Здравейте! Пратиха ме при вас,ето линк към темата http://www.kaldata.com/forums/index.php?showtopic=186415 Благодаря предварително!

Здравейте..!

Системата ми е инфектирана - Какво да правя сега?

DDS.txt . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_26 Run by 1 at 18:17:05 on 2011-11-10 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.2046.1052 [GMT 2:00] . AV: Smart Engine *Enabled/Updated* {4B116E8A-C9C0-48BD-BEAA-9EF1BAB743F2} AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF} FW: Smart Engine *Enabled* FW: AVG Firewall *Enabled* . ============== Running Processes =============== . C:\PROGRA~1\AVG\AVG2012\avgrsx.exe C:\Program Files\AVG\AVG2012\avgcsrvx.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup svchost.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\AVG\AVG2012\avgwdsvc.exe C:\WINDOWS\system32\crypserv.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe svchost.exe C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\Program Files\AVG\AVG2012\avgnsx.exe C:\Program Files\AVG\AVG2012\avgemcx.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe C:\Program Files\Cyberlink\Shared Files\brs.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe C:\Program Files\Freecorder\FLVSrvc.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe C:\Program Files\AVG\AVG2012\avgtray.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Documents and Settings\1\Application Data\CBS Interactive\CNET TechTracker\TechTracker.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\HTC\HTC Sync 3.0\adb.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://bksly.startya.com/?cfg=2-564-0-0&engine_id=3&provider_id=3&product_id=564&country=BG uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll BHO: IDMIEHlprObj Class: {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\program files\internet download manager\IDMIECC.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\progra~1\skype\phone\ieplugin\SKYPEI~1.DLL BHO: {30F9B915-B755-4826-820B-08FBA6BD249D} - No File BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg2012\avgssie.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office14\GROOVEEX.DLL BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar1.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5612.1312\swg.dll BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\micros~2\office14\URLREDIR.DLL BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg10\toolbar\IEToolbar.dll TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe" uRun: [Google Update] "c:\documents and settings\1\local settings\application data\google\update\GoogleUpdate.exe" /c mRun: [igfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [RTHDCPL] RTHDCPL.EXE mRun: [Alcmtr] ALCMTR.EXE mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] nwiz.exe /install mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [RemoteControl9] "c:\program files\cyberlink\powerdvd9\PDVD9Serv.exe" mRun: [PDVD9LanguageShortcut] "c:\program files\cyberlink\powerdvd9\language\Language.exe" mRun: [bDRegion] c:\program files\cyberlink\shared files\brs.exe mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin mRun: [PCSuiteTrayApplication] c:\program files\nokia\nokia pc suite 6\LaunchApplication.exe -startup mRun: [Freecorder FLV Service] "c:\program files\freecorder\FLVSrvc.exe" /run mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [HTC Sync Loader] "c:\program files\htc\htc sync 3.0\htcUPCTLoader.exe" -startup mRun: [AVG_TRAY] "c:\program files\avg\avg2012\avgtray.exe" mRun: [bCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE dRun: [Nokia.PCSync] c:\program files\nokia\nokia pc suite 6\PcSync2.exe /NoDialog StartupFolder: c:\docume~1\1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe StartupFolder: c:\docume~1\1\startm~1\programs\startup\cnette~1.lnk - c:\documents and settings\1\application data\cbs interactive\cnet techtracker\TechTracker.exe uPolicies-explorer: DisallowRun = 1 (0x1) uPolicies-system: NoColorChoice = 0 (0x0) uPolicies-system: NoSizeChoice = 0 (0x0) uPolicies-system: NoVisualStyleChoice = 0 (0x0) uPolicies-system: SetVisualStyle = c:\windows\resources\themes\Luna.theme IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105 IE: Свали видео съдържанието на FLV с IDM - c:\program files\internet download manager\IEGetVL.htm IE: Свали всички линкове с IDM - c:\program files\internet download manager\IEGetAll.htm IE: Свали с IDM - c:\program files\internet download manager\IEExt.htm IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll Trusted Zone: ubb.bg\ebb DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab TCP: DhcpNameServer = 217.10.240.2 217.10.240.242 TCP: Interfaces\{B5D49AA5-0930-47AD-B85B-435CFD384BD3} : DhcpNameServer = 217.10.240.2 217.10.240.242 Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg10\toolbar\IEToolbar.dll Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg2012\avgpp.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\8.0.1\ViProtocol.dll Notify: igfxcui - igfxdev.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office14\GROOVEEX.DLL IFEO: image file execution options - svchost.exe . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\1\application data\mozilla\firefox\profiles\1qt76a0q.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=3&q={searchTerms} FF - prefs.js: browser.search.selectedEngine - AVG Secure Search FF - prefs.js: browser.startup.homepage - hxxp://www.google.bg/ FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=4e493eb6&v=7.008.031.001&i=23&tp=ab&iy=&ychte=us&lng=bg&q= FF - prefs.js: network.proxy.type - 0 FF - component: c:\documents and settings\1\application data\idm\idmmzcc3\components\idmmzcc.dll FF - component: c:\documents and settings\1\application data\mozilla\firefox\profiles\1qt76a0q.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\components\FFExternalAlert.dll FF - component: c:\documents and settings\1\application data\mozilla\firefox\profiles\1qt76a0q.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\components\RadioWMPCore.dll FF - component: c:\documents and settings\1\application data\mozilla\firefox\profiles\1qt76a0q.default\extensions\{f2257711-226b-4529-8e1d-e82e1c55ebd8}\components\FFExternalAlert.dll FF - component: c:\documents and settings\1\application data\mozilla\firefox\profiles\1qt76a0q.default\extensions\{f2257711-226b-4529-8e1d-e82e1c55ebd8}\components\RadioWMPCore.dll FF - component: c:\documents and settings\1\application data\mozilla\firefox\profiles\1qt76a0q.default\extensions\[email protected]\components\DTToolbarFF.dll FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\xpavgtbapi.dll FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff4.dll FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff5.dll FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff6.dll FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff7.dll FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff8.dll FF - plugin: c:\documents and settings\1\application data\facebook\npfbplugin_1_0_3.dll FF - plugin: c:\documents and settings\1\local settings\application data\google\update\1.3.21.79\npGoogleUpdate3.dll FF - plugin: c:\progra~1\micros~2\office14\NPAUTHZ.DLL FF - plugin: c:\progra~1\micros~2\office14\NPSPWRAP.DLL FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll FF - plugin: c:\program files\google\picasa3\npPicasa3.dll FF - plugin: c:\program files\google\update\1.3.21.65\npGoogleUpdate3.dll FF - plugin: c:\program files\google\update\1.3.21.69\npGoogleUpdate3.dll FF - plugin: c:\program files\google\update\1.3.21.79\npGoogleUpdate3.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\photodex presenter\npPxPlay.dll FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} FF - Ext: Java Quick Starter: [email protected] - c:\program files\java\jre6\lib\deploy\jqs\ff FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension FF - Ext: AVG Security Toolbar em:version=7.008.031.001 em:displayname=AVG Security Toolbar em:iconURL=chrome://tavgp/skin/logo.ico em:creator=AVG Technologies em:description=AVG Security Toolbar em:homepageURL=http://www.avg.com >: avg@igeared - c:\program files\avg\avg10\toolbar\firefox\avg@igeared FF - Ext: AVG Safe Search: {1E73965B-8B48-48be-9C8D-68B920ABC1C4} - c:\program files\avg\avg2012\Firefox4 FF - Ext: IDM CC: [email protected] - c:\documents and settings\1\application data\idm\idmmzcc3 FF - Ext: DAEMON Tools Toolbar: [email protected] - %profile%\extensions\[email protected] FF - Ext: Feboz Toolbar: {f2257711-226b-4529-8e1d-e82e1c55ebd8} - %profile%\extensions\{f2257711-226b-4529-8e1d-e82e1c55ebd8} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b} FF - Ext: Freecorder Community Toolbar: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - %profile%\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612} . ============= SERVICES / DRIVERS =============== . R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2011-2-22 23120] R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2011-3-16 32592] R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2011-1-7 230608] R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-3-1 40016] R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2011-4-4 295248] R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2009/12/11 18:33:39];c:\program files\cyberlink\powerdvd9\000.fcl [2009-5-7 87536] R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\AVGIDSAgent.exe [2011-10-12 4433248] R2 avgwd;AVG WatchDog;c:\program files\avg\avg2012\avgwdsvc.exe [2011-8-2 192776] R2 PassThru Service;Internet Pass-Through Service;c:\program files\htc\internet pass-through\PassThruSvr.exe [2011-3-31 80896] R2 vToolbarUpdater;vToolbarUpdater;c:\program files\common files\avg secure search\vtoolbarupdater\8.0.1\ToolbarUpdater.exe [2011-10-13 246600] R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2011-4-14 134608] R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2011-2-10 24272] R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2011-2-10 16720] R3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [2011-6-18 24576] S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-14 135664] S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg10\toolbar\ToolbarBroker.exe [2011-8-15 1025352] S3 gupdatem;Услуга на Google Актуализация (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-2-14 135664] S3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\drivers\htcnprot.sys [2010-6-22 21248] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\microsoft office\office14\GROOVE.EXE [2010-12-27 31124344] S3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000] . =============== Created Last 30 ================ . 2011-11-06 10:25:25 -------- d-----w- c:\documents and settings\1\application data\Outlook 2011-10-13 16:17:53 -------- d-----w- c:\program files\common files\AVG Secure Search 2011-10-13 16:17:52 -------- d-----w- c:\program files\AVG Secure Search 2011-10-13 16:16:43 -------- d-----w- c:\documents and settings\1\application data\AVG2012 2011-10-13 16:16:04 -------- d-----w- c:\documents and settings\all users\application data\AVG2012 . ==================== Find3M ==================== . 2011-10-07 04:23:48 230608 ----a-w- c:\windows\system32\drivers\avgldx86.sys 2011-10-04 04:21:42 16720 ----a-w- c:\windows\system32\drivers\AVGIDSShim.sys 2011-09-13 03:30:10 32592 ----a-w- c:\windows\system32\drivers\avgrkx86.sys . ============= FINISH: 18:17:43,54 =============== Attach.txt . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 5/20/2009 4:02:27 PM System Uptime: 11/10/2011 5:03:41 PM (1 hours ago) . Motherboard: Gigabyte Technology Co., Ltd. | | G31M-S2C Processor: Intel Pentium III Xeon processor | Socket 775 | 2499/200mhz . ==== Disk Partitions ========================= . A: is Removable C: is FIXED (NTFS) - 98 GiB total, 27.099 GiB free. D: is FIXED (NTFS) - 368 GiB total, 89.75 GiB free. E: is CDROM () F: is CDROM () G: is Removable H: is Removable I: is Removable J: is Removable K: is Removable . ==== Disabled Device Manager Items ============= . Class GUID: {EEC5AD98-8080-425F-922A-DABF3DE3F69A} Description: Nokia Windows Portable Device Driver Device ID: ROOT\WPD\0000 Manufacturer: Nokia Name: Nokia 5310 XpressMusic PNP Device ID: ROOT\WPD\0000 Service: WUDFRd . Class GUID: {EEC5AD98-8080-425F-922A-DABF3DE3F69A} Description: Nokia 6303 classic Device ID: ROOT\WPD\0001 Manufacturer: Nokia Name: Nokia 6303 classic PNP Device ID: ROOT\WPD\0001 Service: WUDFRd . ==== System Restore Points =================== . RP808: 8/15/2011 8:57:25 PM - Installed Windows XP KB978542. RP809: 8/15/2011 8:57:51 PM - Installed Windows XP KB978601. RP810: 8/15/2011 8:58:37 PM - Installed Windows XP KB978706. RP811: 8/15/2011 8:59:23 PM - Installed Windows XP KB979309. RP812: 8/15/2011 8:59:51 PM - Installed Windows XP KB979482. RP813: 8/15/2011 9:00:17 PM - Installed Windows XP KB979559. RP814: 8/15/2011 9:00:46 PM - Installed Windows XP KB979683. RP815: 8/15/2011 9:01:15 PM - Installed Windows XP KB980218. RP816: 8/15/2011 9:01:43 PM - Installed Windows XP KB980232. RP817: 8/16/2011 9:52:18 PM - System Checkpoint RP818: 8/18/2011 1:27:32 PM - System Checkpoint RP819: 8/19/2011 3:39:32 PM - System Checkpoint RP820: 8/20/2011 5:11:44 PM - System Checkpoint RP821: 8/21/2011 10:41:13 PM - System Checkpoint RP822: 8/23/2011 12:03:33 AM - System Checkpoint RP823: 8/24/2011 12:36:21 PM - System Checkpoint RP824: 8/25/2011 1:24:28 PM - System Checkpoint RP825: 8/27/2011 8:21:27 PM - System Checkpoint RP826: 8/28/2011 8:38:46 PM - System Checkpoint RP827: 8/28/2011 11:36:15 PM - Removed Skype™ 5.5 RP828: 8/30/2011 12:33:33 AM - System Checkpoint RP829: 8/31/2011 12:05:11 PM - System Checkpoint RP830: 9/1/2011 12:06:04 PM - System Checkpoint RP831: 9/2/2011 3:45:11 PM - System Checkpoint RP832: 9/4/2011 5:50:08 PM - System Checkpoint RP833: 9/4/2011 10:44:36 PM - Installed Java 6 Update 26 RP834: 9/6/2011 1:10:54 PM - System Checkpoint RP835: 9/7/2011 5:48:41 PM - Installed USB2.0 PC Camera(0050.2010.0326.3015) RP836: 9/8/2011 6:20:46 PM - System Checkpoint RP837: 9/9/2011 1:23:08 PM - Removed Microsoft Office 2003 Bulgarian User Interface Pack RP838: 9/9/2011 1:25:41 PM - Removed Microsoft Office Professional Edition 2003 RP839: 9/9/2011 1:29:13 PM - Installed Microsoft Office Professional Plus 2010 RP840: 9/9/2011 1:37:35 PM - Printer Driver Send To Microsoft OneNote 2010 Driver Installed RP841: 9/10/2011 1:43:25 PM - System Checkpoint RP842: 9/11/2011 1:58:26 PM - System Checkpoint RP843: 9/12/2011 3:20:22 PM - System Checkpoint RP844: 9/13/2011 4:04:51 PM - System Checkpoint RP845: 9/14/2011 4:40:15 PM - System Checkpoint RP846: 9/15/2011 6:21:39 PM - System Checkpoint RP847: 9/16/2011 6:53:02 PM - System Checkpoint RP848: 9/17/2011 7:36:06 PM - System Checkpoint RP849: 9/18/2011 8:14:55 PM - System Checkpoint RP850: 9/19/2011 9:04:13 PM - System Checkpoint RP851: 9/20/2011 11:08:19 PM - System Checkpoint RP852: 9/22/2011 1:04:32 PM - System Checkpoint RP853: 9/23/2011 1:50:13 PM - System Checkpoint RP854: 9/24/2011 2:29:46 PM - System Checkpoint RP855: 9/25/2011 3:18:40 PM - System Checkpoint RP856: 9/26/2011 3:23:36 PM - System Checkpoint RP857: 9/27/2011 7:11:53 PM - System Checkpoint RP858: 9/28/2011 7:34:21 PM - System Checkpoint RP859: 9/29/2011 9:50:26 PM - System Checkpoint RP860: 10/1/2011 2:04:53 PM - System Checkpoint RP861: 10/2/2011 2:22:54 PM - System Checkpoint RP862: 10/3/2011 6:13:07 PM - System Checkpoint RP863: 10/5/2011 10:25:23 AM - System Checkpoint RP864: 10/6/2011 5:30:42 PM - System Checkpoint RP865: 10/7/2011 6:18:32 PM - System Checkpoint RP866: 10/7/2011 11:34:41 PM - Removed Skype™ 5.5 RP867: 10/9/2011 1:34:13 PM - System Checkpoint RP868: 10/10/2011 2:08:06 PM - System Checkpoint RP869: 10/11/2011 2:40:14 PM - System Checkpoint RP870: 10/12/2011 3:32:11 PM - System Checkpoint RP871: 10/13/2011 4:27:49 PM - System Checkpoint RP872: 10/13/2011 7:15:05 PM - Installed AVG 2012 RP873: 10/13/2011 7:15:15 PM - Removed AVG 2011 RP874: 10/13/2011 7:15:36 PM - Installed AVG 2012 RP875: 10/13/2011 7:18:52 PM - Removed AVG 2011 RP876: 10/14/2011 8:00:24 PM - System Checkpoint RP877: 10/15/2011 9:13:17 PM - System Checkpoint RP878: 10/16/2011 9:16:50 PM - System Checkpoint RP879: 10/18/2011 9:45:14 AM - System Checkpoint RP880: 10/19/2011 9:47:25 AM - System Checkpoint RP881: 10/20/2011 8:28:55 PM - System Checkpoint RP882: 10/21/2011 8:43:45 PM - System Checkpoint RP883: 10/23/2011 1:06:35 PM - System Checkpoint RP884: 10/23/2011 7:20:00 PM - Installed The Sims 3 RP885: 10/23/2011 7:26:17 PM - Installed TheSims3EP5 RP886: 10/24/2011 10:32:25 PM - System Checkpoint RP887: 10/25/2011 10:47:37 PM - System Checkpoint RP888: 10/26/2011 11:43:28 PM - System Checkpoint RP889: 10/28/2011 8:22:09 AM - System Checkpoint RP890: 10/29/2011 2:58:37 PM - System Checkpoint RP891: 10/30/2011 2:18:38 PM - System Checkpoint RP892: 10/31/2011 7:58:53 PM - System Checkpoint RP893: 11/1/2011 9:34:56 PM - System Checkpoint RP894: 11/3/2011 4:41:03 PM - Removed Skype™ 5.5 RP895: 11/4/2011 5:36:49 PM - System Checkpoint RP896: 11/5/2011 5:53:50 PM - System Checkpoint RP897: 11/6/2011 6:34:10 PM - System Checkpoint RP898: 11/7/2011 7:06:30 PM - System Checkpoint RP899: 11/9/2011 12:28:08 PM - System Checkpoint . ==== Installed Programs ====================== . µTorrent ABBYY FineReader 6.0 Corporate Edition Adobe AIR Adobe Anchor Service CS4 Adobe Bridge 1.0 Adobe CMaps CS4 Adobe Color - Photoshop Specific CS4 Adobe Color EU Extra Settings CS4 Adobe Color JA Extra Settings CS4 Adobe Color NA Recommended Settings CS4 Adobe Color Video Profiles CS CS4 Adobe Common File Installer Adobe CSI CS4 Adobe Default Language CS4 Adobe Device Central CS4 Adobe ExtendScript Toolkit CS4 Adobe Extension Manager CS4 Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Fonts All Adobe Help Center 1.0 Adobe Linguistics CS4 Adobe Media Player Adobe Output Module Adobe PDF Library Files CS4 Adobe Photoshop CS2 Adobe Photoshop CS4 Adobe Photoshop CS4 Support Adobe Reader 9.4.0 - Bulgarian Adobe Search for Help Adobe Service Manager Extension Adobe Setup Adobe Stock Photos 1.0 Adobe Type Support CS4 Adobe Update Manager CS4 Adobe WinSoft Linguistics Plugin Adobe XMP Panels CS4 AdobeColorCommonSetCMYK AdobeColorCommonSetRGB AVG 2012 BS.Player PRO BSPlayer CamStudio Canon Camera Access Library Canon Camera Support Core Library CANON iMAGE GATEWAY Task for ZoomBrowser EX Canon Internet Library for ZoomBrowser EX Canon MF Toolbox 4.9.1.1.mf09 Canon MF4010 Series Canon RAW Image Task for ZoomBrowser EX Canon Utilities CameraWindow Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX Canon Utilities Digital Photo Professional 3.3 Canon Utilities EOS Utility Canon Utilities MyCamera Canon Utilities Original Data Security Tools Canon Utilities PhotoStitch Canon Utilities Picture Style Editor Canon Utilities RemoteCapture Task for ZoomBrowser EX Canon Utilities ZoomBrowser EX Canon ZoomBrowser EX Memory Card Utility CNET TechTracker Conduit Engine Connect CyberLink PowerDVD 9 DAEMON Tools Toolbar eSobi v2 EVEREST Ultimate Edition v4.20 Facebook Plug-In Freecorder Freecorder Toolbar German Truck Simulator Google Земя Google Chrome Google Toolbar for Internet Explorer Google Update Helper High Definition Audio Driver Package - KB888111 Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB952287) Hotfix for Windows XP (KB954550-v5) Hotfix for Windows XP (KB961118) Hotfix for Windows XP (KB976002-v5) Hotfix for Windows XP (KB981793) HTC BMP USB Driver HTC Driver Installer HTC Sync Intel® Graphics Media Accelerator Driver Internet Download Manager Java Auto Updater Java 6 Update 26 K-Lite Codec Pack 2.36 Full KoralSoft - EuroDictXP kuler Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (English) 2010 Microsoft Office Access Setup Metadata MUI (English) 2010 Microsoft Office Excel MUI (English) 2010 Microsoft Office Groove MUI (English) 2010 Microsoft Office InfoPath MUI (English) 2010 Microsoft Office OneNote MUI (English) 2010 Microsoft Office Outlook MUI (English) 2010 Microsoft Office PowerPoint MUI (English) 2010 Microsoft Office Professional Plus 2010 Microsoft Office Proof (English) 2010 Microsoft Office Proof (French) 2010 Microsoft Office Proof (Spanish) 2010 Microsoft Office Proofing (English) 2010 Microsoft Office Publisher MUI (English) 2010 Microsoft Office Shared MUI (English) 2010 Microsoft Office Shared Setup Metadata MUI (English) 2010 Microsoft Office Word MUI (English) 2010 Microsoft Software Update for Web Folders (English) 14 Microsoft User-Mode Driver Framework Feature Pack 1.5 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2005 Redistributable - KB2467175 Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft WSE 3.0 Runtime Mozilla Firefox (3.6.24) MSVC80_x86 MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) MSXML 4.0 SP3 Parser MSXML 4.0 SP3 Parser (KB973685) MSXML 6 Service Pack 2 (KB973686) My Flash Recovery Nero 7 Demo Nokia Connectivity Cable Driver Nokia PC Suite NVIDIA Drivers Ontrack EasyRecovery DataRecovery Trial Origin PC Connectivity Solution PDF Settings CS4 Photodex Presenter Photoshop Camera Raw Picasa 3 POLYGLOT 7 Power MP3 Cutter Joiner 1.12 Prince of Persia T2T ProShow Gold RAW Thumbnail Viewer REALTEK GbE & FE Ethernet PCI-E NIC Driver Realtek High Definition Audio Driver Registry Reviver Security Update for Windows Internet Explorer 7 (KB938127-v2) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player (KB978695) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows XP (KB2229593) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956744) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958869) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960225) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB970238) Security Update for Windows XP (KB970430) Security Update for Windows XP (KB971468) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB971961) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973869) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975561) Security Update for Windows XP (KB975562) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977816) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978037) Security Update for Windows XP (KB978338) Security Update for Windows XP (KB978542) Security Update for Windows XP (KB978601) Security Update for Windows XP (KB978706) Security Update for Windows XP (KB979309) Security Update for Windows XP (KB979482) Security Update for Windows XP (KB979559) Security Update for Windows XP (KB979683) Security Update for Windows XP (KB980195) Security Update for Windows XP (KB980218) Security Update for Windows XP (KB980232) Security Update for Windows XP (KB981349) Skype add-on for IE SkypeLauncher Skype™ 4.2 Software Update for Web Folders SoulSeek 157 NS 13c Stellar Phoenix Photo Recovery Stellar Phoenix Windows Data Recovery V4.1 Suite Shared Configuration CS4 System Requirements Lab CYRI The Sims™ 3 The Sims™ 3 Ambitions The Sims™ 3 Fast Lane Stuff The Sims™ 3 Generations The Sims™ 3 High-End Loft Stuff The Sims™ 3 Late Night The Sims™ 3 Outdoor Living Stuff The Sims™ 3 Pets The Sims™ 3 Town Life Stuff TS3 Install Helper Monkey Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Windows XP (KB955759) Update for Windows XP (KB967715) Update for Windows XP (KB968389) Update for Windows XP (KB971737) Update for Windows XP (KB973687) Update for Windows XP (KB973815) USB2.0 PC Camera(0050.2010.0326.3015) vloader-bg 1.53 vloader 2.1 Winamp (remove only) WinAVI Video Converter Windows Driver Package - Nokia (WUDFRd) WPD (06/01/2007 6.84.33.0) Windows Driver Package - Nokia Modem (02/15/2007 3.1) Windows Driver Package - Nokia Modem (05/24/2007 6.84.0.1) Windows Genuine Advantage Notifications (KB905474) Windows Imaging Component Windows Media Format 11 runtime Windows XP Service Pack 3 WinRAR archiver Wondershare Photo Collage Studio 4.2.13.3 . ==== Event Viewer Messages From Past Week ======== . 11/8/2011 10:29:38 PM, error: Disk [11] - The driver detected a controller error on \Device\Harddisk4\D. 11/6/2011 12:15:23 PM, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 96620E58C906. The following error occurred: The semaphore timeout period has expired. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server. 11/5/2011 3:14:19 PM, error: Disk [11] - The driver detected a controller error on \Device\Harddisk3\D. 11/4/2011 11:46:05 PM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume. 11/3/2011 8:36:46 PM, error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\D. 11/3/2011 8:35:46 PM, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 11/3/2011 8:35:35 PM, error: Service Control Manager [7003] - The Windows Firewall/Internet Connection Sharing (ICS) service depends on the following nonexistent service: Netman 11/3/2011 8:35:35 PM, error: Service Control Manager [7003] - The Computer Browser service depends on the following nonexistent service: LanmanServer 11/3/2011 8:35:35 PM, error: Service Control Manager [7000] - The adfs service failed to start due to the following error: The system cannot find the file specified. . ==== End Of File ===========================

До тук добре..!Ще са ми необходими още дневници...!

Изтеглете OTL.exe и го запазете на десктопа.

• Стартирайте OTL (ако е необходимо, потвърдете през UAC).
• Направете следните настройки:
• Сложете отметка пред Scan All Users
• Под менюто File Age => изберете 90 days
• Под менюто Standard Registry => променете на ALL
• Сложете отметки пред LOP и Purity Check

Под с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

netsvcs
msconfig
%SYSTEMDRIVE%\*.*
%USERPROFILE%\*.*
%USERPROFILE%\Application Data\*.*
%USERPROFILE%\Local Settings\Application Data\*.*
%AllUsersProfile%\*.*
%AllUsersProfile%\Application Data\*.*
%USERPROFILE%\My Documents\*.*
%CommonProgramFiles%\*.*
%PROGRAMFILES%\*.*
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /90
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\system32\Spool\prtprocs\w32x86\*.dll
/md5start
hlp.dat
winlogon.exe
wininit.exe
userinit.exe
explorer.exe
volsnap.sys
/md5stop

• Натиснете маркираният в синьо бутон: Run Scan.
• Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt. Прикачете тези два файла в следващия си коментар (погледнете опцията "прикачени файлове", когато публикувате мнение).

Extras.txt

OTL Extras logfile created on: 10.11.2011 г. 19:04:51 - Run 1

OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\1\My Documents\Downloads\Programs

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 7.0.5730.11)

Locale: 00000402 | Country: Bulgaria | Language: BGR | Date Format: dd.M.yyyy 'г.'

2,00 Gb Total Physical Memory | 1,02 Gb Available Physical Memory | 51,23% Memory free

3,85 Gb Paging File | 2,76 Gb Available in Paging File | 71,80% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 97,66 Gb Total Space | 27,06 Gb Free Space | 27,71% Space Free | Partition Type: NTFS

Drive D: | 368,10 Gb Total Space | 89,75 Gb Free Space | 24,38% Space Free | Partition Type: NTFS

Drive G: | 3,69 Gb Total Space | 3,16 Gb Free Space | 85,73% Space Free | Partition Type: FAT32

Computer Name: 835DDD225B914AB | User Name: 1 | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

.html [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-1614895754-299502267-839522115-1003\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

exefile [open] -- "%1" %*

htmlfile [edit] -- Reg Error: Key error.

http [open] -- Reg Error: Key error.

https [open] -- Reg Error: Key error.

InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [Digital Photo Professional] -- C:\Program Files\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\Winamp.exe" /BOOKMARK "%1" (Nullsoft)

Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\Winamp.exe" /ADD "%1" (Nullsoft)

Directory [Winamp.Play] -- "C:\Program Files\Winamp\Winamp.exe" "%1" (Nullsoft)

Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled" = 1

"FirewallDisableNotify" = 0

"AntiVirusOverride" = 0

"FirewallOverride" = 0

"AntiVirusDisableNotify" = 0

"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]

"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]

"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 0

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

"5353:TCP" = 5353:TCP:*:Enabled:Adobe CSI CS4

"5900:TCP" = 5900:TCP:*:Enabled:vnc5900

"5800:TCP" = 5800:TCP:*:Enabled:vnc5800

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)

"C:\Program Files\CyberLink\PowerDVD9\PowerDVD9.exe" = C:\Program Files\CyberLink\PowerDVD9\PowerDVD9.exe:*:Enabled:CyberLink PowerDVD 9.0 -- (CyberLink Corp.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)

"C:\Program Files\AVG\AVG8\avgemc.exe" = C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe

"C:\Program Files\AVG\AVG8\avgupd.exe" = C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe

"C:\Program Files\AVG\AVG8\avgnsx.exe" = C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe

"C:\Program Files\FlashGet\flashget.exe" = C:\Program Files\FlashGet\flashget.exe:*:Enabled:Flashget

"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)

"C:\Program Files\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe" = C:\Program Files\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe:*:Enabled:CyberLink PowerDVD 9.0 -- (CyberLink Corp.)

"C:\Program Files\CyberLink\PowerDVD9\PowerDVD9.exe" = C:\Program Files\CyberLink\PowerDVD9\PowerDVD9.exe:*:Enabled:CyberLink PowerDVD 9.0 -- (CyberLink Corp.)

"C:\Program Files\Skype\Plugin Manager\skypePM.exe" = C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager -- (Skype Technologies)

"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" = C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4 -- (Adobe Systems Incorporated)

"C:\Program Files\DC++\DCPlusPlus.exe" = C:\Program Files\DC++\DCPlusPlus.exe:*:Enabled:DC++

"C:\Program Files\UltraVNC\winvnc.exe" = C:\Program Files\UltraVNC\winvnc.exe:*:Enabled:winvnc.exe

"C:\Documents and Settings\All Users\Application Data\c0c695\SMc0c_179.exe" = C:\Documents and Settings\All Users\Application Data\c0c695\SMc0c_179.exe:*:Enabled:Smart Engine

"C:\Program Files\AVG\AVG10\avgmfapx.exe" = C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:AVG Installer

"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4

"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4

"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4

"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler

"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4

"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup

"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4

"{117B6BF6-82C3-420C-B284-9247C8568E53}" = The Sims™ 3 Outdoor Living Stuff

"{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2

"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4

"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB

"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{1F77C418-2C90-459C-BD33-B56A4182B9FA}" = System Requirements Lab CYRI

"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86

"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer

"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2

"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java™ 6 Update 26

"{31A559C1-9E4D-423B-9DD3-34A6C5398752}" = HTC BMP USB Driver

"{332DB63A-14F2-465D-9C7E-B0D04353323F}" = Registry Reviver

"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4

"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player

"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4

"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4

"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin

"{4447D5B5-95ED-4C4D-A9C3-1D8E892D5377}" = AVG 2012

"{45057FCE-5784-48BE-8176-D9D00AF56C3C}" = The Sims™ 3 Late Night

"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4

"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4

"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support

"{6767DFEE-8909-453A-B553-C7693912B2EB}" = Canon MF Toolbox 4.9.1.1.mf09

"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4

"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK

"{6D6664A9-3342-4948-9B7E-034EFE366F0F}" = HTC Driver Installer

"{71828142-5A24-4BD0-97E7-976DA08CE6CF}" = The Sims™ 3 High-End Loft Stuff

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0

"{7B11296A-F894-449C-8DF6-6AAAA7D4D118}" = The Sims™ 3 Town Life Stuff

"{7CCEBC24-62DB-4280-A8EC-BFA49F167920}" = Software Update for Web Folders

"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4

"{82427977-8776-4087-90CA-9F65174D3C4D}" = Nokia Connectivity Cable Driver

"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable

"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4

"{84B2CF01-194D-2284-B313-F2E0D78D1033}" = Nero 7 Demo

"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer

"{900A29A0-52BA-4a78-8E6C-5F4F821397CE}" = Canon MF4010 Series

"{90140000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 14

"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010

"{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010

"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010

"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010

"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010

"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010

"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010

"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010

"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010

"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010

"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010

"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUS_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010

"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010

"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010

"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010

"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010

"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010

"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{910F4A29-1134-49E0-AD8B-56E4A3152BD1}" = The Sims™ 3 Ambitions

"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4

"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4

"{98BD9EA5-2DF2-445C-8C8D-057F55B3C633}" = AVG 2012

"{99A40651-0BC2-4095-8F9A-A40FAB224FEF}" = PC Connectivity Solution

"{A074DE55-29EB-459C-99C9-3F26C5669ECB}" = Ontrack EasyRecovery DataRecovery Trial

"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175

"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2

"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}" = Nokia PC Suite

"{AC76BA86-7AD7-1026-7B44-A94000000001}" = Adobe Reader 9.4.0 - Bulgarian

"{AF600F7B-67A7-48D9-BA3B-0FF97F35F970}" = ABBYY FineReader 6.0 Corporate Edition

"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR

"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect

"{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}" = Google Земя

"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0

"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module

"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3

"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2

"{C12631C6-804D-4B32-B0DD-8A496462F106}" = The Sims™ 3 Pets

"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4

"{C6A0FD8A-F107-44CA-AA1B-49341936F76A}" = USB2.0 PC Camera(0050.2010.0326.3015)

"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver

"{CAEF3BE9-F5CF-4355-BBC3-90134AD070F8}" = RAW Thumbnail Viewer

"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2

"{DD8D87E5-C372-462F-B168-94612B1D9451}" = HTC Sync

"{DFFE2B1F-07E0-45A9-8801-CD8514CAA876}" = Prince of Persia T2T

"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime

"{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}" = The Sims™ 3 Generations

"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0

"{ED436EA8-4145-4703-AE5D-4D09DD24AF5A}" = The Sims™ 3 Fast Lane Stuff

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4

"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4

"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All

"0C5EDC3653FED5B121F464339EAC12534D253B25" = Windows Driver Package - Nokia Modem (02/15/2007 3.1)

"4077F884D1BB007055BDB83B621D87220A73F30F" = Windows Driver Package - Nokia (WUDFRd) WPD (06/01/2007 6.84.33.0)

"Adobe AIR" = Adobe AIR

"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2

"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4

"AVG" = AVG 2012

"B726756F5B5A5AA9D798B399386FC6205A45F19E" = Windows Driver Package - Nokia Modem (02/15/2007 3.1)

"BSPlayer1" = BSPlayer

"BSPlayerp" = BS.Player PRO

"CAL" = Canon Camera Access Library

"CameraWindowDVC5" = Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX

"CameraWindowDVC6" = Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX

"CameraWindowLauncher" = Canon Utilities CameraWindow

"CamStudio" = CamStudio

"CANON iMAGE GATEWAY Task" = CANON iMAGE GATEWAY Task for ZoomBrowser EX

"Canon Internet Library for ZoomBrowser EX" = Canon Internet Library for ZoomBrowser EX

"CD8424B9400BFF7D34AA18F816C71322AC4BDAA7" = Windows Driver Package - Nokia Modem (05/24/2007 6.84.0.1)

"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player

"conduitEngine" = Conduit Engine

"CSCLIB" = Canon Camera Support Core Library

"DAEMON Tools Toolbar" = DAEMON Tools Toolbar

"DPP" = Canon Utilities Digital Photo Professional 3.3

"EOS Utility" = Canon Utilities EOS Utility

"EuroDictXP" = KoralSoft - EuroDictXP

"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v4.20

"Freecorder Toolbar" = Freecorder Toolbar

"Freecorder4.1" = Freecorder

"German Truck Simulator" = German Truck Simulator

"HDMI" = Intel® Graphics Media Accelerator Driver

"InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2

"InstallShield_{A074DE55-29EB-459C-99C9-3F26C5669ECB}" = Ontrack EasyRecovery DataRecovery Trial

"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9

"Internet Download Manager" = Internet Download Manager

"KLiteCodecPack_is1" = K-Lite Codec Pack 2.36 Full

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Mozilla Firefox (3.6.24)" = Mozilla Firefox (3.6.24)

"My Flash Recovery_is1" = My Flash Recovery

"MyCamera" = Canon Utilities MyCamera

"Nokia PC Suite" = Nokia PC Suite

"NVIDIA Drivers" = NVIDIA Drivers

"Office14.PROPLUS" = Microsoft Office Professional Plus 2010

"Origin" = Origin

"Original Data Security Tools" = Canon Utilities Original Data Security Tools

"Photodex Presenter" = Photodex Presenter

"PhotoStitch" = Canon Utilities PhotoStitch

"Picasa 3" = Picasa 3

"Picture Style Editor" = Canon Utilities Picture Style Editor

"POLYGLOT 7_is1" = POLYGLOT 7

"Power MP3 Cutter Joiner_is1" = Power MP3 Cutter Joiner 1.12

"ProShow Gold" = ProShow Gold

"RAW Image Task" = Canon RAW Image Task for ZoomBrowser EX

"Registry Reviver" = Registry Reviver

"RemoteCaptureTask" = Canon Utilities RemoteCapture Task for ZoomBrowser EX

"SkypeLauncher" = SkypeLauncher

"Soulseek2" = SoulSeek 157 NS 13c

"Stellar Phoenix Photo Recovery_is1" = Stellar Phoenix Photo Recovery

"Stellar Phoenix Windows Data Recovery_is1" = Stellar Phoenix Windows Data Recovery V4.1

"ToolBand.SkypeIEToolbarToolbar" = Skype add-on for IE

"TS3 Install Helper Monkey" = TS3 Install Helper Monkey

"uTorrent" = µTorrent

"vloader" = vloader 2.1

"vloader-bg 1.53" = vloader-bg 1.53

"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5

"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7

"WIC" = Windows Imaging Component

"Winamp" = Winamp (remove only)

"WinAVI Video Converter 10.5_is1" = WinAVI Video Converter

"Windows Media Format Runtime" = Windows Media Format 11 runtime

"Windows XP Service Pack" = Windows XP Service Pack 3

"WinRAR archiver" = WinRAR archiver

"Wondershare Photo Collage Studio GOTD Edition_is1" = Wondershare Photo Collage Studio 4.2.13.3

"Wudf01005" = Microsoft User-Mode Driver Framework Feature Pack 1.5

"ZoomBrowser EX" = Canon Utilities ZoomBrowser EX

"ZoomBrowser EX Memory Card Utility" = Canon ZoomBrowser EX Memory Card Utility

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1614895754-299502267-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"CNET TechTracker" = CNET TechTracker

"Facebook Plug-In" = Facebook Plug-In

"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]

Error - 24.10.2011 г. 12:09:34 | Computer Name = 835DDD225B914AB | Source = Microsoft Office 14 | ID = 5000

Description = EventType officelifeboathang, P1 winword.exe, P2 14.0.6024.1000, P3

ntdll.dll, P4 5.1.2600.5755, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 NIL, P10 NIL.

Error - 28.10.2011 г. 17:37:45 | Computer Name = 835DDD225B914AB | Source = Application Hang | ID = 1002

Description = Hanging application TS3W.exe, version 0.2.0.164, hang module hungapp,

version 0.0.0.0, hang address 0x00000000.

Error - 28.10.2011 г. 17:37:53 | Computer Name = 835DDD225B914AB | Source = Application Hang | ID = 1002

Description = Hanging application Sims3LauncherW.exe, version 0.2.0.164, hang module

hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 28.10.2011 г. 17:40:24 | Computer Name = 835DDD225B914AB | Source = Application Hang | ID = 1002

Description = Hanging application Sims3LauncherW.exe, version 0.2.0.164, hang module

hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 03.11.2011 г. 08:02:54 | Computer Name = 835DDD225B914AB | Source = CNET TechTracker | ID = 131074

Description = Unable to complete request due to error: The server name or address

could not be resolved

Error - 03.11.2011 г. 08:02:56 | Computer Name = 835DDD225B914AB | Source = CNET TechTracker | ID = 131074

Description = result: Scan Failed - General scan failure computer: 835ddd225b914ab

scanned

on: 03.11.2011 г. 13:46

[ System Events ]

Error - 09.11.2011 г. 14:03:03 | Computer Name = 835DDD225B914AB | Source = Service Control Manager | ID = 7003

Description = The Windows Firewall/Internet Connection Sharing (ICS) service depends

on the following nonexistent service: Netman

Error - 09.11.2011 г. 16:13:31 | Computer Name = 835DDD225B914AB | Source = Service Control Manager | ID = 7000

Description = The adfs service failed to start due to the following error: %%2

Error - 09.11.2011 г. 16:13:31 | Computer Name = 835DDD225B914AB | Source = Service Control Manager | ID = 7003

Description = The Computer Browser service depends on the following nonexistent

service: LanmanServer

Error - 09.11.2011 г. 16:13:31 | Computer Name = 835DDD225B914AB | Source = Service Control Manager | ID = 7003

Description = The Windows Firewall/Internet Connection Sharing (ICS) service depends

on the following nonexistent service: Netman

Error - 10.11.2011 г. 07:19:51 | Computer Name = 835DDD225B914AB | Source = Service Control Manager | ID = 7000

Description = The adfs service failed to start due to the following error: %%2

Error - 10.11.2011 г. 07:19:51 | Computer Name = 835DDD225B914AB | Source = Service Control Manager | ID = 7003

Description = The Computer Browser service depends on the following nonexistent

service: LanmanServer

Error - 10.11.2011 г. 07:19:51 | Computer Name = 835DDD225B914AB | Source = Service Control Manager | ID = 7003

Description = The Windows Firewall/Internet Connection Sharing (ICS) service depends

on the following nonexistent service: Netman

Error - 10.11.2011 г. 11:04:11 | Computer Name = 835DDD225B914AB | Source = Service Control Manager | ID = 7000

Description = The adfs service failed to start due to the following error: %%2

Error - 10.11.2011 г. 11:04:11 | Computer Name = 835DDD225B914AB | Source = Service Control Manager | ID = 7003

Description = The Computer Browser service depends on the following nonexistent

service: LanmanServer

Error - 10.11.2011 г. 11:04:11 | Computer Name = 835DDD225B914AB | Source = Service Control Manager | ID = 7003

Description = The Windows Firewall/Internet Connection Sharing (ICS) service depends

on the following nonexistent service: Netman

< End of report >

OTL.Txt

В общи линии нещата изглеждат наред..!

Стартирайте отново OTL, копирайте (Copy) и поставете (Paste) скриптовия текст от текстовото поле по-долу под колонката Custom Scans/Fixes, като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта.

:OTL
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL File not found
O2 - BHO: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk -  - File not found
MsConfig - StartUpReg: [b]Device Detector[/b] - hkey= - key= -  File not found
MsConfig - StartUpReg: [b]NeroFilterCheck[/b] - hkey= - key= -  File not found
MsConfig - StartUpReg: [b]RemoteControl[/b] - hkey= - key= -  File not found

:Reg

:files
autorun.inf /alldrives
autorun.exe /alldrives
recycler /alldrives
ipconfig /flushdns /c

:Commands
[purity]
[emptytemp]
[resethosts]
[clearallrestorepoints]
[emptyflash]
[Reboot]

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix

Windows ще се рестартира и ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

OTL logfile created on: 10.11.2011 г. 19:34:09 - Run 2

OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\1\My Documents\Downloads\Programs

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 7.0.5730.11)

Locale: 00000402 | Country: Bulgaria | Language: BGR | Date Format: dd.M.yyyy 'г.'

2,00 Gb Total Physical Memory | 1,03 Gb Available Physical Memory | 51,53% Memory free

3,85 Gb Paging File | 2,74 Gb Available in Paging File | 71,25% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 97,66 Gb Total Space | 27,05 Gb Free Space | 27,70% Space Free | Partition Type: NTFS

Drive D: | 368,10 Gb Total Space | 89,75 Gb Free Space | 24,38% Space Free | Partition Type: NTFS

Drive G: | 3,69 Gb Total Space | 3,16 Gb Free Space | 85,73% Space Free | Partition Type: FAT32

Computer Name: 835DDD225B914AB | User Name: 1 | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011.11.10 19:33:19 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\1\My Documents\Downloads\Programs\OTL_2.exe

PRC - [2011.11.09 18:57:46 | 000,912,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe

PRC - [2011.10.24 20:29:16 | 002,415,456 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgtray.exe

PRC - [2011.10.18 06:14:54 | 001,229,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgnsx.exe

PRC - [2011.10.13 18:17:53 | 000,246,600 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe

PRC - [2011.10.12 06:25:22 | 004,433,248 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

PRC - [2011.10.10 06:23:34 | 000,973,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgemcx.exe

PRC - [2011.09.08 19:53:26 | 000,743,264 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgrsx.exe

PRC - [2011.08.30 18:49:16 | 002,620,416 | ---- | M] () -- C:\Documents and Settings\1\Application Data\CBS Interactive\CNET TechTracker\TechTracker.exe

PRC - [2011.08.15 05:21:40 | 000,337,760 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgcsrvx.exe

PRC - [2011.08.02 05:09:08 | 000,192,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe

PRC - [2011.04.26 16:22:02 | 002,530,671 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\adb.exe

PRC - [2011.04.26 16:22:02 | 000,593,920 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe

PRC - [2011.03.31 15:08:14 | 000,080,896 | ---- | M] () -- C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

PRC - [2010.06.26 20:09:18 | 000,167,936 | ---- | M] (Applian Technologies, Inc.) -- C:\Program Files\Freecorder\FLVSrvc.exe

PRC - [2010.02.14 19:35:42 | 000,186,760 | ---- | M] () -- C:\Program Files\Photodex\ProShowGold\scsiaccess.exe

PRC - [2009.12.11 17:35:03 | 000,289,072 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe

PRC - [2009.12.11 17:34:13 | 003,118,512 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe

PRC - [2009.05.07 21:05:44 | 000,075,048 | ---- | M] (cyberlink) -- C:\Program Files\CyberLink\Shared Files\brs.exe

PRC - [2009.04.27 20:41:58 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe

PRC - [2008.12.10 11:02:30 | 000,216,520 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\daemon.exe

PRC - [2008.05.08 01:29:38 | 000,122,880 | ---- | M] (CrypKey (Canada) Ltd.) -- C:\WINDOWS\system32\Crypserv.exe

PRC - [2008.04.14 04:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

PRC - [2007.06.18 14:10:32 | 000,271,360 | ---- | M] (Nokia) -- C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe

PRC - [2007.06.15 15:55:00 | 000,300,544 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

PRC - [2007.01.31 13:55:42 | 000,096,370 | ---- | M] (Canon Inc.) -- C:\Program Files\Canon\CAL\CALMAIN.exe

PRC - [2004.03.25 00:14:49 | 000,970,240 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winamp.exe

========== Modules (No Company Name) ==========

MOD - [2011.11.09 18:57:46 | 000,849,368 | ---- | M] () -- C:\Program Files\Mozilla Firefox\js3250.dll

MOD - [2011.10.13 18:17:53 | 000,246,600 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe

MOD - [2011.08.30 18:49:16 | 002,620,416 | ---- | M] () -- C:\Documents and Settings\1\Application Data\CBS Interactive\CNET TechTracker\TechTracker.exe

MOD - [2011.04.26 16:22:02 | 002,530,671 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\adb.exe

MOD - [2011.04.26 16:22:02 | 001,515,520 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\Maps\R66Api.dll

MOD - [2011.04.26 16:22:02 | 000,593,920 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe

MOD - [2011.04.26 16:22:02 | 000,559,244 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\sqlite3.7.dll

MOD - [2011.04.26 16:22:02 | 000,516,599 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\sqlite3.dll

MOD - [2011.04.26 16:22:02 | 000,385,024 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\htcDetect.dll

MOD - [2011.04.26 16:22:02 | 000,139,264 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\htcDisk.dll

MOD - [2011.04.26 16:22:02 | 000,139,264 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\htcDetectLegend.dll

MOD - [2011.04.26 16:22:02 | 000,094,208 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\fdHttpd.dll

MOD - [2011.03.31 15:08:14 | 000,080,896 | ---- | M] () -- C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

MOD - [2011.03.16 23:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

MOD - [2010.10.30 10:47:45 | 011,486,720 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni.dll

MOD - [2010.10.30 10:47:08 | 003,182,592 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

MOD - [2010.10.30 10:47:08 | 002,048,000 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll

MOD - [2010.10.30 10:47:07 | 002,933,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

MOD - [2010.10.30 10:47:06 | 000,425,984 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll

MOD - [2010.10.20 14:45:26 | 008,801,120 | ---- | M] () -- C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll

MOD - [2010.06.27 14:07:41 | 005,612,496 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

MOD - [2010.02.14 19:35:42 | 000,186,760 | ---- | M] () -- C:\Program Files\Photodex\ProShowGold\scsiaccess.exe

MOD - [2010.02.05 20:27:45 | 001,291,776 | ---- | M] () -- C:\WINDOWS\system32\quartz.dll

MOD - [2009.11.24 17:39:00 | 001,093,064 | ---- | M] () -- C:\Documents and Settings\1\Application Data\Mozilla\Firefox\Profiles\1qt76a0q.default\extensions\[email protected]\components\DTToolbarFF.dll

MOD - [2009.06.10 08:29:34 | 000,466,944 | ---- | M] () -- C:\WINDOWS\system32\nvshell.dll

MOD - [2009.02.27 20:36:40 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.BGR

MOD - [2008.12.10 11:02:30 | 000,593,352 | ---- | M] () -- C:\Program Files\DAEMON Tools Lite\DaemonPlugin.dll

MOD - [2008.04.14 04:42:44 | 000,148,992 | ---- | M] () -- C:\WINDOWS\system32\mpg2splt.ax

MOD - [2008.04.14 04:42:04 | 000,562,176 | ---- | M] () -- C:\WINDOWS\system32\qedit.dll

MOD - [2008.04.14 04:42:04 | 000,386,048 | ---- | M] () -- C:\WINDOWS\system32\qdvd.dll

MOD - [2008.04.14 04:42:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll

MOD - [2008.04.14 04:41:52 | 000,059,904 | ---- | M] () -- C:\WINDOWS\system32\devenum.dll

MOD - [2004.12.26 19:34:38 | 000,121,344 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll

MOD - [2004.03.25 00:23:47 | 000,139,264 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_wm.dll

MOD - [2004.03.24 04:23:28 | 002,136,576 | ---- | M] () -- C:\Program Files\Winamp\Plugins\gen_ff.dll

MOD - [2004.03.24 03:50:32 | 000,365,056 | ---- | M] () -- C:\Program Files\Winamp\Plugins\gen_ml.dll

MOD - [2004.03.21 00:14:18 | 000,102,400 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_midi.dll

MOD - [2004.03.15 13:12:34 | 000,055,808 | ---- | M] () -- C:\Program Files\Winamp\Plugins\gen_jumpex.dll

MOD - [2004.03.10 21:59:19 | 000,163,328 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_mod.dll

MOD - [2004.03.04 00:38:41 | 000,018,432 | ---- | M] () -- C:\Program Files\Winamp\Plugins\gen_hotkeys.dll

MOD - [2004.02.05 07:26:54 | 000,012,288 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_mp4.dll

MOD - [2004.01.30 06:39:31 | 000,227,840 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_vorbis.dll

MOD - [2004.01.29 06:16:11 | 000,276,992 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_mp3.dll

MOD - [2004.01.24 22:57:16 | 000,041,984 | ---- | M] () -- C:\Program Files\Winamp\Plugins\out_ds.dll

MOD - [2004.01.24 11:25:53 | 000,070,144 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_cdda.dll

MOD - [2003.11.13 22:52:06 | 000,011,264 | ---- | M] () -- C:\Program Files\Winamp\Plugins\gen_tray.dll

MOD - [2003.11.13 11:09:26 | 000,058,368 | ---- | M] () -- C:\Program Files\Winamp\Plugins\freeform\wacs\jpgload\jpgload.wac

MOD - [2002.10.07 02:00:38 | 000,013,824 | ---- | M] () -- C:\Program Files\Winamp\Plugins\out_wave.dll

MOD - [2002.09.01 03:10:38 | 000,031,232 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_wave.dll

MOD - [2002.07.21 09:46:54 | 000,084,480 | ---- | M] () -- C:\Program Files\Winamp\Plugins\read_file.dll

MOD - [2001.12.30 17:08:34 | 000,015,360 | ---- | M] () -- C:\Program Files\Winamp\Plugins\out_disk.dll

========== Win32 Services (SafeList) ==========

SRV - [2011.10.13 18:17:53 | 000,246,600 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe -- (vToolbarUpdater)

SRV - [2011.10.12 06:25:22 | 004,433,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe -- (AVGIDSAgent)

SRV - [2011.09.01 08:17:00 | 001,025,352 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)

SRV - [2011.08.02 05:09:08 | 000,192,776 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe -- (avgwd)

SRV - [2011.03.31 15:08:14 | 000,080,896 | ---- | M] () [Auto | Running] -- C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)

SRV - [2010.12.27 22:50:30 | 031,124,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)

SRV - [2010.02.14 19:35:42 | 000,186,760 | ---- | M] () [Auto | Running] -- C:\Program Files\Photodex\ProShowGold\scsiaccess.exe -- (ScsiAccess)

SRV - [2009.12.30 17:27:45 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)

SRV - [2008.05.08 01:29:38 | 000,122,880 | ---- | M] (CrypKey (Canada) Ltd.) [Auto | Running] -- C:\WINDOWS\System32\Crypserv.exe -- (Crypkey License)

SRV - [2007.06.15 15:55:00 | 000,300,544 | ---- | M] (Nokia.) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)

SRV - [2007.01.31 13:55:42 | 000,096,370 | ---- | M] (Canon Inc.) [Auto | Running] -- C:\Program Files\Canon\CAL\CALMAIN.exe -- (CCALib8)

========== Driver Services (SafeList) ==========

DRV - [2011.10.07 06:23:48 | 000,230,608 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86)

DRV - [2011.10.04 06:21:42 | 000,016,720 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim)

DRV - [2011.09.13 05:30:10 | 000,032,592 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86)

DRV - [2011.08.08 05:08:58 | 000,040,016 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86)

DRV - [2011.07.11 00:14:38 | 000,295,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix)

DRV - [2011.07.11 00:14:28 | 000,024,272 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)

DRV - [2011.07.11 00:14:28 | 000,023,120 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH)

DRV - [2011.07.11 00:14:26 | 000,134,608 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)

DRV - [2010.06.22 17:01:50 | 000,021,248 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\htcnprot.sys -- (htcnprot)

DRV - [2009.12.12 17:22:02 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)

DRV - [2009.06.09 23:49:32 | 000,024,576 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ANDROIDUSB.sys -- (HTCAND32)

DRV - [2009.05.21 08:31:10 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)

DRV - [2009.05.20 15:27:46 | 000,016,608 | ---- | M] (Windows ® 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv)

DRV - [2009.05.07 21:05:22 | 000,087,536 | ---- | M] (CyberLink Corp.) [2009/12/11 18:33:39] [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD9\000.fcl -- ({B154377D-700F-42cc-9474-23858FBDF4BD})

DRV - [2009.02.09 06:37:56 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)

DRV - [2009.02.09 06:37:48 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)

DRV - [2009.02.09 06:37:46 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)

DRV - [2009.02.09 06:37:46 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)

DRV - [2008.08.26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)

DRV - [2008.03.17 18:45:52 | 000,019,584 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\ckldrv.sys -- (NetworkX)

DRV - [2008.02.14 11:04:06 | 004,676,096 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)

DRV - [2008.01.03 16:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,AlwaysUseDefaultPrinter = yes

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://bksly.startya.com/?cfg=2-564-0-0&engine_id=3&provider_id=3&product_id=564&country=BG

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore =

IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"

FF - prefs.js..browser.search.defaultthis.engineName: "Freecorder Customized Web Search"

FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=3&q={searchTerms}"

FF - prefs.js..browser.search.selectedEngine: "AVG Secure Search"

FF - prefs.js..browser.startup.homepage: "http://www.google.bg/"

FF - prefs.js..extensions.enabledItems: [email protected]:1.1.1.0014

FF - prefs.js..extensions.enabledItems: {f2257711-226b-4529-8e1d-e82e1c55ebd8}:2.5.6.0

FF - prefs.js..extensions.enabledItems: [email protected]:6.7

FF - prefs.js..extensions.enabledItems: [email protected]:1.0

FF - prefs.js..extensions.enabledItems: {1392b8d2-5c05-419f-a8f6-b9f15a596612}:3.2.1.3

FF - prefs.js..extensions.enabledItems: avg@igeared:7.008.031.001

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26

FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:12.0.0.1865

FF - prefs.js..keyword.URL: "http://search.avg.com/route/?d=4e493eb6&v=7.008.031.001&i=23&tp=ab&iy=&ychte=us&lng=bg&q="

FF - prefs.js..network.proxy.type: 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@photodex.com/PhotodexPresenter: C:\Program Files\Photodex Presenter\npPxPlay.dll ( )

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Documents and Settings\1\Application Data\Facebook\npfbplugin_1_0_3.dll ( )

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\1\Local Settings\Application Data\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\1\Local Settings\Application Data\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2011.11.04 10:40:46 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG10\Toolbar\Firefox\avg@igeared [2011.09.16 15:02:52 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.11.09 18:57:48 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.11.09 18:57:48 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Documents and Settings\1\Application Data\IDM\idmmzcc3 [2009.12.11 17:33:11 | 000,000,000 | ---D | M]

[2009.05.21 09:51:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\1\Application Data\Mozilla\Extensions

[2011.11.10 13:24:43 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\1\Application Data\Mozilla\Firefox\Profiles\1qt76a0q.default\extensions

[2010.12.25 10:46:10 | 000,000,000 | ---D | M] (Freecorder Community Toolbar) -- C:\Documents and Settings\1\Application Data\Mozilla\Firefox\Profiles\1qt76a0q.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}

[2010.10.30 15:29:30 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\1\Application Data\Mozilla\Firefox\Profiles\1qt76a0q.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}

[2010.02.13 12:21:43 | 000,000,000 | ---D | M] (Feboz Toolbar) -- C:\Documents and Settings\1\Application Data\Mozilla\Firefox\Profiles\1qt76a0q.default\extensions\{f2257711-226b-4529-8e1d-e82e1c55ebd8}

[2009.12.12 17:22:48 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Documents and Settings\1\Application Data\Mozilla\Firefox\Profiles\1qt76a0q.default\extensions\[email protected]

[2011.10.13 18:17:52 | 000,003,674 | ---- | M] () -- C:\Documents and Settings\1\Application Data\Mozilla\Firefox\Profiles\1qt76a0q.default\searchplugins\avg-secure-search.xml

[2009.12.12 17:22:18 | 000,000,523 | ---- | M] () -- C:\Documents and Settings\1\Application Data\Mozilla\Firefox\Profiles\1qt76a0q.default\searchplugins\daemon-search.xml

[2011.06.01 19:24:01 | 000,001,058 | ---- | M] () -- C:\Documents and Settings\1\Application Data\Mozilla\Firefox\Profiles\1qt76a0q.default\searchplugins\yahoo-zugo.xml

[2011.11.06 23:46:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2011.09.04 21:45:05 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

[2009.12.11 17:33:11 | 000,000,000 | ---D | M] (IDM CC) -- C:\DOCUMENTS AND SETTINGS\1\APPLICATION DATA\IDM\IDMMZCC3

[2011.09.16 15:02:52 | 000,000,000 | ---D | M] ("urn:mozilla:install-manifest" em:id="avg@igeared" em:name="AVG Security Toolbar" em:version="7.008.031.001" em:displayname="AVG Security Toolbar" em:iconURL="chrome://tavgp/skin/logo.ico" em:creator="AVG Technologies" em:description="AVG Security Toolbar" em:homepageURL="http://www.avg.com" >) -- C:\PROGRAM FILES\AVG\AVG10\TOOLBAR\FIREFOX\AVG@IGEARED

[2011.11.04 10:40:46 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG2012\FIREFOX4

[2009.12.14 22:10:49 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF

[2011.05.04 03:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll

[2010.03.13 19:52:07 | 000,001,083 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\911bg.xml

[2010.03.13 19:52:07 | 000,002,442 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\diribg.xml

[2010.03.13 19:52:07 | 000,001,515 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pe-bg.xml

[2010.03.13 19:52:07 | 000,001,857 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\portalbgdict.xml

[2010.03.13 19:52:08 | 000,001,220 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-bg.xml

========== Chrome ==========

CHR - default_search_provider: AVG Secure Search (Enabled)

CHR - default_search_provider: search_url = http://isearch.avg.com/search?cid={1426C954-A8F4-47E2-961B-43A96FA8F3A0}&mid=&lang=en&ds=AVG&pr=fr&d=&v=8.0.0.34&sap=dsp&q={searchTerms}

CHR - default_search_provider: suggest_url = http://clients5.google.com/complete/search?hl={language}&amp;q={searchTerms}&amp;client=ie8&amp;inputencoding={inputEncoding}&amp;outputencoding={outputEncoding}

CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\1\Local Settings\Application Data\Google\Chrome\Application\15.0.874.106\gcswf32.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll

CHR - plugin: Java Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll

CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll

CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL

CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\1\Local Settings\Application Data\Google\Chrome\Application\15.0.874.106\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\1\Local Settings\Application Data\Google\Chrome\Application\15.0.874.106\pdf.dll

CHR - plugin: AVG Internet Security (Enabled) = C:\Documents and Settings\1\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\10.0.0.1409_0\plugins/avgnpss.dll

CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll

CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll

CHR - plugin: Facebook Plugin (Enabled) = C:\Documents and Settings\1\Application Data\Facebook\npfbplugin_1_0_3.dll

CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\1\Local Settings\Application Data\Google\Update\1.3.21.69\npGoogleUpdate3.dll

CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll

CHR - plugin: Photodex Presenter Plugin (Enabled) = C:\Program Files\Photodex Presenter\npPxPlay.dll

CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

CHR - plugin: Default Plug-in (Enabled) = default_plugin

CHR - Extension: AVG Safe Search = C:\Documents and Settings\1\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1857_0\

O1 HOSTS File: ([2011.08.15 17:20:32 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts

O1 - Hosts: 127.0.0.1 localhost

O1 - Hosts: ::1 localhost

O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.)

O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL File not found

O2 - BHO: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.

O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)

O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()

O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)

O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)

O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()

O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()

O3 - HKCU\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)

O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()

O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()

O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)

O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)

O4 - HKLM..\Run: [bCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)

O4 - HKLM..\Run: [bDRegion] C:\Program Files\CyberLink\Shared Files\brs.exe (cyberlink)

O4 - HKLM..\Run: [Freecorder FLV Service] C:\Program Files\Freecorder\FLVSrvc.exe (Applian Technologies, Inc.)

O4 - HKLM..\Run: [HTC Sync Loader] C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()

O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()

O4 - HKLM..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe (Nokia)

O4 - HKLM..\Run: [PDVD9LanguageShortcut] C:\Program Files\CyberLink\PowerDVD9\Language\Language.exe (CyberLink Corp.)

O4 - HKLM..\Run: [RemoteControl9] C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)

O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)

O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)

O4 - Startup: C:\Documents and Settings\1\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

O4 - Startup: C:\Documents and Settings\1\Start Menu\Programs\Startup\CNET TechTracker.lnk = C:\Documents and Settings\1\Application Data\CBS Interactive\CNET TechTracker\TechTracker.exe ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowRun = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoColorChoice = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoSizeChoice = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoVisualStyleChoice = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle = C:\Windows\Resources\Themes\Luna.theme ()

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)

O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)

O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)

O8 - Extra context menu item: Свали видео съдържанието на FLV с IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm ()

O8 - Extra context menu item: Свали всички линкове с IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm ()

O8 - Extra context menu item: Свали с IDM - C:\Program Files\Internet Download Manager\IEExt.htm ()

O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O15 - HKCU\..Trusted Domains: ubb.bg ([ebb] https in Trusted sites)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.10.240.2 217.10.240.242

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B5D49AA5-0930-47AD-B85B-435CFD384BD3}: DhcpNameServer = 217.10.240.2 217.10.240.242

O18 - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()

O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\8.0.1\ViProtocol.dll ()

O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)

O20 - Winlogon\Notify\WgaLogon: DllName - (WgaLogon.dll) - C:\WINDOWS\System32\WgaLogon.dll ()

O24 - Desktop WallPaper: C:\Documents and Settings\1\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\1\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2009.05.20 15:00:40 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[CLEARALLRESTOREPOINTS]

Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011.11.10 17:04:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\1\Start Menu\Programs\CyberLink PowerDVD 9

[2011.11.06 12:25:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\1\Application Data\Outlook

[2011.11.03 16:41:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype

[2011.11.03 16:41:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Skype

[2011.10.13 18:17:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\AVG 2012

[2011.10.13 18:17:53 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AVG Secure Search

[2011.10.13 18:17:52 | 000,000,000 | ---D | C] -- C:\Program Files\AVG Secure Search

[2011.10.13 18:16:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\1\Application Data\AVG2012

[2011.10.13 18:16:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVG2012

[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011.11.10 19:16:30 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini

[2011.11.10 18:55:11 | 000,001,062 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-299502267-839522115-1003UA.job

[2011.11.10 18:54:00 | 000,000,238 | -H-- | M] () -- C:\WINDOWS\tasks\{810401E2-DDE0-454e-B0E2-AA89C9E5967C}.job

[2011.11.10 18:41:11 | 000,000,976 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2011.11.10 17:04:17 | 000,235,289 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml

[2011.11.10 17:04:07 | 000,000,972 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2011.11.10 17:04:03 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2011.11.10 17:00:18 | 000,000,155 | ---- | M] () -- C:\WINDOWS\winamp.ini

[2011.11.09 19:55:00 | 000,001,010 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-299502267-839522115-1003Core.job

[2011.11.09 10:06:56 | 109,146,312 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm

[2011.11.08 21:55:31 | 000,121,856 | ---- | M] () -- C:\Documents and Settings\1\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011.11.07 10:10:29 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2011.11.06 18:23:03 | 000,199,487 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\iavichjg.avm

[2011.11.06 12:19:52 | 000,435,396 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2011.11.06 12:19:52 | 000,068,292 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2011.11.04 10:41:12 | 000,000,702 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\AVG 2012.lnk

[2011.11.03 16:41:31 | 000,001,878 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk

[2011.10.28 07:55:37 | 000,002,252 | ---- | M] () -- C:\Documents and Settings\1\Desktop\Google Chrome.lnk

[2011.10.28 07:55:37 | 000,002,230 | ---- | M] () -- C:\Documents and Settings\1\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk

[2011.10.25 00:30:30 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\1\Local Settings\Application Data\prvlcl.dat

[2011.10.23 18:30:26 | 000,001,793 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\The Sims™ 3 Pets.lnk

[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.11.03 16:41:31 | 000,001,878 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk

[2011.10.23 18:30:26 | 000,001,793 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\The Sims™ 3 Pets.lnk

[2011.10.13 18:17:59 | 000,000,702 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\AVG 2012.lnk

[2011.09.07 16:48:45 | 000,002,157 | ---- | C] () -- C:\WINDOWS\System32\GUCI_AVS.ini

[2011.06.02 23:46:44 | 000,000,068 | ---- | C] () -- C:\WINDOWS\spwdr.INI

[2011.06.02 23:46:31 | 000,000,071 | ---- | C] () -- C:\WINDOWS\Crypkey.ini

[2011.06.02 23:46:27 | 000,027,648 | R--- | C] () -- C:\WINDOWS\Setup_ck.exe

[2011.06.02 23:46:27 | 000,019,584 | ---- | C] () -- C:\WINDOWS\System32\Ckldrv.sys

[2011.06.02 23:46:27 | 000,018,432 | ---- | C] () -- C:\WINDOWS\Setup_ck.dll

[2011.06.02 23:46:27 | 000,011,776 | ---- | C] () -- C:\WINDOWS\Ckrfresh.exe

[2011.06.02 23:46:21 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\StellarProfile.dll

[2010.12.06 18:00:37 | 000,000,332 | ---- | C] () -- C:\WINDOWS\System32\CNCMFP31.INI

[2010.11.25 13:55:39 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\1\Local Settings\Application Data\prvlcl.dat

[2010.03.17 18:51:53 | 000,002,560 | ---- | C] () -- C:\WINDOWS\_MSRSTRT.EXE

[2010.03.17 17:05:45 | 000,000,850 | ---- | C] () -- C:\WINDOWS\ao2000pr.ini

[2009.12.12 13:38:29 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat

[2009.12.11 18:24:05 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini

[2009.12.11 18:24:04 | 000,121,856 | ---- | C] () -- C:\Documents and Settings\1\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2009.06.10 12:33:00 | 001,580,550 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin

[2009.06.10 08:29:34 | 001,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll

[2009.06.10 08:29:34 | 001,657,376 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe

[2009.06.10 08:29:34 | 001,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll

[2009.06.10 08:29:34 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll

[2009.06.10 08:29:34 | 000,449,056 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe

[2009.06.10 08:29:34 | 000,436,768 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe

[2009.06.10 08:29:32 | 001,507,328 | ---- | C] () -- C:\WINDOWS\System32\nview.dll

[2009.05.21 09:51:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat

[2009.05.21 09:26:48 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI

[2009.05.21 08:46:10 | 000,000,155 | ---- | C] () -- C:\WINDOWS\winamp.ini

[2009.05.21 08:42:26 | 000,679,936 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2009.05.21 08:42:26 | 000,421,888 | ---- | C] () -- C:\WINDOWS\System32\OpenQuicktimeLib.dll

[2009.05.21 08:42:26 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2009.05.21 08:42:26 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\libfaac.dll

[2009.05.21 08:42:25 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll

[2009.05.20 17:42:33 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2009.05.20 17:39:40 | 002,159,128 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2009.05.20 15:26:38 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe

[2009.05.20 15:25:38 | 000,147,456 | R--- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4864.dll

[2009.05.20 15:02:30 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2009.05.20 14:57:57 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

[2009.03.10 21:18:20 | 001,488,688 | ---- | C] () -- C:\WINDOWS\System32\legitcheckcontrol.dll.bak

[2009.03.10 21:18:20 | 001,488,688 | ---- | C] () -- C:\WINDOWS\System32\LegitCheckControl.dll

[2009.03.10 21:18:14 | 000,332,672 | ---- | C] () -- C:\WINDOWS\System32\WgaTray.exe

[2009.03.10 21:18:00 | 000,200,064 | ---- | C] () -- C:\WINDOWS\System32\WgaLogon.dll

[2007.03.29 22:00:40 | 000,203,264 | R--- | C] () -- C:\WINDOWS\System32\CddbCdda.dll

[2006.12.30 17:48:38 | 000,000,533 | ---- | C] () -- C:\WINDOWS\powermp3cutterjoiner.ini

[2004.08.04 02:07:22 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin

[2004.08.02 15:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat

[2003.08.07 13:01:52 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll

[2002.03.21 14:39:02 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\UNACEV2.DLL

[2001.08.23 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin

[2001.08.23 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat

[2001.08.23 14:00:00 | 000,435,396 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat

[2001.08.23 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat

[2001.08.23 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat

[2001.08.23 14:00:00 | 000,068,292 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat

[2001.08.23 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin

[2001.08.23 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat

[2001.08.23 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

[2001.08.23 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

========== Custom Scans ==========

< :OTL >

< O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL File not found >

< O2 - BHO: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found. >

< MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk - - File not found >

< MsConfig - StartUpReg: Device Detector - hkey= - key= - File not found >

Invalid Switch: b] - hkey= - key= - File not found

< MsConfig - StartUpReg: NeroFilterCheck - hkey= - key= - File not found >

Invalid Switch: b] - hkey= - key= - File not found

< MsConfig - StartUpReg: RemoteControl - hkey= - key= - File not found >

Invalid Switch: b] - hkey= - key= - File not found

< >

< :Reg >

< >

< :files >

< autorun.inf /alldrives >

Invalid Switch: alldrives

< autorun.exe /alldrives >

Invalid Switch: alldrives

< recycler /alldrives >

Invalid Switch: alldrives

< ipconfig /flushdns /c >

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

< >

< :Commands >

< [purity] >

< [emptytemp] >

< [resethosts] >

< [emptyflash] >

< [Reboot] >

< End of report >

Защо давате лог от сканиране ...прочетете хубаво инструкцията в пост 6 ..Копирате скрипта и натискате Run Fix

All processes killed

========== OTL ==========

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartUpFolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk\ deleted successfully.

C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup moved successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartUpReg\Device Detector\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartUpReg\NeroFilterCheck\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartUpReg\RemoteControl\ deleted successfully.

========== REGISTRY ==========

========== FILES ==========

autorun.inf not found in C:\

autorun.inf not found in D:\

autorun.inf not found in G:\

autorun.exe not found in C:\

autorun.exe not found in D:\

autorun.exe not found in G:\

C:\RECYCLER\S-1-5-21-1614895754-299502267-839522115-1003 folder moved successfully.

C:\RECYCLER folder moved successfully.

D:\RECYCLER\S-1-5-21-1614895754-299502267-839522115-1003 folder moved successfully.

D:\RECYCLER folder moved successfully.

recycler not found in G:\

< ipconfig /flushdns /c >

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Documents and Settings\1\My Documents\Downloads\Programs\cmd.bat deleted successfully.

C:\Documents and Settings\1\My Documents\Downloads\Programs\cmd.txt deleted successfully.

========== COMMANDS ==========

[EMPTYTEMP]

User: 1

->Temp folder emptied: 67512564 bytes

->Temporary Internet Files folder emptied: 51091363 bytes

->Java cache emptied: 488 bytes

->FireFox cache emptied: 157440136 bytes

->Google Chrome cache emptied: 219041951 bytes

->Flash cache emptied: 18682 bytes

User: All Users

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

User: LocalService

->Temp folder emptied: 66016 bytes

->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 19569 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32\dllcache .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 7264348 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes

RecycleBin emptied: 0 bytes

Total Files Cleaned = 479,00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.

HOSTS file reset successfully

[EMPTYFLASH]

User: 1

->Flash cache emptied: 0 bytes

User: All Users

User: Default User

->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

OTL by OldTimer - Version 3.2.31.0 log created on 11102011_194521

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

Добре..!Активни зарази не се виждат..!

Следват контролни сканирания:

Изтеглете Malwarebytes' Anti-Malware или от тук

* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.

* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.

* Ако има намерени обновявания, тя ще ги изтегли и инсталира.

* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.

* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.

* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.

* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.

* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. Копирайте този лог и го публикувайте в следващия си коментар по темата.

Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

Изтеглете програмата: ESET Online Scanner

• Стартирайте esetsmartinstaller_enu.exe
• Сложете отметка на YES, I accept the Terms of Use и изберете Start:

  

• Скенерът ще започне да изтегля компонентите, които са му необходими:

  

• Уверете се, че има отметки на следните редове:

  

  Накрая изберете Start

• Скенерът ще започне да изтегля последните дефиниции.
• След, като сканирането завърши изберете Finish.
• Отидете в: C:\Program Files\ESET\ESET Online Scanner
• Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си коментар.

Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Версия на базата от данни: 8135 Windows 5.1.2600 Service Pack 3 Internet Explorer 7.0.5730.11 11.11.2011 г. 18:40:58 mbam-log-2011-11-11 (18-40-58).txt Тип сканиране: Пълно сканиране (A:\|C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|) Сканирани обекти: 279355 Изминало време: 51 минута(и), 45 секунда(и) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 0 Заразени стойности в регистратурата: 0 Заразени информационни обекти в регистратурата: 0 Заразени папки: 0 Заразени файлове: 0 Заразени процеси в паметта: (Не бяха открити зловредни обекти) Заразени модули в паметта: (Не бяха открити зловредни обекти) Заразени ключове в регистратурата: (Не бяха открити зловредни обекти) Заразени стойности в регистратурата: (Не бяха открити зловредни обекти) Заразени информационни обекти в регистратурата: (Не бяха открити зловредни обекти) Заразени папки: (Не бяха открити зловредни обекти) Заразени файлове: (Не бяха открити зловредни обекти) ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6583 # api_version=3.0.2 # EOSSerial=db2765a6b4b56e4497a3f6a1330ce4e3 # end=finished # remove_checked=true # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-11-11 01:22:15 # local_time=2011-11-11 03:22:15 (+0200, FLE Standard Time) # country="Bulgaria" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=1024 16777175 100 0 2445826 2445826 0 0 # compatibility_mode=8192 67108863 100 0 3702 3702 0 0 # scanned=126399 # found=23 # cleaned=23 # scan_time=6202 C:\Documents and Settings\1\Application Data\IDM\DwnlData\1\114_114\114 a variant of Win32/XmasAds.A application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\Application Data\IDM\DwnlData\1\115_115\115 a variant of Win32/XmasAds.A application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\Application Data\OpenCandy\OpenCandy_C40282E48A63460892DA01E283580D7B\AFIRegistryReviverSetup.exe a variant of Win32/SlowPCfighter application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\Application Data\OpenCandy\OpenCandy_C40282E48A63460892DA01E283580D7B\AFIRegistryReviver_p21v1.exe a variant of Win32/SlowPCfighter application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\installer_power_mp3_cutter_1_0_English.exe Win32/Toggle application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\skypelauncher-setup.exe Win32/Toolbar.Zugo application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\skypelauncher-setup_10.exe Win32/Toolbar.Zugo application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\skypelauncher-setup_2.exe Win32/Toolbar.Zugo application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\skypelauncher-setup_3.exe Win32/Toolbar.Zugo application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\skypelauncher-setup_4.exe Win32/Toolbar.Zugo application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\skypelauncher-setup_5.exe Win32/Toolbar.Zugo application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\skypelauncher-setup_6.exe Win32/Toolbar.Zugo application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\skypelauncher-setup_7.exe Win32/Toolbar.Zugo application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\skypelauncher-setup_8.exe Win32/Toolbar.Zugo application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\skypelauncher-setup_9.exe Win32/Toolbar.Zugo application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\SoftonicDownloader_for_skype.exe a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\SoftonicDownloader_for_soulseek.exe a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Program Files\ReviverSoft\RegistryReviver\Registry Reviver.exe a variant of Win32/SlowPCfighter application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\System Volume Information\_restore{D9CFB449-15FE-485C-A86C-900D2E2BF5FD}\RP902\A0251713.exe a variant of Win32/SlowPCfighter application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\System Volume Information\_restore{D9CFB449-15FE-485C-A86C-900D2E2BF5FD}\RP902\A0251714.exe a variant of Win32/SlowPCfighter application (deleted - quarantined) 00000000000000000000000000000000 C C:\System Volume Information\_restore{D9CFB449-15FE-485C-A86C-900D2E2BF5FD}\RP902\A0251717.exe a variant of Win32/SlowPCfighter application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C D:\Downloads\Adobe_Photoshop_CS2_9.0_Final +Crack\Crack\Adobe Photoshop CS Activator.exe probably a variant of Win32/TrojanDownloader.Agent.IPGQQOF trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C D:\System Volume Information\_restore{D9CFB449-15FE-485C-A86C-900D2E2BF5FD}\RP902\A0251720.exe probably a variant of Win32/TrojanDownloader.Agent.IPGQQOF trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C ESETSmartInstaller@High as downloader log: all ok esets_scanner_update returned -1 esets_gle=53251 # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6583 # api_version=3.0.2 # EOSSerial=db2765a6b4b56e4497a3f6a1330ce4e3 # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2011-11-11 08:53:41 # local_time=2011-11-11 10:53:41 (+0200, FLE Standard Time) # country="Bulgaria" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=1024 16777175 100 0 2466758 2466758 0 0 # compatibility_mode=8192 67108863 100 0 24634 24634 0 0 # scanned=126420 # found=8 # cleaned=8 # scan_time=12356 C:\Documents and Settings\1\Application Data\OpenCandy\OpenCandy_C40282E48A63460892DA01E283580D7B\DLMgr_3_1.6.87.exe Win32/OpenCandy application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Compressed\DiskInternals_Flash_Recovery_v4_2_keygen.zip a variant of Win32/Kryptik.SHD trojan (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Compressed\KeyGenerator.rar a variant of Win32/Keygen.AO application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\CNET_TechTracker_2_Setup.exe Win32/OpenCandy application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\1\My Documents\Downloads\Programs\ConnectifyInstaller.exe Win32/OpenCandy application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\All Users\Application Data\ReviverSoft\RegistryReviver\InstallCache\{63E13B95-3168-481C-A8DF-FBE0DCDF5699}\Registry Reviver.msi a variant of Win32/SlowPCfighter application (deleted - quarantined) 00000000000000000000000000000000 C D:\Downloads\BS.Player Pro v2.57 Build 1051 Final\Keygen.rar a variant of Win32/Keygen.AC application (deleted - quarantined) 00000000000000000000000000000000 C D:\Downloads\The.Sims.3-Razor1911\The.Sims.3-Razor1911.iso probably a variant of Win32/Hupigon.CJKIBCX trojan (deleted - quarantined) 00000000000000000000000000000000 C

Какво е моментното състояние на системата ви..?Наблюдавате ли първоначалните проблеми..?

Здравейте! Извинявам се за закъснелия отговор.Наблюдавам подобрение,но отново на моменти ми зарежда много бавно и не всичко.

Причината определено не се дължи на зловреден софтуер..!

Деинсталирайте OTL така:

Стартирайте OTL още веднъж и натиснете бутона CleanUp.

Ще последва рестарт на Windows..!

Премахнете всички останали програмки и логове които използвахме в темата....!

• Изтеглете GooredFix, миръри: тук и тук. Запазете го на десктопа.
• Затворете всички браузъри и стартирайте GooredFix.exe (десен клик Run As Administrator). Потвърдете с Yes, за да започне сканирането.
• GooredFix ще провери за инфекции и след това ще се появи лог (GooredFix.txt). Копирайте (Copy) и поставете (Paste) резултатите от сканирането в следващия си коментар.

GooredFix by jpshortstuff (03.07.10.1) Log created at 18:17 on 13/11/2011 (1) Firefox version 3.6.24 (bg) ========== GooredScan ========== ========== GooredLog ========== C:\Program Files\Mozilla Firefox\extensions\ {972ce4c6-7e08-4474-a285-3208198ce6fd} [07:51 21/05/2009] {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} [20:10 14/12/2009] {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [19:45 04/09/2011] C:\Documents and Settings\1\Application Data\Mozilla\Firefox\Profiles\1qt76a0q.default\extensions\ [email protected] [15:22 12/12/2009] {1392b8d2-5c05-419f-a8f6-b9f15a596612} [08:46 25/12/2010] {20a82645-c095-46ed-80e3-08825760534b} [13:29 30/10/2010] {f2257711-226b-4529-8e1d-e82e1c55ebd8} [10:21 13/02/2010] [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{20a82645-c095-46ed-80e3-08825760534b}"="C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\" [14:05 20/12/2009] "{1E73965B-8B48-48be-9C8D-68B920ABC1C4}"="C:\Program Files\AVG\AVG2012\Firefox4\" [16:16 13/10/2011] "avg@igeared"="C:\Program Files\AVG\AVG10\Toolbar\Firefox\avg@igeared" [11:51 16/09/2011] "[email protected]"="C:\Program Files\Java\jre6\lib\deploy\jqs\ff" [20:10 14/12/2009] -=E.O.F=-

Изтеглете CCleaner и направете системна оптимизация,като се възползвате от следната статия CCleaner - методи на работа и почистване

Сега дори не ми зарежда сайта.

Кой сайт...и защо си мислите че проблема е от вируси...?

Защото ме пратиха при вас,поне така ми казаха от една друга тема. : ) И става въпрос за фейсбук

Именно ..пратили са ви за да проверим системата ви за вируси...проверих я и не виждам активни зарази...!

• Изтеглете и го запазете на вашия десктоп.
• Стартирайте програмата и изберете 2. Натиснете Enter
• Ще се появи лог файл с името RKreport[1].txt на вашия десктоп.
• Копирайте съдържанието му в следващия си пост.

RogueKiller V6.1.7 [11/05/2011] by Tigzy mail: tigzyRK<at>gmail<dot>com Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/ Blog: http://tigzyrk.blogspot.com Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version Started in : Normal mode User: 1 [Admin rights] Mode: Remove -- Date : 11/13/2011 19:08:36 ¤¤¤ Bad processes: 5 ¤¤¤ [sUSP PATH] FLVSrvLib.dll -- C:\Documents and Settings\1\Local Settings\Application Data\FLVService\lib\FLVSrvLib.dll -> UNLOADED [sUSP PATH] TechTracker.exe -- C:\Documents and Settings\1\Application Data\CBS Interactive\CNET TechTracker\TechTracker.exe -> KILLED [TermProc] [sUSP PATH] FLVSrvLib.dll -- C:\Documents and Settings\1\Local Settings\Application Data\FLVService\lib\FLVSrvLib.dll -> KILLED [TermProc] [sUSP PATH] FLVSrvLib.dll -- C:\Documents and Settings\1\Local Settings\Application Data\FLVService\lib\FLVSrvLib.dll -> UNLOADED [sUSP PATH] FLVSrvLib.dll -- C:\Documents and Settings\1\Local Settings\Application Data\FLVService\lib\FLVSrvLib.dll -> UNLOADED ¤¤¤ Registry Entries: 4 ¤¤¤ [bLACKLIST] HKLM\[...]\Root : LEGACY_SSHNAS () -> DELETED [sUSP PATH] CNET TechTracker.lnk : C:\Documents and Settings\1\Application Data\CBS Interactive\CNET TechTracker\TechTracker.exe -> DELETED [HJPOL] HKCU\[...]\Explorer : DisallowRun (1) -> DELETED [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED () ¤¤¤ Particular Files / Folders: ¤¤¤ ¤¤¤ Driver: [LOADED] ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ яю1 Finished : << RKreport[1].txt >> RKreport[1].txt

Да проверим още някои неща:

Моля, изтеглете последната версия на TDSSKiller - оттук и я запазете на вашия декстоп.

• Стартирайте TDSSKiller.exe за да стартирате приложението. След това кликнете върху бутона Change parameters.

  

• Сложете отметки пред Verify Driver Digital Signature и Detect TDLFS file system и натиснете ОК.

  

• Натиснете бутона Start Scan.

  

• Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.

  

• Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.

  Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue > Рестартирайте за да бъде завършена поправката.

  

  Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова.

• Лог файл ще бъде създаден в свободната директория на дял C:\ . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.

Изтеглете Gmer или от тук.

* Временно спрете Интернета си,всички работещи програми,както и антивирусната си програма.

* Стартирате програмата.

* След завършването на автомаичната експрес-проверка,махнете отметките от следните позиции:

- Sections

- IAT/EAT

- Show all

* От всички локални дискове маркирайте само системния дял (обикновенно това е C:\ )

* Изчакайте програмата да завърши сканирането,след което натиснете бутона Save и запишете (save as) резултатите на десктопа с име Gmer.log.

* Включете Интернета си и прикачете Gmer.log в следващия си коментар.

Забележка:

* Ако бъде открит Rootkit, ще последва въпрос дали желаете пълно сканиране на системата. Изберете NO.

* Не предприемайте никакви действия върху редовете маркирани с "<--- ROOТKIT" ,защото това може да доведе до грешки.

* В десния панел на програмата ще видите какво е ще се провери от програмата, не променяйте нищо. Убедете се, че на Show All няма отметка.

Внимание:

Ако имате проблем с използването на GMER по по-горе описания начин,моля изпълнете сканирането,като маркирате следните позиции:

Възможностите,които ми дава са само - skip,copy to quarantine,delete

Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete .

19:31:17.0140 3224 TDSS rootkit removing tool 2.6.18.0 Nov 11 2011 15:47:15 19:31:17.0468 3224 ============================================================ 19:31:17.0468 3224 Current date / time: 2011/11/13 19:31:17.0468 19:31:17.0468 3224 SystemInfo: 19:31:17.0468 3224 19:31:17.0468 3224 OS Version: 5.1.2600 ServicePack: 3.0 19:31:17.0468 3224 Product type: Workstation 19:31:17.0468 3224 ComputerName: 835DDD225B914AB 19:31:17.0468 3224 UserName: 1 19:31:17.0468 3224 Windows directory: C:\WINDOWS 19:31:17.0468 3224 System windows directory: C:\WINDOWS 19:31:17.0468 3224 Processor architecture: Intel x86 19:31:17.0468 3224 Number of processors: 2 19:31:17.0468 3224 Page size: 0x1000 19:31:17.0468 3224 Boot type: Normal boot 19:31:17.0468 3224 ============================================================ 19:31:18.0656 3224 Initialize success 19:31:46.0156 1904 ============================================================ 19:31:46.0156 1904 Scan started 19:31:46.0156 1904 Mode: Manual; SigCheck; TDLFS; 19:31:46.0156 1904 ============================================================ 19:31:46.0406 1904 Abiosdsk - ok 19:31:46.0421 1904 abp480n5 - ok 19:31:46.0453 1904 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 19:31:47.0187 1904 ACPI - ok 19:31:47.0250 1904 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 19:31:47.0406 1904 ACPIEC - ok 19:31:47.0421 1904 adfs - ok 19:31:47.0453 1904 adpu160m - ok 19:31:47.0500 1904 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 19:31:47.0625 1904 aec - ok 19:31:47.0671 1904 AFD (7e775010ef291da96ad17ca4b17137d7) C:\WINDOWS\System32\drivers\afd.sys 19:31:47.0734 1904 AFD - ok 19:31:47.0734 1904 Aha154x - ok 19:31:47.0765 1904 aic78u2 - ok 19:31:47.0796 1904 aic78xx - ok 19:31:47.0812 1904 AliIde - ok 19:31:47.0828 1904 amsint - ok 19:31:47.0843 1904 asc - ok 19:31:47.0875 1904 asc3350p - ok 19:31:47.0875 1904 asc3550 - ok 19:31:47.0953 1904 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 19:31:48.0046 1904 AsyncMac - ok 19:31:48.0078 1904 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 19:31:48.0187 1904 atapi - ok 19:31:48.0187 1904 Atdisk - ok 19:31:48.0203 1904 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 19:31:48.0296 1904 Atmarpc - ok 19:31:48.0312 1904 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 19:31:48.0421 1904 audstub - ok 19:31:48.0453 1904 AVGIDSDriver (4fa401b33c1b50c816486f6951244a14) C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys 19:31:48.0671 1904 AVGIDSDriver - ok 19:31:48.0703 1904 AVGIDSEH (69578bc9d43d614c6b3455db4af19762) C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys 19:31:48.0718 1904 AVGIDSEH - ok 19:31:48.0734 1904 AVGIDSFilter (6df528406aa22201f392b9b19121cd6f) C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys 19:31:48.0734 1904 AVGIDSFilter - ok 19:31:48.0765 1904 AVGIDSShim (1e01c2166b5599802bcd61b9691f7476) C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys 19:31:48.0765 1904 AVGIDSShim - ok 19:31:48.0796 1904 Avgldx86 (bf8118cd5e2255387b715b534d64acd1) C:\WINDOWS\system32\DRIVERS\avgldx86.sys 19:31:48.0796 1904 Avgldx86 - ok 19:31:48.0812 1904 Avgmfx86 (1c77ef67f196466adc9924cb288afe87) C:\WINDOWS\system32\DRIVERS\avgmfx86.sys 19:31:48.0828 1904 Avgmfx86 - ok 19:31:48.0843 1904 Avgrkx86 (f2038ed7284b79dcef581468121192a9) C:\WINDOWS\system32\DRIVERS\avgrkx86.sys 19:31:48.0859 1904 Avgrkx86 - ok 19:31:48.0890 1904 Avgtdix (a6d562b612216d8d02a35ebeb92366bd) C:\WINDOWS\system32\DRIVERS\avgtdix.sys 19:31:48.0906 1904 Avgtdix - ok 19:31:48.0921 1904 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 19:31:49.0031 1904 Beep - ok 19:31:49.0078 1904 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 19:31:49.0187 1904 cbidf2k - ok 19:31:49.0203 1904 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 19:31:49.0312 1904 CCDECODE - ok 19:31:49.0312 1904 cd20xrnt - ok 19:31:49.0343 1904 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 19:31:49.0437 1904 Cdaudio - ok 19:31:49.0468 1904 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 19:31:49.0578 1904 Cdfs - ok 19:31:49.0593 1904 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 19:31:49.0687 1904 Cdrom - ok 19:31:49.0687 1904 Changer - ok 19:31:49.0703 1904 CmdIde - ok 19:31:49.0718 1904 Cpqarray - ok 19:31:49.0734 1904 dac2w2k - ok 19:31:49.0750 1904 dac960nt - ok 19:31:49.0781 1904 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 19:31:49.0875 1904 Disk - ok 19:31:49.0953 1904 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 19:31:50.0078 1904 dmboot - ok 19:31:50.0093 1904 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 19:31:50.0203 1904 dmio - ok 19:31:50.0218 1904 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 19:31:50.0328 1904 dmload - ok 19:31:50.0359 1904 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 19:31:50.0468 1904 DMusic - ok 19:31:50.0484 1904 dpti2o - ok 19:31:50.0500 1904 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 19:31:50.0593 1904 drmkaud - ok 19:31:50.0609 1904 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 19:31:50.0718 1904 Fastfat - ok 19:31:50.0718 1904 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 19:31:50.0812 1904 Fdc - ok 19:31:50.0843 1904 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 19:31:50.0953 1904 Fips - ok 19:31:50.0968 1904 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 19:31:51.0062 1904 Flpydisk - ok 19:31:51.0109 1904 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 19:31:51.0218 1904 FltMgr - ok 19:31:51.0218 1904 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 19:31:51.0328 1904 Fs_Rec - ok 19:31:51.0343 1904 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 19:31:51.0437 1904 Ftdisk - ok 19:31:51.0453 1904 gdrv (5c230948dd6652228f88ca7ae6cb276c) C:\WINDOWS\gdrv.sys 19:31:51.0625 1904 gdrv - ok 19:31:51.0656 1904 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 19:31:51.0750 1904 Gpc - ok 19:31:51.0781 1904 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 19:31:51.0890 1904 HDAudBus - ok 19:31:51.0906 1904 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 19:31:52.0015 1904 HidUsb - ok 19:31:52.0015 1904 hpn - ok 19:31:52.0046 1904 HTCAND32 (cbd09ed9cf6822177ee85aea4d8816a2) C:\WINDOWS\system32\Drivers\ANDROIDUSB.sys 19:31:52.0078 1904 HTCAND32 - ok 19:31:52.0109 1904 htcnprot (04e3b3554076b8192a668efe88a682a1) C:\WINDOWS\system32\DRIVERS\htcnprot.sys 19:31:52.0125 1904 htcnprot - ok 19:31:52.0156 1904 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 19:31:52.0218 1904 HTTP - ok 19:31:52.0218 1904 i2omgmt - ok 19:31:52.0234 1904 i2omp - ok 19:31:52.0265 1904 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 19:31:52.0375 1904 i8042prt - ok 19:31:52.0468 1904 ialm (bffa387180121df1e4646c4ced3e16ca) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys 19:31:52.0671 1904 ialm - ok 19:31:52.0703 1904 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 19:31:52.0812 1904 Imapi - ok 19:31:52.0828 1904 InCDFs - ok 19:31:52.0828 1904 InCDPass - ok 19:31:52.0843 1904 InCDRm - ok 19:31:52.0859 1904 ini910u - ok 19:31:52.0937 1904 IntcAzAudAddService (08baf30f6de95814f58af9ce7bbc5614) C:\WINDOWS\system32\drivers\RtkHDAud.sys 19:31:53.0078 1904 IntcAzAudAddService - ok 19:31:53.0078 1904 IntelIde - ok 19:31:53.0093 1904 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 19:31:53.0187 1904 intelppm - ok 19:31:53.0203 1904 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 19:31:53.0312 1904 Ip6Fw - ok 19:31:53.0343 1904 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 19:31:53.0437 1904 IpFilterDriver - ok 19:31:53.0468 1904 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 19:31:53.0562 1904 IpInIp - ok 19:31:53.0593 1904 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 19:31:53.0687 1904 IpNat - ok 19:31:53.0703 1904 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 19:31:53.0796 1904 IPSec - ok 19:31:53.0812 1904 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 19:31:53.0921 1904 IRENUM - ok 19:31:53.0937 1904 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 19:31:54.0046 1904 isapnp - ok 19:31:54.0062 1904 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 19:31:54.0156 1904 Kbdclass - ok 19:31:54.0187 1904 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 19:31:54.0281 1904 kmixer - ok 19:31:54.0312 1904 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 19:31:54.0343 1904 KSecDD - ok 19:31:54.0390 1904 lbrtfdc - ok 19:31:54.0437 1904 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys 19:31:54.0453 1904 MBAMProtector - ok 19:31:54.0468 1904 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 19:31:54.0578 1904 mnmdd - ok 19:31:54.0593 1904 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 19:31:54.0687 1904 Modem - ok 19:31:54.0703 1904 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 19:31:54.0796 1904 Mouclass - ok 19:31:54.0828 1904 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 19:31:54.0921 1904 mouhid - ok 19:31:54.0953 1904 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 19:31:55.0046 1904 MountMgr - ok 19:31:55.0046 1904 mraid35x - ok 19:31:55.0062 1904 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 19:31:55.0171 1904 MRxDAV - ok 19:31:55.0203 1904 MRxSmb (f3aefb11abc521122b67095044169e98) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 19:31:55.0234 1904 MRxSmb - ok 19:31:55.0250 1904 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 19:31:55.0343 1904 Msfs - ok 19:31:55.0406 1904 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 19:31:55.0500 1904 MSKSSRV - ok 19:31:55.0515 1904 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 19:31:55.0625 1904 MSPCLOCK - ok 19:31:55.0671 1904 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 19:31:55.0765 1904 MSPQM - ok 19:31:55.0796 1904 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 19:31:55.0875 1904 mssmbios - ok 19:31:55.0906 1904 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys 19:31:56.0000 1904 MSTEE - ok 19:31:56.0031 1904 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys 19:31:56.0125 1904 Mup - ok 19:31:56.0156 1904 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 19:31:56.0265 1904 NABTSFEC - ok 19:31:56.0281 1904 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 19:31:56.0375 1904 NDIS - ok 19:31:56.0406 1904 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 19:31:56.0515 1904 NdisIP - ok 19:31:56.0515 1904 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 19:31:56.0625 1904 NdisTapi - ok 19:31:56.0640 1904 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 19:31:56.0734 1904 Ndisuio - ok 19:31:56.0765 1904 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 19:31:56.0859 1904 NdisWan - ok 19:31:56.0875 1904 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys 19:31:56.0968 1904 NDProxy - ok 19:31:56.0984 1904 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 19:31:57.0078 1904 NetBIOS - ok 19:31:57.0093 1904 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 19:31:57.0203 1904 NetBT - ok 19:31:57.0234 1904 NetworkX (5ef7dd401771693245d46f4b0b69fe2b) C:\WINDOWS\system32\ckldrv.sys 19:31:57.0250 1904 NetworkX ( UnsignedFile.Multi.Generic ) - warning 19:31:57.0250 1904 NetworkX - detected UnsignedFile.Multi.Generic (1) 19:31:57.0281 1904 nmwcd (4a8a2aa0706b659175169decf198e9d7) C:\WINDOWS\system32\drivers\ccdcmb.sys 19:31:57.0375 1904 nmwcd - ok 19:31:57.0406 1904 nmwcdc (fd3e61831095ac62e6840d986b5a2016) C:\WINDOWS\system32\drivers\ccdcmbo.sys 19:31:57.0453 1904 nmwcdc - ok 19:31:57.0468 1904 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 19:31:57.0578 1904 Npfs - ok 19:31:57.0609 1904 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 19:31:57.0718 1904 Ntfs - ok 19:31:57.0765 1904 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 19:31:57.0843 1904 Null - ok 19:31:58.0000 1904 nv (bf506d232c5e6f2dae80f5c11b45c60e) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 19:31:58.0250 1904 nv - ok 19:31:58.0281 1904 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 19:31:58.0390 1904 NwlnkFlt - ok 19:31:58.0406 1904 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 19:31:58.0515 1904 NwlnkFwd - ok 19:31:58.0546 1904 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 19:31:58.0656 1904 Parport - ok 19:31:58.0671 1904 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 19:31:58.0781 1904 PartMgr - ok 19:31:58.0796 1904 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 19:31:58.0906 1904 ParVdm - ok 19:31:58.0937 1904 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys 19:31:58.0953 1904 pccsmcfd - ok 19:31:58.0968 1904 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 19:31:59.0078 1904 PCI - ok 19:31:59.0078 1904 PCIDump - ok 19:31:59.0109 1904 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 19:31:59.0203 1904 PCIIde - ok 19:31:59.0234 1904 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 19:31:59.0343 1904 Pcmcia - ok 19:31:59.0343 1904 PDCOMP - ok 19:31:59.0359 1904 PDFRAME - ok 19:31:59.0359 1904 PDRELI - ok 19:31:59.0375 1904 PDRFRAME - ok 19:31:59.0375 1904 perc2 - ok 19:31:59.0390 1904 perc2hib - ok 19:31:59.0453 1904 pfc (957b82ec80ad7ead64e5e47df6b0dc40) C:\WINDOWS\system32\drivers\pfc.sys 19:31:59.0453 1904 pfc ( UnsignedFile.Multi.Generic ) - warning 19:31:59.0453 1904 pfc - detected UnsignedFile.Multi.Generic (1) 19:31:59.0484 1904 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 19:31:59.0578 1904 PptpMiniport - ok 19:31:59.0593 1904 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 19:31:59.0687 1904 PSched - ok 19:31:59.0687 1904 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 19:31:59.0781 1904 Ptilink - ok 19:31:59.0828 1904 PxHelp20 (49452bfcec22f36a7a9b9c2181bc3042) C:\WINDOWS\system32\DRIVERS\PxHelp20.sys 19:31:59.0828 1904 PxHelp20 - ok 19:31:59.0843 1904 ql1080 - ok 19:31:59.0843 1904 Ql10wnt - ok 19:31:59.0859 1904 ql12160 - ok 19:31:59.0859 1904 ql1240 - ok 19:31:59.0875 1904 ql1280 - ok 19:31:59.0890 1904 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 19:31:59.0984 1904 RasAcd - ok 19:32:00.0046 1904 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 19:32:00.0156 1904 Rasl2tp - ok 19:32:00.0156 1904 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 19:32:00.0250 1904 RasPppoe - ok 19:32:00.0265 1904 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 19:32:00.0359 1904 Raspti - ok 19:32:00.0375 1904 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 19:32:00.0484 1904 Rdbss - ok 19:32:00.0484 1904 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 19:32:00.0578 1904 RDPCDD - ok 19:32:00.0609 1904 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 19:32:00.0703 1904 rdpdr - ok 19:32:00.0734 1904 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys 19:32:00.0828 1904 RDPWD - ok 19:32:00.0859 1904 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 19:32:00.0937 1904 redbook - ok 19:32:00.0984 1904 rspndr (0e11b35e972796042044bc27ce13b065) C:\WINDOWS\system32\DRIVERS\rspndr.sys 19:32:01.0000 1904 rspndr ( UnsignedFile.Multi.Generic ) - warning 19:32:01.0000 1904 rspndr - detected UnsignedFile.Multi.Generic (1) 19:32:01.0046 1904 RTLE8023xp (89619ef503f949fae09252a8b883ee11) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys 19:32:01.0062 1904 RTLE8023xp - ok 19:32:01.0093 1904 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 19:32:01.0203 1904 Secdrv - ok 19:32:01.0218 1904 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 19:32:01.0312 1904 serenum - ok 19:32:01.0343 1904 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 19:32:01.0437 1904 Serial - ok 19:32:01.0468 1904 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 19:32:01.0578 1904 Sfloppy - ok 19:32:01.0609 1904 Simbad - ok 19:32:01.0640 1904 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys 19:32:01.0750 1904 SLIP - ok 19:32:01.0750 1904 Sparrow - ok 19:32:01.0781 1904 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 19:32:01.0859 1904 splitter - ok 19:32:01.0906 1904 sptd (d15da1ba189770d93eea2d7e18f95af9) C:\WINDOWS\system32\Drivers\sptd.sys 19:32:01.0906 1904 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: d15da1ba189770d93eea2d7e18f95af9 19:32:01.0906 1904 sptd ( LockedFile.Multi.Generic ) - warning 19:32:01.0906 1904 sptd - detected LockedFile.Multi.Generic (1) 19:32:01.0921 1904 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 19:32:02.0015 1904 sr - ok 19:32:02.0046 1904 Srv (89220b427890aa1dffd1a02648ae51c3) C:\WINDOWS\system32\DRIVERS\srv.sys 19:32:02.0093 1904 Srv - ok 19:32:02.0156 1904 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 19:32:02.0250 1904 streamip - ok 19:32:02.0265 1904 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 19:32:02.0343 1904 swenum - ok 19:32:02.0375 1904 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 19:32:02.0468 1904 swmidi - ok 19:32:02.0484 1904 symc810 - ok 19:32:02.0500 1904 symc8xx - ok 19:32:02.0500 1904 sym_hi - ok 19:32:02.0515 1904 sym_u3 - ok 19:32:02.0531 1904 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 19:32:02.0640 1904 sysaudio - ok 19:32:02.0671 1904 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 19:32:02.0734 1904 Tcpip - ok 19:32:02.0750 1904 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 19:32:02.0843 1904 TDPIPE - ok 19:32:02.0859 1904 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 19:32:02.0968 1904 TDTCP - ok 19:32:02.0984 1904 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 19:32:03.0078 1904 TermDD - ok 19:32:03.0093 1904 TosIde - ok 19:32:03.0125 1904 TrueSight (f69641efdb19acb4753b0155f7fdeed5) c:\windows\system32\drivers\TrueSight.sys 19:32:03.0125 1904 TrueSight ( UnsignedFile.Multi.Generic ) - warning 19:32:03.0125 1904 TrueSight - detected UnsignedFile.Multi.Generic (1) 19:32:03.0156 1904 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 19:32:03.0250 1904 Udfs - ok 19:32:03.0250 1904 ultra - ok 19:32:03.0281 1904 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 19:32:03.0390 1904 Update - ok 19:32:03.0421 1904 upperdev (587e643a4e2ffd9a00f114b057ceb773) C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys 19:32:03.0468 1904 upperdev - ok 19:32:03.0500 1904 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 19:32:03.0609 1904 usbccgp - ok 19:32:03.0609 1904 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 19:32:03.0703 1904 usbehci - ok 19:32:03.0734 1904 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 19:32:03.0828 1904 usbhub - ok 19:32:03.0843 1904 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 19:32:03.0921 1904 usbprint - ok 19:32:03.0953 1904 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 19:32:04.0062 1904 usbscan - ok 19:32:04.0062 1904 usbser (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS\system32\drivers\usbser.sys 19:32:04.0171 1904 usbser - ok 19:32:04.0187 1904 UsbserFilt (fca6a196d47cb972a0e4adc0db9cd17c) C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys 19:32:04.0250 1904 UsbserFilt - ok 19:32:04.0265 1904 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 19:32:04.0359 1904 USBSTOR - ok 19:32:04.0359 1904 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 19:32:04.0468 1904 usbuhci - ok 19:32:04.0531 1904 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys 19:32:04.0625 1904 usbvideo - ok 19:32:04.0640 1904 usb_rndisx (b6cc50279d6cd28e090a5d33244adc9a) C:\WINDOWS\system32\DRIVERS\usb8023x.sys 19:32:04.0750 1904 usb_rndisx - ok 19:32:04.0812 1904 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 19:32:04.0906 1904 VgaSave - ok 19:32:04.0921 1904 ViaIde - ok 19:32:04.0937 1904 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 19:32:05.0031 1904 VolSnap - ok 19:32:05.0078 1904 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 19:32:05.0250 1904 Wanarp - ok 19:32:05.0296 1904 Wdf01000 (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys 19:32:05.0312 1904 Wdf01000 - ok 19:32:05.0312 1904 WDICA - ok 19:32:05.0359 1904 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 19:32:05.0468 1904 wdmaud - ok 19:32:05.0515 1904 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 19:32:05.0562 1904 WpdUsb - ok 19:32:05.0593 1904 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 19:32:05.0703 1904 WSTCODEC - ok 19:32:05.0734 1904 WudfPf (50eb9e21963b4f06fd010d007d54351b) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 19:32:05.0765 1904 WudfPf - ok 19:32:05.0781 1904 WudfRd (6e209664bdea8a15b5e8e480d6c607c2) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 19:32:05.0796 1904 WudfRd - ok 19:32:05.0906 1904 {B154377D-700F-42cc-9474-23858FBDF4BD} (556b5cfe8d21b256add7f87d7f4b4123) C:\Program Files\CyberLink\PowerDVD9\000.fcl 19:32:05.0906 1904 {B154377D-700F-42cc-9474-23858FBDF4BD} - ok 19:32:05.0921 1904 MBR (0x1B8) (671b81004fdd1588fa9ed1331c9ceca9) \Device\Harddisk0\DR0 19:32:06.0093 1904 \Device\Harddisk0\DR0 - ok 19:32:06.0093 1904 Boot (0x1200) (ba83c031218d96dd7a9f63c1756ace6d) \Device\Harddisk0\DR0\Partition0 19:32:06.0093 1904 \Device\Harddisk0\DR0\Partition0 - ok 19:32:06.0109 1904 Boot (0x1200) (663ba695a8aeaf3998f2526ec2d96128) \Device\Harddisk0\DR0\Partition1 19:32:06.0109 1904 \Device\Harddisk0\DR0\Partition1 - ok 19:32:06.0109 1904 ============================================================ 19:32:06.0109 1904 Scan finished 19:32:06.0109 1904 ============================================================ 19:32:06.0234 3504 Detected object count: 5 19:32:06.0234 3504 Actual detected object count: 5 19:32:22.0156 3504 NetworkX ( UnsignedFile.Multi.Generic ) - skipped by user 19:32:22.0156 3504 NetworkX ( UnsignedFile.Multi.Generic ) - User select action: Skip 19:32:22.0156 3504 pfc ( UnsignedFile.Multi.Generic ) - skipped by user 19:32:22.0156 3504 pfc ( UnsignedFile.Multi.Generic ) - User select action: Skip 19:32:22.0156 3504 rspndr ( UnsignedFile.Multi.Generic ) - skipped by user 19:32:22.0156 3504 rspndr ( UnsignedFile.Multi.Generic ) - User select action: Skip 19:32:22.0156 3504 sptd ( LockedFile.Multi.Generic ) - skipped by user 19:32:22.0156 3504 sptd ( LockedFile.Multi.Generic ) - User select action: Skip 19:32:22.0156 3504 TrueSight ( UnsignedFile.Multi.Generic ) - skipped by user 19:32:22.0156 3504 TrueSight ( UnsignedFile.Multi.Generic ) - User select action: Skip 19:32:33.0218 3728 ============================================================ 19:32:33.0218 3728 Scan started 19:32:33.0218 3728 Mode: Manual; SigCheck; TDLFS; 19:32:33.0218 3728 ============================================================ 19:32:33.0468 3728 Abiosdsk - ok 19:32:33.0484 3728 abp480n5 - ok 19:32:33.0515 3728 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 19:32:33.0656 3728 ACPI - ok 19:32:33.0671 3728 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 19:32:33.0781 3728 ACPIEC - ok 19:32:33.0781 3728 adfs - ok 19:32:33.0796 3728 adpu160m - ok 19:32:33.0812 3728 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 19:32:33.0921 3728 aec - ok 19:32:33.0968 3728 AFD (7e775010ef291da96ad17ca4b17137d7) C:\WINDOWS\System32\drivers\afd.sys 19:32:33.0968 3728 AFD - ok 19:32:33.0984 3728 Aha154x - ok 19:32:33.0984 3728 aic78u2 - ok 19:32:34.0000 3728 aic78xx - ok 19:32:34.0000 3728 AliIde - ok 19:32:34.0015 3728 amsint - ok 19:32:34.0031 3728 asc - ok 19:32:34.0031 3728 asc3350p - ok 19:32:34.0046 3728 asc3550 - ok 19:32:34.0093 3728 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 19:32:34.0187 3728 AsyncMac - ok 19:32:34.0218 3728 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 19:32:34.0312 3728 atapi - ok 19:32:34.0312 3728 Atdisk - ok 19:32:34.0359 3728 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 19:32:34.0437 3728 Atmarpc - ok 19:32:34.0468 3728 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 19:32:34.0562 3728 audstub - ok 19:32:34.0609 3728 AVGIDSDriver (4fa401b33c1b50c816486f6951244a14) C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys 19:32:34.0625 3728 AVGIDSDriver - ok 19:32:34.0625 3728 AVGIDSEH (69578bc9d43d614c6b3455db4af19762) C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys 19:32:34.0640 3728 AVGIDSEH - ok 19:32:34.0640 3728 AVGIDSFilter (6df528406aa22201f392b9b19121cd6f) C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys 19:32:34.0656 3728 AVGIDSFilter - ok 19:32:34.0703 3728 AVGIDSShim (1e01c2166b5599802bcd61b9691f7476) C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys 19:32:34.0703 3728 AVGIDSShim - ok 19:32:34.0718 3728 Avgldx86 (bf8118cd5e2255387b715b534d64acd1) C:\WINDOWS\system32\DRIVERS\avgldx86.sys 19:32:34.0734 3728 Avgldx86 - ok 19:32:34.0750 3728 Avgmfx86 (1c77ef67f196466adc9924cb288afe87) C:\WINDOWS\system32\DRIVERS\avgmfx86.sys 19:32:34.0750 3728 Avgmfx86 - ok 19:32:34.0781 3728 Avgrkx86 (f2038ed7284b79dcef581468121192a9) C:\WINDOWS\system32\DRIVERS\avgrkx86.sys 19:32:34.0781 3728 Avgrkx86 - ok 19:32:34.0828 3728 Avgtdix (a6d562b612216d8d02a35ebeb92366bd) C:\WINDOWS\system32\DRIVERS\avgtdix.sys 19:32:34.0828 3728 Avgtdix - ok 19:32:34.0859 3728 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 19:32:34.0953 3728 Beep - ok 19:32:35.0000 3728 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 19:32:35.0093 3728 cbidf2k - ok 19:32:35.0125 3728 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 19:32:35.0234 3728 CCDECODE - ok 19:32:35.0234 3728 cd20xrnt - ok 19:32:35.0250 3728 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 19:32:35.0359 3728 Cdaudio - ok 19:32:35.0406 3728 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 19:32:35.0515 3728 Cdfs - ok 19:32:35.0515 3728 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 19:32:35.0625 3728 Cdrom - ok 19:32:35.0625 3728 Changer - ok 19:32:35.0656 3728 CmdIde - ok 19:32:35.0687 3728 Cpqarray - ok 19:32:35.0718 3728 dac2w2k - ok 19:32:35.0734 3728 dac960nt - ok 19:32:35.0750 3728 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 19:32:35.0843 3728 Disk - ok 19:32:35.0906 3728 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 19:32:36.0000 3728 dmboot - ok 19:32:36.0031 3728 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 19:32:36.0125 3728 dmio - ok 19:32:36.0140 3728 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 19:32:36.0234 3728 dmload - ok 19:32:36.0265 3728 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 19:32:36.0375 3728 DMusic - ok 19:32:36.0375 3728 dpti2o - ok 19:32:36.0390 3728 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 19:32:36.0484 3728 drmkaud - ok 19:32:36.0515 3728 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 19:32:36.0609 3728 Fastfat - ok 19:32:36.0609 3728 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 19:32:36.0718 3728 Fdc - ok 19:32:36.0734 3728 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 19:32:36.0843 3728 Fips - ok 19:32:36.0843 3728 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 19:32:36.0937 3728 Flpydisk - ok 19:32:36.0968 3728 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 19:32:37.0062 3728 FltMgr - ok 19:32:37.0062 3728 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 19:32:37.0156 3728 Fs_Rec - ok 19:32:37.0171 3728 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 19:32:37.0265 3728 Ftdisk - ok 19:32:37.0281 3728 gdrv (5c230948dd6652228f88ca7ae6cb276c) C:\WINDOWS\gdrv.sys 19:32:37.0281 3728 gdrv - ok 19:32:37.0296 3728 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 19:32:37.0390 3728 Gpc - ok 19:32:37.0406 3728 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 19:32:37.0500 3728 HDAudBus - ok 19:32:37.0546 3728 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 19:32:37.0625 3728 HidUsb - ok 19:32:37.0640 3728 hpn - ok 19:32:37.0671 3728 HTCAND32 (cbd09ed9cf6822177ee85aea4d8816a2) C:\WINDOWS\system32\Drivers\ANDROIDUSB.sys 19:32:37.0703 3728 HTCAND32 - ok 19:32:37.0734 3728 htcnprot (04e3b3554076b8192a668efe88a682a1) C:\WINDOWS\system32\DRIVERS\htcnprot.sys 19:32:37.0734 3728 htcnprot - ok 19:32:37.0765 3728 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 19:32:37.0796 3728 HTTP - ok 19:32:37.0812 3728 i2omgmt - ok 19:32:37.0812 3728 i2omp - ok 19:32:37.0843 3728 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 19:32:37.0937 3728 i8042prt - ok 19:32:38.0046 3728 ialm (bffa387180121df1e4646c4ced3e16ca) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys 19:32:38.0171 3728 ialm - ok 19:32:38.0187 3728 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 19:32:38.0281 3728 Imapi - ok 19:32:38.0281 3728 InCDFs - ok 19:32:38.0296 3728 InCDPass - ok 19:32:38.0296 3728 InCDRm - ok 19:32:38.0312 3728 ini910u - ok 19:32:38.0421 3728 IntcAzAudAddService (08baf30f6de95814f58af9ce7bbc5614) C:\WINDOWS\system32\drivers\RtkHDAud.sys 19:32:38.0531 3728 IntcAzAudAddService - ok 19:32:38.0546 3728 IntelIde - ok 19:32:38.0578 3728 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 19:32:38.0671 3728 intelppm - ok 19:32:38.0687 3728 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 19:32:38.0796 3728 Ip6Fw - ok 19:32:38.0828 3728 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 19:32:38.0906 3728 IpFilterDriver - ok 19:32:38.0921 3728 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 19:32:39.0031 3728 IpInIp - ok 19:32:39.0046 3728 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 19:32:39.0140 3728 IpNat - ok 19:32:39.0156 3728 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 19:32:39.0250 3728 IPSec - ok 19:32:39.0265 3728 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 19:32:39.0359 3728 IRENUM - ok 19:32:39.0375 3728 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 19:32:39.0468 3728 isapnp - ok 19:32:39.0515 3728 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 19:32:39.0609 3728 Kbdclass - ok 19:32:39.0625 3728 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 19:32:39.0718 3728 kmixer - ok 19:32:39.0734 3728 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 19:32:39.0765 3728 KSecDD - ok 19:32:39.0781 3728 lbrtfdc - ok 19:32:39.0812 3728 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys 19:32:39.0828 3728 MBAMProtector - ok 19:32:39.0843 3728 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 19:32:39.0937 3728 mnmdd - ok 19:32:39.0953 3728 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 19:32:40.0046 3728 Modem - ok 19:32:40.0062 3728 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 19:32:40.0140 3728 Mouclass - ok 19:32:40.0171 3728 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 19:32:40.0265 3728 mouhid - ok 19:32:40.0281 3728 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 19:32:40.0375 3728 MountMgr - ok 19:32:40.0390 3728 mraid35x - ok 19:32:40.0390 3728 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 19:32:40.0484 3728 MRxDAV - ok 19:32:40.0515 3728 MRxSmb (f3aefb11abc521122b67095044169e98) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 19:32:40.0546 3728 MRxSmb - ok 19:32:40.0562 3728 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 19:32:40.0656 3728 Msfs - ok 19:32:40.0671 3728 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 19:32:40.0781 3728 MSKSSRV - ok 19:32:40.0781 3728 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 19:32:40.0875 3728 MSPCLOCK - ok 19:32:40.0890 3728 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 19:32:41.0000 3728 MSPQM - ok 19:32:41.0015 3728 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 19:32:41.0109 3728 mssmbios - ok 19:32:41.0125 3728 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys 19:32:41.0218 3728 MSTEE - ok 19:32:41.0250 3728 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys 19:32:41.0343 3728 Mup - ok 19:32:41.0359 3728 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 19:32:41.0468 3728 NABTSFEC - ok 19:32:41.0546 3728 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 19:32:41.0640 3728 NDIS - ok 19:32:41.0671 3728 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 19:32:41.0781 3728 NdisIP - ok 19:32:41.0781 3728 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 19:32:41.0875 3728 NdisTapi - ok 19:32:41.0890 3728 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 19:32:41.0984 3728 Ndisuio - ok 19:32:42.0015 3728 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 19:32:42.0093 3728 NdisWan - ok 19:32:42.0109 3728 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys 19:32:42.0218 3728 NDProxy - ok 19:32:42.0234 3728 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 19:32:42.0328 3728 NetBIOS - ok 19:32:42.0343 3728 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 19:32:42.0437 3728 NetBT - ok 19:32:42.0468 3728 NetworkX (5ef7dd401771693245d46f4b0b69fe2b) C:\WINDOWS\system32\ckldrv.sys 19:32:42.0484 3728 NetworkX ( UnsignedFile.Multi.Generic ) - warning 19:32:42.0484 3728 NetworkX - detected UnsignedFile.Multi.Generic (1) 19:32:42.0515 3728 nmwcd (4a8a2aa0706b659175169decf198e9d7) C:\WINDOWS\system32\drivers\ccdcmb.sys 19:32:42.0546 3728 nmwcd - ok 19:32:42.0578 3728 nmwcdc (fd3e61831095ac62e6840d986b5a2016) C:\WINDOWS\system32\drivers\ccdcmbo.sys 19:32:42.0625 3728 nmwcdc - ok 19:32:42.0656 3728 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 19:32:42.0750 3728 Npfs - ok 19:32:42.0765 3728 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 19:32:42.0875 3728 Ntfs - ok 19:32:42.0890 3728 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 19:32:42.0984 3728 Null - ok 19:32:43.0125 3728 nv (bf506d232c5e6f2dae80f5c11b45c60e) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 19:32:43.0281 3728 nv - ok 19:32:43.0328 3728 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 19:32:43.0437 3728 NwlnkFlt - ok 19:32:43.0453 3728 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 19:32:43.0546 3728 NwlnkFwd - ok 19:32:43.0578 3728 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 19:32:43.0687 3728 Parport - ok 19:32:43.0703 3728 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 19:32:43.0812 3728 PartMgr - ok 19:32:43.0828 3728 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 19:32:43.0921 3728 ParVdm - ok 19:32:43.0953 3728 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys 19:32:43.0968 3728 pccsmcfd - ok 19:32:43.0984 3728 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 19:32:44.0093 3728 PCI - ok 19:32:44.0093 3728 PCIDump - ok 19:32:44.0125 3728 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 19:32:44.0234 3728 PCIIde - ok 19:32:44.0265 3728 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 19:32:44.0359 3728 Pcmcia - ok 19:32:44.0375 3728 PDCOMP - ok 19:32:44.0375 3728 PDFRAME - ok 19:32:44.0390 3728 PDRELI - ok 19:32:44.0390 3728 PDRFRAME - ok 19:32:44.0406 3728 perc2 - ok 19:32:44.0406 3728 perc2hib - ok 19:32:44.0437 3728 pfc (957b82ec80ad7ead64e5e47df6b0dc40) C:\WINDOWS\system32\drivers\pfc.sys 19:32:44.0453 3728 pfc ( UnsignedFile.Multi.Generic ) - warning 19:32:44.0453 3728 pfc - detected UnsignedFile.Multi.Generic (1) 19:32:44.0468 3728 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 19:32:44.0562 3728 PptpMiniport - ok 19:32:44.0578 3728 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 19:32:44.0671 3728 PSched - ok 19:32:44.0703 3728 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 19:32:44.0796 3728 Ptilink - ok 19:32:44.0828 3728 PxHelp20 (49452bfcec22f36a7a9b9c2181bc3042) C:\WINDOWS\system32\DRIVERS\PxHelp20.sys 19:32:44.0828 3728 PxHelp20 - ok 19:32:44.0843 3728 ql1080 - ok 19:32:44.0843 3728 Ql10wnt - ok 19:32:44.0859 3728 ql12160 - ok 19:32:44.0859 3728 ql1240 - ok 19:32:44.0875 3728 ql1280 - ok 19:32:44.0875 3728 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 19:32:44.0984 3728 RasAcd - ok 19:32:45.0000 3728 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 19:32:45.0109 3728 Rasl2tp - ok 19:32:45.0109 3728 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 19:32:45.0203 3728 RasPppoe - ok 19:32:45.0218 3728 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 19:32:45.0312 3728 Raspti - ok 19:32:45.0328 3728 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 19:32:45.0437 3728 Rdbss - ok 19:32:45.0437 3728 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 19:32:45.0531 3728 RDPCDD - ok 19:32:45.0562 3728 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 19:32:45.0656 3728 rdpdr - ok 19:32:45.0703 3728 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys 19:32:45.0796 3728 RDPWD - ok 19:32:45.0812 3728 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 19:32:45.0906 3728 redbook - ok 19:32:45.0953 3728 rspndr (0e11b35e972796042044bc27ce13b065) C:\WINDOWS\system32\DRIVERS\rspndr.sys 19:32:45.0968 3728 rspndr ( UnsignedFile.Multi.Generic ) - warning 19:32:45.0968 3728 rspndr - detected UnsignedFile.Multi.Generic (1) 19:32:46.0000 3728 RTLE8023xp (89619ef503f949fae09252a8b883ee11) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys 19:32:46.0015 3728 RTLE8023xp - ok 19:32:46.0046 3728 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 19:32:46.0140 3728 Secdrv - ok 19:32:46.0156 3728 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 19:32:46.0250 3728 serenum - ok 19:32:46.0250 3728 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 19:32:46.0343 3728 Serial - ok 19:32:46.0359 3728 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 19:32:46.0453 3728 Sfloppy - ok 19:32:46.0468 3728 Simbad - ok 19:32:46.0500 3728 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys 19:32:46.0593 3728 SLIP - ok 19:32:46.0609 3728 Sparrow - ok 19:32:46.0625 3728 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 19:32:46.0718 3728 splitter - ok 19:32:46.0765 3728 sptd (d15da1ba189770d93eea2d7e18f95af9) C:\WINDOWS\system32\Drivers\sptd.sys 19:32:46.0765 3728 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: d15da1ba189770d93eea2d7e18f95af9 19:32:46.0765 3728 sptd ( LockedFile.Multi.Generic ) - warning 19:32:46.0765 3728 sptd - detected LockedFile.Multi.Generic (1) 19:32:46.0765 3728 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 19:32:46.0859 3728 sr - ok 19:32:46.0890 3728 Srv (89220b427890aa1dffd1a02648ae51c3) C:\WINDOWS\system32\DRIVERS\srv.sys 19:32:46.0921 3728 Srv - ok 19:32:46.0953 3728 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 19:32:47.0046 3728 streamip - ok 19:32:47.0062 3728 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 19:32:47.0156 3728 swenum - ok 19:32:47.0171 3728 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 19:32:47.0281 3728 swmidi - ok 19:32:47.0281 3728 symc810 - ok 19:32:47.0296 3728 symc8xx - ok 19:32:47.0312 3728 sym_hi - ok 19:32:47.0312 3728 sym_u3 - ok 19:32:47.0343 3728 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 19:32:47.0437 3728 sysaudio - ok 19:32:47.0468 3728 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 19:32:47.0531 3728 Tcpip - ok 19:32:47.0546 3728 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 19:32:47.0640 3728 TDPIPE - ok 19:32:47.0656 3728 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 19:32:47.0750 3728 TDTCP - ok 19:32:47.0765 3728 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 19:32:47.0859 3728 TermDD - ok 19:32:47.0875 3728 TosIde - ok 19:32:47.0906 3728 TrueSight (f69641efdb19acb4753b0155f7fdeed5) c:\windows\system32\drivers\TrueSight.sys 19:32:47.0906 3728 TrueSight ( UnsignedFile.Multi.Generic ) - warning 19:32:47.0906 3728 TrueSight - detected UnsignedFile.Multi.Generic (1) 19:32:47.0937 3728 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 19:32:48.0031 3728 Udfs - ok 19:32:48.0031 3728 ultra - ok 19:32:48.0078 3728 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 19:32:48.0171 3728 Update - ok 19:32:48.0203 3728 upperdev (587e643a4e2ffd9a00f114b057ceb773) C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys 19:32:48.0250 3728 upperdev - ok 19:32:48.0281 3728 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 19:32:48.0375 3728 usbccgp - ok 19:32:48.0390 3728 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 19:32:48.0484 3728 usbehci - ok 19:32:48.0515 3728 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 19:32:48.0609 3728 usbhub - ok 19:32:48.0625 3728 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 19:32:48.0703 3728 usbprint - ok 19:32:48.0718 3728 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 19:32:48.0828 3728 usbscan - ok 19:32:48.0843 3728 usbser (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS\system32\drivers\usbser.sys 19:32:48.0937 3728 usbser - ok 19:32:48.0968 3728 UsbserFilt (fca6a196d47cb972a0e4adc0db9cd17c) C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys 19:32:49.0015 3728 UsbserFilt - ok 19:32:49.0031 3728 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 19:32:49.0125 3728 USBSTOR - ok 19:32:49.0140 3728 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 19:32:49.0234 3728 usbuhci - ok 19:32:49.0265 3728 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys 19:32:49.0359 3728 usbvideo - ok 19:32:49.0359 3728 usb_rndisx (b6cc50279d6cd28e090a5d33244adc9a) C:\WINDOWS\system32\DRIVERS\usb8023x.sys 19:32:49.0468 3728 usb_rndisx - ok 19:32:49.0484 3728 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 19:32:49.0578 3728 VgaSave - ok 19:32:49.0593 3728 ViaIde - ok 19:32:49.0609 3728 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 19:32:49.0703 3728 VolSnap - ok 19:32:49.0718 3728 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 19:32:49.0812 3728 Wanarp - ok 19:32:49.0859 3728 Wdf01000 (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys 19:32:49.0875 3728 Wdf01000 - ok 19:32:49.0875 3728 WDICA - ok 19:32:49.0906 3728 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 19:32:49.0984 3728 wdmaud - ok 19:32:50.0046 3728 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 19:32:50.0062 3728 WpdUsb - ok 19:32:50.0078 3728 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 19:32:50.0187 3728 WSTCODEC - ok 19:32:50.0218 3728 WudfPf (50eb9e21963b4f06fd010d007d54351b) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 19:32:50.0234 3728 WudfPf - ok 19:32:50.0250 3728 WudfRd (6e209664bdea8a15b5e8e480d6c607c2) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 19:32:50.0281 3728 WudfRd - ok 19:32:50.0312 3728 {B154377D-700F-42cc-9474-23858FBDF4BD} (556b5cfe8d21b256add7f87d7f4b4123) C:\Program Files\CyberLink\PowerDVD9\000.fcl 19:32:50.0328 3728 {B154377D-700F-42cc-9474-23858FBDF4BD} - ok 19:32:50.0343 3728 MBR (0x1B8) (671b81004fdd1588fa9ed1331c9ceca9) \Device\Harddisk0\DR0 19:32:50.0531 3728 \Device\Harddisk0\DR0 - ok 19:32:50.0531 3728 Boot (0x1200) (ba83c031218d96dd7a9f63c1756ace6d) \Device\Harddisk0\DR0\Partition0 19:32:50.0531 3728 \Device\Harddisk0\DR0\Partition0 - ok 19:32:50.0546 3728 Boot (0x1200) (663ba695a8aeaf3998f2526ec2d96128) \Device\Harddisk0\DR0\Partition1 19:32:50.0546 3728 \Device\Harddisk0\DR0\Partition1 - ok 19:32:50.0546 3728 ============================================================ 19:32:50.0546 3728 Scan finished 19:32:50.0546 3728 ============================================================ 19:32:50.0546 0960 Detected object count: 5 19:32:50.0546 0960 Actual detected object count: 5 19:37:37.0406 0960 NetworkX ( UnsignedFile.Multi.Generic ) - skipped by user 19:37:37.0406 0960 NetworkX ( UnsignedFile.Multi.Generic ) - User select action: Skip 19:37:37.0406 0960 pfc ( UnsignedFile.Multi.Generic ) - skipped by user 19:37:37.0406 0960 pfc ( UnsignedFile.Multi.Generic ) - User select action: Skip 19:37:37.0406 0960 rspndr ( UnsignedFile.Multi.Generic ) - skipped by user 19:37:37.0406 0960 rspndr ( UnsignedFile.Multi.Generic ) - User select action: Skip 19:37:37.0406 0960 sptd ( LockedFile.Multi.Generic ) - skipped by user 19:37:37.0406 0960 sptd ( LockedFile.Multi.Generic ) - User select action: Skip 19:37:37.0406 0960 TrueSight ( UnsignedFile.Multi.Generic ) - skipped by user 19:37:37.0406 0960 TrueSight ( UnsignedFile.Multi.Generic ) - User select action: Skip 19:37:55.0578 2836 Deinitialize success