surogati Публикувано Юли 7, 2010 Report Share Публикувано Юли 7, 2010 Когато сменя началната страница на Mozilla Firefox с Google.com,и затворя Mozilla ми се променя с Wabalta.ru.Мсля че е някакъв вирс.Незнам как да го оправя.Моля помагаите Цитирай Link to comment Сподели другаде More sharing options...
B-boy/StyLe/ Публикувано Юли 7, 2010 Report Share Публикувано Юли 7, 2010 Направете една проверка със следните неща: СТЪПКА 1 Изтеглете Malwarebytes' Anti-Malware от тук Кликнете два пъти върху mbam-setup.exe за да инсталирате програмата. * Уверете се, че има отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware, след това кликнете на Finish.* Ако има намерени по-нови обновления, тя ще ги изтегли и инсталира.* Стартирайте програмата и изберете "Perform Quick Scan", след това кликнете на Scan.* Сканирането ще отнеме малко време, затова моля бъдете търпеливи.* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.* Уверете се, че на всички редове има отметки, и кликнете Remove Selected.* Когато всичко бъде премахнато, логът ще бъде отворен в Notepad. Копирайте лога и го публикувайте в следващия си коментар в темата. Бележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран. СТЪПКА 2 4. Изтеглете: ESET Online Scanner* Стартирайте esetsmartinstaller_enu.exe* Сложете отметка на YES, I accept the Terms of Use и изберете Start* Скенерът ще започне да изтегля компонентите, които са му необходими.* Уверете се, че има отметки на следните редове, включително и тези от менюто Advanced Settings: Remove found threatsScan archivesScan for potentially unwanted applicationsScan for potentially unsafe applicationsEnable Anti-Stealth technology И накрая изберете Start * Скенерът ще започне да изтегля последните дефиниции.* След, като сканирането завърши изберете Finish.* Отидете в:C:\Program Files\ESET\ESET Online Scanner Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си пост тук. Поздрави ! Цитирай Link to comment Сподели другаде More sharing options...
surogati Публикувано Юли 7, 2010 Author Report Share Публикувано Юли 7, 2010 Порбвах пради да пиша във форума,но нищо не стана.Сега ще пробвам на ново,и ще копирам резултатите. ESETSmartInstaller@High as downloader log:all ok# version=7# OnlineScannerApp.exe=1.0.0.1# OnlineScanner.ocx=1.0.0.6211# api_version=3.0.2# EOSSerial=2edf5056e23f8a44b09018769e4186d4# end=finished# remove_checked=true# archives_checked=true# unwanted_checked=true# unsafe_checked=false# antistealth_checked=true# utc_time=2010-07-04 03:53:58# local_time=2010-07-04 05:53:58 )# country="Bulgaria"# lang=1033# osver=6.0.6002 NT Service Pack 2# compatibility_mode=768 16777215 100 0 5301785 5301785 0 0# compatibility_mode=5892 16776573 100 100 193775 115738341 0 0# compatibility_mode=8192 67108863 100 0 0 0 0 0# scanned=253563# found=0# cleaned=0# scan_time=10024ESETSmartInstaller@High as downloader log:all ok# version=7# OnlineScannerApp.exe=1.0.0.1# OnlineScanner.ocx=1.0.0.6211# api_version=3.0.2# EOSSerial=2edf5056e23f8a44b09018769e4186d4# end=finished# remove_checked=true# archives_checked=true# unwanted_checked=true# unsafe_checked=false# antistealth_checked=true# utc_time=2010-07-04 12:58:04# local_time=2010-07-04 02:58:04 )# country="Bulgaria"# lang=1033# osver=6.0.6002 NT Service Pack 2# compatibility_mode=768 16777215 100 0 5333069 5333069 0 0# compatibility_mode=5892 16776573 100 100 225059 115769625 0 0# compatibility_mode=8192 67108863 100 0 0 0 0 0# scanned=253593# found=0# cleaned=0# scan_time=11390ESETSmartInstaller@High as downloader log:all ok# version=7# OnlineScannerApp.exe=1.0.0.1# OnlineScanner.ocx=1.0.0.6211# api_version=3.0.2# EOSSerial=2edf5056e23f8a44b09018769e4186d4# end=finished# remove_checked=true# archives_checked=true# unwanted_checked=true# unsafe_checked=false# antistealth_checked=true# utc_time=2010-07-06 01:21:11# local_time=2010-07-06 03:21:11 )# country="Bulgaria"# lang=1033# osver=6.0.6002 NT Service Pack 2# compatibility_mode=768 16777215 100 0 5508468 5508468 0 0# compatibility_mode=5892 16776573 100 100 52182 115945024 0 0# compatibility_mode=8192 67108863 100 0 0 0 0 0# scanned=254390# found=0# cleaned=0# scan_time=10175 Цитирай Link to comment Сподели другаде More sharing options...
B-boy/StyLe/ Публикувано Юли 7, 2010 Report Share Публикувано Юли 7, 2010 Да разбирам ли, че имате проблем с изтеглянето на Malwarebytes ?Ако е така ще се наложи по-сериозен анализ с други инструменти.Тъй като аз временно нямам възможност да ги използвам заради един проект, ще Ви пратя някой колега да ви преслуша.Ако можете пък да сканирате с Malwarebytes, го направете (като не забравяте да обновите дефинициите).Според това какви ще са резултатите от лог файла на Malwarebytes и дали евентуалното почистване с MBAM ще оправи проблема ще решим как да процедираме по-нататък. Цитирай Link to comment Сподели другаде More sharing options...
surogati Публикувано Юли 7, 2010 Author Report Share Публикувано Юли 7, 2010 Malwarebytes' Anti-Malware 1.46www.malwarebytes.org Версия на базата от данни: 4288 Windows 6.0.6002 Service Pack 2Internet Explorer 8.0.6001.18928 7.7.2010 г. 18:10:09mbam-log-2010-07-07 (18-10-09).txt Тип сканиране: Пълно сканиране (C:\|D:\|F:\|G:\|)Сканирани обекти: 377274Изминало време: 1 час(а), 52 минута(и), 35 секунда(и) Заразени процеси в паметта: 0Заразени модули в паметта: 0Заразени ключове в регистратурата: 0Заразени стойности в регистратурата: 0Заразени информационни обекти в регистратурата: 0Заразени папки: 0Заразени файлове: 0 Заразени процеси в паметта:(Не бяха открити зловредни обекти) Заразени модули в паметта:(Не бяха открити зловредни обекти) Заразени ключове в регистратурата:(Не бяха открити зловредни обекти) Заразени стойности в регистратурата:(Не бяха открити зловредни обекти) Заразени информационни обекти в регистратурата:(Не бяха открити зловредни обекти) Заразени папки:(Не бяха открити зловредни обекти) Заразени файлове:(Не бяха открити зловредни обекти) Цитирай Link to comment Сподели другаде More sharing options...
Night_Raven Публикувано Юли 7, 2010 Report Share Публикувано Юли 7, 2010 Изтегли OTL и го запази на работния плот:- стартирай инструмента;- в поле Custom Scans/Fixes (в долната част на програмата) постави следния текст (маркирай го, натисни Ctrl+C и после в полето на OTL натисни Ctrl+V):netsvcs msconfig safebootminimal safebootnetwork activex drivers32 %SYSTEMDRIVE%\*.* /md5start eventlog.dll scecli.dll netlogon.dll cngaudit.dll sceclt.dll ntelogon.dll logevent.dll iaStor.sys nvstor.sys atapi.sys IdeChnDr.sys viasraid.sys AGP440.sys vaxscsi.sys nvatabus.sys viamraid.sys nvata.sys nvgts.sys iastorv.sys ViPrt.sys eNetHook.dll ahcix86.sys KR10N.sys nvstor32.sys ahcix86s.sys nvrd32.sys /md5stop CREATERESTOREPOINT %systemroot%\*. /mp /s %systemroot%\system32\*.dll /lockedfiles %systemroot%\Tasks\*.job /lockedfiles %PROGRAMFILES%\*. %userprofile%\Desktop\*.* %userprofile%\Desktop\*. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs- в поле Output избери Minimal Output;- увери се, че е избрана опцията Use SafeList във всичките 6 полета в лявата половина на прозореца;- увери се, че е избрана опцията File Age в двете полета в дясната половина на прозореца;- постави отметки на всички опции, налични в прозореца на програмата;- кликни бутон Run Scan;Изчакай сканирането да приключи. След края на сканирането автоматично ще се отворят двата новосъздадени на работния плот файла: OTL.txt и Extras.txt.Моля, прикачи тези два файла (поотделно или в архив) към следващия си коментар. Цитирай Link to comment Сподели другаде More sharing options...
surogati Публикувано Юли 7, 2010 Author Report Share Публикувано Юли 7, 2010 OTL Extras logfile created on: 7.7.2010 г. 20:43:48 - Run 1OTL by OldTimer - Version 3.2.7.1 Folder = C:\Users\Tilyo Petrov Rusev\Searches\DesktopWindows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstationInternet Explorer (Version = 8.0.6001.18928)Locale: 00000402 | Country: Bulgaria | Language: BGR | Date Format: d.M.yyyy 'г.' 3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 40,00% Memory free6,00 Gb Paging File | 4,00 Gb Available in Paging File | 64,00% Paging File freePaging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program FilesDrive C: | 116,44 Gb Total Space | 28,70 Gb Free Space | 24,64% Space Free | Partition Type: NTFSDrive D: | 108,63 Gb Total Space | 18,97 Gb Free Space | 17,46% Space Free | Partition Type: NTFSE: Drive not present or media not loadedDrive F: | 35,81 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFSG: Drive not present or media not loadedH: Drive not present or media not loadedI: Drive not present or media not loaded Computer Name: TILYOPETROVRUS1Current User Name: Tilyo Petrov RusevLogged in as Administrator. Current Boot Mode: NormalScan Mode: All usersCompany Name Whitelist: OnSkip Microsoft Files: OnFile Age = 30 DaysOutput = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>].cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation).hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation).hta [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found [HKEY_USERS\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Classes\<extension>].html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]batfile [open] -- "%1" %*cmdfile [open] -- "%1" %*comfile [open] -- "%1" %*cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)exefile [open] -- "%1" %*helpfile [open] -- Reg Error: Key error.hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)htafile [open] -- Reg Error: Key error.htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)piffile [open] -- "%1" %*regfile [merge] -- Reg Error: Key error.scrfile [config] -- "%1"scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)scrfile [open] -- "%1" /Stxtfile [edit] -- Reg Error: Key error.Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]"cval" = 1"UacDisableNotify" = 1"InternetSettingsDisableNotify" = 1"AutoUpdateDisableNotify" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]"DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]"DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]"DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]"AntiVirusOverride" = 0"AntiSpywareOverride" = 0"FirewallOverride" = 0"VistaSp1" = Reg Error: Unknown registry data type -- File not found"VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]"DisableNotifications" = 0"EnableFirewall" = 1"DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]"DisableNotifications" = 0"EnableFirewall" = 1"DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]"DisableNotifications" = 0"EnableFirewall" = 1"DoNotAllowExceptions" = 0 ========== Authorized Applications List ========== ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]"{174A8E5D-9CCE-4980-9035-337FA073FEE0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{2081533B-D18D-4869-AF28-68B594E8E939}" = lport=24132 | protocol=17 | dir=in | name=bitcomet 24132 udp | "{23F4EED1-28AD-4BEE-9FC8-2C9A2AE9A3F5}" = lport=10338 | protocol=17 | dir=in | name=bitcomet 10338 udp | "{2F698DB6-89AF-4220-8FB1-B778CCB4F2ED}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | "{341709A3-A5EA-4FAD-92D3-403B4E78B9F6}" = lport=10243 | protocol=6 | dir=in | app=system | "{342F5416-B09B-4FEC-8CFE-FF4043A788EB}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{365CDD25-75F2-46C6-91D2-BB4B4BE62300}" = lport=24132 | protocol=6 | dir=in | name=bitcomet 24132 tcp | "{3B0F4A7D-5CCA-4DE7-95B8-3767B9343198}" = lport=2869 | protocol=6 | dir=in | app=system | "{3D2876E6-A02E-4DD8-A5F1-EEA9F696D37D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{3ED1488E-07A3-4FB5-ADF3-52C3D75F2FDE}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{5FBE1608-6885-4C48-B553-7CA2711673AD}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{64C3F9C0-0CD3-4E9E-8FC1-49B469509111}" = rport=10243 | protocol=6 | dir=out | app=system | "{A4D2C4A3-4F2E-40B2-A6C4-22072605AFC0}" = lport=10338 | protocol=6 | dir=in | name=bitcomet 10338 tcp | "{E005CCC9-2E80-45BC-970E-9FB27892880E}" = lport=2869 | protocol=6 | dir=in | app=system | "{E77CA450-1407-4C31-BB60-6B076B231399}" = lport=5000 | protocol=17 | dir=in | name=passware kit enterprise demo 9.5 | "{EB3C1DB1-454D-4219-B988-89311452129F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{EDCB8142-445A-433C-9855-8659940B5635}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]"{0D48CA1D-8847-4EBD-B506-98EBB8743D1C}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe | "{263AEAA0-3D40-4E96-BCBB-2B73C7C58A8C}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe | "{31CEF5C0-C2DD-41BD-9EC9-F600B5BE554F}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe | "{34E730FD-AF2E-443F-B977-EFF5D7081257}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{385204B3-34C1-4E50-B627-7A1659FB33D8}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{399CFC05-4B9E-4EE1-85DE-F59F5E837878}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{3C980528-60F5-4213-9C1F-7BA31393A5D8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{3CF9F5F2-AFAD-4AAD-BFCA-728307525379}" = protocol=17 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\update.exe | "{426A84B0-DDB9-46AB-9642-5E5BBACE26E9}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | "{48C74D72-0F81-444D-93FC-A707D5F96375}" = protocol=6 | dir=out | app=system | "{5187CA1E-30C6-45D0-94EF-47232F451431}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe | "{57DEC3E6-E5BA-4FD1-BDE4-B5F84FB66083}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{5BE64FD3-500C-4C4F-863C-139D1A52741B}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe | "{5E15BE13-66A7-4FD9-A028-2D6585811E1F}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{5F7149FF-9289-41FB-A78F-6629AC5C1C9F}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe | "{67879E39-8E57-4A96-950B-4D4C835AD351}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{7874C5E8-0E9D-49F6-82C9-8095F2CA2A6D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{78C98D6F-0E4E-408F-81CB-8B4160B4CD70}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{7CD1BA54-9604-4A4A-94BA-BB1ECDD7FA4C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{8BE3CCE4-0002-4F8B-9A06-C91AC4424479}" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | "{8F406FCA-E9F4-47A3-A28D-88AF6BE898BB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{9EBA2886-0FA2-4F3C-802D-5946714D44C0}" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | "{A11C109C-16C9-40EA-91DC-914485619A5C}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{A91F005C-F807-4F90-95FA-F6DD154AD36D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{AF594BC5-5D41-4AA8-94BA-C226CCD474D7}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{B6525F0F-6C23-4875-84B2-4DE90D031A51}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{BDFBE781-5E73-43B8-8601-D187BCFD6428}" = protocol=6 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\dfx2.exe | "{C16F668B-1D60-454F-9F97-F4959DE1F130}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | "{C6558725-ADC8-422D-BF75-E05D05BE4FB9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D54AE78D-D951-4AC6-A2AA-31DF3627A549}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{E174D539-4F88-4214-A8CB-15DA1081B49C}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{EBF5516D-6622-41EC-BFFA-C09B1BC7889B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{F3143B03-6F0F-4455-B431-B56A3AEFEF8C}" = protocol=17 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\dfx2.exe | "{FA90F71F-B40D-465C-9529-241512F0495F}" = protocol=6 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\update.exe | "TCP Query User{11EF6151-6EBC-4EE8-865D-0E78ED3CFE88}C:\program files\readon technology\readon tv movie radio player 7.2.0.0\internettv.exe" = protocol=6 | dir=in | app=c:\program files\readon technology\readon tv movie radio player 7.2.0.0\internettv.exe | "TCP Query User{1E74337C-894D-4E38-9CC2-BCB63121CA49}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | "TCP Query User{258583ED-424D-4929-BB9C-9B0E48943660}C:\program files\sopcast\sopcast.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\sopcast.exe | "TCP Query User{32CD377C-6F5B-40E2-B6D2-E3D67FC49555}C:\program files\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files\ares\ares.exe | "TCP Query User{3C1A8889-E9E2-4688-B43C-16D116FA1451}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "TCP Query User{488C3585-E817-493F-B1B3-DC118C1D0EB6}C:\users\tilyo petrov rusev\downloads\bitcomet.exe" = protocol=6 | dir=in | app=c:\users\tilyo petrov rusev\downloads\bitcomet.exe | "TCP Query User{51A196E3-6A7F-4676-B7BC-089A687AC53F}C:\program files\ubisoft\gearbox software\brothersinarms\system\bia.exe" = protocol=6 | dir=in | app=c:\program files\ubisoft\gearbox software\brothersinarms\system\bia.exe | "TCP Query User{58517F7C-D996-4976-8152-7787479794D0}C:\program files\bitcomet\bitcomet.exe" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | "TCP Query User{58DA3064-2D80-469F-B0F5-CE7AA92FB518}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | "TCP Query User{5C5C2D44-4126-43F8-815B-A668F6DF9CBA}C:\users\tilyo petrov rusev\downloads\bitcomet.exe" = protocol=6 | dir=in | app=c:\users\tilyo petrov rusev\downloads\bitcomet.exe | "TCP Query User{7161C013-7B07-4248-A23B-9A74D3B33A53}C:\windows\ehome\ehexthost.exe" = protocol=6 | dir=in | app=c:\windows\ehome\ehexthost.exe | "TCP Query User{743CD803-A96E-4231-A57F-1786E194B7A9}C:\program files\sopcast\adv\sopadver.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe | "TCP Query User{7AC0E75B-6616-4CCF-BBB6-AAF5DC995D0F}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "TCP Query User{7ED530E2-B27E-42BD-81C3-38ACA9E154B0}C:\program files\sopcast\sopcast.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\sopcast.exe | "TCP Query User{959403F5-E8C4-4D7D-BEA9-CBEFE7D2B1A1}D:\програми\игри\delta.force.xtreme.2-reloaded\aos_eng.exe" = protocol=6 | dir=in | app=d:\програми\игри\delta.force.xtreme.2-reloaded\aos_eng.exe | "TCP Query User{9D796D26-EDA4-4DAB-AC00-482F5156DF21}C:\program files\zapu\zapu accelerator\wdivi.exe" = protocol=6 | dir=in | app=c:\program files\zapu\zapu accelerator\wdivi.exe | "TCP Query User{B741C8E8-553D-4EAB-8AC5-80A399838440}C:\program files\novalogic\delta force xtreme 2\aos_eng.exe" = protocol=6 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\aos_eng.exe | "TCP Query User{BA3F3C3F-05C2-42ED-9E85-C51EB4C25165}C:\casino\paradisecasino - bulgarian\casino.exe" = protocol=6 | dir=in | app=c:\casino\paradisecasino - bulgarian\casino.exe | "TCP Query User{C3D356C8-CDA6-48B8-8BC4-8C85204663B1}C:\program files\novalogic\delta force xtreme 2\aos_eng.exe" = protocol=6 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\aos_eng.exe | "TCP Query User{EE92014B-FDAB-424C-AF91-3101EE598468}C:\program files\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files\ares\ares.exe | "TCP Query User{EFB10FB5-56FE-43A1-8069-6130122B8EAC}C:\users\tilyo petrov rusev\downloads\bitcomet_win9x.exe" = protocol=6 | dir=in | app=c:\users\tilyo petrov rusev\downloads\bitcomet_win9x.exe | "TCP Query User{F4F92DA2-3804-4FA6-B67D-612486D59CC8}C:\program files\sopcast\adv\sopadver.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe | "UDP Query User{0F3FF822-020F-4EAF-BAF2-FC8A455536CC}D:\програми\игри\delta.force.xtreme.2-reloaded\aos_eng.exe" = protocol=17 | dir=in | app=d:\програми\игри\delta.force.xtreme.2-reloaded\aos_eng.exe | "UDP Query User{11D612C8-C728-44B6-8FBB-1FA329C1D098}C:\program files\ubisoft\gearbox software\brothersinarms\system\bia.exe" = protocol=17 | dir=in | app=c:\program files\ubisoft\gearbox software\brothersinarms\system\bia.exe | "UDP Query User{28310D25-8B78-42BF-BBD6-C821F9A4BF19}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "UDP Query User{2BB99E4F-5364-47C6-A7C2-CAB0FD0B512D}C:\users\tilyo petrov rusev\downloads\bitcomet_win9x.exe" = protocol=17 | dir=in | app=c:\users\tilyo petrov rusev\downloads\bitcomet_win9x.exe | "UDP Query User{3B19D971-E21A-4988-B5C7-C78028F3AD0E}C:\program files\readon technology\readon tv movie radio player 7.2.0.0\internettv.exe" = protocol=17 | dir=in | app=c:\program files\readon technology\readon tv movie radio player 7.2.0.0\internettv.exe | "UDP Query User{3DCD80B7-2DBC-486D-BB3F-C568982F8129}C:\program files\bitcomet\bitcomet.exe" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | "UDP Query User{4F81AC4C-2665-4070-8E11-EBEEAC7B7138}C:\program files\sopcast\sopcast.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\sopcast.exe | "UDP Query User{56D857B5-7BAF-4BB6-8A0F-F124C55D1350}C:\program files\sopcast\adv\sopadver.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe | "UDP Query User{60AA4C9E-9EDC-4FD5-ABA5-E3364164E4B9}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | "UDP Query User{75F1E357-259D-440B-A926-CF5853E0562C}C:\program files\novalogic\delta force xtreme 2\aos_eng.exe" = protocol=17 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\aos_eng.exe | "UDP Query User{85671E3C-2864-48AE-B8EA-5682A5EB5596}C:\program files\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files\ares\ares.exe | "UDP Query User{8C050D3B-1C1F-470D-9308-0CFE34FD4F77}C:\casino\paradisecasino - bulgarian\casino.exe" = protocol=17 | dir=in | app=c:\casino\paradisecasino - bulgarian\casino.exe | "UDP Query User{8CE66FEF-BAEC-4ED9-B7A1-E761988C127B}C:\users\tilyo petrov rusev\downloads\bitcomet.exe" = protocol=17 | dir=in | app=c:\users\tilyo petrov rusev\downloads\bitcomet.exe | "UDP Query User{96F50964-A05F-45F5-A578-71695860F047}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "UDP Query User{AED5FAF9-28F7-4B18-94DD-CE766145E690}C:\windows\ehome\ehexthost.exe" = protocol=17 | dir=in | app=c:\windows\ehome\ehexthost.exe | "UDP Query User{BEF99706-5B07-459B-BA1A-CCAE82B92AEA}C:\program files\novalogic\delta force xtreme 2\aos_eng.exe" = protocol=17 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\aos_eng.exe | "UDP Query User{C10E3A1F-E43E-48C0-8744-234C39AEAB95}C:\program files\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files\ares\ares.exe | "UDP Query User{CF69E18E-7215-4925-BBC7-CED11FD59DF1}C:\program files\sopcast\adv\sopadver.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe | "UDP Query User{E346ECB2-8AA2-4FB3-A53E-76924C69E722}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | "UDP Query User{F4E67420-67BE-456B-A619-2E7917DB3D62}C:\program files\sopcast\sopcast.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\sopcast.exe | "UDP Query User{F53DFBC2-200D-4373-8902-B30AF993313C}C:\users\tilyo petrov rusev\downloads\bitcomet.exe" = protocol=17 | dir=in | app=c:\users\tilyo petrov rusev\downloads\bitcomet.exe | "UDP Query User{FCBC767D-4088-4BCF-A1CE-D8811B3CA988}C:\program files\zapu\zapu accelerator\wdivi.exe" = protocol=17 | dir=in | app=c:\program files\zapu\zapu accelerator\wdivi.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148"{06A395CE-60A6-471E-A73C-73634310EDB3}" = Windows Live Sync"{0CB9668D-F979-4F31-B8B8-67FE90F929F8}" = Bonjour"{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}" = ATK Media"{1584854C-1513-40EA-96D4-493384D0A3C7}" = Readon TV Movie Radio Player 7.2.0.0"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer"{18522005-B8F6-4552-A228-823328696F48}" = Yamaha Supercross"{193C41B9-1A0F-45E6-8546-41C91C99A5F8}" = Delta Force Xtreme 2"{19CC7A03-BDBB-4EFB-B8C9-86FD2FB95334}" = Windows Live Messenger"{1C8521E5-5A7B-4A4E-A9CD-AD53116EAEE0}" = ASUS Data Security Manager"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Инструмент за качване на Windows Live"{21550042-EA9F-4419-A8D7-DF732DCEB76E}" = Microsoft Office PowerPoint Remote"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer"{232AAA95-AE60-46C7-9987-4E7139EA3554}" = Асистент за влизане на Windows Live"{2396F815-84E0-4353-83D7-8B190556DA42}" = ASUS CopyProtect"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java 6 Update 20"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime"{2B818257-E6C7-4841-8C29-C5C9A982BCE5}" = RICOH Media Driver ver.2.07.01.00"{2D7C3E18-E696-4B67-8B5D-45CD3BE6B27E}" = SweetIM for Messenger 3.0"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform"{31874D00-F3E1-44CE-A79A-492CFBD585E8}" = Windows Live Writer"{338F08AB-C262-42C7-B000-34DE1A475273}" = Ad-Aware Email Scanner for Outlook"{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}" = ATK Hotkey"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis"{46183C3F-11E8-486E-9EAE-F8D8C8321E20}" = Boost Your Browser"{47E582E4-482B-47D2-B578-FE7F83F6CED4}" = Windows Live Mail"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater"{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}" = HP Picasso Media Center Add-In"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml"{57B15AD4-8C9D-4164-82BB-E33D8644E757}" = ASUS InstantFun"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.52.02"{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}" = ATKOSD2"{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}" = NB Probe"{6421F085-1FAA-DE13-D02A-CFB412C522A4}" = Acrobat.com"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin"{6AECFE2F-86D3-4EA8-B110-19CDAA343199}" = ItaEst - Taka e!"{6CD0E03A-7E99-4FDE-9D7F-D0F457DB4192}" = Фотогалерия на Windows Live"{6E19F210-3813-4002-B561-94D66AA182B6}" = Atheros Communications Inc.® L1 Gigabit Ethernet Driver"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053"{79A64F98-1796-4FA2-B5FF-C90F83D8BACD}" = Vodafone Mobile Connect Lite"{7A27764B-5434-4DAA-BD43-3ACF4FFCD7FE}" = SweetIM Toolbar for Internet Explorer 3.8"{7AB3A249-FB81-416B-917A-A2A10E74C503}" = iTunes"{7F815C5F-D2A4-4173-B7C0-55A9D6F87E38}" = MobileMe Control Panel"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable"{83F73CB1-7705-49D1-9852-84D839CA2A45}" = Wireless Console 2"{85991ED2-010C-4930-96FA-52F43C2CE98A}" = Apple Mobile Device Support"{863BB78A-107D-475C-AE65-444F327C83E1}" = PerfectSpeed PC Optimizer"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight"{8CFEBE9C-F29F-4C49-80E0-7106970F8734}" = Power4Gear eXtreme"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007"{90120000-0015-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0015-0816-0000-0000000FF1CE}" = Microsoft Office Access MUI (Portuguese (Portugal)) 2007"{90120000-0015-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0015-0C0A-0000-0000000FF1CE}" = Microsoft Office Access MUI (Spanish) 2007"{90120000-0015-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007"{90120000-0016-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0016-0816-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Portuguese (Portugal)) 2007"{90120000-0016-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0016-0C0A-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Spanish) 2007"{90120000-0016-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007"{90120000-0018-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0018-0816-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Portuguese (Portugal)) 2007"{90120000-0018-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0018-0C0A-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Spanish) 2007"{90120000-0018-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007"{90120000-0019-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0019-0816-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Portuguese (Portugal)) 2007"{90120000-0019-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0019-0C0A-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Spanish) 2007"{90120000-0019-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007"{90120000-001A-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001A-0816-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Portuguese (Portugal)) 2007"{90120000-001A-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001A-0C0A-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Spanish) 2007"{90120000-001A-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007"{90120000-001B-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001B-0816-0000-0000000FF1CE}" = Microsoft Office Word MUI (Portuguese (Portugal)) 2007"{90120000-001B-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001B-0C0A-0000-0000000FF1CE}" = Microsoft Office Word MUI (Spanish) 2007"{90120000-001B-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001F-0403-0000-0000000FF1CE}" = Microsoft Office Proof (Catalan) 2007"{90120000-001F-0403-0000-0000000FF1CE}_PROHYBRIDR_{4B47C31E-46B0-462B-BEE4-DC383B6A1F2A}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007"{90120000-001F-040C-0000-0000000FF1CE}_PROHYBRIDR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)"{90120000-001F-0416-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Brazil)) 2007"{90120000-001F-0416-0000-0000000FF1CE}_PROHYBRIDR_{75EBE365-7FC5-4720-A7D3-804BF550D1BC}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)"{90120000-001F-042D-0000-0000000FF1CE}" = Microsoft Office Proof (Basque) 2007"{90120000-001F-0456-0000-0000000FF1CE}" = Microsoft Office Proof (Galician) 2007"{90120000-001F-0816-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Portugal)) 2007"{90120000-001F-0816-0000-0000000FF1CE}_PROHYBRIDR_{C312E1CD-EC19-4270-A072-F36F634DFF79}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007"{90120000-001F-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007"{90120000-002C-0816-0000-0000000FF1CE}" = Microsoft Office Proofing (Portuguese (Portugal)) 2007"{90120000-002C-0C0A-0000-0000000FF1CE}" = Microsoft Office Proofing (Spanish) 2007"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007"{90120000-006E-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-006E-0816-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Portuguese (Portugal)) 2007"{90120000-006E-0816-0000-0000000FF1CE}_PROHYBRIDR_{A8523DA4-5563-4F0E-BD9D-4E4CC3CF7239}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-006E-0C0A-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Spanish) 2007"{90120000-006E-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{6113C11D-BACA-4D8E-8002-03C8D06FD5E6}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-008A-0409-0000-0000000FF1CE}" = Microsoft Office 2007 Recent Documents Gadget"{90120000-00A1-0C0A-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Spanish) 2007"{90120000-00A1-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007"{90120000-0115-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007"{90120000-0117-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable"{A5A63519-F5C2-4F4A-849A-F28A1AB3D522}" = Sentinel Protection Installer 7.5.0"{A7631C52-DC0C-435C-8802-9FA032084D6B}" = Семейна безопасност на Windows Live"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3.2"{AFAC914D-9E83-4A89-8ABE-427521C82CCF}" = Safari"{B2D328BE-45AD-4D92-96F9-2151490A203E}" = Apple Application Support"{BC61F51E-8AF7-46B9-AF20-B33B5EE81034}" = Nero 7 Essentials"{BDE0CF4C-8DE2-41DB-A845-78D48874E2C6}" = SLOW-PCfighter"{C0FC1C14-4824-4A73-87A6-9E888C9C3102}" = ASUS Splendid Video Enhancement Technology"{C9B2753A-25CA-4E35-A8BA-DABAAD46112A}" = Windows Live Movie Maker"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1"{CE86A0E7-818D-43EC-A181-59BA9BD3EF2E}" = LightScribe 1.8.13.1"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities"{D3D54F3E-C5C3-443D-978F-87A72E5616E8}" = ATK Generic Function Service"{D7E04009-B191-4E9D-9D2D-1BBE57BD8A42}" = VistaFeaturePack"{DB69C93F-A2E4-43C5-838B-5B80EBDE7A21}" = Passware Kit Enterprise Demo 9.5"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01"{F7B0939E-58DF-11DF-B3A6-005056806466}" = Google Земя"{F8DBD826-2387-43C5-94AD-ACA7EB55F049}" = Windows Live Essentials"{FA54AFB1-5745-4389-B8C1-9F7509672ED1}" = iPhone Configuration Utility"{FC3D290D-79BE-44B7-ABF9-FDD110925930}" = P4P"{FE3997D3-6B56-4AC4-A99C-9DDFC45359BF}" = TuneUp Utilities Language Pack (en-US)"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites"Ad-Aware" = Ad-Aware"Adobe AIR" = Adobe AIR"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin"Advanced SystemCare 3_is1" = Advanced SystemCare 3"Ares" = Ares 2.1.5"Ashampoo ClipFinder HD_is1" = Ashampoo ClipFinder HD 2.07"Ashampoo HDD Control_is1" = Ashampoo HDD Control 1.11"Ashampoo Magical Defrag 2_is1" = Ashampoo Magical Defrag 2"Ashampoo Magical Snap 2_is1" = Ashampoo Magical Snap 2.51"Ashampoo Photo Commander 7_is1" = Ashampoo Photo Commander 7.30"Ashampoo UnInstaller 4_is1" = Ashampoo UnInstaller 4.04"Ashampoo WinOptimizer 6_is1" = Ashampoo WinOptimizer 6.60"Asus_Camera_ScreenSaver" = Asus_Camera_ScreenSaver"avast5" = avast! Free Antivirus"Belarc Advisor" = Belarc Advisor 8.1"BitComet" = BitComet 1.20"BrothersInArms" = Brothers In Arms"bwin Poker_is1" = bwin Poker"CCleaner" = CCleaner"CD Recovery Toolbox Free_is1" = CD Recovery Toolbox Free 1.1"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com"Data Access Objects (DAO) 3.5" = Data Access Objects (DAO) 3.5"Defense Grid - The Awakening1.0" = Defense Grid - The Awakening"ESET Online Scanner" = ESET Online Scanner v3"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.30"Game Booster_is1" = Game Booster"gaslee" = Favorit"HOMESTUDENTR" = Microsoft Office Home and Student 2007"InstallShield_{D7E04009-B191-4E9D-9D2D-1BBE57BD8A42}" = VistaFeaturePack"IObit Security 360_is1" = IObit Security 360"Lotto Pro" = Lotto Pro"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware"McAfee Security Scan" = McAfee Security Scan Plus"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)"NVIDIA Drivers" = NVIDIA Drivers"oggcodecs" = oggcodecs 0.71.0946"OptiNet" = OptiNet (remove only)"Picasa 3" = Picasa 3"PokerStars" = PokerStars"Powergramo" = PowerGramo Professional"PROHYBRIDR" = 2007 Microsoft Office system"RocketDock_is1" = RocketDock 1.3.5"SLOW-PCfighter" = SLOW-PCfighter"Smart Defrag_is1" = Smart Defrag"SMSERIAL" = Motorola SM56 Speakerphone Modem"SopCast" = SopCast 3.2.4"SpeedConnect Internet Accelerator v.7.5_is1" = SpeedConnect Internet Accelerator v.7.5"SuperMp3Download" = Super MP3 Download"TeamViewer 5" = TeamViewer 5"The KMPlayer" = The KMPlayer (remove only)"TomTom HOME" = TomTom HOME 2.7.3.1894"TuneUp Utilities" = TuneUp Utilities"USB 2.0 1.3M UVC WebCam" = USB 2.0 1.3M UVC WebCam"VLC media player" = VLC media player 1.0.5"Windows Doctor_is1" = Windows Doctor 1.6"WinGimp-2.0_is1" = GIMP 2.6.8"WinLiveSuite_Wave3" = Windows Live Essentials"WinRAR archiver" = Архиватор WinRAR"Wise Registry Cleaner_is1" = Wise Registry Cleaner Free 5.31 ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"GammonEmpire" = GammonEmpire"pchd" = pchd ========== Last 10 Event Log Errors ========== Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report > OTL logfile created on: 7.7.2010 г. 20:43:48 - Run 1OTL by OldTimer - Version 3.2.7.1 Folder = C:\Users\Tilyo Petrov Rusev\Searches\DesktopWindows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstationInternet Explorer (Version = 8.0.6001.18928)Locale: 00000402 | Country: Bulgaria | Language: BGR | Date Format: d.M.yyyy 'г.' 3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 40,00% Memory free6,00 Gb Paging File | 4,00 Gb Available in Paging File | 64,00% Paging File freePaging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program FilesDrive C: | 116,44 Gb Total Space | 28,70 Gb Free Space | 24,64% Space Free | Partition Type: NTFSDrive D: | 108,63 Gb Total Space | 18,97 Gb Free Space | 17,46% Space Free | Partition Type: NTFSE: Drive not present or media not loadedDrive F: | 35,81 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFSG: Drive not present or media not loadedH: Drive not present or media not loadedI: Drive not present or media not loaded Computer Name: TILYOPETROVRUS1Current User Name: Tilyo Petrov RusevLogged in as Administrator. Current Boot Mode: NormalScan Mode: All usersCompany Name Whitelist: OnSkip Microsoft Files: OnFile Age = 30 DaysOutput = Minimal ========== Processes (SafeList) ========== PRC - C:\Users\Tilyo Petrov Rusev\Searches\Desktop\OTL.exe (OldTimer Tools)PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)PRC - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe (TuneUp Software)PRC - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)PRC - C:\Program Files\IObit\IObit Security 360\is360.exe (IObit)PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)PRC - C:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe (IObit)PRC - C:\Program Files\Ashampoo\Ashampoo HDD Control\HDDControlGuard.exe (Ashampoo Development GmbH & Co. KG)PRC - C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe (IObit)PRC - C:\Program Files\Raxco\PerfectSpeed20\Rx2AgentS1.exe (Raxco Software, Inc.)PRC - C:\Program Files\Raxco\PerfectSpeed20\Rx2Agent.exe (Raxco Software, Inc.)PRC - C:\Program Files\Ashampoo\Ashampoo UnInstaller 4\UIWatcher.exe (ashampoo GmbH & Co. KG)PRC - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)PRC - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (TomTom)PRC - C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe (Autodata Limited)PRC - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe (Vodafone)PRC - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Vodafone)PRC - C:\Windows\ehome\ehexthost.exe (Microsoft Corporation)PRC - C:\Windows\explorer.exe (Microsoft Corporation)PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)PRC - C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\defragMonitorService.exe (ashampoo Technology GmbH & Co. KG)PRC - C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\defragActivityMonitor.exe ()PRC - C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\aDefragService.exe ( )PRC - C:\Program Files\ASUS\SmartLogon\sensorsrv.exe (ASUS)PRC - C:\Program Files\ASUS\ASUS Live Update\ALU.exe ()PRC - C:\Program Files\ASUS\Splendid\ACMON.exe (ATK)PRC - C:\Program Files\ATK Hotkey\HControl.exe (ATK0100)PRC - C:\Program Files\ATK Hotkey\AsLdrSrv.exe ()PRC - C:\Program Files\ASUS\ASUS CopyProtect\ASPG.exe ()PRC - C:\Program Files\RocketDock\RocketDock.exe ()PRC - C:\Program Files\P4G\BatteryLife.exe (ATK)PRC - C:\Program Files\ATK Hotkey\WDC.exe ()PRC - C:\Program Files\ATK Hotkey\ATKOSD.exe ()PRC - C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()PRC - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe ()PRC - C:\Program Files\Wireless Console 2\wcourier.exe ()PRC - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe ()PRC - C:\Windows\ehome\ehshell.exe (Microsoft Corporation)PRC - C:\Windows\System32\Crypserv.exe (CrypKey (Canada) Ltd.)PRC - C:\Windows\System32\ACEngSvr.exe (ASUSTeK)PRC - C:\Program Files\Clock\SpClDlx.exe (Lux Aeterna) ========== Modules (SafeList) ========== MOD - C:\Users\Tilyo Petrov Rusev\Searches\Desktop\OTL.exe (OldTimer Tools)MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation)MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (Lavasoft Ad-Aware Service) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)SRV - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)SRV - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)SRV - (TuneUp.Defrag) -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software)SRV - (IS360service) -- C:\Program Files\IObit\IObit Security 360\is360srv.exe (IObit)SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)SRV - (fsssvc) -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)SRV - (WAS) -- C:\Windows\System32\inetsrv\iisw3adm.dll (Microsoft Corporation)SRV - (W3SVC) -- C:\Windows\System32\inetsrv\iisw3adm.dll (Microsoft Corporation)SRV - (WPFFontCache_v0400) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)SRV - (Rx2Engine) -- C:\Program Files\Raxco\PerfectSpeed20\Rx2Engine.exe (Raxco Software, Inc.)SRV - (Rx2Agent) -- C:\Program Files\Raxco\PerfectSpeed20\Rx2Agent.exe (Raxco Software, Inc.)SRV - (McComponentHostService) -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)SRV - (TeamViewer5) -- C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)SRV - (TomTomHOMEService) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (TomTom)SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)SRV - (Autodata Limited License Service) -- C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe (Autodata Limited)SRV - (VMCService) -- C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Vodafone)SRV - (AppHostSvc) -- C:\Windows\System32\inetsrv\apphostsvc.dll (Microsoft Corporation)SRV - (AshampooDefragService) -- C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\aDefragService.exe ( )SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)SRV - (ASLDRService) -- C:\Program Files\ATK Hotkey\AsLdrSrv.exe ()SRV - (ATKGFNEXSrv) -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()SRV - (spmgr) -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe ()SRV - (ADSMService) -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe ()SRV - (Crypkey License) -- C:\Windows\System32\Crypserv.exe (CrypKey (Canada) Ltd.) ========== Driver Services (SafeList) ========== DRV - (SQTECH905C) -- C:\Windows\System32\Drivers\Capt905c.sys File not foundDRV - (NwlnkFwd) -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not foundDRV - (NwlnkFlt) -- C:\Windows\System32\DRIVERS\nwlnkflt.sys File not foundDRV - (IpInIp) -- C:\Windows\System32\DRIVERS\ipinip.sys File not foundDRV - (blbdrive) -- C:\Windows\System32\drivers\blbdrive.sys File not foundDRV - (ASW3Scan) -- C:\Program Files\Ashampoo\Ashampoo Anti-Malware\AAMW_IFS32.sys File not foundDRV - (AAMWRegFilter) -- C:\Program Files\Ashampoo\Ashampoo Anti-Malware\AAMW_Regfilter32.sys File not foundDRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (ALWIL Software)DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (ALWIL Software)DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (ALWIL Software)DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (ALWIL Software)DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (ALWIL Software)DRV - (Lbd) -- C:\Windows\system32\DRIVERS\Lbd.sys (Lavasoft AB)DRV - (PSSDKLBF) -- C:\Windows\System32\drivers\pssdklbf.sys (microOLAP Technologies LTD)DRV - (PSSDK42) -- C:\Windows\System32\drivers\pssdk42.sys (microOLAP Technologies LTD)DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)DRV - (fssfltr) -- C:\Windows\System32\drivers\fssfltr.sys (Microsoft Corporation)DRV - (TuneUpUtilitiesDrv) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software)DRV - (DefragFS) -- C:\Windows\System32\drivers\DefragFs.sys (Raxco Software, Inc.)DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()DRV - (ewusbnet) -- C:\Windows\System32\drivers\ewusbnet.sys (Huawei Technologies Co., Ltd.)DRV - (hwusbfake) -- C:\Windows\System32\drivers\ewusbfake.sys (Huawei Technologies Co., Ltd.)DRV - (rimmptsk) -- C:\Windows\System32\drivers\rimmptsk.sys (REDC)DRV - (rismxdp) -- C:\Windows\System32\drivers\rixdptsk.sys (REDC)DRV - (rimsptsk) -- C:\Windows\System32\drivers\rimsptsk.sys (REDC)DRV - (RMCAST) RMCAST (Pgm) -- C:\Windows\System32\drivers\rmcast.sys (Microsoft Corporation)DRV - (usbaudio) USB Audio Driver (WDM) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)DRV - (AtcL001) -- C:\Windows\System32\drivers\l160x86.sys (Atheros Communications, Inc.)DRV - (AVerAF15) -- C:\Windows\System32\drivers\AVerAF15.sys (AVerMedia TECHNOLOGIES, Inc.)DRV - (Sentinel) -- C:\Windows\System32\Drivers\SENTINEL.SYS (SafeNet, Inc.)DRV - (BthAvrcp) -- C:\Windows\System32\drivers\BthAvrcp.sys (CSR, plc)DRV - (MODEMCSA) -- C:\Windows\System32\drivers\MODEMCSA.sys (Microsoft Corporation)DRV - (eltima_usb_stub) -- C:\Windows\System32\drivers\usbstub.sys ()DRV - (vuhub) -- C:\Windows\System32\drivers\vuhub.sys ()DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)DRV - (SNP2UVC) USB2.0 PC Camera (SNP2UVC) -- C:\Windows\System32\drivers\snp2uvc.sys ()DRV - (iaStor) -- C:\Windows\system32\DRIVERS\iaStor.sys (Intel Corporation)DRV - (lullaby) -- C:\Windows\system32\DRIVERS\lullaby.sys (Windows ® Codename Longhorn DDK provider)DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)DRV - (smserial) -- C:\Windows\System32\drivers\smserial.sys (Motorola Inc.)DRV - (AsDsm) -- C:\Windows\System32\drivers\AsDsm.sys (Windows ® Codename Longhorn DDK provider)DRV - (ghaio) -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys ()DRV - (ASMMAP) -- C:\Program Files\ATKGFNEX\ASMMAP.sys ()DRV - (NETw4v32) Intel® -- C:\Windows\System32\drivers\NETw4v32.sys (Intel Corporation)DRV - (kbfiltr) -- C:\Windows\System32\drivers\kbfiltr.sys ( )DRV - (MTsensor) -- C:\Windows\System32\drivers\ATKACPI.sys (ATK0100)DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)DRV - (TPM) -- C:\Windows\System32\drivers\tpm.sys (Microsoft Corporation)DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation)DRV - (NETw3v32) Intel® -- C:\Windows\System32\drivers\NETw3v32.sys (Intel® Corporation)DRV - (E1G60) Intel® -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)DRV - (ialm) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)DRV - (NetworkX) -- C:\Windows\system32\ckldrv.sys ()DRV - (Ps2) -- C:\Windows\System32\drivers\PS2.sys (Hewlett-Packard Company) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.comIE - HKLM\..\URLSearchHook: {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - Reg Error: Key error. File not foundIE - HKLM\..\URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - Reg Error: Key error. File not found IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not foundIE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not foundIE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.comIE - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.comIE - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/IE - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0IE - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "http://webalta.ru"FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7.3FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2FF - prefs.js..extensions.enabledItems: abvnotifier@netinfo.bg:0.9.8FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.5.3FF - prefs.js..extensions.enabledItems: {0538E3E3-7E9B-4d49-8831-A227C80A7AD3}:0.9.10.2FF - prefs.js..extensions.enabledItems: {ca0849e8-2c76-42ae-9abe-34e14d337acf}:1.91FF - prefs.js..extensions.enabledItems: nosquint@urandom.ca:2.0.3FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.21FF - prefs.js..extensions.enabledItems: {9d1f059c-cada-4111-9696-41a62d64e3ba}:0.5.2.1FF - prefs.js..extensions.enabledItems: {de5809e0-2b07-11dd-bd0b-0800200c9a66}:1.2.0 FF - user.js..browser.startup.homepage: "http://webalta.ru" FF - HKLM\software\mozilla\Firefox\Extensions\\{AA1ACB70-B5F1-4037-909E-1F725B04D2A8}: C:\Program Files\Customized Web Management\1.6.0.3840\FFFF - HKLM\software\mozilla\Firefox\Extensions\\{5909FC3D-7F8B-415d-A5D1-7C7E941E536E}: C:\Program Files\Internet Content Assistant\1.6.0.3960\FFFF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.07.04 02:29:50 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.07.04 02:29:50 | 000,000,000 | ---D | M] [2010.06.29 14:14:29 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Extensions[2010.06.29 14:14:29 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Extensions\home2@tomtom.com[2010.07.07 20:18:50 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions[2010.06.01 21:50:44 | 000,000,000 | ---D | M] (Forecastfox) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}[2010.07.06 11:51:43 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}[2010.07.05 01:26:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{3ed70016-b11f-4990-b5a3-a52a92bcf0ac}[2010.07.07 20:18:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{9d1f059c-cada-4111-9696-41a62d64e3ba}[2010.07.04 02:29:51 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}[2010.05.21 10:56:15 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}[2010.06.21 11:38:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{ca0849e8-2c76-42ae-9abe-34e14d337acf}[2010.05.24 19:30:38 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}[2010.05.21 13:24:27 | 000,000,000 | ---D | M] (Gradient iCool) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{de5809e0-2b07-11dd-bd0b-0800200c9a66}[2010.05.24 19:44:02 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\abvnotifier@netinfo.bg[2010.06.28 21:01:15 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\nosquint@urandom.ca[2010.05.24 19:58:29 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\personas@christopher.beard[2010.07.05 12:27:14 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions[2010.07.05 12:27:15 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}[2010.07.05 12:26:39 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll[2010.04.01 18:50:01 | 000,001,083 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\911bg.xml[2010.04.01 18:50:01 | 000,002,442 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\diribg.xml[2010.04.01 18:50:01 | 000,001,515 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pe-bg.xml[2010.04.01 18:50:01 | 000,001,857 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\portalbgdict.xml[2010.04.01 18:50:01 | 000,001,220 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-bg.xml O1 HOSTS File: ([2009.07.17 22:01:02 | 000,000,743 | ---- | M]) - C:\Windows\System32\drivers\etc\hostsO1 - Hosts: 127.0.0.1 localhostO1 - Hosts: ::1 localhostO2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.1.27.dll (BitComet)O3 - HKLM\..\Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found.O3 - HKLM\..\Toolbar: (no name) - {42ad2408-baaa-408d-b13e-4706560e817b} - No CLSID value found.O3 - HKLM\..\Toolbar: (no name) - {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - No CLSID value found.O3 - HKLM\..\Toolbar: (no name) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - No CLSID value found.O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found.O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found.O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {9384BD4C-DD14-4BE9-80F7-F6277511E4F5} - No CLSID value found.O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} - No CLSID value found.O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {FE063DB9-4EC0-403E-8DD8-394C54984B2C} - No CLSID value found.O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)O4 - HKLM..\Run: [iObit Security 360] C:\Program Files\IObit\IObit Security 360\IS360tray.exe (IObit)O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)O4 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000..\Run: [bitComet] C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)O4 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()O4 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000..\Run: [speaking Clock Deluxe] C:\Program Files\Clock\SpClDlx.exe (Lux Aeterna)O4 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000..\Run: [uIWatcher] C:\Program Files\Ashampoo\Ashampoo UnInstaller 4\UIWatcher.exe (ashampoo GmbH & Co. KG)O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetworkConnections = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyDocs = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMyMusic = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMyGames = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCommonGroups = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuNetworkPlaces = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarsOnTaskbar = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleStartMenu = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSecurityTab = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarCustomize = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileMenu = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetHood = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAddPrinter = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThemesTab = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeKeyboardNavigationIndicators = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeAnimation = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictWelcomeCenter = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoVisualStyleChoice = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoColorChoice = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoSizeChoice = 0O8 - Extra context menu item: &С&валяне &с BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)O8 - Extra context menu item: &С&валяне на всички видео файлове с BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)O8 - Extra context menu item: &С&валяне на всички с BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)O9 - Extra Button: Публикуване на това в блог - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)O9 - Extra 'Tools' menuitem : &Публикуване на това в блог в Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)O9 - Extra Button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)O9 - Extra 'Tools' menuitem : &Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.1.27.dll (BitComet)O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)O13 - gopher Prefix: missingO16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.73.32.67 212.73.32.3O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)O24 - Desktop WallPaper: C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Microsoft\Windows Photo Gallery\Тапет от фотогалерията на Windows.jpgO24 - Desktop BackupWallPaper: C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Microsoft\Windows Photo Gallery\Тапет от фотогалерията на Windows.jpgO32 - HKLM CDRom: AutoRun - 1O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]O32 - AutoRun File - [2009.08.12 14:57:05 | 000,000,119 | R--- | M] () - F:\autorun.inf -- [ CDFS ]O33 - MountPoints2\{3860d2da-6998-11de-812d-001f3b1a4621}\Shell - "" = AutoRunO33 - MountPoints2\{3860d34a-6998-11de-812d-001f3b1a4621}\Shell - "" = AutoRunO33 - MountPoints2\{3860d34a-6998-11de-812d-001f3b1a4621}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone)O33 - MountPoints2\{58771737-1481-11df-b484-ae32ba25f35b}\Shell - "" = AutoRunO33 - MountPoints2\{58771737-1481-11df-b484-ae32ba25f35b}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone)O33 - MountPoints2\{5877173d-1481-11df-b484-88abe79c55dd}\Shell - "" = AutoRunO33 - MountPoints2\{5877173d-1481-11df-b484-88abe79c55dd}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone)O33 - MountPoints2\{d15efb49-3780-11df-bba0-d7fa559d6de1}\Shell - "" = AutoRunO33 - MountPoints2\{d15efb49-3780-11df-bba0-d7fa559d6de1}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone)O33 - MountPoints2\{dce9cb05-eafd-11de-bb0d-eefe2204dce1}\Shell - "" = AutoRunO33 - MountPoints2\{dce9cb06-eafd-11de-bb0d-eefe2204dce1}\Shell - "" = AutoRunO33 - MountPoints2\F\Shell - "" = AutoRunO34 - HKLM BootExecute: (autocheck autochk *) - File not foundO34 - HKLM BootExecute: (lsdelete) - C:\Windows\System32\lsdelete.exe ()O35 - HKLM\..comfile [open] -- "%1" %*O35 - HKLM\..exefile [open] -- "%1" %*O37 - HKLM\...com [@ = comfile] -- "%1" %*O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software)NetSvcs: FastUserSwitchingCompatibility - File not foundNetSvcs: Ias - File not foundNetSvcs: Nla - File not foundNetSvcs: Ntmssvc - File not foundNetSvcs: NWCWorkstation - File not foundNetSvcs: Nwsapagent - File not foundNetSvcs: SRService - File not foundNetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)NetSvcs: WmdmPmSp - File not foundNetSvcs: LogonHours - File not foundNetSvcs: PCAudit - File not foundNetSvcs: helpsvc - File not foundNetSvcs: uploadmgr - File not found MsConfig - StartUpReg: DAEMON Tools Lite - hkey= - key= - C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)MsConfig - StartUpReg: IObit Security 360 - hkey= - key= - C:\Program Files\IObit\IObit Security 360\IS360tray.exe (IObit) SafeBootMin: AppMgmt - File not foundSafeBootMin: Base - Driver GroupSafeBootMin: Boot Bus Extender - Driver GroupSafeBootMin: Boot file system - Driver GroupSafeBootMin: File system - Driver GroupSafeBootMin: Filter - Driver GroupSafeBootMin: HelpSvc - ServiceSafeBootMin: Lavasoft Ad-Aware Service - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)SafeBootMin: NTDS - File not foundSafeBootMin: PCI Configuration - Driver GroupSafeBootMin: PNP Filter - Driver GroupSafeBootMin: Primary disk - Driver GroupSafeBootMin: sacsvr - ServiceSafeBootMin: SCSI Class - Driver GroupSafeBootMin: System Bus Extender - Driver GroupSafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllersSafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM DriveSafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDriveSafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controllerSafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - HdcSafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - KeyboardSafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - MouseSafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA AdaptersSafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapterSafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - SystemSafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk driveSafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copySafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllersSafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - VolumeSafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface DevicesSafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 DevicesSafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - File not foundSafeBootNet: Base - Driver GroupSafeBootNet: Boot Bus Extender - Driver GroupSafeBootNet: Boot file system - Driver GroupSafeBootNet: File system - Driver GroupSafeBootNet: Filter - Driver GroupSafeBootNet: HelpSvc - ServiceSafeBootNet: Lavasoft Ad-Aware Service - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)SafeBootNet: Messenger - ServiceSafeBootNet: NDIS Wrapper - Driver GroupSafeBootNet: NetBIOSGroup - Driver GroupSafeBootNet: NetDDEGroup - Driver GroupSafeBootNet: Network - Driver GroupSafeBootNet: NetworkProvider - Driver GroupSafeBootNet: NTDS - File not foundSafeBootNet: PCI Configuration - Driver GroupSafeBootNet: PFNet - Reg Error: Value error.SafeBootNet: PNP Filter - Driver GroupSafeBootNet: PNP_TDI - Driver GroupSafeBootNet: Primary disk - Driver GroupSafeBootNet: rdsessmgr - ServiceSafeBootNet: sacsvr - ServiceSafeBootNet: SCSI Class - Driver GroupSafeBootNet: Streams Drivers - Driver GroupSafeBootNet: System Bus Extender - Driver GroupSafeBootNet: TDI - Driver GroupSafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)SafeBootNet: WudfPf - DriverSafeBootNet: WudfUsbccidDriver - DriverSafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllersSafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM DriveSafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDriveSafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controllerSafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - HdcSafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - KeyboardSafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - MouseSafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - NetSafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClientSafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetServiceSafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTransSafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA AdaptersSafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapterSafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - SystemSafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk driveSafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readersSafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copySafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllersSafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - VolumeSafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface DevicesSafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 DevicesSafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dllActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing PackActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET FrameworkActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOEActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawExActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer HelpActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup ToolsActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing EnhancementsActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media PlayerActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site AccessActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET FrameworkActiveX: {82833D38-6B96-B590-AE58-61E349C30822} - LightScribe Control PanelActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dllActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettingsActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,InstallActiveX: {8A517FED-1DAB-4FA2-BAF3-4C66AAE996EB} - .NET FrameworkActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data BindingActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET FrameworkActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core FontsActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1ActiveX: {CE4BC71D-A88B-4943-BB3D-AF9C0E7D4387} - .NET FrameworkActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash PlayerActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML HelpActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service InterfaceActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMPActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfigActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)Drivers32: msacm.siren - C:\Windows\System32\sirenacm.dll (Microsoft Corporation)Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)Drivers32: wave1 - C:\Windows\System32\serwvdrv.dll (Microsoft Corporation) CREATERESTOREPOINTRestore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2010.07.07 20:36:40 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\Tilyo Petrov Rusev\Searches\Desktop\OTL.exe[2010.07.05 21:27:16 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\Documents\Моите получени файлове[2010.07.05 10:05:27 | 000,017,744 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswFsBlk.sys[2010.07.05 10:05:26 | 000,165,456 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswSP.sys[2010.07.05 10:05:25 | 000,023,376 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswRdr.sys[2010.07.05 10:05:24 | 000,050,256 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswMonFlt.sys[2010.07.05 10:05:24 | 000,046,672 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswTdi.sys[2010.07.05 10:05:08 | 000,165,032 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe[2010.07.05 10:05:08 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\Windows\avastSS.scr[2010.07.04 03:04:26 | 000,000,000 | ---D | C] -- C:\Program Files\ESET[2010.07.04 02:29:49 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\BitComet[2010.07.02 18:19:34 | 000,000,000 | ---D | C] -- C:\ProgramData\TomTom[2010.06.30 15:07:35 | 000,000,000 | RH-D | C] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\SecuROM[2010.06.30 11:54:03 | 000,000,000 | ---D | C] -- C:\Program Files\City Interactive[2010.06.29 22:32:48 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\AppData\Local\PokerStars[2010.06.29 22:32:32 | 000,000,000 | ---D | C] -- C:\Program Files\PokerStars[2010.06.29 19:35:03 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\Documents\TomTom[2010.06.29 14:14:28 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\TomTom[2010.06.29 14:14:28 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\AppData\Local\TomTom[2010.06.29 14:14:22 | 000,000,000 | ---D | C] -- C:\Program Files\TomTom International B.V[2010.06.29 14:14:13 | 000,000,000 | ---D | C] -- C:\Program Files\TomTom HOME 2[2010.06.29 14:11:38 | 000,000,000 | ---D | C] -- C:\Program Files\TomTom DesktopSuite[2010.06.28 12:03:56 | 000,030,024 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll[2010.06.28 12:03:56 | 000,021,320 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll[2010.06.27 18:30:57 | 000,000,000 | ---D | C] -- C:\Program Files\McAfee Security Scan[2010.06.24 18:29:11 | 000,266,240 | ---- | C] (Vista Software) -- C:\Windows\System32\SdeNsx50.dll[2010.06.24 18:29:11 | 000,155,648 | ---- | C] (Vista Software) -- C:\Windows\System32\Sde50.dll[2010.06.24 18:29:01 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Lotto Pro 2000[2010.06.24 18:29:01 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Data Solutions[2010.06.21 14:20:10 | 000,000,000 | ---D | C] -- C:\Program Files\Net Tools[2010.06.18 17:15:11 | 000,000,000 | ---D | C] -- C:\Program Files\iPod[2010.06.18 17:14:56 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes[2010.06.18 17:01:27 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour[2010.06.12 19:13:01 | 000,000,000 | ---D | C] -- C:\Program Files\Eltima Software[2007.01.24 12:08:39 | 000,005,632 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.07.07 20:46:29 | 000,000,488 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{36B7568B-17E5-45C7-8D84-6F20454D115F}.job[2010.07.07 20:46:08 | 006,291,456 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\ntuser.dat[2010.07.07 20:36:41 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Tilyo Petrov Rusev\Searches\Desktop\OTL.exe[2010.07.07 20:12:01 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job[2010.07.07 20:02:38 | 000,004,688 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0[2010.07.07 20:02:38 | 000,004,688 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0[2010.07.07 12:05:16 | 000,000,449 | ---- | M] () -- C:\Windows\win.ini[2010.07.07 12:04:26 | 000,000,370 | ---- | M] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job[2010.07.07 12:03:14 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl[2010.07.07 12:02:45 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe[2010.07.07 12:02:42 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job[2010.07.07 12:02:41 | 000,000,408 | ---- | M] () -- C:\Windows\tasks\AutoSmartDefrag.job[2010.07.07 12:02:41 | 000,000,396 | ---- | M] () -- C:\Windows\tasks\AWC Startup.job[2010.07.07 12:02:35 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT[2010.07.07 12:02:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat[2010.07.07 12:02:15 | 3220,430,848 | -HS- | M] () -- C:\hiberfil.sys[2010.07.07 12:00:20 | 000,524,288 | -HS- | M] () -- C:\Users\Tilyo Petrov Rusev\NTUSER.DAT{b344b6b4-479a-11df-ae6c-ffb662eea495}.TMContainer00000000000000000001.regtrans-ms[2010.07.07 12:00:20 | 000,065,536 | -HS- | M] () -- C:\Users\Tilyo Petrov Rusev\NTUSER.DAT{b344b6b4-479a-11df-ae6c-ffb662eea495}.TM.blf[2010.07.07 12:00:20 | 000,001,874 | ---- | M] () -- C:\Windows\bthservsdp.dat[2010.07.07 11:52:36 | 005,581,785 | -H-- | M] () -- C:\Users\Tilyo Petrov Rusev\AppData\Local\IconCache.db[2010.07.05 10:05:24 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt[2010.07.01 15:04:53 | 000,169,472 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini[2010.07.01 11:00:45 | 000,000,680 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\AppData\Local\d3d9caps.dat[2010.06.29 14:14:12 | 002,781,476 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI[2010.06.29 14:14:12 | 000,735,810 | ---- | M] () -- C:\Windows\System32\perfh00A.dat[2010.06.29 14:14:12 | 000,724,918 | ---- | M] () -- C:\Windows\System32\prfh0816.dat[2010.06.29 14:14:12 | 000,657,096 | ---- | M] () -- C:\Windows\System32\perfh009.dat[2010.06.29 14:14:12 | 000,189,502 | ---- | M] () -- C:\Windows\System32\perfh002.dat[2010.06.29 14:14:12 | 000,159,712 | ---- | M] () -- C:\Windows\System32\perfc00A.dat[2010.06.29 14:14:12 | 000,154,726 | ---- | M] () -- C:\Windows\System32\prfc0816.dat[2010.06.29 14:14:12 | 000,124,392 | ---- | M] () -- C:\Windows\System32\perfc009.dat[2010.06.29 14:14:12 | 000,046,188 | ---- | M] () -- C:\Windows\System32\perfc002.dat[2010.06.28 22:57:33 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\Windows\avastSS.scr[2010.06.28 22:57:12 | 000,165,032 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe[2010.06.28 22:37:52 | 000,046,672 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswTdi.sys[2010.06.28 22:37:30 | 000,165,456 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswSP.sys[2010.06.28 22:33:13 | 000,023,376 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswRdr.sys[2010.06.28 22:32:56 | 000,050,256 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswMonFlt.sys[2010.06.28 22:32:33 | 000,017,744 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswFsBlk.sys[2010.06.28 12:06:52 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\Driver Robot.job[2010.06.28 09:33:06 | 000,000,410 | ---- | M] () -- C:\Windows\tasks\SmartDefrag.job[2010.06.26 09:14:16 | 000,015,880 | ---- | M] () -- C:\Windows\System32\lsdelete.exe[2010.06.21 14:11:46 | 000,000,049 | ---- | M] () -- C:\Windows\NeroDigital.ini[2010.06.14 16:04:46 | 000,030,536 | ---- | M] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe[2010.06.14 15:58:28 | 000,021,320 | ---- | M] (TuneUp Software) -- C:\Windows\System32\authuitu.dll[2010.06.14 15:58:14 | 000,030,024 | ---- | M] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll[2010.06.12 08:37:50 | 000,391,592 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.07.06 19:42:43 | 000,000,370 | ---- | C] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job[2010.06.12 19:13:42 | 000,011,392 | ---- | C] () -- C:\Windows\System32\drivers\usbstub.sys[2010.06.12 19:13:02 | 000,066,432 | ---- | C] () -- C:\Windows\System32\drivers\vuhub.sys[2010.05.15 16:01:23 | 000,004,494 | -HS- | C] () -- C:\Windows\System32\KGyGaAvL.sys[2010.05.15 16:01:23 | 000,000,088 | RHS- | C] () -- C:\Windows\System32\D5FE058552.sys[2010.04.16 20:08:38 | 000,000,005 | ---- | C] () -- C:\Windows\treeskp.sys[2010.04.12 00:02:51 | 000,000,041 | ---- | C] () -- C:\Windows\Progs_.ini[2009.12.24 23:07:24 | 000,000,098 | ---- | C] () -- C:\Windows\Crypkey.ini[2009.12.24 23:06:29 | 000,031,846 | ---- | C] () -- C:\Windows\System32\Ckldrv.sys[2009.12.24 23:06:29 | 000,018,432 | ---- | C] () -- C:\Windows\Setup_ck.dll[2009.10.09 11:58:22 | 000,000,142 | ---- | C] () -- C:\Windows\ODBC.INI[2009.07.17 01:38:09 | 000,000,049 | ---- | C] () -- C:\Windows\NeroDigital.ini[2009.07.10 20:11:12 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini[2009.07.08 09:45:55 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll[2009.07.06 18:17:00 | 000,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys[2008.05.10 17:52:41 | 000,012,288 | ---- | C] () -- C:\Windows\impborl.dll[2008.03.05 18:38:08 | 001,457,024 | ---- | C] () -- C:\Windows\System32\SSCProt.dll[2007.10.01 08:59:45 | 001,769,984 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys[2007.05.09 09:16:39 | 000,028,160 | ---- | C] () -- C:\Windows\System32\drivers\sncduvc.sys[2007.04.20 18:15:53 | 000,000,010 | ---- | C] () -- C:\Windows\System32\ABLKSR.ini[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll[2006.11.02 12:25:21 | 000,061,440 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini[2001.08.29 19:57:40 | 000,155,648 | ---- | C] () -- C:\Windows\System32\addurl41.DLL[2001.07.10 14:43:16 | 000,018,432 | ---- | C] () -- C:\Windows\System32\winwatch.DLL ========== LOP Check ========== [2009.07.26 21:03:20 | 000,000,000 | ---D | M] -- C:\Users\tilyo\AppData\Roaming\uniblue[2010.05.21 22:31:09 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Ashampoo[2010.01.05 19:57:33 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Ashampoo Photo Commander 7[2010.07.04 02:29:49 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\BitComet[2010.02.28 23:52:31 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Blitware[2009.07.23 09:43:12 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Cashfiesta[2010.02.08 00:19:49 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1[2010.07.05 01:45:12 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\DAEMON Tools[2010.06.24 18:29:01 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Data Solutions[2009.11.19 17:50:01 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Gearbox Software[2009.10.10 15:31:20 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\GetRightToGo[2010.05.16 19:41:36 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\gtk-2.0[2010.05.09 02:55:10 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\IObit[2009.12.13 20:50:11 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\OpenCandy[2009.08.19 11:06:34 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Opera[2009.12.12 21:17:32 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Passware[2010.01.06 20:30:29 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\SoftMaker[2010.05.28 11:22:56 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Software Informer[2009.12.31 13:22:29 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\SuperMP3Download[2010.06.09 07:40:23 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\TeamViewer[2009.08.09 16:47:24 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Thinstall[2010.06.29 14:14:28 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\TomTom[2009.08.10 11:21:47 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\TuneUp Software[2010.05.28 11:14:06 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Uniblue[2010.04.16 18:00:50 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\vghd[2009.07.05 21:19:40 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Vodafone[2010.03.02 03:38:48 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\WinBatch[2010.05.17 13:55:25 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Windows Live Writer[2009.12.13 14:24:06 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Wireshark[2010.07.07 12:04:26 | 000,000,370 | ---- | M] () -- C:\Windows\Tasks\Ad-Aware Update (Weekly).job[2009.10.08 16:00:01 | 000,000,360 | ---- | M] () -- C:\Windows\Tasks\At1.job[2010.07.07 12:02:41 | 000,000,408 | ---- | M] () -- C:\Windows\Tasks\AutoSmartDefrag.job[2010.07.07 12:02:41 | 000,000,396 | ---- | M] () -- C:\Windows\Tasks\AWC Startup.job[2010.06.28 12:06:52 | 000,000,354 | ---- | M] () -- C:\Windows\Tasks\Driver Robot.job[2010.07.07 12:00:20 | 000,032,602 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT[2010.06.28 09:33:06 | 000,000,410 | ---- | M] () -- C:\Windows\Tasks\SmartDefrag.job[2010.07.07 20:46:29 | 000,000,488 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{36B7568B-17E5-45C7-8D84-6F20454D115F}.job ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*.* >[2010.07.07 12:02:14 | 000,002,684 | ---- | M] () -- C:\aaw7boot.log[2006.09.18 23:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat[2009.04.11 08:36:36 | 000,333,257 | RHS- | M] () -- C:\bootmgr[2007.04.20 18:26:03 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK[2006.12.30 01:24:54 | 000,000,011 | ---- | M] () -- C:\CG13.txt[2006.09.18 23:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys[2008.05.10 17:56:36 | 000,020,777 | ---- | M] () -- C:\devlist.txt[2008.01.11 03:11:23 | 001,048,576 | RH-- | M] () -- C:\F3Sg.BIN[2008.01.15 11:01:19 | 000,000,015 | ---- | M] () -- C:\F3Sg_Vista.10[2010.07.07 12:02:15 | 3220,430,848 | -HS- | M] () -- C:\hiberfil.sys[2009.09.01 17:29:37 | 000,000,000 | RHS- | M] () -- C:\IO.SYS[2010.04.30 18:21:58 | 000,000,108 | ---- | M] () -- C:\mbam-error.txt[2009.09.01 17:29:37 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS[2007.05.17 05:35:24 | 000,000,015 | ---- | M] () -- C:\NIS2007_G.TXT[2007.03.16 01:18:45 | 000,000,025 | ---- | M] () -- C:\OFFICE2007_G.TXT[2010.07.07 12:02:14 | 3534,008,320 | -HS- | M] () -- C:\pagefile.sys[2008.05.10 04:34:48 | 000,000,105 | ---- | M] () -- C:\Pass.txt[2007.05.24 00:43:40 | 000,000,017 | ---- | M] () -- C:\READER_G.TXT[2007.12.11 05:31:40 | 000,000,014 | ---- | M] () -- C:\RECOVERY.DAT[2009.04.02 18:02:58 | 000,185,833 | ---- | M] () -- C:\shldr[2008.05.10 15:59:33 | 000,000,166 | ---- | M] () -- C:\SumHidd.txt[2008.05.10 15:58:50 | 000,000,098 | ---- | M] () -- C:\SumOS.txt[2007.12.06 22:22:16 | 000,000,023 | ---- | M] () -- C:\V54.TXT < MD5 for: AGP440.SYS >[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys[2008.05.10 16:34:25 | 000,056,504 | ---- | M] (Microsoft Corporation) MD5=198636E76971EBC96404547EC0FD5E75 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_cb7c81c7\AGP440.sys[2008.05.10 16:34:25 | 000,056,504 | ---- | M] (Microsoft Corporation) MD5=198636E76971EBC96404547EC0FD5E75 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6000.20598_none_b85cfa98dae9b436\AGP440.sys[2006.11.02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys[2006.11.02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys < MD5 for: ATAPI.SYS >[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys[2008.01.19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys[2008.01.19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys[2006.11.02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys[2008.01.19 07:06:48 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\SoftwareDistribution\Download\c0a17eb89d8e2d806cdee4a2d05890b4\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys[2009.07.05 21:59:51 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys[2009.07.05 21:59:51 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys[2008.01.19 06:33:23 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\SoftwareDistribution\Download\c0a17eb89d8e2d806cdee4a2d05890b4\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys[2009.07.05 21:59:50 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys < MD5 for: CNGAUDIT.DLL >[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll < MD5 for: IASTOR.SYS >[2007.09.29 17:03:11 | 000,308,248 | ---- | M] (Intel Corporation) MD5=E5A0034847537EAEE3C00349D5C34C5F -- C:\Windows\System32\drivers\iaStor.sys[2007.09.29 17:03:11 | 000,308,248 | ---- | M] (Intel Corporation) MD5=E5A0034847537EAEE3C00349D5C34C5F -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_7baf6192\iaStor.sys[2007.09.29 17:03:11 | 000,308,248 | ---- | M] (Intel Corporation) MD5=E5A0034847537EAEE3C00349D5C34C5F -- C:\Windows\System32\DriverStore\FileRepository\iastor.inf_41af7b1f\iaStor.sys < MD5 for: IASTORV.SYS >[2008.01.19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys[2008.01.19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys[2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys[2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys < MD5 for: NETLOGON.DLL >[2006.11.02 11:46:11 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll[2008.01.19 09:35:36 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll < MD5 for: NVSTOR.SYS >[2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys[2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys[2008.01.19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys[2008.01.19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys < MD5 for: SCECLI.DLL >[2008.01.19 09:36:19 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll[2006.11.02 11:46:12 | 000,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles >[2009.03.08 13:31:42 | 000,348,160 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtmsft.dll[2009.03.08 13:31:37 | 000,216,064 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtrans.dll[2010.05.04 07:56:25 | 000,599,040 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\msfeeds.dll[2009.04.11 08:27:47 | 000,241,128 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll[2009.04.11 08:28:23 | 000,228,352 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll < %systemroot%\Tasks\*.job /lockedfiles > < %PROGRAMFILES%\*. >[2010.02.07 23:40:16 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe[2010.07.07 11:50:55 | 000,000,000 | ---D | M] -- C:\Program Files\Advanced Access Controller[2010.05.03 18:23:48 | 000,000,000 | ---D | M] -- C:\Program Files\Alwil Software[2010.05.28 22:51:05 | 000,000,000 | ---D | M] -- C:\Program Files\ao2000pr[2009.07.27 13:39:23 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update[2009.11.18 19:52:55 | 000,000,000 | ---D | M] -- C:\Program Files\Ares[2010.06.29 12:29:47 | 000,000,000 | ---D | M] -- C:\Program Files\Ashampoo[2008.05.10 17:41:26 | 000,000,000 | ---D | M] -- C:\Program Files\ASUS[2008.05.10 17:19:55 | 000,000,000 | ---D | M] -- C:\Program Files\ATK Hotkey[2008.05.10 17:20:36 | 000,000,000 | ---D | M] -- C:\Program Files\ATKGFNEX[2008.05.10 17:21:23 | 000,000,000 | ---D | M] -- C:\Program Files\ATKOSD2[2010.07.07 11:50:56 | 000,000,000 | ---D | M] -- C:\Program Files\Automated Result Operator[2010.03.04 20:24:21 | 000,000,000 | ---D | M] -- C:\Program Files\AVerMedia[2009.08.13 10:17:10 | 000,000,000 | ---D | M] -- C:\Program Files\BACL[2010.03.18 15:44:37 | 000,000,000 | ---D | M] -- C:\Program Files\Belarc[2010.07.05 01:45:12 | 000,000,000 | ---D | M] -- C:\Program Files\BitComet[2010.06.18 17:01:28 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour[2009.08.09 15:56:14 | 000,000,000 | ---D | M] -- C:\Program Files\CBS Software[2010.06.24 15:45:28 | 000,000,000 | ---D | M] -- C:\Program Files\CCleaner[2010.01.08 11:32:01 | 000,000,000 | ---D | M] -- C:\Program Files\CD Recovery Toolbox Free[2009.11.11 18:17:33 | 000,000,000 | ---D | M] -- C:\Program Files\cFosSpeed[2010.06.30 11:54:03 | 000,000,000 | ---D | M] -- C:\Program Files\City Interactive[2010.04.20 17:29:37 | 000,000,000 | ---D | M] -- C:\Program Files\Clock[2010.06.10 11:57:27 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files[2010.02.15 19:53:11 | 000,000,000 | ---D | M] -- C:\Program Files\Conduit[2010.05.16 19:48:56 | 000,000,000 | ---D | M] -- C:\Program Files\Corel[2010.07.07 11:50:56 | 000,000,000 | ---D | M] -- C:\Program Files\Count Access Advancer[2010.07.07 11:50:56 | 000,000,000 | ---D | M] -- C:\Program Files\Customized Web Management[2009.07.06 18:37:29 | 000,000,000 | ---D | M] -- C:\Program Files\DAEMON Tools Lite[2009.12.26 22:40:14 | 000,000,000 | ---D | M] -- C:\Program Files\DAEMON Tools Toolbar[2010.02.28 23:52:28 | 000,000,000 | ---D | M] -- C:\Program Files\Driver Robot[2010.03.09 13:57:11 | 000,000,000 | ---D | M] -- C:\Program Files\Driver Whiz[2010.06.12 19:13:01 | 000,000,000 | ---D | M] -- C:\Program Files\Eltima Software[2010.05.02 23:39:20 | 000,000,000 | ---D | M] -- C:\Program Files\EMPA[2009.08.17 14:10:38 | 000,000,000 | ---D | M] -- C:\Program Files\Enigma Software Group[2010.07.04 03:04:26 | 000,000,000 | ---D | M] -- C:\Program Files\ESET[2010.01.02 14:34:31 | 000,000,000 | ---D | M] -- C:\Program Files\Fighters[2010.05.01 12:59:09 | 000,000,000 | ---D | M] -- C:\Program Files\GIMP-2[2010.05.01 13:45:20 | 000,000,000 | ---D | M] -- C:\Program Files\GIMP-2.0[2010.05.20 00:17:34 | 000,000,000 | ---D | M] -- C:\Program Files\Google[2009.10.09 17:15:14 | 000,000,000 | ---D | M] -- C:\Program Files\GoWin Deluxe[2009.11.12 11:34:59 | 000,000,000 | ---D | M] -- C:\Program Files\Groove Games[2010.05.16 20:53:32 | 000,000,000 | ---D | M] -- C:\Program Files\Hot_MP3[2009.09.29 19:33:22 | 000,000,000 | ---D | M] -- C:\Program Files\illiminable[2010.06.06 18:30:15 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information[2008.05.10 17:05:30 | 000,000,000 | ---D | M] -- C:\Program Files\Intel[2010.07.07 11:50:55 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Connection Wizard[2010.07.07 11:50:56 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Content Assistant[2010.06.12 08:34:45 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer[2010.05.11 18:06:12 | 000,000,000 | ---D | M] -- C:\Program Files\IObit[2009.09.25 14:39:41 | 000,000,000 | ---D | M] -- C:\Program Files\iPhone Configuration Utility[2010.06.18 17:15:11 | 000,000,000 | ---D | M] -- C:\Program Files\iPod[2010.06.18 17:15:56 | 000,000,000 | ---D | M] -- C:\Program Files\iTunes[2010.04.26 13:49:26 | 000,000,000 | ---D | M] -- C:\Program Files\Java[2010.01.07 00:42:03 | 000,000,000 | ---D | M] -- C:\Program Files\Lavalys[2010.05.12 07:39:14 | 000,000,000 | ---D | M] -- C:\Program Files\Lavasoft[2010.04.30 18:21:58 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware[2010.06.27 19:14:52 | 000,000,000 | ---D | M] -- C:\Program Files\McAfee Security Scan[2010.05.17 13:19:51 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft[2006.11.02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games[2009.12.19 15:27:26 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office[2010.06.05 07:11:54 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight[2010.05.17 13:20:44 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server Compact Edition[2008.05.10 15:28:19 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio[2009.07.07 22:04:41 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Works[2010.06.23 11:25:32 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET[2010.05.12 10:51:25 | 000,000,000 | ---D | M] -- C:\Program Files\Monsters[2008.05.10 15:19:46 | 000,000,000 | ---D | M] -- C:\Program Files\Motorola[2010.03.11 03:53:04 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker[2010.07.04 02:57:15 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox[2006.11.02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild[2010.05.10 10:01:15 | 000,000,000 | ---D | M] -- C:\Program Files\myBabylon_English[2009.07.10 23:02:21 | 000,000,000 | ---D | M] -- C:\Program Files\NASA[2009.07.05 20:38:32 | 000,000,000 | ---D | M] -- C:\Program Files\Nero[2010.06.21 14:20:54 | 000,000,000 | ---D | M] -- C:\Program Files\Net Tools[2010.05.19 18:03:31 | 000,000,000 | ---D | M] -- C:\Program Files\Nikozen[2010.04.14 20:23:15 | 000,000,000 | ---D | M] -- C:\Program Files\NovaLogic[2010.04.18 10:14:28 | 000,000,000 | ---D | M] -- C:\Program Files\Opera 10 Beta[2010.05.06 19:43:01 | 000,000,000 | ---D | M] -- C:\Program Files\OptiNet[2009.07.30 09:10:56 | 000,000,000 | ---D | M] -- C:\Program Files\OverDisk[2008.05.10 17:38:45 | 000,000,000 | ---D | M] -- C:\Program Files\P4G[2008.05.10 17:42:04 | 000,000,000 | ---D | M] -- C:\Program Files\P4P[2009.12.12 21:06:18 | 000,000,000 | ---D | M] -- C:\Program Files\Passware[2010.04.15 13:53:32 | 000,000,000 | ---D | M] -- C:\Program Files\pchd[2010.06.29 22:33:08 | 000,000,000 | ---D | M] -- C:\Program Files\PokerStars[2010.04.01 14:26:44 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime[2010.05.07 10:08:22 | 000,000,000 | ---D | M] -- C:\Program Files\Raxco[2010.06.12 20:39:14 | 000,000,000 | ---D | M] -- C:\Program Files\Readon Technology[2008.05.10 17:17:42 | 000,000,000 | ---D | M] -- C:\Program Files\Realtek[2006.11.02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies[2009.11.05 18:07:47 | 000,000,000 | ---D | M] -- C:\Program Files\RocketDock[2010.06.18 16:44:17 | 000,000,000 | ---D | M] -- C:\Program Files\Safari[2009.11.05 17:11:31 | 000,000,000 | R--D | M] -- C:\Program Files\Skype[2009.12.19 17:52:51 | 000,000,000 | ---D | M] -- C:\Program Files\SopCast[2010.05.09 19:15:54 | 000,000,000 | ---D | M] -- C:\Program Files\SuperMp3Download[2010.01.03 22:10:58 | 000,000,000 | ---D | M] -- C:\Program Files\TeamViewer[2010.01.17 15:41:01 | 000,000,000 | ---D | M] -- C:\Program Files\The KMPlayer[2010.06.29 14:11:38 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom DesktopSuite[2010.07.05 01:45:12 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom HOME 2[2010.06.29 14:14:22 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom International B.V[2010.07.06 11:13:42 | 000,000,000 | ---D | M] -- C:\Program Files\Trend Micro[2010.06.28 12:03:55 | 000,000,000 | ---D | M] -- C:\Program Files\TuneUp Utilities 2010[2009.11.19 17:36:18 | 000,000,000 | ---D | M] -- C:\Program Files\Ubisoft[2010.05.28 11:27:17 | 000,000,000 | ---D | M] -- C:\Program Files\Uniblue[2009.07.18 15:04:10 | 000,000,000 | ---D | M] -- C:\Program Files\Utherverse Digital Inc[2010.04.19 07:32:29 | 000,000,000 | ---D | M] -- C:\Program Files\vghd[2010.03.14 13:35:11 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN[2010.03.24 22:01:16 | 000,000,000 | ---D | M] -- C:\Program Files\Vodafone[2010.05.10 13:46:40 | 000,000,000 | ---D | M] -- C:\Program Files\Wandering IPs[2010.05.04 12:43:25 | 000,000,000 | ---D | M] -- C:\Program Files\Winamp[2009.09.24 12:27:51 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Calendar[2009.09.24 12:27:48 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Collaboration[2009.09.24 12:27:38 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender[2009.07.16 12:48:02 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Doctor[2010.06.09 15:35:14 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Journal[2010.05.17 13:21:55 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live[2010.05.17 13:19:32 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live SkyDrive[2010.06.24 18:29:15 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Lotto Pro 2000[2010.06.12 08:34:45 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail[2009.10.28 18:07:46 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player[2006.11.02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT[2009.09.24 12:27:47 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Gallery[2009.10.28 18:36:29 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices[2009.09.24 12:27:49 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar[2009.12.19 15:18:55 | 000,000,000 | ---D | M] -- C:\Program Files\Windows SideShow[2010.05.04 11:18:31 | 000,000,000 | ---D | M] -- C:\Program Files\WinRAR[2008.05.10 17:28:57 | 000,000,000 | ---D | M] -- C:\Program Files\Wireless Console 2[2010.05.11 14:40:18 | 000,000,000 | ---D | M] -- C:\Program Files\Wise Registry Cleaner[2010.05.11 00:07:36 | 000,000,000 | ---D | M] -- C:\Program Files\WorkStationOPtimizer[2010.05.04 11:43:33 | 000,000,000 | ---D | M] -- C:\Program Files\Yamicsoft[2010.02.15 19:51:51 | 000,000,000 | ---D | M] -- C:\Program Files\Zapu[2009.08.17 15:56:12 | 000,000,000 | ---D | M] -- C:\Program Files\Zards software[2009.09.18 01:31:15 | 000,000,000 | ---D | M] -- C:\Program Files\Zoo Digital Publishing < %userprofile%\Desktop\*.* >[2010.04.07 22:54:25 | 000,000,715 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\Ares.lnk[2009.11.19 17:46:04 | 000,002,122 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\Brothers In Arms.lnk[2010.02.09 16:42:31 | 000,000,282 | -HS- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\desktop.ini[2010.01.28 21:34:14 | 000,000,901 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\GammonEmpire.lnk[2009.10.09 18:10:51 | 000,001,881 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\HijackThis.lnk[2010.06.24 18:29:13 | 000,000,815 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\Lotto Pro.lnk[2009.11.14 02:16:34 | 000,002,079 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\Marine Sharpshooter II Jungle Warfare.lnk[2010.05.06 19:43:01 | 000,000,777 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\OptiNet.lnk[2009.11.10 20:04:15 | 000,000,781 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\ParadiseCasino - Bulgarian.lnk[2010.05.21 18:45:54 | 000,000,926 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\PowerGramo.lnk[2009.12.19 17:43:42 | 000,000,755 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\SopCast.lnk[2010.06.24 18:29:13 | 000,000,796 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\Update Lotto Drawing Files.lnk[2010.05.10 13:51:17 | 000,001,654 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\Wandering IPs.lnk < %userprofile%\Desktop\*. > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-07-01 19:17:29 ========== Alternate Data Streams ========== @Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:1F8C9007@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:6A91BBD8@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:EBACC189@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:CF778051< End of report > Цитирай Link to comment Сподели другаде More sharing options...
Night_Raven Публикувано Юли 7, 2010 Report Share Публикувано Юли 7, 2010 Съжалявам, но нямам намерение да помагам, след като ползваш пиратска версия на Malwarebytes' Anti-Malware, което не само доказва, че не проявяваш уважение, но и не спазваш точно инструкциите, които са ти дадени. Цитирай Link to comment Сподели другаде More sharing options...
surogati Публикувано Юли 7, 2010 Author Report Share Публикувано Юли 7, 2010 Ползвам тази версия от година и половина и не знаех че е пиратска. Ще я изтрия,и ще я изтегля от линка по горе. Цитирай Link to comment Сподели другаде More sharing options...
Night_Raven Публикувано Юли 7, 2010 Report Share Публикувано Юли 7, 2010 Т.е. си инсталирал програмата преди една година, регистрирал си я (без да си осъзнал, че това е нелегално) и си я обновявал към всяка следваща версия?Малко невероятно ми се струва. Иначе деинсталацията няма да заличи нужната информация. След като деинсталираш програмата стартирай този файл, отговори с Yes и на двата въпроса и чак след рестарта инсталирай отново програмата. След това отново сканирай с OTL и дай нови лог файлове. Цитирай Link to comment Сподели другаде More sharing options...
surogati Публикувано Юли 7, 2010 Author Report Share Публикувано Юли 7, 2010 OTL logfile created on: 8.7.2010 г. 01:15:03 - Run 2OTL by OldTimer - Version 3.2.7.1 Folder = C:\Users\Tilyo Petrov Rusev\Searches\DesktopWindows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstationInternet Explorer (Version = 8.0.6001.18928)Locale: 00000402 | Country: Bulgaria | Language: BGR | Date Format: d.M.yyyy 'г.' 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 55,00% Memory free6,00 Gb Paging File | 5,00 Gb Available in Paging File | 76,00% Paging File freePaging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program FilesDrive C: | 116,44 Gb Total Space | 29,07 Gb Free Space | 24,97% Space Free | Partition Type: NTFSDrive D: | 108,63 Gb Total Space | 18,96 Gb Free Space | 17,46% Space Free | Partition Type: NTFSE: Drive not present or media not loadedDrive F: | 35,81 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFSG: Drive not present or media not loadedH: Drive not present or media not loadedI: Drive not present or media not loaded Computer Name: TILYOPETROVRUS1Current User Name: Tilyo Petrov RusevLogged in as Administrator. Current Boot Mode: NormalScan Mode: All usersCompany Name Whitelist: OnSkip Microsoft Files: OnFile Age = 30 DaysOutput = Minimal ========== Processes (SafeList) ========== PRC - C:\Users\Tilyo Petrov Rusev\Searches\Desktop\OTL.exe (OldTimer Tools)PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)PRC - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe (TuneUp Software)PRC - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)PRC - C:\Program Files\IObit\IObit Security 360\is360srv.exe (IObit)PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)PRC - C:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe (IObit)PRC - C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe (IObit)PRC - C:\Program Files\Raxco\PerfectSpeed20\Rx2AgentS1.exe (Raxco Software, Inc.)PRC - C:\Program Files\Raxco\PerfectSpeed20\Rx2Agent.exe (Raxco Software, Inc.)PRC - C:\Program Files\Ashampoo\Ashampoo UnInstaller 4\UIWatcher.exe (ashampoo GmbH & Co. KG)PRC - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)PRC - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (TomTom)PRC - C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe (Autodata Limited)PRC - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Vodafone)PRC - C:\Windows\explorer.exe (Microsoft Corporation)PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)PRC - C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\defragMonitorService.exe (ashampoo Technology GmbH & Co. KG)PRC - C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\defragActivityMonitor.exe ()PRC - C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\aDefragService.exe ( )PRC - C:\Program Files\ASUS\SmartLogon\sensorsrv.exe (ASUS)PRC - C:\Program Files\ASUS\ASUS Live Update\ALU.exe ()PRC - C:\Program Files\ASUS\Splendid\ACMON.exe (ATK)PRC - C:\Program Files\ATK Hotkey\HControl.exe (ATK0100)PRC - C:\Program Files\ATK Hotkey\AsLdrSrv.exe ()PRC - C:\Program Files\ASUS\ASUS CopyProtect\ASPG.exe ()PRC - C:\Program Files\RocketDock\RocketDock.exe ()PRC - C:\Program Files\P4G\BatteryLife.exe (ATK)PRC - C:\Program Files\ATK Hotkey\WDC.exe ()PRC - C:\Program Files\ATK Hotkey\ATKOSD.exe ()PRC - C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()PRC - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe ()PRC - C:\Program Files\Wireless Console 2\wcourier.exe ()PRC - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe ()PRC - C:\Windows\System32\Crypserv.exe (CrypKey (Canada) Ltd.)PRC - C:\Windows\System32\ACEngSvr.exe (ASUSTeK)PRC - C:\Program Files\Clock\SpClDlx.exe (Lux Aeterna) ========== Modules (SafeList) ========== MOD - C:\Users\Tilyo Petrov Rusev\Searches\Desktop\OTL.exe (OldTimer Tools)MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation)MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (Lavasoft Ad-Aware Service) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)SRV - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)SRV - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)SRV - (TuneUp.Defrag) -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software)SRV - (IS360service) -- C:\Program Files\IObit\IObit Security 360\is360srv.exe (IObit)SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)SRV - (fsssvc) -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)SRV - (WAS) -- C:\Windows\System32\inetsrv\iisw3adm.dll (Microsoft Corporation)SRV - (W3SVC) -- C:\Windows\System32\inetsrv\iisw3adm.dll (Microsoft Corporation)SRV - (WPFFontCache_v0400) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)SRV - (Rx2Engine) -- C:\Program Files\Raxco\PerfectSpeed20\Rx2Engine.exe (Raxco Software, Inc.)SRV - (Rx2Agent) -- C:\Program Files\Raxco\PerfectSpeed20\Rx2Agent.exe (Raxco Software, Inc.)SRV - (McComponentHostService) -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)SRV - (TeamViewer5) -- C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)SRV - (TomTomHOMEService) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (TomTom)SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)SRV - (Autodata Limited License Service) -- C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe (Autodata Limited)SRV - (VMCService) -- C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Vodafone)SRV - (AppHostSvc) -- C:\Windows\System32\inetsrv\apphostsvc.dll (Microsoft Corporation)SRV - (AshampooDefragService) -- C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\aDefragService.exe ( )SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)SRV - (ASLDRService) -- C:\Program Files\ATK Hotkey\AsLdrSrv.exe ()SRV - (ATKGFNEXSrv) -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()SRV - (spmgr) -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe ()SRV - (ADSMService) -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe ()SRV - (Crypkey License) -- C:\Windows\System32\Crypserv.exe (CrypKey (Canada) Ltd.) ========== Driver Services (SafeList) ========== DRV - (SQTECH905C) -- C:\Windows\System32\Drivers\Capt905c.sys File not foundDRV - (NwlnkFwd) -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not foundDRV - (NwlnkFlt) -- C:\Windows\System32\DRIVERS\nwlnkflt.sys File not foundDRV - (IpInIp) -- C:\Windows\System32\DRIVERS\ipinip.sys File not foundDRV - (blbdrive) -- C:\Windows\System32\drivers\blbdrive.sys File not foundDRV - (ASW3Scan) -- C:\Program Files\Ashampoo\Ashampoo Anti-Malware\AAMW_IFS32.sys File not foundDRV - (AAMWRegFilter) -- C:\Program Files\Ashampoo\Ashampoo Anti-Malware\AAMW_Regfilter32.sys File not foundDRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (ALWIL Software)DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (ALWIL Software)DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (ALWIL Software)DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (ALWIL Software)DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (ALWIL Software)DRV - (Lbd) -- C:\Windows\system32\DRIVERS\Lbd.sys (Lavasoft AB)DRV - (PSSDKLBF) -- C:\Windows\System32\drivers\pssdklbf.sys (microOLAP Technologies LTD)DRV - (PSSDK42) -- C:\Windows\System32\drivers\pssdk42.sys (microOLAP Technologies LTD)DRV - (fssfltr) -- C:\Windows\System32\drivers\fssfltr.sys (Microsoft Corporation)DRV - (TuneUpUtilitiesDrv) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software)DRV - (DefragFS) -- C:\Windows\System32\drivers\DefragFs.sys (Raxco Software, Inc.)DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()DRV - (ewusbnet) -- C:\Windows\System32\drivers\ewusbnet.sys (Huawei Technologies Co., Ltd.)DRV - (hwusbfake) -- C:\Windows\System32\drivers\ewusbfake.sys (Huawei Technologies Co., Ltd.)DRV - (rimmptsk) -- C:\Windows\System32\drivers\rimmptsk.sys (REDC)DRV - (rismxdp) -- C:\Windows\System32\drivers\rixdptsk.sys (REDC)DRV - (rimsptsk) -- C:\Windows\System32\drivers\rimsptsk.sys (REDC)DRV - (RMCAST) RMCAST (Pgm) -- C:\Windows\System32\drivers\rmcast.sys (Microsoft Corporation)DRV - (usbaudio) USB Audio Driver (WDM) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)DRV - (AtcL001) -- C:\Windows\System32\drivers\l160x86.sys (Atheros Communications, Inc.)DRV - (AVerAF15) -- C:\Windows\System32\drivers\AVerAF15.sys (AVerMedia TECHNOLOGIES, Inc.)DRV - (Sentinel) -- C:\Windows\System32\Drivers\SENTINEL.SYS (SafeNet, Inc.)DRV - (BthAvrcp) -- C:\Windows\System32\drivers\BthAvrcp.sys (CSR, plc)DRV - (MODEMCSA) -- C:\Windows\System32\drivers\MODEMCSA.sys (Microsoft Corporation)DRV - (eltima_usb_stub) -- C:\Windows\System32\drivers\usbstub.sys ()DRV - (vuhub) -- C:\Windows\System32\drivers\vuhub.sys ()DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)DRV - (SNP2UVC) USB2.0 PC Camera (SNP2UVC) -- C:\Windows\System32\drivers\snp2uvc.sys ()DRV - (iaStor) -- C:\Windows\system32\DRIVERS\iaStor.sys (Intel Corporation)DRV - (lullaby) -- C:\Windows\system32\DRIVERS\lullaby.sys (Windows ® Codename Longhorn DDK provider)DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)DRV - (smserial) -- C:\Windows\System32\drivers\smserial.sys (Motorola Inc.)DRV - (AsDsm) -- C:\Windows\System32\drivers\AsDsm.sys (Windows ® Codename Longhorn DDK provider)DRV - (ghaio) -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys ()DRV - (ASMMAP) -- C:\Program Files\ATKGFNEX\ASMMAP.sys ()DRV - (NETw4v32) Intel® -- C:\Windows\System32\drivers\NETw4v32.sys (Intel Corporation)DRV - (kbfiltr) -- C:\Windows\System32\drivers\kbfiltr.sys ( )DRV - (MTsensor) -- C:\Windows\System32\drivers\ATKACPI.sys (ATK0100)DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)DRV - (TPM) -- C:\Windows\System32\drivers\tpm.sys (Microsoft Corporation)DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation)DRV - (NETw3v32) Intel® -- C:\Windows\System32\drivers\NETw3v32.sys (Intel® Corporation)DRV - (E1G60) Intel® -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)DRV - (ialm) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)DRV - (NetworkX) -- C:\Windows\system32\ckldrv.sys ()DRV - (Ps2) -- C:\Windows\System32\drivers\PS2.sys (Hewlett-Packard Company) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.comIE - HKLM\..\URLSearchHook: {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - Reg Error: Key error. File not foundIE - HKLM\..\URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - Reg Error: Key error. File not found IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not foundIE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not foundIE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.comIE - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.comIE - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/IE - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0IE - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "http://webalta.ru"FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7.3FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2FF - prefs.js..extensions.enabledItems: abvnotifier@netinfo.bg:0.9.8FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.5.3FF - prefs.js..extensions.enabledItems: {0538E3E3-7E9B-4d49-8831-A227C80A7AD3}:0.9.10.2FF - prefs.js..extensions.enabledItems: {ca0849e8-2c76-42ae-9abe-34e14d337acf}:1.91FF - prefs.js..extensions.enabledItems: nosquint@urandom.ca:2.0.3FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.21FF - prefs.js..extensions.enabledItems: {9d1f059c-cada-4111-9696-41a62d64e3ba}:0.5.2.1FF - prefs.js..extensions.enabledItems: jyboy.yy@gmail.com:1.0.3FF - prefs.js..extensions.enabledItems: bg-BG@dictionaries.addons.mozilla.org:4.1FF - prefs.js..extensions.enabledItems: {de5809e0-2b07-11dd-bd0b-0800200c9a66}:1.2.0 FF - user.js..browser.startup.homepage: "http://webalta.ru" FF - HKLM\software\mozilla\Firefox\Extensions\\{AA1ACB70-B5F1-4037-909E-1F725B04D2A8}: C:\Program Files\Customized Web Management\1.6.0.3840\FFFF - HKLM\software\mozilla\Firefox\Extensions\\{5909FC3D-7F8B-415d-A5D1-7C7E941E536E}: C:\Program Files\Internet Content Assistant\1.6.0.3960\FFFF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.07.04 02:29:50 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.07.04 02:29:50 | 000,000,000 | ---D | M] [2010.06.29 14:14:29 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Extensions[2010.06.29 14:14:29 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Extensions\home2@tomtom.com[2010.07.07 23:11:34 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions[2010.06.01 21:50:44 | 000,000,000 | ---D | M] (Forecastfox) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}[2010.07.06 11:51:43 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}[2010.07.05 01:26:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{3ed70016-b11f-4990-b5a3-a52a92bcf0ac}[2010.07.07 20:18:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{9d1f059c-cada-4111-9696-41a62d64e3ba}[2010.07.04 02:29:51 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}[2010.05.21 10:56:15 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}[2010.06.21 11:38:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{ca0849e8-2c76-42ae-9abe-34e14d337acf}[2010.05.24 19:30:38 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}[2010.05.21 13:24:27 | 000,000,000 | ---D | M] (Gradient iCool) -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\{de5809e0-2b07-11dd-bd0b-0800200c9a66}[2010.05.24 19:44:02 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\abvnotifier@netinfo.bg[2010.07.07 23:11:27 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\bg-BG@dictionaries.addons.mozilla.org[2010.07.07 22:59:18 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\jyboy.yy@gmail.com[2010.06.28 21:01:15 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\nosquint@urandom.ca[2010.05.24 19:58:29 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\mozilla\Firefox\Profiles\u00xiagw.default\extensions\personas@christopher.beard[2010.07.05 12:27:14 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions[2010.07.05 12:27:15 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}[2010.07.05 12:26:39 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll[2010.04.01 18:50:01 | 000,001,083 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\911bg.xml[2010.04.01 18:50:01 | 000,002,442 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\diribg.xml[2010.04.01 18:50:01 | 000,001,515 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pe-bg.xml[2010.04.01 18:50:01 | 000,001,857 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\portalbgdict.xml[2010.04.01 18:50:01 | 000,001,220 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-bg.xml O1 HOSTS File: ([2009.07.17 22:01:02 | 000,000,743 | ---- | M]) - C:\Windows\System32\drivers\etc\hostsO1 - Hosts: 127.0.0.1 localhostO1 - Hosts: ::1 localhostO2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.1.27.dll (BitComet)O3 - HKLM\..\Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found.O3 - HKLM\..\Toolbar: (no name) - {42ad2408-baaa-408d-b13e-4706560e817b} - No CLSID value found.O3 - HKLM\..\Toolbar: (no name) - {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - No CLSID value found.O3 - HKLM\..\Toolbar: (no name) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - No CLSID value found.O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found.O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found.O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {9384BD4C-DD14-4BE9-80F7-F6277511E4F5} - No CLSID value found.O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} - No CLSID value found.O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {FE063DB9-4EC0-403E-8DD8-394C54984B2C} - No CLSID value found.O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)O4 - HKLM..\Run: [iObit Security 360] C:\Program Files\IObit\IObit Security 360\IS360tray.exe (IObit)O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)O4 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000..\Run: [bitComet] C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)O4 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()O4 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000..\Run: [speaking Clock Deluxe] C:\Program Files\Clock\SpClDlx.exe (Lux Aeterna)O4 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000..\Run: [uIWatcher] C:\Program Files\Ashampoo\Ashampoo UnInstaller 4\UIWatcher.exe (ashampoo GmbH & Co. KG)O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetworkConnections = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyDocs = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMyMusic = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMyGames = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCommonGroups = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuNetworkPlaces = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarsOnTaskbar = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleStartMenu = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSecurityTab = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarCustomize = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileMenu = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetHood = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAddPrinter = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThemesTab = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeKeyboardNavigationIndicators = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeAnimation = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictWelcomeCenter = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoVisualStyleChoice = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoColorChoice = 0O7 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoSizeChoice = 0O8 - Extra context menu item: &С&валяне &с BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)O8 - Extra context menu item: &С&валяне на всички видео файлове с BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)O8 - Extra context menu item: &С&валяне на всички с BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)O9 - Extra Button: Публикуване на това в блог - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)O9 - Extra 'Tools' menuitem : &Публикуване на това в блог в Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)O9 - Extra Button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)O9 - Extra 'Tools' menuitem : &Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.1.27.dll (BitComet)O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)O13 - gopher Prefix: missingO16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)O24 - Desktop WallPaper: C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Microsoft\Windows Photo Gallery\Тапет от фотогалерията на Windows.jpgO24 - Desktop BackupWallPaper: C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Microsoft\Windows Photo Gallery\Тапет от фотогалерията на Windows.jpgO32 - HKLM CDRom: AutoRun - 1O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]O32 - AutoRun File - [2009.08.12 14:57:05 | 000,000,119 | R--- | M] () - F:\autorun.inf -- [ CDFS ]O33 - MountPoints2\{3860d2da-6998-11de-812d-001f3b1a4621}\Shell - "" = AutoRunO33 - MountPoints2\{3860d34a-6998-11de-812d-001f3b1a4621}\Shell - "" = AutoRunO33 - MountPoints2\{3860d34a-6998-11de-812d-001f3b1a4621}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone)O33 - MountPoints2\{58771737-1481-11df-b484-ae32ba25f35b}\Shell - "" = AutoRunO33 - MountPoints2\{58771737-1481-11df-b484-ae32ba25f35b}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone)O33 - MountPoints2\{5877173d-1481-11df-b484-88abe79c55dd}\Shell - "" = AutoRunO33 - MountPoints2\{5877173d-1481-11df-b484-88abe79c55dd}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone)O33 - MountPoints2\{d15efb49-3780-11df-bba0-d7fa559d6de1}\Shell - "" = AutoRunO33 - MountPoints2\{d15efb49-3780-11df-bba0-d7fa559d6de1}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone)O33 - MountPoints2\{dce9cb05-eafd-11de-bb0d-eefe2204dce1}\Shell - "" = AutoRunO33 - MountPoints2\{dce9cb06-eafd-11de-bb0d-eefe2204dce1}\Shell - "" = AutoRunO33 - MountPoints2\F\Shell - "" = AutoRunO34 - HKLM BootExecute: (autocheck autochk *) - File not foundO34 - HKLM BootExecute: (lsdelete) - C:\Windows\System32\lsdelete.exe ()O35 - HKLM\..comfile [open] -- "%1" %*O35 - HKLM\..exefile [open] -- "%1" %*O37 - HKLM\...com [@ = comfile] -- "%1" %*O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software)NetSvcs: FastUserSwitchingCompatibility - File not foundNetSvcs: Ias - File not foundNetSvcs: Nla - File not foundNetSvcs: Ntmssvc - File not foundNetSvcs: NWCWorkstation - File not foundNetSvcs: Nwsapagent - File not foundNetSvcs: SRService - File not foundNetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)NetSvcs: WmdmPmSp - File not foundNetSvcs: LogonHours - File not foundNetSvcs: PCAudit - File not foundNetSvcs: helpsvc - File not foundNetSvcs: uploadmgr - File not found MsConfig - StartUpReg: DAEMON Tools Lite - hkey= - key= - C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)MsConfig - StartUpReg: IObit Security 360 - hkey= - key= - C:\Program Files\IObit\IObit Security 360\IS360tray.exe (IObit) SafeBootMin: AppMgmt - File not foundSafeBootMin: Base - Driver GroupSafeBootMin: Boot Bus Extender - Driver GroupSafeBootMin: Boot file system - Driver GroupSafeBootMin: File system - Driver GroupSafeBootMin: Filter - Driver GroupSafeBootMin: HelpSvc - ServiceSafeBootMin: Lavasoft Ad-Aware Service - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)SafeBootMin: NTDS - File not foundSafeBootMin: PCI Configuration - Driver GroupSafeBootMin: PNP Filter - Driver GroupSafeBootMin: Primary disk - Driver GroupSafeBootMin: sacsvr - ServiceSafeBootMin: SCSI Class - Driver GroupSafeBootMin: System Bus Extender - Driver GroupSafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllersSafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM DriveSafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDriveSafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controllerSafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - HdcSafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - KeyboardSafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - MouseSafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA AdaptersSafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapterSafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - SystemSafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk driveSafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copySafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllersSafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - VolumeSafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface DevicesSafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 DevicesSafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - File not foundSafeBootNet: Base - Driver GroupSafeBootNet: Boot Bus Extender - Driver GroupSafeBootNet: Boot file system - Driver GroupSafeBootNet: File system - Driver GroupSafeBootNet: Filter - Driver GroupSafeBootNet: HelpSvc - ServiceSafeBootNet: Lavasoft Ad-Aware Service - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)SafeBootNet: Messenger - ServiceSafeBootNet: NDIS Wrapper - Driver GroupSafeBootNet: NetBIOSGroup - Driver GroupSafeBootNet: NetDDEGroup - Driver GroupSafeBootNet: Network - Driver GroupSafeBootNet: NetworkProvider - Driver GroupSafeBootNet: NTDS - File not foundSafeBootNet: PCI Configuration - Driver GroupSafeBootNet: PFNet - Reg Error: Value error.SafeBootNet: PNP Filter - Driver GroupSafeBootNet: PNP_TDI - Driver GroupSafeBootNet: Primary disk - Driver GroupSafeBootNet: rdsessmgr - ServiceSafeBootNet: sacsvr - ServiceSafeBootNet: SCSI Class - Driver GroupSafeBootNet: Streams Drivers - Driver GroupSafeBootNet: System Bus Extender - Driver GroupSafeBootNet: TDI - Driver GroupSafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)SafeBootNet: WudfPf - DriverSafeBootNet: WudfUsbccidDriver - DriverSafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllersSafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM DriveSafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDriveSafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controllerSafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - HdcSafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - KeyboardSafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - MouseSafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - NetSafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClientSafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetServiceSafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTransSafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA AdaptersSafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapterSafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - SystemSafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk driveSafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readersSafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copySafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllersSafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - VolumeSafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface DevicesSafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 DevicesSafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dllActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing PackActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET FrameworkActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOEActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawExActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer HelpActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup ToolsActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing EnhancementsActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media PlayerActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site AccessActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET FrameworkActiveX: {82833D38-6B96-B590-AE58-61E349C30822} - LightScribe Control PanelActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dllActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettingsActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,InstallActiveX: {8A517FED-1DAB-4FA2-BAF3-4C66AAE996EB} - .NET FrameworkActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data BindingActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET FrameworkActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core FontsActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1ActiveX: {CE4BC71D-A88B-4943-BB3D-AF9C0E7D4387} - .NET FrameworkActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash PlayerActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML HelpActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service InterfaceActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMPActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfigActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)Drivers32: msacm.siren - C:\Windows\System32\sirenacm.dll (Microsoft Corporation)Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)Drivers32: wave1 - C:\Windows\System32\serwvdrv.dll (Microsoft Corporation) CREATERESTOREPOINTRestore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2010.07.08 01:12:11 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys[2010.07.08 01:12:09 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys[2010.07.08 01:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware[2010.07.07 20:36:40 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\Tilyo Petrov Rusev\Searches\Desktop\OTL.exe[2010.07.05 21:27:16 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\Documents\Моите получени файлове[2010.07.05 10:05:27 | 000,017,744 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswFsBlk.sys[2010.07.05 10:05:26 | 000,165,456 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswSP.sys[2010.07.05 10:05:25 | 000,023,376 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswRdr.sys[2010.07.05 10:05:24 | 000,050,256 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswMonFlt.sys[2010.07.05 10:05:24 | 000,046,672 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswTdi.sys[2010.07.05 10:05:08 | 000,165,032 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe[2010.07.05 10:05:08 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\Windows\avastSS.scr[2010.07.04 03:04:26 | 000,000,000 | ---D | C] -- C:\Program Files\ESET[2010.07.04 02:29:49 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\BitComet[2010.07.02 18:19:34 | 000,000,000 | ---D | C] -- C:\ProgramData\TomTom[2010.06.30 15:07:35 | 000,000,000 | RH-D | C] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\SecuROM[2010.06.30 11:54:03 | 000,000,000 | ---D | C] -- C:\Program Files\City Interactive[2010.06.29 22:32:48 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\AppData\Local\PokerStars[2010.06.29 22:32:32 | 000,000,000 | ---D | C] -- C:\Program Files\PokerStars[2010.06.29 19:35:03 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\Documents\TomTom[2010.06.29 14:14:28 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\TomTom[2010.06.29 14:14:28 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\AppData\Local\TomTom[2010.06.29 14:14:22 | 000,000,000 | ---D | C] -- C:\Program Files\TomTom International B.V[2010.06.29 14:14:13 | 000,000,000 | ---D | C] -- C:\Program Files\TomTom HOME 2[2010.06.29 14:11:38 | 000,000,000 | ---D | C] -- C:\Program Files\TomTom DesktopSuite[2010.06.28 12:03:56 | 000,030,024 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll[2010.06.28 12:03:56 | 000,021,320 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll[2010.06.27 18:30:57 | 000,000,000 | ---D | C] -- C:\Program Files\McAfee Security Scan[2010.06.24 18:29:11 | 000,266,240 | ---- | C] (Vista Software) -- C:\Windows\System32\SdeNsx50.dll[2010.06.24 18:29:11 | 000,155,648 | ---- | C] (Vista Software) -- C:\Windows\System32\Sde50.dll[2010.06.24 18:29:01 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Lotto Pro 2000[2010.06.24 18:29:01 | 000,000,000 | ---D | C] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Data Solutions[2010.06.21 14:20:10 | 000,000,000 | ---D | C] -- C:\Program Files\Net Tools[2010.06.18 17:15:11 | 000,000,000 | ---D | C] -- C:\Program Files\iPod[2010.06.18 17:14:56 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes[2010.06.18 17:01:27 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour[2010.06.12 19:13:01 | 000,000,000 | ---D | C] -- C:\Program Files\Eltima Software[2007.01.24 12:08:39 | 000,005,632 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.07.08 01:17:04 | 006,291,456 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\ntuser.dat[2010.07.08 01:14:28 | 000,000,488 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{36B7568B-17E5-45C7-8D84-6F20454D115F}.job[2010.07.08 01:12:13 | 000,000,803 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk[2010.07.08 01:12:00 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job[2010.07.08 01:08:29 | 000,000,449 | ---- | M] () -- C:\Windows\win.ini[2010.07.08 01:07:44 | 000,000,370 | ---- | M] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job[2010.07.08 01:06:28 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl[2010.07.08 01:05:53 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe[2010.07.08 01:05:53 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job[2010.07.08 01:05:50 | 000,000,396 | ---- | M] () -- C:\Windows\tasks\AWC Startup.job[2010.07.08 01:05:49 | 000,000,408 | ---- | M] () -- C:\Windows\tasks\AutoSmartDefrag.job[2010.07.08 01:05:43 | 000,004,688 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0[2010.07.08 01:05:43 | 000,004,688 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0[2010.07.08 01:05:43 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT[2010.07.08 01:05:34 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat[2010.07.08 01:05:29 | 3220,430,848 | -HS- | M] () -- C:\hiberfil.sys[2010.07.08 01:04:32 | 000,001,874 | ---- | M] () -- C:\Windows\bthservsdp.dat[2010.07.08 01:04:31 | 000,524,288 | -HS- | M] () -- C:\Users\Tilyo Petrov Rusev\NTUSER.DAT{b344b6b4-479a-11df-ae6c-ffb662eea495}.TMContainer00000000000000000001.regtrans-ms[2010.07.08 01:04:31 | 000,065,536 | -HS- | M] () -- C:\Users\Tilyo Petrov Rusev\NTUSER.DAT{b344b6b4-479a-11df-ae6c-ffb662eea495}.TM.blf[2010.07.08 01:04:30 | 003,371,016 | -H-- | M] () -- C:\Users\Tilyo Petrov Rusev\AppData\Local\IconCache.db[2010.07.08 01:04:01 | 000,059,664 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Searches\Desktop\mbam-clean.exe[2010.07.07 20:36:41 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Tilyo Petrov Rusev\Searches\Desktop\OTL.exe[2010.07.05 10:05:24 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt[2010.07.01 15:04:53 | 000,169,472 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini[2010.07.01 11:00:45 | 000,000,680 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\AppData\Local\d3d9caps.dat[2010.06.29 14:14:12 | 002,781,476 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI[2010.06.29 14:14:12 | 000,735,810 | ---- | M] () -- C:\Windows\System32\perfh00A.dat[2010.06.29 14:14:12 | 000,724,918 | ---- | M] () -- C:\Windows\System32\prfh0816.dat[2010.06.29 14:14:12 | 000,657,096 | ---- | M] () -- C:\Windows\System32\perfh009.dat[2010.06.29 14:14:12 | 000,189,502 | ---- | M] () -- C:\Windows\System32\perfh002.dat[2010.06.29 14:14:12 | 000,159,712 | ---- | M] () -- C:\Windows\System32\perfc00A.dat[2010.06.29 14:14:12 | 000,154,726 | ---- | M] () -- C:\Windows\System32\prfc0816.dat[2010.06.29 14:14:12 | 000,124,392 | ---- | M] () -- C:\Windows\System32\perfc009.dat[2010.06.29 14:14:12 | 000,046,188 | ---- | M] () -- C:\Windows\System32\perfc002.dat[2010.06.28 22:57:33 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\Windows\avastSS.scr[2010.06.28 22:57:12 | 000,165,032 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe[2010.06.28 22:37:52 | 000,046,672 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswTdi.sys[2010.06.28 22:37:30 | 000,165,456 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswSP.sys[2010.06.28 22:33:13 | 000,023,376 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswRdr.sys[2010.06.28 22:32:56 | 000,050,256 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswMonFlt.sys[2010.06.28 22:32:33 | 000,017,744 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswFsBlk.sys[2010.06.28 12:06:52 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\Driver Robot.job[2010.06.28 09:33:06 | 000,000,410 | ---- | M] () -- C:\Windows\tasks\SmartDefrag.job[2010.06.26 09:14:16 | 000,015,880 | ---- | M] () -- C:\Windows\System32\lsdelete.exe[2010.06.21 14:11:46 | 000,000,049 | ---- | M] () -- C:\Windows\NeroDigital.ini[2010.06.14 16:04:46 | 000,030,536 | ---- | M] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe[2010.06.14 15:58:28 | 000,021,320 | ---- | M] (TuneUp Software) -- C:\Windows\System32\authuitu.dll[2010.06.14 15:58:14 | 000,030,024 | ---- | M] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll[2010.06.12 08:37:50 | 000,391,592 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.07.08 01:12:13 | 000,000,803 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk[2010.07.08 01:04:01 | 000,059,664 | ---- | C] () -- C:\Users\Tilyo Petrov Rusev\Searches\Desktop\mbam-clean.exe[2010.07.06 19:42:43 | 000,000,370 | ---- | C] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job[2010.06.12 19:13:42 | 000,011,392 | ---- | C] () -- C:\Windows\System32\drivers\usbstub.sys[2010.06.12 19:13:02 | 000,066,432 | ---- | C] () -- C:\Windows\System32\drivers\vuhub.sys[2010.05.15 16:01:23 | 000,004,494 | -HS- | C] () -- C:\Windows\System32\KGyGaAvL.sys[2010.05.15 16:01:23 | 000,000,088 | RHS- | C] () -- C:\Windows\System32\D5FE058552.sys[2010.04.16 20:08:38 | 000,000,005 | ---- | C] () -- C:\Windows\treeskp.sys[2010.04.12 00:02:51 | 000,000,041 | ---- | C] () -- C:\Windows\Progs_.ini[2009.12.24 23:07:24 | 000,000,098 | ---- | C] () -- C:\Windows\Crypkey.ini[2009.12.24 23:06:29 | 000,031,846 | ---- | C] () -- C:\Windows\System32\Ckldrv.sys[2009.12.24 23:06:29 | 000,018,432 | ---- | C] () -- C:\Windows\Setup_ck.dll[2009.10.09 11:58:22 | 000,000,142 | ---- | C] () -- C:\Windows\ODBC.INI[2009.07.17 01:38:09 | 000,000,049 | ---- | C] () -- C:\Windows\NeroDigital.ini[2009.07.10 20:11:12 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini[2009.07.08 09:45:55 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll[2009.07.06 18:17:00 | 000,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys[2008.05.10 17:52:41 | 000,012,288 | ---- | C] () -- C:\Windows\impborl.dll[2008.03.05 18:38:08 | 001,457,024 | ---- | C] () -- C:\Windows\System32\SSCProt.dll[2007.10.01 08:59:45 | 001,769,984 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys[2007.05.09 09:16:39 | 000,028,160 | ---- | C] () -- C:\Windows\System32\drivers\sncduvc.sys[2007.04.20 18:15:53 | 000,000,010 | ---- | C] () -- C:\Windows\System32\ABLKSR.ini[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll[2006.11.02 12:25:21 | 000,061,440 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini[2001.08.29 19:57:40 | 000,155,648 | ---- | C] () -- C:\Windows\System32\addurl41.DLL[2001.07.10 14:43:16 | 000,018,432 | ---- | C] () -- C:\Windows\System32\winwatch.DLL ========== LOP Check ========== [2009.07.26 21:03:20 | 000,000,000 | ---D | M] -- C:\Users\tilyo\AppData\Roaming\uniblue[2010.05.21 22:31:09 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Ashampoo[2010.01.05 19:57:33 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Ashampoo Photo Commander 7[2010.07.04 02:29:49 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\BitComet[2010.02.28 23:52:31 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Blitware[2009.07.23 09:43:12 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Cashfiesta[2010.02.08 00:19:49 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1[2010.07.05 01:45:12 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\DAEMON Tools[2010.06.24 18:29:01 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Data Solutions[2009.11.19 17:50:01 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Gearbox Software[2009.10.10 15:31:20 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\GetRightToGo[2010.05.16 19:41:36 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\gtk-2.0[2010.05.09 02:55:10 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\IObit[2009.12.13 20:50:11 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\OpenCandy[2009.08.19 11:06:34 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Opera[2009.12.12 21:17:32 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Passware[2010.01.06 20:30:29 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\SoftMaker[2010.05.28 11:22:56 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Software Informer[2009.12.31 13:22:29 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\SuperMP3Download[2010.06.09 07:40:23 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\TeamViewer[2009.08.09 16:47:24 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Thinstall[2010.06.29 14:14:28 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\TomTom[2009.08.10 11:21:47 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\TuneUp Software[2010.05.28 11:14:06 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Uniblue[2010.04.16 18:00:50 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\vghd[2009.07.05 21:19:40 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Vodafone[2010.03.02 03:38:48 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\WinBatch[2010.05.17 13:55:25 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Windows Live Writer[2009.12.13 14:24:06 | 000,000,000 | ---D | M] -- C:\Users\Tilyo Petrov Rusev\AppData\Roaming\Wireshark[2010.07.08 01:07:44 | 000,000,370 | ---- | M] () -- C:\Windows\Tasks\Ad-Aware Update (Weekly).job[2009.10.08 16:00:01 | 000,000,360 | ---- | M] () -- C:\Windows\Tasks\At1.job[2010.07.08 01:05:49 | 000,000,408 | ---- | M] () -- C:\Windows\Tasks\AutoSmartDefrag.job[2010.07.08 01:05:50 | 000,000,396 | ---- | M] () -- C:\Windows\Tasks\AWC Startup.job[2010.06.28 12:06:52 | 000,000,354 | ---- | M] () -- C:\Windows\Tasks\Driver Robot.job[2010.07.08 01:04:32 | 000,032,602 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT[2010.06.28 09:33:06 | 000,000,410 | ---- | M] () -- C:\Windows\Tasks\SmartDefrag.job[2010.07.08 01:14:28 | 000,000,488 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{36B7568B-17E5-45C7-8D84-6F20454D115F}.job ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*.* >[2010.07.08 01:05:28 | 000,003,132 | ---- | M] () -- C:\aaw7boot.log[2006.09.18 23:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat[2009.04.11 08:36:36 | 000,333,257 | RHS- | M] () -- C:\bootmgr[2007.04.20 18:26:03 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK[2006.12.30 01:24:54 | 000,000,011 | ---- | M] () -- C:\CG13.txt[2006.09.18 23:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys[2008.05.10 17:56:36 | 000,020,777 | ---- | M] () -- C:\devlist.txt[2008.01.11 03:11:23 | 001,048,576 | RH-- | M] () -- C:\F3Sg.BIN[2008.01.15 11:01:19 | 000,000,015 | ---- | M] () -- C:\F3Sg_Vista.10[2010.07.08 01:05:29 | 3220,430,848 | -HS- | M] () -- C:\hiberfil.sys[2009.09.01 17:29:37 | 000,000,000 | RHS- | M] () -- C:\IO.SYS[2010.04.30 18:21:58 | 000,000,108 | ---- | M] () -- C:\mbam-error.txt[2009.09.01 17:29:37 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS[2007.05.17 05:35:24 | 000,000,015 | ---- | M] () -- C:\NIS2007_G.TXT[2007.03.16 01:18:45 | 000,000,025 | ---- | M] () -- C:\OFFICE2007_G.TXT[2010.07.08 01:05:28 | 3534,008,320 | -HS- | M] () -- C:\pagefile.sys[2008.05.10 04:34:48 | 000,000,105 | ---- | M] () -- C:\Pass.txt[2007.05.24 00:43:40 | 000,000,017 | ---- | M] () -- C:\READER_G.TXT[2007.12.11 05:31:40 | 000,000,014 | ---- | M] () -- C:\RECOVERY.DAT[2009.04.02 18:02:58 | 000,185,833 | ---- | M] () -- C:\shldr[2008.05.10 15:59:33 | 000,000,166 | ---- | M] () -- C:\SumHidd.txt[2008.05.10 15:58:50 | 000,000,098 | ---- | M] () -- C:\SumOS.txt[2007.12.06 22:22:16 | 000,000,023 | ---- | M] () -- C:\V54.TXT < MD5 for: AGP440.SYS >[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys[2008.05.10 16:34:25 | 000,056,504 | ---- | M] (Microsoft Corporation) MD5=198636E76971EBC96404547EC0FD5E75 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_cb7c81c7\AGP440.sys[2008.05.10 16:34:25 | 000,056,504 | ---- | M] (Microsoft Corporation) MD5=198636E76971EBC96404547EC0FD5E75 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6000.20598_none_b85cfa98dae9b436\AGP440.sys[2006.11.02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys[2006.11.02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys < MD5 for: ATAPI.SYS >[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys[2008.01.19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys[2008.01.19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys[2006.11.02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys[2008.01.19 07:06:48 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\SoftwareDistribution\Download\c0a17eb89d8e2d806cdee4a2d05890b4\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys[2009.07.05 21:59:51 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys[2009.07.05 21:59:51 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys[2008.01.19 06:33:23 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\SoftwareDistribution\Download\c0a17eb89d8e2d806cdee4a2d05890b4\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys[2009.07.05 21:59:50 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys < MD5 for: CNGAUDIT.DLL >[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll < MD5 for: IASTOR.SYS >[2007.09.29 17:03:11 | 000,308,248 | ---- | M] (Intel Corporation) MD5=E5A0034847537EAEE3C00349D5C34C5F -- C:\Windows\System32\drivers\iaStor.sys[2007.09.29 17:03:11 | 000,308,248 | ---- | M] (Intel Corporation) MD5=E5A0034847537EAEE3C00349D5C34C5F -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_7baf6192\iaStor.sys[2007.09.29 17:03:11 | 000,308,248 | ---- | M] (Intel Corporation) MD5=E5A0034847537EAEE3C00349D5C34C5F -- C:\Windows\System32\DriverStore\FileRepository\iastor.inf_41af7b1f\iaStor.sys < MD5 for: IASTORV.SYS >[2008.01.19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys[2008.01.19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys[2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys[2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys < MD5 for: NETLOGON.DLL >[2006.11.02 11:46:11 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll[2008.01.19 09:35:36 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll < MD5 for: NVSTOR.SYS >[2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys[2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys[2008.01.19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys[2008.01.19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys < MD5 for: SCECLI.DLL >[2008.01.19 09:36:19 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll[2006.11.02 11:46:12 | 000,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles >[2009.03.08 13:31:42 | 000,348,160 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtmsft.dll[2009.03.08 13:31:37 | 000,216,064 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtrans.dll[2010.05.04 07:56:25 | 000,599,040 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\msfeeds.dll[2009.04.11 08:27:47 | 000,241,128 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll[2009.04.11 08:28:23 | 000,228,352 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll < %systemroot%\Tasks\*.job /lockedfiles > < %PROGRAMFILES%\*. >[2010.02.07 23:40:16 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe[2010.07.07 11:50:55 | 000,000,000 | ---D | M] -- C:\Program Files\Advanced Access Controller[2010.05.03 18:23:48 | 000,000,000 | ---D | M] -- C:\Program Files\Alwil Software[2010.05.28 22:51:05 | 000,000,000 | ---D | M] -- C:\Program Files\ao2000pr[2009.07.27 13:39:23 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update[2009.11.18 19:52:55 | 000,000,000 | ---D | M] -- C:\Program Files\Ares[2010.06.29 12:29:47 | 000,000,000 | ---D | M] -- C:\Program Files\Ashampoo[2008.05.10 17:41:26 | 000,000,000 | ---D | M] -- C:\Program Files\ASUS[2008.05.10 17:19:55 | 000,000,000 | ---D | M] -- C:\Program Files\ATK Hotkey[2008.05.10 17:20:36 | 000,000,000 | ---D | M] -- C:\Program Files\ATKGFNEX[2008.05.10 17:21:23 | 000,000,000 | ---D | M] -- C:\Program Files\ATKOSD2[2010.07.07 11:50:56 | 000,000,000 | ---D | M] -- C:\Program Files\Automated Result Operator[2010.03.04 20:24:21 | 000,000,000 | ---D | M] -- C:\Program Files\AVerMedia[2009.08.13 10:17:10 | 000,000,000 | ---D | M] -- C:\Program Files\BACL[2010.03.18 15:44:37 | 000,000,000 | ---D | M] -- C:\Program Files\Belarc[2010.07.05 01:45:12 | 000,000,000 | ---D | M] -- C:\Program Files\BitComet[2010.06.18 17:01:28 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour[2009.08.09 15:56:14 | 000,000,000 | ---D | M] -- C:\Program Files\CBS Software[2010.06.24 15:45:28 | 000,000,000 | ---D | M] -- C:\Program Files\CCleaner[2010.01.08 11:32:01 | 000,000,000 | ---D | M] -- C:\Program Files\CD Recovery Toolbox Free[2009.11.11 18:17:33 | 000,000,000 | ---D | M] -- C:\Program Files\cFosSpeed[2010.06.30 11:54:03 | 000,000,000 | ---D | M] -- C:\Program Files\City Interactive[2010.04.20 17:29:37 | 000,000,000 | ---D | M] -- C:\Program Files\Clock[2010.06.10 11:57:27 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files[2010.02.15 19:53:11 | 000,000,000 | ---D | M] -- C:\Program Files\Conduit[2010.05.16 19:48:56 | 000,000,000 | ---D | M] -- C:\Program Files\Corel[2010.07.07 11:50:56 | 000,000,000 | ---D | M] -- C:\Program Files\Count Access Advancer[2010.07.07 11:50:56 | 000,000,000 | ---D | M] -- C:\Program Files\Customized Web Management[2009.07.06 18:37:29 | 000,000,000 | ---D | M] -- C:\Program Files\DAEMON Tools Lite[2009.12.26 22:40:14 | 000,000,000 | ---D | M] -- C:\Program Files\DAEMON Tools Toolbar[2010.02.28 23:52:28 | 000,000,000 | ---D | M] -- C:\Program Files\Driver Robot[2010.03.09 13:57:11 | 000,000,000 | ---D | M] -- C:\Program Files\Driver Whiz[2010.06.12 19:13:01 | 000,000,000 | ---D | M] -- C:\Program Files\Eltima Software[2010.05.02 23:39:20 | 000,000,000 | ---D | M] -- C:\Program Files\EMPA[2009.08.17 14:10:38 | 000,000,000 | ---D | M] -- C:\Program Files\Enigma Software Group[2010.07.04 03:04:26 | 000,000,000 | ---D | M] -- C:\Program Files\ESET[2010.01.02 14:34:31 | 000,000,000 | ---D | M] -- C:\Program Files\Fighters[2010.05.01 12:59:09 | 000,000,000 | ---D | M] -- C:\Program Files\GIMP-2[2010.05.01 13:45:20 | 000,000,000 | ---D | M] -- C:\Program Files\GIMP-2.0[2010.05.20 00:17:34 | 000,000,000 | ---D | M] -- C:\Program Files\Google[2009.10.09 17:15:14 | 000,000,000 | ---D | M] -- C:\Program Files\GoWin Deluxe[2009.11.12 11:34:59 | 000,000,000 | ---D | M] -- C:\Program Files\Groove Games[2010.05.16 20:53:32 | 000,000,000 | ---D | M] -- C:\Program Files\Hot_MP3[2009.09.29 19:33:22 | 000,000,000 | ---D | M] -- C:\Program Files\illiminable[2010.06.06 18:30:15 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information[2008.05.10 17:05:30 | 000,000,000 | ---D | M] -- C:\Program Files\Intel[2010.07.07 11:50:55 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Connection Wizard[2010.07.07 11:50:56 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Content Assistant[2010.06.12 08:34:45 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer[2010.05.11 18:06:12 | 000,000,000 | ---D | M] -- C:\Program Files\IObit[2009.09.25 14:39:41 | 000,000,000 | ---D | M] -- C:\Program Files\iPhone Configuration Utility[2010.06.18 17:15:11 | 000,000,000 | ---D | M] -- C:\Program Files\iPod[2010.06.18 17:15:56 | 000,000,000 | ---D | M] -- C:\Program Files\iTunes[2010.04.26 13:49:26 | 000,000,000 | ---D | M] -- C:\Program Files\Java[2010.01.07 00:42:03 | 000,000,000 | ---D | M] -- C:\Program Files\Lavalys[2010.05.12 07:39:14 | 000,000,000 | ---D | M] -- C:\Program Files\Lavasoft[2010.07.08 01:12:13 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware[2010.06.27 19:14:52 | 000,000,000 | ---D | M] -- C:\Program Files\McAfee Security Scan[2010.05.17 13:19:51 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft[2006.11.02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games[2009.12.19 15:27:26 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office[2010.06.05 07:11:54 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight[2010.05.17 13:20:44 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server Compact Edition[2008.05.10 15:28:19 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio[2009.07.07 22:04:41 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Works[2010.06.23 11:25:32 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET[2010.05.12 10:51:25 | 000,000,000 | ---D | M] -- C:\Program Files\Monsters[2008.05.10 15:19:46 | 000,000,000 | ---D | M] -- C:\Program Files\Motorola[2010.03.11 03:53:04 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker[2010.07.04 02:57:15 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox[2006.11.02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild[2010.05.10 10:01:15 | 000,000,000 | ---D | M] -- C:\Program Files\myBabylon_English[2009.07.10 23:02:21 | 000,000,000 | ---D | M] -- C:\Program Files\NASA[2009.07.05 20:38:32 | 000,000,000 | ---D | M] -- C:\Program Files\Nero[2010.06.21 14:20:54 | 000,000,000 | ---D | M] -- C:\Program Files\Net Tools[2010.05.19 18:03:31 | 000,000,000 | ---D | M] -- C:\Program Files\Nikozen[2010.04.14 20:23:15 | 000,000,000 | ---D | M] -- C:\Program Files\NovaLogic[2010.04.18 10:14:28 | 000,000,000 | ---D | M] -- C:\Program Files\Opera 10 Beta[2010.05.06 19:43:01 | 000,000,000 | ---D | M] -- C:\Program Files\OptiNet[2009.07.30 09:10:56 | 000,000,000 | ---D | M] -- C:\Program Files\OverDisk[2008.05.10 17:38:45 | 000,000,000 | ---D | M] -- C:\Program Files\P4G[2008.05.10 17:42:04 | 000,000,000 | ---D | M] -- C:\Program Files\P4P[2009.12.12 21:06:18 | 000,000,000 | ---D | M] -- C:\Program Files\Passware[2010.04.15 13:53:32 | 000,000,000 | ---D | M] -- C:\Program Files\pchd[2010.06.29 22:33:08 | 000,000,000 | ---D | M] -- C:\Program Files\PokerStars[2010.04.01 14:26:44 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime[2010.05.07 10:08:22 | 000,000,000 | ---D | M] -- C:\Program Files\Raxco[2010.06.12 20:39:14 | 000,000,000 | ---D | M] -- C:\Program Files\Readon Technology[2008.05.10 17:17:42 | 000,000,000 | ---D | M] -- C:\Program Files\Realtek[2006.11.02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies[2009.11.05 18:07:47 | 000,000,000 | ---D | M] -- C:\Program Files\RocketDock[2010.06.18 16:44:17 | 000,000,000 | ---D | M] -- C:\Program Files\Safari[2009.11.05 17:11:31 | 000,000,000 | R--D | M] -- C:\Program Files\Skype[2009.12.19 17:52:51 | 000,000,000 | ---D | M] -- C:\Program Files\SopCast[2010.05.09 19:15:54 | 000,000,000 | ---D | M] -- C:\Program Files\SuperMp3Download[2010.01.03 22:10:58 | 000,000,000 | ---D | M] -- C:\Program Files\TeamViewer[2010.01.17 15:41:01 | 000,000,000 | ---D | M] -- C:\Program Files\The KMPlayer[2010.06.29 14:11:38 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom DesktopSuite[2010.07.05 01:45:12 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom HOME 2[2010.06.29 14:14:22 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom International B.V[2010.07.06 11:13:42 | 000,000,000 | ---D | M] -- C:\Program Files\Trend Micro[2010.06.28 12:03:55 | 000,000,000 | ---D | M] -- C:\Program Files\TuneUp Utilities 2010[2009.11.19 17:36:18 | 000,000,000 | ---D | M] -- C:\Program Files\Ubisoft[2010.05.28 11:27:17 | 000,000,000 | ---D | M] -- C:\Program Files\Uniblue[2009.07.18 15:04:10 | 000,000,000 | ---D | M] -- C:\Program Files\Utherverse Digital Inc[2010.04.19 07:32:29 | 000,000,000 | ---D | M] -- C:\Program Files\vghd[2010.03.14 13:35:11 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN[2010.03.24 22:01:16 | 000,000,000 | ---D | M] -- C:\Program Files\Vodafone[2010.05.10 13:46:40 | 000,000,000 | ---D | M] -- C:\Program Files\Wandering IPs[2010.05.04 12:43:25 | 000,000,000 | ---D | M] -- C:\Program Files\Winamp[2009.09.24 12:27:51 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Calendar[2009.09.24 12:27:48 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Collaboration[2009.09.24 12:27:38 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender[2009.07.16 12:48:02 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Doctor[2010.06.09 15:35:14 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Journal[2010.05.17 13:21:55 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live[2010.05.17 13:19:32 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live SkyDrive[2010.06.24 18:29:15 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Lotto Pro 2000[2010.06.12 08:34:45 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail[2009.10.28 18:07:46 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player[2006.11.02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT[2009.09.24 12:27:47 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Gallery[2009.10.28 18:36:29 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices[2009.09.24 12:27:49 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar[2009.12.19 15:18:55 | 000,000,000 | ---D | M] -- C:\Program Files\Windows SideShow[2010.05.04 11:18:31 | 000,000,000 | ---D | M] -- C:\Program Files\WinRAR[2008.05.10 17:28:57 | 000,000,000 | ---D | M] -- C:\Program Files\Wireless Console 2[2010.05.11 14:40:18 | 000,000,000 | ---D | M] -- C:\Program Files\Wise Registry Cleaner[2010.05.11 00:07:36 | 000,000,000 | ---D | M] -- C:\Program Files\WorkStationOPtimizer[2010.05.04 11:43:33 | 000,000,000 | ---D | M] -- C:\Program Files\Yamicsoft[2010.02.15 19:51:51 | 000,000,000 | ---D | M] -- C:\Program Files\Zapu[2009.08.17 15:56:12 | 000,000,000 | ---D | M] -- C:\Program Files\Zards software[2009.09.18 01:31:15 | 000,000,000 | ---D | M] -- C:\Program Files\Zoo Digital Publishing < %userprofile%\Desktop\*.* >[2010.04.07 22:54:25 | 000,000,715 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\Ares.lnk[2009.11.19 17:46:04 | 000,002,122 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\Brothers In Arms.lnk[2010.02.09 16:42:31 | 000,000,282 | -HS- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\desktop.ini[2010.01.28 21:34:14 | 000,000,901 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\GammonEmpire.lnk[2009.10.09 18:10:51 | 000,001,881 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\HijackThis.lnk[2010.06.24 18:29:13 | 000,000,815 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\Lotto Pro.lnk[2009.11.14 02:16:34 | 000,002,079 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\Marine Sharpshooter II Jungle Warfare.lnk[2010.05.06 19:43:01 | 000,000,777 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\OptiNet.lnk[2009.11.10 20:04:15 | 000,000,781 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\ParadiseCasino - Bulgarian.lnk[2010.05.21 18:45:54 | 000,000,926 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\PowerGramo.lnk[2009.12.19 17:43:42 | 000,000,755 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\SopCast.lnk[2010.06.24 18:29:13 | 000,000,796 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\Update Lotto Drawing Files.lnk[2010.05.10 13:51:17 | 000,001,654 | ---- | M] () -- C:\Users\Tilyo Petrov Rusev\Desktop\Wandering IPs.lnk < %userprofile%\Desktop\*. > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-07-01 19:17:29 ========== Alternate Data Streams ========== @Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:1F8C9007@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:6A91BBD8@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:EBACC189@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:CF778051< End of report > OTL Extras logfile created on: 7.7.2010 г. 20:43:48 - Run 1OTL by OldTimer - Version 3.2.7.1 Folder = C:\Users\Tilyo Petrov Rusev\Searches\DesktopWindows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstationInternet Explorer (Version = 8.0.6001.18928)Locale: 00000402 | Country: Bulgaria | Language: BGR | Date Format: d.M.yyyy 'г.' 3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 40,00% Memory free6,00 Gb Paging File | 4,00 Gb Available in Paging File | 64,00% Paging File freePaging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program FilesDrive C: | 116,44 Gb Total Space | 28,70 Gb Free Space | 24,64% Space Free | Partition Type: NTFSDrive D: | 108,63 Gb Total Space | 18,97 Gb Free Space | 17,46% Space Free | Partition Type: NTFSE: Drive not present or media not loadedDrive F: | 35,81 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFSG: Drive not present or media not loadedH: Drive not present or media not loadedI: Drive not present or media not loaded Computer Name: TILYOPETROVRUS1Current User Name: Tilyo Petrov RusevLogged in as Administrator. Current Boot Mode: NormalScan Mode: All usersCompany Name Whitelist: OnSkip Microsoft Files: OnFile Age = 30 DaysOutput = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>].cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation).hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation).hta [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found [HKEY_USERS\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Classes\<extension>].html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]batfile [open] -- "%1" %*cmdfile [open] -- "%1" %*comfile [open] -- "%1" %*cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)exefile [open] -- "%1" %*helpfile [open] -- Reg Error: Key error.hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)htafile [open] -- Reg Error: Key error.htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)piffile [open] -- "%1" %*regfile [merge] -- Reg Error: Key error.scrfile [config] -- "%1"scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)scrfile [open] -- "%1" /Stxtfile [edit] -- Reg Error: Key error.Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]"cval" = 1"UacDisableNotify" = 1"InternetSettingsDisableNotify" = 1"AutoUpdateDisableNotify" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]"DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]"DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]"DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]"AntiVirusOverride" = 0"AntiSpywareOverride" = 0"FirewallOverride" = 0"VistaSp1" = Reg Error: Unknown registry data type -- File not found"VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]"DisableNotifications" = 0"EnableFirewall" = 1"DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]"DisableNotifications" = 0"EnableFirewall" = 1"DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]"DisableNotifications" = 0"EnableFirewall" = 1"DoNotAllowExceptions" = 0 ========== Authorized Applications List ========== ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]"{174A8E5D-9CCE-4980-9035-337FA073FEE0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{2081533B-D18D-4869-AF28-68B594E8E939}" = lport=24132 | protocol=17 | dir=in | name=bitcomet 24132 udp | "{23F4EED1-28AD-4BEE-9FC8-2C9A2AE9A3F5}" = lport=10338 | protocol=17 | dir=in | name=bitcomet 10338 udp | "{2F698DB6-89AF-4220-8FB1-B778CCB4F2ED}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | "{341709A3-A5EA-4FAD-92D3-403B4E78B9F6}" = lport=10243 | protocol=6 | dir=in | app=system | "{342F5416-B09B-4FEC-8CFE-FF4043A788EB}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{365CDD25-75F2-46C6-91D2-BB4B4BE62300}" = lport=24132 | protocol=6 | dir=in | name=bitcomet 24132 tcp | "{3B0F4A7D-5CCA-4DE7-95B8-3767B9343198}" = lport=2869 | protocol=6 | dir=in | app=system | "{3D2876E6-A02E-4DD8-A5F1-EEA9F696D37D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{3ED1488E-07A3-4FB5-ADF3-52C3D75F2FDE}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{5FBE1608-6885-4C48-B553-7CA2711673AD}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{64C3F9C0-0CD3-4E9E-8FC1-49B469509111}" = rport=10243 | protocol=6 | dir=out | app=system | "{A4D2C4A3-4F2E-40B2-A6C4-22072605AFC0}" = lport=10338 | protocol=6 | dir=in | name=bitcomet 10338 tcp | "{E005CCC9-2E80-45BC-970E-9FB27892880E}" = lport=2869 | protocol=6 | dir=in | app=system | "{E77CA450-1407-4C31-BB60-6B076B231399}" = lport=5000 | protocol=17 | dir=in | name=passware kit enterprise demo 9.5 | "{EB3C1DB1-454D-4219-B988-89311452129F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{EDCB8142-445A-433C-9855-8659940B5635}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]"{0D48CA1D-8847-4EBD-B506-98EBB8743D1C}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe | "{263AEAA0-3D40-4E96-BCBB-2B73C7C58A8C}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe | "{31CEF5C0-C2DD-41BD-9EC9-F600B5BE554F}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe | "{34E730FD-AF2E-443F-B977-EFF5D7081257}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{385204B3-34C1-4E50-B627-7A1659FB33D8}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{399CFC05-4B9E-4EE1-85DE-F59F5E837878}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{3C980528-60F5-4213-9C1F-7BA31393A5D8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{3CF9F5F2-AFAD-4AAD-BFCA-728307525379}" = protocol=17 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\update.exe | "{426A84B0-DDB9-46AB-9642-5E5BBACE26E9}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | "{48C74D72-0F81-444D-93FC-A707D5F96375}" = protocol=6 | dir=out | app=system | "{5187CA1E-30C6-45D0-94EF-47232F451431}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe | "{57DEC3E6-E5BA-4FD1-BDE4-B5F84FB66083}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{5BE64FD3-500C-4C4F-863C-139D1A52741B}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe | "{5E15BE13-66A7-4FD9-A028-2D6585811E1F}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{5F7149FF-9289-41FB-A78F-6629AC5C1C9F}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe | "{67879E39-8E57-4A96-950B-4D4C835AD351}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{7874C5E8-0E9D-49F6-82C9-8095F2CA2A6D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{78C98D6F-0E4E-408F-81CB-8B4160B4CD70}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{7CD1BA54-9604-4A4A-94BA-BB1ECDD7FA4C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{8BE3CCE4-0002-4F8B-9A06-C91AC4424479}" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | "{8F406FCA-E9F4-47A3-A28D-88AF6BE898BB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{9EBA2886-0FA2-4F3C-802D-5946714D44C0}" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | "{A11C109C-16C9-40EA-91DC-914485619A5C}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{A91F005C-F807-4F90-95FA-F6DD154AD36D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{AF594BC5-5D41-4AA8-94BA-C226CCD474D7}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{B6525F0F-6C23-4875-84B2-4DE90D031A51}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{BDFBE781-5E73-43B8-8601-D187BCFD6428}" = protocol=6 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\dfx2.exe | "{C16F668B-1D60-454F-9F97-F4959DE1F130}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | "{C6558725-ADC8-422D-BF75-E05D05BE4FB9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D54AE78D-D951-4AC6-A2AA-31DF3627A549}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{E174D539-4F88-4214-A8CB-15DA1081B49C}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{EBF5516D-6622-41EC-BFFA-C09B1BC7889B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{F3143B03-6F0F-4455-B431-B56A3AEFEF8C}" = protocol=17 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\dfx2.exe | "{FA90F71F-B40D-465C-9529-241512F0495F}" = protocol=6 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\update.exe | "TCP Query User{11EF6151-6EBC-4EE8-865D-0E78ED3CFE88}C:\program files\readon technology\readon tv movie radio player 7.2.0.0\internettv.exe" = protocol=6 | dir=in | app=c:\program files\readon technology\readon tv movie radio player 7.2.0.0\internettv.exe | "TCP Query User{1E74337C-894D-4E38-9CC2-BCB63121CA49}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | "TCP Query User{258583ED-424D-4929-BB9C-9B0E48943660}C:\program files\sopcast\sopcast.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\sopcast.exe | "TCP Query User{32CD377C-6F5B-40E2-B6D2-E3D67FC49555}C:\program files\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files\ares\ares.exe | "TCP Query User{3C1A8889-E9E2-4688-B43C-16D116FA1451}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "TCP Query User{488C3585-E817-493F-B1B3-DC118C1D0EB6}C:\users\tilyo petrov rusev\downloads\bitcomet.exe" = protocol=6 | dir=in | app=c:\users\tilyo petrov rusev\downloads\bitcomet.exe | "TCP Query User{51A196E3-6A7F-4676-B7BC-089A687AC53F}C:\program files\ubisoft\gearbox software\brothersinarms\system\bia.exe" = protocol=6 | dir=in | app=c:\program files\ubisoft\gearbox software\brothersinarms\system\bia.exe | "TCP Query User{58517F7C-D996-4976-8152-7787479794D0}C:\program files\bitcomet\bitcomet.exe" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | "TCP Query User{58DA3064-2D80-469F-B0F5-CE7AA92FB518}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | "TCP Query User{5C5C2D44-4126-43F8-815B-A668F6DF9CBA}C:\users\tilyo petrov rusev\downloads\bitcomet.exe" = protocol=6 | dir=in | app=c:\users\tilyo petrov rusev\downloads\bitcomet.exe | "TCP Query User{7161C013-7B07-4248-A23B-9A74D3B33A53}C:\windows\ehome\ehexthost.exe" = protocol=6 | dir=in | app=c:\windows\ehome\ehexthost.exe | "TCP Query User{743CD803-A96E-4231-A57F-1786E194B7A9}C:\program files\sopcast\adv\sopadver.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe | "TCP Query User{7AC0E75B-6616-4CCF-BBB6-AAF5DC995D0F}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "TCP Query User{7ED530E2-B27E-42BD-81C3-38ACA9E154B0}C:\program files\sopcast\sopcast.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\sopcast.exe | "TCP Query User{959403F5-E8C4-4D7D-BEA9-CBEFE7D2B1A1}D:\програми\игри\delta.force.xtreme.2-reloaded\aos_eng.exe" = protocol=6 | dir=in | app=d:\програми\игри\delta.force.xtreme.2-reloaded\aos_eng.exe | "TCP Query User{9D796D26-EDA4-4DAB-AC00-482F5156DF21}C:\program files\zapu\zapu accelerator\wdivi.exe" = protocol=6 | dir=in | app=c:\program files\zapu\zapu accelerator\wdivi.exe | "TCP Query User{B741C8E8-553D-4EAB-8AC5-80A399838440}C:\program files\novalogic\delta force xtreme 2\aos_eng.exe" = protocol=6 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\aos_eng.exe | "TCP Query User{BA3F3C3F-05C2-42ED-9E85-C51EB4C25165}C:\casino\paradisecasino - bulgarian\casino.exe" = protocol=6 | dir=in | app=c:\casino\paradisecasino - bulgarian\casino.exe | "TCP Query User{C3D356C8-CDA6-48B8-8BC4-8C85204663B1}C:\program files\novalogic\delta force xtreme 2\aos_eng.exe" = protocol=6 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\aos_eng.exe | "TCP Query User{EE92014B-FDAB-424C-AF91-3101EE598468}C:\program files\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files\ares\ares.exe | "TCP Query User{EFB10FB5-56FE-43A1-8069-6130122B8EAC}C:\users\tilyo petrov rusev\downloads\bitcomet_win9x.exe" = protocol=6 | dir=in | app=c:\users\tilyo petrov rusev\downloads\bitcomet_win9x.exe | "TCP Query User{F4F92DA2-3804-4FA6-B67D-612486D59CC8}C:\program files\sopcast\adv\sopadver.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe | "UDP Query User{0F3FF822-020F-4EAF-BAF2-FC8A455536CC}D:\програми\игри\delta.force.xtreme.2-reloaded\aos_eng.exe" = protocol=17 | dir=in | app=d:\програми\игри\delta.force.xtreme.2-reloaded\aos_eng.exe | "UDP Query User{11D612C8-C728-44B6-8FBB-1FA329C1D098}C:\program files\ubisoft\gearbox software\brothersinarms\system\bia.exe" = protocol=17 | dir=in | app=c:\program files\ubisoft\gearbox software\brothersinarms\system\bia.exe | "UDP Query User{28310D25-8B78-42BF-BBD6-C821F9A4BF19}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "UDP Query User{2BB99E4F-5364-47C6-A7C2-CAB0FD0B512D}C:\users\tilyo petrov rusev\downloads\bitcomet_win9x.exe" = protocol=17 | dir=in | app=c:\users\tilyo petrov rusev\downloads\bitcomet_win9x.exe | "UDP Query User{3B19D971-E21A-4988-B5C7-C78028F3AD0E}C:\program files\readon technology\readon tv movie radio player 7.2.0.0\internettv.exe" = protocol=17 | dir=in | app=c:\program files\readon technology\readon tv movie radio player 7.2.0.0\internettv.exe | "UDP Query User{3DCD80B7-2DBC-486D-BB3F-C568982F8129}C:\program files\bitcomet\bitcomet.exe" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | "UDP Query User{4F81AC4C-2665-4070-8E11-EBEEAC7B7138}C:\program files\sopcast\sopcast.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\sopcast.exe | "UDP Query User{56D857B5-7BAF-4BB6-8A0F-F124C55D1350}C:\program files\sopcast\adv\sopadver.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe | "UDP Query User{60AA4C9E-9EDC-4FD5-ABA5-E3364164E4B9}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | "UDP Query User{75F1E357-259D-440B-A926-CF5853E0562C}C:\program files\novalogic\delta force xtreme 2\aos_eng.exe" = protocol=17 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\aos_eng.exe | "UDP Query User{85671E3C-2864-48AE-B8EA-5682A5EB5596}C:\program files\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files\ares\ares.exe | "UDP Query User{8C050D3B-1C1F-470D-9308-0CFE34FD4F77}C:\casino\paradisecasino - bulgarian\casino.exe" = protocol=17 | dir=in | app=c:\casino\paradisecasino - bulgarian\casino.exe | "UDP Query User{8CE66FEF-BAEC-4ED9-B7A1-E761988C127B}C:\users\tilyo petrov rusev\downloads\bitcomet.exe" = protocol=17 | dir=in | app=c:\users\tilyo petrov rusev\downloads\bitcomet.exe | "UDP Query User{96F50964-A05F-45F5-A578-71695860F047}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "UDP Query User{AED5FAF9-28F7-4B18-94DD-CE766145E690}C:\windows\ehome\ehexthost.exe" = protocol=17 | dir=in | app=c:\windows\ehome\ehexthost.exe | "UDP Query User{BEF99706-5B07-459B-BA1A-CCAE82B92AEA}C:\program files\novalogic\delta force xtreme 2\aos_eng.exe" = protocol=17 | dir=in | app=c:\program files\novalogic\delta force xtreme 2\aos_eng.exe | "UDP Query User{C10E3A1F-E43E-48C0-8744-234C39AEAB95}C:\program files\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files\ares\ares.exe | "UDP Query User{CF69E18E-7215-4925-BBC7-CED11FD59DF1}C:\program files\sopcast\adv\sopadver.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe | "UDP Query User{E346ECB2-8AA2-4FB3-A53E-76924C69E722}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | "UDP Query User{F4E67420-67BE-456B-A619-2E7917DB3D62}C:\program files\sopcast\sopcast.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\sopcast.exe | "UDP Query User{F53DFBC2-200D-4373-8902-B30AF993313C}C:\users\tilyo petrov rusev\downloads\bitcomet.exe" = protocol=17 | dir=in | app=c:\users\tilyo petrov rusev\downloads\bitcomet.exe | "UDP Query User{FCBC767D-4088-4BCF-A1CE-D8811B3CA988}C:\program files\zapu\zapu accelerator\wdivi.exe" = protocol=17 | dir=in | app=c:\program files\zapu\zapu accelerator\wdivi.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148"{06A395CE-60A6-471E-A73C-73634310EDB3}" = Windows Live Sync"{0CB9668D-F979-4F31-B8B8-67FE90F929F8}" = Bonjour"{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}" = ATK Media"{1584854C-1513-40EA-96D4-493384D0A3C7}" = Readon TV Movie Radio Player 7.2.0.0"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer"{18522005-B8F6-4552-A228-823328696F48}" = Yamaha Supercross"{193C41B9-1A0F-45E6-8546-41C91C99A5F8}" = Delta Force Xtreme 2"{19CC7A03-BDBB-4EFB-B8C9-86FD2FB95334}" = Windows Live Messenger"{1C8521E5-5A7B-4A4E-A9CD-AD53116EAEE0}" = ASUS Data Security Manager"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Инструмент за качване на Windows Live"{21550042-EA9F-4419-A8D7-DF732DCEB76E}" = Microsoft Office PowerPoint Remote"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer"{232AAA95-AE60-46C7-9987-4E7139EA3554}" = Асистент за влизане на Windows Live"{2396F815-84E0-4353-83D7-8B190556DA42}" = ASUS CopyProtect"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java 6 Update 20"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime"{2B818257-E6C7-4841-8C29-C5C9A982BCE5}" = RICOH Media Driver ver.2.07.01.00"{2D7C3E18-E696-4B67-8B5D-45CD3BE6B27E}" = SweetIM for Messenger 3.0"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform"{31874D00-F3E1-44CE-A79A-492CFBD585E8}" = Windows Live Writer"{338F08AB-C262-42C7-B000-34DE1A475273}" = Ad-Aware Email Scanner for Outlook"{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}" = ATK Hotkey"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis"{46183C3F-11E8-486E-9EAE-F8D8C8321E20}" = Boost Your Browser"{47E582E4-482B-47D2-B578-FE7F83F6CED4}" = Windows Live Mail"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater"{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}" = HP Picasso Media Center Add-In"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml"{57B15AD4-8C9D-4164-82BB-E33D8644E757}" = ASUS InstantFun"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.52.02"{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}" = ATKOSD2"{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}" = NB Probe"{6421F085-1FAA-DE13-D02A-CFB412C522A4}" = Acrobat.com"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin"{6AECFE2F-86D3-4EA8-B110-19CDAA343199}" = ItaEst - Taka e!"{6CD0E03A-7E99-4FDE-9D7F-D0F457DB4192}" = Фотогалерия на Windows Live"{6E19F210-3813-4002-B561-94D66AA182B6}" = Atheros Communications Inc.® L1 Gigabit Ethernet Driver"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053"{79A64F98-1796-4FA2-B5FF-C90F83D8BACD}" = Vodafone Mobile Connect Lite"{7A27764B-5434-4DAA-BD43-3ACF4FFCD7FE}" = SweetIM Toolbar for Internet Explorer 3.8"{7AB3A249-FB81-416B-917A-A2A10E74C503}" = iTunes"{7F815C5F-D2A4-4173-B7C0-55A9D6F87E38}" = MobileMe Control Panel"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable"{83F73CB1-7705-49D1-9852-84D839CA2A45}" = Wireless Console 2"{85991ED2-010C-4930-96FA-52F43C2CE98A}" = Apple Mobile Device Support"{863BB78A-107D-475C-AE65-444F327C83E1}" = PerfectSpeed PC Optimizer"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight"{8CFEBE9C-F29F-4C49-80E0-7106970F8734}" = Power4Gear eXtreme"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007"{90120000-0015-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0015-0816-0000-0000000FF1CE}" = Microsoft Office Access MUI (Portuguese (Portugal)) 2007"{90120000-0015-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0015-0C0A-0000-0000000FF1CE}" = Microsoft Office Access MUI (Spanish) 2007"{90120000-0015-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007"{90120000-0016-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0016-0816-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Portuguese (Portugal)) 2007"{90120000-0016-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0016-0C0A-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Spanish) 2007"{90120000-0016-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007"{90120000-0018-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0018-0816-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Portuguese (Portugal)) 2007"{90120000-0018-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0018-0C0A-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Spanish) 2007"{90120000-0018-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007"{90120000-0019-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0019-0816-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Portuguese (Portugal)) 2007"{90120000-0019-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0019-0C0A-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Spanish) 2007"{90120000-0019-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007"{90120000-001A-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001A-0816-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Portuguese (Portugal)) 2007"{90120000-001A-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001A-0C0A-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Spanish) 2007"{90120000-001A-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007"{90120000-001B-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001B-0816-0000-0000000FF1CE}" = Microsoft Office Word MUI (Portuguese (Portugal)) 2007"{90120000-001B-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001B-0C0A-0000-0000000FF1CE}" = Microsoft Office Word MUI (Spanish) 2007"{90120000-001B-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-001F-0403-0000-0000000FF1CE}" = Microsoft Office Proof (Catalan) 2007"{90120000-001F-0403-0000-0000000FF1CE}_PROHYBRIDR_{4B47C31E-46B0-462B-BEE4-DC383B6A1F2A}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007"{90120000-001F-040C-0000-0000000FF1CE}_PROHYBRIDR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)"{90120000-001F-0416-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Brazil)) 2007"{90120000-001F-0416-0000-0000000FF1CE}_PROHYBRIDR_{75EBE365-7FC5-4720-A7D3-804BF550D1BC}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)"{90120000-001F-042D-0000-0000000FF1CE}" = Microsoft Office Proof (Basque) 2007"{90120000-001F-0456-0000-0000000FF1CE}" = Microsoft Office Proof (Galician) 2007"{90120000-001F-0816-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Portugal)) 2007"{90120000-001F-0816-0000-0000000FF1CE}_PROHYBRIDR_{C312E1CD-EC19-4270-A072-F36F634DFF79}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007"{90120000-001F-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007"{90120000-002C-0816-0000-0000000FF1CE}" = Microsoft Office Proofing (Portuguese (Portugal)) 2007"{90120000-002C-0C0A-0000-0000000FF1CE}" = Microsoft Office Proofing (Spanish) 2007"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007"{90120000-006E-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-006E-0816-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Portuguese (Portugal)) 2007"{90120000-006E-0816-0000-0000000FF1CE}_PROHYBRIDR_{A8523DA4-5563-4F0E-BD9D-4E4CC3CF7239}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-006E-0C0A-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Spanish) 2007"{90120000-006E-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{6113C11D-BACA-4D8E-8002-03C8D06FD5E6}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-008A-0409-0000-0000000FF1CE}" = Microsoft Office 2007 Recent Documents Gadget"{90120000-00A1-0C0A-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Spanish) 2007"{90120000-00A1-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007"{90120000-0115-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007"{90120000-0117-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable"{A5A63519-F5C2-4F4A-849A-F28A1AB3D522}" = Sentinel Protection Installer 7.5.0"{A7631C52-DC0C-435C-8802-9FA032084D6B}" = Семейна безопасност на Windows Live"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3.2"{AFAC914D-9E83-4A89-8ABE-427521C82CCF}" = Safari"{B2D328BE-45AD-4D92-96F9-2151490A203E}" = Apple Application Support"{BC61F51E-8AF7-46B9-AF20-B33B5EE81034}" = Nero 7 Essentials"{BDE0CF4C-8DE2-41DB-A845-78D48874E2C6}" = SLOW-PCfighter"{C0FC1C14-4824-4A73-87A6-9E888C9C3102}" = ASUS Splendid Video Enhancement Technology"{C9B2753A-25CA-4E35-A8BA-DABAAD46112A}" = Windows Live Movie Maker"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1"{CE86A0E7-818D-43EC-A181-59BA9BD3EF2E}" = LightScribe 1.8.13.1"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities"{D3D54F3E-C5C3-443D-978F-87A72E5616E8}" = ATK Generic Function Service"{D7E04009-B191-4E9D-9D2D-1BBE57BD8A42}" = VistaFeaturePack"{DB69C93F-A2E4-43C5-838B-5B80EBDE7A21}" = Passware Kit Enterprise Demo 9.5"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01"{F7B0939E-58DF-11DF-B3A6-005056806466}" = Google Земя"{F8DBD826-2387-43C5-94AD-ACA7EB55F049}" = Windows Live Essentials"{FA54AFB1-5745-4389-B8C1-9F7509672ED1}" = iPhone Configuration Utility"{FC3D290D-79BE-44B7-ABF9-FDD110925930}" = P4P"{FE3997D3-6B56-4AC4-A99C-9DDFC45359BF}" = TuneUp Utilities Language Pack (en-US)"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites"Ad-Aware" = Ad-Aware"Adobe AIR" = Adobe AIR"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin"Advanced SystemCare 3_is1" = Advanced SystemCare 3"Ares" = Ares 2.1.5"Ashampoo ClipFinder HD_is1" = Ashampoo ClipFinder HD 2.07"Ashampoo HDD Control_is1" = Ashampoo HDD Control 1.11"Ashampoo Magical Defrag 2_is1" = Ashampoo Magical Defrag 2"Ashampoo Magical Snap 2_is1" = Ashampoo Magical Snap 2.51"Ashampoo Photo Commander 7_is1" = Ashampoo Photo Commander 7.30"Ashampoo UnInstaller 4_is1" = Ashampoo UnInstaller 4.04"Ashampoo WinOptimizer 6_is1" = Ashampoo WinOptimizer 6.60"Asus_Camera_ScreenSaver" = Asus_Camera_ScreenSaver"avast5" = avast! Free Antivirus"Belarc Advisor" = Belarc Advisor 8.1"BitComet" = BitComet 1.20"BrothersInArms" = Brothers In Arms"bwin Poker_is1" = bwin Poker"CCleaner" = CCleaner"CD Recovery Toolbox Free_is1" = CD Recovery Toolbox Free 1.1"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com"Data Access Objects (DAO) 3.5" = Data Access Objects (DAO) 3.5"Defense Grid - The Awakening1.0" = Defense Grid - The Awakening"ESET Online Scanner" = ESET Online Scanner v3"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.30"Game Booster_is1" = Game Booster"gaslee" = Favorit"HOMESTUDENTR" = Microsoft Office Home and Student 2007"InstallShield_{D7E04009-B191-4E9D-9D2D-1BBE57BD8A42}" = VistaFeaturePack"IObit Security 360_is1" = IObit Security 360"Lotto Pro" = Lotto Pro"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware"McAfee Security Scan" = McAfee Security Scan Plus"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)"NVIDIA Drivers" = NVIDIA Drivers"oggcodecs" = oggcodecs 0.71.0946"OptiNet" = OptiNet (remove only)"Picasa 3" = Picasa 3"PokerStars" = PokerStars"Powergramo" = PowerGramo Professional"PROHYBRIDR" = 2007 Microsoft Office system"RocketDock_is1" = RocketDock 1.3.5"SLOW-PCfighter" = SLOW-PCfighter"Smart Defrag_is1" = Smart Defrag"SMSERIAL" = Motorola SM56 Speakerphone Modem"SopCast" = SopCast 3.2.4"SpeedConnect Internet Accelerator v.7.5_is1" = SpeedConnect Internet Accelerator v.7.5"SuperMp3Download" = Super MP3 Download"TeamViewer 5" = TeamViewer 5"The KMPlayer" = The KMPlayer (remove only)"TomTom HOME" = TomTom HOME 2.7.3.1894"TuneUp Utilities" = TuneUp Utilities"USB 2.0 1.3M UVC WebCam" = USB 2.0 1.3M UVC WebCam"VLC media player" = VLC media player 1.0.5"Windows Doctor_is1" = Windows Doctor 1.6"WinGimp-2.0_is1" = GIMP 2.6.8"WinLiveSuite_Wave3" = Windows Live Essentials"WinRAR archiver" = Архиватор WinRAR"Wise Registry Cleaner_is1" = Wise Registry Cleaner Free 5.31 ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-802842001-1745263943-2178312464-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"GammonEmpire" = GammonEmpire"pchd" = pchd ========== Last 10 Event Log Errors ========== Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report > Цитирай Link to comment Сподели другаде More sharing options...
Night_Raven Публикувано Юли 8, 2010 Report Share Публикувано Юли 8, 2010 Изтегли FixPolicies и го запази на работния плот. Стартирай го и кликни бутон Install. Отвори новосъздадената папка на работния плот на име FixPolicies, кликни с десния бутон върху Fix_policies.cmd и избери Run as administrator. --- Стартирай отново OTL. В празното поле "Custom Scans/Fixes" (в долната част на програмата) постави следния текст (маркирай го, натисни Ctrl+C и после в полето на OTL натисни Ctrl+V): :OTL IE - HKLM\..\URLSearchHook: {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - Reg Error: Key error. File not found IE - HKLM\..\URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - Reg Error: Key error. File not found IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not found IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not found FF - prefs.js..browser.startup.homepage: "http://webalta.ru" FF - user.js..browser.startup.homepage: "http://webalta.ru" O3 - HKLM\..\Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {42ad2408-baaa-408d-b13e-4706560e817b} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found. O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found. O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {9384BD4C-DD14-4BE9-80F7-F6277511E4F5} - No CLSID value found. O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} - No CLSID value found. O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKU\S-1-5-21-802842001-1745263943-2178312464-1000\..\Toolbar\WebBrowser: (no name) - {FE063DB9-4EC0-403E-8DD8-394C54984B2C} - No CLSID value found. @Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:1F8C9007 @Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:6A91BBD8 @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:EBACC189 @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:CF778051 :Files C:\WINDOWS\*.tmp :Commands [emptytemp] [reboot]Копирай текста точно както е в полето. Внимавай да не изтървеш началното двуеточие и всяка команда да е на отделен ред, както е в полето. Кликни бутон Run Fix. Потвърди с OK на съобщението, че е нужен рестарт на системата. След рестарта ще се появи текстов дневник/лог. Същият файл се намира в C:\_OTL\MovedFiles. Моля, прикачи го към следващия си коментар. След това стартирай отново OTL, създай пресни дневници (както бях описал в първия мой коментар в темата) и ги прикачи отново. Можеш да архивираш всичките файлове в един архив, а можеш и да ги прикачиш поотделно. --- Изтегли GooredFix и го запази на работния плот. Кликни върху него с десния бутон и избери Run as administrator. На въпроса дали да се сканира кликни Yes. В края ще се появи лог файл в Notepad. Копирай му съдържанието или прикачи файла (намира се на работния плот) към коментара си. Цитирай Link to comment Сподели другаде More sharing options...
surogati Публикувано Юли 8, 2010 Author Report Share Публикувано Юли 8, 2010 All processes killed========== OTL ==========Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{9384bd4c-dd14-4be9-80f7-f6277511e4f5} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9384bd4c-dd14-4be9-80f7-f6277511e4f5}\ not found.Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ not found.Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{A3BC75A2-1F87-4686-AA43-5347D756017C} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}\ not found.Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}\ not found.Prefs.js: "http://webalta.ru" removed from browser.startup.homepageC:\Users\Tilyo Petrov Rusev\AppData\Roaming\Mozilla\FireFox\Profiles\u00xiagw.default\user.js moved successfully.Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}\ not found.Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{42ad2408-baaa-408d-b13e-4706560e817b} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42ad2408-baaa-408d-b13e-4706560e817b}\ not found.Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{9384bd4c-dd14-4be9-80f7-f6277511e4f5} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9384bd4c-dd14-4be9-80f7-f6277511e4f5}\ not found.Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ not found.Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}\ not found.Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} not found.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} not found.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}\ not found.Registry value HKEY_USERS\S-1-5-21-802842001-1745263943-2178312464-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.Registry value HKEY_USERS\S-1-5-21-802842001-1745263943-2178312464-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.Registry value HKEY_USERS\S-1-5-21-802842001-1745263943-2178312464-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{9384BD4C-DD14-4BE9-80F7-F6277511E4F5} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9384BD4C-DD14-4BE9-80F7-F6277511E4F5}\ not found.Registry value HKEY_USERS\S-1-5-21-802842001-1745263943-2178312464-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B2E293EE-FD7E-4C71-A714-5F4750D8D7B7}\ not found.Registry value HKEY_USERS\S-1-5-21-802842001-1745263943-2178312464-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.Registry value HKEY_USERS\S-1-5-21-802842001-1745263943-2178312464-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FE063DB9-4EC0-403E-8DD8-394C54984B2C} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FE063DB9-4EC0-403E-8DD8-394C54984B2C}\ deleted successfully.ADS C:\ProgramData\TEMP:1F8C9007 deleted successfully.ADS C:\ProgramData\TEMP:6A91BBD8 deleted successfully.ADS C:\ProgramData\TEMP:EBACC189 deleted successfully.ADS C:\ProgramData\TEMP:CF778051 deleted successfully.========== FILES ==========C:\WINDOWS\msdownld.tmp folder moved successfully.========== COMMANDS ========== [EMPTYTEMP] User: All Users-> No Temporary Internet Files cache folder defined! User: Default->Temp folder emptied: 0 bytes-> No Temporary Internet Files cache folder defined!->Flash cache emptied: 41620 bytes User: Default User-> No Temporary Internet Files cache folder defined! User: Public-> No Temporary Internet Files cache folder defined! User: tilyo-> No Temporary Internet Files cache folder defined! User: Tilyo Petrov Rusev->Temp folder emptied: 12368472 bytes-> No Temporary Internet Files cache folder defined!->Java cache emptied: 0 bytes->FireFox cache emptied: 41977510 bytes->Google Chrome cache emptied: 346972628 bytes->Apple Safari cache emptied: 2207120 bytes->Flash cache emptied: 828 bytes %systemdrive% .tmp files removed: 0 bytes%systemroot% .tmp files removed: 0 bytes%systemroot%\System32 .tmp files removed: 0 bytes%systemroot%\System32\drivers .tmp files removed: 0 bytesWindows Temp folder emptied: 25680866 bytesRecycleBin emptied: 0 bytes Total Files Cleaned = 409,00 mb OTL by OldTimer - Version 3.2.7.1 log created on 07082010_072128 Files\Folders moved on Reboot...File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF16DF.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF17C4.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF1A31.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF1A92.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF1D5A.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF1D64.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF1DFF.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF1E07.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF1F6F.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF1F7B.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF369.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF371.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF444A.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF4456.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF4C8B.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF4C93.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF4D17.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF4D22.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF4DC0.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF4DE2.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF4FA8.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF4FB0.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF4FDA.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF4FE2.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF5009.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF5012.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF508D.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF5095.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF5100.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF5108.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF514F.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF5157.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF52EC.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF5A1.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF5FD.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF626F.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF6C11.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF6F3A.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF7E4.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF7F27.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF7F2F.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF7F5.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF865A.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DF8727.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFB517.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFB51F.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFC3C1.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFC5A9.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFD470.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFD47B.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFD59C.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFD5A8.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFD682.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFD698.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFD90F.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFD91A.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFDF2F.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFDF37.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFE179.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFE27E.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFE2DF.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFF23B.tmp not found!File\Folder C:\Users\Tilyo Petrov Rusev\AppData\Local\Temp\~DFF253.tmp not found!File move failed. C:\Windows\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot... Цитирай Link to comment Сподели другаде More sharing options...
surogati Публикувано Юли 8, 2010 Author Report Share Публикувано Юли 8, 2010 Проблема се оправи.Много,много съм благодарен.Извинявам се за първоначалните действия от моя страна.Радвам се че ви има. Цитирай Link to comment Сподели другаде More sharing options...
Night_Raven Публикувано Юли 8, 2010 Report Share Публикувано Юли 8, 2010 Стартирай отново OTL и кликни бутон CleanUp. Потвърди с Ok на съобщението, за да се рестартира системата. Това ще почисти инструмента и файловете му. Цитирай Link to comment Сподели другаде More sharing options...
Препоръчан пост
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.