Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

Открит HEUR/HTML.Malware

30 октомври 201213 г.

Здравейте,компанията. Реших да пробвам Авира тази вечер и ето на изскочи това чудо от заглавието.Признавам,че като цяло компютърът не е показал нещо крайно смущаващо ,освен някакво странно изпращане на данни,което и предизвика тази проба на Авира(досега ползвах само Емси и мбам). Ще съм благодарен да го обсъдим . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-09-30.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 10/22/2012 9:44:11 AM System Uptime: 10/29/2012 11:12:40 PM (24 hours ago) . Motherboard: | | ALiveNF6G-DVI Processor: AMD Athlon™ 64 X2 Dual Core Processor 3800+ | CPUSocket | 2009/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 98 GiB total, 92.352 GiB free. D: is FIXED (NTFS) - 122 GiB total, 121.809 GiB free. E: is FIXED (NTFS) - 13 GiB total, 12.805 GiB free. F: is CDROM () G: is Removable . ==== Disabled Device Manager Items ============= . Class GUID: {4D36E969-E325-11CE-BFC1-08002BE10318} Description: Standard floppy disk controller Device ID: ACPI\PNP0700\4&38D79619&0 Manufacturer: (Standard floppy disk controllers) Name: Standard floppy disk controller PNP Device ID: ACPI\PNP0700\4&38D79619&0 Service: fdc . Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318} Description: NVIDIA nForce Networking Controller Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV03EF\4&1E6AA3F3&0&00 Manufacturer: NVIDIA Name: NVIDIA nForce 10/100/1000 Mbps Ethernet PNP Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV03EF\4&1E6AA3F3&0&00 Service: NVENETFD . ==== System Restore Points =================== . No restore point in system. . ==== Installed Programs ====================== . Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Reader XI Adobe Shockwave Player 11.6 AIDA64 Extreme Edition v2.70 Avira Free Antivirus CPUID CPU-Z 1.61.3 DC++ 0.801 Favorite-Games 5.21 IrfanView (remove only) Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 Microsoft Office XP Professional with FrontPage Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Mozilla Firefox 16.0.2 (x86 bg) Mozilla Maintenance Service MSVC80_x86 MSXML 4.0 SP3 Parser Nokia Connectivity Cable Driver Nokia PC Suite Nokia Software Updater NVIDIA Drivers PC Connectivity Solution Realtek High Definition Audio Driver swMSM TechPowerUp GPU-Z VIVACOM 3G USB MODEM WebFldrs XP Windows Driver Package - Nokia Modem (06/01/2009 4.1) Windows Driver Package - Nokia Modem (06/01/2009 7.01.0.3) Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0) WinRAR 4.20 (32-bit) . ==== Event Viewer Messages From Past Week ======== . 10/30/2012 6:53:30 PM, error: Dhcp [1002] - The IP address lease 10.56.226.10 for the Network Card with network address 001E101F8A85 has been denied by the DHCP server 10.56.34.33 (The DHCP Server sent a DHCPNACK message). 10/30/2012 3:55:51 PM, error: Dhcp [1002] - The IP address lease 10.56.102.91 for the Network Card with network address 001E101F8A85 has been denied by the DHCP server 10.56.226.9 (The DHCP Server sent a DHCPNACK message). 10/30/2012 10:45:25 PM, error: nvgts [5] - A parity error was detected on \Device\Scsi\nvgts1. 10/30/2012 1:57:50 PM, error: Dhcp [1002] - The IP address lease 10.56.235.58 for the Network Card with network address 001E101F8A85 has been denied by the DHCP server 10.56.102.89 (The DHCP Server sent a DHCPNACK message). 10/29/2012 10:10:04 PM, error: Dhcp [1002] - The IP address lease 10.56.222.8 for the Network Card with network address 001E101F7F7D has been denied by the DHCP server 10.56.200.186 (The DHCP Server sent a DHCPNACK message). 10/26/2012 8:08:51 AM, error: Service Control Manager [7031] - The Emsisoft Anti-Malware 5.0 - Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 10/26/2012 12:40:28 PM, error: Service Control Manager [7034] - The DeviceManager service terminated unexpectedly. It has done this 1 time(s). 10/26/2012 12:39:39 PM, error: Service Control Manager [7034] - The HWDeviceService.exe service terminated unexpectedly. It has done this 1 time(s). 10/23/2012 9:18:05 PM, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC. Reference error message: The referenced assembly is not installed on your system. . 10/23/2012 9:18:05 PM, error: SideBySide [59] - Generate Activation Context failed for C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL. Reference error message: The operation completed successfully. . 10/23/2012 9:18:05 PM, error: SideBySide [32] - Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last Error was The referenced assembly is not installed on your system. 10/23/2012 9:18:04 PM, error: SideBySide [59] - Generate Activation Context failed for C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL. Reference error message: The operation completed successfully. . 10/23/2012 6:42:44 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the VIVACOM 3G USB Modem. OUC service to connect. 10/23/2012 6:42:44 AM, error: Service Control Manager [7000] - The VIVACOM 3G USB Modem. OUC service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 10/23/2012 10:35:33 AM, error: SCardSvr [610] - Smart Card Reader 'HUAWEI USB SmartCard Reader 1' rejected IOCTL GET_STATE: The device has been removed. 10/23/2012 10:16:57 PM, error: Dhcp [1002] - The IP address lease 10.56.253.152 for the Network Card with network address 001E101F4C53 has been denied by the DHCP server 10.56.236.57 (The DHCP Server sent a DHCPNACK message). 10/23/2012 10:12:36 PM, error: Dhcp [1002] - The IP address lease 10.56.137.168 for the Network Card with network address 001E101F5BFC has been denied by the DHCP server 10.56.253.145 (The DHCP Server sent a DHCPNACK message). . ==== End Of File =========================== DDS (Ver_2011-09-30.01) - NTFS_x86 Internet Explorer: 6.0.2900.5512 Run by muad at 23:30:31 on 2012-10-30 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.959.410 [GMT 2:00] . AV: Avira Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7} . ============== Running Processes ================ . C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\WINDOWS\System32\alg.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\WINDOWS\explorer.exe C:\Program Files\VIVACOM 3G USB MODEM\VIVACOM 3G USB Modem.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Avira\AntiVir Desktop\avshadow.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\msdtc.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch C:\WINDOWS\system32\svchost.exe -k rpcss C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\system32\svchost.exe -k netsvcs . ============== Pseudo HJT Report =============== . uStart Page = about:blank BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll uRun: [PC Suite Tray] "c:\program files\nokia\nokia pc suite 7\PCSuite.exe" -onlytray mRun: [ModemListener] c:\program files\vivacom 3g usb modem\ModemListener.exe start mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] nwiz.exe /install mRun: [skyTel] SkyTel.EXE mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [RTHDCPL] RTHDCPL.EXE mRun: [NSU_agent] "c:\program files\nokia\nokia software updater\nsu3ui_agent.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE uPolicies-Explorer: NoDriveTypeAutoRun = dword:323 uPolicies-Explorer: NoDriveAutoRun = dword:67108863 uPolicies-Explorer: NoDrives = dword:0 mPolicies-Explorer: NoDriveAutoRun = dword:67108863 mPolicies-Explorer: NoDriveTypeAutoRun = dword:323 mPolicies-Explorer: NoDrives = dword:0 mPolicies-Explorer: NoDriveTypeAutoRun = dword:323 mPolicies-Explorer: NoDriveAutoRun = dword:67108863 IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe LSP: c:\program files\avira\antivir desktop\avsda.dll TCP: NameServer = 212.39.90.42 212.39.90.43 TCP: Interfaces\{7ED80856-1FF1-47DB-BE2C-15CAD1DBF462} : DHCPNameServer = 212.39.90.42 212.39.90.43 Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\muad\application data\mozilla\firefox\profiles\y0zj1h2r.default-1351631443109\ FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll FF - plugin: c:\windows\system32\adobe\director\np32dsw_1167637.dll FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_287.dll . ============= SERVICES / DRIVERS =============== . R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [2012-10-30 36552] R2 AntiVirSchedulerService;Avira Scheduler;c:\program files\avira\antivir desktop\sched.exe [2012-10-30 84256] R2 AntiVirService;Avira Real-Time Protection;c:\program files\avira\antivir desktop\avguard.exe [2012-10-30 108320] R2 AntiVirWebService;Avira Web Protection;c:\program files\avira\antivir desktop\avwebgrd.exe [2012-10-30 560416] R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2012-10-30 83792] R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [2012-10-2 235392] R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\drivers\ewdcsc.sys [2012-10-2 25856] R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\drivers\ew_jubusenum.sys [2012-10-2 73216] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 DeviceManager;DeviceManager;c:\program files\common files\devicehelper\devicemanager.exe -start --> c:\program files\common files\devicehelper\DeviceManager.exe -start [?] S2 HWDeviceService.exe;HWDeviceService.exe;c:\documents and settings\all users\application data\datacardservice\HWDeviceService.exe [2011-3-14 271712] S2 VIVACOM 3G USB Modem. RunOuc;VIVACOM 3G USB Modem. OUC;c:\program files\vivacom 3g usb modem\updatedog\ouc.exe [2012-10-2 246112] S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\drivers\ew_hwusbdev.sys [2012-10-2 102784] S3 jrdusbser;Modem Interface Device for Legacy Serial Communication;c:\windows\system32\drivers\jrdusbser.sys [2012-10-1 105344] S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-10-2 115168] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] . =============== Created Last 30 ================ . 2012-10-30 20:42:02 -------- d-----w- c:\documents and settings\muad\application data\Avira 2012-10-30 20:39:03 -------- d-----w- c:\documents and settings\muad\application data\CallingID 2012-10-30 20:29:53 83792 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2012-10-30 20:29:53 36552 ----a-w- c:\windows\system32\drivers\avkmgr.sys 2012-10-30 20:29:51 -------- d-----w- c:\program files\Avira 2012-10-30 20:29:51 -------- d-----w- c:\documents and settings\all users\application data\Avira 2012-10-30 17:29:07 -------- d-----w- c:\documents and settings\muad\application data\IrfanView 2012-10-30 15:59:12 -------- d--h--w- c:\windows\PIF 2012-10-29 12:18:18 -------- d-----w- c:\program files\FinalWire 2012-10-29 10:10:22 -------- d-----w- c:\documents and settings\muad\local settings\application data\Adobe 2012-10-26 05:00:30 -------- d-sh--w- c:\documents and settings\muad\Phone Browser 2012-10-23 19:10:37 -------- d-----w- c:\program files\MSXML 4.0 2012-10-23 19:10:33 -------- d-----w- c:\program files\PC Connectivity Solution 2012-10-23 19:10:18 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys 2012-10-23 19:10:17 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys 2012-10-23 19:10:16 605696 ----a-w- c:\windows\system32\nmwcdcocls.dll 2012-10-23 19:10:16 23168 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys 2012-10-23 19:10:16 18176 ----a-w- c:\windows\system32\drivers\ccdcmb.sys 2012-10-23 19:10:16 1461992 ----a-w- c:\windows\system32\wdfcoinstaller01009.dll 2012-10-23 19:10:16 123904 ----a-w- c:\windows\system32\ccdcmbwu.dll 2012-10-23 19:09:54 73728 ----a-r- c:\documents and settings\muad\application data\microsoft\installer\{7130468a-f53f-4698-8c09-a339ea3b05e6}\NewShortcut47_74B9CE5DF1F4447F982DCA29A461B529.exe 2012-10-23 19:09:54 73728 ----a-r- c:\documents and settings\muad\application data\microsoft\installer\{7130468a-f53f-4698-8c09-a339ea3b05e6}\NewShortcut46_74B9CE5DF1F4447F982DCA29A461B529.exe 2012-10-23 19:09:54 53248 ----a-r- c:\documents and settings\muad\application data\microsoft\installer\{7130468a-f53f-4698-8c09-a339ea3b05e6}\ARPPRODUCTICON.exe 2012-10-23 19:09:54 49152 ----a-r- c:\documents and settings\muad\application data\microsoft\installer\{7130468a-f53f-4698-8c09-a339ea3b05e6}\Uninstall_QA_OTI_H_FE5D756F71E147C4972AD6775344B40B.exe 2012-10-23 19:09:54 49152 ----a-r- c:\documents and settings\muad\application data\microsoft\installer\{7130468a-f53f-4698-8c09-a339ea3b05e6}\NewShortcut2_1C7B7089989A424FB39D41A32581C775.exe 2012-10-23 19:09:45 -------- d-----w- c:\documents and settings\muad\local settings\application data\Nokia 2012-10-23 18:19:48 26112 -c--a-w- c:\windows\system32\dllcache\usbser.sys 2012-10-23 18:19:48 26112 ----a-w- c:\windows\system32\drivers\usbser.sys 2012-10-23 18:17:56 -------- d-----w- c:\program files\common files\PCSuite 2012-10-23 18:17:54 -------- d-----w- c:\program files\common files\Nokia 2012-10-23 18:17:49 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys 2012-10-23 18:17:31 75264 ----a-w- c:\windows\system32\nmwcdcls.dll 2012-10-23 18:17:31 -------- d-----w- c:\program files\Nokia 2012-10-22 10:07:50 98816 ----a-w- c:\windows\sed.exe 2012-10-22 10:07:50 256000 ----a-w- c:\windows\PEV.exe 2012-10-22 10:07:50 208896 ----a-w- c:\windows\MBR.exe 2012-10-22 08:36:34 -------- d-----w- c:\documents and settings\all users\application data\Max Secure 2012-10-22 08:30:32 -------- d-----w- c:\documents and settings\muad\local settings\application data\Max Secure Software 2012-10-22 08:30:07 -------- d-----w- c:\documents and settings\muad\application data\GetRightToGo 2012-10-22 06:42:59 60928 -c--a-w- c:\windows\system32\dllcache\iisclex4.dll 2012-10-22 06:26:44 24661 -c--a-w- c:\windows\system32\dllcache\spxcoins.dll 2012-10-22 06:26:44 24661 ----a-w- c:\windows\system32\spxcoins.dll 2012-10-22 06:26:44 13312 -c--a-w- c:\windows\system32\dllcache\irclass.dll 2012-10-22 06:26:44 13312 ----a-w- c:\windows\system32\irclass.dll 2012-10-22 06:26:31 16535 ----a-r- c:\windows\SET43.tmp 2012-10-22 06:26:28 1088840 ----a-r- c:\windows\SET37.tmp 2012-10-22 06:26:27 1296669 ----a-r- c:\windows\SET34.tmp 2012-10-18 10:41:27 -------- d-----w- c:\documents and settings\muad\application data\Malwarebytes 2012-10-18 10:41:17 -------- d-----w- c:\documents and settings\all users\application data\Malwarebytes 2012-10-17 13:06:21 -------- d-----w- c:\documents and settings\muad\local settings\application data\Help 2012-10-17 11:24:23 -------- d-----w- c:\program files\Favorite-Games 2012-10-17 10:54:07 -------- d-----w- c:\program files\Microsoft ActiveSync 2012-10-17 10:53:47 -------- d--h--w- c:\windows\ShellNew 2012-10-17 08:16:18 -------- d-----w- C:\TEMP 2012-10-17 07:27:39 -------- d-----w- c:\program files\IrfanView 2012-10-17 07:21:54 -------- d-----w- c:\windows\system32\Adobe 2012-10-15 18:36:30 5632 ----a-w- c:\windows\system32\ptpusb.dll 2012-10-15 18:36:29 159232 ----a-w- c:\windows\system32\ptpusd.dll 2012-10-15 18:36:29 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys 2012-10-15 17:43:32 -------- d-----w- c:\program files\CPUID 2012-10-15 17:40:57 -------- d-----w- c:\program files\GPU-Z 2012-10-15 17:01:12 -------- d-----w- c:\documents and settings\muad\local settings\application data\DC++ 2012-10-15 17:01:12 -------- d-----w- c:\documents and settings\muad\application data\DC++ 2012-10-15 11:22:19 -------- d-----w- c:\program files\Gophoto.it 2012-10-15 11:22:11 -------- d-----w- c:\program files\OnlineHD.TV 2012-10-12 11:33:06 -------- d-----w- c:\program files\TVPlayerClassic 2012-10-11 11:19:32 -------- d-sha-r- C:\cmdcons 2012-10-10 18:45:50 -------- d-----w- c:\program files\Emsisoft Anti-Malware 2012-10-06 07:08:54 -------- d-----w- c:\documents and settings\muad\local settings\application data\Identities 2012-10-04 10:26:27 -------- d-----w- c:\windows\system32\NtmsData 2012-10-03 15:52:21 -------- d-----w- c:\documents and settings\muad\local settings\application data\Google 2012-10-03 03:47:35 8992 ----a-w- c:\windows\system32\kbdbph.dll 2012-10-03 03:47:22 17920 ------w- C:\BGPhon.exe 2012-10-02 20:05:10 -------- d-----w- c:\program files\TuneXP 2012-10-02 18:15:21 -------- d-----w- c:\documents and settings\muad\application data\HD Tune Pro 2012-10-02 18:14:40 -------- d-----w- c:\program files\HD Tune Pro 2012-10-02 12:44:10 -------- d-----w- c:\documents and settings\muad\application data\TeamViewer 2012-10-02 07:34:49 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-10-02 07:34:49 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-10-02 06:40:50 -------- d-----w- c:\windows\system32\Lang 2012-10-02 06:38:59 2158592 ----a-w- c:\windows\MicCal.exe 2012-10-02 06:37:19 208896 ----a-w- c:\windows\system32\nvudisp.exe 2012-10-02 06:37:19 -------- d-----w- c:\windows\nview 2012-10-02 06:36:38 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\ctor.dll 2012-10-02 06:36:38 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\DotNetInstaller.exe 2012-10-02 06:36:38 32768 ----a-w- c:\program files\common files\installshield\professional\runtime\Objectps.dll 2012-10-02 06:36:38 266240 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iscript.dll 2012-10-02 06:36:38 192512 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iuser.dll 2012-10-02 06:36:37 729088 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iKernel.dll 2012-10-02 06:36:31 311428 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\setup.dll 2012-10-02 06:36:31 188548 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iGdi.dll 2012-10-02 06:02:09 1617920 ----a-w- c:\windows\system32\nwiz.exe 2012-10-02 06:02:08 1732608 ----a-w- c:\windows\system32\nvwssr.dll 2012-10-02 06:02:08 1236992 ----a-w- c:\windows\system32\nvwss.dll 2012-10-02 06:02:03 1019904 ----a-w- c:\windows\system32\nvwimg.dll 2012-10-02 06:02:02 81920 ----a-w- c:\windows\system32\nvwddi.dll 2012-10-02 06:02:02 1662976 ----a-w- c:\windows\system32\nvwdmcpl.dll . ==================== Find3M ==================== . . ============= FINISH: 23:30:49.48 ===============

31 октомври 201213 г.

Автор

Здравейте,компанията. Реших да пробвам Авира тази вечер и ето на изскочи това чудо от заглавието.Признавам,че като цяло компютърът не е показал нещо крайно смущаващо ,освен някакво странно изпращане на данни,което и предизвика тази проба на Авира(досега ползвах само Емси и мбам). Ще съм благодарен да го обсъдим

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-09-30.01)

.

Microsoft Windows XP Professional

Boot Device: DeviceHarddiskVolume1

Install Date: 10/22/2012 9:44:11 AM

System Uptime: 10/29/2012 11:12:40 PM (24 hours ago)

.

Motherboard: | | ALiveNF6G-DVI

Processor: AMD Athlon™ 64 X2 Dual Core Processor 3800+ | CPUSocket | 2009/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 98 GiB total, 92.352 GiB free.

D: is FIXED (NTFS) - 122 GiB total, 121.809 GiB free.

E: is FIXED (NTFS) - 13 GiB total, 12.805 GiB free.

F: is CDROM ()

G: is Removable

.

==== Disabled Device Manager Items =============

.

Class GUID: {4D36E969-E325-11CE-BFC1-08002BE10318}

Description: Standard floppy disk controller

Device ID: ACPIPNP07004&38D79619&0

Manufacturer: (Standard floppy disk controllers)

Name: Standard floppy disk controller

PNP Device ID: ACPIPNP07004&38D79619&0

Service: fdc

.

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}

Description: NVIDIA nForce Networking Controller

Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}NVNET_DEV03EF4&1E6AA3F3&0&00

Manufacturer: NVIDIA

Name: NVIDIA nForce 10/100/1000 Mbps Ethernet

PNP Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}NVNET_DEV03EF4&1E6AA3F3&0&00

Service: NVENETFD

.

==== System Restore Points ===================

.

No restore point in system.

.

==== Installed Programs ======================

.

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader XI

Adobe Shockwave Player 11.6

AIDA64 Extreme Edition v2.70

Avira Free Antivirus

CPUID CPU-Z 1.61.3

DC++ 0.801

Favorite-Games 5.21

IrfanView (remove only)

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Kernel-Mode Driver Framework Feature Pack 1.7

Microsoft Kernel-Mode Driver Framework Feature Pack 1.9

Microsoft Office XP Professional with FrontPage

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Mozilla Firefox 16.0.2 (x86 bg)

Mozilla Maintenance Service

MSVC80_x86

MSXML 4.0 SP3 Parser

Nokia Connectivity Cable Driver

Nokia PC Suite

Nokia Software Updater

NVIDIA Drivers

PC Connectivity Solution

Realtek High Definition Audio Driver

swMSM

TechPowerUp GPU-Z

VIVACOM 3G USB MODEM

WebFldrs XP

Windows Driver Package - Nokia Modem (06/01/2009 4.1)

Windows Driver Package - Nokia Modem (06/01/2009 7.01.0.3)

Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)

WinRAR 4.20 (32-bit)

.

==== Event Viewer Messages From Past Week ========

.

10/30/2012 6:53:30 PM, error: Dhcp [1002] - The IP address lease 10.56.226.10 for the Network Card with network address 001E101F8A85 has been denied by the DHCP server 10.56.34.33 (The DHCP Server sent a DHCPNACK message).

10/30/2012 3:55:51 PM, error: Dhcp [1002] - The IP address lease 10.56.102.91 for the Network Card with network address 001E101F8A85 has been denied by the DHCP server 10.56.226.9 (The DHCP Server sent a DHCPNACK message).

10/30/2012 10:45:25 PM, error: nvgts [5] - A parity error was detected on DeviceScsinvgts1.

10/30/2012 1:57:50 PM, error: Dhcp [1002] - The IP address lease 10.56.235.58 for the Network Card with network address 001E101F8A85 has been denied by the DHCP server 10.56.102.89 (The DHCP Server sent a DHCPNACK message).

10/29/2012 10:10:04 PM, error: Dhcp [1002] - The IP address lease 10.56.222.8 for the Network Card with network address 001E101F7F7D has been denied by the DHCP server 10.56.200.186 (The DHCP Server sent a DHCPNACK message).

10/26/2012 8:08:51 AM, error: Service Control Manager [7031] - The Emsisoft Anti-Malware 5.0 - Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.

10/26/2012 12:40:28 PM, error: Service Control Manager [7034] - The DeviceManager service terminated unexpectedly. It has done this 1 time(s).

10/26/2012 12:39:39 PM, error: Service Control Manager [7034] - The HWDeviceService.exe service terminated unexpectedly. It has done this 1 time(s).

10/23/2012 9:18:05 PM, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC. Reference error message: The referenced assembly is not installed on your system. .

10/23/2012 9:18:05 PM, error: SideBySide [59] - Generate Activation Context failed for C:WINDOWSWinSxSx86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05MFC80U.DLL. Reference error message: The operation completed successfully. .

10/23/2012 9:18:05 PM, error: SideBySide [32] - Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last Error was The referenced assembly is not installed on your system.

10/23/2012 9:18:04 PM, error: SideBySide [59] - Generate Activation Context failed for C:WINDOWSWinSxSx86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05MFC80.DLL. Reference error message: The operation completed successfully. .

10/23/2012 6:42:44 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the VIVACOM 3G USB Modem. OUC service to connect.

10/23/2012 6:42:44 AM, error: Service Control Manager [7000] - The VIVACOM 3G USB Modem. OUC service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

10/23/2012 10:35:33 AM, error: SCardSvr [610] - Smart Card Reader 'HUAWEI USB SmartCard Reader 1' rejected IOCTL GET_STATE: The device has been removed.

10/23/2012 10:16:57 PM, error: Dhcp [1002] - The IP address lease 10.56.253.152 for the Network Card with network address 001E101F4C53 has been denied by the DHCP server 10.56.236.57 (The DHCP Server sent a DHCPNACK message).

10/23/2012 10:12:36 PM, error: Dhcp [1002] - The IP address lease 10.56.137.168 for the Network Card with network address 001E101F5BFC has been denied by the DHCP server 10.56.253.145 (The DHCP Server sent a DHCPNACK message).

.

==== End Of File ===========================

DDS (Ver_2011-09-30.01) - NTFS_x86

Internet Explorer: 6.0.2900.5512

Run by muad at 23:30:31 on 2012-10-30

Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.959.410 [GMT 2:00]

.

AV: Avira Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}

.

============== Running Processes ================

.

C:WINDOWSsystem32spoolsv.exe

C:WINDOWSsystem32RUNDLL32.EXE

C:WINDOWSRTHDCPL.EXE

C:Program FilesPC Connectivity SolutionServiceLayer.exe

C:WINDOWSSystem32alg.exe

C:Program FilesPC Connectivity SolutionTransportsNclUSBSrv.exe

C:Program FilesPC Connectivity SolutionTransportsNclRSSrv.exe

C:WINDOWSsystem32wscntfy.exe

C:WINDOWSsystem32NOTEPAD.EXE

C:WINDOWSexplorer.exe

C:Program FilesVIVACOM 3G USB MODEMVIVACOM 3G USB Modem.exe

C:Program FilesAviraAntiVir Desktopavguard.exe

C:Program FilesAviraAntiVir Desktopavshadow.exe

C:Program FilesAviraAntiVir Desktopsched.exe

C:Program FilesAviraAntiVir DesktopAVWEBGRD.EXE

C:Program FilesAviraAntiVir Desktopavgnt.exe

C:WINDOWSsystem32dllhost.exe

C:WINDOWSsystem32msdtc.exe

C:WINDOWSsystem32NOTEPAD.EXE

C:Program FilesMozilla Firefoxfirefox.exe

C:Program FilesMozilla Firefoxplugin-container.exe

C:WINDOWSsystem32wbemwmiprvse.exe

C:WINDOWSsystem32svchost.exe -k DcomLaunch

C:WINDOWSsystem32svchost.exe -k rpcss

C:WINDOWSSystem32svchost.exe -k netsvcs

C:WINDOWSsystem32svchost.exe -k NetworkService

C:WINDOWSsystem32svchost.exe -k LocalService

C:WINDOWSsystem32svchost.exe -k imgsvc

C:WINDOWSsystem32svchost.exe -k netsvcs

.

============== Pseudo HJT Report ===============

.

uStart Page = about:blank

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:program filescommon filesadobeacrobatactivexAcroIEHelperShim.dll

uRun: [PC Suite Tray] "c:program filesnokianokia pc suite 7PCSuite.exe" -onlytray

mRun: [ModemListener] c:program filesvivacom 3g usb modemModemListener.exe start

mRun: [NvCplDaemon] RUNDLL32.EXE c:windowssystem32NvCpl.dll,NvStartup

mRun: [nwiz] nwiz.exe /install

mRun: [skyTel] SkyTel.EXE

mRun: [NvMediaCenter] RUNDLL32.EXE c:windowssystem32NvMcTray.dll,NvTaskbarInit

mRun: [RTHDCPL] RTHDCPL.EXE

mRun: [NSU_agent] "c:program filesnokianokia software updaternsu3ui_agent.exe"

mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe"

mRun: [avgnt] "c:program filesaviraantivir desktopavgnt.exe" /min

StartupFolder: c:docume~1alluse~1startm~1programsstartupmicros~1.lnk - c:program filesmicrosoft officeoffice10OSA.EXE

uPolicies-Explorer: NoDriveTypeAutoRun = dword:323

uPolicies-Explorer: NoDriveAutoRun = dword:67108863

uPolicies-Explorer: NoDrives = dword:0

mPolicies-Explorer: NoDriveAutoRun = dword:67108863

mPolicies-Explorer: NoDriveTypeAutoRun = dword:323

mPolicies-Explorer: NoDrives = dword:0

mPolicies-Explorer: NoDriveTypeAutoRun = dword:323

mPolicies-Explorer: NoDriveAutoRun = dword:67108863

IE: E&xport to Microsoft Excel - c:progra~1micros~2office10EXCEL.EXE/3000

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:program filesmessengermsmsgs.exe

LSP: c:program filesaviraantivir desktopavsda.dll

TCP: NameServer = 212.39.90.42 212.39.90.43

TCP: Interfaces{7ED80856-1FF1-47DB-BE2C-15CAD1DBF462} : DHCPNameServer = 212.39.90.42 212.39.90.43

Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:program filescommon filesmicrosoft sharedweb foldersPKMCDO.DLL

.

================= FIREFOX ===================

.

FF - ProfilePath - c:documents and settingsmuadapplication datamozillafirefoxprofilesy0zj1h2r.default-1351631443109

FF - plugin: c:program filesadobereader 11.0readerairnppdf32.dll

FF - plugin: c:windowssystem32adobedirectornp32dsw_1167637.dll

FF - plugin: c:windowssystem32macromedflashNPSWF32_11_4_402_287.dll

.

============= SERVICES / DRIVERS ===============

.

R1 avkmgr;avkmgr;c:windowssystem32driversavkmgr.sys [2012-10-30 36552]

R2 AntiVirSchedulerService;Avira Scheduler;c:program filesaviraantivir desktopsched.exe [2012-10-30 84256]

R2 AntiVirService;Avira Real-Time Protection;c:program filesaviraantivir desktopavguard.exe [2012-10-30 108320]

R2 AntiVirWebService;Avira Web Protection;c:program filesaviraantivir desktopavwebgrd.exe [2012-10-30 560416]

R2 avgntflt;avgntflt;c:windowssystem32driversavgntflt.sys [2012-10-30 83792]

R3 ewusbnet;HUAWEI USB-NDIS miniport;c:windowssystem32driversewusbnet.sys [2012-10-2 235392]

R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:windowssystem32driversewdcsc.sys [2012-10-2 25856]

R3 huawei_enumerator;huawei_enumerator;c:windowssystem32driversew_jubusenum.sys [2012-10-2 73216]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:windowsmicrosoft.netframeworkv4.0.30319mscorsvw.exe [2010-3-18 130384]

S2 DeviceManager;DeviceManager;c:program filescommon filesdevicehelperdevicemanager.exe -start --> c:program filescommon filesdevicehelperDeviceManager.exe -start [?]

S2 HWDeviceService.exe;HWDeviceService.exe;c:documents and settingsall usersapplication datadatacardserviceHWDeviceService.exe [2011-3-14 271712]

S2 VIVACOM 3G USB Modem. RunOuc;VIVACOM 3G USB Modem. OUC;c:program filesvivacom 3g usb modemupdatedogouc.exe [2012-10-2 246112]

S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:windowssystem32driversew_hwusbdev.sys [2012-10-2 102784]

S3 jrdusbser;Modem Interface Device for Legacy Serial Communication;c:windowssystem32driversjrdusbser.sys [2012-10-1 105344]

S3 MozillaMaintenance;Mozilla Maintenance Service;c:program filesmozilla maintenance servicemaintenanceservice.exe [2012-10-2 115168]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:windowsmicrosoft.netframeworkv4.0.30319wpfWPFFontCache_v0400.exe [2010-3-18 753504]

.

=============== Created Last 30 ================

.

2012-10-30 20:42:02 -------- d-----w- c:documents and settingsmuadapplication dataAvira

2012-10-30 20:39:03 -------- d-----w- c:documents and settingsmuadapplication dataCallingID

2012-10-30 20:29:53 83792 ----a-w- c:windowssystem32driversavgntflt.sys

2012-10-30 20:29:53 36552 ----a-w- c:windowssystem32driversavkmgr.sys

2012-10-30 20:29:51 -------- d-----w- c:program filesAvira

2012-10-30 20:29:51 -------- d-----w- c:documents and settingsall usersapplication dataAvira

2012-10-30 17:29:07 -------- d-----w- c:documents and settingsmuadapplication dataIrfanView

2012-10-30 15:59:12 -------- d--h--w- c:windowsPIF

2012-10-29 12:18:18 -------- d-----w- c:program filesFinalWire

2012-10-29 10:10:22 -------- d-----w- c:documents and settingsmuadlocal settingsapplication dataAdobe

2012-10-26 05:00:30 -------- d-sh--w- c:documents and settingsmuadPhone Browser

2012-10-23 19:10:37 -------- d-----w- c:program filesMSXML 4.0

2012-10-23 19:10:33 -------- d-----w- c:program filesPC Connectivity Solution

2012-10-23 19:10:18 8192 ----a-w- c:windowssystem32driversusbser_lowerfltj.sys

2012-10-23 19:10:17 8192 ----a-w- c:windowssystem32driversusbser_lowerflt.sys

2012-10-23 19:10:16 605696 ----a-w- c:windowssystem32nmwcdcocls.dll

2012-10-23 19:10:16 23168 ----a-w- c:windowssystem32driversccdcmbo.sys

2012-10-23 19:10:16 18176 ----a-w- c:windowssystem32driversccdcmb.sys

2012-10-23 19:10:16 1461992 ----a-w- c:windowssystem32wdfcoinstaller01009.dll

2012-10-23 19:10:16 123904 ----a-w- c:windowssystem32ccdcmbwu.dll

2012-10-23 19:09:54 73728 ----a-r- c:documents and settingsmuadapplication datamicrosoftinstaller{7130468a-f53f-4698-8c09-a339ea3b05e6}NewShortcut47_74B9CE5DF1F4447F982DCA29A461B529.exe

2012-10-23 19:09:54 73728 ----a-r- c:documents and settingsmuadapplication datamicrosoftinstaller{7130468a-f53f-4698-8c09-a339ea3b05e6}NewShortcut46_74B9CE5DF1F4447F982DCA29A461B529.exe

2012-10-23 19:09:54 53248 ----a-r- c:documents and settingsmuadapplication datamicrosoftinstaller{7130468a-f53f-4698-8c09-a339ea3b05e6}ARPPRODUCTICON.exe

2012-10-23 19:09:54 49152 ----a-r- c:documents and settingsmuadapplication datamicrosoftinstaller{7130468a-f53f-4698-8c09-a339ea3b05e6}Uninstall_QA_OTI_H_FE5D756F71E147C4972AD6775344B40B.exe

2012-10-23 19:09:54 49152 ----a-r- c:documents and settingsmuadapplication datamicrosoftinstaller{7130468a-f53f-4698-8c09-a339ea3b05e6}NewShortcut2_1C7B7089989A424FB39D41A32581C775.exe

2012-10-23 19:09:45 -------- d-----w- c:documents and settingsmuadlocal settingsapplication dataNokia

2012-10-23 18:19:48 26112 -c--a-w- c:windowssystem32dllcacheusbser.sys

2012-10-23 18:19:48 26112 ----a-w- c:windowssystem32driversusbser.sys

2012-10-23 18:17:56 -------- d-----w- c:program filescommon filesPCSuite

2012-10-23 18:17:54 -------- d-----w- c:program filescommon filesNokia

2012-10-23 18:17:49 18816 ----a-w- c:windowssystem32driverspccsmcfd.sys

2012-10-23 18:17:31 75264 ----a-w- c:windowssystem32nmwcdcls.dll

2012-10-23 18:17:31 -------- d-----w- c:program filesNokia

2012-10-22 10:07:50 98816 ----a-w- c:windowssed.exe

2012-10-22 10:07:50 256000 ----a-w- c:windowsPEV.exe

2012-10-22 10:07:50 208896 ----a-w- c:windowsMBR.exe

2012-10-22 08:36:34 -------- d-----w- c:documents and settingsall usersapplication dataMax Secure

2012-10-22 08:30:32 -------- d-----w- c:documents and settingsmuadlocal settingsapplication dataMax Secure Software

2012-10-22 08:30:07 -------- d-----w- c:documents and settingsmuadapplication dataGetRightToGo

2012-10-22 06:42:59 60928 -c--a-w- c:windowssystem32dllcacheiisclex4.dll

2012-10-22 06:26:44 24661 -c--a-w- c:windowssystem32dllcachespxcoins.dll

2012-10-22 06:26:44 24661 ----a-w- c:windowssystem32spxcoins.dll

2012-10-22 06:26:44 13312 -c--a-w- c:windowssystem32dllcacheirclass.dll

2012-10-22 06:26:44 13312 ----a-w- c:windowssystem32irclass.dll

2012-10-22 06:26:31 16535 ----a-r- c:windowsSET43.tmp

2012-10-22 06:26:28 1088840 ----a-r- c:windowsSET37.tmp

2012-10-22 06:26:27 1296669 ----a-r- c:windowsSET34.tmp

2012-10-18 10:41:27 -------- d-----w- c:documents and settingsmuadapplication dataMalwarebytes

2012-10-18 10:41:17 -------- d-----w- c:documents and settingsall usersapplication dataMalwarebytes

2012-10-17 13:06:21 -------- d-----w- c:documents and settingsmuadlocal settingsapplication dataHelp

2012-10-17 11:24:23 -------- d-----w- c:program filesFavorite-Games

2012-10-17 10:54:07 -------- d-----w- c:program filesMicrosoft ActiveSync

2012-10-17 10:53:47 -------- d--h--w- c:windowsShellNew

2012-10-17 08:16:18 -------- d-----w- C:TEMP

2012-10-17 07:27:39 -------- d-----w- c:program filesIrfanView

2012-10-17 07:21:54 -------- d-----w- c:windowssystem32Adobe

2012-10-15 18:36:30 5632 ----a-w- c:windowssystem32ptpusb.dll

2012-10-15 18:36:29 159232 ----a-w- c:windowssystem32ptpusd.dll

2012-10-15 18:36:29 15104 ----a-w- c:windowssystem32driversusbscan.sys

2012-10-15 17:43:32 -------- d-----w- c:program filesCPUID

2012-10-15 17:40:57 -------- d-----w- c:program filesGPU-Z

2012-10-15 17:01:12 -------- d-----w- c:documents and settingsmuadlocal settingsapplication dataDC++

2012-10-15 17:01:12 -------- d-----w- c:documents and settingsmuadapplication dataDC++

2012-10-15 11:22:19 -------- d-----w- c:program filesGophoto.it

2012-10-15 11:22:11 -------- d-----w- c:program filesOnlineHD.TV

2012-10-12 11:33:06 -------- d-----w- c:program filesTVPlayerClassic

2012-10-11 11:19:32 -------- d-sha-r- C:cmdcons

2012-10-10 18:45:50 -------- d-----w- c:program filesEmsisoft Anti-Malware

2012-10-06 07:08:54 -------- d-----w- c:documents and settingsmuadlocal settingsapplication dataIdentities

2012-10-04 10:26:27 -------- d-----w- c:windowssystem32NtmsData

2012-10-03 15:52:21 -------- d-----w- c:documents and settingsmuadlocal settingsapplication dataGoogle

2012-10-03 03:47:35 8992 ----a-w- c:windowssystem32kbdbph.dll

2012-10-03 03:47:22 17920 ------w- C:BGPhon.exe

2012-10-02 20:05:10 -------- d-----w- c:program filesTuneXP

2012-10-02 18:15:21 -------- d-----w- c:documents and settingsmuadapplication dataHD Tune Pro

2012-10-02 18:14:40 -------- d-----w- c:program filesHD Tune Pro

2012-10-02 12:44:10 -------- d-----w- c:documents and settingsmuadapplication dataTeamViewer

2012-10-02 07:34:49 73656 ----a-w- c:windowssystem32FlashPlayerCPLApp.cpl

2012-10-02 07:34:49 696760 ----a-w- c:windowssystem32FlashPlayerApp.exe

2012-10-02 06:40:50 -------- d-----w- c:windowssystem32Lang

2012-10-02 06:38:59 2158592 ----a-w- c:windowsMicCal.exe

2012-10-02 06:37:19 208896 ----a-w- c:windowssystem32nvudisp.exe

2012-10-02 06:37:19 -------- d-----w- c:windowsnview

2012-10-02 06:36:38 69715 ----a-w- c:program filescommon filesinstallshieldprofessionalruntime0901intel32ctor.dll

2012-10-02 06:36:38 5632 ----a-w- c:program filescommon filesinstallshieldprofessionalruntime0901intel32DotNetInstaller.exe

2012-10-02 06:36:38 32768 ----a-w- c:program filescommon filesinstallshieldprofessionalruntimeObjectps.dll

2012-10-02 06:36:38 266240 ----a-w- c:program filescommon filesinstallshieldprofessionalruntime0901intel32iscript.dll

2012-10-02 06:36:38 192512 ----a-w- c:program filescommon filesinstallshieldprofessionalruntime0901intel32iuser.dll

2012-10-02 06:36:37 729088 ----a-w- c:program filescommon filesinstallshieldprofessionalruntime0901intel32iKernel.dll

2012-10-02 06:36:31 311428 ----a-w- c:program filescommon filesinstallshieldprofessionalruntime0901intel32setup.dll

2012-10-02 06:36:31 188548 ----a-w- c:program filescommon filesinstallshieldprofessionalruntime0901intel32iGdi.dll

2012-10-02 06:02:09 1617920 ----a-w- c:windowssystem32nwiz.exe

2012-10-02 06:02:08 1732608 ----a-w- c:windowssystem32nvwssr.dll

2012-10-02 06:02:08 1236992 ----a-w- c:windowssystem32nvwss.dll

2012-10-02 06:02:03 1019904 ----a-w- c:windowssystem32nvwimg.dll

2012-10-02 06:02:02 81920 ----a-w- c:windowssystem32nvwddi.dll

2012-10-02 06:02:02 1662976 ----a-w- c:windowssystem32nvwdmcpl.dll

.

==================== Find3M ====================

.

.

============= FINISH: 23:30:49.48 ===============

Solved /close topic/

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

31 октомври 201213 г.

Здравейте..!Имате ли нужда още от съдействие на HJTeam....?

1 ноември 201213 г.

Автор

Здравейте..!Имате ли нужда още от съдействие на HJTeam....?

Здравейте,мисля че проблема е решен засега,ако открия нещо нередно в последствие,ще се консултирам отново,така че този топик може да се затвори

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.