При включване на компютъра ми излиза тази грешка: Problem Event Name: APPCRASH Application Name: msseces.exe Application Version: 2.1.1116.0 Application Timestamp: 4df9245c Fault Module Name: SHELL32.dll Fault Module Version: 6.1.7601.17514 Fault Module Timestamp: 4a5be054 Exception Code: c000041d Exception Offset: 00000000003fc021 OS Version: 6.1.7601.2.1.0.256.1 Locale ID: 1026 Additional Information 1: d770 Additional Information 2: d7705405b1e2cecd7476f9a36b7f2f62 Additional Information 3: dfd4 Additional Information 4: dfd42354e8f7845f50c0c866284b66ce Не мога да отворя нито една папка,отваря само игри и програми и то само на десктоп. Това са резултатите от програмата която ползвах: DDS (Ver_2011-08-26.01) - NTFSAMD64 Internet Explorer: 8.0.7601.17514 Run by Elinceto at 19:53:03 on 2012-01-28 Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.4056.2605 [GMT 2:00] . AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160} SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_7f58c91b65c73836\STacSV64.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskhost.exe C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_7f58c91b65c73836\AESTSr64.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\DellTPad\Apoint.exe C:\Program Files\IDT\WDM\sttray64.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Program Files\DellTPad\Apntex.exe C:\Windows\system32\conhost.exe C:\Program Files\DellTPad\HidFind.exe C:\Program Files (x86)\sponsorkeyword\sponsorkeyword.exe C:\Program Files (x86)\Bonjour\mDNSResponder.exe C:\ProgramData\DatacardService\DCService.exe C:\Program Files (x86)\Common Files\DeviceHelper\DeviceManager.exe C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe C:\ProgramData\DatacardService\DCSHelper.exe C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Program Files (x86)\CD Art Display\CAD.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\VIVACOM 3G USB MODEM\ModemListener.exe C:\Program Files\Rainmeter\Rainmeter.exe C:\Program Files (x86)\RK Launcher\RK Launcher 0.41 Beta Nightly\RKLauncher.exe C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe C:\Program Files\iPod\bin\iPodService.exe C:\Windows\system32\WUDFHost.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\SearchIndexer.exe C:\Program Files (x86)\VIVACOM 3G USB MODEM\Hspa USB Modem.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files (x86)\mp3DirectCut\Mozilla Firefox\firefox.exe C:\Program Files (x86)\mp3DirectCut\Mozilla Firefox\plugin-container.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\conhost.exe C:\Windows\SysWOW64\cscript.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.daemon-search.com/startpage mSearchAssistant = hxxp://start.facemoods.com/?a=w7th&s={searchTerms}&f=4 uURLSearchHooks: UrlSearchHook Class: {00000000-6e41-4fd3-8538-502f5495e5fc} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll uURLSearchHooks: YouTube Downloader Toolbar: {f3fee66e-e034-436a-86e4-9690573bee8a} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.6\youtubedownloaderToolbarIE.dll uURLSearchHooks: MyAshampoo Toolbar: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll mURLSearchHooks: MyAshampoo Toolbar: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll mWinlogon: Userinit=userinit.exe BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: CescrtHlpr Object: {64182481-4f71-486b-a045-b233bd0da8fc} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.8\bh\facemoods.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll BHO: MyAshampoo Toolbar: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" BHO: MyPlayCity Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll BHO: YouTube Downloader Toolbar: {f3fee66e-e034-436a-86e4-9690573bee8a} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.6\youtubedownloaderToolbarIE.dll TB: YouTube Downloader Toolbar: {f3fee66e-e034-436a-86e4-9690573bee8a} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.6\youtubedownloaderToolbarIE.dll TB: facemoods Toolbar: {db4e9724-f518-4dfd-9c7c-78b52103cab9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.8\facemoodsTlbr.dll TB: MyPlayCity Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll TB: MyAshampoo Toolbar: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" uRun: [Google Update] "C:\Users\Elinceto\AppData\Local\Google\Update\GoogleUpdate.exe" /c uRun: [sponsorkeyword] C:\Program Files (x86)\sponsorkeyword\sponsorkeyword.exe uRun: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe" -autorun uRun: [101 Penguin Pets OLR] C:\PROGRA~2\BVRPSO~1\101PEN~1\BVRPOlr.exe /101 Penguin Pets uRun: [spyware Doctor] C:\Users\Elinceto\Desktop\sdsetup_revwire207.exe -min uRun: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun: [ModemListener] C:\Program Files (x86)\VIVACOM 3G USB MODEM\ModemListener.exe start mRun: [facemoods] "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.8\facemoodssrv.exe" /md I mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mRun: [PC Cleaners] "C:\Program Files (x86)\PC Cleaners\PCCleaners.exe" /minimize StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\CDARTD~1.LNK - C:\Program Files (x86)\CD Art Display\CAD.exe StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\RAINME~1.LNK - C:\Program Files\Rainmeter\Rainmeter.exe StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\RKLAUN~1.LNK - C:\Program Files (x86)\RK Launcher\RK Launcher 0.41 Beta Nightly\RKLauncher.exe mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableLUA = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) mPolicies-system: PromptOnSecureDesktop = 0 (0x0) IE: Add to Google Photos Screensa&ver - C:\Windows\system32\GPhotos.scr/200 IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab TCP: Interfaces\{00608BD6-8A70-4C1D-874B-1BE1A6F42074} : NameServer = 212.39.90.42 212.39.90.43 TCP: Interfaces\{359724A7-3C65-4157-B38E-0FC192ADB5B0} : NameServer = 212.39.90.42 212.39.90.43 TCP: Interfaces\{3CDAF02F-92AE-4D75-992C-ACD9887AAB80} : NameServer = 212.39.90.42 212.39.90.43 TCP: Interfaces\{BFA87292-0B24-49D6-9432-B627265EBAD2} : DhcpNameServer = 192.168.1.1 TCP: Interfaces\{BFA87292-0B24-49D6-9432-B627265EBAD2}\244534D2144435C4 : DhcpNameServer = 192.168.1.1 TCP: Interfaces\{BFA87292-0B24-49D6-9432-B627265EBAD2}\35C616679716E637B69623 : DhcpNameServer = 192.168.0.1 TCP: Interfaces\{BFA87292-0B24-49D6-9432-B627265EBAD2}\6594651434F4D4F5E45445 : DhcpNameServer = 192.168.1.1 TCP: Interfaces\{BFA87292-0B24-49D6-9432-B627265EBAD2}\B457C696E616E6 : DhcpNameServer = 192.168.1.1 TCP: Interfaces\{BFA87292-0B24-49D6-9432-B627265EBAD2}\C696E6B6379737 : DhcpNameServer = 213.16.56.1 213.16.56.9 TCP: Interfaces\{BFA87292-0B24-49D6-9432-B627265EBAD2}\D416A656374796360363 : DhcpNameServer = 84.54.128.8 84.54.128.6 Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO-X64: AcroIEHelperStub - No File BHO-X64: CescrtHlpr Object: {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.8\bh\facemoods.dll BHO-X64: facemoods Helper - No File BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO-X64: Windows Live Messenger Companion Helper: {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll BHO-X64: MyAshampoo Toolbar: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll BHO-X64: SkypeIEPluginBHO - No File BHO-X64: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" BHO-X64: MyPlayCity Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll BHO-X64: Ask Toolbar BHO - No File BHO-X64: YouTube Downloader Toolbar: {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.6\youtubedownloaderToolbarIE.dll TB-X64: YouTube Downloader Toolbar: {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.6\youtubedownloaderToolbarIE.dll TB-X64: facemoods Toolbar: {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.8\facemoodsTlbr.dll TB-X64: MyPlayCity Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll TB-X64: DAEMON Tools Toolbar: {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll TB-X64: MyAshampoo Toolbar: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll TB-X64: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun-x64: [ModemListener] C:\Program Files (x86)\VIVACOM 3G USB MODEM\ModemListener.exe start mRun-x64: [facemoods] "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.8\facemoodssrv.exe" /md I mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mRun-x64: [PC Cleaners] "C:\Program Files (x86)\PC Cleaners\PCCleaners.exe" /minimize . ============= SERVICES / DRIVERS =============== . R1 MpFilter;Microsoft Malware Protection Driver;C:\Windows\system32\DRIVERS\MpFilter.sys --> C:\Windows\system32\DRIVERS\MpFilter.sys [?] R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928] R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368] R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?] R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2011-8-12 140672] R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928] R2 AESTFilters;Andrea ST Filters Service;C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_7f58c91b65c73836\AESTSr64.exe [2011-5-6 89600] R2 DCService.exe;DCService.exe;C:\ProgramData\DatacardService\DCService.exe [2010-5-8 229376] R2 DeviceManager;DeviceManager;C:\Program Files (x86)\Common Files\DeviceHelper\DeviceManager.exe -start --> C:\Program Files (x86)\Common Files\DeviceHelper\DeviceManager.exe -start [?] R2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [2011-10-25 341288] R2 TeamViewer6;TeamViewer 6;C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-5-6 2280312] R3 huawei_enumerator;huawei_enumerator;C:\Windows\system32\DRIVERS\ew_jubusenum.sys --> C:\Windows\system32\DRIVERS\ew_jubusenum.sys [?] R3 jrdusbser;Mobile Connector Device for Legacy Serial Communication;C:\Windows\system32\DRIVERS\jrdusbser.sys --> C:\Windows\system32\DRIVERS\jrdusbser.sys [?] R3 NisDrv;Microsoft Network Inspection System;C:\Windows\system32\DRIVERS\NisDrvWFP.sys --> C:\Windows\system32\DRIVERS\NisDrvWFP.sys [?] R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-4-27 288272] R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?] R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk62x64.sys --> C:\Windows\system32\DRIVERS\yk62x64.sys [?] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-4-1 183560] S3 dmvsc;dmvsc;C:\Windows\system32\drivers\dmvsc.sys --> C:\Windows\system32\drivers\dmvsc.sys [?] S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;C:\Windows\system32\DRIVERS\ew_hwusbdev.sys --> C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [?] S3 ewusbnet;HUAWEI USB-NDIS miniport;C:\Windows\system32\DRIVERS\ewusbnet.sys --> C:\Windows\system32\DRIVERS\ewusbnet.sys [?] S3 fssfltr;fssfltr;C:\Windows\system32\DRIVERS\fssfltr.sys --> C:\Windows\system32\DRIVERS\fssfltr.sys [?] S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-5-13 1492840] S3 MpNWMon;Microsoft Malware Protection Network Driver;C:\Windows\system32\DRIVERS\MpNWMon.sys --> C:\Windows\system32\DRIVERS\MpNWMon.sys [?] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\system32\drivers\rdpvideominiport.sys --> C:\Windows\system32\drivers\rdpvideominiport.sys [?] S3 Synth3dVsc;Synth3dVsc;C:\Windows\system32\drivers\synth3dvsc.sys --> C:\Windows\system32\drivers\synth3dvsc.sys [?] S3 terminpt;Microsoft Remote Desktop Input Driver;C:\Windows\system32\drivers\terminpt.sys --> C:\Windows\system32\drivers\terminpt.sys [?] S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?] S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?] S3 tsusbhub;tsusbhub;C:\Windows\system32\drivers\tsusbhub.sys --> C:\Windows\system32\drivers\tsusbhub.sys [?] S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys --> C:\Windows\system32\Drivers\usbaapl64.sys [?] S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184] . =============== Created Last 30 ================ . 2012-01-28 16:51:33 -------- d-----w- C:\Users\Elinceto\AppData\Roaming\SUPERAntiSpyware.com 2012-01-28 16:51:19 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com 2012-01-28 16:51:19 -------- d-----w- C:\Program Files\SUPERAntiSpyware 2012-01-28 15:47:03 8602168 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{92894543-4E05-4D62-B47D-6140F45DB925}\mpengine.dll 2012-01-28 15:46:54 -------- d-----w- C:\Program Files (x86)\Microsoft Security Client 2012-01-28 15:46:40 8602168 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Updates\mpengine.dll 2012-01-28 15:27:44 -------- d-----w- C:\Users\Elinceto\AppData\Local\{1E915DF1-E2CA-4802-B933-D1E13DB3E4AD} 2012-01-28 15:27:39 -------- d-----w- C:\Users\Elinceto\AppData\Local\{69FD1AC2-87A6-4599-8435-5B6D982298C6} 2012-01-28 15:06:43 45056 ----a-r- C:\Users\Elinceto\AppData\Roaming\Microsoft\Installer\{42929F0F-CE14-47AF-9FC7-FF297A603021}\NewShortcut1_42929F0FCE1447AF9FC7FF297A603021_1.exe 2012-01-28 15:06:42 -------- d-----w- C:\Windows\SysWow64\vmm32 2012-01-28 15:06:42 -------- d-----w- C:\Program Files (x86)\Dell 2012-01-27 02:38:07 -------- d-----w- C:\Users\Elinceto\AppData\Local\{3CF1D8D9-86C1-467D-8B71-A0CF61472C0D} 2012-01-27 02:36:20 -------- d-----w- C:\Users\Elinceto\AppData\Local\{B5602DF4-1DB0-4647-AD6C-0EE515C607B3} 2012-01-26 21:00:46 -------- d-----w- C:\Windows\en 2012-01-26 19:37:11 -------- d-----w- C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2012-01-26 18:46:02 -------- d-----w- C:\Users\Elinceto\AppData\Local\NFS Underground 2 2012-01-26 18:36:05 48488 ----a-w- C:\Windows\System32\drivers\fssfltr.sys 2012-01-26 18:25:29 -------- d-----w- C:\Windows\PCHEALTH 2012-01-26 18:15:07 -------- d-----w- C:\Program Files (x86)\Microsoft 2012-01-26 18:15:04 7450888 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\6bf6fc511ccdc5604\bingbarsetup.exe 2012-01-26 18:02:52 69464 ----a-w- C:\Windows\SysWow64\XAPOFX1_3.dll 2012-01-26 18:02:52 515416 ----a-w- C:\Windows\SysWow64\XAudio2_5.dll 2012-01-26 18:02:51 523088 ----a-w- C:\Windows\System32\d3dx10_42.dll 2012-01-26 18:02:51 453456 ----a-w- C:\Windows\SysWow64\d3dx10_42.dll 2012-01-26 18:02:40 15712 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\b1c838421ccdc5403\MeshBetaRemover.exe 2012-01-26 18:02:39 94040 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\b09be8dc1ccdc5402\DSETUP.dll 2012-01-26 18:02:39 525656 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\b09be8dc1ccdc5402\DXSETUP.exe 2012-01-26 18:02:39 1691480 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\b09be8dc1ccdc5402\dsetup32.dll 2012-01-26 17:59:31 4398360 ----a-w- C:\Windows\System32\d3dx9_32.dll 2012-01-26 17:59:31 3426072 ----a-w- C:\Windows\SysWow64\d3dx9_32.dll 2012-01-26 17:59:08 94040 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\32b44c991ccdc5401\DSETUP.dll 2012-01-26 17:59:08 525656 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\32b44c991ccdc5401\DXSETUP.exe 2012-01-26 17:59:08 1691480 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\32b44c991ccdc5401\dsetup32.dll 2012-01-26 17:09:27 -------- d-----w- C:\ProgramData\PC Tools 2012-01-26 17:05:58 -------- d-----w- C:\Users\Elinceto\AppData\Roaming\PCPro 2012-01-26 17:05:58 -------- d-----w- C:\Users\Elinceto\AppData\Roaming\PC Cleaners 2012-01-26 17:05:54 5276432 ----a-w- C:\Windows\uninst.exe 2012-01-26 17:05:53 -------- d-----w- C:\ProgramData\PC1Data 2012-01-26 17:05:53 -------- d-----w- C:\Program Files (x86)\PC Cleaners 2012-01-26 16:52:08 -------- d-----w- C:\ProgramData\PC Drivers HeadQuarters 2012-01-26 16:15:20 -------- d-----w- C:\Users\Elinceto\AppData\Local\Windows Live 2012-01-26 16:15:18 -------- d-----w- C:\Program Files (x86)\Common Files\Windows Live 2012-01-26 16:11:53 -------- d-----w- C:\Users\Elinceto\AppData\Local\{71FF52C9-D7B4-4CEE-BEC2-C1F3421FB611} 2012-01-24 15:48:14 -------- d-----w- C:\Users\Elinceto\AppData\Roaming\EleFun Games 2012-01-24 15:44:44 -------- d-----w- C:\ProgramData\FarmFrenzy-PizzaParty 2012-01-24 15:35:49 -------- d-----w- C:\Users\Elinceto\AppData\Roaming\XBMC 2012-01-24 12:21:33 -------- d-----w- C:\Program Files (x86)\Selectsoft 2012-01-24 12:21:29 -------- d-----w- C:\Program Files (x86)\BVRP Software 2012-01-23 05:51:19 -------- d-----w- C:\Program Files (x86)\DAEMON Tools Lite 2012-01-22 19:19:06 1409 ----a-w- C:\Windows\SysWow64\tmp45BAE.FOT 2012-01-22 19:19:06 1409 ----a-w- C:\Windows\SysWow64\tmp38BAE.FOT 2012-01-22 16:43:45 -------- d-----w- C:\Users\Elinceto\AppData\Roaming\Playrix Entertainment 2012-01-22 16:14:16 -------- d-----w- C:\Users\Elinceto\AppData\Roaming\Meridian93 2012-01-22 16:02:33 -------- d-----w- C:\Users\Elinceto\AppData\Local\Menge 2012-01-21 12:25:03 -------- d-----w- C:\ProgramData\Arcade Lab 2012-01-21 11:32:23 -------- d-----w- C:\ProgramData\AlawarWrapper 2012-01-21 03:09:41 -------- d-----w- C:\ProgramData\PopCap Games 2012-01-21 03:09:41 -------- d-----w- C:\Program Files (x86)\PopCap Games 2012-01-20 17:32:59 -------- d-----w- C:\ProgramData\Sandlot Games 2012-01-19 19:33:18 -------- d-----w- C:\Users\Elinceto\AppData\Local\Oberon Games 2012-01-19 17:49:33 -------- d-----w- C:\ProgramData\Rumbic Studio 2012-01-19 17:41:20 -------- d-----w- C:\Users\Elinceto\AppData\Roaming\Intenium 2012-01-19 16:39:40 -------- d-----w- C:\ProgramData\shockwave.com 2012-01-19 16:37:23 -------- d-----w- C:\Program Files (x86)\My Sweet Games 2012-01-19 07:40:07 -------- d-----w- C:\Users\Elinceto\AppData\Local\Ashampoo Music Studio 3 2012-01-19 07:38:32 -------- d-----w- C:\Program Files (x86)\Conduit 2012-01-19 07:38:30 -------- d-----w- C:\Program Files (x86)\MyAshampoo 2012-01-19 07:20:19 -------- d-----w- C:\Program Files (x86)\DAEMON Tools Toolbar 2012-01-19 07:18:19 871408 ----a-w- C:\Windows\System32\drivers\sptd.sys 2012-01-12 22:09:12 -------- d-----w- C:\Program Files (x86)\MyPlayCity.com 2012-01-04 18:51:11 -------- d-----w- C:\Windows\SysWow64\SupportAppXL 2012-01-04 18:51:08 -------- d-----w- C:\Program Files (x86)\GLOBUL Connection Manager 2012-01-03 13:10:44 182672 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\nppdf32.dll . ==================== Find3M ==================== . 2012-01-04 09:26:37 279096 ------w- C:\Windows\System32\MpSigStub.exe . ============= FINISH: 19:53:22,97 =============== UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows 7 Ultimate Boot Device: \Device\HarddiskVolume1 Install Date: 6.5.2011 г. 03:09:18 System Uptime: 28.1.2012 г. 19:10:27 (0 hours ago) . Motherboard: Dell Inc. | | 0G848F Processor: Intel® Core2 Duo CPU T6600 @ 2.20GHz | Microprocessor | 2200/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 39 GiB total, 3,696 GiB free. D: is FIXED (NTFS) - 208 GiB total, 91,879 GiB free. E: is FIXED (NTFS) - 219 GiB total, 80,676 GiB free. F: is CDROM () G: is CDROM () H: is CDROM () I: is Removable J: is CDROM () K: is CDROM () L: is Removable . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP156: 28.1.2012 г. 17:06:29 - Installed Dell Resource CD. . ==== Installed Programs ====================== . µTorrent 1001 Nights - The Adventures of Sinbad 101 Penguin Pets Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader X (10.1.2) AIMP3 Apple Application Support Apple Software Update Ashampoo Burning Studio 10.0.4 Ashampoo Music Studio 3 3.51 Atlantis Quest Bejeweled 3 Bing Bar Call of Atlantis CD Art Display 2.0.1 D3DX10 DAEMON Tools Toolbar Dell Resource CD Facemoods Toolbar Farm Frenzy - Pizza Party Farm Frenzy Viking Heroes version 1.0 Fishdom Fishdom H2O - Hidden Odyssey Flower Quest Flowers Story - Fairy Quest GLOBUL Connection Manager GOM Player Google Chrome IDT Audio In Search of the Lost Temple Jewel Quest Junk Mail filter update LibreOffice 3.3 Logon Screen Mesh Runtime Messenger Companion Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Mozilla Firefox 8.0 (x86 en-US) Mozilla Firefox 9.0.1 (x86 en-US) MSVCRT MSVCRT_amd64 My Sweet Games MyAshampoo Toolbar Mysterious Travel - The Magic Diary Netlog 24 PC Cleaners Picasa 3 Puzzle Mania - Chronicles of Unicorn QuickTime Rainmeter RelevantKnowledge RK Launcher iVista Leopard Road Attack Room Zoom - Race for Impact Royal Envoy Collectors Edition Safari Skype Click to Call Skype™ 5.5 sponsorkeyword Uninstall Super Mario Castle Buster TeamViewer 6 The KMPlayer (remove only) Time Mysteries 2- The Ancient Spectres Collectors Edition VIVACOM 3G USB Modem VLC media player 1.1.10 vloader-bg Windows Live Communications Platform Windows Live Essentials Windows Live Installer Windows Live Mail Windows Live Mesh Windows Live Mesh ActiveX Control for Remote Connections Windows Live Messenger Windows Live Messenger Companion Core Windows Live Movie Maker Windows Live Photo Common Windows Live Photo Gallery Windows Live PIMT Platform Windows Live SOXE Windows Live SOXE Definitions Windows Live UX Platform Windows Live UX Platform Language Pack Windows Live Writer Windows Live Writer Resources XBMC YouTube Downloader 2.7.2 YouTube Downloader Toolbar v4.6 . ==== Event Viewer Messages From Past Week ======== . 28.1.2012 г. 19:12:00, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 28.1.2012 г. 19:12:00, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 28.1.2012 г. 19:12:00, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030} 28.1.2012 г. 19:11:49, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 28.1.2012 г. 17:16:57, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 28.1.2012 г. 17:13:24, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 28.1.2012 г. 16:40:27, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 28.1.2012 г. 16:35:41, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004 28.1.2012 г. 16:35:41, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004 28.1.2012 г. 16:35:41, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004 28.1.2012 г. 16:35:41, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004 28.1.2012 г. 16:32:45, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 28.1.2012 г. 15:38:06, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 27.1.2012 г. 16:09:49, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 27.1.2012 г. 04:35:19, Error: Service Control Manager [7001] - The Fax service depends on the Print Spooler service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 26.1.2012 г. 23:23:06, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 26.1.2012 г. 19:44:23, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 26.1.2012 г. 19:32:31, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 26.1.2012 г. 19:32:00, Error: Service Control Manager [7023] - The Extensible Authentication Protocol service terminated with the following error: The specified procedure could not be found. 26.1.2012 г. 19:32:00, Error: Service Control Manager [7001] - The WLAN AutoConfig service depends on the Extensible Authentication Protocol service which failed to start because of the following error: The specified procedure could not be found. 26.1.2012 г. 17:49:21, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 26.1.2012 г. 17:34:12, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 26.1.2012 г. 17:28:26, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 26.1.2012 г. 17:20:14, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 26.1.2012 г. 15:36:07, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 26.1.2012 г. 13:43:33, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 25.1.2012 г. 21:33:35, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.353.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 25.1.2012 г. 21:24:07, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 24.1.2012 г. 21:56:12, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 24.1.2012 г. 21:45:01, Error: volsnap [36] - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. 24.1.2012 г. 20:59:54, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 24.1.2012 г. 03:28:48, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.353.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 24.1.2012 г. 03:19:18, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 23.1.2012 г. 20:17:14, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 23.1.2012 г. 18:55:01, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 23.1.2012 г. 01:49:02, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 22.1.2012 г. 22:43:53, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 22.1.2012 г. 21:54:24, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 21.1.2012 г. 23:58:52, Error: volsnap [36] - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. 21.1.2012 г. 23:13:10, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 21.1.2012 г. 23:01:21, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 21.1.2012 г. 20:20:27, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 21.1.2012 г. 19:45:22, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.129.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 21.1.2012 г. 19:36:02, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 21.1.2012 г. 18:52:24, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 21.1.2012 г. 17:45:01, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 21.1.2012 г. 17:33:11, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 21.1.2012 г. 10:46:32, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. 21.1.2012 г. 10:44:20, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. . ==== End Of File =========================== Благодаря

Здравейте,

msseces.exe е част от Microsoft Security Essentials.

Деинсталирайте приложението от Start => Control Panel => Uninstall a program.

При проблем с деинсталацията следвайте това упътване => http://support.microsoft.com/kb/2483120/bg

Какво се случва при опит за отваряне на папките ? Някакво съобщение а грешка ?

Здравейте,

msseces.exe е част от Microsoft Security Essentials.

Деинсталирайте приложението от Start => Control Panel => Uninstall a program.

При проблем с деинсталацията следвайте това упътване => http://support.micro...m/kb/2483120/bg

Какво се случва при опит за отваряне на папките ? Някакво съобщение а грешка ?

Няма никакво съобщение,че ми излиза грешка.Дори като вляза в старт менюто-контрол панел-(дотам нище не се показва,само празна папка и тя започва да зарежда-но нищо.)Пробвах няколко пъти да я деинсталирам но не се получи.Сега тази програма ми стои в старт менюто ,но като натисна на нея и ми излиза само тази грешка

Нищо не разбрах...

Control Panel-а също е празен така ли ?

Пробвахте ли да я деинсталирате с помощта на линка който съм дал в предишния си коментар ?

И за коя версия на MSE става въпрос, защото инструментите за деинсталация на всяка една от тях са различни ?

Версия 1 или версия 2 ?

Може ли да направите и малко sreenshot-и на и проблемите за да се ориентирам малко в обстановката - Вижте темата за повече информация - Как се прави скрийншот?

Ако дадеде с десен бутон върху някоя папка => explore => отваря ли се така ?

Или ако напишете в адресната лента на My Computer например %programfiles%\SUPERAntiSpyware => и натиснете Enter => отваря ли се така ?

Нищо не разбрах...

Control Panel-а също е празен така ли ?

Пробвахте ли да я деинсталирате с помощта на линка който съм дал в предишния си коментар ?

И за коя версия на MSE става въпрос, защото инструментите за деинсталация на всяка една от тях са различни ?

Версия 1 или версия 2 ?

Може ли да направите и малко sreenshot-и на и проблемите за да се ориентирам малко в обстановката - Вижте темата за повече информация - Как се прави скрийншот?

Ако дадеде с десен бутон върху някоя папка => explore => отваря ли се така ?

Или ако напишете в адресната лента на My Computer например %programfiles%\SUPERAntiSpyware => и натиснете Enter => отваря ли се така ?

Да,и контрол панел също е празен. Пробвах да я деинсталирам,спазвах всички указания,но не става. Версията на програмата е ''2''.По какъвто и да е начин да се опитам да отворя папка не може,

Звучи ми като сериозно омазан Windows.

Да видим дали нещо не се крие из логовете или просто гадината (или който е бил причината за проблемите) още е някъде из компютъра или се е самоизтрила след извършване на дейностите за които е била програмирана.

1. Изтеглете ComboFix от BleepingComputer

и го запазете (бутон Save -> Save as) ComboFix на вашия десктоп:

След приключване на изтеглянето на ComboFix, иконката на програмата би трябвало да изглежда така:

2. Затворете всички работещи приложения, отворени прозорци и програми работещи във фонов режим. Спрете временно защитата в реално време на антивирусната програма и на другите програми за сигурност, ако има такива.

3. Стартирайте с двоен клик Combofix.exe. Изберете YES, за да се съгласите с условията за използване на програмата. Важно: По време на работата на ComboFix не бива да се движи мишката и да се натискат клавиши от клавиатурата. Просто търпеливо оставете ComboFix да си свърши работата, без да използвате компютъра за други цели.

4. Ако получите предупреждение от UAC, съгласете се.

5 ComboFix ще спре временно Интернет връзката, но след като приключи работата на програмата тази връзка ще бъде възстановена автоматично. ComboFix ще сканира за проблеми и за заразени файлове, като това може да отнеме известно време. Моля да бъдете търпеливи. Ако има проблем с Интернет връзката след приключване на работата на Combofix, моля да прочетете това: Manually restoring the Internet connection section.

6 Когато работата на ComboFix приключи, ще се появи текстов документ (log) в Notepad:

Копирайте с (Copy) и поставете с (Paste) съдържанието на лога в следващия си коментар.

Забележка: Ако се появи следното съобщение при отварянето на различни програми след завършване на сканирането с Combofix - "illegal operation on a registry key that has been marked for deletion." просто рестартирайте компютъра още веднъж и то ще изчезне.

По време на сканирането не използвайте компютъра си !

Незная дали има някакво значение,но например като се опитам да вляза в контрол панел,или някоя папка с документи,снимки и всичко останало което не ми го отваря през някой браузер и ми ги отваря папките

Разбира се, че има значение...намирисва ми на повредени асоцииации (които се оправят лесно)...но все пак да видим лог файла от Combofix.

ComboFix 12-01-29.02 - Elinceto 01.2012 г. 20:55:01.2.2 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.4056.2930 [GMT 2:00] Running from: c:\users\Elinceto\Downloads\ComboFix.exe AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160} SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . C:\install.exe c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\bh\facemoods.dll c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\facemoods.crx c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\facemoods.png c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\facemoodsApp.dll c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\facemoodsEng.dll c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\facemoodssrv.exe c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\facemoodsTlbr.dll c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\uninstall.exe c:\program files (x86)\facemoods.com\sqlite3.dll c:\program files (x86)\RelevantKnowledge\chrome.manifest c:\program files (x86)\RelevantKnowledge\components\rlxg.dll c:\program files (x86)\RelevantKnowledge\components\rlxh.dll c:\program files (x86)\RelevantKnowledge\components\rlxi.dll c:\program files (x86)\RelevantKnowledge\components\rlxj.dll c:\program files (x86)\RelevantKnowledge\components\rlxk.dll c:\program files (x86)\RelevantKnowledge\install.rdf c:\program files (x86)\RelevantKnowledge\ncncf.dat c:\program files (x86)\RelevantKnowledge\nscf.dat c:\program files (x86)\RelevantKnowledge\rlcm.crx c:\program files (x86)\RelevantKnowledge\rlcm.txt c:\program files (x86)\RelevantKnowledge\rlls.dll c:\program files (x86)\RelevantKnowledge\rlls64.dll c:\program files (x86)\RelevantKnowledge\rloci.bin c:\program files (x86)\RelevantKnowledge\rlph.dll c:\program files (x86)\RelevantKnowledge\rlvknlg64.exe c:\program files (x86)\RelevantKnowledge\rlxf.dll c:\program files (x86)\sponsorkeyword\sponsorkeyword.exe c:\program files (x86)\sponsorkeyword\sponsorkeyword_uninstall.exe c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Privacy Policy and User License Agreement.lnk c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Support.lnk c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Uninstall Instructions.lnk c:\windows\SwSys1.bmp c:\windows\SwSys2.bmp D:\uninstall.exe E:\install.exe E:\uninstall.exe . . ((((((((((((((((((((((((( Files Created from 2011-12-28 to 2012-01-29 ))))))))))))))))))))))))))))))) . . 2012-01-29 19:00 . 2012-01-29 19:00 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-01-29 16:35 . 2012-01-06 05:15 8602168 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{81497A97-45CA-411B-BB4D-BFCA480BC2F2}\mpengine.dll 2012-01-29 13:17 . 2012-01-29 16:35 -------- d-----w- c:\program files\Microsoft Security Client 2012-01-29 11:45 . 2012-01-29 16:29 1240 ----a-w- C:\FixitRegBackup.reg 2012-01-28 16:51 . 2012-01-28 16:51 -------- d-----w- c:\users\Elinceto\AppData\Roaming\SUPERAntiSpyware.com 2012-01-28 16:51 . 2012-01-28 16:51 -------- d-----w- c:\program files\SUPERAntiSpyware 2012-01-28 16:51 . 2012-01-28 16:51 -------- d-----w- c:\programdata\SUPERAntiSpyware.com 2012-01-28 15:46 . 2012-01-29 13:18 -------- d-----w- c:\program files (x86)\Microsoft Security Client 2012-01-28 15:46 . 2012-01-06 05:15 8602168 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Updates\mpengine.dll 2012-01-28 15:06 . 2012-01-28 15:06 45056 ----a-r- c:\users\Elinceto\AppData\Roaming\Microsoft\Installer\{42929F0F-CE14-47AF-9FC7-FF297A603021}\NewShortcut1_42929F0FCE1447AF9FC7FF297A603021_1.exe 2012-01-28 15:06 . 2012-01-28 15:06 -------- d-----w- c:\windows\SysWow64\vmm32 2012-01-28 15:06 . 2012-01-28 15:06 -------- d-----w- c:\program files (x86)\Dell 2012-01-26 21:00 . 2012-01-26 21:00 -------- d-----w- c:\windows\en 2012-01-26 19:37 . 2012-01-26 19:37 -------- d-----w- c:\program files (x86)\Microsoft SQL Server Compact Edition 2012-01-26 18:46 . 2012-01-26 20:15 -------- d-----w- c:\users\Elinceto\AppData\Local\NFS Underground 2 2012-01-26 18:36 . 2012-01-26 21:05 -------- d-----w- c:\program files (x86)\Windows Live 2012-01-26 18:36 . 2011-05-13 13:37 48488 ----a-w- c:\windows\system32\drivers\fssfltr.sys 2012-01-26 18:25 . 2012-01-26 18:25 -------- d-----w- c:\windows\PCHEALTH 2012-01-26 18:23 . 2012-01-26 18:36 -------- d-----w- c:\program files\Windows Live 2012-01-26 18:15 . 2012-01-26 18:15 -------- d-----w- c:\program files (x86)\Microsoft 2012-01-26 18:02 . 2009-09-04 15:44 69464 ----a-w- c:\windows\SysWow64\XAPOFX1_3.dll 2012-01-26 18:02 . 2009-09-04 15:44 515416 ----a-w- c:\windows\SysWow64\XAudio2_5.dll 2012-01-26 18:02 . 2009-09-04 15:29 453456 ----a-w- c:\windows\SysWow64\d3dx10_42.dll 2012-01-26 18:02 . 2009-09-04 15:29 523088 ----a-w- c:\windows\system32\d3dx10_42.dll 2012-01-26 17:59 . 2006-11-29 11:06 4398360 ----a-w- c:\windows\system32\d3dx9_32.dll 2012-01-26 17:59 . 2006-11-29 11:06 3426072 ----a-w- c:\windows\SysWow64\d3dx9_32.dll 2012-01-26 17:09 . 2012-01-26 17:09 -------- d-----w- c:\programdata\PC Tools 2012-01-26 17:05 . 2012-01-26 17:05 -------- d-----w- c:\users\Elinceto\AppData\Roaming\PCPro 2012-01-26 17:05 . 2012-01-26 17:05 -------- d-----w- c:\users\Elinceto\AppData\Roaming\PC Cleaners 2012-01-26 17:05 . 2012-01-26 16:45 5276432 ----a-w- c:\windows\uninst.exe 2012-01-26 17:05 . 2012-01-26 17:05 -------- d-----w- c:\programdata\PC1Data 2012-01-26 17:05 . 2012-01-26 17:05 -------- d-----w- c:\program files (x86)\PC Cleaners 2012-01-26 16:52 . 2012-01-26 16:52 -------- d-----w- c:\programdata\PC Drivers HeadQuarters 2012-01-26 16:15 . 2012-01-28 15:27 -------- d-----w- c:\users\Elinceto\AppData\Local\Windows Live 2012-01-26 16:15 . 2012-01-26 16:15 -------- d-----w- c:\program files (x86)\Common Files\Windows Live 2012-01-24 15:48 . 2012-01-24 15:48 -------- d-----w- c:\users\Elinceto\AppData\Roaming\EleFun Games 2012-01-24 15:44 . 2012-01-24 15:47 -------- d-----w- c:\programdata\FarmFrenzy-PizzaParty 2012-01-24 15:35 . 2012-01-24 15:40 -------- d-----w- c:\users\Elinceto\AppData\Roaming\XBMC 2012-01-24 12:21 . 2012-01-24 12:21 -------- d-----w- c:\program files (x86)\Selectsoft 2012-01-24 12:21 . 2012-01-24 12:21 -------- d-----w- c:\program files (x86)\BVRP Software 2012-01-24 12:21 . 2012-01-24 12:21 -------- d-----w- c:\programdata\BVRP Software 2012-01-23 05:51 . 2012-01-23 05:51 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite 2012-01-22 19:19 . 2012-01-22 19:19 1409 ----a-w- c:\windows\SysWow64\tmp45BAE.FOT 2012-01-22 19:19 . 2012-01-22 19:19 1409 ----a-w- c:\windows\SysWow64\tmp38BAE.FOT 2012-01-22 16:43 . 2012-01-22 16:43 -------- d-----w- c:\users\Elinceto\AppData\Roaming\Playrix Entertainment 2012-01-22 16:14 . 2012-01-22 16:14 -------- d-----w- c:\users\Elinceto\AppData\Roaming\Meridian93 2012-01-22 16:02 . 2012-01-22 16:02 -------- d-----w- c:\users\Elinceto\AppData\Local\Menge 2012-01-21 12:25 . 2012-01-21 12:25 -------- d-----w- c:\programdata\Arcade Lab 2012-01-21 11:32 . 2012-01-21 21:07 -------- d-----w- c:\programdata\AlawarWrapper 2012-01-21 03:09 . 2012-01-26 14:59 -------- d-----w- c:\program files (x86)\PopCap Games 2012-01-21 03:09 . 2012-01-21 03:09 -------- d-----w- c:\programdata\PopCap Games 2012-01-20 17:32 . 2012-01-20 17:32 -------- d-----w- c:\programdata\Sandlot Games 2012-01-19 19:33 . 2012-01-19 19:33 -------- d-----w- c:\users\Elinceto\AppData\Local\Oberon Games 2012-01-19 17:49 . 2012-01-19 17:49 -------- d-----w- c:\programdata\Rumbic Studio 2012-01-19 17:41 . 2012-01-19 17:41 -------- d-----w- c:\users\Elinceto\AppData\Roaming\Intenium 2012-01-19 16:39 . 2012-01-19 16:39 -------- d-----w- c:\programdata\shockwave.com 2012-01-19 16:37 . 2012-01-19 16:37 -------- d-----w- c:\program files (x86)\My Sweet Games 2012-01-19 07:40 . 2012-01-27 14:05 -------- d-----w- c:\users\Elinceto\AppData\Local\Ashampoo Music Studio 3 2012-01-19 07:38 . 2012-01-19 07:38 -------- d-----w- c:\program files (x86)\Conduit 2012-01-19 07:38 . 2012-01-19 07:38 -------- d-----w- c:\program files (x86)\MyAshampoo 2012-01-19 07:20 . 2012-01-23 05:51 -------- d-----w- c:\program files (x86)\DAEMON Tools Toolbar 2012-01-19 07:18 . 2012-01-19 07:18 871408 ----a-w- c:\windows\system32\drivers\sptd.sys 2012-01-12 22:09 . 2012-01-24 15:47 -------- d-----w- c:\program files (x86)\MyPlayCity.com 2012-01-11 01:16 . 2012-01-22 03:34 -------- d-----w- c:\users\Elinceto\AppData\Roaming\vlc 2012-01-04 18:51 . 2012-01-04 18:51 -------- d-----w- c:\windows\SysWow64\SupportAppXL 2012-01-04 18:51 . 2012-01-19 07:53 -------- d-----w- c:\program files (x86)\GLOBUL Connection Manager 2012-01-03 13:10 . 2012-01-03 13:10 182672 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-01-26 18:21 . 2011-03-28 16:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2012-01-06 05:15 . 2011-05-07 12:26 8602168 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2012-01-04 09:26 . 2010-11-21 03:27 279096 ------w- c:\windows\system32\MpSigStub.exe . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}"= "c:\program files (x86)\MyAshampoo\tbMyAs.dll" [2009-12-31 2349080] . [HKEY_CLASSES_ROOT\clsid\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}] . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}] 2009-12-31 09:53 2349080 ----a-w- c:\program files (x86)\MyAshampoo\tbMyAs.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}"= "c:\program files (x86)\MyAshampoo\tbMyAs.dll" [2009-12-31 2349080] . [HKEY_CLASSES_ROOT\clsid\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656] "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-12-09 5486464] "101 Penguin Pets OLR"="c:\progra~2\BVRPSO~1\101PEN~1\BVRPOlr.exe" [2008-02-11 79104] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888] "PC Cleaners"="c:\program files (x86)\PC Cleaners\PCCleaners.exe" [2012-01-26 51054352] "ModemListener"="c:\program files (x86)\VIVACOM 3G USB MODEM\ModemListener.exe" [2010-01-27 98304] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-07-19 421736] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ CD Art Display.lnk - c:\program files (x86)\CD Art Display\CAD.exe [2011-9-10 2187264] Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2011-9-4 102912] RKLauncher.lnk - c:\program files (x86)\RK Launcher\RK Launcher 0.41 Beta Nightly\RKLauncher.exe [2007-3-16 708608] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) "DisplayLastLogonInfo"= 1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-04-01 183560] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x] R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [x] R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys [x] R3 jrdusbser;Mobile Connector Device for Legacy Serial Communication;c:\windows\system32\DRIVERS\jrdusbser.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x] R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x] S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928] S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672] S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928] S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_7f58c91b65c73836\AESTSr64.exe [2009-03-02 89600] S2 DCService.exe;DCService.exe;c:\programdata\DatacardService\DCService.exe [2010-05-08 229376] S2 DeviceManager;DeviceManager;c:\program files (x86)\Common Files\DeviceHelper\DeviceManager.exe [2009-11-17 40960] S2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;c:\program files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [2011-10-25 341288] S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-04-15 2280312] S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [x] S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x] S3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x] S3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272] S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x] S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x] . . Contents of the 'Scheduled Tasks' folder . 2012-01-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3066445684-1154162243-1188742596-1000Core.job - c:\users\Elinceto\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-06 00:25] . 2012-01-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3066445684-1154162243-1188742596-1000UA.job - c:\users\Elinceto\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-06 00:25] . . --------- x86-64 ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-11 162328] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-11 386584] "Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-11 417304] "Apoint"="c:\program files\DellTPad\Apoint.exe" [2010-04-05 384296] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-02-25 487424] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . ------- Supplementary Scan ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.daemon-search.com/startpage mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 TCP: Interfaces\{00608BD6-8A70-4C1D-874B-1BE1A6F42074}: NameServer = 212.39.90.42 212.39.90.43 TCP: Interfaces\{3CDAF02F-92AE-4D75-992C-ACD9887AAB80}: NameServer = 212.39.90.42 212.39.90.43 . - - - - ORPHANS REMOVED - - - - . URLSearchHooks-{00000000-6E41-4FD3-8538-502F5495E5FC} - c:\program files (x86)\Ask.com\GenericAskToolbar.dll BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files (x86)\Ask.com\GenericAskToolbar.dll Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files (x86)\Ask.com\GenericAskToolbar.dll Wow6432Node-HKCU-Run-Spyware Doctor - c:\users\Elinceto\Desktop\sdsetup_revwire207.exe Wow6432Node-HKLM-Run-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\facemoodssrv.exe WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) AddRemove-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\uninstall.exe AddRemove-Mozilla Firefox 8.0 (x86 en-US) - c:\program files (x86)\Mozilla Firefox\uninstall\helper.exe AddRemove-Netlog 24 - c:\windows\system32\Netlog24Uninstaller.exe AddRemove-sponsorkeyword - c:\program files (x86)\sponsorkeyword\sponsorkeyword_uninstall.exe AddRemove-Super Mario Castle Buster - c:\banesoft\Super Mario Castle Buster\uninst.exe AddRemove-Time Mysteries 2- The Ancient Spectres Collectors Edition1.0 - d:\\uninstall.exe AddRemove-VIVACOM 3G USB Modem - c:\program files (x86)\VIVACOM 3G USB Modem\uninst.exe AddRemove-{d08d9f98-1c78-4704-87e6-368b0023d831} - c:\program files (x86)\RelevantKnowledge\rlvknlg.exe . . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_USERS\S-1-5-21-3066445684-1154162243-1188742596-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.Email.1" . [HKEY_USERS\S-1-5-21-3066445684-1154162243-1188742596-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.VCard.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Other Running Processes ------------------------ . c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files (x86)\Bonjour\mDNSResponder.exe c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE . ************************************************************************** . Completion time: 2012-01-29 21:07:37 - machine was rebooted ComboFix-quarantined-files.txt 2012-01-29 19:07 . Pre-Run: 3 732 889 600 bytes free Post-Run: 3 916 603 392 bytes free . - - End Of File - - 2B61CC197DB996693127682910580967

По мое мнение, проблема не се дължи на зловреден софтуер.

Възможно е някои от калпавите програми за отпимизация да е направила проблема като неизвестната PC Cleaners например.

Това също ми прилича на бекъп на регистрите преди поправка с някоя чистачка на регистри - C:\FixitRegBackup.reg

Възможно е да се наложи да направите Поправителна Преинсталация (Repair Install върху текущата инсталация) за възстановяването на щетите.

Да пробване дали това ще оправи отварянето на папките:

Изтеглете следните файлове и ги запазете на десктопа:

http://www.sevenforu...t_directory.reg

http://www.sevenforu...ault_folder.reg

Стартирайте файловете един по един и изберете YES на диалоговия прозорец.

Рестартирайте и вижте после дали папките вече се отварят.

Това на снимката е което ми дава след като натисна yesна двата последни линка които ми даде.Незная дали е правилно протича инсталацията или не.След това като рестартирах компютъра отново неможах да отворя папките. При зареждане на компютъра ми преди да вляза към декстопа ми излизат тези надписи които досега ги нямаше: Successful logon. The last time interactively logget on to this accaunt:30януари 2012г.-06:10:57 Unsuccesfful logon There have been to unsuccesfful interactive logon attemps with this accaunt since your last interactive logon. Това е засега,и ти благодаря ,че ми оттделяш време

Хммм...незнам дали ще има някакъв успех, но пробвайте следните няколко неща.

Първо => отворете Start => напишете в търсачката CMD.exe => кликнете върху файла с десен бутон и изберете Run as administrator.

въведете командата (можете и да я копирате с Ctrl + C и да я поставите в CMD.exe с десен бутон Paste)

FOR /R C:\ %G IN (*.dll) DO "%systemroot%\system32\regsvr32.exe" /s "%G"

Натиснете Enter.

Може да отнеме около половин час и нагоре.

На всички съобщения за грешки, натискайте OK.

Когато приключи въведете следната команда (докато сте още в конзолата на CMD.exe)

sfc /scannow

Натиснете Enter и изчакайте.

След като проверката приключи направете рестарт и вижте как е положението.

Изпратено Днес, 01:17 Здравей,вече ми е неудобно да пиша.Направих това което ми каза,компютъра ми се изключи,и при включване ми изезе System Recovery.От там нататък въбще немога да включа компютъра,пова постоянно ми излиза и немога да вляза в уиндоуса.Грешка ми дава: Problem Event Name:StartupRepairOffline Problem Signature01: 6.1.7600.16385 Problem Signature02: 6.1.7600.16385 Problem Signature03: unknown Problem Signature04: 21200524 Problem Signature05: Auto Failover Problem Signature06: 59 Problem Signature07: CorruptFile OS Version 6.1.7601.2.1.0.256.1 Lokate ID: 1033. Наистина вече немога да си обясна какво се случва.Малък проблем е да го занеса някъде,че тук първо няма някой който да ми го направя,второ не разполагам с време да отида да търся някой ) Четах в форума много статии за проблеми при включване на Уиндоус 7 ,за това къде се влиза за ръчно настройване неща като: bootrec.exe/FixMbr.-и на всичко ми излиза ,че операцията е изпълнена успешно.След това рестартирам отново и пак се появява Startup Repair-и няма оттърване. Май съм олескала нещата нали? Искам отново да ти благодаря,за вниманието което ми оттделяш,и затова ,че постоянно те занимавам с глупости,но съжалявам,незная към кой да се обърна. Ако се наложи преинсталация когато си купих компютъра ми дадаха 2 диска,на които единият е уиндоус 7,а другият е драйвери.Надявам се че трябва да свършат работа ако не,мога ли да изтегля от някъде друг уиндоус.Преинсталиран е миналата година май месец.Но не с тези дискове.Бях го дала да IT,но не съм сигурна дали е използвал същите дискове.

След коя команда се появи проблем и изключването ?

Първата съм я тествал и е само за пререгистриране на всички библиотечни файлове (в опит да се оправи проблема с празния Control Panel).

Втората търси и възстановява повредени системни файлове.

bootrec.exe /fixmbr е полезна, но и опасна команда. Ако вашия MBR е фирмен, презаписването със стандартен MBR код ще влоши нещата. (или ги е влошило вече).

Можем да се опитаме с няколко инструмента да диагностицираме проблема, но са сравнително трудни за работа. Ако имате желание и търпение, можем да опитаме (иначе трябва да направите поне Repair Install).

Ще ви е необходима USB флашка (за предпочитане - празна)...

• Моля изтеглете Farbar Recovery Scan Tool и го запазете на вашата флашка.
• Сложете вашата флашка в заразения компютър.
• Изчакайте машината да рестартира в Startup Repair => и натиснете View advanced options for system recovery and support

  

• Натиснете Command Prompt

  

• Когато се появи графата за команди въведете командата notepad => и натиснете Enter
• От менютo File => изберете Open => посочете My Computer => и намерете буквата на вашата флашка и затворете notepad-a.
• От менюто за команди напишете e:frst.exe (заменете буквата на e: с тази на вашата флашка).
• Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение.
• Натиснете бутона SCAN
• Ще се създаде лог файл с името - FRST.txt на флашката.
• От друга машина копирайте текста в следващия си пост.

e:\frst.exe- (в моят случей h)след като го въведа в менюто за команди нищо не се получава..

Още при включването,на компютъра,ми дава зареждане на уиндоус ,и веднага след това се показва System Recovery.Като се отваря командният панел,отгоре пише Administrator x\windows\system32\cmd.exe.

Сега като влязах през notepad видях,че имам устройство в май компютър: Boot(x)

Досега не съм го виждала..Имам общо 5 разделения на дискове.

System recerved©,Lokal Disk(D),Multimedia(E).Data(F),Boot (X).

Ако не може да се оправи и се налага да се преинсталира ще опитам няма проблем.

Ако някой иска да му съсипя качествено компютъра,и след това да си има работа седмици напред,моля нека се свърже с мен)

Е може ли да видим лог файла от проверката с програмата от предишния ми коментар все пак ?

И още нещо което видях,че уиндоуса ми се намира и в папка (), Когато се отвори,System Recovery Options-Operating System Windows 7 on (D) Lokal Disk

И още нещо което видях,че уиндоуса ми се намира и в папка ( ),

Когато се отвори,System Recovery Options-Operating System Windows 7 on (D) Lokal Disk

Това е нормално. Под Recovery Environment буквите се сменят.

Бих го паказала,ако беше тръгнал този лог файл.Нали точно това написах,че неможе да тръгне.

Бих го паказала,ако беше тръгнал този лог файл.Нали точно това написах,че неможе да тръгне.

А файла го свалихте и го запазихте в свободната директория на H:\ или в подпапка ?

Ако да, пробвахте командата h:\frst.exe и нищо не се получава ?

Пробвайте първо с командата:

CD H:\

Натиснете Enter и после въведете командата

H:\frst.exe

Свалих файла,и го запазих в празната директория,не във папка.Не мисля че има значение,че не е флашка а карта с памет

Би трябвало да няма значение. Не съм пробвал от карта с памет досега.

Пробвахте ли командите от предишния ми коментар ?

или с cd H:\

или само с H:

и вече трябва да изпише, че сте във дял H:

После само въведете frst.exe и после SCAN.

Благодаря,пробвах и последното нещо което ми написахте,промени се на H:\,но програмата отново не се стартира.Сигурно ли е ,че трябва на 100% да се стартира,защото пробвах много пъти досега и не се получава.Следвам стъпка по стъпка което ми пишете(и то е доста изчерпателно и подробно)препрочитам всичко дума по дума,но немога да стартирам тази програма.Вината в мен ли е?

Май вината е в мен. Забравих, че вие използвате x64 битов Windows.

Опитайте с този линк и запазете програмата на флашката.

http://download.bleepingcomputer.com/farbar/FRST64.exe

После се опитайте отново да стартирате програмата...

CD H:\

или само H:

после въведете FRST64.exe или H:\FRST64.exe и вижте дали ще се получи.

Благодаря ти,сега с тази програма стана ето и резултатите от нея: Scan result of Farbar Recovery Scan Tool Version: 28-01-2012 Ran by SYSTEM at 2012-02-01 18:35:42 Running from H:\ Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US) The current controlset is ControlSet001 ========================== Registry (Whitelisted) ============= HKLM\...\Run: [igfxTray] C:\Windows\system32\igfxtray.exe [162328 2011-02-11] (Intel Corporation) HKLM\...\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe [386584 2011-02-11] (Intel Corporation) HKLM\...\Run: [Persistence] C:\Windows\system32\igfxpers.exe [417304 2011-02-11] (Intel Corporation) HKLM\...\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe [384296 2010-04-05] (Alps Electric Co., Ltd.) HKLM\...\Run: [sysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-02-25] (IDT, Inc.) HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2010-11-29] (Apple Inc.) HKLM-x32\...\Run: [PC Cleaners] "C:\Program Files (x86)\PC Cleaners\PCCleaners.exe" /minimize [51054352 2012-01-26] (PC Cleaners Inc.) HKLM-x32\...\Run: [ModemListener] C:\Program Files (x86)\VIVACOM 3G USB MODEM\ModemListener.exe start [98304 2010-01-27] () HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [421736 2011-07-19] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [843712 2012-01-03] (Adobe Systems Incorporated) HKU\Elinceto\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe" -autorun [691656 2009-04-23] (DT Soft Ltd) HKU\Elinceto\...\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [5486464 2011-12-08] (SUPERAntiSpyware.com) HKU\Elinceto\...\Run: [101 Penguin Pets OLR] C:\PROGRA~2\BVRPSO~1\101PEN~1\BVRPOlr.exe /101 Penguin Pets [79104 2008-02-11] (Avanquest Software) Winlogon\Notify\igfxcui: igfxdev.dll (Intel Corporation) Tcpip\..\Interfaces\{00608BD6-8A70-4C1D-874B-1BE1A6F42074}: [NameServer]212.39.90.42 212.39.90.43 Tcpip\..\Interfaces\{359724A7-3C65-4157-B38E-0FC192ADB5B0}: [NameServer]212.39.90.42 212.39.90.43 Tcpip\..\Interfaces\{3CDAF02F-92AE-4D75-992C-ACD9887AAB80}: [NameServer]212.39.90.42 212.39.90.43 ==================== Services (Whitelisted) ====== 2 !SASCORE; "C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE" [140672 2011-08-11] (SUPERAntiSpyware.com) 2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_7f58c91b65c73836\AESTSr64.exe [89600 2009-03-02] (Andrea Electronics Corporation) 2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] () 2 DeviceManager; C:\Program Files (x86)\Common Files\DeviceHelper\DeviceManager.exe -start [40960 2009-11-17] () 2 MsMpSvc; "C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe" [12784 2011-04-27] (Microsoft Corporation) 3 NisSrv; "C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe" [288272 2011-04-27] (Microsoft Corporation) 2 NitroReaderDriverReadSpool2; "C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe" [341288 2011-10-25] (Nitro PDF Software) 2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_7f58c91b65c73836\STacSV64.exe [244736 2010-02-25] (IDT, Inc.) ========================== Drivers (Whitelisted) ============= 3 BridgeMP; C:\Windows\System32\DRIVERS\bridge.sys [95232 2009-07-13] (Microsoft Corporation) 3 dmvsc; C:\Windows\System32\drivers\dmvsc.sys [71168 2010-11-20] (Microsoft Corporation) 3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [252928 2010-04-30] (Huawei Technologies Co., Ltd.) 3 ew_hwusbdev; C:\Windows\System32\DRIVERS\ew_hwusbdev.sys [114560 2010-03-20] (Huawei Technologies Co., Ltd.) 3 huawei_enumerator; C:\Windows\System32\DRIVERS\ew_jubusenum.sys [83456 2010-05-22] (Huawei Technologies Co., Ltd.) 3 hwdatacard; C:\Windows\System32\DRIVERS\ewusbmdm.sys [120704 2010-03-24] (Huawei Technologies Co., Ltd.) 3 jrdusbser; C:\Windows\System32\DRIVERS\jrdusbser.sys [119680 2009-11-17] (TCT International Mobile Ltd) 1 SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) 1 SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) 4 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [68608 2005-08-10] (Protection Technology) 4 sfhlp02; C:\Windows\System32\drivers\sfhlp02.sys [7168 2005-05-16] (Protection Technology) 0 sfsync02; C:\Windows\System32\drivers\sfsync02.sys [15872 2005-08-10] (Protection Technology) 0 sptd; C:\Windows\System32\Drivers\sptd.sys [871408 2012-01-18] (Duplex Secure Ltd.) 3 Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [88960 2010-11-20] (Microsoft Corporation) 3 terminpt; C:\Windows\System32\drivers\terminpt.sys [34816 2010-11-20] (Microsoft Corporation) 3 TsUsbGD; C:\Windows\System32\drivers\TsUsbGD.sys [31232 2010-11-20] (Microsoft Corporation) 3 tsusbhub; C:\Windows\System32\drivers\tsusbhub.sys [117248 2010-11-20] (Microsoft Corporation) 3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-27] () 3 catchme; \??\C:\ComboFix\catchme.sys [x] 3 VGPU; C:\Windows\System32\drivers\rdvgkmd.sys [x] ========================== NetSvcs (Whitelisted) =========== ============ One Month Created Files and Folders ============== 2012-02-01 18:35 - 2012-02-01 18:35 - 0000000 ____D C:\FRST 2012-01-30 09:27 - 2012-01-30 09:27 - 0000000 ____D C:\Users\Elinceto\AppData\Local\Windows Live Writer 2012-01-29 20:20 - 2012-01-29 20:20 - 0002241 ____A C:\Windows\SysWOW64\cplLogon.tsk 2012-01-29 19:54 - 2012-01-29 19:54 - 0008622 ____A C:\Users\Elinceto\Downloads\Default_Directory(3).reg 2012-01-29 19:54 - 2012-01-29 19:54 - 0007712 ____A C:\Users\Elinceto\Downloads\Default_Folder(2).reg 2012-01-29 19:51 - 2012-01-29 19:51 - 0008622 ____A C:\Users\Elinceto\Downloads\Default_Directory(2).reg 2012-01-29 19:35 - 2012-01-29 19:35 - 0007712 ____A C:\Users\Elinceto\Downloads\Default_Folder(1).reg 2012-01-29 19:34 - 2012-01-29 19:34 - 0008622 ____A C:\Users\Elinceto\Downloads\Default_Directory(1).reg 2012-01-29 19:22 - 2012-01-29 19:22 - 0008622 ____A C:\Users\Elinceto\Downloads\Default_Directory.reg 2012-01-29 19:22 - 2012-01-29 19:22 - 0007712 ____A C:\Users\Elinceto\Downloads\Default_Folder.reg 2012-01-29 11:16 - 2012-01-29 11:16 - 0024359 ____A C:\Users\Elinceto\Desktop\New Text Document.txt 2012-01-29 11:07 - 2012-01-29 11:07 - 0024359 ____A C:\ComboFix.txt 2012-01-29 11:02 - 2012-01-29 11:02 - 0000000 ____D C:\$RECYCLE.BIN 2012-01-29 10:32 - 2012-01-29 11:05 - 0000000 ____D C:\Windows\ERDNT 2012-01-29 10:32 - 2011-06-25 22:45 - 0256000 ____A C:\Windows\PEV.exe 2012-01-29 10:32 - 2010-11-07 09:20 - 0208896 ____A C:\Windows\MBR.exe 2012-01-29 10:32 - 2009-04-19 20:56 - 0060416 ____A (NirSoft) C:\Windows\NIRCMD.exe 2012-01-29 10:32 - 2000-08-30 16:00 - 0518144 ____A (SteelWerX) C:\Windows\SWREG.exe 2012-01-29 10:32 - 2000-08-30 16:00 - 0406528 ____A (SteelWerX) C:\Windows\SWSC.exe 2012-01-29 10:32 - 2000-08-30 16:00 - 0098816 ____A C:\Windows\sed.exe 2012-01-29 10:32 - 2000-08-30 16:00 - 0080412 ____A C:\Windows\grep.exe 2012-01-29 10:32 - 2000-08-30 16:00 - 0068096 ____A C:\Windows\zip.exe 2012-01-29 10:31 - 2012-01-29 11:07 - 0000000 ___AD C:\Qoobox 2012-01-29 10:20 - 2012-01-29 10:31 - 4393882 ____R (Swearware) C:\Users\Elinceto\Downloads\ComboFix.exe 2012-01-29 10:12 - 2011-07-15 21:41 - 0362496 ____A (Microsoft Corporation) C:\Windows\System32\wow64win.dll 2012-01-29 10:12 - 2011-07-15 21:41 - 0243200 ____A (Microsoft Corporation) C:\Windows\System32\wow64.dll 2012-01-29 10:12 - 2011-07-15 21:41 - 0013312 ____A (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll 2012-01-29 10:12 - 2011-07-15 21:39 - 0016384 ____A (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll 2012-01-29 10:12 - 2011-07-15 21:37 - 1162752 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll 2012-01-29 10:12 - 2011-07-15 21:37 - 0421888 ____A (Microsoft Corporation) C:\Windows\System32\KernelBase.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0006144 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0005120 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 21:21 - 0003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:29 - 0014336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2012-01-29 10:12 - 2011-07-15 20:25 - 0025600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2012-01-29 10:12 - 2011-07-15 20:24 - 1114112 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2012-01-29 10:12 - 2011-07-15 20:24 - 0272384 ____A (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2012-01-29 10:12 - 2011-07-15 20:24 - 0005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0005120 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 20:15 - 0003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 18:21 - 0007680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2012-01-29 10:12 - 2011-07-15 18:21 - 0002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2012-01-29 10:12 - 2011-07-15 18:17 - 0006144 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 18:17 - 0004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 18:17 - 0003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2012-01-29 10:12 - 2011-07-15 18:17 - 0003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2012-01-29 10:12 - 2011-06-23 21:34 - 0214528 ____A (Microsoft Corporation) C:\Windows\System32\winsrv.dll 2012-01-29 10:12 - 2011-06-23 21:25 - 0338432 ____A (Microsoft Corporation) C:\Windows\System32\conhost.exe 2012-01-29 10:04 - 2011-08-16 21:26 - 0613888 ____A (Microsoft Corporation) C:\Windows\System32\psisdecd.dll 2012-01-29 10:04 - 2011-08-16 21:25 - 0108032 ____A (Microsoft Corporation) C:\Windows\System32\psisrndr.ax 2012-01-29 10:04 - 2011-08-16 20:24 - 0465408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2012-01-29 10:04 - 2011-08-16 20:19 - 0075776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2012-01-29 09:03 - 2011-05-24 03:42 - 0404480 ____A (Microsoft Corporation) C:\Windows\System32\umpnpmgr.dll 2012-01-29 09:03 - 2011-05-24 02:40 - 0064512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2012-01-29 09:03 - 2011-05-24 02:40 - 0044544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2012-01-29 09:03 - 2011-05-24 02:39 - 0145920 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2012-01-29 09:03 - 2011-05-24 02:37 - 0252928 ____A (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2012-01-29 08:57 - 2012-01-29 19:58 - 0967438 ____A C:\Users\Elinceto\Desktop\1.png 2012-01-29 07:27 - 2012-01-29 07:59 - 0565236 ____A C:\Windows\ntbtlog.txt 2012-01-29 06:44 - 2011-05-02 21:29 - 0976896 ____A (Microsoft Corporation) C:\Windows\System32\inetcomm.dll 2012-01-29 06:44 - 2011-05-02 20:30 - 0741376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2012-01-29 06:44 - 2011-02-12 03:34 - 0267776 ____A (Microsoft Corporation) C:\Windows\System32\FXSCOVER.exe 2012-01-29 06:43 - 2011-11-23 20:52 - 3145216 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2012-01-29 06:43 - 2011-10-14 22:31 - 0723456 ____A (Microsoft Corporation) C:\Windows\System32\EncDec.dll 2012-01-29 06:43 - 2011-10-14 21:38 - 0534528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2012-01-29 06:43 - 2011-08-26 21:37 - 0861696 ____A (Microsoft Corporation) C:\Windows\System32\oleaut32.dll 2012-01-29 06:43 - 2011-08-26 21:37 - 0331776 ____A (Microsoft Corporation) C:\Windows\System32\oleacc.dll 2012-01-29 06:43 - 2011-08-26 20:26 - 0571904 ____A (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2012-01-29 06:43 - 2011-08-26 20:26 - 0233472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2012-01-29 06:43 - 2011-02-22 20:56 - 0158208 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys 2012-01-29 06:43 - 2011-02-22 20:55 - 0287744 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys 2012-01-29 06:43 - 2011-02-22 20:55 - 0128000 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys 2012-01-29 06:43 - 2011-02-22 20:55 - 0090624 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\bowser.sys 2012-01-29 06:34 - 2011-11-16 22:41 - 1731920 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll 2012-01-29 06:34 - 2011-11-16 21:38 - 1292080 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2012-01-29 06:33 - 2011-06-22 21:43 - 5561216 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2012-01-29 06:33 - 2011-06-22 20:33 - 3967872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2012-01-29 06:33 - 2011-06-22 20:33 - 3912576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2012-01-29 06:32 - 2011-11-19 06:58 - 0077312 ____A (Microsoft Corporation) C:\Windows\System32\packager.dll 2012-01-29 06:32 - 2011-11-19 06:01 - 0067072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2012-01-29 05:25 - 2012-01-29 05:27 - 0806400 ____A C:\Users\Elinceto\Downloads\MicrosoftFixit50692.msi 2012-01-29 05:17 - 2012-01-29 08:35 - 0000000 ____D C:\Program Files\Microsoft Security Client 2012-01-29 04:02 - 2012-01-29 04:02 - 0347920 ____A (Microsoft Corporation) C:\Users\Elinceto\Downloads\MicrosoftFixit.WinFileFolder.Run.exe 2012-01-29 03:45 - 2012-01-29 08:29 - 0001240 ____A C:\FixitRegBackup.reg 2012-01-29 03:41 - 2012-01-29 03:42 - 0899584 ____A C:\Users\Elinceto\Downloads\MicrosoftFixit50535.msi 2012-01-28 09:19 - 2012-01-28 09:20 - 0607260 ____R (Swearware) C:\Users\Elinceto\Downloads\dds.scr 2012-01-28 08:51 - 2012-01-28 08:51 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\SUPERAntiSpyware.com 2012-01-28 08:51 - 2012-01-28 08:51 - 0000000 ____D C:\Users\All Users\SUPERAntiSpyware.com 2012-01-28 08:51 - 2012-01-28 08:51 - 0000000 ____D C:\ProgramData\SUPERAntiSpyware.com 2012-01-28 08:51 - 2012-01-28 08:51 - 0000000 ____D C:\Program Files\SUPERAntiSpyware 2012-01-28 08:13 - 2012-01-28 08:50 - 14319240 ____A (SUPERAntiSpyware.com) C:\Users\Elinceto\Downloads\SUPERAntiSpyware.exe 2012-01-28 07:46 - 2012-01-29 05:18 - 0000000 ____D C:\Program Files (x86)\Microsoft Security Client 2012-01-28 07:31 - 2012-01-28 07:46 - 10165440 ____A (Microsoft Corporation) C:\Users\Elinceto\Downloads\mseinstall.exe 2012-01-28 07:27 - 2012-01-28 07:29 - 0000000 ____D C:\Users\Elinceto\AppData\Local\{1E915DF1-E2CA-4802-B933-D1E13DB3E4AD} 2012-01-28 07:27 - 2012-01-28 07:27 - 0000000 ____D C:\Users\Elinceto\AppData\Local\{69FD1AC2-87A6-4599-8435-5B6D982298C6} 2012-01-28 07:06 - 2012-01-28 07:06 - 0000000 ____D C:\Windows\SysWOW64\vmm32 2012-01-28 07:06 - 2012-01-28 07:06 - 0000000 ____D C:\Program Files (x86)\Dell 2012-01-26 18:38 - 2012-01-26 18:38 - 0000000 ____D C:\Users\Elinceto\AppData\Local\{3CF1D8D9-86C1-467D-8B71-A0CF61472C0D} 2012-01-26 18:36 - 2012-01-26 18:36 - 0000000 ____D C:\Users\Elinceto\AppData\Local\{B5602DF4-1DB0-4647-AD6C-0EE515C607B3} 2012-01-26 18:35 - 2012-01-26 18:35 - 0000000 ___RD C:\Users\Elinceto\Documents\Scanned Documents 2012-01-26 18:35 - 2012-01-26 18:35 - 0000000 ____D C:\Users\Elinceto\Documents\Fax 2012-01-26 13:00 - 2012-01-26 13:00 - 0000000 ____D C:\Windows\en 2012-01-26 11:37 - 2012-01-26 11:37 - 0000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2012-01-26 10:46 - 2012-01-26 12:15 - 0000000 ____D C:\Users\Elinceto\AppData\Local\NFS Underground 2 2012-01-26 10:36 - 2012-01-26 13:05 - 0000000 ____D C:\Program Files (x86)\Windows Live 2012-01-26 10:36 - 2011-05-13 05:37 - 0048488 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fssfltr.sys 2012-01-26 10:25 - 2012-01-26 10:25 - 0000000 ____D C:\Windows\PCHEALTH 2012-01-26 10:23 - 2012-01-26 10:36 - 0000000 ____D C:\Program Files\Windows Live 2012-01-26 10:02 - 2009-09-04 07:44 - 0515416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2012-01-26 10:02 - 2009-09-04 07:44 - 0069464 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2012-01-26 10:02 - 2009-09-04 07:29 - 0523088 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_42.dll 2012-01-26 10:02 - 2009-09-04 07:29 - 0453456 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2012-01-26 09:59 - 2012-01-26 09:59 - 0000199 ____A C:\Windows\DirectX.log 2012-01-26 09:59 - 2006-11-29 03:06 - 4398360 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_32.dll 2012-01-26 09:59 - 2006-11-29 03:06 - 3426072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2012-01-26 09:09 - 2012-01-26 09:09 - 0000000 ____D C:\Users\All Users\PC Tools 2012-01-26 09:09 - 2012-01-26 09:09 - 0000000 ____D C:\ProgramData\PC Tools 2012-01-26 09:05 - 2012-01-26 09:05 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\PCPro 2012-01-26 09:05 - 2012-01-26 09:05 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\PC Cleaners 2012-01-26 09:05 - 2012-01-26 09:05 - 0000000 ____D C:\Users\All Users\PC1Data 2012-01-26 09:05 - 2012-01-26 09:05 - 0000000 ____D C:\ProgramData\PC1Data 2012-01-26 09:05 - 2012-01-26 09:05 - 0000000 ____D C:\Program Files (x86)\PC Cleaners 2012-01-26 09:05 - 2012-01-26 08:45 - 5276432 ____A (PC Cleaners) C:\Windows\uninst.exe 2012-01-26 08:52 - 2012-01-26 08:52 - 0000000 ____D C:\Users\Elinceto\Downloads\PC Drivers HeadQuarters 2012-01-26 08:52 - 2012-01-26 08:52 - 0000000 ____D C:\Users\All Users\PC Drivers HeadQuarters 2012-01-26 08:52 - 2012-01-26 08:52 - 0000000 ____D C:\ProgramData\PC Drivers HeadQuarters 2012-01-26 08:47 - 2012-01-26 08:49 - 0512992 ____A C:\Users\Elinceto\Downloads\sdsetup_revwire207(1).exe 2012-01-26 08:44 - 2012-01-26 08:45 - 0512992 ____A C:\Users\Elinceto\Downloads\sdsetup_revwire207.exe 2012-01-26 08:31 - 2012-01-26 08:45 - 5276432 ____A (PC Cleaners) C:\Users\Elinceto\Downloads\PC_Cleaner_Pro.exe 2012-01-26 08:27 - 2012-01-26 08:29 - 1182616 ____A (PC Drivers HeadQuarters ) C:\Users\Elinceto\Downloads\DriverDetective.exe 2012-01-26 08:15 - 2012-01-30 01:37 - 0000000 ____D C:\Users\Elinceto\AppData\Local\Windows Live 2012-01-26 08:11 - 2012-01-26 08:12 - 0000000 ____D C:\Users\Elinceto\AppData\Local\{71FF52C9-D7B4-4CEE-BEC2-C1F3421FB611} 2012-01-26 08:05 - 2012-01-26 08:11 - 1287016 ____A (Microsoft Corporation) C:\Users\Elinceto\Downloads\wlsetup-web.exe 2012-01-26 06:40 - 2012-01-26 06:49 - 0000016 ____A C:\Windows\popcinfo.dat 2012-01-24 07:48 - 2012-01-24 07:48 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\EleFun Games 2012-01-24 07:44 - 2012-01-24 07:47 - 0000000 ____D C:\Users\All Users\FarmFrenzy-PizzaParty 2012-01-24 07:44 - 2012-01-24 07:47 - 0000000 ____D C:\ProgramData\FarmFrenzy-PizzaParty 2012-01-24 07:35 - 2012-01-24 07:40 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\XBMC 2012-01-24 07:31 - 2011-05-05 11:34 - 0042555 ____A C:\Users\Public\Documents\FILE1682.JPG 2012-01-24 04:30 - 2012-01-29 08:51 - 0000000 ____D C:\Users\Elinceto\Desktop\games 2012-01-24 04:21 - 2012-01-24 04:21 - 0001414 ____A C:\Users\Public\Desktop\101 Penguin Pets.lnk 2012-01-24 04:21 - 2012-01-24 04:21 - 0000000 ____D C:\Users\All Users\BVRP Software 2012-01-24 04:21 - 2012-01-24 04:21 - 0000000 ____D C:\ProgramData\BVRP Software 2012-01-24 04:21 - 2012-01-24 04:21 - 0000000 ____D C:\Program Files (x86)\Selectsoft 2012-01-24 04:21 - 2012-01-24 04:21 - 0000000 ____D C:\Program Files (x86)\BVRP Software 2012-01-22 21:51 - 2012-01-22 21:51 - 0001954 ____A C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2012-01-22 21:51 - 2012-01-22 21:51 - 0000000 ____D C:\Program Files (x86)\DAEMON Tools Lite 2012-01-22 11:19 - 2012-01-22 11:19 - 0001409 ____A C:\Windows\SysWOW64\tmp45BAE.FOT 2012-01-22 11:19 - 2012-01-22 11:19 - 0001409 ____A C:\Windows\SysWOW64\tmp38BAE.FOT 2012-01-22 09:03 - 2012-01-22 09:03 - 0002140 ____A C:\Users\Elinceto\Desktop\Jewel Quest.lnk 2012-01-22 09:03 - 2012-01-22 09:03 - 0000000 ____D C:\Users\Public\Documents\iWin 2012-01-22 08:43 - 2012-01-22 08:43 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\Playrix Entertainment 2012-01-22 08:38 - 2012-01-22 08:38 - 0002080 ____A C:\Users\Elinceto\Desktop\Fishdom.lnk 2012-01-22 08:14 - 2012-01-22 08:14 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\Meridian93 2012-01-22 08:02 - 2012-01-22 08:02 - 0000000 ____D C:\Users\Elinceto\AppData\Local\Menge 2012-01-21 04:25 - 2012-01-21 04:25 - 0000000 ____D C:\Users\All Users\Arcade Lab 2012-01-21 04:25 - 2012-01-21 04:25 - 0000000 ____D C:\ProgramData\Arcade Lab 2012-01-21 03:32 - 2012-01-24 07:30 - 0000000 ____D C:\Users\Public\Documents\AlawarWrapper 2012-01-21 03:32 - 2012-01-21 13:07 - 0000000 ____D C:\Users\All Users\AlawarWrapper 2012-01-21 03:32 - 2012-01-21 13:07 - 0000000 ____D C:\ProgramData\AlawarWrapper 2012-01-20 19:09 - 2012-01-26 06:59 - 0000000 ____D C:\Program Files (x86)\PopCap Games 2012-01-20 19:09 - 2012-01-20 19:09 - 0000000 ____D C:\Users\All Users\PopCap Games 2012-01-20 19:09 - 2012-01-20 19:09 - 0000000 ____D C:\ProgramData\PopCap Games 2012-01-20 09:32 - 2012-01-20 09:32 - 0000000 ____D C:\Users\All Users\Sandlot Games 2012-01-20 09:32 - 2012-01-20 09:32 - 0000000 ____D C:\ProgramData\Sandlot Games 2012-01-19 11:33 - 2012-01-19 11:33 - 0000000 ____D C:\Users\Elinceto\AppData\Local\Oberon Games 2012-01-19 11:28 - 2012-01-23 07:23 - 0000419 ____A C:\Windows\superball.ini 2012-01-19 11:28 - 2012-01-23 07:23 - 0000367 ____A C:\Windows\cncscore.ini 2012-01-19 11:28 - 2012-01-22 17:21 - 0000024 __RAH C:\Windows\wcpx_.dat 2012-01-19 09:49 - 2012-01-19 09:49 - 0000000 ____D C:\Users\All Users\Rumbic Studio 2012-01-19 09:49 - 2012-01-19 09:49 - 0000000 ____D C:\ProgramData\Rumbic Studio 2012-01-19 09:41 - 2012-01-19 09:41 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\Intenium 2012-01-19 08:39 - 2012-01-19 08:39 - 0000000 ____D C:\Users\All Users\shockwave.com 2012-01-19 08:39 - 2012-01-19 08:39 - 0000000 ____D C:\ProgramData\shockwave.com 2012-01-19 08:37 - 2012-01-19 08:37 - 0000000 ____D C:\Program Files (x86)\My Sweet Games 2012-01-19 00:13 - 2012-01-19 00:22 - 0000669 ____A C:\Users\Elinceto\Desktop\igraa.txt 2012-01-18 23:40 - 2012-01-30 07:38 - 0008727 ____A C:\ashampoo-acdw-log.txt 2012-01-18 23:40 - 2012-01-30 07:38 - 0000000 ____D C:\Users\Elinceto\AppData\Local\Ashampoo Music Studio 3 2012-01-18 23:38 - 2012-01-30 01:38 - 0000000 ____D C:\Program Files (x86)\MyAshampoo 2012-01-18 23:38 - 2012-01-18 23:38 - 0001155 ____A C:\Users\Public\Desktop\Ashampoo Music Studio 3.lnk 2012-01-18 23:38 - 2012-01-18 23:38 - 0000000 ____D C:\Program Files (x86)\Conduit 2012-01-18 23:30 - 2012-01-18 23:32 - 16910182 ____A C:\Users\Elinceto\Desktop\Kak se mauntva disk i kak se igrae ot nego..avi 2012-01-18 23:20 - 2012-01-22 21:51 - 0000000 ____D C:\Program Files (x86)\DAEMON Tools Toolbar 2012-01-18 23:18 - 2012-01-18 23:18 - 0871408 ____A (Duplex Secure Ltd.) C:\Windows\System32\Drivers\sptd.sys 2012-01-17 07:21 - 2012-01-17 07:21 - 0000696 ____A C:\Users\Elinceto\Desktop\Downloads D.lnk 2012-01-17 07:20 - 2012-01-17 07:21 - 0000696 ____A C:\Users\Elinceto\Desktop\Downloads.lnk 2012-01-16 15:13 - 2012-01-16 15:13 - 0000000 ____D C:\Users\Elinceto\Documents\GomPlayer 2012-01-14 16:24 - 2012-01-14 16:24 - 0084482 ____A C:\Users\Elinceto\Downloads\search(1) 2012-01-14 16:23 - 2012-01-14 16:23 - 0088825 ____A C:\Users\Elinceto\Downloads\search 2012-01-13 15:41 - 2012-01-13 15:41 - 0002019 ____A C:\Users\Public\Desktop\Adobe Reader X.lnk 2012-01-13 15:41 - 2012-01-13 15:41 - 0000000 ____D C:\Program Files (x86)\Adobe 2012-01-13 04:46 - 2012-01-13 06:00 - 0000000 ____D C:\Users\Elinceto\Desktop\s 2012-01-12 15:22 - 2012-01-12 15:22 - 4417803 ____A C:\Users\Elinceto\Kali - Vliubena ubii me (official video).mp3 2012-01-12 15:20 - 2012-01-12 15:22 - 38876796 ____A C:\Users\Elinceto\Kali - Vliubena ubii me (official video).avi 2012-01-12 15:19 - 2012-01-18 16:48 - 0000000 ____D C:\Users\Elinceto\Desktop\novooooo 2012-01-12 14:27 - 2012-01-12 14:29 - 42184984 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\fishdom_setup.exe 2012-01-12 14:27 - 2012-01-12 14:29 - 13945160 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\atlantis_setup.exe 2012-01-12 14:22 - 2012-01-12 14:24 - 35530216 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\pizzaparty_setup.exe 2012-01-12 14:22 - 2012-01-12 14:22 - 0035365 ____A C:\Users\Elinceto\EngineList_sponsorkeyword.txt 2012-01-12 14:21 - 2012-01-12 14:22 - 23788240 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\puzzlemania_setup.exe 2012-01-12 14:19 - 2012-01-12 14:20 - 16677888 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\flowerquest_setup.exe 2012-01-12 14:18 - 2012-01-12 14:19 - 18687016 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\fairyquest_setup.exe 2012-01-12 14:15 - 2012-01-12 14:16 - 12610848 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\jewelquest_setup.exe 2012-01-12 14:14 - 2012-01-12 14:17 - 62267432 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\1001nights_setup.exe 2012-01-12 14:09 - 2012-01-24 07:47 - 0000000 ____D C:\Program Files (x86)\MyPlayCity.com 2012-01-12 14:08 - 2012-01-12 14:08 - 6295176 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\rattack_setup.exe 2012-01-12 14:07 - 2012-01-12 14:12 - 91265504 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\fishdomh2o_setup.exe 2012-01-10 17:16 - 2012-01-21 19:34 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\vlc 2012-01-10 17:15 - 2012-01-10 17:15 - 0001070 ____A C:\Users\Public\Desktop\VLC media player.lnk 2012-01-04 10:51 - 2012-01-25 09:28 - 0029318 ____A C:\debug.txt 2012-01-04 10:51 - 2012-01-18 23:53 - 0000000 ____D C:\Program Files (x86)\GLOBUL Connection Manager 2012-01-04 10:51 - 2012-01-04 10:51 - 0000587 ____A C:\Windows\ZTEInstallInfo.log 2012-01-04 10:51 - 2012-01-04 10:51 - 0000000 ____D C:\Windows\SysWOW64\SupportAppXL ============ 3 Months Modified Files and Folders ============= 2012-02-01 18:35 - 2012-02-01 18:35 - 0000000 ____D C:\FRST 2012-01-30 09:27 - 2012-01-30 09:27 - 0000000 ____D C:\Users\Elinceto\AppData\Local\Windows Live Writer 2012-01-30 09:27 - 2011-11-04 05:23 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\Nitro PDF 2012-01-30 09:27 - 2011-05-06 02:05 - 1148470 ____A C:\Windows\WindowsUpdate.log 2012-01-30 09:21 - 2009-07-13 21:13 - 0006390 ____A C:\Windows\System32\PerfStringBackup.INI 2012-01-30 08:51 - 2011-05-05 16:25 - 0001020 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3066445684-1154162243-1188742596-1000UA.job 2012-01-30 07:42 - 2009-07-13 20:45 - 0021072 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2012-01-30 07:42 - 2009-07-13 20:45 - 0021072 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2012-01-30 07:38 - 2012-01-18 23:40 - 0008727 ____A C:\ashampoo-acdw-log.txt 2012-01-30 07:38 - 2012-01-18 23:40 - 0000000 ____D C:\Users\Elinceto\AppData\Local\Ashampoo Music Studio 3 2012-01-30 07:34 - 2011-11-10 12:30 - 0005113 ____A C:\Windows\setupact.log 2012-01-30 07:34 - 2011-05-06 02:02 - 3190050816 __ASH C:\hiberfil.sys 2012-01-30 07:34 - 2009-07-13 21:08 - 0000006 ___AH C:\Windows\Tasks\SA.DAT 2012-01-30 01:38 - 2012-01-18 23:38 - 0000000 ____D C:\Program Files (x86)\MyAshampoo 2012-01-30 01:37 - 2012-01-26 08:15 - 0000000 ____D C:\Users\Elinceto\AppData\Local\Windows Live 2012-01-30 01:00 - 2011-05-05 17:24 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\Skype 2012-01-29 23:51 - 2011-05-05 16:25 - 0000968 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3066445684-1154162243-1188742596-1000Core.job 2012-01-29 20:20 - 2012-01-29 20:20 - 0002241 ____A C:\Windows\SysWOW64\cplLogon.tsk 2012-01-29 20:20 - 2011-09-10 03:38 - 0000000 ____D C:\Program Files (x86)\Logon Screen 2012-01-29 19:58 - 2012-01-29 08:57 - 0967438 ____A C:\Users\Elinceto\Desktop\1.png 2012-01-29 19:54 - 2012-01-29 19:54 - 0008622 ____A C:\Users\Elinceto\Downloads\Default_Directory(3).reg 2012-01-29 19:54 - 2012-01-29 19:54 - 0007712 ____A C:\Users\Elinceto\Downloads\Default_Folder(2).reg 2012-01-29 19:51 - 2012-01-29 19:51 - 0008622 ____A C:\Users\Elinceto\Downloads\Default_Directory(2).reg 2012-01-29 19:35 - 2012-01-29 19:35 - 0007712 ____A C:\Users\Elinceto\Downloads\Default_Folder(1).reg 2012-01-29 19:34 - 2012-01-29 19:34 - 0008622 ____A C:\Users\Elinceto\Downloads\Default_Directory(1).reg 2012-01-29 19:26 - 2009-07-13 20:45 - 0298840 ____A C:\Windows\System32\FNTCACHE.DAT 2012-01-29 19:22 - 2012-01-29 19:22 - 0008622 ____A C:\Users\Elinceto\Downloads\Default_Directory.reg 2012-01-29 19:22 - 2012-01-29 19:22 - 0007712 ____A C:\Users\Elinceto\Downloads\Default_Folder.reg 2012-01-29 11:16 - 2012-01-29 11:16 - 0024359 ____A C:\Users\Elinceto\Desktop\New Text Document.txt 2012-01-29 11:07 - 2012-01-29 11:07 - 0024359 ____A C:\ComboFix.txt 2012-01-29 11:07 - 2012-01-29 10:31 - 0000000 ___AD C:\Qoobox 2012-01-29 11:07 - 2009-07-13 19:20 - 0000000 __RHD C:\users\Default 2012-01-29 11:07 - 2009-07-13 19:20 - 0000000 ___RD C:\users\Public 2012-01-29 11:05 - 2012-01-29 10:32 - 0000000 ____D C:\Windows\ERDNT 2012-01-29 11:02 - 2012-01-29 11:02 - 0000000 ____D C:\$RECYCLE.BIN 2012-01-29 11:02 - 2009-07-13 18:34 - 0000215 ____A C:\Windows\system.ini 2012-01-29 11:02 - 2009-07-13 18:34 - 0000027 ____A C:\Windows\System32\Drivers\etc\hosts 2012-01-29 11:01 - 2011-11-10 12:30 - 0314336 ____A C:\Windows\PFRO.log 2012-01-29 10:31 - 2012-01-29 10:20 - 4393882 ____R (Swearware) C:\Users\Elinceto\Downloads\ComboFix.exe 2012-01-29 08:51 - 2012-01-24 04:30 - 0000000 ____D C:\Users\Elinceto\Desktop\games 2012-01-29 08:35 - 2012-01-29 05:17 - 0000000 ____D C:\Program Files\Microsoft Security Client 2012-01-29 08:35 - 2011-05-06 03:44 - 0001945 ____A C:\Windows\epplauncher.mif 2012-01-29 08:29 - 2012-01-29 03:45 - 0001240 ____A C:\FixitRegBackup.reg 2012-01-29 08:24 - 2011-11-21 12:50 - 0010070 ____A C:\Windows\diagwrn.xml 2012-01-29 08:24 - 2011-11-21 12:50 - 0001890 ____A C:\Windows\diagerr.xml 2012-01-29 08:24 - 2011-11-10 12:30 - 0000000 ____A C:\Windows\setuperr.log 2012-01-29 07:59 - 2012-01-29 07:27 - 0565236 ____A C:\Windows\ntbtlog.txt 2012-01-29 05:27 - 2012-01-29 05:25 - 0806400 ____A C:\Users\Elinceto\Downloads\MicrosoftFixit50692.msi 2012-01-29 05:18 - 2012-01-28 07:46 - 0000000 ____D C:\Program Files (x86)\Microsoft Security Client 2012-01-29 05:17 - 2009-07-13 19:20 - 0000000 ___HD C:\Windows\System32\GroupPolicy 2012-01-29 04:06 - 2011-05-06 03:39 - 0000000 ____D C:\Users\Elinceto\AppData\Local\ElevatedDiagnostics 2012-01-29 04:02 - 2012-01-29 04:02 - 0347920 ____A (Microsoft Corporation) C:\Users\Elinceto\Downloads\MicrosoftFixit.WinFileFolder.Run.exe 2012-01-29 03:42 - 2012-01-29 03:41 - 0899584 ____A C:\Users\Elinceto\Downloads\MicrosoftFixit50535.msi 2012-01-28 12:10 - 2011-05-05 16:48 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\uTorrent 2012-01-28 09:20 - 2012-01-28 09:19 - 0607260 ____R (Swearware) C:\Users\Elinceto\Downloads\dds.scr 2012-01-28 08:51 - 2012-01-28 08:51 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\SUPERAntiSpyware.com 2012-01-28 08:51 - 2012-01-28 08:51 - 0000000 ____D C:\Users\All Users\SUPERAntiSpyware.com 2012-01-28 08:51 - 2012-01-28 08:51 - 0000000 ____D C:\ProgramData\SUPERAntiSpyware.com 2012-01-28 08:51 - 2012-01-28 08:51 - 0000000 ____D C:\Program Files\SUPERAntiSpyware 2012-01-28 08:50 - 2012-01-28 08:13 - 14319240 ____A (SUPERAntiSpyware.com) C:\Users\Elinceto\Downloads\SUPERAntiSpyware.exe 2012-01-28 07:46 - 2012-01-28 07:31 - 10165440 ____A (Microsoft Corporation) C:\Users\Elinceto\Downloads\mseinstall.exe 2012-01-28 07:46 - 2011-05-06 03:44 - 0006356 ____A C:\Windows\SysWOW64\PerfStringBackup.INI 2012-01-28 07:29 - 2012-01-28 07:27 - 0000000 ____D C:\Users\Elinceto\AppData\Local\{1E915DF1-E2CA-4802-B933-D1E13DB3E4AD} 2012-01-28 07:27 - 2012-01-28 07:27 - 0000000 ____D C:\Users\Elinceto\AppData\Local\{69FD1AC2-87A6-4599-8435-5B6D982298C6} 2012-01-28 07:06 - 2012-01-28 07:06 - 0000000 ____D C:\Windows\SysWOW64\vmm32 2012-01-28 07:06 - 2012-01-28 07:06 - 0000000 ____D C:\Program Files (x86)\Dell 2012-01-26 18:38 - 2012-01-26 18:38 - 0000000 ____D C:\Users\Elinceto\AppData\Local\{3CF1D8D9-86C1-467D-8B71-A0CF61472C0D} 2012-01-26 18:36 - 2012-01-26 18:36 - 0000000 ____D C:\Users\Elinceto\AppData\Local\{B5602DF4-1DB0-4647-AD6C-0EE515C607B3} 2012-01-26 18:35 - 2012-01-26 18:35 - 0000000 ___RD C:\Users\Elinceto\Documents\Scanned Documents 2012-01-26 18:35 - 2012-01-26 18:35 - 0000000 ____D C:\Users\Elinceto\Documents\Fax 2012-01-26 13:05 - 2012-01-26 10:36 - 0000000 ____D C:\Program Files (x86)\Windows Live 2012-01-26 13:00 - 2012-01-26 13:00 - 0000000 ____D C:\Windows\en 2012-01-26 12:15 - 2012-01-26 10:46 - 0000000 ____D C:\Users\Elinceto\AppData\Local\NFS Underground 2 2012-01-26 11:37 - 2012-01-26 11:37 - 0000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2012-01-26 10:36 - 2012-01-26 10:23 - 0000000 ____D C:\Program Files\Windows Live 2012-01-26 10:25 - 2012-01-26 10:25 - 0000000 ____D C:\Windows\PCHEALTH 2012-01-26 10:25 - 2009-07-13 19:20 - 0000000 ____D C:\Program Files\Common Files\Microsoft Shared 2012-01-26 09:59 - 2012-01-26 09:59 - 0000199 ____A C:\Windows\DirectX.log 2012-01-26 09:09 - 2012-01-26 09:09 - 0000000 ____D C:\Users\All Users\PC Tools 2012-01-26 09:09 - 2012-01-26 09:09 - 0000000 ____D C:\ProgramData\PC Tools 2012-01-26 09:05 - 2012-01-26 09:05 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\PCPro 2012-01-26 09:05 - 2012-01-26 09:05 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\PC Cleaners 2012-01-26 09:05 - 2012-01-26 09:05 - 0000000 ____D C:\Users\All Users\PC1Data 2012-01-26 09:05 - 2012-01-26 09:05 - 0000000 ____D C:\ProgramData\PC1Data 2012-01-26 09:05 - 2012-01-26 09:05 - 0000000 ____D C:\Program Files (x86)\PC Cleaners 2012-01-26 08:52 - 2012-01-26 08:52 - 0000000 ____D C:\Users\Elinceto\Downloads\PC Drivers HeadQuarters 2012-01-26 08:52 - 2012-01-26 08:52 - 0000000 ____D C:\Users\All Users\PC Drivers HeadQuarters 2012-01-26 08:52 - 2012-01-26 08:52 - 0000000 ____D C:\ProgramData\PC Drivers HeadQuarters 2012-01-26 08:49 - 2012-01-26 08:47 - 0512992 ____A C:\Users\Elinceto\Downloads\sdsetup_revwire207(1).exe 2012-01-26 08:45 - 2012-01-26 09:05 - 5276432 ____A (PC Cleaners) C:\Windows\uninst.exe 2012-01-26 08:45 - 2012-01-26 08:44 - 0512992 ____A C:\Users\Elinceto\Downloads\sdsetup_revwire207.exe 2012-01-26 08:45 - 2012-01-26 08:31 - 5276432 ____A (PC Cleaners) C:\Users\Elinceto\Downloads\PC_Cleaner_Pro.exe 2012-01-26 08:29 - 2012-01-26 08:27 - 1182616 ____A (PC Drivers HeadQuarters ) C:\Users\Elinceto\Downloads\DriverDetective.exe 2012-01-26 08:12 - 2012-01-26 08:11 - 0000000 ____D C:\Users\Elinceto\AppData\Local\{71FF52C9-D7B4-4CEE-BEC2-C1F3421FB611} 2012-01-26 08:11 - 2012-01-26 08:05 - 1287016 ____A (Microsoft Corporation) C:\Users\Elinceto\Downloads\wlsetup-web.exe 2012-01-26 07:47 - 2011-05-05 16:33 - 0000000 ____D C:\Program Files (x86)\CustoPackTools 2012-01-26 07:00 - 2011-05-05 16:09 - 0000000 ____D C:\Users\Elinceto\AppData\LocalLow 2012-01-26 06:59 - 2012-01-20 19:09 - 0000000 ____D C:\Program Files (x86)\PopCap Games 2012-01-26 06:49 - 2012-01-26 06:40 - 0000016 ____A C:\Windows\popcinfo.dat 2012-01-26 05:35 - 2011-05-05 16:09 - 0000000 ____D C:\users\Elinceto 2012-01-26 05:35 - 2009-07-13 21:08 - 0032538 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2012-01-25 09:28 - 2012-01-04 10:51 - 0029318 ____A C:\debug.txt 2012-01-24 07:48 - 2012-01-24 07:48 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\EleFun Games 2012-01-24 07:47 - 2012-01-24 07:44 - 0000000 ____D C:\Users\All Users\FarmFrenzy-PizzaParty 2012-01-24 07:47 - 2012-01-24 07:44 - 0000000 ____D C:\ProgramData\FarmFrenzy-PizzaParty 2012-01-24 07:47 - 2012-01-12 14:09 - 0000000 ____D C:\Program Files (x86)\MyPlayCity.com 2012-01-24 07:40 - 2012-01-24 07:35 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\XBMC 2012-01-24 07:30 - 2012-01-21 03:32 - 0000000 ____D C:\Users\Public\Documents\AlawarWrapper 2012-01-24 04:21 - 2012-01-24 04:21 - 0001414 ____A C:\Users\Public\Desktop\101 Penguin Pets.lnk 2012-01-24 04:21 - 2012-01-24 04:21 - 0000000 ____D C:\Users\All Users\BVRP Software 2012-01-24 04:21 - 2012-01-24 04:21 - 0000000 ____D C:\ProgramData\BVRP Software 2012-01-24 04:21 - 2012-01-24 04:21 - 0000000 ____D C:\Program Files (x86)\Selectsoft 2012-01-24 04:21 - 2012-01-24 04:21 - 0000000 ____D C:\Program Files (x86)\BVRP Software 2012-01-24 04:21 - 2011-05-05 15:52 - 0000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2012-01-23 07:23 - 2012-01-19 11:28 - 0000419 ____A C:\Windows\superball.ini 2012-01-23 07:23 - 2012-01-19 11:28 - 0000367 ____A C:\Windows\cncscore.ini 2012-01-22 21:51 - 2012-01-22 21:51 - 0001954 ____A C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2012-01-22 21:51 - 2012-01-22 21:51 - 0000000 ____D C:\Program Files (x86)\DAEMON Tools Lite 2012-01-22 21:51 - 2012-01-18 23:20 - 0000000 ____D C:\Program Files (x86)\DAEMON Tools Toolbar 2012-01-22 17:21 - 2012-01-19 11:28 - 0000024 __RAH C:\Windows\wcpx_.dat 2012-01-22 11:33 - 2010-09-19 12:09 - 0000794 ____A C:\Windows\gnuchess.ini 2012-01-22 11:19 - 2012-01-22 11:19 - 0001409 ____A C:\Windows\SysWOW64\tmp45BAE.FOT 2012-01-22 11:19 - 2012-01-22 11:19 - 0001409 ____A C:\Windows\SysWOW64\tmp38BAE.FOT 2012-01-22 09:03 - 2012-01-22 09:03 - 0002140 ____A C:\Users\Elinceto\Desktop\Jewel Quest.lnk 2012-01-22 09:03 - 2012-01-22 09:03 - 0000000 ____D C:\Users\Public\Documents\iWin 2012-01-22 08:43 - 2012-01-22 08:43 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\Playrix Entertainment 2012-01-22 08:38 - 2012-01-22 08:38 - 0002080 ____A C:\Users\Elinceto\Desktop\Fishdom.lnk 2012-01-22 08:38 - 2011-10-19 06:17 - 0000000 ____D C:\Users\All Users\Playrix Entertainment 2012-01-22 08:38 - 2011-10-19 06:17 - 0000000 ____D C:\ProgramData\Playrix Entertainment 2012-01-22 08:14 - 2012-01-22 08:14 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\Meridian93 2012-01-22 08:02 - 2012-01-22 08:02 - 0000000 ____D C:\Users\Elinceto\AppData\Local\Menge 2012-01-21 19:34 - 2012-01-10 17:16 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\vlc 2012-01-21 19:34 - 2011-09-10 03:47 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\Rainmeter 2012-01-21 19:34 - 2011-09-10 03:37 - 0000000 ____D C:\Program Files (x86)\CD Art Display 2012-01-21 19:34 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\registration 2012-01-21 19:34 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\AppCompat 2012-01-21 13:07 - 2012-01-21 03:32 - 0000000 ____D C:\Users\All Users\AlawarWrapper 2012-01-21 13:07 - 2012-01-21 03:32 - 0000000 ____D C:\ProgramData\AlawarWrapper 2012-01-21 09:35 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\System32\config\TxR 2012-01-21 04:25 - 2012-01-21 04:25 - 0000000 ____D C:\Users\All Users\Arcade Lab 2012-01-21 04:25 - 2012-01-21 04:25 - 0000000 ____D C:\ProgramData\Arcade Lab 2012-01-20 19:09 - 2012-01-20 19:09 - 0000000 ____D C:\Users\All Users\PopCap Games 2012-01-20 19:09 - 2012-01-20 19:09 - 0000000 ____D C:\ProgramData\PopCap Games 2012-01-20 09:32 - 2012-01-20 09:32 - 0000000 ____D C:\Users\All Users\Sandlot Games 2012-01-20 09:32 - 2012-01-20 09:32 - 0000000 ____D C:\ProgramData\Sandlot Games 2012-01-19 11:33 - 2012-01-19 11:33 - 0000000 ____D C:\Users\Elinceto\AppData\Local\Oberon Games 2012-01-19 09:49 - 2012-01-19 09:49 - 0000000 ____D C:\Users\All Users\Rumbic Studio 2012-01-19 09:49 - 2012-01-19 09:49 - 0000000 ____D C:\ProgramData\Rumbic Studio 2012-01-19 09:41 - 2012-01-19 09:41 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\Intenium 2012-01-19 08:39 - 2012-01-19 08:39 - 0000000 ____D C:\Users\All Users\shockwave.com 2012-01-19 08:39 - 2012-01-19 08:39 - 0000000 ____D C:\ProgramData\shockwave.com 2012-01-19 08:37 - 2012-01-19 08:37 - 0000000 ____D C:\Program Files (x86)\My Sweet Games 2012-01-19 08:14 - 2011-11-04 11:51 - 0000000 ____D C:\Games 2012-01-19 08:09 - 2011-08-01 23:13 - 0000000 ____D C:\Program Files (x86)\Bonjour 2012-01-19 00:22 - 2012-01-19 00:13 - 0000669 ____A C:\Users\Elinceto\Desktop\igraa.txt 2012-01-18 23:53 - 2012-01-04 10:51 - 0000000 ____D C:\Program Files (x86)\GLOBUL Connection Manager 2012-01-18 23:38 - 2012-01-18 23:38 - 0001155 ____A C:\Users\Public\Desktop\Ashampoo Music Studio 3.lnk 2012-01-18 23:38 - 2012-01-18 23:38 - 0000000 ____D C:\Program Files (x86)\Conduit 2012-01-18 23:38 - 2011-10-06 12:35 - 0000000 ____D C:\Users\AppData\LocalLow 2012-01-18 23:38 - 2011-05-06 03:32 - 0000000 ____D C:\Program Files (x86)\Ashampoo 2012-01-18 23:32 - 2012-01-18 23:30 - 16910182 ____A C:\Users\Elinceto\Desktop\Kak se mauntva disk i kak se igrae ot nego..avi 2012-01-18 23:18 - 2012-01-18 23:18 - 0871408 ____A (Duplex Secure Ltd.) C:\Windows\System32\Drivers\sptd.sys 2012-01-18 16:48 - 2012-01-12 15:19 - 0000000 ____D C:\Users\Elinceto\Desktop\novooooo 2012-01-18 14:45 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\System32\NDF 2012-01-18 11:22 - 2011-11-04 05:18 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\DAEMON Tools Lite 2012-01-17 07:21 - 2012-01-17 07:21 - 0000696 ____A C:\Users\Elinceto\Desktop\Downloads D.lnk 2012-01-17 07:21 - 2012-01-17 07:20 - 0000696 ____A C:\Users\Elinceto\Desktop\Downloads.lnk 2012-01-17 07:21 - 2011-06-02 23:08 - 0028160 __ASH C:\Users\Elinceto\Thumbs.db 2012-01-16 15:13 - 2012-01-16 15:13 - 0000000 ____D C:\Users\Elinceto\Documents\GomPlayer 2012-01-15 11:36 - 2011-09-18 01:29 - 0000000 ____D C:\Users\Elinceto\Desktop\smeshki 2012-01-14 16:24 - 2012-01-14 16:24 - 0084482 ____A C:\Users\Elinceto\Downloads\search(1) 2012-01-14 16:23 - 2012-01-14 16:23 - 0088825 ____A C:\Users\Elinceto\Downloads\search 2012-01-13 17:54 - 2011-11-13 07:10 - 0002311 ____A C:\Users\Elinceto\Desktop\Royal Envoy Collectors Edition.lnk 2012-01-13 15:41 - 2012-01-13 15:41 - 0002019 ____A C:\Users\Public\Desktop\Adobe Reader X.lnk 2012-01-13 15:41 - 2012-01-13 15:41 - 0000000 ____D C:\Program Files (x86)\Adobe 2012-01-13 15:41 - 2011-05-05 17:05 - 0000000 ____D C:\Users\All Users\Adobe 2012-01-13 15:41 - 2011-05-05 17:05 - 0000000 ____D C:\ProgramData\Adobe 2012-01-13 06:00 - 2012-01-13 04:46 - 0000000 ____D C:\Users\Elinceto\Desktop\s 2012-01-12 15:22 - 2012-01-12 15:22 - 4417803 ____A C:\Users\Elinceto\Kali - Vliubena ubii me (official video).mp3 2012-01-12 15:22 - 2012-01-12 15:20 - 38876796 ____A C:\Users\Elinceto\Kali - Vliubena ubii me (official video).avi 2012-01-12 14:29 - 2012-01-12 14:27 - 42184984 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\fishdom_setup.exe 2012-01-12 14:29 - 2012-01-12 14:27 - 13945160 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\atlantis_setup.exe 2012-01-12 14:24 - 2012-01-12 14:22 - 35530216 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\pizzaparty_setup.exe 2012-01-12 14:22 - 2012-01-12 14:22 - 0035365 ____A C:\Users\Elinceto\EngineList_sponsorkeyword.txt 2012-01-12 14:22 - 2012-01-12 14:21 - 23788240 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\puzzlemania_setup.exe 2012-01-12 14:20 - 2012-01-12 14:19 - 16677888 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\flowerquest_setup.exe 2012-01-12 14:19 - 2012-01-12 14:18 - 18687016 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\fairyquest_setup.exe 2012-01-12 14:17 - 2012-01-12 14:14 - 62267432 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\1001nights_setup.exe 2012-01-12 14:16 - 2012-01-12 14:15 - 12610848 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\jewelquest_setup.exe 2012-01-12 14:12 - 2012-01-12 14:07 - 91265504 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\fishdomh2o_setup.exe 2012-01-12 14:08 - 2012-01-12 14:08 - 6295176 ____A (MyPlayCity, Inc. ) C:\Users\Elinceto\Downloads\rattack_setup.exe 2012-01-11 13:39 - 2011-05-05 16:33 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\AIMP3 2012-01-10 17:15 - 2012-01-10 17:15 - 0001070 ____A C:\Users\Public\Desktop\VLC media player.lnk 2012-01-08 13:47 - 2011-12-20 06:35 - 0000000 ____D C:\Users\Elinceto\Desktop\Dokumenti 2012-01-07 07:59 - 2011-12-08 03:42 - 0000000 ____D C:\Users\Elinceto\Desktop\?????? ??3 2012-01-04 11:43 - 2011-11-13 08:08 - 0000000 ____D C:\Banesoft 2012-01-04 11:43 - 2009-07-13 18:34 - 0000414 ____A C:\Windows\win.ini 2012-01-04 11:41 - 2011-11-27 14:34 - 0000000 ____D C:\Program Files (x86)\eGames 2012-01-04 10:51 - 2012-01-04 10:51 - 0000587 ____A C:\Windows\ZTEInstallInfo.log 2012-01-04 10:51 - 2012-01-04 10:51 - 0000000 ____D C:\Windows\SysWOW64\SupportAppXL 2012-01-04 01:26 - 2010-11-20 19:27 - 0279096 ____N (Microsoft Corporation) C:\Windows\System32\MpSigStub.exe 2012-01-02 19:26 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\LiveKernelReports 2012-01-01 15:52 - 2012-01-01 15:52 - 0126056 ___AH C:\Windows\SysWOW64\mlfcache.dat 2011-12-20 06:36 - 2011-12-20 06:36 - 0000000 ____D C:\Users\Elinceto\Desktop\snimki razni 2011-12-20 06:31 - 2011-05-20 01:04 - 0000000 ____D C:\Program Files (x86)\mp3DirectCut 2011-12-18 13:28 - 2011-12-18 12:57 - 0000000 ____D C:\Users\Elinceto\Desktop\nokti 2011-12-11 12:34 - 2011-11-13 08:04 - 0000000 ____D C:\Program Files (x86)\Time Mysteries 2- The Ancient Spectres Collectors Edition 2011-12-10 02:56 - 2011-12-10 02:56 - 388234235 ____A C:\Windows\MEMORY.DMP 2011-12-10 02:56 - 2011-12-10 02:56 - 0277656 ____A C:\Windows\Minidump\121011-15163-01.dmp 2011-12-10 02:56 - 2011-12-10 02:56 - 0000000 ____D C:\Windows\Minidump 2011-11-28 14:49 - 2011-11-28 14:49 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\dvdcss 2011-11-27 03:48 - 2011-05-06 09:56 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\Media Player Classic 2011-11-25 00:27 - 2011-11-25 00:23 - 40329848 ____A C:\Users\Elinceto\Downloads\xbmc-10.1.exe 2011-11-23 20:52 - 2012-01-29 06:43 - 3145216 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2011-11-21 12:59 - 2011-11-21 12:59 - 0000000 ____D C:\Program Files (x86)\City Interactive 2011-11-20 06:40 - 2011-09-13 06:57 - 0000000 ____D C:\Users\Elinceto\Desktop\BG muzika 2011-11-20 05:18 - 2011-09-17 08:39 - 0000000 ____D C:\Users\Elinceto\Desktop\glupostii 2011-11-19 06:58 - 2012-01-29 06:32 - 0077312 ____A (Microsoft Corporation) C:\Windows\System32\packager.dll 2011-11-19 06:01 - 2012-01-29 06:32 - 0067072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2011-11-16 22:41 - 2012-01-29 06:34 - 1731920 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll 2011-11-16 21:38 - 2012-01-29 06:34 - 1292080 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2011-11-14 12:30 - 2011-11-14 12:26 - 0000000 ____D C:\Users\All Users\FarmFrenzy_Vikings 2011-11-14 12:30 - 2011-11-14 12:26 - 0000000 ____D C:\ProgramData\FarmFrenzy_Vikings 2011-11-13 08:06 - 2011-11-13 08:06 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\Artifex Mundi 2011-11-13 08:03 - 2011-11-13 08:03 - 0000000 ____D C:\Users\Elinceto\Documents\Royal Envoy 2011-11-13 07:08 - 2011-11-13 07:08 - 0000000 ____D C:\Program Files (x86)\FishBone Games 2011-11-13 06:51 - 2011-11-13 01:02 - 0000000 ____D C:\Users\Elinceto\AppData\Local\OpenCandy 2011-11-13 01:03 - 2011-11-13 01:03 - 0000000 ____D C:\Users\All Users\Uniblue 2011-11-13 01:03 - 2011-11-13 01:03 - 0000000 ____D C:\ProgramData\Uniblue 2011-11-13 01:02 - 2011-11-04 05:19 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\OpenCandy 2011-11-13 00:46 - 2011-11-13 00:44 - 14717808 ____A (DT Soft Ltd.) C:\Users\Elinceto\Downloads\DTLite4451-0236.exe 2011-11-12 13:27 - 2011-11-12 13:27 - 0104813 ____A C:\Users\Elinceto\Downloads\The.Founding.Of.A.Republic.2009.RETAiL.DVDRip.XviD.AC3-ViSiON.srt 2011-11-12 04:46 - 2011-11-12 04:46 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\ERS G-Studio 2011-11-12 04:45 - 2011-11-12 04:45 - 0000000 ____D C:\Program Files (x86)\Mysterious Travel - The Magic Diary 2011-11-12 04:14 - 2011-09-09 08:17 - 0000000 ____D C:\Windows\System32\appmgmt 2011-11-11 15:35 - 2011-11-11 15:35 - 0041155 ____A C:\Users\Elinceto\Downloads\The Secret Circle S01E09 hdtv 2hd en.srt 2011-11-10 11:37 - 2011-11-04 05:18 - 0000000 ____D C:\Users\All Users\DAEMON Tools Lite 2011-11-10 11:37 - 2011-11-04 05:18 - 0000000 ____D C:\ProgramData\DAEMON Tools Lite 2011-11-10 09:18 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\ModemLogs 2011-11-10 09:17 - 2011-11-10 09:17 - 0001125 ____A C:\Users\Elinceto\Desktop\VIVACOM 3G USB MODEM.lnk 2011-11-10 09:17 - 2011-11-10 09:17 - 0000000 ____D C:\Program Files (x86)\VIVACOM 3G USB MODEM 2011-11-09 08:10 - 2011-09-15 05:50 - 0000078 ____A C:\Mpn.dat 2011-11-04 06:11 - 2011-05-12 00:35 - 0000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2011-11-04 05:25 - 2011-11-04 05:25 - 0000000 ____D C:\Program Files\Common Files\Nitro PDF 2011-11-04 05:25 - 2011-11-04 05:25 - 0000000 ____D C:\Program Files (x86)\Nitro PDF 2011-11-04 05:24 - 2011-11-04 05:24 - 0000000 ____D C:\Users\Elinceto\AppData\Roaming\Downloaded Installations 2011-11-04 05:20 - 2011-11-04 05:20 - 0000000 ____D C:\Users\All Users\Nitro PDF 2011-11-04 05:20 - 2011-11-04 05:20 - 0000000 ____D C:\ProgramData\Nitro PDF ========================= Known DLLs (Whitelisted) ============ ========================= Bamital & volsnap Check ============ C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ========================= Memory info ====================== Percentage of memory in use: 14% Total physical RAM: 4056.36 MB Available physical RAM: 3457.7 MB Total Pagefile: 4054.56 MB Available Pagefile: 3447.31 MB Total Virtual: 8192 MB Available Virtual: 8191.9 MB ======================= Partitions ========================= 1 Drive c: () (Fixed) (Total:38.96 GB) (Free:3.22 GB) NTFS 2 Drive e: (Multimedia) (Fixed) (Total:208.01 GB) (Free:103.83 GB) NTFS 3 Drive f: (Data) (Fixed) (Total:218.69 GB) (Free:81.46 GB) NTFS 5 Drive h: (MMC) (Removable) (Total:0.03 GB) (Free:0.03 GB) FAT 6 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS 7 Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[system with boot components (obtained from reading drive)] Disk ### Status Size Free Dyn Gpt -------- ------------- ------- ------- --- --- Disk 0 Online 465 GB 0 B Disk 1 Online 30 MB 0 B Partitions of Disk 0: =============== Partition ### Type Size Offset ------------- ---------------- ------- ------- Partition 1 Primary 100 MB 1024 KB Partition 2 Primary 38 GB 101 MB Partition 3 Primary 208 GB 39 GB Partition 4 Primary 218 GB 247 GB Disk: 0 Partition 1 Type : 07 Hidden: No Active: Yes Volume ### Ltr Label Fs Type Size Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 1 Y System Rese NTFS Partition 100 MB Healthy Disk: 0 Partition 2 Type : 07 Hidden: No Active: No Volume ### Ltr Label Fs Type Size Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 2 C NTFS Partition 38 GB Healthy Disk: 0 Partition 3 Type : 07 Hidden: No Active: No Volume ### Ltr Label Fs Type Size Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 3 E Multimedia NTFS Partition 208 GB Healthy Disk: 0 Partition 4 Type : 07 Hidden: No Active: No Volume ### Ltr Label Fs Type Size Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 4 F Data NTFS Partition 218 GB Healthy Partitions of Disk 1: =============== Partition ### Type Size Offset ------------- ---------------- ------- ------- Partition 1 Primary 30 MB 32 KB Disk: 1 Partition 1 Type : 04 Hidden: No Active: No Volume ### Ltr Label Fs Type Size Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 5 H MMC FAT Removable 30 MB Healthy ========================================================== Last Boot: 2012-01-29 20:55 ======================= End Of Log ==========================