OTL Extras logfile created on: 20.01.2013 г. 08:19:46 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:UsersHomeDesktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000402 | Country: България | Language: BGR | Date Format: dd.MM.yyyy 'г.'
 
3,86 Gb Total Physical Memory | 2,11 Gb Available Physical Memory | 54,83% Memory free
7,71 Gb Paging File | 5,66 Gb Available in Paging File | 73,40% Paging File free
Paging file location(s): ?:pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:Windows | %ProgramFiles% = C:Program Files (x86)
Drive C: | 221,72 Gb Total Space | 163,91 Gb Free Space | 73,92% Space Free | Partition Type: NTFS
Drive D: | 244,04 Gb Total Space | 43,96 Gb Free Space | 18,01% Space Free | Partition Type: NTFS
 
Computer Name: SPP-100910 | User Name: Home | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINESOFTWAREClasses<extension>]
.html[@ = ChromeHTML] -- C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google Inc.)
.url[@ = InternetShortcut] -- C:WindowsSysNativerundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINESOFTWAREClasses<extension>]
.cpl [@ = cplfile] -- C:WindowsSysWow64control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google Inc.)
 
[HKEY_USERSS-1-5-21-1379428694-1995560643-2943919451-1000SOFTWAREClasses<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINESOFTWAREClasses<key>shell[command]command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %SystemRoot%system32mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:Program Files (x86)GoogleChromeApplicationchrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%System32InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:WindowsSystem32rundll32.exe" "C:WindowsSystem32ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:WindowsSystem32rundll32.exe" "C:WindowsSystem32mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%system32rundll32.exe %SystemRoot%system32shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:VideoLANVLCvlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:VideoLANVLCvlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINESOFTWAREClasses<key>shell[command]command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%System32control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:Program Files (x86)GoogleChromeApplicationchrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%System32InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%system32rundll32.exe %SystemRoot%system32shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:VideoLANVLCvlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:VideoLANVLCvlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoring]
 
64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterSvc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterSvcVol]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]
"AntiVirusDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallDisableNotify" = 0
"FirewallOverride" = 1
"UpdatesDisableNotify" = 0
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterSvc]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSystemRestore]
"DisableSR" = 0
 
========== Firewall Settings ==========
 
64bit: [HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewall]
 
64bit: [HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewallDomainProfile]
 
64bit: [HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewallStandardProfile]
 
[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewall]
 
[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewallDomainProfile]
 
[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewallStandardProfile]
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyDomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileGloballyOpenPortsList]
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyPublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyDomainProfileAuthorizedApplicationsList]
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList]
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyFirewallRules]
"{01AEF829-E416-43D3-86CD-FA4C3FED0134}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%system32svchost.exe |
"{03E57F57-99C0-4A15-98F6-D74A1708C99B}" = lport=2869 | protocol=6 | dir=in | app=system |
"{0AB112E8-C567-4D9E-AE78-2791B8F4F6FC}" = lport=999 | protocol=6 | dir=in | app=%systemroot%windowsmobilewmdhost.exe |
"{0DEFB429-B980-400F-B442-D87174D1D853}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%system32svchost.exe |
"{1375C5C3-E5B0-489A-9C57-2258A001DC79}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%system32svchost.exe |
"{14C1C6D0-CFB7-4B3D-B2A4-77E0781531D0}" = lport=54010 | protocol=6 | dir=in | name=samsung allshare slideshow service |
"{16C2DFFF-779B-45FE-8948-2BECF4445085}" = lport=137 | protocol=17 | dir=in | app=system |
"{16F620A7-8895-47C4-96B0-7BAE5F1D3E98}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%system32svchost.exe |
"{180B1077-4EE7-4E6C-8104-7B898202750A}" = lport=138 | protocol=17 | dir=in | app=system |
"{18600AA3-9B1E-477B-8AE8-87C2D1A38CB5}" = lport=445 | protocol=6 | dir=in | app=system |
"{1DF768E0-8F33-484A-8B86-31BA0134EB76}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%system32svchost.exe |
"{2057DF82-3F55-41F8-80E5-450200A15530}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%system32svchost.exe |
"{24207C5B-034E-4B12-B444-74D5E6F06B28}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%windowsmobilewmdhost.exe |
"{280CB57F-9CD9-4BD9-9EAF-296840E7A66A}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{2B95B400-8174-4B54-84FD-D2B50852F0C4}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%system32svchost.exe |
"{2D78B3E8-26EF-4165-A7E8-D1576E68B2A3}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%system32svchost.exe |
"{33F4520A-BF4C-4944-9B41-A0EF3C78BC1D}" = rport=10243 | protocol=6 | dir=out | app=system |
"{36E1F57E-F983-4DC1-8E9B-9461C89C3050}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%system32svchost.exe |
"{37454973-1816-4980-B838-506A830A4CB0}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%system32svchost.exe |
"{37DA15CC-F359-4426-BC85-94B609044316}" = rport=138 | protocol=17 | dir=out | app=system |
"{46A856D6-0627-454B-BAB8-D93ED691140E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%system32svchost.exe |
"{47E4DA46-21C4-43F0-91F9-021F9DC60299}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%system32svchost.exe |
"{4A08314B-AD4E-437E-971E-1C9725390E0D}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%system32svchost.exe |
"{4A578AA9-223E-4EBE-8093-69046FBB8456}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%system32svchost.exe |
"{571E8E80-B01C-496F-AB2A-D3856668B64B}" = lport=2869 | protocol=6 | dir=in | app=system |
"{58662A17-85DD-411A-9615-3679625A7172}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%system32svchost.exe |
"{5A4990C2-173F-44DA-A8FC-70068A13F0D0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%system32svchost.exe |
"{5ABB7A47-874E-4D09-83F5-E62FD8E49E19}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%system32svchost.exe |
"{5C37F1D2-29EA-4D4B-AA5D-03A6BB6BFF96}" = rport=2869 | protocol=6 | dir=out | app=system |
"{67C164FB-081B-4FC3-85C9-421E1E1BBD8C}" = lport=2869 | protocol=6 | dir=in | app=system |
"{6E3AB7E7-ADAB-4BE3-9CB1-5FAD7325849A}" = rport=137 | protocol=17 | dir=out | app=system |
"{6E5A3A2A-947D-403B-86DA-99D0B9531434}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%system32svchost.exe |
"{6FC79231-1CA0-4403-95C9-64F5230E9058}" = lport=2869 | protocol=6 | dir=in | app=system |
"{72BA2984-87FD-48ED-9CE5-D2E66D842AA6}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{7CCC2EBF-DD45-4961-AD3D-BD1CF8B1B449}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{7FE45608-C19D-48F1-8C47-A96D6B629974}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%system32svchost.exe |
"{808306CF-7F24-4A27-B97E-D4361AF211CC}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%system32svchost.exe |
"{82AA745B-C466-44A6-A8F0-39DA9DC33F94}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%system32svchost.exe |
"{8415E21A-ECE7-47A6-BEFC-8A237ED4326E}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%system32svchost.exe |
"{8723ADEC-C275-4A0B-AAE6-D33ED10DA87B}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{8CFD3580-FC6C-4A01-819C-5E84C9584074}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%system32spoolsv.exe |
"{974B33E9-7CCE-4C3F-8010-4BD829181FD1}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%system32svchost.exe |
"{9864D4F2-106E-4FA0-9D4A-90F1A4F9116A}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%system32svchost.exe |
"{9F8ADE79-3BD2-4280-B86A-674F520ACA3B}" = rport=2869 | protocol=6 | dir=out | app=system |
"{AFDD922E-A793-4E57-BD0A-FD347AE2A4A0}" = rport=2869 | protocol=6 | dir=out | app=system |
"{B2B3A251-0D60-4C87-A3D3-20E84A80A8A1}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%system32svchost.exe |
"{B6B1CA70-9548-4F6B-B638-AD353E3AF379}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{BE937C73-BA29-44AB-AF80-F27F482CC064}" = rport=445 | protocol=6 | dir=out | app=system |
"{C31F9117-12D9-4346-B590-DAADBF2DA901}" = lport=139 | protocol=6 | dir=in | app=system |
"{C4CA0C5E-114B-4442-AC85-2C52E86C961E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%system32svchost.exe |
"{C877B95A-EE05-4861-BE78-726661B0EC39}" = rport=139 | protocol=6 | dir=out | app=system |
"{C9B929DB-3246-4DDF-9E20-400D6674CE0F}" = lport=10243 | protocol=6 | dir=in | app=system |
"{CBE6F60D-2E4C-424F-A4B2-C5DD38FF71FD}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%system32svchost.exe |
"{CF303208-CD96-45D3-A14D-A60741CB19E4}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%system32svchost.exe |
"{D4DE6F5A-1F5C-429D-9EF6-F67DE5E1A7E8}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%system32svchost.exe |
"{D4F23B59-EAD9-48E4-A0EE-D7FD1946C2E4}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%system32svchost.exe |
"{E325417E-D40D-4F59-B0BB-857592CEA51D}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%windowsmobilewmdcbase.exe,-4006 |
"{EA196D3F-0498-476E-820A-4E4043715BCE}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%system32svchost.exe |
"{F13E8BBC-15C8-45B1-9A8B-7A23FB8D9860}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{FCC66062-4545-4A57-A967-872590F9C094}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%system32svchost.exe |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyFirewallRules]
"{04D89CD8-8672-456D-BA5D-AA95D56EFDF7}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{074689C1-1EB3-4CE4-AC94-30F1F22F5833}" = protocol=17 | dir=out | app=%programfiles%windows media playerwmplayer.exe |
"{0935BB01-9B9F-448D-A216-B0AA69423296}" = protocol=6 | dir=in | app=c:program files (x86)vmwarevmware workstationvmware-authd.exe |
"{0F491634-6C2C-4945-831A-9372F6BFA548}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{0FD15B5E-6ABC-4D6D-89A3-87FFE2D432D3}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{10FD2AB3-3445-45B0-B446-7E0BFA27D998}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{17243D16-D384-4F62-B10F-2D21760EDB59}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{1CC6240C-4D1A-4818-B086-4BCCC21DCC01}" = protocol=58 | dir=in | [email protected],-148 |
"{1D1D7253-BC97-4316-AFA4-2F73E026C6BC}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{1D29079B-3C15-4893-AC81-0331A002835A}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{1DB05F46-9606-4321-AE0F-9BB20E7C9AC1}" = protocol=6 | dir=in | app=c:htcipcmonitor.exe |
"{1DBCF084-A2F8-4F8C-BF99-68CE25953FD6}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{1F6EA127-1E97-480C-AA40-A5CD17BDE344}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%system32svchost.exe |
"{23E80305-9578-47CD-BDA4-E5D8A33245D9}" = protocol=6 | dir=out | app=system |
"{2471BDD3-5EA0-4959-B4B3-2B37579A10DB}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{249E087E-1E87-4F17-9AD3-70A0FA6F53BA}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%system32svchost.exe |
"{255A3FA3-ABB6-402B-A9F1-9E9F764EB243}" = protocol=1 | dir=out | [email protected],-28544 |
"{2BA9CBD4-4521-4C66-920E-82985D107150}" = protocol=17 | dir=out | app=%programfiles(x86)%windows media playerwmplayer.exe |
"{31C221B8-56A0-438A-97E8-C92663344373}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%system32svchost.exe |
"{32CE4D0E-2005-41E6-B39D-2E05177DA1BA}" = dir=in | app=c:program files (x86)windows livecontactswlcomm.exe |
"{32D2BF4A-8440-4CBE-A400-6D7AC7907967}" = dir=in | app=c:program files (x86)skypeplugin managerskypepm.exe |
"{377F583B-CD1C-4E97-8FC8-51E7A817D0E4}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{42D3CED0-C7A0-4DB3-B289-3505F8697C1A}" = protocol=17 | dir=in | app=c:home media serverhms.exe |
"{472DCD5A-D147-43BA-B204-4ABCD5585584}" = protocol=58 | dir=in | [email protected],-148 |
"{4E3C56CA-A8E2-4935-8ED8-19EFFEA1FE5F}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%system32svchost.exe |
"{5273B180-BB53-46BC-B1DB-FD52C5EC7E83}" = protocol=6 | dir=out | app=%programfiles%windows media playerwmplayer.exe |
"{52F08D88-4C91-4932-B8DB-5535FF2B7D78}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{57EA9585-D9FA-4E3B-B9F5-A4115DEE00D2}" = protocol=17 | dir=in | app=c:htcipcmonitor.exe |
"{5A09475F-8CE5-4A21-B339-DCCD4DC0D56C}" = protocol=6 | dir=in | app=e:englishfsearch_en.exe |
"{5D3CCC69-D07B-4459-9710-AD75008015D2}" = protocol=17 | dir=in | app=%programfiles%windows media playerwmpnetwk.exe |
"{5E15D246-B743-437B-A3FF-B38A6170E81E}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%system32svchost.exe |
"{5ECC5847-FE6A-4A16-BC7F-BD816056C83D}" = protocol=17 | dir=in | app=c:program files (x86)vmwarevmware workstationvmware-authd.exe |
"{600EE52B-7E2B-44A0-A770-887533274027}" = protocol=17 | dir=in | app=c:program files (x86)vmwarevmware workstationvmware-authd.exe |
"{654CD0C1-9004-4198-A6B8-C132E77E0905}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{65DE2973-DF0D-4520-AD50-0F9120968E53}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{66830417-543B-4F3C-8309-1AD33132523F}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{6A0145A6-0F00-42B6-89C8-E42A691CAE41}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{6E7AEE87-418E-48CD-8EC4-0F3A509F4610}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{7074C4F9-45E2-4E4A-BE9D-00A89DF733D4}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{747A1CBE-EE47-4625-906B-545E97604051}" = protocol=6 | dir=in | app=c:program files (x86)tvmobilibintvmobiliservice.exe |
"{74D58D6A-82BB-410D-8347-0F360589D045}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{80B523D6-885C-4088-A6FC-FBF8B1A09303}" = protocol=17 | dir=in | app=%programfiles(x86)%windows media playerwmplayer.exe |
"{8109D97F-D88F-4185-B60C-3648174DA542}" = dir=in | app=c:program files (x86)samsungallshareallshareagent.exe |
"{84243412-B316-41BE-B300-77867A7CFAC5}" = dir=in | app=c:program files (x86)samsungallshareallsharedmsallsharedms.exe |
"{850121ED-D2B5-4FFE-85ED-2B5BB40FE387}" = dir=out | svc=sharedaccess | app=%systemroot%system32svchost.exe |
"{85E33E39-8EB1-427A-AAA7-FA4D145AD780}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{87603856-B4F9-4100-A879-9CE1E1957838}" = protocol=17 | dir=in | app=%programfiles%windows media playerwmplayer.exe |
"{889FB991-97E8-4FB9-8207-4ADAC30A463E}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{8B0973B3-249D-405D-8FF8-E94FB1F8DA5A}" = protocol=17 | dir=in | app=c:alcohol softalcohol 52starwindstarwindserviceae.exe |
"{8C2CFD95-97E4-43FD-B7DB-E408987D7C61}" = protocol=6 | dir=in | app=c:program files (x86)vmwarevmware workstationvmware-authd.exe |
"{8C389A63-5DED-42C5-A07B-5B22997DE6D9}" = protocol=6 | dir=in | app=c:home media serverhms.exe |
"{8C4A0E79-C12D-4809-BCAB-C7C0097E3A7F}" = protocol=17 | dir=in | app=c:program files (x86)sony ericssonupdate enginesony ericsson update engine.exe |
"{900B056C-6A4B-4C09-ADDA-5B0F10475E77}" = protocol=6 | dir=out | app=%programfiles(x86)%windows media playerwmplayer.exe |
"{94260A99-D8D0-49BE-972E-2CB130A36C45}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{99F5DEA1-28FC-44DD-AECE-2D34B7AAC464}" = protocol=58 | dir=in | [email protected],-28545 |
"{9B4D1C0B-1523-4F44-BD8D-B4A1355C9C51}" = protocol=6 | dir=in | app=c:program files (x86)tvmobilibintvmobiliservice.exe |
"{9D1A347E-B14A-473D-9D1C-B49774C592D1}" = dir=in | app=c:program files (x86)samsungallshareallshare.exe |
"{A3DEAE09-CC40-461F-86BE-03813895A20F}" = protocol=6 | dir=in | app=c:alcohol softalcohol 52starwindstarwindserviceae.exe |
"{A61473BC-F2D9-43A4-88F2-D01D5F5F3D3A}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{AA62AAAB-662D-4F2D-A323-2E206F61527B}" = protocol=17 | dir=out | app=%programfiles%windows media playerwmplayer.exe |
"{AD44C117-0EB6-4F40-8A15-27D42513EA70}" = protocol=17 | dir=in | app=%programfiles%windows media playerwmplayer.exe |
"{B58AA980-FDBD-4A06-9EA7-7E65D1C92F2B}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{B773B14B-ADB3-4DFA-B69C-E23F1C14763C}" = protocol=6 | dir=in | app=%programfiles%windows media playerwmpnetwk.exe |
"{BA529868-7867-4233-9C5D-3B544815926D}" = protocol=6 | dir=in | app=c:program files (x86)utorrentutorrent.exe |
"{BB6B6CE1-5469-416E-B338-D5175584448B}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{BD73AECB-5BD0-4D21-A8F3-DC3C1313A765}" = protocol=17 | dir=in | app=c:program files (x86)neronero mediahome 4nmmediaserverservice.exe |
"{C06AAA59-54EB-456D-B551-F49DDB8F0A6B}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{C7B8A61B-381E-4328-B352-C3BDF47D4636}" = protocol=17 | dir=out | app=%programfiles%windows media playerwmpnetwk.exe |
"{C7D5E9C2-A5DD-44BB-83B7-5E21C71C5C52}" = protocol=17 | dir=in | app=c:program files (x86)vmwarevmware workstationvmware-authd.exe |
"{C97E41EA-1071-40D3-A11B-235803B8FD41}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{D0A2E95B-E884-4BC0-AF34-D5F790C1BAEE}" = protocol=58 | dir=in | [email protected],-148 |
"{D480F8F2-7F5A-4E13-93AC-BF80AA25349D}" = protocol=6 | dir=out | app=%programfiles%windows media playerwmplayer.exe |
"{DE5EFE53-8A16-44FF-9B7D-EA9A7B563633}" = protocol=6 | dir=in | app=c:program files (x86)vmwarevmware workstationvmware-authd.exe |
"{DE652131-E584-4F5C-852E-54D67455A91A}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{E5CCAE7E-2270-4ED2-8565-AC15CC4FF6DA}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{E80FDE12-3C6A-4DF9-BF6B-35E83E60E4AB}" = protocol=6 | dir=out | app=%programfiles%windows media playerwmpnetwk.exe |
"{E9DF6BCD-1E95-40E4-9A96-B74310B3A12B}" = protocol=6 | dir=in | app=c:program files (x86)sony ericssonupdate enginesony ericsson update engine.exe |
"{ECA92244-496B-423A-9C03-8F5966410F23}" = protocol=17 | dir=in | app=c:program files (x86)utorrentutorrent.exe |
"{EF30F173-5900-46C9-9F40-7723FC8B0CEC}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{F7F9187E-D5F9-48CC-B10A-D16CCEB31366}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{F8186421-ACED-4ED1-9F84-07F9D806BC07}" = protocol=17 | dir=in | app=e:englishfsearch_en.exe |
"{F914DDDB-8C64-4295-82F8-5B586EC593F0}" = protocol=58 | dir=out | [email protected],-28546 |
"{FDEF3932-E408-48C4-9DBD-765CA72EC200}" = dir=in | app=c:program files (x86)skypephoneskype.exe |
"{FE3DD9F0-8C4F-48E0-B478-E417755EA575}" = protocol=1 | dir=in | [email protected],-28543 |
"{FF7FFE4E-C2EA-4157-A00E-FCE4EBD66494}" = protocol=6 | dir=in | app=c:program files (x86)neronero mediahome 4nmmediaserverservice.exe |
"TCP Query User{103473A6-A355-42F6-86B5-C9A211C8164D}E:easysetupassistanteasysetupassistant.exe" = protocol=6 | dir=in | app=e:easysetupassistanteasysetupassistant.exe |
"TCP Query User{54B23CBF-EB2F-435E-A8B9-8EE9988A43E5}C:program files (x86)nokianokia software updaternsu_ui_client.exe" = protocol=6 | dir=in | app=c:program files (x86)nokianokia software updaternsu_ui_client.exe |
"TCP Query User{7A94CF54-0F00-46AA-A971-350044744B96}C:program files (x86)javajre6binjavaw.exe" = protocol=6 | dir=in | app=c:program files (x86)javajre6binjavaw.exe |
"TCP Query User{7E0B54E0-2BA1-4180-9BF2-B5B99DD458A0}C:program files (x86)javajre6binjava.exe" = protocol=6 | dir=in | app=c:program files (x86)javajre6binjava.exe |
"TCP Query User{99149A1F-C704-4637-B6CC-71FEE2A585C3}C:program files (x86)common filesnokiaservice layeransl_host_process.exe" = protocol=6 | dir=in | app=c:program files (x86)common filesnokiaservice layeransl_host_process.exe |
"TCP Query User{A9EDB8DA-CBF8-4EFF-A3EE-40F15930969C}C:strongdc++strongdc.exe" = protocol=6 | dir=in | app=c:strongdc++strongdc.exe |
"TCP Query User{C06312D4-BAF7-42C3-8F0F-FBF5E54B07F9}C:strongdc205strongdc.exe" = protocol=6 | dir=in | app=c:strongdc205strongdc.exe |
"TCP Query User{D178168F-E424-43C8-B486-D8C89093B032}C:home media serverhms.exe" = protocol=6 | dir=in | app=c:home media serverhms.exe |
"TCP Query User{FB27B509-0C4A-4AB9-BCFA-1F2A0CCF5BFF}C:program files (x86)internet exploreriexplore.exe" = protocol=6 | dir=in | app=c:program files (x86)internet exploreriexplore.exe |
"UDP Query User{2B38EAE4-7660-4C8A-A928-87E324F54182}C:home media serverhms.exe" = protocol=17 | dir=in | app=c:home media serverhms.exe |
"UDP Query User{43A03C7A-3698-47F6-9AA4-C814D3C946BA}C:program files (x86)nokianokia software updaternsu_ui_client.exe" = protocol=17 | dir=in | app=c:program files (x86)nokianokia software updaternsu_ui_client.exe |
"UDP Query User{78364D0A-F74D-40C1-8F0D-4AFE0AC5DBCF}C:program files (x86)internet exploreriexplore.exe" = protocol=17 | dir=in | app=c:program files (x86)internet exploreriexplore.exe |
"UDP Query User{82223BA1-F6E4-4817-8470-BEC7AB110CF3}C:strongdc++strongdc.exe" = protocol=17 | dir=in | app=c:strongdc++strongdc.exe |
"UDP Query User{B0F5DFD5-2B64-43E1-B875-E1725098BF89}C:strongdc205strongdc.exe" = protocol=17 | dir=in | app=c:strongdc205strongdc.exe |
"UDP Query User{C250B21F-B92E-4C32-BFEF-2692FB41B95D}C:program files (x86)javajre6binjavaw.exe" = protocol=17 | dir=in | app=c:program files (x86)javajre6binjavaw.exe |
"UDP Query User{DF42F7C9-39B3-4819-8C6A-BE5DDC691EC6}C:program files (x86)common filesnokiaservice layeransl_host_process.exe" = protocol=17 | dir=in | app=c:program files (x86)common filesnokiaservice layeransl_host_process.exe |
"UDP Query User{F5C6C1DB-08EC-43D0-8A3A-D63861E7787B}C:program files (x86)javajre6binjava.exe" = protocol=17 | dir=in | app=c:program files (x86)javajre6binjava.exe |
"UDP Query User{FCEC744D-9F8E-45FA-B302-DE0EDA35D2A0}E:easysetupassistanteasysetupassistant.exe" = protocol=17 | dir=in | app=e:easysetupassistanteasysetupassistant.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{35A50BE1-FDD7-4FC7-CCE5-03D2A63D4CF4}" = AMD Catalyst Install Manager
"{3C32C938-3071-BEF0-1EA5-403A420031A0}" = ccc-utility64
"{3F372A41-8007-012F-F5AE-685F588FC897}" = AMD Media Foundation Decoders
"{489F2C5A-83B9-79D5-714C-1DEF32A898E5}" = ATI AVIVO64 Codecs
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{550331CC-C34B-494F-BCDA-37CE4EF6E924}" = Garmin Communicator Plugin x64
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}" = Windows Mobile Device Center
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.5.7
"{68660049-8D48-427C-9FF7-139D8340CDC0}" = MSVC80_x64
"{6E7F4CA3-B2DE-413C-A7A1-43AA5BE19EA1}" = WIDCOMM Bluetooth Software
"{7251D5AC-C92F-43A2-B8BB-9061383A06E7}" = Microsoft Antimalware Service BG-BG Language Pack
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}" = ASUS Power4Gear Hybrid
"{92DBCA36-9B41-4DD1-941A-AED149DD37F0}" = Windows Mobile Device Center Driver Update
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{AB8C2626-C412-44E8-A3BA-28F201820503}" = Diskeeper 2011
"{C78D3032-9DFD-41D0-9DE9-58EAE750CBA4}" = Microsoft Security Client
"{D8CE69B0-9274-4b8c-BA49-0FF6A20A3C65}" = SAMSUNG SYMBIAN USB Download Driver
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319
"{DC911ADF-7B60-40F2-A112-FB1EB6402D07}" = Microsoft Security Client BG-BG Language Pack
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"05B59228C7E1C21DFBE89260F879BD95880548D8" = Windows Driver Package - Nokia Modem  (10/05/2009 4.2)
"3BA80AB4C7E9F8497C115C844953A3D4BEB84D21" = Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800)
"49CF605F02C7954F4E139D18828DE298CD59217C" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0)
"72A50F48CC5601190B9C4E74D81161693133E7F7" = Windows Driver Package - Nokia Modem  (02/25/2011 7.01.0.9)
"8CDCFB95BB84DD9C0F88F22266A0CA86035E55BA" = Windows Driver Package - Nokia Modem  (06/01/2009 7.01.0.4)
"CNXT_AUDIO_HDA" = Conexant HD Audio
"DE7217D2A8B057F15EC6E52329FDAB84231521E8" = Windows Driver Package - Broadcom (BTHUSB) Bluetooth  (04/08/2010 6.3.5.430)
"E0AC723A3DE3A04256288CADBBB011B112AED454" = Windows Driver Package - Nokia Modem  (02/25/2011 4.7)
"Elantech" = ETDWare PS/2-x64 7.0.5.10_WHQL
"FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D" = Windows Driver Package - Nokia pccsmcfd  (08/22/2008 7.0.0.0)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft Security Client" = Microsoft Security Essentials
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile phone USB driver Drive" = Samsung Mobile phone USB driver Drive Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"USB2.0 UVC VGA WebCam" = USB2.0 UVC VGA WebCam
"WinRAR archiver" = Архиватор WinRAR
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"{003BFBBD-6C67-419E-A24D-0DCAFC3A5249}" = tools-freebsd
"{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}" = ASUS AI Recovery
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0CA2063D-D43F-41F2-A8AC-A3C4A4C722D2}" = Qualcomm Atheros Fast Reconnect
"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation®Store
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{167A1F6A-9BF2-4B24-83DB-C6D659F680EA}" = Media Go
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{197597A7-AD33-4898-9D8E-73066818B464}" = tools-netware
"{1C093153-70A8-4565-8CE3-EF4383701F2D}" = Lovato Easy Fast 1.5.5
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2461E016-9FB4-B233-A74D-91D11A664342}" = CCC Help English
"{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron Flash Media Controller Driver
"{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java 7 Update 5
"{2B81872B-A054-48DA-BE3B-FA5C164C303A}" = ASUS FancyStart
"{32364CEA-7855-4A3C-B674-53D8E9B97936}" = TuneUp Utilities 2012
"{328019A7-0012-401D-96A2-4CDDD02675A8}" = Garmin POI Loader
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{41313863-5170-4D7E-AD60-3CDF4DEBA81F}" = Nokia PC Suite
"{458F399F-62AC-4747-99F5-499BBF073D29}" = Windows Live Writer Resources
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AA68A73-DB9C-439D-9481-981C82BD008B}" = Nokia Connectivity Cable Driver
"{4C378B16-46B7-4DA1-A2CE-2EE676F74680}" = Windows Live UX Platform Language Pack
"{4D568C38-0552-4CDD-A643-01FAFA2957EF}" = Nokia Software Updater
"{51002784-18FA-8FF9-9A1A-2468E7FCA096}" = Catalyst Control Center Graphics Previews Common
"{510D2239-6C2E-457B-9590-485EC552D94D}" = Garmin USB Drivers
"{537575D6-3B96-474C-BD8F-DFF667363DBD}" = Naviextras Toolbox Prerequesities
"{5449FB4F-1802-4D5B-A6D8-087DB1142147}" = Realtek HDMI Audio Driver for ATI
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Земя
"{5B65EF64-1DFA-414A-8C94-7BB726158E21}" = ControlDeck
"{5F3AD065-8455-4C2E-ADD6-44432F861855}" = IPCMonitor_en
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}" = NB Probe
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69fc3b9a-4149-43db-a557-6ed0c8d8ba44}" = Nero MediaHome 4 Help
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{82803FF3-563F-414F-A403-8D4C167D4120}" = Windows Live Mail
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{8fd30512-d659-4d0e-bb33-337efc0fe048}" = Nero MediaHome 4 Essentials
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0402-0000-0000000FF1CE}" = Пакет за съвместимост за системата Office 2007
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}" = JMicron Ethernet Adapter NDIS Driver
"{99ef387e-633e-4cfb-bfa3-ab961b685ddf}" = Nero MediaHome 4
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AAD03E8-4F65-4DE2-8F6C-1B079C0C8521}" = Garmin Lifetime Updater
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = ASUS MultiFrame
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A3FF5CB2-FB35-4658-8751-9EDE1D65B3AA}" = VMware Workstation
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A95A76C9-6F65-477E-83A0-9F884B6DC21B}" = TuneUp Utilities Language Pack (en-US)
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB1C87CB-1807-4CF0-B4C2-CEE14C18CDB4}" = tools-solaris
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
"{AC76BA86-7AD7-1026-7B44-A95000000001}" = Adobe Reader 9.5.2 - Bulgarian
"{AE0F62A7-A1A2-407F-9F4C-48939BD9AD8D}" = tools-winPre2k
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B0AD205F-60D0-4084-AFB8-34D9A706D9A8}" = Windows Live Essentials
"{b2ec4a38-b545-4a00-8214-13fe0e915e6d}" = Advertising Center
"{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation®Network Downloader
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BD4EBDB5-EB14-4120-BB04-BE0A26C7FB3E}" = Windows Live Photo Common
"{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}" = Nero ControlCenter
"{C454E7DD-A09A-6D06-7FF9-59753475FC09}" = Catalyst Control Center
"{CE23BD08-F6FD-3337-D8BC-5B55E69263A5}" = Catalyst Control Center InstallProxy
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CECFDD53-35DB-4235-9363-7964A0C88E0E}" = Samsung PC Studio
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D102611A-6466-4101-A51D-51069303AC65}" = tools-linux
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DA109884-7CDC-5F21-5F0B-742AA74F84E1}" = Catalyst Control Center Localization All
"{dba84796-8503-4ff0-af57-1747dd9a166d}" = Nero Online Upgrade
"{DF47ACA3-7C78-4C08-8007-AC682563C9F1}" = Samsung AllShare
"{DF95F1EE-9ECA-45C1-B02B-F56DDB8A3E83}" = PC Connectivity Solution
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E19490CD-5380-4F37-B0A7-624D635605DC}" = Catalyst Control Center - Branding
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{e8a80433-302b-4ff1-815d-fcc8eac482ff}" = Nero Installer
"{E9ED0801-253D-4FE9-AB20-F63DEFE72547}" = SAMSUNG Mobile USB DRIVER(4.40.7.0) v1.6
"{EA17F4FC-FDBF-4CF8-A529-2D983132D053}" = Skype™ 6.0
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.027
"{f4041dce-3fe1-4e18-8a9e-9de65231ee36}" = Nero ControlCenter
"{FF346339-1C9C-493E-8134-75E08C044ABF}" = Windows 7 Manager
"{FFD9383C-01D5-4897-A954-43AF599AED30}" = tools-windows
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"ESET Online Scanner" = ESET Online Scanner v3
"ETKA" = ETKA
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50
"Google Chrome" = Google Chrome
"InstallShield_{DF47ACA3-7C78-4C08-8007-AC682563C9F1}" = Samsung AllShare
"InstallShield_{E9ED0801-253D-4FE9-AB20-F63DEFE72547}" = SAMSUNG Mobile USB DRIVER(4.40.7.0) v1.6
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 6.3.9
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware, версия 1.70.0.1100
"Mozilla Firefox 4.0b7 (x86 en-US)" = Mozilla Firefox 4.0b7 (x86 en-US)
"Naviextras Toolbox" = Naviextras Toolbox
"Nero8321_Micro_is1" = Nero 8 Micro v8.3.2.1
"Nokia PC Suite" = Nokia PC Suite
"StrongDC++" = StrongDC++ 2.41
"SubtitleWorkshop" = Subtitle Workshop 2.51
"SystemRequirementsLab" = System Requirements Lab
"The KMPlayer" = The KMPlayer 2.9.4.1434
"TuneUp Utilities 2012" = TuneUp Utilities 2012
"Update Engine" = Sony Ericsson Update Engine
"uTorrent" = µTorrent
"VCDS Beta 912.0_is1" = VCDS Beta 912.0
"VLC media player" = VLC media player 2.0.2
"VMware_Workstation" = VMware Workstation
"WinLiveSuite" = Windows Live Essentials
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERSS-1-5-21-1379428694-1995560643-2943919451-1000SOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"Game Organizer" = GameXN GO
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 18.01.2013 г. 15:19:00 | Computer Name = spp-100910 | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "C:UsersHomeDesktopesetsmartinstaller_enu.exe".Error
 in manifest or policy file "" on line .  A component version required by the application
 conflicts with another component version already active.  Conflicting components
are:.  Component 1: C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Component
 2: C:WindowsWinSxSmanifestsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
 
Error - 18.01.2013 г. 15:19:00 | Computer Name = spp-100910 | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "C:UsersHomeDesktopesetsmartinstaller_enu.exe".Error
 in manifest or policy file "" on line .  A component version required by the application
 conflicts with another component version already active.  Conflicting components
are:.  Component 1: C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Component
 2: C:WindowsWinSxSmanifestsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
 
Error - 18.01.2013 г. 20:26:56 | Computer Name = spp-100910 | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "c:program files (x86)ESETeset
 online scannerESETSmartInstaller.exe".Error in manifest or policy file "" on line
 .  A component version required by the application conflicts with another component
 version already active.  Conflicting components are:.  Component 1: C:WindowsWinSxSmanifestsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
Component
 2: C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
 
Error - 18.01.2013 г. 20:27:21 | Computer Name = spp-100910 | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:NokiaNokia PC Suite
7TIS_Windows7PIM.dll".  Dependent Assembly Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
 could not be found.  Please use sxstrace.exe for detailed diagnosis.
 
Error - 18.01.2013 г. 20:28:46 | Computer Name = spp-100910 | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "c:UsersHomeDesktopesetsmartinstaller_enu.exe".Error
 in manifest or policy file "" on line .  A component version required by the application
 conflicts with another component version already active.  Conflicting components
are:.  Component 1: C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Component
 2: C:WindowsWinSxSmanifestsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
 
Error - 18.01.2013 г. 20:28:50 | Computer Name = spp-100910 | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "c:UsersHomeDesktopesetsmartinstaller_enu.exe".Error
 in manifest or policy file "" on line .  A component version required by the application
 conflicts with another component version already active.  Conflicting components
are:.  Component 1: C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Component
 2: C:WindowsWinSxSmanifestsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
 
Error - 18.01.2013 г. 20:28:51 | Computer Name = spp-100910 | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "c:UsersHomeDesktopesetsmartinstaller_enu.exe".Error
 in manifest or policy file "" on line .  A component version required by the application
 conflicts with another component version already active.  Conflicting components
are:.  Component 1: C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Component
 2: C:WindowsWinSxSmanifestsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
 
Error - 18.01.2013 г. 20:28:53 | Computer Name = spp-100910 | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "c:UsersHomeDesktopesetsmartinstaller_enu.exe".Error
 in manifest or policy file "" on line .  A component version required by the application
 conflicts with another component version already active.  Conflicting components
are:.  Component 1: C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Component
 2: C:WindowsWinSxSmanifestsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
 
Error - 18.01.2013 г. 20:28:55 | Computer Name = spp-100910 | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "c:UsersHomeDesktopesetsmartinstaller_enu.exe".Error
 in manifest or policy file "" on line .  A component version required by the application
 conflicts with another component version already active.  Conflicting components
are:.  Component 1: C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Component
 2: C:WindowsWinSxSmanifestsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
 
Error - 19.01.2013 г. 01:42:39 | Computer Name = spp-100910 | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "C:Program Files (x86)ESETESET
 Online ScannerESETSmartInstaller.exe".Error in manifest or policy file "" on line
 .  A component version required by the application conflicts with another component
 version already active.  Conflicting components are:.  Component 1: C:WindowsWinSxSmanifestsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
Component
 2: C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
 
[ System Events ]
Error - 19.01.2013 г. 12:41:43 | Computer Name = spp-100910 | Source = Application Popup | ID = 1060
Description = ??C:ComboFixcatchme.sys has been blocked from loading due to incompatibility
 with this system. Please contact your software vendor for a compatible version
of the driver.
 
Error - 19.01.2013 г. 12:41:43 | Computer Name = spp-100910 | Source = Application Popup | ID = 1060
Description = ??C:ComboFixcatchme.sys has been blocked from loading due to incompatibility
 with this system. Please contact your software vendor for a compatible version
of the driver.
 
Error - 19.01.2013 г. 12:45:28 | Computer Name = spp-100910 | Source = Service Control Manager | ID = 7030
Description = Услуга PEVSystemStart е маркирана като интерактивна услуга. Обаче
системата е конфигурирана да не допуска интерактивни услуги. Тази услуга може да
 не функционира правилно.
 
Error - 19.01.2013 г. 12:48:31 | Computer Name = spp-100910 | Source = Application Popup | ID = 1060
Description = ??C:ComboFixcatchme.sys has been blocked from loading due to incompatibility
 with this system. Please contact your software vendor for a compatible version
of the driver.
 
Error - 19.01.2013 г. 12:48:31 | Computer Name = spp-100910 | Source = Application Popup | ID = 1060
Description = ??C:ComboFixcatchme.sys has been blocked from loading due to incompatibility
 with this system. Please contact your software vendor for a compatible version
of the driver.
 
Error - 19.01.2013 г. 12:49:34 | Computer Name = spp-100910 | Source = Service Control Manager | ID = 7030
Description = Услуга PEVSystemStart е маркирана като интерактивна услуга. Обаче
системата е конфигурирана да не допуска интерактивни услуги. Тази услуга може да
 не функционира правилно.
 
Error - 19.01.2013 г. 12:53:22 | Computer Name = spp-100910 | Source = Service Control Manager | ID = 7000
Description = Услуга Hardlock не може да бъде стартирана поради следната грешка:
%%577
 
Error - 19.01.2013 г. 12:58:00 | Computer Name = spp-100910 | Source = Service Control Manager | ID = 7000
Description = Услуга Windows Presentation Foundation Font Cache 3.0.0.0 не може
да бъде стартирана поради следната грешка: %%31
 
Error - 19.01.2013 г. 13:24:29 | Computer Name = spp-100910 | Source = Service Control Manager | ID = 7000
Description = Услуга Hardlock не може да бъде стартирана поради следната грешка:
%%577
 
Error - 20.01.2013 г. 02:06:16 | Computer Name = spp-100910 | Source = Service Control Manager | ID = 7000
Description = Услуга Hardlock не може да бъде стартирана поради следната грешка:
%%577
 
 
< End of report >
 Не мога да пеистна текста на ОТЛ.

 

 

 

http://www.megashares.com/upostfile.php?fid=37056559

 

 

OTL.Txt

Стартирайте отново OTL, копирайте (Copy) и поставете (Paste) скриптовия текст от текстовото поле по-долу под колонката Custom Scans/Fixes, като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта.

 

:OTLIE - HKLMSOFTWAREMicrosoftInternet ExplorerMain,Search Page = http://webalta.ru/poiskIE - HKLM..SearchScopes{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm007YYbg&ptnrS=HJxdm007YYbg&si=CJXWqsT1orECFUJL3wodBSWZYQ&ptb=1AF84123-D642-4A1E-AC58-E825AD6F5C99&ind=2012071805&n=77edc77d&psa=&st=sb&searchfor={searchTerms}IE - HKU.DEFAULTSOFTWAREMicrosoftInternet ExplorerMain,Default_Page_URL = http://webalta.ruIE - HKU.DEFAULTSOFTWAREMicrosoftInternet ExplorerMain,Default_Search_URL = http://webalta.ru/poiskIE - HKUS-1-5-18SOFTWAREMicrosoftInternet ExplorerMain,Default_Page_URL = http://webalta.ruIE - HKUS-1-5-18SOFTWAREMicrosoftInternet ExplorerMain,Default_Search_URL = http://webalta.ru/poiskIE - HKUS-1-5-19SOFTWAREMicrosoftInternet ExplorerMain,Default_Page_URL = http://webalta.ruIE - HKUS-1-5-19SOFTWAREMicrosoftInternet ExplorerMain,Default_Search_URL = http://webalta.ru/poiskIE - HKUS-1-5-19SOFTWAREMicrosoftInternet ExplorerMain,Search Bar = http://webalta.ru/poiskIE - HKUS-1-5-19SOFTWAREMicrosoftInternet ExplorerMain,Search Page = http://webalta.ru/poiskIE - HKUS-1-5-19SOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://webalta.ruIE - HKUS-1-5-19SOFTWAREMicrosoftInternet ExplorerSearch,SearchAssistant = http://webalta.ru/poiskIE - HKUS-1-5-20SOFTWAREMicrosoftInternet ExplorerMain,Default_Page_URL = http://webalta.ruIE - HKUS-1-5-20SOFTWAREMicrosoftInternet ExplorerMain,Default_Search_URL = http://webalta.ru/poiskIE - HKUS-1-5-20SOFTWAREMicrosoftInternet ExplorerMain,Search Bar = http://webalta.ru/poiskIE - HKUS-1-5-20SOFTWAREMicrosoftInternet ExplorerMain,Search Page = http://webalta.ru/poiskIE - HKUS-1-5-20SOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://webalta.ruIE - HKUS-1-5-20SOFTWAREMicrosoftInternet ExplorerSearch,SearchAssistant = http://webalta.ru/poiskO2 - BHO: (no name) - {312f84fb-8970-4fd3-bddb-7012eac4afc9} - No CLSID value found.O2 - BHO: (no name) - {c547c6c2-561b-4169-a2a5-20ba771ca93b} - No CLSID value found.O4 - Startup: C:UsersHomeAppDataRoamingMicrosoftWindowsStart MenuProgramsStartupadobe_flash_player.exe ()O18:[b]64bit:[/b] - ProtocolHandlermsdaipp - No CLSID value foundO18:[b]64bit:[/b] - ProtocolHandlermsdaipp0x00000001 - No CLSID value foundO18:[b]64bit:[/b] - ProtocolHandlermsdaippoledb - No CLSID value foundO18:[b]64bit:[/b] - ProtocolHandlermso-offdap11 - No CLSID value foundO18:[b]64bit:[/b] - ProtocolHandlerskype4com - No CLSID value foundO18:[b]64bit:[/b] - ProtocolHandlerskype-ie-addon-data - No CLSID value foundO18:[b]64bit:[/b] - ProtocolHandlerwlmailhtml - No CLSID value foundO18 - ProtocolHandlergopher - No CLSID value foundO21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.@Alternate Data Stream - 178 bytes -> C:ProgramDataTEMP:1CE11B51:filesrecycler /alldrivesipconfig /flushdns /c:Commands[purity][emptytemp][clearallrestorepoints][Reboot]

 

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix
Windows ще се рестартира и ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

 

По време на фикса с инструмента, не използвайте компютъра си!

All processes killed
========== OTL ==========
HKLMSOFTWAREMicrosoftInternet ExplorerMainSearch Page| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearchScopes{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} not found.
HKU.DEFAULTSOFTWAREMicrosoftInternet ExplorerMainDefault_Page_URL| /E : value set successfully!
HKU.DEFAULTSOFTWAREMicrosoftInternet ExplorerMainDefault_Search_URL| /E : value set successfully!
HKUS-1-5-18SOFTWAREMicrosoftInternet ExplorerMainDefault_Page_URL| /E : value set successfully!
HKUS-1-5-18SOFTWAREMicrosoftInternet ExplorerMainDefault_Search_URL| /E : value set successfully!
HKUS-1-5-19SOFTWAREMicrosoftInternet ExplorerMainDefault_Page_URL| /E : value set successfully!
HKUS-1-5-19SOFTWAREMicrosoftInternet ExplorerMainDefault_Search_URL| /E : value set successfully!
HKUS-1-5-19SOFTWAREMicrosoftInternet ExplorerMainSearch Bar| /E : value set successfully!
HKUS-1-5-19SOFTWAREMicrosoftInternet ExplorerMainSearch Page| /E : value set successfully!
HKUS-1-5-19SOFTWAREMicrosoftInternet ExplorerMainStart Page| /E : value set successfully!
HKUS-1-5-19SOFTWAREMicrosoftInternet ExplorerSearchSearchAssistant| /E : value set successfully!
HKUS-1-5-20SOFTWAREMicrosoftInternet ExplorerMainDefault_Page_URL| /E : value set successfully!
HKUS-1-5-20SOFTWAREMicrosoftInternet ExplorerMainDefault_Search_URL| /E : value set successfully!
HKUS-1-5-20SOFTWAREMicrosoftInternet ExplorerMainSearch Bar| /E : value set successfully!
HKUS-1-5-20SOFTWAREMicrosoftInternet ExplorerMainSearch Page| /E : value set successfully!
HKUS-1-5-20SOFTWAREMicrosoftInternet ExplorerMainStart Page| /E : value set successfully!
HKUS-1-5-20SOFTWAREMicrosoftInternet ExplorerSearchSearchAssistant| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{312f84fb-8970-4fd3-bddb-7012eac4afc9} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{312f84fb-8970-4fd3-bddb-7012eac4afc9} not found.
Registry key HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{c547c6c2-561b-4169-a2a5-20ba771ca93b} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{c547c6c2-561b-4169-a2a5-20ba771ca93b} not found.
C:UsersHomeAppDataRoamingMicrosoftWindowsStart MenuProgramsStartupadobe_flash_player.exe moved successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesPROTOCOLSHandlergopher deleted successfully.
File ProtocolHandlergopher - No CLSID value found not found.
Registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoadWebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{E6FB5E20-DE35-11CF-9C87-00AA005127ED} not found.
ADS C:ProgramDataTEMP:1CE11B51 deleted successfully.
========== FILES ==========
recycler not found in C:
recycler not found in D:
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:UsersHomeDesktopcmd.bat deleted successfully.
C:UsersHomeDesktopcmd.txt deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Home
->Temp folder emptied: 102400 bytes
->Temporary Internet Files folder emptied: 120584695 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 181607691 bytes
->Google Chrome cache emptied: 7551419 bytes
->Flash cache emptied: 287462 bytes
 
User: NeroMediaHomeUser.4
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
 
User: Public
->Temp folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%System32 .tmp files removed: 0 bytes
%systemroot%System32 (64bit) .tmp files removed: 0 bytes
%systemroot%System32drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 39215 bytes
%systemroot%system32configsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet Files folder emptied: 2266185 bytes
%systemroot%system32configsystemprofileAppDataLocalLowSunJavaDeployment folder emptied: 753 bytes
%systemroot%sysnativeconfigsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet Files folder emptied: 67563 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 298,00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 01202013_135753

 

 

 

FilesFolders moved on Reboot...
C:UsersHomeAppDataLocalTempFXSAPIDebugLogFile.txt moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5Y0VHA4U1xd_arbiter[4].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5WBAE6OMWlike[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5WBAE6OMWlike[2].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5ND24DK93ads[3].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5ND24DK93zrt_lookup[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5NARQ0ZG4ads[7].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5NARQ0ZG4ads[8].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5NARQ0ZG4ads[9].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5NARQ0ZG4fastbutton[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5NARQ0ZG4like[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5NARQ0ZG4VBbzpp2k5li[1].mp3 moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5GR8EIPEWafr[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5G81DIQCQ12[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5G81DIQCQai[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5G81DIQCQai[2].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5G81DIQCQfollow_button.1358555536[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5G81DIQCQxd_arbiter[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5EKG4406Ilogout[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5EKG4406Ilogout_header[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5EKG4406Iradar_bg[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5EKG4406Isearch[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE57CG0M7LNads[5].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE57CG0M7LNads[6].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE57CG0M7LNads[7].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE57CG0M7LNads[8].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE57CG0M7LNafr[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE57CG0M7LNfan[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE57CG0M7LNgoogle_bg[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE57CG0M7LNoauth[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE54U592G29fb_iframe[1].htm moved successfully.
C:UsersHomeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE53T2P2XBLwww.mobile[1].htm moved successfully.
C:Windowstempvmware-SYSTEMvmware-usbarb-SYSTEM-3472.log moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Редактирано 20 януари 201313 г. от pipo_ch (преглед на промените)

Линка който сте дали с дневника от Ауторън  не работи...Качете го отново например тук: http://www.zippyshare.com Извинявам се за неудобството..!

http://www15.zippyshare.com/v/5225757/file.html

 

Ако ти кажа, че за пръв път качвам нещо на подобен сървър, ако пак не стане ще ми трябват инструкции.

Прекрасно се справяте..!

 

Стартирайте отново AutoRuns 11.34 и когато програмата завърши първоначалното сканиране (долу в левия ъгъл изписва Ready.) отивате в секция:

 

Task Scheduler  

 

Маркирате реда =>десен бутон => Delete на следните редове:

 

{4E07E98F-4637-4846-9D9C-36AA84E84153}      File not found: C:SamsungSamsung PC Studio 7PCSuite.exe

{508BEA13-2299-46D8-853E-76D85AA1E0CA}      File not found: D:Torentinero.portable.10.02.11100nero.exe

{64CA4CCF-5F60-4035-8B90-57AA1A917324}      File not found: C:Samsung inovSamsung PC Studio 7LaunchApplication.exe

{81336231-F7F0-4C0A-B57D-FDFBE5F36F4F}      File not found: C:SamsungSamsung PC Studio 7PCSuite.exe

{95AF6EFB-9F94-493F-ACCC-DBBB2B067EF9}      File not found: C:LovatoLovatoFastLovatoI.exe

{A3430FDA-5470-46DC-A1CA-DA744895DF9D}      File not found: C:Samsung inovSamsung PC Studio 7LaunchApplication.exe

{A8FB8CF0-8CCA-45F1-B347-B6E21EBD7379}      File not found: C:LovatoLovatoFastLovatoI.exe

{AA99D8D3-47F0-435F-B0D4-C4C6C88B948E}      File not found: D:Torentinero.portable.10.02.11100nero.exe

{C66F1195-FF3A-4354-9BE2-1020122EF9F0}      File not found: C:SamsungSamsung PC Studio 7PCSuite.exe

{E64A8D81-7BB4-439A-AE0C-8B8B116F519C}      File not found: C:Samsung inovSamsung PC Studio 7LaunchApplication.exe

{F4CBC0B6-65D9-4B29-A314-C48FAEB30473}      File not found: C:SamsungSamsung PC Studio 7PCSuite.exe

 

 

C:UsersHomeAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup :

 

Махате отметката на следния ред: adobe_flash_player.exe      c:usershomeappdataroamingmicrosoftwindowsstart menuprogramsstartupadobe_flash_player.exe

 

 

HKLMSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun   :

 

Махате отметките на следните редове:

AllShareAgent  Samsung AllShare Agent  (Verified) Samsung Electronics CO.  c:program files (x86)samsungallshareallshareagent.exe

Garmin Lifetime Updater  Garmin Lifetime Updater  (Verified) Garmin International  c:program files (x86)garminlifetime updatergarminlifetime.exe

Nero MediaHome 4  Nero MediaHome  (Verified) Nero AG  c:program files (x86)neronero mediahome 4neromediahome.exe

 

Рестартирате компютъра си и проверявате каква е ситуацията..!  
 

 

Здравей Icotonev да те попитам а дали няма да се оправи със една преинсталация на Windowsa защото има много интсталирани програми и те го тормозят доста 

Здравей Icotonev да те попитам а дали няма да се оправи със една преинсталация на Windowsa защото има много интсталирани програми и те го тормозят доста 

 

 

Не, не е необходимо за такива дребни неща да се преинсталира операционната система...!

Това не успях да го намеря?

 

 

C:UsersHomeAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup :

 

Махате отметката на следния ред: adobe_flash_player.exe c:usershomeappdataroamingmicrosoftwindowsstart menuprogramsstartupadobe_flash_player.exe

 

 

http://www40.zippyshare.com/v/90949029/file.html

Ами аз друго нередно не виждам..Как е системата според вас..?Има ли някаква промяна....?Имайте впредвид че още не сме деинсталирали програмите които използвахме до тук...!

Системата определено е по-добре.

Аз щах да питам за деинсталиране на тези програмки.

 

И после остана да почерпя

Да,сега..:

 

Деинсталирайте ComboFix така:

• Натиснете Start ==> Run ==> въведете командата Combofix /Uninstall ==> OK

• Моля, следвайте инструкциите, за да деинсталирате ComboFix. Ще получите съобщение, в което се казва ComboFix е деинсталиран успешно.

Деинсталирайте adwcleaner.exe

• Моля, затворете всички отворени програми и интернет браузъри.
• Кликнете два пъти върху adwcleaner.exe за да стартирате инструмента.
• Кликнете върху Uninstall .
• Щракнете върху Yes за да деинсталирате Adwcleaner

Изтеглете OTCleanIt или от тук,стартирайте и натиснете

 

Изтеглете Delfix.exe и го стартирайте. Сложете отметка пред Remove disinfection tools => натиснете бутона Run Инструмента ще се самоизтрие след като приключи своята задача!

 

 

Изтрийте всичко друго което е останало след процедурите (използвано в лечението).Препоръчвам програмата Malwarebytes' Anti-Malware да остане на вашия компютър и периодично да сканирате системата си с нея (поне един -два пъти в седмицата),като не забравяйте да обновите дефинициите и преди всяко сканиране..!

 

Това е ..Безопасен интернет и лека вечер ви пожелавам..!

 Тази не можах да я открия.

 

Деинсталирайте adwcleaner.exe

• Моля, затворете всички отворени програми и интернет браузъри.
• Кликнете два пъти върху adwcleaner.exe за да стартирате инструмента.
• Кликнете върху Uninstall .
• Щракнете върху Yes за да деинсталирате Adwcleaner

   

   

   

Става въпрос за тази програма: AdwCleaner (by Xplode).....!

Става въпрос за тази програма: AdwCleaner (by Xplode).....!

Зная, но просто не мога да я открия, може да съм я деинсталирал по- рано.

Възможно е...!