12:56:50 | 000,188,416 | ---- | C] () -- C:\Windows\System32\vorbis.dll

[2005.10.14 12:56:50 | 000,155,136 | ---- | C] () -- C:\Windows\System32\unrar.dll

[2005.10.14 12:56:50 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ogg.dll

========== LOP Check ==========

[2009.05.14 21:01:00 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Anabel

[2009.05.12 23:23:51 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\blg

[2008.08.09 22:17:15 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\BSplayer

[2008.08.09 22:06:04 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\BSplayer Pro

[2009.04.21 22:02:51 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\DAEMON Tools

[2011.01.06 22:57:39 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\DAEMON Tools Lite

[2009.04.21 21:46:18 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\DAEMON Tools Pro

[2008.12.11 16:49:57 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Nokia

[2008.08.15 18:02:14 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Panasonic

[2008.12.08 23:42:04 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\PC Suite

[2009.08.24 21:17:24 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Playrix Entertainment

[2009.01.23 23:15:34 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Restorer

[2010.07.22 22:09:20 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\TigerPlayer

[2011.06.06 16:43:21 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\uTorrent

[2011.05.24 21:37:59 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Vso

[2011.06.06 16:41:31 | 000,032,634 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >

[2006.09.19 00:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat

[2008.06.13 17:08:28 | 000,000,086 | ---- | M] () -- C:\bcmwl6.log

[2007.09.18 02:29:49 | 000,332,497 | RHS- | M] () -- C:\bootmgr

[2008.06.14 02:45:06 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK

[2006.09.19 00:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys

[2009.10.17 21:05:00 | 000,000,045 | ---- | M] () -- C:\error.log

[2008.06.13 16:20:31 | 000,171,136 | RHS- | M] () -- C:\grldr

[2011.06.06 16:42:33 | 1064,755,200 | -HS- | M] () -- C:\hiberfil.sys

[2008.06.13 16:26:45 | 000,000,000 | RHS- | M] () -- C:\IO.SYS

[2008.06.13 16:26:45 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS

[2008.07.06 21:32:32 | 000,000,000 | ---- | M] () -- C:\OrbPVR.db

[2011.06.06 16:42:30 | 1378,525,184 | -HS- | M] () -- C:\pagefile.sys

[2009.01.11 00:58:33 | 000,057,632 | ---- | M] () -- C:\SPC220NC.DAT

[2008.08.14 22:26:47 | 000,000,026 | ---- | M] () -- C:\UpdaterforApp.ini

< %PROGRAMFILES%\*.* >

[2007.09.18 02:49:22 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

========== Alternate Data Streams ==========

@Alternate Data Stream - 431 bytes -> C:\ProgramData\TEMP:6283A8D3

@Alternate Data Stream - 308 bytes -> C:\ProgramData\TEMP:1DFBC3C0

@Alternate Data Stream - 307 bytes -> C:\ProgramData\TEMP:CA9366D8

@Alternate Data Stream - 305 bytes -> C:\ProgramData\TEMP:CB0ACD5C

@Alternate Data Stream - 304 bytes -> C:\ProgramData\TEMP:B59658A8

@Alternate Data Stream - 151 bytes -> C:\ProgramData\TEMP:FDAF118C

@Alternate Data Stream - 150 bytes -> C:\ProgramData\TEMP:E8A39657

@Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:BD47E4EB

@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:5A1A3CC5

@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:550179F5

@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:2CEFEABF

@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:3F22DA14

@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:2FAFBD6A

@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:8135A716

@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:54997B77

@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:FE4E15B1

@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:F65733F1

@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:A724744F

@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:68DA8CC0

@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:21192FCF

@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:CF2C26D2

@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:814B9485

@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:4CD2D817

@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:55F44B88

@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:9F36615A

@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:8D4852A2

@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:981349EA

@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:8AB6C1D7

@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:B10A2506

@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:6E5C36BA

@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:4D066AD2

@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:CEB4672B

@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:994AEA06

@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:81F83028

@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:C3A4217C

@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:6A7B7A50

@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:7F66BF58

@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:776E54F2

@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:F01E7F17

@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:54CB420C

@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:B652B720

@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:F00E008B

@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:05113FB9

@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:E55CE2D1

@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:6FCD73D7

@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:03B3646C

@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:687D1056

@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:54F1BE9B

@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:5216CD26

@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:AB1003B3

@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:8160BC44

@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:46545F5C

@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:C46995DA

@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:8D02044C

@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:560D46AC

@Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:72E546C1

@Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:6CE0638C

@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:E2DEF21B

@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:9A2521F1

@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:3B3A35EC

@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:37F44C44

@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:E8F2B426

@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:4FFA5B5C

@Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:C40E212B

< End of report >

Стартирайте отново OTL и с Copy/ Paste под колонката Custom Scans/Fixes въведете скриптовия текст от текстовото поле по-долу, като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта!

:otl
IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {ce0c2586-da36-452b-acdb-320d9bcb19bf} - File not found
IE - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
[2010.11.18 13:53:44 | 000,000,863 | ---- | M] () -- C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\b01lbo5j.default\searchplugins\conduit.xml
[2010.10.25 22:12:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
File not found (No name found) -- 
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - File not found
O2 - BHO: (iWin Toolbar) - {ce0c2586-da36-452b-acdb-320d9bcb19bf} - File not found
O2 - BHO: (Ask.com Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - File not found
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - File not found
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (iWin Toolbar) - {ce0c2586-da36-452b-acdb-320d9bcb19bf} - File not found
O3 - HKLM\..\Toolbar: (Ask.com Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - File not found
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - File not found
O3 - HKU\S-1-5-21-3804988563-3351539712-772153893-1000\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] File not found
O4 - HKLM..\Run: [Nokia FastStart] File not found
O4 - HKU\.DEFAULT..\Run: [Nokia.PCSync] File not found
O4 - HKU\S-1-5-18..\Run: [Nokia.PCSync] File not found
O4 - HKU\S-1-5-21-3804988563-3351539712-772153893-1000..\Run: [BitComet] File not found
O9 - Extra Button: StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - File not found
O9 - Extra 'Tools' menuitem : StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - File not found
O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - File not found
O9 - Extra 'Tools' menuitem : &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - File not found
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
@Alternate Data Stream - 431 bytes -> C:\ProgramData\TEMP:6283A8D3
@Alternate Data Stream - 308 bytes -> C:\ProgramData\TEMP:1DFBC3C0
@Alternate Data Stream - 307 bytes -> C:\ProgramData\TEMP:CA9366D8
@Alternate Data Stream - 305 bytes -> C:\ProgramData\TEMP:CB0ACD5C
@Alternate Data Stream - 304 bytes -> C:\ProgramData\TEMP:B59658A8
@Alternate Data Stream - 151 bytes -> C:\ProgramData\TEMP:FDAF118C
@Alternate Data Stream - 150 bytes -> C:\ProgramData\TEMP:E8A39657
@Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:BD47E4EB
@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:5A1A3CC5
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:550179F5
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:2CEFEABF
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:3F22DA14
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:2FAFBD6A
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:8135A716
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:54997B77
@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:FE4E15B1
@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:F65733F1
@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:A724744F
@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:68DA8CC0
@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:21192FCF
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:CF2C26D2
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:814B9485
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:4CD2D817
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:55F44B88
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:9F36615A
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:8D4852A2
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:981349EA
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:8AB6C1D7
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:B10A2506
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:6E5C36BA
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:4D066AD2
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:CEB4672B
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:994AEA06
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:81F83028
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:C3A4217C
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:6A7B7A50
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:7F66BF58
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:776E54F2
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:F01E7F17
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:54CB420C
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:B652B720
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:F00E008B
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:05113FB9
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:E55CE2D1
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:6FCD73D7
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:03B3646C
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:687D1056
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:54F1BE9B
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:5216CD26
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:AB1003B3
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:8160BC44
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:46545F5C
@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:C46995DA
@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:8D02044C
@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:560D46AC
@Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:72E546C1
@Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:6CE0638C
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:E2DEF21B
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:9A2521F1
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:3B3A35EC
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:37F44C44
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:E8F2B426
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:4FFA5B5C
@Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:C40E212B
:files
recycler /alldrives
ipconfig /flushdns /c
:commands
[purity]
[emptytemp]
[emptyflash]
[Reboot]
След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix

Ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

Няма проблем. Сега искам да проверя нещо. Натиснете Start -> после копирайте (Copy) и поставете (Paste) в полето за търсене (Search box) следният текст, маркиран в синьо: control.exe и натиснете ENTER. Пишете за резултата: дали се отваря или не този контролен панел.

Това не е добре. Следвйте инструкциите, стъпка по стъпка:

Стъпка 1

Start -> напишете в полето cmd

Ето снимка:

Публикувано изображение

после натиснете ENTER

Поставете в конзолата с Copy/ Paste следния текст, маркиран в синьо:

chkdsk /f /r C: > C:\report.txt

натиснете ENTER

Публикувайте съдържанието на report.txt, който се намира на C: в следващия си коментар.

Стъпка 2

Натиснете Start -> напишете cmd и натиснете Enter. После копирайте (Copy) и поставете (Paste) в полето за търсене (Search box) следният текст, маркиран в синьо:

sfc /scannow

и натиснете ENTER. Изчакайте програмата да завърши работата си и рестартирайте.

Стъпка 3

Следвайте следната инструкция за работа с GMER:

  • Изтеглете този файл и го разархивирайте на десктопа.
  • Временно спрете Интернет и всички работещи програми, както и антивирусната си програма (ако има такава).

    Забележки:

    1. Сканирането може да доведе до грешки, затова не предприемайте никакви действия върху редовете маркирани с "<--- ROOKIT" без да имате инструкция за това.

    2. Ако GMER не се стартира или не работи коректно, не предприемайте повторен опит за стартиране. Moже да пробвате и в Safe Mode, но само веднъж.

  • Ако бъде открит Rootkit, ще последва въпрос дали желаете пълно сканиране на системата. Изберете NO.
  • В десния панел на програмата ще видите какво е проверено, но не променяйте нищо. Убедете се, че на Show All няма отметка.
  • Маркирайте всички устройства: C:, D: и пр.
  • Натиснете бутона Scan и изчакайте програмата да завърши сканирането.
  • Когато завърши сканирането, натиснете бутона Save и запишете (save as) резултатите на десктопа с име: Results.log
  • Вече можете да включите Интернет.

P.S. Разбирам, че имате затруднения с инструкциите, които ви давам. Не се притеснявайте и не бързайте.

  • Автор

Стъпка 1 Достъпът е отказан Стъпка 2 Tou must be an administrator running a console session in order to use the sfc utility Има ли смисъл да продължавам с стъпка 3 ?

Да, продължете със стъпка 3.

P.S. Понеже пропуснах, може да стартирате отново стъпки 1 и 2. Става с десен клик, когато напишете cmd -> Run as Аdministrator. Също така става и с клавишна комбинация CTRL+SHIFT+ENTER, когато поставите в кутията (Search Box) командата cmd.

  • Автор

Пак същото се получава при стъпка 1 и 2 а как да спра антивирусната програма Avast? Спрях Avast, но програмата gmer спира да работи още в началото и пак нищо

Според мен пропускате нещо. Опитайте отново да изпълните стъпка 2. Ето как (пълен текст):

Отворете командния прозорец (Command Prompt) с администраторски права. За целта щракнете върху Старт (Start), Всички програми (All Programs), Принадлежности (Accessories), щракнете с десния бутон върху командния прозорец (Command Prompt) и след това щракнете върху Изпълнявай като администратор (Run as administrator). Ако се появи покана за въвеждане на администраторска парола или за потвърждение, въведете паролата или щракнете върху Позволи (Allow).

Въведете с Copy/ Paste следния текст, маркиран в синьо:

sfc /scannow

и натиснете ENTER.

Пишете дали това има резултат.

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.