Дано сега ме разбрахте...!

Еми, разбира се, обаче като го направя това и ми стартира програмата, така ли трябва да е ?

Да..просто оставете да премине процеса по деинсталацията..!

Да..просто оставете да премине процеса по деинсталацията..!

Ок, но не забелязах съобщение, че е деинсталирана, отвори се лог файл. Така ли трябва да е ?

[*]Ще се генерира дневник на следното място:

[*]Моля, публикувайте съдържанието на дневника в следващия си отговор.

[*] 

Този дневник къде да го търся ?

След като програмата сканира, намери 1 резултат. След като кликнах на clean up изписа това.. number of threats cleaned up 1 of 1

Редактирано 23 юни 201313 г. от denito_vikito (преглед на промените)

 

[*]Ще се генерира дневник на следното място:

[*]Моля, публикувайте съдържанието на дневника в следващия си отговор

Този дневник къде да го търся ?

След като програмата сканира, намери 1 резултат. След като кликнах на clean up изписа това.. number of threats cleaned up 1 of 1

 

 

Нещо се запънах, може ли помощ?

Редактирано 24 юни 201313 г. от denito_vikito (преглед на промените)

Търсете дневника тук:

 

C:Documents and SettingsAll UsersApplication DataSophosSophos Virus Removal ToolLogsSophosVirusRemovalTool.log

 

Другите инструкции изпълнихте ли..?

Изпълних всички други неща, но с това нещо не мога да се справя. Ето това ли е ? Моля те погледни, нищо друго не открих.

Здравейте..! Съжалявам че тази проверка толкова много ви затрудни...Искам да ми кажете всички други стъпки от поста ми изпълнени ли са..? Ако - да, имате ли други проблеми по системата ....?

Здравей, тя самата проверка не ме е затруднила,  а това, че не знам дали съм открила дневника, който ви интересува.

 

Всички други неща от поста ви съм ги изпълнила.

 

Проблеми освен това, че пак доста често дава съобщение за блокирани страници/скрипта не отговаря/, мисля че нямам.

 

Ами това, че в диск С, който е 15ГБ, има свободно само 2гб - може ли нещо да се направи ?

 

babylon search не е ли пак някакъв тип вирус, защото го имам?

Редактирано 25 юни 201313 г. от denito_vikito (преглед на промените)

Подгответе такова сканиране:
 
Изтеглете:

- Random's System Information Tool (RSIT) за 32 - разрядна версия на Windows.
- Random's System Information Tool(RSIT)x64 за 64 - разрядна версия на Windows

Стартирате програмата, избирате проверка на файловете за последние три месеца и натискате продължи (Continue):




Програмата ще започне да събира информация за системата ви.


Ще се генерират два отчета log.txt и info.txt. Прикрепете ги в следващото си съобщение.Логовете по подразбиране се съхраняват в папка (RSIT) в директорията на системния ви диск.
 
 
Внимание: При своята работа инструмента използва програмата HiJackThis.Ако на компютъра на който се провежда сканирането не се намира програмата HiJackThis, инструмента RSIT ще предприеме изтеглянето на HiJackThis самостоятелно.

Logfile of random's system information tool 1.09 (written by random/random) Run by User at 2013-06-26 21:16:42 Microsoft Windows XP Professional Service Pack 3 System drive C: has 2 GB (12%) free of 16 GB Total RAM: 447 MB (52% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:17:11, on 26.6.2013 г. Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:Program FilesAlwil SoftwareAvast5AvastSvc.exe C:WINDOWSExplorer.EXE C:WINDOWSsystem32spoolsv.exe C:Program FilesAnalog DevicesCoresmax4pnp.exe C:WINDOWSVM305_STI.EXE C:Program FilesPC SuiteJoinMEUIExec.exe C:Program FilesAlwil SoftwareAvast5avastUI.exe C:Program FilesSkypePhoneSkype.exe C:Program FilesSonySony Picture UtilityPMBCoreSPUVolumeWatcher.exe C:Program FilesPC SuiteJoinMEAssistantServices.exe C:WINDOWSsystem32nvsvc32.exe C:WINDOWSsystem32svchost.exe C:WINDOWSsystem32wscntfy.exe C:WINDOWSsystem32svchost.exe D:Моите документи vikiDownloadsRSIT.exe C:Program Filestrend microUser.exe R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = :0 O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup O4 - HKLM..Run: [nwiz] nwiz.exe /install O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit O4 - HKLM..Run: [soundMAXPnP] C:Program FilesAnalog DevicesCoresmax4pnp.exe O4 - HKLM..Run: [bigDog305] C:WINDOWSVM305_STI.EXE VIMICRO USB PC Camera (ZC0305) O4 - HKLM..Run: [JoinMEUIExec] "C:Program FilesPC SuiteJoinMEUIExec.exe" O4 - HKLM..Run: [Adobe ARM] "C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe" O4 - HKLM..Run: [avast] "C:Program FilesAlwil SoftwareAvast5avastUI.exe" /nogui O4 - HKCU..Run: [skype] "C:Program FilesSkypePhoneSkype.exe" /minimized /regrun O4 - HKCU..Run: [GoogleChromeAutoLaunch_CB71CD92231E9EECFEEE72606F7F75DB] "C:Program FilesGoogleChromeApplicationchrome.exe" --no-startup-window O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM') O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user') O4 - Startup: Инструмент проверки носителя PMB.lnk = C:Program FilesSonySony Picture UtilityPMBCoreSPUVolumeWatcher.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:WINDOWSsystem32browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:WINDOWSsystem32browseui.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:WINDOWSsystem32MacromedFlashFlashPlayerUpdateService.exe O23 - Service: avast! Antivirus - AVAST Software - C:Program FilesAlwil SoftwareAvast5AvastSvc.exe O23 - Service: Услуга на Google Актуализация (gupdate) (gupdate) - Google Inc. - C:Program FilesGoogleUpdateGoogleUpdate.exe O23 - Service: Услуга на Google Актуализация (gupdatem) (gupdatem) - Google Inc. - C:Program FilesGoogleUpdateGoogleUpdate.exe O23 - Service: JoinMEUI Assistant Service - Unknown owner - C:Program FilesPC SuiteJoinMEAssistantServices.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:Program FilesMozilla Maintenance Servicemaintenanceservice.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:Program FilesSkypeUpdaterUpdater.exe -- End of file - 5005 bytes ======Scheduled tasks folder====== C:WINDOWStasksAdobe Flash Player Updater.job C:WINDOWStasksavast! Emergency Update.job C:WINDOWStasksGoogleUpdateTaskMachineCore.job C:WINDOWStasksGoogleUpdateTaskMachineUA.job =========Mozilla firefox========= ProfilePath - C:Documents and SettingsUserApplication DataMozillaFirefoxProfilesii70m0bc.default-1371115123578 prefs.js - "browser.search.useDBForOrder" -  true prefs.js - "browser.startup.homepage" -  "http://www.google.com/webhp?hl=bg" "[email protected]"=C:Program FilesAlwil SoftwareAvast5WebRepFF "65ffxtbr@FromDocToPDF_65.com"=C:Program FilesFromDocToPDF_65bar2.bin [[email protected]/FlashPlayer] "Description"=Adobe® Flash® Player 11.7.700.224 Plugin "Path"=C:WINDOWSsystem32MacromedFlashNPSWF32_11_7_700_224.dll [HKEY_LOCAL_MACHINESOFTWAREMozillaPlugins@FromDocToPDF_65.com/Plugin] "Description"=FromDocToPDF Plugin "Path"=C:Program FilesFromDocToPDF_65bar2.binNP65Stub.dll [[email protected]/Google Update;version=3] "Description"=Google Update "Path"=C:Program FilesGoogleUpdate1.3.21.145npGoogleUpdate3.dll [[email protected]/Google Update;version=9] "Description"=Google Update "Path"=C:Program FilesGoogleUpdate1.3.21.145npGoogleUpdate3.dll [HKEY_LOCAL_MACHINESOFTWAREMozillaPlugins@VideoDownloadConverter_4z.com/Plugin] "Description"=VideoDownloadConverter Plugin "Path"=C:Program FilesVideoDownloadConverter_4zbar1.binNP4zStub.dll [HKEY_LOCAL_MACHINESOFTWAREMozillaPluginsAdobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:Program FilesAdobeReader 11.0ReaderAIRnppdf32.dll C:Program FilesMozilla Firefoxplugins NPOFFICE.DLL nppdf32.dll C:Documents and SettingsUserApplication DataMozillaFirefoxProfilesii70m0bc.default-1371115123578extensions trash ======Registry dump====== [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun] "NvCplDaemon"=C:WINDOWSsystem32NvCpl.dll [2005-10-10 7286784] "nwiz"=nwiz.exe /install [] "NvMediaCenter"=C:WINDOWSsystem32NvMcTray.dll [2005-10-10 86016] "SoundMAXPnP"=C:Program FilesAnalog DevicesCoresmax4pnp.exe [2005-08-11 925696] "BigDog305"=C:WINDOWSVM305_STI.EXE [2007-01-05 61440] "JoinMEUIExec"=C:Program FilesPC SuiteJoinMEUIExec.exe [2009-03-10 131072] "Adobe ARM"=C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2013-05-11 958576] "avast"=C:Program FilesAlwil SoftwareAvast5avastUI.exe [2013-05-09 4858968] [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun] "Skype"=C:Program FilesSkypePhoneSkype.exe [2013-04-19 18678376] "GoogleChromeAutoLaunch_CB71CD92231E9EECFEEE72606F7F75DB"=C:Program FilesGoogleChromeApplicationchrome.exe [2013-06-19 846288] C:Documents and SettingsUserStart MenuProgramsStartup Инструмент проверки носителя PMB.lnk - C:Program FilesSonySony Picture UtilityPMBCoreSPUVolumeWatcher.exe [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon] C:WINDOWSsystem32WgaLogon.dll [2009-10-02 190464] [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}] [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer] "NoDriveTypeAutoRun"=323 "NoDriveAutoRun"=67108863 "NoDrives"=0 [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer] "HonorAutoRunSetting"=1 "NoDriveAutoRun"=67108863 "NoDriveTypeAutoRun"=323 "NoDrives"=0 [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist] "C:Program FilesSkypePhoneSkype.exe"="C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype " [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist] "%windir%Network Diagnosticxpnetdiag.exe"="%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%system32sessmgr.exe"="%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionDrivers32] "midimapper"=midimap.dll "wavemapper"=msacm32.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "msacm.divxa32"=msaud32_divx.acm "VIDC.IYUV"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "msacm.msaudio1"=msaud32.acm "MSVideo8"=VfWWDM32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.trspch"=tssoft32.acm "vidc.cvid"=iccvid.dll "VIDC.I420"=msh263.drv "vidc.iv31"=ir32_32.dll "vidc.iv32"=ir32_32.dll "vidc.iv41"=ir41_32.ax "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.msg723"=msg723.acm "vidc.M263"=msh263.drv "vidc.M261"=msh261.drv "msacm.sl_anet"=sl_anet.acm "msacm.iac2"=C:WINDOWSsystem32iac25_32.ax "vidc.iv50"=ir50_32.dll "msacm.l3acm"=l3codeca.acm ======List of files/folders created in the last 3 months====== 2013-06-26 20:12:05 ----D---- C:Program Filestrend micro 2013-06-26 20:12:01 ----D---- C:rsit 2013-06-24 21:51:26 ----A---- C:SophosBootTasks.txt 2013-06-23 20:54:10 ----D---- C:Documents and SettingsAll UsersApplication DataSophos 2013-06-23 20:53:46 ----D---- C:Program FilesSophos 2013-06-23 20:38:07 ----SHD---- C:RECYCLER 2013-06-23 20:34:12 ----A---- C:DelFix.txt 2013-06-23 19:29:54 ----D---- C:WINDOWStemp 2013-06-22 09:25:39 ----D---- C:WINDOWSerdnt 2013-06-21 21:46:29 ----D---- C:Documents and SettingsUserApplication DataMalwarebytes 2013-06-21 21:45:48 ----D---- C:Documents and SettingsAll UsersApplication DataMalwarebytes 2013-06-21 21:45:43 ----D---- C:Program FilesMalwarebytes' Anti-Malware 2013-06-21 21:45:43 ----A---- C:WINDOWSsystem32driversmbam.sys 2013-06-21 21:18:28 ----D---- C:WINDOWSERUNT 2013-06-18 13:51:31 ----D---- C:Program FilesFree Window Registry Repair 2013-06-14 08:56:22 ----D---- C:Program FilesCommon FilesWise Installation Wizard 2013-06-12 21:27:04 ----A---- C:WINDOWSntbtlog.txt 2013-06-09 11:41:45 ----D---- C:Program FilesAdobe 2013-04-27 15:31:15 ----D---- C:Documents and SettingsUserApplication DataNetscape 2013-04-27 15:29:36 ----D---- C:Documents and SettingsUserApplication DataPhotodex 2013-04-27 15:29:28 ----D---- C:Documents and SettingsAll UsersApplication DataPhotodex 2013-04-13 08:12:06 ----D---- C:Program FilesCommon FilesSkype ======List of files/folders modified in the last 3 months====== 2013-06-26 21:15:38 ----D---- C:Documents and SettingsUserApplication DataSkype 2013-06-26 20:12:05 ----RD---- C:Program Files 2013-06-26 20:12:04 ----D---- C:WINDOWSPrefetch 2013-06-26 19:02:59 ----A---- C:WINDOWSwinamp.ini 2013-06-25 22:10:50 ----A---- C:WINDOWSSchedLgU.Txt 2013-06-25 19:57:01 ----D---- C:WINDOWS 2013-06-25 12:49:24 ----D---- C:WINDOWSsystem32drivers 2013-06-25 12:31:20 ----SHD---- C:WINDOWSInstaller 2013-06-23 20:38:06 ----D---- C:WINDOWSsystem32 2013-06-23 20:23:44 ----D---- C:WINDOWSsystem32CatRoot2 2013-06-23 19:27:20 ----A---- C:WINDOWSsystem.ini 2013-06-23 19:24:16 ----D---- C:WINDOWSAppPatch 2013-06-23 19:24:12 ----D---- C:Program FilesCommon Files 2013-06-22 17:11:05 ----SD---- C:WINDOWSTasks 2013-06-22 17:03:05 ----D---- C:WINDOWSsystem32Restore 2013-06-22 12:41:35 ----D---- C:WINDOWSsystem32driversetc 2013-06-22 12:40:10 ----D---- C:WINDOWSsystem32config 2013-06-22 11:25:44 ----D---- C:Documents and SettingsAll UsersApplication DataAdobe 2013-06-22 07:54:23 ----SD---- C:Documents and SettingsUserApplication DataMicrosoft 2013-06-22 07:54:23 ----D---- C:Documents and SettingsUserApplication DataAdobe 2013-06-21 19:44:41 ----SD---- C:Documents and SettingsAll UsersApplication DataMicrosoft 2013-06-18 15:38:55 ----HD---- C:WINDOWSinf 2013-06-17 13:41:14 ----D---- C:Documents and Settings 2013-06-17 09:30:09 ----A---- C:WINDOWSOEWABLog.txt 2013-06-16 01:09:11 ----D---- C:WINDOWSMinidump 2013-06-12 12:39:11 ----A---- C:WINDOWSsystem32FlashPlayerApp.exe 2013-06-11 18:45:50 ----D---- C:Program FilesWinRAR 2013-06-11 12:33:22 ----D---- C:Documents and SettingsAll UsersApplication DataSkype 2013-06-11 12:33:08 ----RD---- C:Program FilesSkype 2013-06-10 14:17:01 ----D---- C:WINDOWSWinSxS 2013-06-09 11:44:03 ----D---- C:Program FilesCommon FilesAdobe 2013-06-03 14:03:44 ----A---- C:WINDOWSsystem32PerfStringBackup.INI 2013-05-30 11:43:39 ----D---- C:Program FilesMozilla Maintenance Service 2013-05-29 19:23:03 ----D---- C:Program FilesMozilla Firefox 2013-05-29 19:16:28 ----D---- C:Program FilesCommon FilesMicrosoft Shared 2013-05-25 21:19:27 ----D---- C:Program FilesCommon FilesAhead 2013-05-25 21:19:27 ----D---- C:Program FilesAhead 2013-05-09 12:58:28 ----A---- C:WINDOWSsystem32aswBoot.exe 2013-04-28 08:56:04 ----A---- C:WINDOWSimsins.BAK 2013-04-27 19:28:05 ----RSHDC---- C:WINDOWSsystem32dllcache 2013-04-27 16:17:53 ----A---- C:WINDOWSNeroDigital.ini 2013-04-27 15:31:15 ----D---- C:Documents and SettingsUserApplication DataMozilla 2013-04-27 15:25:32 ----D---- C:WINDOWSResources ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 aswRvrt;aswRvrt; C:WINDOWSsystem32driversaswRvrt.sys [2013-05-09 49376] R0 aswVmm;aswVmm; C:WINDOWSsystem32driversaswVmm.sys [2013-05-09 174664] R0 PxHelp20;PxHelp20; C:WINDOWSsystem32DRIVERSPxHelp20.sys [2008-07-04 44944] R1 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2013-05-09 49760] R1 aswSnx;aswSnx; C:WINDOWSsystem32driversaswSnx.sys [2013-05-09 765736] R1 aswSP;aswSP; C:WINDOWSsystem32driversaswSP.sys [2013-05-09 368944] R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2013-05-09 56080] R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:WINDOWSSystem32driversws2ifsl.sys [2009-10-02 12032] R2 aswFsBlk;aswFsBlk; C:WINDOWSsystem32driversaswFsBlk.sys [2013-05-09 29816] R2 aswMonFlt;aswMonFlt; ??C:WINDOWSsystem32driversaswMonFlt.sys [] R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:WINDOWSsystem32driversADIHdAud.sys [2005-08-11 141312] R3 AEAudioService;AEAudio Service; C:WINDOWSsystem32driversAEAudio.sys [2005-08-11 127872] R3 cmuda3;C-Media PCI Audio Interface; C:WINDOWSsystem32driverscmudax3.sys [2009-12-01 1872192] R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2009-10-02 144384] R3 MTsensor;ATK0110 ACPI UTILITY; C:WINDOWSsystem32DRIVERSASACPI.sys [2006-02-26 5810] R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2005-10-10 3530432] R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:WINDOWSsystem32DRIVERSNVENETFD.sys [2005-07-30 34048] R3 nvnetbus;NVIDIA Network Bus Enumerator; C:WINDOWSsystem32DRIVERSnvnetbus.sys [2005-07-30 12928] R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:WINDOWSsystem32DRIVERSRTL8139.SYS [2008-04-13 20992] R3 SenFiltService;SenFilt Service; C:WINDOWSsystem32driversSenfilt.sys [2005-08-11 393088] R3 vvftav;vvftav; C:WINDOWSsystem32driversvvftav.sys [2007-02-02 474368] R3 ZSMC0305;USB PC Camera VC305; C:WINDOWSSystem32DriversusbVM305.sys [2007-03-08 1466624] S3 CCDECODE;Closed Caption Decoder; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-13 17024] S3 ManyCam;ManyCam Virtual Webcam; C:WINDOWSsystem32DRIVERSmcvidrv.sys [2012-01-11 32000] S3 massfilter_hs;ZTE HandSet Mass Storage Filter Driver; C:WINDOWSsystem32driversmassfilter_hs.sys [2009-03-03 9728] S3 mcaudrv_simple;ManyCam Virtual Microphone; C:WINDOWSsystem32driversmcaudrv.sys [2012-02-22 22400] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:WINDOWSsystem32driversMSTEE.sys [2008-04-13 5504] S3 NABTSFEC;NABTS/FEC VBI Codec; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Microsoft TV/Video Connection; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-13 10880] S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-13 11136] S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:WINDOWSsystem32DRIVERSssadbus.sys [2011-05-13 121064] S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:WINDOWSsystem32DRIVERSssadmdfl.sys [2011-05-13 12776] S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:WINDOWSsystem32DRIVERSssadmdm.sys [2011-05-13 136808] S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:WINDOWSsystem32DRIVERSssadserd.sys [2011-05-13 114280] S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-13 15232] S3 usbccgp;Microsoft USB Generic Parent Driver; C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-13 32128] S3 USBSTOR;USB Mass Storage Driver; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368] S3 usbvideo;USB Video Device (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2008-04-13 121984] S3 WpdUsb;WpdUsb; C:WINDOWSSystem32Driverswpdusb.sys [2005-01-28 18944] S3 WSTCODEC;World Standard Teletext Codec; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-13 19200] S3 zgwhsdiag;ZTE WCDMA Handset Diagnostic Port; C:WINDOWSsystem32DRIVERSzgwhsdiag.sys [2009-12-31 106752] S3 zgwhsmdm;ZTE WCDMA Handset USB Modem; C:WINDOWSsystem32DRIVERSzgwhsmdm.sys [2009-12-31 106752] S3 zgwhsnmea;WCDMA Handset NMEA Port; C:WINDOWSsystem32DRIVERSzgwhsnmea.sys [2009-12-31 106752] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast5AvastSvc.exe [2013-05-09 46808] R2 JoinMEUI Assistant Service;JoinMEUI Assistant Service; C:Program FilesPC SuiteJoinMEAssistantServices.exe [2009-11-18 242688] R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2005-10-10 131139] R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912] S2 gupdate;Услуга на Google Актуализация (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2012-02-15 136176] S2 SkypeUpdate;Skype Updater; C:Program FilesSkypeUpdaterUpdater.exe [2013-02-28 161384] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:WINDOWSsystem32MacromedFlashFlashPlayerUpdateService.exe [2013-06-12 256904] S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144] S3 gupdatem;Услуга на Google Актуализация (gupdatem); C:Program FilesGoogleUpdateGoogleUpdate.exe [2012-02-15 136176] S3 MozillaMaintenance;Mozilla Maintenance Service; C:Program FilesMozilla Maintenance Servicemaintenanceservice.exe [2013-05-12 117144] S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]  

info.txt logfile of random's system information tool 1.09 2013-06-26 21:05:27 ======Uninstall list====== -->C:Program FilesInstallShield Installation Information{36C41D70-56F5-4E2B-81DA-6BEB7502D7A1}setup.exe -runfromtemp -l0x0019 -removeonly -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf µTorrent-->"C:Program FilesuTorrentuTorrent.exe" /UNINSTALL Adobe Flash Player 10 ActiveX-->C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe Adobe Flash Player 11 Plugin-->C:WINDOWSsystem32MacromedFlashFlashUtil32_11_7_700_224_Plugin.exe -maintain plugin Adobe Reader XI (11.0.03)-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AB0000000001} avast! Free Antivirus-->C:Program FilesAlwil SoftwareAvast5aswRunDll.exe "C:Program FilesAlwil SoftwareAvast5Setupsetiface.dll" RunSetup FormatFactory 3.0.1-->C:Program FilesFreeTimeFormatFactoryuninst.exe Free Window Registry Repair-->C:PROGRA~1FREEWI~1UNWISE.EXE C:PROGRA~1FREEWI~1INSTALL.LOG FromDocToPDF Toolbar-->rundll32 C:PROGRA~1FROMDO~2bar2.bin65Bar.dll,O GOM Player-->"C:Program FilesGRETECHGomPlayerUninstall.exe" Google Chrome-->"C:Program FilesGoogleChromeApplication28.0.1500.52Installersetup.exe" --uninstall --multi-install --chrome --system-level Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} Malwarebytes Anti-Malware, версия 1.75.0.1300-->"C:Program FilesMalwarebytes' Anti-Malwareunins000.exe" Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28} Microsoft Office Professional Edition 2003-->MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9} Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989} Mozilla Firefox 21.0 (x86 bg)-->C:Program FilesMozilla Firefoxuninstallhelper.exe Mozilla Maintenance Service-->"C:Program FilesMozilla Maintenance Serviceuninstall.exe" NVIDIA Drivers-->C:WINDOWSsystem32nvudisp.exe UninstallGUI PC Suite-->RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup "C:Program FilesInstallShield Installation Information{72FD5F2E-1F7A-4E9B-8838-29E842E178CD}Setup.exe" -l0x9  -removeonly PhotoScape-->"D:facebook-igriiPhotoScapeuninstall.exe" PowerDVD-->RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup "C:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}Setup.exe"  -uninstall Skype™ 6.3-->MsiExec.exe /X{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} Sony Picture Utility-->C:Program FilesInstallShield Installation Information{D5068583-D569-468B-9755-5FBF5848F46F}setup.exe -runfromtemp -l0x0019 uninstall -removeonly Sophos Virus Removal Tool-->MsiExec.exe /I{B829E117-D072-41EA-9606-9826A38D34C1} SoundMAX-->RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1000Intel32Ctor.dll,LaunchSetup "C:Program FilesInstallShield Installation Information{F0A37341-D692-11D4-A984-009027EC0A9C}setup.exe" -l0x9  -removeonly Update for Windows XP (KB955839)-->"C:WINDOWS$NtUninstallKB955839$spuninstspuninst.exe" USB PC Camera VC305-->rm305.exe rm305.ini Winamp (remove only)-->"C:Program FilesWinampUninstWA.exe" Windows Bulgarian Interface Pack-->MsiExec.exe /X{C408D81A-CB17-4CDF-98AF-2E64036B3F32} Windows Media Format Runtime-->"C:Program FilesWindows Media Playerwmsetsdk.exe" /UninstallAll Windows Media Player 10-->"C:Program FilesWindows Media PlayerSetup_wm.exe" /Uninstall WinRAR archiver-->C:Program FilesWinRARuninstall.exe Супер Крава-->C:Program FilesСупер КраваUninstall.exe ======Security center information====== AV: avast! Antivirus ======System event log====== Computer Name: PRIVATE-7D45A86 Event Code: 7000 Message: The PC Tools Security Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. Record Number: 29824 Source Name: Service Control Manager Time Written: 20130615081326.000000+180 Event Type: error User: Computer Name: PRIVATE-7D45A86 Event Code: 7009 Message: Timeout (30000 milliseconds) waiting for the PC Tools Security Service service to connect. Record Number: 29823 Source Name: Service Control Manager Time Written: 20130615081326.000000+180 Event Type: error User: Computer Name: PRIVATE-7D45A86 Event Code: 7000 Message: The ScsiAccess service failed to start due to the following error: The system cannot find the file specified. Record Number: 29822 Source Name: Service Control Manager Time Written: 20130615081325.000000+180 Event Type: error User: Computer Name: PRIVATE-7D45A86 Event Code: 36 Message: The time service has not been able to synchronize the system time for 49152 seconds because none of the time providers has been able to provide a usable time stamp. The system clock is unsynchronized. Record Number: 29805 Source Name: W32Time Time Written: 20130614221034.000000+180 Event Type: warning User: Computer Name: PRIVATE-7D45A86 Event Code: 7034 Message: The PC Tools Security Service service terminated unexpectedly.  It has done this 1 time(s). Record Number: 29802 Source Name: Service Control Manager Time Written: 20130614213907.000000+180 Event Type: error User: =====Application event log===== Computer Name: PRIVATE-7D45A86 Event Code: 1517 Message: Windows записа системния регистър на потребител PRIVATE-7D45A86User, докато някое приложение или услуга все още използваше системния регистър по време на излизането. Паметта, използвана от системния регистър на потребителя, не е освободена. Системният регистър ще бъде затворен, когато вече не се използва. Това често е предизвикано от услуги, които се изпълняват като потребителски акаунт, опитайте да конфигурирате услугите, така че да се изпълняват или в LocalService, или в NetworkService акаунт. Record Number: 4048 Source Name: Userenv Time Written: 20121205204716.000000+120 Event Type: warning User: NT AUTHORITYSYSTEM Computer Name: PRIVATE-7D45A86 Event Code: 1517 Message: Windows записа системния регистър на потребител PRIVATE-7D45A86User, докато някое приложение или услуга все още използваше системния регистър по време на излизането. Паметта, използвана от системния регистър на потребителя, не е освободена. Системният регистър ще бъде затворен, когато вече не се използва. Това често е предизвикано от услуги, които се изпълняват като потребителски акаунт, опитайте да конфигурирате услугите, така че да се изпълняват или в LocalService, или в NetworkService акаунт. Record Number: 4028 Source Name: Userenv Time Written: 20121204210716.000000+120 Event Type: warning User: NT AUTHORITYSYSTEM Computer Name: PRIVATE-7D45A86 Event Code: 1517 Message: Windows записа системния регистър на потребител PRIVATE-7D45A86User, докато някое приложение или услуга все още използваше системния регистър по време на излизането. Паметта, използвана от системния регистър на потребителя, не е освободена. Системният регистър ще бъде затворен, когато вече не се използва. Това често е предизвикано от услуги, които се изпълняват като потребителски акаунт, опитайте да конфигурирате услугите, така че да се изпълняват или в LocalService, или в NetworkService акаунт. Record Number: 4014 Source Name: Userenv Time Written: 20121203205719.000000+120 Event Type: warning User: NT AUTHORITYSYSTEM Computer Name: PRIVATE-7D45A86 Event Code: 1517 Message: Windows записа системния регистър на потребител PRIVATE-7D45A86User, докато някое приложение или услуга все още използваше системния регистър по време на излизането. Паметта, използвана от системния регистър на потребителя, не е освободена. Системният регистър ще бъде затворен, когато вече не се използва. Това често е предизвикано от услуги, които се изпълняват като потребителски акаунт, опитайте да конфигурирате услугите, така че да се изпълняват или в LocalService, или в NetworkService акаунт. Record Number: 3999 Source Name: Userenv Time Written: 20121202214933.000000+120 Event Type: warning User: NT AUTHORITYSYSTEM Computer Name: PRIVATE-7D45A86 Event Code: 1517 Message: Windows записа системния регистър на потребител PRIVATE-7D45A86User, докато някое приложение или услуга все още използваше системния регистър по време на излизането. Паметта, използвана от системния регистър на потребителя, не е освободена. Системният регистър ще бъде затворен, когато вече не се използва. Това често е предизвикано от услуги, които се изпълняват като потребителски акаунт, опитайте да конфигурирате услугите, така че да се изпълняват или в LocalService, или в NetworkService акаунт. Record Number: 3986 Source Name: Userenv Time Written: 20121201212538.000000+120 Event Type: warning User: NT AUTHORITYSYSTEM ======Environment variables====== "ComSpec"=%SystemRoot%system32cmd.exe "Path"=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 44 Stepping 2, AuthenticAMD "PROCESSOR_REVISION"=2c02 "NUMBER_OF_PROCESSORS"=1 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%TEMP "TMP"=%SystemRoot%TEMP -----------------EOF-----------------  

Редактирано 26 юни 201313 г. от denito_vikito (преглед на промените)

Активни зарази не се виждат във системата ви..!
 
Деинсталирайте следния софтуер по стандартния начин:
 

Free Window Registry Repair
FromDocToPDF Toolbar
Sophos Virus Removal Tool

 
след това:
 
Изтеглете този инструмент - Windows Repair All in one
Инсталирайте приложението и го стартирайте.
От стъпка 2 => стартирайте Check Disk (рестартирайте за да се извърши проверката).

От стъпка 3 направете sfc /scannow проверката.



от стъпка 4 направете бекъп на системата натискайки Create (под System Restore) и backup (под Registry Backup).

 

от Start Repairs натиснете Start и оттук вече сложете всички отметки.

Сложете отметка пред restart system when finished и натиснете Start.

После пишата как е положението ..!

Здравей,

FromDocToPDF Toolbar  тази програма не може да се деинсталира, като дам премахни ми излиза същото съобщение, което се появяваше при включване на компютъра /проблема заради който почнах темата/

Да продължавам ли с другите стъпки ?

Да направим тогава така:
 
Изтеглете SystemLook (32-bit) или SystemLook (64-bit) и запазете програмата на десктопа.

• [*]Кликнете два пъти върху

SystemLook.exe, за да стартирате програмата. [*]Копирайте съдържанието от цитата по-долу в текстовото поле на програмата:

:filefind*FromDocToPDF Toolbar*:folderfind*FromDocToPDF Toolbar*:regfind*FromDocToPDF Toolbar*

• [*]Кликнете на бутона

Look, за да започне сканирането. [*]Когато сканирането завърши ще се отвори Notepad с резултата от
сканирането. После публикувайте лог файла в следващия си коментар.

Да продължавам ли с другите стъпки ?

 

Да, разбира се..!

Като стартирам програмата  Windows Repair All in one на стъпка 3 ми дава грешка. Но ще продължа утре.  

Редактирано 28 юни 201313 г. от denito_vikito (преглед на промените)

SystemLook 30.07.11 by jpshortstuff Log created at 22:13 on 28/06/2013 by User Administrator - Elevation successful ========== filefind ========== Searching for "*FromDocToPDF Toolbar*" No files found. ========== folderfind ========== Searching for "*FromDocToPDF Toolbar*" No folders found. ========== regfind ========== Searching for "*FromDocToPDF Toolbar*" No data found. -= EOF =-

Изтеглете OTL (от OldTimer) и го запазете на вашия десктоп.
Кликнете два пъти върху OTL.exe, за да стартирате програмата.
Сложете отметки преди следните неща:

• [*]

Scan all users [*]Lop check [*]Purity check

Под секцията Extra Registry, изберете Use SafeList
Кликнете на Run Scan и изчакайте да завърши сканирането. (може да отнеме 10-15 минути)
Когато завърши, публикувайте следните два лог файла:

• [*]

OTL.txt (намира се на вашия десктоп) [*]Extras.txt (ще Ви се отвори автоматично)

Като стартирам програмата  Windows Repair All in one на стъпка 3 ми дава грешка. Но ще продължа утре.  

Тези съобщения не мога да ги махна. От един час се мъча да ми зареди Мозила, че да мога да пиша във форума. Антивирусната, кажи речи постоянно върти. Защо така, незнам?

OTL logfile created on: 29.6.2013 г. 13:57:39 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:Documents and SettingsUserDesktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000402 | Country: Bulgaria | Language: BGR | Date Format: dd.M.yyyy 'г.'
 
447,30 Mb Total Physical Memory | 64,82 Mb Available Physical Memory | 14,49% Memory free
1,03 Gb Paging File | 0,58 Gb Available in Paging File | 56,65% Paging File free
Paging file location(s): C:pagefile.sys 672 1344 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:WINDOWS | %ProgramFiles% = C:Program Files
Drive C: | 15,63 Gb Total Space | 1,63 Gb Free Space | 10,42% Space Free | Partition Type: NTFS
Drive D: | 58,89 Gb Total Space | 23,41 Gb Free Space | 39,74% Space Free | Partition Type: NTFS
 
Computer Name: PRIVATE-7D45A86 | User Name: User | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.06.29 11:12:17 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:Documents and SettingsUserDesktopOTL.exe
PRC - [2013.05.12 01:26:08 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:Program FilesMozilla Firefoxfirefox.exe
PRC - [2013.05.09 12:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:Program FilesAlwil SoftwareAvast5AvastUI.exe
PRC - [2013.05.09 12:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
PRC - [2009.11.18 11:15:22 | 000,242,688 | ---- | M] () -- C:Program FilesPC SuiteJoinMEAssistantServices.exe
PRC - [2009.10.02 07:26:47 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:WINDOWSexplorer.exe
PRC - [2009.03.10 19:50:18 | 000,131,072 | ---- | M] () -- C:Program FilesPC SuiteJoinMEUIExec.exe
PRC - [2008.11.13 11:33:46 | 000,333,088 | ---- | M] (Sony Corporation) -- C:Program FilesSonySony Picture UtilityPMBCoreSPUVolumeWatcher.exe
PRC - [2007.01.05 11:37:00 | 000,061,440 | ---- | M] (Vimicro) -- C:WINDOWSVM305_STI.EXE
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.06.28 19:29:06 | 002,090,496 | ---- | M] () -- C:Program FilesAlwil SoftwareAvast5defs13062801algo.dll
MOD - [2013.06.12 12:38:55 | 016,033,160 | ---- | M] () -- C:WINDOWSsystem32MacromedFlashNPSWF32_11_7_700_224.dll
MOD - [2013.05.12 01:26:24 | 003,128,728 | ---- | M] () -- C:Program FilesMozilla Firefoxmozjs.dll
MOD - [2009.11.18 11:15:22 | 000,242,688 | ---- | M] () -- C:Program FilesPC SuiteJoinMEAssistantServices.exe
MOD - [2009.10.02 07:27:03 | 001,288,192 | ---- | M] () -- C:WINDOWSsystem32quartz.dll
MOD - [2009.10.02 07:27:03 | 000,192,512 | ---- | M] () -- C:WINDOWSsystem32qcap.dll
MOD - [2009.10.02 07:26:54 | 000,014,336 | ---- | M] () -- C:WINDOWSsystem32msdmo.dll
MOD - [2009.10.02 07:26:39 | 000,059,904 | ---- | M] () -- C:WINDOWSsystem32devenum.dll
MOD - [2009.03.10 19:50:18 | 000,131,072 | ---- | M] () -- C:Program FilesPC SuiteJoinMEUIExec.exe
 
 
========== Services (SafeList) ==========
 
SRV - File not found [Auto | Stopped] --  -- (ScsiAccess)
SRV - File not found [Disabled | Stopped] -- %SystemRoot%System32hidserv.dll -- (HidServ)
SRV - [2013.06.29 09:11:52 | 000,181,064 | ---- | M] (Sysinternals) [On_Demand | Stopped] -- C:WINDOWSPSEXESVC.EXE -- (PSEXESVC)
SRV - [2013.06.12 12:39:24 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:WINDOWSsystem32MacromedFlashFlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.05.12 01:26:17 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:Program FilesMozilla Maintenance Servicemaintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.05.09 12:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:Program FilesAlwil SoftwareAvast5AvastSvc.exe -- (avast! Antivirus)
SRV - [2013.02.28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:Program FilesSkypeUpdaterUpdater.exe -- (SkypeUpdate)
SRV - [2009.11.18 11:15:22 | 000,242,688 | ---- | M] () [Auto | Running] -- C:Program FilesPC SuiteJoinMEAssistantServices.exe -- (JoinMEUI Assistant Service)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:DOCUME~1UserLOCALS~1Tempcpuz134cpuz134_x32.sys -- (cpuz134)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2013.06.28 13:27:16 | 000,175,176 | ---- | M] () [Kernel | Boot | Running] -- C:WINDOWSSystem32driversaswVmm.sys -- (aswVmm)
DRV - [2013.06.28 13:27:15 | 000,770,344 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:WINDOWSSystem32driversaswSnx.sys -- (aswSnx)
DRV - [2013.06.28 13:27:15 | 000,369,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:WINDOWSSystem32driversaswSP.sys -- (aswSP)
DRV - [2013.05.09 12:59:10 | 000,056,080 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:WINDOWSSystem32driversaswTdi.sys -- (aswTdi)
DRV - [2013.05.09 12:59:10 | 000,049,376 | ---- | M] () [Kernel | Boot | Running] -- C:WINDOWSSystem32driversaswRvrt.sys -- (aswRvrt)
DRV - [2013.05.09 12:59:09 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:WINDOWSsystem32driversaswMonFlt.sys -- (aswMonFlt)
DRV - [2013.05.09 12:59:09 | 000,049,760 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:WINDOWSSystem32driversaswRdr.sys -- (aswRdr)
DRV - [2013.05.09 12:59:08 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:WINDOWSSystem32driversaswFsBlk.sys -- (aswFsBlk)
DRV - [2012.02.22 13:34:36 | 000,022,400 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Stopped] -- C:WINDOWSsystem32driversmcaudrv.sys -- (mcaudrv_simple)
DRV - [2012.01.11 09:11:20 | 000,032,000 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Stopped] -- C:WINDOWSsystem32driversmcvidrv.sys -- (ManyCam)
DRV - [2011.05.13 03:21:06 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:WINDOWSsystem32driversssadmdm.sys -- (ssadmdm)
DRV - [2011.05.13 03:21:06 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:WINDOWSsystem32driversssadbus.sys -- (ssadbus)
DRV - [2011.05.13 03:21:06 | 000,114,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:WINDOWSsystem32driversssadserd.sys -- (ssadserd)
DRV - [2011.05.13 03:21:06 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:WINDOWSsystem32driversssadmdfl.sys -- (ssadmdfl)
DRV - [2009.12.31 14:35:50 | 000,106,752 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:WINDOWSsystem32driverszgwhsnmea.sys -- (zgwhsnmea)
DRV - [2009.12.31 14:35:46 | 000,106,752 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:WINDOWSsystem32driverszgwhsmdm.sys -- (zgwhsmdm)
DRV - [2009.12.31 14:35:42 | 000,106,752 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:WINDOWSsystem32driverszgwhsdiag.sys -- (zgwhsdiag)
DRV - [2009.12.01 13:11:28 | 001,872,192 | ---- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:WINDOWSsystem32driverscmudax3.sys -- (cmuda3)
DRV - [2009.03.03 18:09:24 | 000,009,728 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:WINDOWSsystem32driversmassfilter_hs.sys -- (massfilter_hs)
DRV - [2008.04.13 23:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:WINDOWSsystem32driversRTL8139.sys -- (rtl8139)
DRV - [2007.03.08 17:05:32 | 001,466,624 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:WINDOWSsystem32driversusbVM305.sys -- (ZSMC0305)
DRV - [2007.02.02 19:38:22 | 000,474,368 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:WINDOWSsystem32driversvvftav.sys -- (vvftav)
DRV - [2006.02.26 18:02:48 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- C:WINDOWSsystem32driversASACPI.sys -- (MTsensor)
DRV - [2005.08.11 18:17:00 | 000,393,088 | ---- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:WINDOWSsystem32driverssenfilt.sys -- (SenFiltService)
DRV - [2005.07.30 02:11:04 | 000,012,928 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:WINDOWSsystem32driversnvnetbus.sys -- (nvnetbus)
DRV - [2005.07.30 02:11:02 | 000,034,048 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:WINDOWSsystem32driversNVENETFD.sys -- (NVENETFD)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM..SearchScopes,DefaultScope =
 
 
IE - HKU.DEFAULTSoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyEnable" = 0
 
IE - HKUS-1-5-18SoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyEnable" = 0
 
IE - HKUS-1-5-19..SearchScopes,DefaultScope =
 
IE - HKUS-1-5-20..SearchScopes,DefaultScope =
 
IE - HKUS-1-5-21-1177238915-562591055-1417001333-1003SOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://www.google.com
IE - HKUS-1-5-21-1177238915-562591055-1417001333-1003..SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKUS-1-5-21-1177238915-562591055-1417001333-1003..SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKUS-1-5-21-1177238915-562591055-1417001333-1003..SearchScopes{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKUS-1-5-21-1177238915-562591055-1417001333-1003SoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyEnable" = 0
IE - HKUS-1-5-21-1177238915-562591055-1417001333-1003SoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyServer" = :0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledAddons: fblayouts%40hotlayouts2u.com:3.3.0
FF - prefs.js..extensions.enabledAddons: socialfixer%40mattkruse.com:6.601
FF - prefs.js..extensions.enabledAddons: %7b336d0c35-8a85-403a-b9d2-65c292c39087%7d:2.0.0.110
FF - prefs.js..extensions.enabledAddons: %7b972ce4c6-7e08-4474-a285-3208198ce6fd%7d:17.0.1
FF - prefs.js..keyword.URL: ""
FF - user.js - File not found
 
FF - [email protected]/FlashPlayer: C:WINDOWSsystem32MacromedFlashNPSWF32_11_7_700_224.dll ()
FF - HKLMSoftwareMozillaPlugins@FromDocToPDF_65.com/Plugin: C:Program FilesFromDocToPDF_65bar2.binNP65Stub.dll File not found
FF - [email protected]/Google Update;version=3: C:Program FilesGoogleUpdate1.3.21.145npGoogleUpdate3.dll (Google Inc.)
FF - [email protected]/Google Update;version=9: C:Program FilesGoogleUpdate1.3.21.145npGoogleUpdate3.dll (Google Inc.)
FF - HKLMSoftwareMozillaPlugins@VideoDownloadConverter_4z.com/Plugin: C:Program FilesVideoDownloadConverter_4zbar1.binNP4zStub.dll File not found
FF - HKLMSoftwareMozillaPluginsAdobe Reader: C:Program FilesAdobeReader 11.0ReaderAIRnppdf32.dll (Adobe Systems Inc.)
 
FF - [email protected]: C:Program FilesAlwil SoftwareAvast5WebRepFF [2002.01.01 00:17:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaFirefoxExtensions65ffxtbr@FromDocToPDF_65.com: C:Program FilesFromDocToPDF_65bar2.bin
FF - HKEY_LOCAL_MACHINEsoftwaremozillaMozilla Firefox 21.0extensionsPlugins: C:Program FilesMozilla Firefoxplugins [2013.06.09 11:46:14 | 000,000,000 | ---D | M]
 
[2011.01.31 15:12:49 | 000,000,000 | ---D | M] (No name found) -- C:Documents and SettingsUserApplication DataMozillaExtensions
[2013.06.21 20:16:22 | 000,000,000 | ---D | M] (No name found) -- C:Documents and SettingsUserApplication DataMozillaFirefoxProfiles1rnh5ygc.defaultextensions
[2013.06.16 20:25:38 | 000,000,000 | ---D | M] (No name found) -- C:Documents and SettingsUserApplication DataMozillaFirefoxProfilesii70m0bc.default-1371115123578extensions
[2013.06.16 20:25:23 | 000,000,000 | ---D | M] (No name found) -- C:Documents and SettingsUserApplication DataMozillaFirefoxProfilesii70m0bc.default-1371115123578extensionstrash
[2013.06.21 20:16:15 | 000,000,000 | ---D | M] (No name found) -- C:Program FilesMozilla Firefoxextensions
[2013.05.29 19:23:07 | 000,000,000 | ---D | M] (No name found) -- C:Program FilesMozilla Firefoxbrowserextensions
[2013.05.29 19:23:07 | 000,000,000 | ---D | M] (Default) -- C:Program FilesMozilla Firefoxbrowserextensions{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
========== Chrome  ==========
 
CHR - default_search_provider: AVG Secure Search (Enabled)
CHR - default_search_provider: search_url = http://mysearch.avg.com/search?cid={7C24128D-2F09-4465-91C4-04F44BEF9559}&mid=5910eb2cd62747d3aed6d15cb45c2a0e-fc1f74597e9e265b6f4d43816c2a9823df34509a&lang=en&ds=re011&pr=sa&d=2013-06-28 21:04:31&v=15.3.0.11&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
CHR - default_search_provider: suggest_url = http://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR - homepage: https://support.google.com/chrome/answer/165139?p=settings_sign_in&rd=1
CHR - plugin: Shockwave Flash (Enabled) = C:Documents and SettingsUserLocal SettingsApplication DataGoogleChromeUser DataPepperFlash11.7.700.202pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:Program FilesGoogleChromeApplication28.0.1500.63ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:Program FilesGoogleChromeApplication28.0.1500.63pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:Program FilesAdobeReader 8.0ReaderBrowsernppdf32.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:Program FilesMozilla FirefoxpluginsNPOFFICE.DLL
CHR - plugin: Microsoftu00AE DRM (Enabled) = C:Program FilesWindows Media Playernpdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:Program FilesWindows Media Playernpdsplay.dll
CHR - plugin: Microsoftu00AE DRM (Enabled) = C:Program FilesWindows Media Playernpwmsdrm.dll
CHR - plugin: Google Update (Enabled) = C:Program FilesGoogleUpdate1.3.21.145npGoogleUpdate3.dll
CHR - plugin: Photodex Presenter Plugin (Enabled) = C:Program FilesPhotodex PresenternpPxPlay.dll
CHR - plugin: MindSpark Toolbar Platform Plugin Stub (Enabled) = C:Program FilesVideoDownloadConverter_4zbar1.binNP4zStub.dll
CHR - Extension: New Tab for Chrome = C:Documents and SettingsUserLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionscedclbokcakighlpbnbhfjffdjeihfdp1.0.0.0
CHR - Extension: FB Timeline Repair = C:Documents and SettingsUserLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsfigeicjbphcoedkepjffkelnefmmlofc1.0_1
CHR - Extension: Cath Kidston = C:Documents and SettingsUserLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsndlpkmaeinmnbiadacenijnhlolneopm3_0
 
O1 HOSTS File: ([2013.06.29 09:33:45 | 000,000,855 | ---- | M]) - C:WINDOWSsystem32driversetchosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..Run: [avast] C:Program FilesAlwil SoftwareAvast5avastUI.exe (AVAST Software)
O4 - HKLM..Run: [bigDog305] C:WINDOWSVM305_STI.EXE (Vimicro)
O4 - HKLM..Run: [JoinMEUIExec] C:Program FilesPC SuiteJoinMEUIExec.exe ()
O4 - HKLM..Run: [NvCplDaemon] C:WINDOWSSystem32NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..Run: [NvMediaCenter] C:WINDOWSSystem32NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..Run: [nwiz] C:WINDOWSSystem32nwiz.exe ()
O4 - HKUS-1-5-21-1177238915-562591055-1417001333-1003..Run: [GoogleChromeAutoLaunch_CB71CD92231E9EECFEEE72606F7F75DB] C:Program FilesGoogleChromeApplicationchrome.exe (Google Inc.)
O4 - Startup: C:Documents and SettingsUserStart MenuProgramsStartupИнструмент проверки носителя PMB.lnk = C:Program FilesSonySony Picture UtilityPMBCoreSPUVolumeWatcher.exe (Sony Corporation)
O6 - HKLMSoftwarePoliciesMicrosoftInternet ExplorerRestrictions present
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: HonorAutoRunSetting = 1
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveAutoRun = 67108863
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 323
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDrives = 0
O7 - HKU.DEFAULTSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 - HKU.DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 323
O7 - HKU.DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveAutoRun = 67108863
O7 - HKUS-1-5-18SoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 - HKUS-1-5-18SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 323
O7 - HKUS-1-5-18SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveAutoRun = 67108863
O7 - HKUS-1-5-19SoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 - HKUS-1-5-19SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 - HKUS-1-5-20SoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 - HKUS-1-5-20SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 - HKUS-1-5-21-1177238915-562591055-1417001333-1003SoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 - HKUS-1-5-21-1177238915-562591055-1417001333-1003SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 323
O7 - HKUS-1-5-21-1177238915-562591055-1417001333-1003SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveAutoRun = 67108863
O7 - HKUS-1-5-21-1177238915-562591055-1417001333-1003SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDrives = 0
O17 - HKLMSystemCCSServicesTcpipParameters: DhcpNameServer = 31.211.159.253 31.211.159.254
O17 - HKLMSystemCCSServicesTcpipParametersInterfaces{A530AFA4-A72A-4B98-ADA6-30E21F60D75F}: DhcpNameServer = 31.211.159.253 31.211.159.254
O18 - ProtocolHandlerskype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program FilesCommon FilesSkypeSkype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:WINDOWSexplorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:WINDOWSsystem32userinit.exe) - C:WINDOWSsystem32userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:Documents and SettingsUserLocal SettingsApplication DataMicrosoftWallpaper1.bmp
O24 - Desktop BackupWallPaper: C:Documents and SettingsUserLocal SettingsApplication DataMicrosoftWallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.01.31 12:48:28 | 000,000,000 | ---- | M] () - C:AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM..comfile [open] -- "%1" %*
O35 - HKLM..exefile [open] -- "%1" %*
O37 - HKLM...com [@ = ComFile] -- "%1" %*
O37 - HKLM...exe [@ = exefile] -- "%1" %*
O38 - SubSystemsWindows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystemsWindows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.06.29 13:41:58 | 000,000,000 | ---D | C] -- C:WINDOWSSoftwareDistribution
[2013.06.29 11:24:11 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:Documents and SettingsUserDesktopOTL.exe
[2013.06.29 09:45:07 | 000,000,000 | ---D | C] -- C:WINDOWSSystem32CatRoot2
[2013.06.29 08:59:55 | 000,000,000 | ---D | C] -- C:RegBackup
[2013.06.28 22:23:38 | 000,181,064 | ---- | C] (Sysinternals) -- C:WINDOWSPSEXESVC.EXE
[2013.06.28 22:12:42 | 000,000,000 | ---D | C] -- C:Documents and SettingsAll UsersStart MenuProgramsTweaking.com
[2013.06.28 22:12:27 | 000,000,000 | ---D | C] -- C:Program FilesTweaking.com
[2013.06.28 21:03:31 | 000,000,000 | ---D | C] -- C:Documents and SettingsAll UsersApplication DataCommon Files
[2013.06.26 20:12:05 | 000,000,000 | ---D | C] -- C:Program Filestrend micro
[2013.06.26 20:12:01 | 000,000,000 | ---D | C] -- C:rsit
[2013.06.23 20:54:10 | 000,000,000 | ---D | C] -- C:Documents and SettingsAll UsersApplication DataSophos
[2013.06.23 20:49:14 | 071,478,144 | ---- | C] (Sophos Limited) -- C:Documents and SettingsUserDesktopSophos Virus Removal Tool.exe
[2013.06.23 20:38:07 | 000,000,000 | -HSD | C] -- C:RECYCLER
[2013.06.23 20:37:03 | 000,448,512 | ---- | C] (OldTimer Tools) -- C:Documents and SettingsUserDesktopTFC.exe
[2013.06.23 19:29:54 | 000,000,000 | ---D | C] -- C:WINDOWStemp
[2013.06.22 09:25:39 | 000,000,000 | ---D | C] -- C:WINDOWSerdnt
[2013.06.21 21:46:29 | 000,000,000 | ---D | C] -- C:Documents and SettingsUserApplication DataMalwarebytes
[2013.06.21 21:45:52 | 000,000,000 | ---D | C] -- C:Documents and SettingsAll UsersStart MenuProgramsMalwarebytes' Anti-Malware
[2013.06.21 21:45:48 | 000,000,000 | ---D | C] -- C:Documents and SettingsAll UsersApplication DataMalwarebytes
[2013.06.21 21:45:43 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:WINDOWSSystem32driversmbam.sys
[2013.06.21 21:45:43 | 000,000,000 | ---D | C] -- C:Program FilesMalwarebytes' Anti-Malware
[2013.06.21 21:18:28 | 000,000,000 | ---D | C] -- C:WINDOWSERUNT
[2013.06.20 12:50:00 | 000,000,000 | R--D | C] -- D:Моите документи vikiJustin
[2013.06.20 12:45:06 | 000,000,000 | R--D | C] -- D:Моите документи vikiснимки
[2013.06.20 12:42:31 | 000,000,000 | ---D | C] -- D:Моите документи vikiКЛИП-AATW
[2013.06.20 12:42:13 | 000,000,000 | ---D | C] -- D:Моите документи vikiART
[2013.06.20 12:39:45 | 000,000,000 | ---D | C] -- D:Моите документи vikiСтари данни Firefox
[2013.06.20 12:34:44 | 000,000,000 | R--D | C] -- D:Моите документи vikiBFF
[2013.06.18 13:51:31 | 000,000,000 | ---D | C] -- C:Program FilesFree Window Registry Repair
[2013.06.14 08:56:22 | 000,000,000 | ---D | C] -- C:Program FilesCommon FilesWise Installation Wizard
[2013.06.09 11:41:45 | 000,000,000 | ---D | C] -- C:Program FilesAdobe
 
========== Files - Modified Within 30 Days ==========
 
[2013.06.29 13:41:42 | 000,039,291 | ---- | M] () -- C:WINDOWSSystem32nvapps.xml
[2013.06.29 13:41:40 | 000,000,978 | ---- | M] () -- C:WINDOWStasksGoogleUpdateTaskMachineCore.job
[2013.06.29 13:41:40 | 000,000,318 | -H-- | M] () -- C:WINDOWStasksavast! Emergency Update.job
[2013.06.29 13:41:31 | 000,002,048 | --S- | M] () -- C:WINDOWSbootstat.dat
[2013.06.29 13:37:00 | 000,000,830 | ---- | M] () -- C:WINDOWStasksAdobe Flash Player Updater.job
[2013.06.29 13:28:00 | 000,000,982 | ---- | M] () -- C:WINDOWStasksGoogleUpdateTaskMachineUA.job
[2013.06.29 11:12:17 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:Documents and SettingsUserDesktopOTL.exe
[2013.06.29 10:38:11 | 000,099,775 | ---- | M] () -- C:Documents and SettingsUserDesktopбез име 12233.JPG
[2013.06.29 10:03:38 | 000,078,443 | ---- | M] () -- C:Documents and SettingsUserDesktopбез и1222.JPG
[2013.06.29 09:36:17 | 000,000,996 | ---- | M] () -- C:temp504.bat
[2013.06.29 09:33:55 | 000,001,226 | ---- | M] () -- C:temp367.bat
[2013.06.29 09:33:45 | 000,000,855 | ---- | M] () -- C:WINDOWSSystem32driversetchosts
[2013.06.29 09:29:16 | 000,023,392 | ---- | M] () -- C:WINDOWSSystem32nscompat.tlb
[2013.06.29 09:29:16 | 000,016,832 | ---- | M] () -- C:WINDOWSSystem32amcompat.tlb
[2013.06.29 09:22:40 | 000,400,464 | ---- | M] () -- C:WINDOWSSystem32perfh009.dat
[2013.06.29 09:22:40 | 000,060,624 | ---- | M] () -- C:WINDOWSSystem32perfc009.dat
[2013.06.29 09:11:52 | 000,181,064 | ---- | M] (Sysinternals) -- C:WINDOWSPSEXESVC.EXE
[2013.06.29 08:30:09 | 000,075,111 | ---- | M] () -- C:Documents and SettingsUserDesktopздскккщ.JPG
[2013.06.28 22:12:58 | 000,001,812 | ---- | M] () -- C:Documents and SettingsUserDesktopTweaking.com - Windows Repair (All in One).lnk
[2013.06.28 22:06:38 | 005,555,190 | ---- | M] () -- C:Documents and SettingsUserDesktoptweaking.com_windows_repair_aio_setup.exe
[2013.06.28 22:01:57 | 000,068,370 | ---- | M] () -- C:Documents and SettingsUserDesktopпроблем.JPG
[2013.06.28 21:58:35 | 000,139,264 | ---- | M] () -- C:Documents and SettingsUserDesktopSystemLook(1).exe
[2013.06.28 21:25:26 | 000,073,167 | ---- | M] () -- C:Documents and SettingsUserDesktopмоите документи 2.JPG
[2013.06.28 21:07:41 | 000,000,151 | ---- | M] () -- C:WINDOWSReimage.ini
[2013.06.28 13:27:16 | 000,175,176 | ---- | M] () -- C:WINDOWSSystem32driversaswVmm.sys
[2013.06.28 13:27:16 | 000,000,175 | ---- | M] () -- C:WINDOWSSystem32driversaswVmm.sys.sum
[2013.06.28 13:27:15 | 000,770,344 | ---- | M] (AVAST Software) -- C:WINDOWSSystem32driversaswSnx.sys
[2013.06.28 13:27:15 | 000,369,584 | ---- | M] (AVAST Software) -- C:WINDOWSSystem32driversaswSP.sys
[2013.06.28 13:27:15 | 000,000,175 | ---- | M] () -- C:WINDOWSSystem32driversaswSP.sys.sum
[2013.06.28 13:27:15 | 000,000,175 | ---- | M] () -- C:WINDOWSSystem32driversaswSnx.sys.sum
[2013.06.28 13:26:59 | 000,002,206 | ---- | M] () -- C:WINDOWSSystem32wpa.dbl
[2013.06.27 18:33:11 | 000,153,600 | ---- | M] () -- C:Documents and SettingsUserLocal SettingsApplication DataDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.06.26 19:02:59 | 000,000,155 | ---- | M] () -- C:WINDOWSwinamp.ini
[2013.06.25 18:17:24 | 000,002,265 | ---- | M] () -- C:Documents and SettingsUserDesktopSkype.lnk
[2013.06.24 20:59:00 | 000,140,643 | ---- | M] () -- C:Documents and SettingsUserDesktopпоследно.JPG
[2013.06.23 20:36:44 | 000,448,512 | ---- | M] (OldTimer Tools) -- C:Documents and SettingsUserDesktopTFC.exe
[2013.06.23 20:24:38 | 000,188,200 | ---- | M] () -- C:WINDOWSSystem32FNTCACHE.DAT
[2013.06.23 19:45:18 | 071,478,144 | ---- | M] (Sophos Limited) -- C:Documents and SettingsUserDesktopSophos Virus Removal Tool.exe
[2013.06.22 17:11:11 | 000,001,700 | ---- | M] () -- C:Documents and SettingsAll UsersDesktopavast! Free Antivirus.lnk
[2013.06.22 17:11:04 | 000,002,577 | ---- | M] () -- C:WINDOWSSystem32CONFIG.NT
[2013.06.21 21:45:53 | 000,000,784 | ---- | M] () -- C:Documents and SettingsAll UsersDesktopMalwarebytes Anti-Malware.lnk
[2013.06.18 23:01:24 | 000,035,335 | ---- | M] () -- C:Documents and SettingsUserDesktopchochka.jpg
[2013.06.18 21:32:22 | 1149,164,743 | ---- | M] () -- C:Archive.rar
[2013.06.13 13:23:27 | 000,077,614 | ---- | M] () -- C:Documents and SettingsUserDesktop10581_525458510825003_1371666209_n.jpg
[2013.06.13 13:02:46 | 000,449,547 | ---- | M] () -- C:WINDOWSSystem32driversetchosts.20130615-092226.backup
[2013.06.13 12:09:32 | 000,077,420 | ---- | M] () -- C:Documents and SettingsUserDesktopсъобщение.JPG
[2013.06.12 21:39:48 | 000,449,547 | R--- | M] () -- C:WINDOWSSystem32driversetchosts.20130613-130246.backup
[2013.06.12 21:15:44 | 000,449,547 | R--- | M] () -- C:WINDOWSSystem32driversetchosts.20130612-213948.backup
[2013.06.12 13:20:38 | 000,449,547 | R--- | M] () -- C:WINDOWSSystem32driversetchosts.20130612-211544.backup
[2013.06.12 12:39:11 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:WINDOWSSystem32FlashPlayerApp.exe
[2013.06.12 12:39:10 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:WINDOWSSystem32FlashPlayerCPLApp.cpl
[2013.06.11 20:53:15 | 000,449,351 | R--- | M] () -- C:WINDOWSSystem32driversetchosts.20130612-132038.backup
[2013.06.11 20:19:00 | 000,449,351 | R--- | M] () -- C:WINDOWSSystem32driversetchosts.20130611-205315.backup
[2013.06.11 18:35:37 | 000,449,351 | R--- | M] () -- C:WINDOWSSystem32driversetchosts.20130611-201859.backup
[2013.06.09 19:44:17 | 000,020,480 | ---- | M] () -- D:Моите документи vikiphotothumb.db
[2013.06.05 13:19:59 | 000,066,201 | ---- | M] () -- C:Documents and SettingsUserDesktop296168_508758752505738_948550959_n.jpg
 
========== Files Created - No Company Name ==========
 
[2013.06.29 10:38:07 | 000,099,775 | ---- | C] () -- C:Documents and SettingsUserDesktopбез име 12233.JPG
[2013.06.29 10:03:33 | 000,078,443 | ---- | C] () -- C:Documents and SettingsUserDesktopбез и1222.JPG
[2013.06.29 09:36:16 | 000,000,996 | ---- | C] () -- C:temp504.bat
[2013.06.29 09:33:55 | 000,001,226 | ---- | C] () -- C:temp367.bat
[2013.06.29 08:30:08 | 000,075,111 | ---- | C] () -- C:Documents and SettingsUserDesktopздскккщ.JPG
[2013.06.28 22:12:58 | 000,001,812 | ---- | C] () -- C:Documents and SettingsUserDesktopTweaking.com - Windows Repair (All in One).lnk
[2013.06.28 22:06:57 | 005,555,190 | ---- | C] () -- C:Documents and SettingsUserDesktoptweaking.com_windows_repair_aio_setup.exe
[2013.06.28 22:01:56 | 000,068,370 | ---- | C] () -- C:Documents and SettingsUserDesktopпроблем.JPG
[2013.06.28 21:59:03 | 000,139,264 | ---- | C] () -- C:Documents and SettingsUserDesktopSystemLook(1).exe
[2013.06.28 21:25:25 | 000,073,167 | ---- | C] () -- C:Documents and SettingsUserDesktopмоите документи 2.JPG
[2013.06.28 21:01:52 | 000,000,151 | ---- | C] () -- C:WINDOWSReimage.ini
[2013.06.28 13:27:21 | 000,000,175 | ---- | C] () -- C:WINDOWSSystem32driversaswVmm.sys.sum
[2013.06.27 12:17:45 | 000,000,175 | ---- | C] () -- C:WINDOWSSystem32driversaswSnx.sys.sum
[2013.06.27 12:17:44 | 000,000,175 | ---- | C] () -- C:WINDOWSSystem32driversaswSP.sys.sum
[2013.06.24 20:58:56 | 000,140,643 | ---- | C] () -- C:Documents and SettingsUserDesktopпоследно.JPG
[2013.06.22 17:11:11 | 000,001,700 | ---- | C] () -- C:Documents and SettingsAll UsersDesktopavast! Free Antivirus.lnk
[2013.06.21 21:45:53 | 000,000,784 | ---- | C] () -- C:Documents and SettingsAll UsersDesktopMalwarebytes Anti-Malware.lnk
[2013.06.18 23:01:23 | 000,035,335 | ---- | C] () -- C:Documents and SettingsUserDesktopchochka.jpg
[2013.06.18 19:21:22 | 1149,164,743 | ---- | C] () -- C:Archive.rar
[2013.06.13 13:23:11 | 000,077,614 | ---- | C] () -- C:Documents and SettingsUserDesktop10581_525458510825003_1371666209_n.jpg
[2013.06.13 12:09:28 | 000,077,420 | ---- | C] () -- C:Documents and SettingsUserDesktopсъобщение.JPG
[2013.06.09 11:46:18 | 000,001,804 | ---- | C] () -- C:Documents and SettingsAll UsersStart MenuProgramsAdobe Reader XI.lnk
[2013.06.05 13:19:48 | 000,066,201 | ---- | C] () -- C:Documents and SettingsUserDesktop296168_508758752505738_948550959_n.jpg
[2013.02.26 14:17:09 | 000,178,688 | ---- | C] () -- C:WINDOWSSystem32unrar.dll
[2012.01.07 19:08:08 | 000,122,880 | ---- | C] () -- C:WINDOWSrm305.exe
[2012.01.07 19:08:00 | 000,000,900 | ---- | C] () -- C:WINDOWSrm305.ini
[2012.01.07 14:08:48 | 000,000,056 | ---- | C] () -- C:WINDOWSSystem32ezsidmv.dat
[2011.02.01 15:39:57 | 000,153,600 | ---- | C] () -- C:Documents and SettingsUserLocal SettingsApplication DataDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
========== ZeroAccess Check ==========
 
[2012.06.25 09:48:51 | 000,000,227 | RHS- | M] () -- C:WINDOWSassemblyDesktop.ini
 
[HKEY_CURRENT_USERSoftwareClassesclsid{42aedc87-2188-41fd-b9a3-0c966feabec1}InProcServer32]
 
[HKEY_CURRENT_USERSoftwareClassesclsid{fbeb8a05-beee-4442-804e-409d6c4515e9}InProcServer32]
 
[HKEY_LOCAL_MACHINESoftwareClassesclsid{42aedc87-2188-41fd-b9a3-0c966feabec1}InProcServer32]
"" = %SystemRoot%system32shdocvw.dll -- [2009.10.02 07:27:04 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINESoftwareClassesclsid{5839FCA9-774D-42A1-ACDA-D6A79037F57F}InProcServer32]
"" = %systemroot%system32wbemfastprox.dll -- [2009.10.02 07:26:47 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINESoftwareClassesclsid{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}InProcServer32]
"" = %systemroot%system32wbemwbemess.dll -- [2009.10.02 07:27:09 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2011.01.31 15:09:03 | 000,000,000 | ---D | M] -- C:Documents and SettingsAll UsersApplication DataAlwil Software
[2012.06.25 13:26:05 | 000,000,000 | ---D | M] -- C:Documents and SettingsAll UsersApplication DataAzPeq
[2013.06.28 21:03:31 | 000,000,000 | ---D | M] -- C:Documents and SettingsAll UsersApplication DataCommon Files
[2012.08.06 11:45:57 | 000,000,000 | ---D | M] -- C:Documents and SettingsAll UsersApplication DataManyCam
[2013.04.27 15:30:42 | 000,000,000 | ---D | M] -- C:Documents and SettingsAll UsersApplication DataPhotodex
[2013.06.23 20:54:10 | 000,000,000 | ---D | M] -- C:Documents and SettingsAll UsersApplication DataSophos
[2011.02.01 15:37:30 | 000,000,000 | ---D | M] -- C:Documents and SettingsUserApplication DataGetRightToGo
[2012.09.12 10:18:51 | 000,000,000 | ---D | M] -- C:Documents and SettingsUserApplication DataManyCam
[2013.04.27 15:31:15 | 000,000,000 | ---D | M] -- C:Documents and SettingsUserApplication DataNetscape
[2013.04.27 15:29:36 | 000,000,000 | ---D | M] -- C:Documents and SettingsUserApplication DataPhotodex
[2013.03.05 13:42:50 | 000,000,000 | ---D | M] -- C:Documents and SettingsUserApplication DataPhotoScape
[2012.06.09 21:46:49 | 000,000,000 | ---D | M] -- C:Documents and SettingsUserApplication DataSuper-Cow
[2013.02.08 23:00:02 | 000,000,000 | ---D | M] -- C:Documents and SettingsUserApplication DatauTorrent
 
========== Purity Check ==========
 
 

< End of report >
 

OTL Extras logfile created on: 29.6.2013 г. 13:57:39 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:Documents and SettingsUserDesktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000402 | Country: Bulgaria | Language: BGR | Date Format: dd.M.yyyy 'г.'
 
447,30 Mb Total Physical Memory | 64,82 Mb Available Physical Memory | 14,49% Memory free
1,03 Gb Paging File | 0,58 Gb Available in Paging File | 56,65% Paging File free
Paging file location(s): C:pagefile.sys 672 1344 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:WINDOWS | %ProgramFiles% = C:Program Files
Drive C: | 15,63 Gb Total Space | 1,63 Gb Free Space | 10,42% Space Free | Partition Type: NTFS
Drive D: | 58,89 Gb Total Space | 23,41 Gb Free Space | 39,74% Space Free | Partition Type: NTFS
 
Computer Name: PRIVATE-7D45A86 | User Name: User | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINESOFTWAREClasses<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = ChromeHTML] -- C:Program FilesGoogleChromeApplicationchrome.exe (Google Inc.)
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l
 
[HKEY_USERSS-1-5-21-1177238915-562591055-1417001333-1003SOFTWAREClasses<extension>]
.html [@ = FirefoxHTML] -- C:Program FilesMozilla Firefoxfirefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINESOFTWAREClasses<key>shell[command]command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htafile [open] -- "%1" %*
https [open] -- "C:Program FilesGoogleChromeApplicationchrome.exe" -- "%1" (Google Inc.)
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%system32rundll32.exe %SystemRoot%system32shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:Program FilesWinampWinamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:Program FilesWinampWinamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:Program FilesWinampWinamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoring]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringAhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringKasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringMcAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringMcAfeeFirewall]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringPandaAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringPandaFirewall]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSophosAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSymantecAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSymantecFirewall]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTinyFirewall]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTrendAntiVirus]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTrendFirewall]
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringZoneLabsFirewall]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSr]
"Start" = 0
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewall]
 
[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewallDomainProfile]
 
[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewallStandardProfile]
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyDomainProfile]
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfile]
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileGloballyOpenPortsList]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyDomainProfileAuthorizedApplicationsList]
"%windir%Network Diagnosticxpnetdiag.exe" = %windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%system32sessmgr.exe" = %windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList]
"C:Program FilesSkypePhoneSkype.exe" = C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype  -- (Skype Technologies S.A.)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"{14291118-0C19-45EA-A4FA-5C1C0F5FDE09}" = Primo
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{72FD5F2E-1F7A-4E9B-8838-29E842E178CD}" = PC Suite
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.03)
"{ADE16A9D-FBDC-4ECC-B6BD-9C31E51D0305}" = USB PC Camera VC305
"{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1
"{C408D81A-CB17-4CDF-98AF-2E64036B3F32}" = Windows Bulgarian Interface Pack
"{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
"{DABF43D9-1104-4764-927B-5BED1274A3B0}" = Runtime
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"avast" = avast! Free Antivirus
"FormatFactory" = FormatFactory 3.0.1
"FromDocToPDF_65bar Uninstall" = FromDocToPDF Toolbar
"GOM Player" = GOM Player
"Google Chrome" = Google Chrome
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware, версия 1.75.0.1300
"Mozilla Firefox 21.0 (x86 bg)" = Mozilla Firefox 21.0 (x86 bg)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIA Drivers" = NVIDIA Drivers
"PhotoScape" = PhotoScape
"Tweaking.com - Windows Repair (All in One)" = Tweaking.com - Windows Repair (All in One)
"uTorrent" = µTorrent
"Winamp" = Winamp (remove only)
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows Media Player" = Windows Media Player 10
"WinRAR archiver" = WinRAR archiver
"Супер Крава" = Супер Крава
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 11.6.2013 г. 13:30:39 | Computer Name = PRIVATE-7D45A86 | Source = EventSystem | ID = 4609
Description = The COM+ Event System detected a bad return code during its internal
 processing.  HRESULT was 800706BA from line 44 of d:comxp_sp3comcom1xsrceventstier1eventsystemobj.cpp.
  Please contact Microsoft Product Support Services to report this erro
 
Error - 15.6.2013 г. 17:55:29 | Computer Name = PRIVATE-7D45A86 | Source = Application Error | ID = 1000
Description = Faulting application skype.exe, version 6.3.0.107, faulting module
 skype.exe, version 6.3.0.107, fault address 0x003b235e.
 
Error - 18.6.2013 г. 02:41:32 | Computer Name = PRIVATE-7D45A86 | Source = Application Hang | ID = 1002
Description = Hanging application Skype.exe, version 6.3.0.107, hang module hungapp,
 version 0.0.0.0, hang address 0x00000000.
 
Error - 18.6.2013 г. 04:43:31 | Computer Name = PRIVATE-7D45A86 | Source = Application Hang | ID = 1002
Description = Hanging application chrome.exe, version 27.0.1453.110, hang module
 hungapp, version 0.0.0.0, hang address 0x00000000.
 
Error - 19.6.2013 г. 17:22:08 | Computer Name = PRIVATE-7D45A86 | Source = Application Error | ID = 1000
Description = Faulting application skype.exe, version 6.3.0.107, faulting module
 skype.exe, version 6.3.0.107, fault address 0x003b235e.
 
Error - 20.6.2013 г. 11:16:59 | Computer Name = PRIVATE-7D45A86 | Source = Application Error | ID = 1000
Description = Faulting application gom.exe, version 2.1.18.4762, faulting module
 gvf.ax, version 0.0.0.0, fault address 0x000384fc.
 
Error - 24.6.2013 г. 23:16:52 | Computer Name = PRIVATE-7D45A86 | Source = Application Error | ID = 1000
Description = Faulting application winamp.exe, version 5.0.0.3, faulting module
libmp4v2.dll, version 0.0.0.0, fault address 0x0000f59c.
 
Error - 29.6.2013 г. 02:16:12 | Computer Name = PRIVATE-7D45A86 | Source = WinMgmt | ID = 4
Description = Failed to load MOF C:WINDOWSMICROSOFT.NETFRAMEWORKV2.0.50727CLR.MOF
 while recovering repository file.
 
Error - 29.6.2013 г. 02:16:12 | Computer Name = PRIVATE-7D45A86 | Source = WinMgmt | ID = 4
Description = Failed to load MOF C:WINDOWSMICROSOFT.NETFRAMEWORKV2.0.50727ASPNET.MOF
 while recovering repository file.
 
Error - 29.6.2013 г. 02:52:48 | Computer Name = PRIVATE-7D45A86 | Source = VSS | ID = 4099
Description = Volume Shadow Copy Service error: Cannot install the component C:Documents
 and SettingsUserDesktopSWPRV.DLL into the COM+ application 'MS Software Shadow
 Copy Provider' [0x80110401].
 
[ System Events ]
Error - 29.6.2013 г. 06:35:31 | Computer Name = PRIVATE-7D45A86 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context failed for C:WINDOWSsystem32ssmyst.scr.
Reference
 error message: The operation completed successfully.  .
 
Error - 29.6.2013 г. 06:35:32 | Computer Name = PRIVATE-7D45A86 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls.
Reference
 error message: Insufficient system resources exist to complete the requested service.
.
 
Error - 29.6.2013 г. 06:35:32 | Computer Name = PRIVATE-7D45A86 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context failed for C:WINDOWSsystem32ssmyst.scr.
Reference
 error message: The operation completed successfully.  .
 
Error - 29.6.2013 г. 06:35:33 | Computer Name = PRIVATE-7D45A86 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls.
Reference
 error message: Insufficient system resources exist to complete the requested service.
.
 
Error - 29.6.2013 г. 06:35:33 | Computer Name = PRIVATE-7D45A86 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context failed for C:WINDOWSsystem32ssmyst.scr.
Reference
 error message: The operation completed successfully.  .
 
Error - 29.6.2013 г. 06:36:34 | Computer Name = PRIVATE-7D45A86 | Source = Srv | ID = 2020
Description = The server was unable to allocate from the system paged pool because
 the pool was empty.
 
Error - 29.6.2013 г. 06:37:34 | Computer Name = PRIVATE-7D45A86 | Source = Srv | ID = 2020
Description = The server was unable to allocate from the system paged pool because
 the pool was empty.
 
Error - 29.6.2013 г. 06:38:34 | Computer Name = PRIVATE-7D45A86 | Source = Srv | ID = 2020
Description = The server was unable to allocate from the system paged pool because
 the pool was empty.
 
Error - 29.6.2013 г. 06:42:07 | Computer Name = PRIVATE-7D45A86 | Source = Service Control Manager | ID = 7000
Description = The ScsiAccess service failed to start due to the following error:
%%3
 
Error - 29.6.2013 г. 06:42:30 | Computer Name = PRIVATE-7D45A86 | Source = DCOM | ID = 10010
Description = The server {4EB61BAC-A3B6-4760-9581-655041EF4D69} did not register
 with DCOM within the required timeout.
 
 
< End of report >
 

Стартирайте отново OTL, копирайте (Copy) и поставете (Paste) скриптовия текст от текстовото поле по-долу под колонката Custom Scans/Fixes, като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта.

:OTLFF - HKLMSoftwareMozillaPlugins@FromDocToPDF_65.com/Plugin: C:Program FilesFromDocToPDF_65bar2.binNP65Stub.dll File not foundFF - HKLMSoftwareMozillaPlugins@VideoDownloadConverter_4z.com/Plugin: C:Program FilesVideoDownloadConverter_4zbar1.binNP4zStub.dll File not foundFF - HKEY_LOCAL_MACHINEsoftwaremozillaFirefoxExtensions65ffxtbr@FromDocToPDF_65.com: C:Program FilesFromDocToPDF_65bar2.bin:filesC:Program FilesFromDocToPDF_65bar2.binC:Program FilesVideoDownloadConverter_4zbar1.binNP4zStub.dllC:Program FilesFromDocToPDF_65bar2.binNP65Stub.dllautorun.inf /alldrivesrecycler /alldrivesipconfig /flushdns /c:Commands[purity][emptytemp][clearallrestorepoints][Reboot]

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix
Windows ще се рестартира и ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.
По време на фикса с инструмента, не използвайте компютъра си!

All processes killed
========== OTL ==========
Registry key HKEY_LOCAL_MACHINESoftwareMozillaPlugins@FromDocToPDF_65.com/Plugin deleted successfully.
Registry key HKEY_LOCAL_MACHINESoftwareMozillaPlugins@VideoDownloadConverter_4z.com/Plugin deleted successfully.
Registry value HKEY_LOCAL_MACHINEsoftwaremozillaFirefoxExtensions65ffxtbr@FromDocToPDF_65.com deleted successfully.
File C:Program FilesFromDocToPDF_65bar2.bin not found.
========== FILES ==========
FileFolder C:Program FilesFromDocToPDF_65bar2.bin not found.
FileFolder C:Program FilesVideoDownloadConverter_4zbar1.binNP4zStub.dll not found.
FileFolder C:Program FilesFromDocToPDF_65bar2.binNP65Stub.dll not found.
autorun.inf not found in C:
autorun.inf not found in D:
C:RECYCLERS-1-5-21-1177238915-562591055-1417001333-1003 folder moved successfully.
C:RECYCLER folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1005 folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003Dd5 folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003Dd3Skins folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003Dd3Custom Pictures folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003Dd3 folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003Dd2userditty folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003Dd2user folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003Dd2R. 0 folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003Dd2D. Squads folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003Dd2A. Settings folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003Dd2 folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003Dd1user folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003Dd1 folder moved successfully.
D:RECYCLERS-1-5-21-1757981266-515967899-725345543-1003 folder moved successfully.
D:RECYCLERS-1-5-21-1606980848-57989841-1417001333-1003 folder moved successfully.
D:RECYCLERS-1-5-21-1275210071-527237240-839522115-1003 folder moved successfully.
D:RECYCLERS-1-5-21-1177238915-562591055-1417001333-1003 folder moved successfully.
D:RECYCLER folder moved successfully.
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:Documents and SettingsUserDesktopcmd.bat deleted successfully.
C:Documents and SettingsUserDesktopcmd.txt deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: User
->Temp folder emptied: 64156159 bytes
->Temporary Internet Files folder emptied: 22662312 bytes
->FireFox cache emptied: 20659999 bytes
->Google Chrome cache emptied: 196679639 bytes
->Flash cache emptied: 1245 bytes
 
User: эсншдис,
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%System32 .tmp files removed: 0 bytes
%systemroot%System32dllcache .tmp files removed: 0 bytes
%systemroot%System32drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 490066 bytes
%systemroot%system32configsystemprofileLocal SettingsTemp folder emptied: 1176015 bytes
%systemroot%system32configsystemprofileLocal SettingsTemporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 292,00 mb
 
Restore point Set: OTL Restore Point
 
OTL by OldTimer - Version 3.2.69.0 log created on 06292013_184638

FilesFolders moved on Reboot...
File move failed. C:WINDOWStemp_avast_Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...
 

Ами това ще е от мен..!
 
Стартирайте OTL още веднъж и натиснете бутона CleanUp.



Ще последва рестарт на компютъра ви..!Сега е момента да изтриете всичко което използвахме в процедурата,както и всички генерирани логове...всички програмки и фиксове които са останали...Оставете си само програмата Malwarebytes' Anti-Malware и периодически сканирайте с нея..

 

Още веднъж..имате ли още проблеми..?

Здравей,  основния  проблем, за който писах темата вече го няма.  ОГРОМНО БЛАГОДАРЯ за търпението, труда и времето , което ми отдели.   Свършихме, много работа.

Интересува ме обаче, защо като стартирам Windows Repair All in one трета стъпка не може да се изпълни и ми дава грешки.  Това дали не е проблем, че не съм го изпълнила ?

И още няколко въпросчета....

От програмите , които имам има ли такива които се повтарят/ в смисъл различни програми, с еднакво действие/ и мога да деинсталирам?

Стига да не прекалявам с въпросите , но какво мога да направя, за да освободя памет на диск С?

 

Отново много благодаря !!! Страхотни сте !!! :clap: :clap:

Редактирано 29 юни 201313 г. от denito_vikito (преглед на промените)

Здравей,  основния  проблем, за който писах темата вече го няма.  ОГРОМНО БЛАГОДАРЯ за търпението, труда и времето , което ми отдели.

Интересува ме обаче, защо като стартирам Windows Repair All in one трета стъпка не може да се изпълни и ми дава грешки.  Това дали не е проблем, че не съм го изпълнила ?

 

За тази стъпка се изисква инсталационен диск с Windows XP..точно и това гласи съобщението..да поставите диска в CD-ROM....Идеята на тази стъпка е да се изпълни командата sfc /scannow с която се проверяват и поправят системни файлове и ако има такива да се заменят от инсталациония диск.