Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Замръзване на системата ? (още един такъв проблем)

crazymonster
в Премахване на зловреден софтуер

Featured Replies

Здравейте, преинсталирах Уиндоус-а преди 2 дни и от време на време започна да ми се появява проблем. При стартирането на компютъра замръзва първо десктопа, после лентата или обратно. Мишката най-дълго се държи. Не винаги замръзва, само когато си реши. MBA не показва вируси, Аваст също. Дали е възможно някой драйвер да прави противоречие с други ? Не знам дали нацелих точния драйвер на видеокартата (май не беше точно същия GeForce 8400M GS).. DDS (Ver_2011-09-30.01) - NTFS_x86 Internet Explorer: 6.0.2900.2180 Run by Administrator at 13:34:35 on 2012-06-29 Microsoft Windows XP Professional 5.1.2600.2.1251.359.1033.18.2046.1418 [GMT 3:00] . AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D} . ============== Running Processes ================ . C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\acs.exe C:\Program Files\GIGABYTE\Gigabyte Super Wireless LAN Card\GNConfig.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Winamp\winampa.exe C:\Program Files\AVAST Software\Avast\avastUI.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\system32\svchost.exe -k bthsvcs C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\System32\svchost.exe -k HTTPFilter . ============== Pseudo HJT Report =============== . uInternet Connection Wizard,ShellNext = hxxp://tw.giga-byte.com/TechSupport/ServiceCenter.htm uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe uRun: [Google Update] "c:\documents and settings\administrator.rumen-901a3af0a\local settings\application data\google\update\GoogleUpdate.exe" /c mRun: [GNConfig] "c:\program files\gigabyte\gigabyte super wireless lan card\GNConfig.exe" -nogui mRun: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] c:\program files\nvidia corporation\nview\nwiz.exe /installquiet mRun: [RTHDCPL] RTHDCPL.EXE mRun: [WinampAgent] "c:\program files\winamp\winampa.exe" mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE uPolicies-Explorer: NoDriveTypeAutoRun = dword:145 mPolicies-Explorer: NoDriveTypeAutoRun = dword:145 IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe TCP: NameServer = 85.217.128.241 87.121.223.9 TCP: Interfaces\{55B79BBF-3427-426D-8FEA-E65456D0BCFD} : DHCPNameServer = 85.217.128.241 87.121.223.9 . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\administrator.rumen-901a3af0a\application data\mozilla\firefox\profiles\cfpmk95i.default\ FF - prefs.js: network.proxy.type - 0 FF - plugin: c:\documents and settings\administrator.rumen-901a3af0a\local settings\application data\google\update\1.3.21.111\npGoogleUpdate3.dll FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_3_300_262.dll . ============= SERVICES / DRIVERS =============== . R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-6-28 612184] R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-6-28 337880] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-6-28 20696] R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-6-28 44768] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-6-26 250056] S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2012-6-26 1684736] S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-6-26 113120] . =============== Created Last 30 ================ . 2012-06-28 20:53:44 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2012-06-28 20:52:28 41184 ----a-w- c:\windows\avastSS.scr 2012-06-28 20:50:48 -------- d-----w- c:\program files\AVAST Software 2012-06-28 20:50:48 -------- d-----w- c:\documents and settings\all users.windows\application data\AVAST Software 2012-06-28 10:30:45 -------- d-----w- c:\documents and settings\administrator.rumen-901a3af0a\application data\CoreFTP 2012-06-27 07:36:51 26496 -c--a-w- c:\windows\system32\dllcache\usbstor.sys 2012-06-26 19:19:46 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys 2012-06-26 19:19:40 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys 2012-06-26 19:19:38 85376 ----a-w- c:\windows\system32\drivers\NABTSFEC.sys 2012-06-26 19:19:35 10880 ----a-w- c:\windows\system32\drivers\NdisIP.sys 2012-06-26 19:19:33 17024 ----a-w- c:\windows\system32\drivers\CCDECODE.sys 2012-06-26 19:19:31 19328 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS 2012-06-26 19:19:29 7552 ----a-w- c:\windows\system32\drivers\MSKSSRV.sys 2012-06-26 19:19:26 5376 ----a-w- c:\windows\system32\drivers\MSPCLOCK.sys 2012-06-26 19:19:24 16384 ----a-w- c:\windows\system32\ipsink.ax 2012-06-26 19:19:24 15360 ----a-w- c:\windows\system32\drivers\StreamIP.sys 2012-06-26 19:19:22 4992 ----a-w- c:\windows\system32\drivers\MSPQM.sys 2012-06-26 19:19:16 3072 ----a-w- c:\windows\system32\drivers\audstub.sys 2012-06-26 19:18:45 90624 ----a-w- c:\windows\system32\kswdmcap.ax 2012-06-26 19:18:45 61952 ----a-w- c:\windows\system32\kstvtune.ax 2012-06-26 19:18:45 53760 ----a-w- c:\windows\system32\vfwwdm32.dll 2012-06-26 19:18:45 43008 ----a-w- c:\windows\system32\ksxbar.ax 2012-06-26 19:18:45 4096 -c--a-w- c:\windows\system32\dllcache\ksuser.dll 2012-06-26 19:18:45 4096 ----a-w- c:\windows\system32\ksuser.dll 2012-06-26 19:18:45 28672 ----a-w- c:\windows\system32\vidcap.ax 2012-06-26 19:18:45 20992 ----a-w- c:\windows\system32\dshowext.ax 2012-06-26 19:18:45 130048 ----a-w- c:\windows\system32\ksproxy.ax 2012-06-26 19:18:45 121856 ----a-w- c:\windows\system32\drivers\usbvideo.sys 2012-06-26 19:18:30 57472 ----a-w- c:\windows\system32\drivers\redbook.sys 2012-06-26 19:17:27 6400 ----a-w- c:\windows\system32\drivers\enum1394.sys 2012-06-26 19:16:59 74240 ----a-w- c:\windows\system32\usbui.dll 2012-06-26 19:16:09 9344 ----a-w- c:\windows\system32\drivers\compbatt.sys 2012-06-26 19:16:08 14080 ----a-w- c:\windows\system32\drivers\CmBatt.sys 2012-06-26 19:16:08 14080 ----a-w- c:\windows\system32\drivers\battc.sys 2012-06-26 19:13:58 -------- d-----r- c:\documents and settings\all users.windows\Documents 2012-06-26 19:13:35 13753 ----a-r- c:\windows\SET8.tmp 2012-06-26 19:13:32 1086058 ----a-r- c:\windows\SET4.tmp 2012-06-26 19:13:31 1042903 ----a-r- c:\windows\SET3.tmp 2012-06-26 19:07:35 -------- d-----w- c:\windows\system32\PreInstall 2012-06-26 19:07:35 -------- d-----w- c:\windows\system32\en 2012-06-26 19:07:35 -------- d-----w- c:\windows\Network Diagnostic . ==================== Find3M ==================== . 2012-06-26 17:06:22 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-06-26 17:06:22 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-06-26 16:56:08 252080 ----a-w- c:\windows\system32\nvdrsdb0.bin 2012-06-26 16:56:08 1 ----a-w- c:\windows\system32\nvdrssel.bin 2012-06-26 16:56:04 252080 ----a-w- c:\windows\system32\nvdrsdb1.bin . ============= FINISH: 13:35:24,35 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-09-30.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 26.6.2012 г. 19:33:30 System Uptime: 29.6.2012 г. 13:30:22 (0 hours ago) . Motherboard: GIGABYTE | | W566N Processor: Intel Pentium III processor | U2E1 | 2094/400mhz Processor: Intel Pentium III processor | U2E1 | 2094/400mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 105 GiB total, 98,636 GiB free. D: is FIXED (NTFS) - 361 GiB total, 334,066 GiB free. E: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: Modem Device on High Definition Audio Bus Device ID: HDAUDIO\FUNC_02&VEN_1057&DEV_3055&SUBSYS_10573055&REV_1007\4&8F774AF&0&0101 Manufacturer: Name: Modem Device on High Definition Audio Bus PNP Device ID: HDAUDIO\FUNC_02&VEN_1057&DEV_3055&SUBSYS_10573055&REV_1007\4&8F774AF&0&0101 Service: . Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: Ethernet Controller Device ID: PCI\VEN_11AB&DEV_4363&SUBSYS_0763152D&REV_13\4&29E2C51B&0&00E1 Manufacturer: Name: Ethernet Controller PNP Device ID: PCI\VEN_11AB&DEV_4363&SUBSYS_0763152D&REV_13\4&29E2C51B&0&00E1 Service: . Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: Mass Storage Controller Device ID: PCI\VEN_104C&DEV_803B&SUBSYS_0763152D&REV_00\4&3B3A03B5&0&4AF0 Manufacturer: Name: Mass Storage Controller PNP Device ID: PCI\VEN_104C&DEV_803B&SUBSYS_0763152D&REV_00\4&3B3A03B5&0&4AF0 Service: . И още... Logfile of random's system information tool 1.09 (written by random/random) Run by Administrator at 2012-06-29 13:55:31 Microsoft Windows XP Professional Service Pack 2 System drive C: has 101 GB (94%) free of 108 GB Total RAM: 2046 MB (69% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:55:36, on 29.6.2012 г. Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\acs.exe C:\Program Files\GIGABYTE\Gigabyte Super Wireless LAN Card\GNConfig.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Winamp\winampa.exe C:\Program Files\AVAST Software\Avast\avastUI.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Desktop\RSIT.exe C:\Program Files\trend micro\Administrator.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://tw.giga-byte.com/TechSupport/ServiceCenter.htm O4 - HKLM\..\Run: [GNConfig] "C:\Program Files\GIGABYTE\Gigabyte Super Wireless LAN Card\GNConfig.exe" -nogui O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Atheros Configuration Service (ACS) - Atheros - C:\WINDOWS\system32\acs.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 4310 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\Adobe Flash Player Updater.job C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1220945662-1592454029-725345543-500Core.job C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1220945662-1592454029-725345543-500UA.job =========Mozilla firefox========= ProfilePath - C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\Mozilla\Firefox\Profiles\cfpmk95i.default "[email protected]"=C:\Program Files\AVAST Software\Avast\WebRep\FF [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 11.3.300.262 Plugin "Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll C:\Program Files\Mozilla Firefox\extensions\ {972ce4c6-7e08-4474-a285-3208198ce6fd} C:\Program Files\Mozilla Firefox\components\ binary.manifest browsercomps.dll C:\Program Files\Mozilla Firefox\plugins\ NPOFFICE.DLL C:\Program Files\Mozilla Firefox\searchplugins\ 911bg.xml amazondotcom.xml diribg.xml google.xml pe-bg.xml portalbgdict.xml wikipedia-bg.xml ======Registry dump====== [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "GNConfig"=C:\Program Files\GIGABYTE\Gigabyte Super Wireless LAN Card\GNConfig.exe [2007-09-19 393216] "BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent [] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-01-07 13880424] "nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-11-04 1753192] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-04-30 17881088] "WinampAgent"=C:\Program Files\Winamp\winampa.exe [2011-12-09 74752] "avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Malwarebytes Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2012-04-04 462408] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360] "Google Update"=C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-06-26 116648] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" "C:\xampp\mysql\bin\mysqld.exe"="C:\xampp\mysql\bin\mysqld.exe:*:Enabled:mysqld" "C:\xampp\apache\bin\httpd.exe"="C:\xampp\apache\bin\httpd.exe:*:Enabled:Apache HTTP Server" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "midimapper"=midimap.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.trspch"=tssoft32.acm "vidc.cvid"=iccvid.dll "vidc.I420"=msh263.drv "vidc.iv31"=ir32_32.dll "vidc.iv32"=ir32_32.dll "vidc.iv41"=ir41_32.ax "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "VIDC.YVYU"=msyuv.dll "wavemapper"=msacm32.drv "MSVideo8"=VfWWDM32.dll "msacm.msg723"=msg723.acm "vidc.M263"=msh263.drv "vidc.M261"=msh261.drv "msacm.msaudio1"=msaud32.acm "msacm.sl_anet"=sl_anet.acm "msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax "vidc.iv50"=ir50_32.dll "msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "msacm.divxa32"=msaud32_divx.acm ======List of files/folders created in the last 1 month====== 2012-06-29 13:55:32 ----D---- C:\Program Files\trend micro 2012-06-29 13:55:31 ----D---- C:\rsit 2012-06-29 13:45:28 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\Malwarebytes 2012-06-29 13:45:20 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2012-06-29 13:45:20 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes 2012-06-29 13:45:20 ----A---- C:\WINDOWS\system32\drivers\mbam.sys 2012-06-29 13:29:39 ----A---- C:\WINDOWS\system32\d3d9caps.dat 2012-06-29 13:29:13 ----D---- C:\WINDOWS\CSC 2012-06-28 23:53:50 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys 2012-06-28 23:53:50 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys 2012-06-28 23:53:46 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys 2012-06-28 23:53:45 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys 2012-06-28 23:53:44 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys 2012-06-28 23:53:42 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys 2012-06-28 23:53:42 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys 2012-06-28 23:53:42 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys 2012-06-28 23:52:28 ----A---- C:\WINDOWS\avastSS.scr 2012-06-28 23:52:25 ----A---- C:\WINDOWS\system32\aswBoot.exe 2012-06-28 23:50:48 ----D---- C:\Program Files\AVAST Software 2012-06-28 23:50:48 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\AVAST Software 2012-06-28 23:50:23 ----A---- C:\TDSSKiller.2.7.6.0_28.06.2012_23.50.23_log.txt 2012-06-28 23:47:45 ----A---- C:\WINDOWS\ntbtlog.txt 2012-06-28 13:30:45 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\CoreFTP 2012-06-27 20:13:36 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\GRETECH 2012-06-27 10:36:51 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS 2012-06-26 22:21:32 ----A---- C:\WINDOWS\system32\h323log.txt 2012-06-26 22:19:46 ----A---- C:\WINDOWS\system32\drivers\MSTEE.sys 2012-06-26 22:19:40 ----A---- C:\WINDOWS\system32\drivers\SLIP.sys 2012-06-26 22:19:38 ----A---- C:\WINDOWS\system32\drivers\NABTSFEC.sys 2012-06-26 22:19:35 ----A---- C:\WINDOWS\system32\drivers\NdisIP.sys 2012-06-26 22:19:33 ----A---- C:\WINDOWS\system32\drivers\CCDECODE.sys 2012-06-26 22:19:31 ----A---- C:\WINDOWS\system32\drivers\WSTCODEC.SYS 2012-06-26 22:19:29 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys 2012-06-26 22:19:26 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2012-06-26 22:19:24 ----A---- C:\WINDOWS\system32\drivers\StreamIP.sys 2012-06-26 22:19:22 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys 2012-06-26 22:19:16 ----A---- C:\WINDOWS\system32\drivers\audstub.sys 2012-06-26 22:18:45 ----A---- C:\WINDOWS\system32\vfwwdm32.dll 2012-06-26 22:18:45 ----A---- C:\WINDOWS\system32\ksuser.dll 2012-06-26 22:18:45 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys 2012-06-26 22:18:30 ----A---- C:\WINDOWS\system32\drivers\redbook.sys 2012-06-26 22:17:27 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys 2012-06-26 22:16:59 ----A---- C:\WINDOWS\system32\usbui.dll 2012-06-26 22:16:09 ----A---- C:\WINDOWS\system32\drivers\compbatt.sys 2012-06-26 22:16:08 ----A---- C:\WINDOWS\system32\drivers\CmBatt.sys 2012-06-26 22:16:08 ----A---- C:\WINDOWS\system32\drivers\battc.sys 2012-06-26 22:14:32 ----A---- C:\WINDOWS\imsins.BAK 2012-06-26 22:14:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2012-06-26 22:14:28 ----A---- C:\WINDOWS\ODBCINST.INI 2012-06-26 22:14:23 ----RA---- C:\WINDOWS\system32\kbdtuq.dll 2012-06-26 22:14:23 ----RA---- C:\WINDOWS\system32\kbdtuf.dll 2012-06-26 22:14:23 ----RA---- C:\WINDOWS\system32\kbdazel.dll 2012-06-26 22:14:22 ----RA---- C:\WINDOWS\system32\kbduzb.dll 2012-06-26 22:14:22 ----RA---- C:\WINDOWS\system32\kbdtat.dll 2012-06-26 22:14:22 ----RA---- C:\WINDOWS\system32\kbdmon.dll 2012-06-26 22:14:22 ----RA---- C:\WINDOWS\system32\kbdkyr.dll 2012-06-26 22:14:22 ----RA---- C:\WINDOWS\system32\kbdaze.dll 2012-06-26 22:14:21 ----RA---- C:\WINDOWS\system32\kbdycc.dll 2012-06-26 22:14:21 ----RA---- C:\WINDOWS\system32\kbdur.dll 2012-06-26 22:14:21 ----RA---- C:\WINDOWS\system32\kbdru1.dll 2012-06-26 22:14:21 ----RA---- C:\WINDOWS\system32\kbdru.dll 2012-06-26 22:14:21 ----RA---- C:\WINDOWS\system32\kbdkaz.dll 2012-06-26 22:14:21 ----RA---- C:\WINDOWS\system32\kbdbu.dll 2012-06-26 22:14:21 ----RA---- C:\WINDOWS\system32\kbdblr.dll 2012-06-26 22:14:20 ----RA---- C:\WINDOWS\system32\kbdhept.dll 2012-06-26 22:14:20 ----RA---- C:\WINDOWS\system32\kbdhela3.dll 2012-06-26 22:14:20 ----RA---- C:\WINDOWS\system32\kbdhela2.dll 2012-06-26 22:14:20 ----RA---- C:\WINDOWS\system32\kbdhe319.dll 2012-06-26 22:14:20 ----RA---- C:\WINDOWS\system32\kbdhe220.dll 2012-06-26 22:14:20 ----RA---- C:\WINDOWS\system32\kbdhe.dll 2012-06-26 22:14:20 ----RA---- C:\WINDOWS\system32\kbdgkl.dll 2012-06-26 22:14:19 ----RA---- C:\WINDOWS\system32\kbdlv1.dll 2012-06-26 22:14:19 ----RA---- C:\WINDOWS\system32\kbdlv.dll 2012-06-26 22:14:19 ----RA---- C:\WINDOWS\system32\kbdlt1.dll 2012-06-26 22:14:19 ----RA---- C:\WINDOWS\system32\kbdlt.dll 2012-06-26 22:14:19 ----RA---- C:\WINDOWS\system32\kbdest.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\kbdycl.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\kbdsl1.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\kbdsl.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\kbdro.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\kbdpl1.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\kbdpl.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\kbdhu1.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\kbdhu.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\kbdcz2.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\kbdcz1.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\kbdcz.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\kbdcr.dll 2012-06-26 22:14:17 ----RA---- C:\WINDOWS\system32\KBDAL.DLL 2012-06-26 22:14:14 ----A---- C:\WINDOWS\system32\spxcoins.dll 2012-06-26 22:14:14 ----A---- C:\WINDOWS\system32\irclass.dll 2012-06-26 22:14:14 ----A---- C:\WINDOWS\system32\EqnClass.Dll 2012-06-26 22:14:14 ----A---- C:\WINDOWS\system32\dgsetup.dll 2012-06-26 22:14:14 ----A---- C:\WINDOWS\system32\dgrpsetu.dll 2012-06-26 22:14:12 ----N---- C:\WINDOWS\system32\CONFIG.TMP 2012-06-26 22:14:12 ----A---- C:\WINDOWS\TASKMAN.EXE 2012-06-26 22:14:12 ----A---- C:\WINDOWS\system32\drivers\irenum.sys 2012-06-26 22:14:12 ----A---- C:\WINDOWS\system32\batt.dll 2012-06-26 22:14:11 ----A---- C:\WINDOWS\system32\storprop.dll 2012-06-26 22:14:11 ----A---- C:\WINDOWS\NOTEPAD.EXE 2012-06-26 22:13:58 ----ASH---- C:\Documents and Settings\All Users.WINDOWS\Application Data\desktop.ini 2012-06-26 22:13:35 ----RA---- C:\WINDOWS\SET8.tmp 2012-06-26 22:13:32 ----RA---- C:\WINDOWS\SET4.tmp 2012-06-26 22:13:31 ----RA---- C:\WINDOWS\SET3.tmp 2012-06-26 22:13:19 ----SD---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft 2012-06-26 22:13:02 ----A---- C:\WINDOWS\setuplog.txt 2012-06-26 22:12:57 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT 2012-06-26 22:07:35 ----D---- C:\WINDOWS\system32\PreInstall 2012-06-26 22:07:35 ----D---- C:\WINDOWS\system32\en-us 2012-06-26 22:07:35 ----D---- C:\WINDOWS\system32\en 2012-06-26 22:07:35 ----D---- C:\WINDOWS\Network Diagnostic 2012-06-26 22:07:35 ----ASH---- C:\pagefile.sys 2012-06-26 21:14:23 ----SHD---- C:\WINDOWS\Installer 2012-06-26 21:14:22 ----D---- C:\Program Files\Common Files\ODBC 2012-06-26 21:14:19 ----D---- C:\Program Files\Common Files\SpeechEngines 2012-06-26 21:14:18 ----RD---- C:\Program Files 2012-06-26 21:14:18 ----D---- C:\Program Files\Common Files\Microsoft Shared 2012-06-26 21:14:18 ----D---- C:\Program Files\Common Files 2012-06-26 21:13:40 ----D---- C:\WINDOWS\system32\CatRoot2 2012-06-26 21:13:40 ----D---- C:\WINDOWS\system32\CatRoot 2012-06-26 21:13:06 ----SHD---- C:\System Volume Information 2012-06-26 21:13:06 ----D---- C:\Documents and Settings 2012-06-26 21:12:07 ----SH---- C:\boot.ini 2012-06-26 21:07:44 ----RSHDC---- C:\WINDOWS\system32\dllcache 2012-06-26 21:07:44 ----RSD---- C:\WINDOWS\Fonts 2012-06-26 21:07:44 ----RD---- C:\WINDOWS\Web 2012-06-26 21:07:44 ----HD---- C:\WINDOWS\inf 2012-06-26 21:07:44 ----D---- C:\WINDOWS\WinSxS 2012-06-26 21:07:44 ----D---- C:\WINDOWS\twain_32 2012-06-26 21:07:44 ----D---- C:\WINDOWS\Temp 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\wins 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\wbem 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\usmt 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\spool 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\ShellExt 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\Setup 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\ras 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\oobe 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\npp 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\mui 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\inetsrv 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\IME 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\icsxml 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\ias 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\export 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\drivers\etc 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\drivers\disdn 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\drivers 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\dhcp 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\config 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\3com_dmi 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\3076 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\2052 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\1054 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\1042 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\1041 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\1037 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\1033 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\1031 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\1028 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32\1025 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system32 2012-06-26 21:07:44 ----D---- C:\WINDOWS\system 2012-06-26 21:07:44 ----D---- C:\WINDOWS\security 2012-06-26 21:07:44 ----D---- C:\WINDOWS\Resources 2012-06-26 21:07:44 ----D---- C:\WINDOWS\repair 2012-06-26 21:07:44 ----D---- C:\WINDOWS\Provisioning 2012-06-26 21:07:44 ----D---- C:\WINDOWS\PeerNet 2012-06-26 21:07:44 ----D---- C:\WINDOWS\pchealth 2012-06-26 21:07:44 ----D---- C:\WINDOWS\mui 2012-06-26 21:07:44 ----D---- C:\WINDOWS\msapps 2012-06-26 21:07:44 ----D---- C:\WINDOWS\msagent 2012-06-26 21:07:44 ----D---- C:\WINDOWS\Media 2012-06-26 21:07:44 ----D---- C:\WINDOWS\java 2012-06-26 21:07:44 ----D---- C:\WINDOWS\ime 2012-06-26 21:07:44 ----D---- C:\WINDOWS\Help 2012-06-26 21:07:44 ----D---- C:\WINDOWS\ehome 2012-06-26 21:07:44 ----D---- C:\WINDOWS\Driver Cache 2012-06-26 21:07:44 ----D---- C:\WINDOWS\Debug 2012-06-26 21:07:44 ----D---- C:\WINDOWS\Cursors 2012-06-26 21:07:44 ----D---- C:\WINDOWS\Connection Wizard 2012-06-26 21:07:44 ----D---- C:\WINDOWS\Config 2012-06-26 21:07:44 ----D---- C:\WINDOWS\AppPatch 2012-06-26 21:07:44 ----D---- C:\WINDOWS\addins 2012-06-26 21:07:44 ----D---- C:\WINDOWS 2012-06-26 20:21:25 ----A---- C:\WINDOWS\ODBC.INI 2012-06-26 20:21:06 ----A---- C:\WINDOWS\system32\mdimon.dll 2012-06-26 20:20:38 ----D---- C:\Program Files\Microsoft.NET 2012-06-26 20:20:32 ----D---- C:\Program Files\Microsoft ActiveSync 2012-06-26 20:20:03 ----D---- C:\Program Files\Common Files\DESIGNER 2012-06-26 20:19:38 ----D---- C:\WINDOWS\SHELLNEW 2012-06-26 20:19:34 ----D---- C:\Program Files\Microsoft Office 2012-06-26 20:17:31 ----D---- C:\Program Files\Elaborate Bytes 2012-06-26 20:16:32 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\Skype 2012-06-26 20:16:19 ----RD---- C:\Program Files\Skype 2012-06-26 20:16:05 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Skype 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\vxblock.dll 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\pxwma.dll 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\pxwave.dll 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\pxsfs.dll 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\pxinsi64.exe 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\pxinsa64.exe 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\pxhpinst.exe 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\pxdrv.dll 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\pxcpyi64.exe 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\pxcpya64.exe 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\pxafs.dll 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\drivers\PxHelp20.sys 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\drivers\cdralw2k.sys 2012-06-26 20:14:09 ----N---- C:\WINDOWS\system32\drivers\cdr4_xp.sys 2012-06-26 20:14:08 ----N---- C:\WINDOWS\system32\pxmas.dll 2012-06-26 20:14:08 ----N---- C:\WINDOWS\system32\px.dll 2012-06-26 20:14:07 ----D---- C:\Program Files\Winamp 2012-06-26 20:14:07 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\Winamp 2012-06-26 20:14:07 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\OpenCandy 2012-06-26 20:11:47 ----D---- C:\xampp 2012-06-26 20:11:29 ----D---- C:\Program Files\Notepad++ 2012-06-26 20:11:29 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\Notepad++ 2012-06-26 20:10:41 ----D---- C:\Program Files\GRETECH 2012-06-26 20:10:18 ----D---- C:\Program Files\CoreFTP 2012-06-26 20:10:10 ----D---- C:\Program Files\7-Zip 2012-06-26 20:09:47 ----D---- C:\WINDOWS\system32\Lang 2012-06-26 20:08:33 ----A---- C:\WINDOWS\system32\drivers\splitter.sys 2012-06-26 20:08:31 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys 2012-06-26 20:08:30 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys 2012-06-26 20:08:28 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys 2012-06-26 20:08:26 ----A---- C:\WINDOWS\system32\drivers\aec.sys 2012-06-26 20:08:24 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys 2012-06-26 20:08:22 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys 2012-06-26 20:08:20 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys 2012-06-26 20:08:13 ----D---- C:\WINDOWS\system32\RTCOM 2012-06-26 20:08:11 ----A---- C:\WINDOWS\system32\drivers\portcls.sys 2012-06-26 20:08:10 ----A---- C:\WINDOWS\system32\drivers\drmk.sys 2012-06-26 20:08:04 ----A---- C:\WINDOWS\vncutil.exe 2012-06-26 20:08:04 ----A---- C:\WINDOWS\SOUNDMAN.EXE 2012-06-26 20:08:04 ----A---- C:\WINDOWS\SkyTel.exe 2012-06-26 20:08:02 ----A---- C:\WINDOWS\RtlUpd.exe 2012-06-26 20:08:02 ----A---- C:\WINDOWS\RTLCPL.EXE 2012-06-26 20:08:01 ----A---- C:\WINDOWS\system32\drivers\RtkHDAud.sys 2012-06-26 20:08:00 ----A---- C:\WINDOWS\system32\RtkCoInstXP.dll 2012-06-26 20:08:00 ----A---- C:\WINDOWS\RtkAudioService.exe 2012-06-26 20:07:59 ----A---- C:\WINDOWS\system32\drivers\Monfilt.sys 2012-06-26 20:07:59 ----A---- C:\WINDOWS\RTHDCPL.EXE 2012-06-26 20:07:59 ----A---- C:\WINDOWS\MicCal.exe 2012-06-26 20:07:58 ----D---- C:\Program Files\Realtek 2012-06-26 20:07:58 ----A---- C:\WINDOWS\system32\drivers\Ambfilt.sys 2012-06-26 20:07:58 ----A---- C:\WINDOWS\ALCWZRD.EXE 2012-06-26 20:07:58 ----A---- C:\WINDOWS\ALCMTR.EXE 2012-06-26 20:07:53 ----A---- C:\WINDOWS\RtlExUpd.dll 2012-06-26 20:07:51 ----D---- C:\Program Files\Common Files\InstallShield 2012-06-26 20:06:29 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\Adobe 2012-06-26 20:06:22 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe 2012-06-26 20:02:23 ----D---- C:\Program Files\Conduit 2012-06-26 20:02:05 ----D---- C:\Program Files\uTorrent 2012-06-26 20:01:34 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\Mozilla 2012-06-26 20:01:29 ----D---- C:\Program Files\Mozilla Maintenance Service 2012-06-26 20:01:29 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Mozilla 2012-06-26 20:01:26 ----D---- C:\Program Files\Mozilla Firefox 2012-06-26 20:01:20 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\uTorrent 2012-06-26 19:58:49 ----D---- C:\WINDOWS\system32\appmgmt 2012-06-26 19:56:54 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\NVIDIA Corporation 2012-06-26 19:55:48 ----A---- C:\WINDOWS\system32\OpenCL.dll 2012-06-26 19:55:48 ----A---- C:\WINDOWS\system32\nvoglnt.dll 2012-06-26 19:55:48 ----A---- C:\WINDOWS\system32\nvgenco322040.dll 2012-06-26 19:55:48 ----A---- C:\WINDOWS\system32\nvdispco322090.dll 2012-06-26 19:55:48 ----A---- C:\WINDOWS\system32\nvcuvid.dll 2012-06-26 19:55:48 ----A---- C:\WINDOWS\system32\nvcuvenc.dll 2012-06-26 19:55:48 ----A---- C:\WINDOWS\system32\nvcuda.dll 2012-06-26 19:55:48 ----A---- C:\WINDOWS\system32\nvcompiler.dll 2012-06-26 19:55:48 ----A---- C:\WINDOWS\system32\nvapi.dll 2012-06-26 19:55:48 ----A---- C:\WINDOWS\system32\nv4_disp.dll 2012-06-26 19:55:48 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys 2012-06-26 19:55:30 ----D---- C:\Program Files\NVIDIA Corporation 2012-06-26 19:55:14 ----SHD---- C:\RECYCLER 2012-06-26 19:54:44 ----D---- C:\NVIDIA 2012-06-26 19:46:49 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\Macromedia 2012-06-26 19:45:19 ----D---- C:\WINDOWS\system32\LogFiles 2012-06-26 19:44:47 ----A---- C:\WINDOWS\system32\drivers\bthpan.sys 2012-06-26 19:44:37 ----A---- C:\WINDOWS\system32\drivers\rfcomm.sys 2012-06-26 19:44:37 ----A---- C:\WINDOWS\system32\drivers\BthEnum.sys 2012-06-26 19:44:36 ----A---- C:\WINDOWS\system32\wshirda.dll 2012-06-26 19:44:36 ----A---- C:\WINDOWS\system32\irmon.dll 2012-06-26 19:44:36 ----A---- C:\WINDOWS\system32\irftp.exe 2012-06-26 19:44:28 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS 2012-06-26 19:44:27 ----A---- C:\WINDOWS\system32\drivers\bthport.sys 2012-06-26 19:44:06 ----A---- C:\WINDOWS\system32\acs.exe 2012-06-26 19:44:00 ----RA---- C:\WINDOWS\system32\dsaNac.dll 2012-06-26 19:44:00 ----RA---- C:\WINDOWS\system32\dsa.dll 2012-06-26 19:44:00 ----A---- C:\WINDOWS\system32\wsimd.sys 2012-06-26 19:44:00 ----A---- C:\WINDOWS\system32\wsimd.dll 2012-06-26 19:44:00 ----A---- C:\WINDOWS\system32\wsfwDS.dll 2012-06-26 19:44:00 ----A---- C:\WINDOWS\system32\wgapi.dll 2012-06-26 19:44:00 ----A---- C:\WINDOWS\system32\wcapiU.dll 2012-06-26 19:43:59 ----A---- C:\WINDOWS\system32\wcapi.dll 2012-06-26 19:43:59 ----A---- C:\WINDOWS\system32\athcfg20U.dll 2012-06-26 19:43:59 ----A---- C:\WINDOWS\system32\athcfg20resU.dll 2012-06-26 19:43:59 ----A---- C:\WINDOWS\system32\athcfg20res.dll 2012-06-26 19:43:59 ----A---- C:\WINDOWS\system32\athcfg20.dll 2012-06-26 19:43:46 ----HD---- C:\Program Files\InstallShield Installation Information 2012-06-26 19:43:46 ----A---- C:\WINDOWS\system32\drivers\ar5211.sys 2012-06-26 19:43:46 ----A---- C:\WINDOWS\system32\ar5211.sys 2012-06-26 19:43:34 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\InstallShield 2012-06-26 19:40:54 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\GIGABYTE 2012-06-26 19:40:22 ----A---- C:\WINDOWS\system32\drivers\wsimd.sys 2012-06-26 19:40:21 ----D---- C:\Program Files\GIGABYTE 2012-06-26 19:40:14 ----A---- C:\WINDOWS\system32\ar5416.sys 2012-06-26 19:39:52 ----D---- C:\temp 2012-06-26 19:38:49 ----D---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\Identities 2012-06-26 19:38:38 ----ASH---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\desktop.ini 2012-06-26 19:38:37 ----SD---- C:\Documents and Settings\Administrator.RUMEN-901A3AF0A\Application Data\Microsoft 2012-06-26 19:38:26 ----A---- C:\WINDOWS\SchedLgU.Txt 2012-06-26 19:33:34 ----AS---- C:\WINDOWS\bootstat.dat 2012-06-26 19:31:07 ----A---- C:\WINDOWS\control.ini 2012-06-26 19:30:55 ----A---- C:\WINDOWS\OEWABLog.txt 2012-06-26 19:30:47 ----A---- C:\WINDOWS\system32\mapi32.dll 2012-06-26 19:28:40 ----A---- C:\WINDOWS\system32\atrace.dll 2012-06-26 19:28:37 ----A---- C:\WINDOWS\system32\desktop.ini 2012-06-26 19:28:37 ----A---- C:\WINDOWS\desktop.ini 2012-06-26 19:28:31 ----A---- C:\WINDOWS\system32\nmevtmsg.dll 2012-06-26 19:28:31 ----A---- C:\WINDOWS\system32\acctres.dll 2012-06-26 19:28:30 ----A---- C:\WINDOWS\system32\icfgnt5.dll 2012-06-26 19:28:27 ----A---- C:\WINDOWS\system32\wuweb.dll 2012-06-26 19:28:27 ----A---- C:\WINDOWS\system32\wucltui.dll 2012-06-26 19:28:27 ----A---- C:\WINDOWS\system32\wuauserv.dll 2012-06-26 19:28:26 ----A---- C:\WINDOWS\system32\wups.dll 2012-06-26 19:28:26 ----A---- C:\WINDOWS\system32\wuaueng1.dll 2012-06-26 19:28:26 ----A---- C:\WINDOWS\system32\wuaueng.dll 2012-06-26 19:28:26 ----A---- C:\WINDOWS\system32\wuauclt1.exe 2012-06-26 19:28:26 ----A---- C:\WINDOWS\system32\wuauclt.exe 2012-06-26 19:28:26 ----A---- C:\WINDOWS\system32\wuapi.dll 2012-06-26 19:28:26 ----A---- C:\WINDOWS\system32\bitsprx3.dll 2012-06-26 19:28:25 ----A---- C:\WINDOWS\system32\qmgrprxy.dll 2012-06-26 19:28:25 ----A---- C:\WINDOWS\system32\qmgr.dll 2012-06-26 19:28:25 ----A---- C:\WINDOWS\system32\bitsprx2.dll 2012-06-26 19:28:22 ----A---- C:\WINDOWS\system32\safrslv.dll 2012-06-26 19:28:22 ----A---- C:\WINDOWS\system32\safrdm.dll 2012-06-26 19:28:22 ----A---- C:\WINDOWS\system32\safrcdlg.dll 2012-06-26 19:28:22 ----A---- C:\WINDOWS\system32\racpldlg.dll 2012-06-26 19:28:18 ----A---- C:\WINDOWS\system32\srrstr.dll 2012-06-26 19:28:18 ----A---- C:\WINDOWS\system32\fltMc.exe 2012-06-26 19:28:18 ----A---- C:\WINDOWS\system32\fltlib.dll 2012-06-26 19:28:18 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys 2012-06-26 19:28:17 ----A---- C:\WINDOWS\system32\srsvc.dll 2012-06-26 19:28:17 ----A---- C:\WINDOWS\system32\srclient.dll 2012-06-26 19:28:17 ----A---- C:\WINDOWS\system32\nmmkcert.dll 2012-06-26 19:28:17 ----A---- C:\WINDOWS\system32\mnmdd.dll 2012-06-26 19:28:17 ----A---- C:\WINDOWS\system32\isrdbg32.dll 2012-06-26 19:28:17 ----A---- C:\WINDOWS\system32\ils.dll 2012-06-26 19:28:17 ----A---- C:\WINDOWS\system32\drivers\sr.sys 2012-06-26 19:28:16 ----A---- C:\WINDOWS\system32\msoert2.dll 2012-06-26 19:28:16 ----A---- C:\WINDOWS\system32\msoeacct.dll 2012-06-26 19:28:16 ----A---- C:\WINDOWS\system32\msconf.dll 2012-06-26 19:28:16 ----A---- C:\WINDOWS\system32\mnmsrvc.exe 2012-06-26 19:28:16 ----A---- C:\WINDOWS\system32\inetres.dll 2012-06-26 19:28:16 ----A---- C:\WINDOWS\system32\inetcomm.dll 2012-06-26 19:28:15 ----A---- C:\WINDOWS\system32\schedsvc.dll 2012-06-26 19:28:15 ----A---- C:\WINDOWS\system32\mstinit.exe 2012-06-26 19:28:15 ----A---- C:\WINDOWS\system32\mstask.dll 2012-06-26 19:28:15 ----A---- C:\WINDOWS\system32\icwphbk.dll 2012-06-26 19:28:15 ----A---- C:\WINDOWS\system32\icwdial.dll 2012-06-26 19:28:14 ----A---- C:\WINDOWS\system32\isign32.dll 2012-06-26 19:28:14 ----A---- C:\WINDOWS\system32\inetcfg.dll 2012-06-26 19:27:30 ----A---- C:\WINDOWS\system32\emptyregdb.dat 2012-06-26 19:27:07 ----A---- C:\WINDOWS\vbaddin.ini 2012-06-26 19:27:07 ----A---- C:\WINDOWS\vb.ini 2012-06-26 19:26:27 ----D---- C:\Program Files\Windows Media Connect 2 2012-06-26 19:26:22 ----A---- C:\WINDOWS\system32\write.exe 2012-06-26 19:26:14 ----A---- C:\WINDOWS\system32\sndvol32.exe 2012-06-26 19:26:14 ----A---- C:\WINDOWS\system32\hticons.dll 2012-06-26 19:26:14 ----A---- C:\WINDOWS\system32\avwav.dll 2012-06-26 19:26:14 ----A---- C:\WINDOWS\system32\avtapi.dll 2012-06-26 19:26:14 ----A---- C:\WINDOWS\system32\avmeter.dll 2012-06-26 19:26:13 ----A---- C:\WINDOWS\system32\winchat.exe 2012-06-26 19:26:08 ----A---- C:\WINDOWS\system32\getuname.dll 2012-06-26 19:26:08 ----A---- C:\WINDOWS\system32\charmap.exe 2012-06-26 19:26:08 ----A---- C:\WINDOWS\system32\calc.exe 2012-06-26 19:26:07 ----A---- C:\WINDOWS\system32\winmine.exe 2012-06-26 19:26:07 ----A---- C:\WINDOWS\system32\usrlogon.cmd 2012-06-26 19:26:07 ----A---- C:\WINDOWS\system32\tsshutdn.exe 2012-06-26 19:26:07 ----A---- C:\WINDOWS\system32\tslabels.ini 2012-06-26 19:26:07 ----A---- C:\WINDOWS\system32\tskill.exe 2012-06-26 19:26:07 ----A---- C:\WINDOWS\system32\sol.exe 2012-06-26 19:26:07 ----A---- C:\WINDOWS\system32\reset.exe 2012-06-26 19:26:07 ----A---- C:\WINDOWS\system32\mshearts.exe 2012-06-26 19:26:07 ----A---- C:\WINDOWS\system32\freecell.exe 2012-06-26 19:26:06 ----A---- C:\WINDOWS\system32\tsdiscon.exe 2012-06-26 19:26:06 ----A---- C:\WINDOWS\system32\tscon.exe 2012-06-26 19:26:06 ----A---- C:\WINDOWS\system32\shadow.exe 2012-06-26 19:26:06 ----A---- C:\WINDOWS\system32\rwinsta.exe 2012-06-26 19:26:06 ----A---- C:\WINDOWS\system32\regini.exe 2012-06-26 19:26:06 ----A---- C:\WINDOWS\system32\rdpcfgex.dll 2012-06-26 19:26:06 ----A---- C:\WINDOWS\system32\qwinsta.exe 2012-06-26 19:26:06 ----A---- C:\WINDOWS\system32\qappsrv.exe 2012-06-26 19:26:06 ----A---- C:\WINDOWS\system32\msg.exe 2012-06-26 19:26:06 ----A---- C:\WINDOWS\system32\msdtcprf.ini 2012-06-26 19:26:06 ----A---- C:\WINDOWS\system32\logoff.exe 2012-06-26 19:26:06 ----A---- C:\WINDOWS\system32\cdmodem.dll 2012-06-26 19:26:05 ----A---- C:\WINDOWS\system32\mtxlegih.dll 2012-06-26 19:26:05 ----A---- C:\WINDOWS\system32\mtxex.dll 2012-06-26 19:26:05 ----A---- C:\WINDOWS\system32\mtxdm.dll 2012-06-26 19:26:05 ----A---- C:\WINDOWS\system32\dcomcnfg.exe 2012-06-26 19:26:05 ----A---- C:\WINDOWS\system32\comrepl.dll 2012-06-26 19:26:05 ----A---- C:\WINDOWS\system32\comaddin.dll 2012-06-26 19:26:04 ----A---- C:\WINDOWS\system32\stclient.dll 2012-06-26 19:26:04 ----A---- C:\WINDOWS\system32\comsnap.dll 2012-06-26 19:26:00 ----A---- C:\WINDOWS\system32\wmimgmt.msc 2012-06-26 19:25:47 ----A---- C:\WINDOWS\system32\accwiz.exe 2012-06-26 19:25:46 ----A---- C:\WINDOWS\system32\sndrec32.exe 2012-06-26 19:25:46 ----A---- C:\WINDOWS\system32\mplay32.exe 2012-06-26 19:25:46 ----A---- C:\WINDOWS\system32\hypertrm.dll 2012-06-26 19:25:45 ----A---- C:\WINDOWS\system32\spider.exe 2012-06-26 19:25:45 ----A---- C:\WINDOWS\system32\mspaint.exe 2012-06-26 19:25:45 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys 2012-06-26 19:25:45 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys 2012-06-26 19:25:45 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys 2012-06-26 19:25:45 ----A---- C:\WINDOWS\system32\clipbrd.exe 2012-06-26 19:25:44 ----A---- C:\WINDOWS\system32\tscfgwmi.dll 2012-06-26 19:25:44 ----A---- C:\WINDOWS\system32\remotepg.dll 2012-06-26 19:25:44 ----A---- C:\WINDOWS\system32\mstscax.dll 2012-06-26 19:25:44 ----A---- C:\WINDOWS\system32\mstsc.exe 2012-06-26 19:25:43 ----A---- C:\WINDOWS\system32\tscupgrd.exe 2012-06-26 19:25:43 ----A---- C:\WINDOWS\system32\termsrv.dll 2012-06-26 19:25:43 ----A---- C:\WINDOWS\system32\sessmgr.exe 2012-06-26 19:25:43 ----A---- C:\WINDOWS\system32\rdshost.exe 2012-06-26 19:25:43 ----A---- C:\WINDOWS\system32\rdsaddin.exe 2012-06-26 19:25:43 ----A---- C:\WINDOWS\system32\rdpwsx.dll 2012-06-26 19:25:43 ----A---- C:\WINDOWS\system32\rdpsnd.dll 2012-06-26 19:25:43 ----A---- C:\WINDOWS\system32\rdpclip.exe 2012-06-26 19:25:43 ----A---- C:\WINDOWS\system32\rdchost.dll 2012-06-26 19:25:43 ----A---- C:\WINDOWS\system32\qprocess.exe 2012-06-26 19:25:43 ----A---- C:\WINDOWS\system32\icaapi.dll 2012-06-26 19:25:43 ----A---- C:\WINDOWS\system32\cfgbkend.dll 2012-06-26 19:25:42 ----A---- C:\WINDOWS\system32\xolehlp.dll 2012-06-26 19:25:42 ----A---- C:\WINDOWS\system32\mtxoci.dll 2012-06-26 19:25:42 ----A---- C:\WINDOWS\system32\msdtcuiu.dll 2012-06-26 19:25:42 ----A---- C:\WINDOWS\system32\msdtctm.dll 2012-06-26 19:25:42 ----A---- C:\WINDOWS\system32\msdtcprx.dll 2012-06-26 19:25:42 ----A---- C:\WINDOWS\system32\msdtclog.dll 2012-06-26 19:25:42 ----A---- C:\WINDOWS\system32\msdtc.exe 2012-06-26 19:25:41 ----A---- C:\WINDOWS\system32\colbact.dll 2012-06-26 19:25:41 ----A---- C:\WINDOWS\system32\clbcatex.dll 2012-06-26 19:25:41 ----A---- C:\WINDOWS\system32\catsrvps.dll 2012-06-26 19:25:40 ----A---- C:\WINDOWS\system32\comuid.dll 2012-06-26 19:25:40 ----A---- C:\WINDOWS\system32\comsvcs.dll 2012-06-26 19:25:40 ----A---- C:\WINDOWS\system32\catsrvut.dll 2012-06-26 19:25:40 ----A---- C:\WINDOWS\system32\catsrv.dll 2012-06-26 19:25:39 ----A---- C:\WINDOWS\system32\clbcatq.dll 2012-06-26 19:25:34 ----A---- C:\WINDOWS\system32\servdeps.dll 2012-06-26 19:25:33 ----A---- C:\WINDOWS\system32\mmfutil.dll 2012-06-26 19:25:33 ----A---- C:\WINDOWS\system32\licwmi.dll 2012-06-26 19:25:33 ----A---- C:\WINDOWS\system32\cmprops.dll 2012-06-26 19:25:27 ----A---- C:\WINDOWS\system32\drivers\termdd.sys 2012-06-26 19:25:27 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys 2012-06-26 18:30:06 ----HD---- C:\Program Files\Uninstall Information 2012-06-26 18:29:49 ----D---- C:\WINDOWS\SoftwareDistribution 2012-06-26 18:29:48 ----D---- C:\WINDOWS\Prefetch 2012-06-26 18:29:47 ----SD---- C:\WINDOWS\system32\Microsoft 2012-06-26 18:26:52 ----D---- C:\WINDOWS\system32\xircom 2012-06-26 18:26:52 ----D---- C:\Program Files\xerox 2012-06-26 18:26:52 ----D---- C:\Program Files\microsoft frontpage 2012-06-26 18:26:33 ----RASH---- C:\MSDOS.SYS 2012-06-26 18:26:33 ----RASH---- C:\IO.SYS 2012-06-26 18:26:33 ----A---- C:\CONFIG.SYS 2012-06-26 18:26:33 ----A---- C:\AUTOEXEC.BAT 2012-06-26 18:25:19 ----RD---- C:\WINDOWS\Offline Web Pages 2012-06-26 18:25:18 ----SD---- C:\WINDOWS\Downloaded Program Files 2012-06-26 18:25:07 ----HD---- C:\Program Files\WindowsUpdate 2012-06-26 18:24:44 ----D---- C:\WINDOWS\system32\DirectX 2012-06-26 18:24:18 ----D---- C:\Program Files\Common Files\Services 2012-06-26 18:24:16 ----SD---- C:\WINDOWS\Tasks 2012-06-26 18:24:15 ----D---- C:\Program Files\Common Files\MSSoap 2012-06-26 18:24:11 ----D---- C:\WINDOWS\srchasst 2012-06-26 18:24:10 ----D---- C:\WINDOWS\system32\Macromed 2012-06-26 18:24:03 ----D---- C:\Program Files\Movie Maker 2012-06-26 18:23:56 ----D---- C:\WINDOWS\system32\Restore 2012-06-26 18:23:52 ----D---- C:\Program Files\NetMeeting 2012-06-26 18:23:49 ----D---- C:\Program Files\Outlook Express 2012-06-26 18:23:44 ----D---- C:\Program Files\Common Files\System 2012-06-26 18:23:37 ----D---- C:\Program Files\Internet Explorer 2012-06-26 18:22:54 ----D---- C:\Program Files\ComPlus Applications 2012-06-26 18:22:40 ----D---- C:\WINDOWS\Registration 2012-06-26 18:22:29 ----D---- C:\Program Files\Windows Media Player 2012-06-26 18:22:29 ----D---- C:\Program Files\Online Services 2012-06-26 18:22:19 ----D---- C:\Program Files\Messenger 2012-06-26 18:22:16 ----D---- C:\Program Files\MSN Gaming Zone 2012-06-26 18:21:43 ----D---- C:\Program Files\MSN 2012-06-26 18:21:41 ----D---- C:\Program Files\Windows NT 2012-06-26 18:21:38 ----D---- C:\WINDOWS\system32\MsDtc 2012-06-26 18:21:37 ----D---- C:\WINDOWS\system32\Com ======List of files/folders modified in the last 1 month====== 2012-06-26 22:14:24 ----A---- C:\WINDOWS\system.ini 2012-06-26 20:20:54 ----A---- C:\WINDOWS\win.ini 2012-06-26 19:30:22 ----ASH---- C:\WINDOWS\fonts\desktop.ini ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 ohci1394;Texas Instruments OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2006-12-18 61312] R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2011-03-04 45648] R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-03-07 24920] R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2012-03-07 35672] R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-03-07 612184] R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-03-07 337880] R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-03-07 53848] R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2006-12-18 36096] R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-03-07 20696] R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-03-07 95704] R2 rspndr;Link-Layer Topology Discovery Responder; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2006-12-18 62336] R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2007-06-21 547072] R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2006-12-18 60800] R3 BthEnum;Bluetooth Request Block Driver; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2004-08-03 17024] R3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2004-08-03 100992] R3 BTHUSB;Bluetooth Radio USB Driver; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2004-08-03 18944] R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2006-12-18 138752] R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-23 9600] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-05-04 5075968] R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-12-18 12160] R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2006-12-18 61824] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-01-08 9888672] R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2004-08-03 59648] R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2004-08-04 67584] R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616] R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2006-12-18 20608] R3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2005-07-30 121856] R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2007-05-14 57216] S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736] S3 BTHPORT;Bluetooth Port Driver; C:\WINDOWS\System32\Drivers\BTHport.sys [2004-08-03 274304] S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024] S3 mbr;mbr; \??\C:\DOCUME~1\ADMINI~1.RUM\LOCALS~1\Temp\mbr.sys [] S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-04 5504] S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376] S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360] S3 taphss;Anchorfree HSS Adapter; C:\WINDOWS\system32\DRIVERS\taphss.sys [2012-03-27 32768] S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496] S3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-08-10 29696] S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 ACS;Atheros Configuration Service; C:\WINDOWS\system32\acs.exe [2007-03-21 364629] R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768] R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336] R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2011-01-07 156776] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-26 250056] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-15 113120] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2006-12-18 38912] S3 WMConnectCDS;Windows Media Connect Service; C:\Program Files\Windows Media Connect 2\wmccds.exe [2005-10-06 855552] -----------------EOF----------------- info.txt logfile of random's system information tool 1.09 2012-06-29 13:55:38 ======Uninstall list====== -->MsiExec /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf µTorrent-->"C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL 7-Zip 9.20-->"C:\Program Files\7-Zip\Uninstall.exe" Adobe Flash Player 11 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_3_300_262_Plugin.exe -maintain plugin avast! Free Antivirus-->C:\Program Files\AVAST Software\Avast\aswRunDll.exe "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup Core FTP LE-->"C:\Program Files\CoreFTP\uninstall.exe" GIGABYTE Super Wireless Card Setup-->C:\Program Files\InstallShield Installation Information\{28006915-2739-4EBE-B5E8-49B25D32EB33}\setup.exe -runfromtemp -l0x0009 -removeonly GOM Player-->"C:\Program Files\GRETECH\GomPlayer\Uninstall.exe" Malwarebytes Anti-Malware version 1.61.0.1400-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" Microsoft Office Professional Edition 2003-->MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Mozilla Firefox 13.0.1 (x86 bg)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe Mozilla Maintenance Service-->"C:\Program Files\Mozilla Maintenance Service\uninstall.exe" Notepad++-->C:\Program Files\Notepad++\uninstall.exe NVIDIA Graphics Driver 266.58-->"C:\WINDOWS\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.0\NVI2.DLL",UninstallPackage Display.Driver NVIDIA nView 135.50-->"C:\WINDOWS\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.0\NVI2.DLL",UninstallPackage Display.NView NVIDIA nView Desktop Manager-->C:\Program Files\NVIDIA Corporation\nView\nViewSetup.exe -uninstall NVIDIA PhysX System Software 9.10.0514-->"C:\WINDOWS\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.0\NVI2.DLL",UninstallPackage Display.PhysX NVIDIA PhysX-->MsiExec.exe /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x9 -removeonly Skype™ 5.5-->MsiExec.exe /X{AA59DDE4-B672-4621-A016-4C248204957A} Winamp-->"C:\Program Files\Winamp\UninstWA.exe" XAMPP 1.7.7-->"c:\xampp\uninstall.exe" ======Security center information====== AV: avast! Antivirus (disabled) ======System event log====== Computer Name: RUMEN-901A3AF0A Event Code: 7034 Message: The Hotspot Shield Routing Service service terminated unexpectedly. It has done this 1 time(s). Record Number: 122 Source Name: Service Control Manager Time Written: 20120626200413.000000+180 Event Type: error User: Computer Name: RUMEN-901A3AF0A Event Code: 1002 Message: The IP address lease 10.91.96.66 for the Network Card with network address 00FFED009B07 has been denied by the DHCP server 10.91.127.254 (The DHCP Server sent a DHCPNACK message). Record Number: 121 Source Name: Dhcp Time Written: 20120626200412.000000+180 Event Type: error User: Computer Name: RUMEN-901A3AF0A Event Code: 18 Message: Windows cannot store Bluetooth link keys on the local transceiver because it cannot determine whether proper security is enabled for the device. Record Number: 97 Source Name: BTHUSB Time Written: 20120626195837.000000+180 Event Type: warning User: Computer Name: RUMEN-901A3AF0A Event Code: 18 Message: Windows cannot store Bluetooth link keys on the local transceiver because it cannot determine whether proper security is enabled for the device. Record Number: 62 Source Name: BTHUSB Time Written: 20120626194433.000000+180 Event Type: warning User: Computer Name: RUMEN-901A3AF0A Event Code: 60055 Message: Windows Setup encountered non-fatal errors during installation. Please check the setuperr.log found in your Windows directory for more information. Record Number: 7 Source Name: Setup Time Written: 20120626193337.000000+180 Event Type: error User: =====Application event log===== Computer Name: RUMEN-901A3AF0A Event Code: 5603 Message: A provider, Rsop Planning Mode Provider, has been registered in the WMI namespace, root\RSOP, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality. Record Number: 18 Source Name: WinMgmt Time Written: 20120626193024.000000+180 Event Type: warning User: NT AUTHORITY\SYSTEM Computer Name: RUMEN-901A3AF0A Event Code: 5603 Message: A provider, Rsop Planning Mode Provider, has been registered in the WMI namespace, root\RSOP, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality. Record Number: 17 Source Name: WinMgmt Time Written: 20120626193024.000000+180 Event Type: warning User: NT AUTHORITY\SYSTEM Computer Name: RUMEN-901A3AF0A Event Code: 63 Message: A provider, CmdTriggerConsumer, has been registered in the WMI namespace, Root\cimv2, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Record Number: 13 Source Name: WinMgmt Time Written: 20120626192746.000000+180 Event Type: warning User: NT AUTHORITY\SYSTEM Computer Name: RUMEN-901A3AF0A Event Code: 63 Message: A provider, CmdTriggerConsumer, has been registered in the WMI namespace, Root\cimv2, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Record Number: 12 Source Name: WinMgmt Time Written: 20120626192746.000000+180 Event Type: warning User: NT AUTHORITY\SYSTEM Computer Name: RUMEN-901A3AF0A Event Code: 63 Message: A provider, HiPerfCooker_v1, has been registered in the WMI namespace, Root\WMI, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Record Number: 11 Source Name: WinMgmt Time Written: 20120626192745.000000+180 Event Type: warning User: NT AUTHORITY\SYSTEM ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=C:\Program Files\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 6, GenuineIntel "PROCESSOR_REVISION"=1706 "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP -----------------EOF-----------------

  • 2 седмици по-късно...

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.