Здравейте!

Имам проблем с една игра, която играя във Фейсбук и която иска Flash Player. Изтеглих плеъра от линка, предложен в играта. При опит да инсталирам инсталационният файл изчезваше, а инсталацията беше неуспешна. Вследствие на това интернета се забави до степен на неизползваемост. Обадих се на доставчика и получих отговор, че проблема не е от тях. И след като около три-четири дена се мъчих с интернета, за да прочета нещо по въпроса, ето какво предприех: пуснах антивирусната (Avast), а после и Malwarebytes Anti-Malware. Оказа се, че има някаккъв вирус в System Volume Information и след много четене в нета и триене (но тъй като не съм компетентна по отношение на компютрите, работя само под точен и изчерпателен инструктаж), нета се оправи, антивирусната и Malwarebytes Anti-Malware не засичат вируси, а аз се престраших и изтеглих наново Flash player-а. Инсталацията беше успешна, но за моя изненада, играта, която играя във Фейсбук отново е без изображение. Дали може нещо да е останало и да създава проблеми?

Ще разбера, ако решите, че не се нуждая от вашата помощ. Все пак ще кача файловете от dds (тъпо, но факт: не знам как да изключа защитата в реално време, така че пуснах програмата без да направя това).

 

 

 

DDS (Ver_2011-09-30.01) - NTFS_x86 Internet Explorer: 8.0.6001.18702 Run by darina at 17:40:44 on 2013-01-09 Microsoft Windows XP Professional  5.1.2600.3.1251.1.1033.18.1015.425 [GMT 2:00] . AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D} FW: avast! Antivirus *Disabled* . ============== Running Processes ================ . C:Program FilesAVAST SoftwareAvastAvastSvc.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSsystem32ASTSRV.EXE C:WINDOWSsystem32NLSSRV32.EXE C:WINDOWSSystem32alg.exe C:WINDOWSExplorer.EXE C:WINDOWSsystem32hkcmd.exe C:WINDOWSsystem32igfxpers.exe C:WINDOWSRTHDCPL.EXE C:Program FilesAVAST SoftwareAvastavastUI.exe C:Program FilesuTorrentuTorrent.exe C:WINDOWSsystem32ctfmon.exe C:WINDOWSDatecsFlex2K.exe C:Program FilesMcAfee Security Scan3.0.207SSScheduler.exe C:WINDOWSsystem32wuauclt.exe C:Program FilesMozilla Firefoxfirefox.exe C:Program FilesMozilla Firefoxplugin-container.exe C:WINDOWSsystem32wbemwmiprvse.exe C:WINDOWSSystem32svchost.exe -k netsvcs C:WINDOWSsystem32svchost.exe -k WudfServiceGroup C:WINDOWSsystem32svchost.exe -k NetworkService C:WINDOWSsystem32svchost.exe -k LocalService C:WINDOWSsystem32svchost.exe -k LocalService C:WINDOWSsystem32svchost.exe -k imgsvc . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.bg/ uInternet Connection Wizard,ShellNext = hxxp://www.bsplayer.com/bsplayer/registration-successful.html?lng=English.lng BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:program filescommon filesadobeacrobatactivexAcroIEHelperShim.dll BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:program filesavast softwareavastaswWebRepIE.dll TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:program filesavast softwareavastaswWebRepIE.dll uRun: [uTorrent] "c:program filesutorrentuTorrent.exe" uRun: [ctfmon.exe] c:windowssystem32ctfmon.exe mRun: [skyTel] SkyTel.EXE mRun: [igfxtray] c:windowssystem32igfxtray.exe mRun: [igfxhkcmd] c:windowssystem32hkcmd.exe mRun: [igfxpers] c:windowssystem32igfxpers.exe mRun: [RTHDCPL] RTHDCPL.EXE mRun: [Alcmtr] ALCMTR.EXE mRun: [NeroFilterCheck] c:windowssystem32NeroCheck.exe mRun: [avast] "c:program filesavast softwareavastavastUI.exe" /nogui mRun: [Adobe Reader Speed Launcher] "c:program filesadobereader 9.0readerReader_sl.exe" mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe" mRunOnce: ["c:documents and settingsdarinadesktopнова папкаc:documents and settingsdarinadesktopнова папкаnitro_pdf_professional7.exe"] "c:documents and settingsdarinadesktopнова папкаc:documents and settingsdarinadesktopнова папкаnitro_pdf_professional7.exe" dRun: [CTFMON.EXE] c:windowssystem32CTFMON.EXE StartupFolder: c:documents and settingsdarinastart menuprogramsstartupPowerReg Scheduler.exe StartupFolder: c:docume~1alluse~1startm~1programsstartupflexty~1.lnk - c:windowsdatecsFlex2K.exe StartupFolder: c:docume~1alluse~1startm~1programsstartupmcafee~1.lnk - c:program filesmcafee security scan3.0.207SSScheduler.exe uPolicies-Explorer: NoDriveTypeAutoRun = dword:145 mPolicies-Explorer: NoDriveTypeAutoRun = dword:145 IE: E&xport to Microsoft Excel - c:progra~1micros~2office11EXCEL.EXE/3000 IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:program filesmessengermsmsgs.exe TCP: Interfaces{892F6D15-7005-47BC-A5D9-19B42EB085C8} : NameServer = 77.76.182.1,77.76.146.254 Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll Notify: igfxcui - igfxdev.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:windowssystem32WPDShServiceObj.dll . ================= FIREFOX =================== . FF - ProfilePath - c:documents and settingsdarinaapplication datamozillafirefoxprofiles7kzgdv8q.default FF - prefs.js: browser.startup.homepage - www.searchqu.com FF - plugin: c:program filesadobereader 9.0readerairnppdf32.dll FF - plugin: c:windowssystem32macromedflashNPSWF32_11_5_502_146.dll . ============= SERVICES / DRIVERS =============== . R1 aswSnx;aswSnx;c:windowssystem32driversaswSnx.sys [2012-7-7 738504] R1 aswSP;aswSP;c:windowssystem32driversaswSP.sys [2012-7-7 361032] R2 aswFsBlk;aswFsBlk;c:windowssystem32driversaswFsBlk.sys [2012-7-7 21256] R2 avast! Antivirus;avast! Antivirus;c:program filesavast softwareavastAvastSvc.exe [2012-7-7 44808] R2 nlsX86cc;NLS Service;c:windowssystem32NLSSRV32.EXE [2012-6-24 69640] S2 Scutum50;Scutum50 NDIS Protocol Driver;c:windowssystem32driversscutum50.sys --> c:windowssystem32driversScutum50.sys [?] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2013-1-6 251400] S3 McComponentHostService;McAfee Security Scan Component Host Service;c:program filesmcafee security scan3.0.207McCHSvc.exe [2011-6-17 237008] S3 rt2870;Ralink 802.11n USB Wireless LAN Card Driver;c:windowssystem32driversrt2870.sys --> c:windowssystem32driversrt2870.sys [?] . =============== Created Last 30 ================ . 2013-01-06 15:25:14  74248  ----a-w-  c:windowssystem32FlashPlayerCPLApp.cpl 2013-01-06 15:25:14  697864  ----a-w-  c:windowssystem32FlashPlayerApp.exe 2013-01-05 19:32:16  --------  d-----w-  c:documents and settingsall usersapplication dataMcAfee Security Scan 2013-01-05 19:32:02  --------  d-----w-  c:program filesMcAfee Security Scan 2013-01-05 10:18:12  21104  ----a-w-  c:windowssystem32driversmbam.sys 2013-01-05 10:18:12  --------  d-----w-  c:program filesMalwarebytes' Anti-Malware 2012-12-23 16:00:03  --------  d-----w-  c:documents and settingsall usersapplication dataYTD Video Downloader 2012-12-23 15:59:55  --------  d-----w-  c:program filesGreenTree Applications . ==================== Find3M  ==================== . 2012-12-16 12:23:59  290560  ----a-w-  c:windowssystem32atmfd.dll 2012-11-13 01:25:12  1866368  ----a-w-  c:windowssystem32win32k.sys 2012-11-02 02:02:42  375296  ----a-w-  c:windowssystem32dpnet.dll 2012-11-01 12:17:54  916992  ----a-w-  c:windowssystem32wininet.dll 2012-11-01 12:17:54  43520  ----a-w-  c:windowssystem32licmgr10.dll 2012-11-01 12:17:54  1469440  ------w-  c:windowssystem32inetcpl.cpl 2012-11-01 00:35:34  385024  ------w-  c:windowssystem32html.iec 2012-10-30 22:51:58  738504  ----a-w-  c:windowssystem32driversaswSnx.sys 2012-10-30 22:51:07  41224  ----a-w-  c:windowsavastSS.scr . ============= FINISH: 17:41:06.26 ===============  

 

. UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-09-30.01) . Microsoft Windows XP Professional Boot Device: DeviceHarddiskVolume1 Install Date: 7/3/2012 7:27:15 PM System Uptime: 1/9/2013 3:22:17 PM (2 hours ago) . Motherboard: Gigabyte Technology Co., Ltd. |  | 945GZM-S2 Processor: Intel® Pentium® Dual  CPU  E2140  @ 1.60GHz | Socket 775 | 1607/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 39 GiB total, 31.943 GiB free. D: is FIXED (NTFS) - 59 GiB total, 36.846 GiB free. E: is FIXED (NTFS) - 68 GiB total, 35.661 GiB free. F: is FIXED (NTFS) - 67 GiB total, 7.353 GiB free. G: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP2: 1/8/2013 7:14:06 PM - Контролна точка на системата RP3: 1/9/2013 3:55:21 PM - Revo Uninstaller's restore point - Adobe Flash Player 11 Plugin . ==== Installed Programs ====================== . П°єµт ·° съІјµстёјѕст ·° сёстµј°т° Office 2007 Adobe Flash Player 11 Plugin Adobe Reader 9.5.2 avast! Free Antivirus Easy CD-DA Extractor 10 Favorite-Games 5.20 FlexType 2K High Definition Audio Driver Package - KB835221 Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB2633952) Hotfix for Windows XP (KB2779562) Hotfix for Windows XP (KB915865) Hotfix for Windows XP (KB952287) Hotfix for Windows XP (KB954550-v5) Hotfix for Windows XP (KB961118) Hotfix for Windows XP (KB976002-v5) Image to PDF Converter Free 5.0 Intel® Graphics Media Accelerator Driver K-Lite Codec Pack 3.4.0 Full Malwarebytes Anti-Malware, Іµрсёя 1.70.0.1100 McAfee Security Scan Plus Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office 2003 Bulgarian User Interface Pack Microsoft Office Professional Edition 2003 Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Mozilla Firefox 14.0.1 (x86 bg) Nero 6 Ultra Edition REALTEK GbE & FE Ethernet PCI NIC Driver Realtek High Definition Audio Driver Revo Uninstaller 1.85 Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) Security Update for Microsoft Windows (KB2564958) Security Update for Windows Internet Explorer 7 (KB2544521) Security Update for Windows Internet Explorer 7 (KB2699988) Security Update for Windows Internet Explorer 7 (KB2722913) Security Update for Windows Internet Explorer 8 (KB2510531) Security Update for Windows Internet Explorer 8 (KB2544521) Security Update for Windows Internet Explorer 8 (KB2618444) Security Update for Windows Internet Explorer 8 (KB2722913) Security Update for Windows Internet Explorer 8 (KB2761465) Security Update for Windows Internet Explorer 8 (KB982381) Security Update for Windows Media Player (KB2378111) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player (KB975558) Security Update for Windows Media Player (KB978695) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows XP (KB2079403) Security Update for Windows XP (KB2115168) Security Update for Windows XP (KB2229593) Security Update for Windows XP (KB2296011) Security Update for Windows XP (KB2347290) Security Update for Windows XP (KB2360937) Security Update for Windows XP (KB2387149) Security Update for Windows XP (KB2393802) Security Update for Windows XP (KB2419632) Security Update for Windows XP (KB2423089) Security Update for Windows XP (KB2440591) Security Update for Windows XP (KB2443105) Security Update for Windows XP (KB2476490) Security Update for Windows XP (KB2478960) Security Update for Windows XP (KB2478971) Security Update for Windows XP (KB2479943) Security Update for Windows XP (KB2481109) Security Update for Windows XP (KB2483185) Security Update for Windows XP (KB2485663) Security Update for Windows XP (KB2506212) Security Update for Windows XP (KB2507618) Security Update for Windows XP (KB2507938) Security Update for Windows XP (KB2508429) Security Update for Windows XP (KB2509553) Security Update for Windows XP (KB2510581) Security Update for Windows XP (KB2535512) Security Update for Windows XP (KB2536276-v2) Security Update for Windows XP (KB2544893-v2) Security Update for Windows XP (KB2566454) Security Update for Windows XP (KB2570947) Security Update for Windows XP (KB2584146) Security Update for Windows XP (KB2585542) Security Update for Windows XP (KB2592799) Security Update for Windows XP (KB2598479) Security Update for Windows XP (KB2603381) Security Update for Windows XP (KB2618451) Security Update for Windows XP (KB2619339) Security Update for Windows XP (KB2620712) Security Update for Windows XP (KB2624667) Security Update for Windows XP (KB2631813) Security Update for Windows XP (KB2646524) Security Update for Windows XP (KB2653956) Security Update for Windows XP (KB2655992) Security Update for Windows XP (KB2659262) Security Update for Windows XP (KB2661637) Security Update for Windows XP (KB2676562) Security Update for Windows XP (KB2685939) Security Update for Windows XP (KB2691442) Security Update for Windows XP (KB2695962) Security Update for Windows XP (KB2698365) Security Update for Windows XP (KB2705219) Security Update for Windows XP (KB2707511) Security Update for Windows XP (KB2709162) Security Update for Windows XP (KB2712808) Security Update for Windows XP (KB2719985) Security Update for Windows XP (KB2723135) Security Update for Windows XP (KB2724197) Security Update for Windows XP (KB2727528) Security Update for Windows XP (KB2731847) Security Update for Windows XP (KB2753842-v2) Security Update for Windows XP (KB2758857) Security Update for Windows XP (KB2770660) Security Update for Windows XP (KB2779030) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB954459) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956744) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB970430) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973869) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977816) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978338) Security Update for Windows XP (KB978542) Security Update for Windows XP (KB978706) Security Update for Windows XP (KB979309) Security Update for Windows XP (KB979482) Security Update for Windows XP (KB979687) Security Update for Windows XP (KB981322) Security Update for Windows XP (KB981997) Security Update for Windows XP (KB982132) Security Update for Windows XP (KB982665) Skype™ 5.0 Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Windows Internet Explorer 8 (KB2598845) Update for Windows XP (KB2345886) Update for Windows XP (KB2467659) Update for Windows XP (KB2661254-v2) Update for Windows XP (KB2718704) Update for Windows XP (KB2736233) Update for Windows XP (KB2749655) Update for Windows XP (KB898461) Update for Windows XP (KB951978) Update for Windows XP (KB955759) Update for Windows XP (KB968389) Update for Windows XP (KB971029) Update for Windows XP (KB973687) Update for Windows XP (KB973815) WebFldrs XP Windows Internet Explorer 7 Windows Internet Explorer 7 Language Interface Pack (BGR) Windows Internet Explorer 8 Windows Media Format 11 runtime Windows Media Player 11 WinRAR 4.11 (32-±ётѕІ° Іµрсёя) XML Paper Specification Shared Components Pack 1.0 YTD Video Downloader 3.9.6 µTorrent . ==== Event Viewer Messages From Past Week ======== . 1/8/2013 7:14:15 PM, error: sr [1]  - The System Restore filter encountered the unexpected error '0xC0000034' while processing the file '_filelst.cfg' on the volume 'HarddiskVolume1'.  It has stopped monitoring the volume. 1/8/2013 5:34:16 PM, error: sr [1]  - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'.  It has stopped monitoring the volume. 1/5/2013 9:04:52 PM, error: Windows Update Agent [20]  - Installation Failure: Windows failed to install the following update with error 0x8007f0f4: Security Update for Windows XP (KB2686509). 1/5/2013 12:45:21 PM, error: Service Control Manager [7000]  - The Scutum50 NDIS Protocol Driver service failed to start due to the following error:  The system cannot find the file specified. . ==== End Of File ===========================  

 

 

 

 

Здравейте....!

Дневниците не показват наличие на зловреден софтуер. Вижда се McAfee Security Scan Plus който най-вероятно се е лепнал при инсталирането на някоя програма..!Той обаче може да влиза в конфликт с Антивирусната ви програма и затова препоръчвам да го деинсталирате...как става това: start бутон => Control panel => Add or Remove Programs  и премахвате McAfee Security Scan Plus.Рестартирате компютъра си.Изтегляте и запомняте на декстопа си този инструмент MCPR.exe. Стартирайте инструмента и след като процеса по деинсталацията приключи ще се появи прозорец със следното съобщение : "Reboot required to remove all files. Would you like to reboot now?" Потвърдете и след рестарта деинсталацията е приключила..!

 

Освен това искам да проверим за уязвимости вашата система с помоща на този инструмент:

 

Изтеглете Security Check (автор: screen317) от тук или от тук и го запишете на десктопа.

• Кликнете два пъти върху SecurityCheck.exe и следвайте инструкциите.
• Когато програмата завърши работата си, ще се отвори един текстов документ: checkup.txt.
• Копирайте съдържанието на checkup.txt с Копирай (Copy) и с Постави (Paste) го поставете в следващия си коментар.

След това ще преценим как ще продължим...!

Ето ме. Стигнах до момента на изтегляне на Security Check, но не ми зарежда нито една от двете страници, които ми предлагате. А други страници, като google, зарежда без проблем. А сега?

Ето ме. Стигнах до момента на изтегляне на Security Check, но не ми зарежда нито една от двете страници, които ми предлагате. А други страници, като google, зарежда без проблем. А сега?

 

И двата линка които съм дал са активни и се отварят без проблем.....!

 

 

Изтеглете OTL (от OldTimer) и го запазете на вашия десктоп.

Кликнете два пъти върху OTL.exe, за да стартирате програмата.

Сложете отметки преди следните неща:

• Scan all users
• Lop check
• Purity check

Под секцията Extra Registry, изберете Use SafeList

Кликнете на Run Scan и изчакайте да завърши сканирането. (може да отнеме 10-15 минути)

Когато завърши, публикувайте следните два лог файла:

• OTL.txt (намира се на вашия десктоп)
• Extras.txt (ще Ви се отвори автоматично)

OTL logfile created on: 1/9/2013 7:05:40 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:Documents and SettingsdarinaDesktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000402 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
1015.48 Mb Total Physical Memory | 490.95 Mb Available Physical Memory | 48.35% Memory free
2.39 Gb Paging File | 1.98 Gb Available in Paging File | 82.98% Paging File free
Paging file location(s): C:pagefile.sys 1524 3048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:WINDOWS | %ProgramFiles% = C:Program Files
Drive C: | 39.06 Gb Total Space | 31.90 Gb Free Space | 81.66% Space Free | Partition Type: NTFS
Drive D: | 58.59 Gb Total Space | 36.85 Gb Free Space | 62.88% Space Free | Partition Type: NTFS
Drive E: | 68.36 Gb Total Space | 35.66 Gb Free Space | 52.17% Space Free | Partition Type: NTFS
Drive F: | 66.86 Gb Total Space | 7.35 Gb Free Space | 11.00% Space Free | Partition Type: NTFS
 
Computer Name: L-F33C335C16E84 | User Name: darina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013/01/09 19:02:37 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:Documents and SettingsdarinaDesktopOTL.exe
PRC - [2012/10/31 00:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- C:Program FilesAVAST SoftwareAvastAvastUI.exe
PRC - [2012/10/31 00:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:Program FilesAVAST SoftwareAvastAvastSvc.exe
PRC - [2012/07/14 02:13:42 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:Program FilesMozilla Firefoxfirefox.exe
PRC - [2012/07/04 20:24:29 | 000,224,000 | ---- | M] () -- C:Program FilesuTorrentuTorrent.exe
PRC - [2012/06/24 20:47:42 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:WINDOWSsystem32NLSSRV32.EXE
PRC - [2009/09/15 09:17:16 | 000,061,760 | ---- | M] (Nalpeiron Ltd.) -- C:WINDOWSsystem32ASTSRV.EXE
PRC - [2008/04/14 04:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:WINDOWSexplorer.exe
PRC - [2000/12/30 11:39:58 | 000,151,552 | ---- | M] () -- C:WINDOWSDatecsFlex2K.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013/01/09 11:57:15 | 002,043,904 | ---- | M] () -- C:Program FilesAVAST SoftwareAvastdefs13010900algo.dll
MOD - [2012/07/14 02:14:07 | 002,003,424 | ---- | M] () -- C:Program FilesMozilla Firefoxmozjs.dll
MOD - [2012/07/04 20:24:29 | 000,224,000 | ---- | M] () -- C:Program FilesuTorrentuTorrent.exe
MOD - [2012/02/17 19:55:35 | 000,166,912 | ---- | M] () -- C:Program FilesWinRARRarExt.dll
MOD - [2006/08/23 07:28:37 | 000,048,128 | ---- | M] () -- C:Program FilesEasy CD-DA Extractor 10ezcddax10.dll
MOD - [2000/12/30 11:39:58 | 000,151,552 | ---- | M] () -- C:WINDOWSDatecsFlex2K.exe
MOD - [2000/12/12 23:55:40 | 000,028,672 | ---- | M] () -- C:WINDOWSsystem32newdll.dll
 
 
========== Services (SafeList) ==========
 
SRV - [2013/01/09 17:32:25 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:WINDOWSsystem32MacromedFlashFlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/10/31 00:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:Program FilesAVAST SoftwareAvastAvastSvc.exe -- (avast! Antivirus)
SRV - [2012/06/24 20:47:42 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:WINDOWSsystem32NLSSRV32.EXE -- (nlsX86cc)
SRV - [2009/09/15 09:17:16 | 000,061,760 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:WINDOWSsystem32ASTSRV.EXE -- (astcc)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | Auto | Stopped] -- System32DriversScutum50.sys -- (Scutum50)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32DRIVERSrt2870.sys -- (rt2870)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012/10/31 00:51:58 | 000,738,504 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:WINDOWSSystem32driversaswSnx.sys -- (aswSnx)
DRV - [2012/10/31 00:51:58 | 000,361,032 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:WINDOWSSystem32driversaswSP.sys -- (aswSP)
DRV - [2012/10/31 00:51:58 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:WINDOWSSystem32driversaswTdi.sys -- (aswTdi)
DRV - [2012/10/31 00:51:58 | 000,035,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:WINDOWSSystem32driversaswRdr.sys -- (aswRdr)
DRV - [2012/10/31 00:51:57 | 000,097,608 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:WINDOWSSystem32driversaswmon2.sys -- (aswMon2)
DRV - [2012/10/31 00:51:56 | 000,025,256 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:WINDOWSSystem32driversaavmker4.sys -- (Aavmker4)
DRV - [2012/10/31 00:51:56 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:WINDOWSSystem32driversaswFsBlk.sys -- (aswFsBlk)
DRV - [2006/12/14 10:44:06 | 000,085,120 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:WINDOWSsystem32driversRtnicxp.sys -- (RTL8023xp)
DRV - [2006/12/08 09:02:02 | 000,067,072 | R--- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:WINDOWSsystem32driversRtlh86.sys -- (RTL8169)
DRV - [2006/11/15 08:34:00 | 004,225,920 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:WINDOWSsystem32driversRtkHDAud.Sys -- (IntcAzAudAddService)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM..SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM..SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM..SearchScopes{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU.DEFAULTSoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyEnable" = 0
 
IE - HKUS-1-5-18SoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyEnable" = 0
 
 
 
IE - HKUS-1-5-21-527237240-884357618-1417001333-1003SOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://www.google.bg/
IE - HKUS-1-5-21-527237240-884357618-1417001333-1003..SearchScopes,DefaultScope = {99FC7A11-EEB9-440D-B1ED-8294A62D1051}
IE - HKUS-1-5-21-527237240-884357618-1417001333-1003..SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKUS-1-5-21-527237240-884357618-1417001333-1003..SearchScopes{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SKPT_bgBG491
IE - HKUS-1-5-21-527237240-884357618-1417001333-1003..SearchScopes{99FC7A11-EEB9-440D-B1ED-8294A62D1051}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
IE - HKUS-1-5-21-527237240-884357618-1417001333-1003SoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "www.searchqu.com"
FF - user.js - File not found
 
FF - [email protected]/FlashPlayer: C:WINDOWSsystem32MacromedFlashNPSWF32_11_5_502_146.dll ()
FF - [email protected]/WPF,version=3.5: C:WINDOWSMicrosoft.NETFrameworkv3.5Windows Presentation FoundationNPWPF.dll (Microsoft Corporation)
FF - HKLMSoftwareMozillaPluginsAdobe Reader: C:Program FilesAdobeReader 9.0ReaderAIRnppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINEsoftwaremozillaMozilla Firefox 14.0.1extensionsComponents: C:Program FilesMozilla Firefoxcomponents [2013/01/05 20:32:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaMozilla Firefox 14.0.1extensionsPlugins: C:Program FilesMozilla Firefoxplugins
 
[2013/01/05 20:33:15 | 000,000,000 | ---D | M] (No name found) -- C:Documents and SettingsdarinaApplication DataMozillaExtensions
[2013/01/05 20:32:19 | 000,000,000 | ---D | M] (No name found) -- C:Program FilesMozilla Firefoxextensions
[2012/07/14 02:15:45 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:Program Filesmozilla firefoxcomponentsbrowsercomps.dll
[2012/07/14 03:36:03 | 000,001,083 | ---- | M] () -- C:Program Filesmozilla firefoxsearchplugins911bg.xml
[2012/07/14 03:36:03 | 000,002,442 | ---- | M] () -- C:Program Filesmozilla firefoxsearchpluginsdiribg.xml
[2012/07/14 03:36:03 | 000,001,515 | ---- | M] () -- C:Program Filesmozilla firefoxsearchpluginspe-bg.xml
[2012/07/14 03:36:03 | 000,001,857 | ---- | M] () -- C:Program Filesmozilla firefoxsearchpluginsportalbgdict.xml
[2012/07/14 03:36:03 | 000,001,220 | ---- | M] () -- C:Program Filesmozilla firefoxsearchpluginswikipedia-bg.xml
 
O1 HOSTS File: ([2001/08/23 11:00:00 | 000,000,734 | ---- | M]) - C:WINDOWSsystem32driversetchosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:Program FilesAVAST SoftwareAvastaswWebRepIE.dll (AVAST Software)
O3 - HKLM..Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:Program FilesAVAST SoftwareAvastaswWebRepIE.dll (AVAST Software)
O3 - HKUS-1-5-21-527237240-884357618-1417001333-1003..ToolbarWebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKLM..Run: [Alcmtr] C:WINDOWSAlcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..Run: [avast] C:Program FilesAVAST SoftwareAvastavastUI.exe (AVAST Software)
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe (Ahead Software Gmbh)
O4 - HKUS-1-5-21-527237240-884357618-1417001333-1003..Run: [uTorrent] C:Program FilesuTorrentuTorrent.exe ()
O4 - HKLM..RunOnce: ["C:Documents and SettingsdarinaDesktopНова папкаC:Documents and SettingsdarinaDesktopНова папкаnitro_pdf_professional7.exe"] "C:Documents and SettingsdarinaDesktopНова папкаC:Documents and SettingsdarinaDesktopНова папкаnitro_pdf_professional7.exe" File not found
O4 - Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupFlexType 2K.lnk = C:WINDOWSDatecsFlex2K.exe ()
O4 - Startup: C:Documents and SettingsdarinaStart MenuProgramsStartupPowerReg Scheduler.exe ()
O7 - HKU.DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 - HKUS-1-5-18SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 - HKUS-1-5-19SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 - HKUS-1-5-20SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 - HKUS-1-5-21-527237240-884357618-1417001333-1003SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O17 - HKLMSystemCCSServicesTcpipParametersInterfaces{892F6D15-7005-47BC-A5D9-19B42EB085C8}: NameServer = 77.76.182.1,77.76.146.254
O18 - ProtocolHandlerskype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program FilesCommon FilesSkypeSkype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:WINDOWSexplorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:WINDOWSsystem32userinit.exe) - C:WINDOWSsystem32userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Моята текуща начална страница) - About:Home
O24 - Desktop WallPaper: C:Documents and SettingsdarinaLocal SettingsApplication DataMicrosoftWallpaper1.bmp
O24 - Desktop BackupWallPaper: C:Documents and SettingsdarinaLocal SettingsApplication DataMicrosoftWallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/07/03 18:21:51 | 000,000,000 | ---- | M] () - C:AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM..comfile [open] -- "%1" %*
O35 - HKLM..exefile [open] -- "%1" %*
O37 - HKLM...com [@ = comfile] -- "%1" %*
O37 - HKLM...exe [@ = exefile] -- "%1" %*
O38 - SubSystemsWindows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystemsWindows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013/01/09 19:02:04 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:Documents and SettingsdarinaDesktopOTL.exe
[2013/01/09 18:46:49 | 003,177,840 | ---- | C] (McAfee, Inc.) -- C:Documents and SettingsdarinaDesktopMCPR.exe
[2013/01/09 18:27:58 | 000,000,000 | ---D | C] -- C:Documents and SettingsdarinaDesktopSam form testove
[2013/01/09 17:01:45 | 000,000,000 | R--D | C] -- C:Documents and SettingsdarinaMy DocumentsMy Videos
[2013/01/09 17:01:45 | 000,000,000 | R--D | C] -- C:Documents and SettingsdarinaStart MenuProgramsAdministrative Tools
[2013/01/09 16:40:32 | 000,492,146 | R--- | C] (Swearware) -- C:Documents and SettingsdarinaDesktopdds.exe
[2013/01/06 17:25:14 | 000,697,864 | ---- | C] (Adobe Systems Incorporated) -- C:WINDOWSSystem32FlashPlayerApp.exe
[2013/01/06 17:25:14 | 000,074,248 | ---- | C] (Adobe Systems Incorporated) -- C:WINDOWSSystem32FlashPlayerCPLApp.cpl
[2013/01/05 21:42:55 | 000,000,000 | ---D | C] -- C:Documents and SettingsLocalServiceApplication DataMcAfee
[2013/01/05 20:33:04 | 000,000,000 | ---D | C] -- C:Documents and SettingsdarinaApplication DataMozilla
[2013/01/05 20:32:16 | 000,000,000 | ---D | C] -- C:Program FilesMozilla Firefox
[2013/01/05 12:18:16 | 000,000,000 | ---D | C] -- C:Documents and SettingsAll UsersStart MenuProgramsMalwarebytes' Anti-Malware
[2013/01/05 12:18:12 | 000,021,104 | ---- | C] (Malwarebytes Corporation) -- C:WINDOWSSystem32driversmbam.sys
[2013/01/05 12:18:12 | 000,000,000 | ---D | C] -- C:Program FilesMalwarebytes' Anti-Malware
[2012/12/23 18:00:03 | 000,000,000 | ---D | C] -- C:Documents and SettingsAll UsersApplication DataYTD Video Downloader
[2012/12/23 17:59:58 | 000,000,000 | ---D | C] -- C:Documents and SettingsAll UsersStart MenuProgramsYTD Video Downloader
[2012/12/23 17:59:55 | 000,000,000 | ---D | C] -- C:Program FilesGreenTree Applications
[74 C:WINDOWSSystem32*.tmp files -> C:WINDOWSSystem32*.tmp -> ]
[3 C:WINDOWS*.tmp files -> C:WINDOWS*.tmp -> ]
[1 C:Documents and Settingsdarina*.tmp files -> C:Documents and Settingsdarina*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013/01/09 19:02:37 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:Documents and SettingsdarinaDesktopOTL.exe
[2013/01/09 18:49:15 | 000,000,830 | ---- | M] () -- C:WINDOWStasksAdobe Flash Player Updater.job
[2013/01/09 18:46:50 | 003,177,840 | ---- | M] (McAfee, Inc.) -- C:Documents and SettingsdarinaDesktopMCPR.exe
[2013/01/09 18:45:57 | 000,000,260 | ---- | M] () -- C:WINDOWStasksWGASetup.job
[2013/01/09 18:45:46 | 000,002,206 | ---- | M] () -- C:WINDOWSSystem32wpa.dbl
[2013/01/09 18:45:43 | 000,000,364 | -H-- | M] () -- C:WINDOWStasksavast! Emergency Update.job
[2013/01/09 18:45:25 | 000,002,048 | --S- | M] () -- C:WINDOWSbootstat.dat
[2013/01/09 17:32:25 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:WINDOWSSystem32FlashPlayerApp.exe
[2013/01/09 17:32:24 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:WINDOWSSystem32FlashPlayerCPLApp.cpl
[2013/01/09 16:40:33 | 000,492,146 | R--- | M] (Swearware) -- C:Documents and SettingsdarinaDesktopdds.exe
[2013/01/06 17:56:19 | 000,000,000 | -H-- | M] () -- C:WINDOWSSystem32driversUMDFMsft_User_WpdMtpDr_01_00_00.Wdf
[2013/01/05 21:27:33 | 000,210,488 | ---- | M] () -- C:WINDOWSSystem32FNTCACHE.DAT
[2013/01/05 21:05:26 | 000,001,355 | ---- | M] () -- C:WINDOWSimsins.BAK
[2013/01/05 21:03:39 | 000,448,342 | ---- | M] () -- C:WINDOWSSystem32perfh009.dat
[2013/01/05 21:03:39 | 000,074,324 | ---- | M] () -- C:WINDOWSSystem32perfc009.dat
[2013/01/05 20:32:19 | 000,000,742 | ---- | M] () -- C:Documents and SettingsdarinaApplication DataMicrosoftInternet ExplorerQuick LaunchMozilla Firefox.lnk
[2013/01/03 21:29:03 | 000,000,202 | ---- | M] () -- C:WINDOWSNeroDigital.ini
[2012/12/28 15:05:24 | 000,000,680 | ---- | M] () -- C:WINDOWSCDPLAYER.UNI
[2012/12/16 14:23:59 | 000,290,560 | ---- | M] (Adobe Systems Incorporated) -- C:WINDOWSSystem32atmfd.dll
[2012/12/14 16:49:28 | 000,021,104 | ---- | M] (Malwarebytes Corporation) -- C:WINDOWSSystem32driversmbam.sys
[74 C:WINDOWSSystem32*.tmp files -> C:WINDOWSSystem32*.tmp -> ]
[3 C:WINDOWS*.tmp files -> C:WINDOWS*.tmp -> ]
[1 C:Documents and Settingsdarina*.tmp files -> C:Documents and Settingsdarina*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013/01/08 13:42:04 | 000,002,347 | ---- | C] () -- C:Documents and SettingsAll UsersStart MenuProgramsAdobe Reader 9.lnk
[2013/01/06 17:25:15 | 000,000,830 | ---- | C] () -- C:WINDOWStasksAdobe Flash Player Updater.job
[2013/01/05 20:32:19 | 000,000,742 | ---- | C] () -- C:Documents and SettingsdarinaApplication DataMicrosoftInternet ExplorerQuick LaunchMozilla Firefox.lnk
[2012/09/03 20:34:57 | 000,000,056 | -H-- | C] () -- C:WINDOWSSystem32ezsidmv.dat
[2012/07/11 18:18:50 | 000,000,202 | ---- | C] () -- C:WINDOWSNeroDigital.ini
[2012/07/04 18:44:47 | 000,003,072 | ---- | C] () -- C:WINDOWSSystem32iacenc.dll
[2012/07/04 17:43:18 | 000,000,072 | ---- | C] () -- C:WINDOWSVSWizard.ini
[2012/07/04 08:06:13 | 000,163,840 | ---- | C] () -- C:WINDOWSSystem32unrar.dll
[2012/07/04 08:06:11 | 001,559,040 | ---- | C] () -- C:WINDOWSSystem32xvidcore.dll
[2012/07/04 08:06:11 | 000,282,624 | ---- | C] () -- C:WINDOWSSystem32xvidvfw.dll
[2012/07/04 08:06:10 | 003,596,288 | ---- | C] () -- C:WINDOWSSystem32qt-dx331.dll
[2012/07/04 08:06:10 | 000,007,680 | ---- | C] () -- C:WINDOWSSystem32ff_vfw.dll
[2012/07/04 08:04:37 | 000,000,376 | ---- | C] () -- C:WINDOWSODBC.INI
[2012/07/04 08:02:17 | 000,028,672 | ---- | C] () -- C:WINDOWSSystem32newdll.dll
[2012/07/04 07:46:53 | 000,049,152 | R--- | C] () -- C:WINDOWSSystem32ChCfg.exe
[2012/07/03 21:14:14 | 000,004,161 | ---- | C] () -- C:WINDOWSODBCINST.INI
[2012/07/03 21:12:51 | 000,210,488 | ---- | C] () -- C:WINDOWSSystem32FNTCACHE.DAT
[2012/07/03 18:31:41 | 000,056,320 | ---- | C] () -- C:Documents and SettingsdarinaLocal SettingsApplication DataDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/07/03 18:27:20 | 000,002,048 | --S- | C] () -- C:WINDOWSbootstat.dat
[2012/07/03 18:18:54 | 000,021,640 | ---- | C] () -- C:WINDOWSSystem32emptyregdb.dat
 
========== ZeroAccess Check ==========
 
[2012/07/04 08:31:12 | 000,000,227 | RHS- | M] () -- C:WINDOWSassemblyDesktop.ini
 
[HKEY_CURRENT_USERSoftwareClassesclsid{42aedc87-2188-41fd-b9a3-0c966feabec1}InProcServer32]
 
[HKEY_CURRENT_USERSoftwareClassesclsid{fbeb8a05-beee-4442-804e-409d6c4515e9}InProcServer32]
 
[HKEY_LOCAL_MACHINESoftwareClassesclsid{42aedc87-2188-41fd-b9a3-0c966feabec1}InProcServer32]
"" = %SystemRoot%system32shdocvw.dll -- [2008/04/14 04:42:06 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINESoftwareClassesclsid{5839FCA9-774D-42A1-ACDA-D6A79037F57F}InProcServer32]
"" = C:WINDOWSsystem32wbemfastprox.dll -- [2009/02/09 14:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINESoftwareClassesclsid{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}InProcServer32]
"" = C:WINDOWSsystem32wbemwbemess.dll -- [2008/04/14 04:42:10 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2012/07/07 13:31:06 | 000,000,000 | ---D | M] -- C:Documents and SettingsAll UsersApplication DataAVAST Software
[2012/07/06 14:56:39 | 000,000,000 | ---D | M] -- C:Documents and SettingsAll UsersApplication DataNitro PDF
[2012/07/06 15:39:47 | 000,000,000 | ---D | M] -- C:Documents and SettingsAll UsersApplication DataPhotoCollageMax
[2012/11/12 18:59:04 | 000,000,000 | ---D | M] -- C:Documents and SettingsAll UsersApplication DataTEMP
[2012/12/28 20:01:29 | 000,000,000 | ---D | M] -- C:Documents and SettingsAll UsersApplication DataYTD Video Downloader
[2012/07/11 18:06:52 | 000,000,000 | ---D | M] -- C:Documents and SettingsAll UsersApplication DataYTD YouTube Downloader & Converter
[2012/10/21 14:50:24 | 000,000,000 | ---D | M] -- C:Documents and SettingsdarinaApplication Datacom.siem-design.eBook
[2012/07/07 13:15:17 | 000,000,000 | ---D | M] -- C:Documents and SettingsdarinaApplication Datadclogs
[2012/09/01 16:34:23 | 000,000,000 | ---D | M] -- C:Documents and SettingsdarinaApplication DataDownloaded Installations
[2012/07/04 17:46:11 | 000,000,000 | ---D | M] -- C:Documents and SettingsdarinaApplication DataLeadertech
[2013/01/09 19:05:41 | 000,000,000 | ---D | M] -- C:Documents and SettingsdarinaApplication DatauTorrent
[2012/07/12 06:59:25 | 000,000,000 | ---D | M] -- C:Documents and SettingsdarinaApplication Datawtxpcom
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 112 bytes -> C:Documents and SettingsAll UsersApplication DataTEMP:D1B5B4F1

< End of report >
 

 

 

 

 

OTL Extras logfile created on: 1/9/2013 7:05:40 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:Documents and SettingsdarinaDesktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000402 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
1015.48 Mb Total Physical Memory | 490.95 Mb Available Physical Memory | 48.35% Memory free
2.39 Gb Paging File | 1.98 Gb Available in Paging File | 82.98% Paging File free
Paging file location(s): C:pagefile.sys 1524 3048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:WINDOWS | %ProgramFiles% = C:Program Files
Drive C: | 39.06 Gb Total Space | 31.90 Gb Free Space | 81.66% Space Free | Partition Type: NTFS
Drive D: | 58.59 Gb Total Space | 36.85 Gb Free Space | 62.88% Space Free | Partition Type: NTFS
Drive E: | 68.36 Gb Total Space | 35.66 Gb Free Space | 52.17% Space Free | Partition Type: NTFS
Drive F: | 66.86 Gb Total Space | 7.35 Gb Free Space | 11.00% Space Free | Partition Type: NTFS
 
Computer Name: L-F33C335C16E84 | User Name: darina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINESOFTWAREClasses<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
 
[HKEY_USERSS-1-5-21-527237240-884357618-1417001333-1003SOFTWAREClasses<extension>]
.html [@ = FirefoxHTML] -- C:Program FilesMozilla Firefoxfirefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINESOFTWAREClasses<key>shell[command]command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%system32rundll32.exe %SystemRoot%system32shell32.dll,OpenAs_RunDLL %1
Directory [!ezcddaxa] -- "C:Program FilesEasy CD-DA Extractor 10convert.exe" "%1" ()
Directory [!ezcddaxb] -- "C:Program FilesEasy CD-DA Extractor 10burn.exe" "%1" ()
Directory [!ezcddaxc] -- "C:Program FilesEasy CD-DA Extractor 10burn2.exe" "%1" ()
Directory [find] -- %SystemRoot%Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]
"FirstRunDisabled" = 1
"UpdatesDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoring]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringAhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringKasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringMcAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringMcAfeeFirewall]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringPandaAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringPandaFirewall]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSophosAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSymantecAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSymantecFirewall]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTinyFirewall]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTrendAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTrendFirewall]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringZoneLabsFirewall]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSr]
"Start" = 0
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyDomainProfile]
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyDomainProfileAuthorizedApplicationsList]
"%windir%Network Diagnosticxpnetdiag.exe" = %windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%system32sessmgr.exe" = %windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList]
"%windir%Network Diagnosticxpnetdiag.exe" = %windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%system32sessmgr.exe" = %windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:Program FilesSkypePhoneSkype.exe" = C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"C:Program FilesWinampwinamp.exe" = C:Program FilesWinampwinamp.exe:*:Enabled:Winamp
"C:Program FilesuTorrentuTorrent.exe" = C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent -- ()
"C:Program FilesSkypePlugin ManagerskypePM.exe" = C:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager -- (Skype Technologies)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YTD Video Downloader 3.9.6
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Graphics Media Accelerator Driver
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0402-0000-0000000FF1CE}" = Пакет за съвместимост за системата Office 2007
"{901E0402-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Bulgarian User Interface Pack
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1033-7B44-A95000000001}" = Adobe Reader 9.5.2
"{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}" = REALTEK GbE & FE Ethernet PCI NIC Driver
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"avast" = avast! Free Antivirus
"Easy CD-DA Extractor 10" = Easy CD-DA Extractor 10
"Favorite-Games_is1" = Favorite-Games 5.20
"FlexType 2K" = FlexType 2K
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"IE7-LIP" = Windows Internet Explorer 7 Language Interface Pack (BGR)
"ie8" = Windows Internet Explorer 8
"Image to PDF Converter Free_is1" = Image to PDF Converter Free 5.0
"KLiteCodecPack_is1" = K-Lite Codec Pack 3.4.0 Full
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware, версия 1.70.0.1100
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 14.0.1 (x86 bg)" = Mozilla Firefox 14.0.1 (x86 bg)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Revo Uninstaller" = Revo Uninstaller 1.85
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR 4.11 (32-битова версия)
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERSS-1-5-21-527237240-884357618-1417001333-1003SOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"uTorrent" = µTorrent
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 10/13/2012 1:54:14 PM | Computer Name = L-F33C335C16E84 | Source = Application Error | ID = 1000
Description = Faulting application mcuicnt.exe, version 4.0.228.0, faulting module
 kernel32.dll, version 5.1.2600.5781, fault address 0x00012afb.
 
Error - 10/13/2012 1:55:00 PM | Computer Name = L-F33C335C16E84 | Source = Application Error | ID = 1000
Description = Faulting application mcuicnt.exe, version 4.0.228.0, faulting module
 kernel32.dll, version 5.1.2600.5781, fault address 0x00012afb.
 
Error - 10/13/2012 1:55:07 PM | Computer Name = L-F33C335C16E84 | Source = Application Error | ID = 1001
Description = Fault bucket -1806529690.
 
Error - 10/13/2012 2:10:25 PM | Computer Name = L-F33C335C16E84 | Source = Application Error | ID = 1000
Description = Faulting application jbrowser.exe, version 1.0.0.1, faulting module
 kernel32.dll, version 5.1.2600.5781, fault address 0x00012afb.
 
Error - 10/13/2012 2:10:39 PM | Computer Name = L-F33C335C16E84 | Source = Application Error | ID = 1000
Description = Faulting application jbrowser.exe, version 1.0.0.1, faulting module
 kernel32.dll, version 5.1.2600.5781, fault address 0x00012afb.
 
Error - 10/13/2012 2:10:42 PM | Computer Name = L-F33C335C16E84 | Source = Application Error | ID = 1001
Description = Fault bucket 1842922418.
 
Error - 10/13/2012 2:10:55 PM | Computer Name = L-F33C335C16E84 | Source = Application Error | ID = 1000
Description = Faulting application jbrowser.exe, version 1.0.0.1, faulting module
 kernel32.dll, version 5.1.2600.5781, fault address 0x00012afb.
 
Error - 10/13/2012 2:10:58 PM | Computer Name = L-F33C335C16E84 | Source = Application Error | ID = 1001
Description = Fault bucket 1842922418.
 
[ System Events ]
Error - 1/8/2013 11:34:10 AM | Computer Name = L-F33C335C16E84 | Source = Service Control Manager | ID = 7000
Description = The Scutum50 NDIS Protocol Driver service failed to start due to the
 following error: %%2
 
Error - 1/8/2013 11:34:16 AM | Computer Name = L-F33C335C16E84 | Source = sr | ID = 1
Description = The System Restore filter encountered the unexpected error '0xC0000001'
 while processing the file '' on the volume 'HarddiskVolume1'.  It has stopped monitoring
 the volume.
 
Error - 1/8/2013 12:16:57 PM | Computer Name = L-F33C335C16E84 | Source = Service Control Manager | ID = 7000
Description = The Scutum50 NDIS Protocol Driver service failed to start due to the
 following error: %%2
 
Error - 1/8/2013 12:17:04 PM | Computer Name = L-F33C335C16E84 | Source = sr | ID = 1
Description = The System Restore filter encountered the unexpected error '0xC0000001'
 while processing the file '' on the volume 'HarddiskVolume1'.  It has stopped monitoring
 the volume.
 
Error - 1/8/2013 1:14:01 PM | Computer Name = L-F33C335C16E84 | Source = Service Control Manager | ID = 7000
Description = The Scutum50 NDIS Protocol Driver service failed to start due to the
 following error: %%2
 
Error - 1/8/2013 1:14:15 PM | Computer Name = L-F33C335C16E84 | Source = sr | ID = 1
Description = The System Restore filter encountered the unexpected error '0xC0000034'
 while processing the file '_filelst.cfg' on the volume 'HarddiskVolume1'.  It has
 stopped monitoring the volume.
 
Error - 1/8/2013 1:58:23 PM | Computer Name = L-F33C335C16E84 | Source = Service Control Manager | ID = 7000
Description = The Scutum50 NDIS Protocol Driver service failed to start due to the
 following error: %%2
 
Error - 1/9/2013 1:45:50 AM | Computer Name = L-F33C335C16E84 | Source = Service Control Manager | ID = 7000
Description = The Scutum50 NDIS Protocol Driver service failed to start due to the
 following error: %%2
 
Error - 1/9/2013 9:22:46 AM | Computer Name = L-F33C335C16E84 | Source = Service Control Manager | ID = 7000
Description = The Scutum50 NDIS Protocol Driver service failed to start due to the
 following error: %%2
 
Error - 1/9/2013 12:45:39 PM | Computer Name = L-F33C335C16E84 | Source = Service Control Manager | ID = 7000
Description = The Scutum50 NDIS Protocol Driver service failed to start due to the
 following error: %%2
 
 
< End of report >
 

Стартирайте отново OTL, копирайте (Copy) и поставете (Paste) скриптовия текст от текстовото поле по-долу под колонката Custom Scans/Fixes, като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта.

 

:OTLO3 - HKUS-1-5-21-527237240-884357618-1417001333-1003..ToolbarWebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.[2013/01/09 18:46:49 | 003,177,840 | ---- | C] (McAfee, Inc.) -- C:Documents and SettingsdarinaDesktopMCPR.exe[2013/01/05 21:42:55 | 000,000,000 | ---D | C] -- C:Documents and SettingsLocalServiceApplication DataMcAfee@Alternate Data Stream - 112 bytes -> C:Documents and SettingsAll UsersApplication DataTEMP:D1B5B4F1:filesrecycler /alldrivesipconfig /flushdns /c:Commands[purity][emptytemp][clearallrestorepoints][Reboot]

 

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix
Windows ще се рестартира и ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

All processes killed
========== OTL ==========
Registry value HKEY_USERSS-1-5-21-527237240-884357618-1417001333-1003SoftwareMicrosoftInternet ExplorerToolbarWebBrowser{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{2318C2B1-4965-11D4-9B18-009027A5CD4F} not found.
C:Documents and SettingsdarinaDesktopMCPR.exe moved successfully.
C:Documents and SettingsLocalServiceApplication DataMcAfeesacore folder moved successfully.
C:Documents and SettingsLocalServiceApplication DataMcAfee folder moved successfully.
ADS C:Documents and SettingsAll UsersApplication DataTEMP:D1B5B4F1 deleted successfully.
========== FILES ==========
C:RECYCLERS-1-5-21-527237240-884357618-1417001333-1003 folder moved successfully.
C:RECYCLER folder moved successfully.
D:RECYCLERS-1-5-21-527237240-884357618-1417001333-1003 folder moved successfully.
D:RECYCLERS-1-5-21-1292428093-725345543-1417001333-1003 folder moved successfully.
D:RECYCLER folder moved successfully.
E:RECYCLERS-1-5-21-527237240-884357618-1417001333-1003 folder moved successfully.
E:RECYCLERS-1-5-21-1292428093-725345543-1417001333-1003 folder moved successfully.
E:RECYCLER folder moved successfully.
F:RECYCLERS-1-5-21-823518204-1078081533-725345543-1003 folder moved successfully.
F:RECYCLERS-1-5-21-527237240-884357618-1417001333-1003 folder moved successfully.
F:RECYCLERS-1-5-21-1606980848-651377827-682003330-1003 folder moved successfully.
F:RECYCLERS-1-5-21-1292428093-725345543-1417001333-1003 folder moved successfully.
F:RECYCLER folder moved successfully.
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:Documents and SettingsdarinaDesktopcmd.bat deleted successfully.
C:Documents and SettingsdarinaDesktopcmd.txt deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: darina
->Temp folder emptied: 11026897 bytes
->Temporary Internet Files folder emptied: 5102973 bytes
->FireFox cache emptied: 216290399 bytes
->Flash cache emptied: 70431 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33237 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2402044 bytes
%systemroot%System32 .tmp files removed: 39384089 bytes
%systemroot%System32dllcache .tmp files removed: 0 bytes
%systemroot%System32drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2784227 bytes
%systemroot%system32configsystemprofileLocal SettingsTemp folder emptied: 158257462 bytes
%systemroot%system32configsystemprofileLocal SettingsTemporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 415.00 mb
 
Restore point Set: OTL Restore Point
 
OTL by OldTimer - Version 3.2.69.0 log created on 01092013_201039

FilesFolders moved on Reboot...
File move failed. C:WINDOWStemp_avast_Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...
 

Още веднъж системата е чиста и не се виждат активни зарази..!Какво е положението със системата ви..?

Вие сте невероятен!!!

 

Всичко е супер. Играта във FB зарежда без проблем. Нета е бърз. 

 

Не знам какво да кажа, освен БЛАГОДАРЯ!!!!!!

Радвам се...!Да приключим:

 

Изтеглете OTCleanIt или от тук,стартирайте и натиснете

 

Изтрийте всичко друго което е останало след процедурите (използвано в лечението).Препоръчвам програмата Malwarebytes' Anti-Malware да остане на вашия компютър и периодично да сканирате системата си с нея (поне един -два пъти в седмицата),като не забравяйте да обновите дефинициите и преди всяко сканиране..!

 

Това е от мен..!Пожелавам лека вечер и безопасен интернет..!

Още веднъж благодаря!!! Лека вечер и на Вас!