Navigacija
Lista poslednjih: 16, 32, 64, 128 poruka.

security tool mi se pojavio

[es] :: Zaštita :: security tool mi se pojavio

[ Pregleda: 2994 | Odgovora: 4 ] > FB > Twit

Postavi temu Odgovori

Autor

Pretraga teme: Traži
Markiranje Štampanje RSS

vladojuve

Član broj: 3884
Poruke: 14
77.29.237.*



Profil

icon security tool mi se pojavio14.11.2010. u 16:16 - pre 166 meseci
Pomagajte ljudi//pojavio mi se neki fake antivirus "security tool" i nista mi ne radi kako da se resim ovog problema i ima li resenja///task manager mi ne radi///antivirus mi ne radi///nasao sam nesto na netu ali kad downoadiram ne mogu da ga instaliram////nasao sam i manuelno da iscistim ali ne radi mi task manager///ne znam sta drugo da probam///pomagajte
hvala
 
Odgovor na temu

kristi1

Član broj: 151211
Poruke: 2012
*.dynamic.isp.telekom.rs.

Sajt: www.mycity.rs/Ambulanta


+88 Profil

icon Re: security tool mi se pojavio14.11.2010. u 16:45 - pre 166 meseci
http://oldtimer.geekstogo.com/OTL.exe

Klikni na gornji link desnim klikom \ Save as \ izaberu desktop i snimi ga pod nazivom iexplore (promeni mu naziv).
Pokreni program i klikni Run Scan

Kopiraj mi log koji ce se pojaviti na desktopu kao notepad.
 
Odgovor na temu

vladojuve

Član broj: 3884
Poruke: 14
77.29.235.*



Profil

icon Re: security tool mi se pojavio14.11.2010. u 17:58 - pre 166 meseci
uradio sam kako si rekao ali dok se skenirao pojavio mi se plavi ekran i nesto je pisalo i nista nije radilo//napravio sam restart i kad se podigao PC vise nije bilo security tool i sve je radilo kako treba //ali ja sam opet startirao tvoj program i ovo ti log file

OTL logfile created on: 14/11/2010 18:04:28 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\InoxComputers\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

1,022.00 Mb Total Physical Memory | 196.00 Mb Available Physical Memory | 19.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 67.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 57.28 Gb Total Space | 12.20 Gb Free Space | 21.30% Space Free | Partition Type: NTFS
Drive D: | 84.04 Gb Total Space | 29.01 Gb Free Space | 34.52% Space Free | Partition Type: NTFS

Computer Name: COMPANY-438EB57 | User Name: InoxComputers | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2010/11/14 17:52:20 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\InoxComputers\Desktop\iexplore.exe
PRC - [2010/10/19 15:33:20 | 000,134,808 | ---- | M] (Google Inc.) -- C:\Documents and Settings\InoxComputers\Local Settings\Application Data\Google\Update\1.2.183.39\GoogleCrashHandler.exe
PRC - [2010/03/29 23:46:14 | 000,303,952 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2010/03/29 23:46:12 | 000,437,584 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2010/03/29 23:46:02 | 001,086,856 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2009/12/07 22:38:44 | 000,470,785 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
PRC - [2009/09/26 08:10:57 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2009/08/05 11:41:07 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2009/06/22 18:57:12 | 000,618,944 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
PRC - [2009/06/20 16:08:31 | 000,181,312 | ---- | M] () -- C:\Program Files\Photodex\ProShowGold\scsiaccess.exe
PRC - [2009/05/13 15:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2009/03/02 12:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2008/07/24 16:02:06 | 000,490,952 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\daemon.exe
PRC - [2008/05/08 00:29:38 | 000,122,880 | ---- | M] (CrypKey (Canada) Ltd.) -- C:\WINDOWS\system32\Crypserv.exe
PRC - [2008/04/14 04:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/07/24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2007/04/06 10:06:58 | 000,057,344 | ---- | M] (ZSMCSNAP) -- C:\WINDOWS\ZSSnp211.exe
PRC - [2006/08/18 15:58:14 | 000,049,152 | ---- | M] () -- C:\WINDOWS\Domino.exe
PRC - [2006/02/24 10:58:14 | 000,868,352 | R--- | M] (Sony Ericsson Mobile Communications AB) -- C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
PRC - [2005/08/10 06:54:34 | 000,385,024 | R--- | M] (Teleca Software Solutions) -- C:\Program Files\Common Files\Teleca Shared\Generic.exe
PRC - [2005/06/08 15:45:04 | 000,278,528 | ---- | M] (Teleca Software Solutions AB) -- C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
PRC - [2004/03/21 05:28:34 | 000,032,768 | ---- | M] (Uwe A. Ruttkamp) -- C:\Documents and Settings\InoxComputers\My Documents\Downloads\dhcpsrv1.5\dhcpsrv.exe


[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - [2010/11/14 17:52:20 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\InoxComputers\Desktop\iexplore.exe
MOD - [2009/09/26 08:11:25 | 000,102,400 | ---- | M] (RealPlayer) -- c:\Program Files\Real\realplayer\browserrecord\chrome\hook\rpchromebrowserrecordhelper.dll
MOD - [2008/04/14 04:42:48 | 001,724,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll
MOD - [2006/05/03 21:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - File not found [Disabled | Stopped] -- C:\Documents and Settings\All Users\Application Data\SeekappSrch\seekapp159.exe -- (SeekappSrch Service)
SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Symantec\pcAnywhere\pca_run.exe -- (pcAnywhere Install Service)
SRV - File not found [Disabled | Stopped] -- C:\Windows\System32\hidserv.dll -- (HidServ)
SRV - [2010/03/29 23:46:14 | 000,303,952 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2009/08/05 11:41:07 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009/06/22 18:57:12 | 000,618,944 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2009/06/20 16:08:31 | 000,181,312 | ---- | M] () [Auto | Running] -- C:\Program Files\Photodex\ProShowGold\scsiaccess.exe -- (ScsiAccess)
SRV - [2009/05/13 15:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2008/05/08 00:29:38 | 000,122,880 | ---- | M] (CrypKey (Canada) Ltd.) [Auto | Running] -- C:\Windows\System32\Crypserv.exe -- (Crypkey License)
SRV - [2007/07/24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2004/03/21 05:28:34 | 000,032,768 | ---- | M] (Uwe A. Ruttkamp) [Auto | Running] -- C:\Documents and Settings\InoxComputers\My Documents\Downloads\dhcpsrv1.5\dhcpsrv.exe -- (DHCPServer)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VcommMgr.sys -- (VcommMgr)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\VComm.sys -- (VComm)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\rt2870.sys -- (rt2870)
DRV - File not found [Kernel | Auto | Stopped] -- C:\Program Files\LogMeIn\x86\RaInfo.sys -- (LMIInfo)
DRV - File not found [Kernel | On_Demand | Stopped] -- E:\FXDrv32.sys -- (FXDrv32)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dHook.sys -- (EnumHook2)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\btwdndis.sys -- (BTWDNDIS)
DRV - File not found [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - File not found [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vbtenum.sys -- (BTHidEnum)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\btport.sys -- (BTDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btaudio.sys -- (btaudio)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\btnetdrv.sys -- (BT)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\blueletaudio.sys -- (BlueletAudio)
DRV - [2010/04/19 22:35:29 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010/03/29 23:46:30 | 000,038,224 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2010/03/29 23:45:52 | 000,020,824 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2009/12/07 22:38:45 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009/11/12 17:03:38 | 000,902,592 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\tdrpm228.sys -- (tdrpman228) Acronis Try&Decide and Restore Points filter (build 228)
DRV - [2009/11/12 17:03:34 | 000,540,000 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\timntr.sys -- (timounter)
DRV - [2009/11/12 17:03:29 | 000,138,208 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\snapman.sys -- (snapman)
DRV - [2009/07/01 16:00:15 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009/05/11 09:12:24 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/03/30 09:33:07 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2009/02/13 11:35:05 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/01/19 14:40:02 | 000,044,704 | ---- | M] (Acronis) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2008/10/16 19:35:58 | 000,083,288 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\System32\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV - [2008/07/24 17:46:10 | 000,047,640 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV - [2008/07/10 01:49:14 | 000,242,712 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\RsFx0102.sys -- (RsFx0102)
DRV - [2008/03/17 17:45:52 | 000,019,584 | ---- | M] () [Kernel | System | Running] -- C:\Windows\system32\ckldrv.sys -- (NetworkX)
DRV - [2008/01/09 10:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri)
DRV - [2007/12/10 17:15:34 | 000,480,128 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vvftav211.sys -- (vvftav211)
DRV - [2007/12/05 10:00:08 | 001,537,024 | ---- | M] (ZSMC.Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZS211.sys -- (ZSMC30x)
DRV - [2007/04/23 14:54:50 | 000,100,488 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115mgmt.sys -- (s115mgmt) Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM)
DRV - [2007/04/23 14:54:50 | 000,098,568 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115obex.sys -- (s115obex)
DRV - [2007/04/23 14:54:48 | 000,108,680 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115mdm.sys -- (s115mdm)
DRV - [2007/04/23 14:54:48 | 000,015,112 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115mdfl.sys -- (s115mdfl)
DRV - [2007/04/23 14:54:46 | 000,083,208 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115bus.sys -- (s115bus) Sony Ericsson Device 115 driver (WDM)
DRV - [2007/02/18 22:37:52 | 000,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2006/11/17 17:29:00 | 003,994,688 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2006/06/14 04:04:12 | 004,299,264 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006/02/26 22:46:20 | 000,081,408 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2005/06/03 12:47:06 | 000,079,488 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750obex.sys -- (k750obex)
DRV - [2005/06/03 12:47:04 | 000,081,728 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mgmt.sys -- (k750mgmt)
DRV - [2005/06/03 12:47:00 | 000,089,872 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mdm.sys -- (k750mdm)
DRV - [2005/06/03 12:46:58 | 000,006,576 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mdfl.sys -- (k750mdfl)
DRV - [2005/06/03 12:46:52 | 000,055,216 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750bus.sys -- (k750bus) Sony Ericsson 750 driver (WDM)
DRV - [2001/08/17 14:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\..\URLSearchHook: {312db0cd-7d32-4b44-9930-14476886f468} - C:\Program Files\Hot_Tracks_Radio_Bar\tbHot_.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Winamp Search"
FF - prefs.js..browser.search.defaultthis.engineName: "BS_Player Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.ao...ype=tb50ffwinampie7&query="
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Winamp Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledItems: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}:2.5.6.0
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.6.4
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100211.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}:5.0.19
FF - prefs.js..extensions.enabledItems: [email protected]:1.0
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0
FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:3.6.2
FF - prefs.js..extensions.enabledItems: {4548ECB8-DA60-439A-A00D-5C893F8E1F9A}:1.0
FF - prefs.js..keyword.URL: "http://slirsredirect.search.ao...Type=tb50ffwinampab&query="

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/09/08 10:42:35 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/04/12 09:05:08 | 000,000,000 | ---D | M]

[2010/03/28 09:25:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\InoxComputers\Application Data\Mozilla\Extensions
[2010/09/24 20:03:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\InoxComputers\Application Data\Mozilla\Firefox\Profiles\r41wee95.default\extensions
[2010/01/11 19:38:39 | 000,000,000 | ---D | M] (ReloadEvery) -- C:\Documents and Settings\InoxComputers\Application Data\Mozilla\Firefox\Profiles\r41wee95.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2009/11/05 17:30:08 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\InoxComputers\Application Data\Mozilla\Firefox\Profiles\r41wee95.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010/03/28 09:27:17 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\InoxComputers\Application Data\Mozilla\Firefox\Profiles\r41wee95.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010/03/28 09:27:18 | 000,000,000 | ---D | M] (BS Player Toolbar) -- C:\Documents and Settings\InoxComputers\Application Data\Mozilla\Firefox\Profiles\r41wee95.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
[2010/01/26 00:57:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\InoxComputers\Application Data\Mozilla\Firefox\Profiles\r41wee95.default\extensions\[email protected]
[2009/06/24 17:48:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\InoxComputers\Application Data\Mozilla\Firefox\Profiles\r41wee95.default\extensions\[email protected]
[2009/09/08 13:45:12 | 000,002,255 | ---- | M] () -- C:\Documents and Settings\InoxComputers\Application Data\Mozilla\Firefox\Profiles\r41wee95.default\searchplugins\askcom.xml
[2009/02/26 13:22:28 | 000,000,880 | ---- | M] () -- C:\Documents and Settings\InoxComputers\Application Data\Mozilla\Firefox\Profiles\r41wee95.default\searchplugins\conduit.xml
[2010/03/12 12:19:05 | 000,001,196 | ---- | M] () -- C:\Documents and Settings\InoxComputers\Application Data\Mozilla\Firefox\Profiles\r41wee95.default\searchplugins\winamp-search.xml
[2010/09/24 20:03:29 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009/10/27 22:54:13 | 000,000,000 | ---D | M] (Seekapp) -- C:\Program Files\Mozilla Firefox\extensions\{4548ECB8-DA60-439A-A00D-5C893F8E1F9A}
[2009/06/25 13:13:25 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}
[2009/06/14 12:00:54 | 000,072,960 | ---- | M] (Foxit Software Company) -- C:\Program Files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll
[2009/12/21 06:47:02 | 000,063,488 | ---- | M] (Nullsoft) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll

O1 HOSTS File: ([2010/09/06 17:34:05 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\Program Files\Real\realplayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Hot Tracks Radio Bar Toolbar) - {312db0cd-7d32-4b44-9930-14476886f468} - C:\Program Files\Hot_Tracks_Radio_Bar\tbHot_.dll (Conduit Ltd.)
O2 - BHO: (VMN Toolbar) - {A057A204-BACC-4D26-8287-79A187E26987} - C:\Program Files\vmntoolbar\vmntoolbar.dll (Visicom Media Inc. )
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Hot Tracks Radio Bar Toolbar) - {312db0cd-7d32-4b44-9930-14476886f468} - C:\Program Files\Hot_Tracks_Radio_Bar\tbHot_.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (VMN Toolbar) - {A057A204-BACC-4D26-8287-79A187E26987} - C:\Program Files\vmntoolbar\vmntoolbar.dll (Visicom Media Inc. )
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKCU\..\Toolbar\WebBrowser: (Hot Tracks Radio Bar Toolbar) - {312DB0CD-7D32-4B44-9930-14476886F468} - C:\Program Files\Hot_Tracks_Radio_Bar\tbHot_.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Domino] C:\WINDOWS\Domino.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [RTHDCPL] File not found
O4 - HKLM..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe (Sony Ericsson Mobile Communications AB)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe (ZSMCSNAP)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/...-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Value error.)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.c...nload/scanner/wlscbase8942.cab (Windows Live Safety Center Base Module)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6...tall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.c...shplayer/current/ultrashim.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA} http://java.sun.com/update/1.5...tall-1_5_0_19-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6...tall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6...tall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - File not found
O20 - Winlogon\Notify\LMIinit: DllName - LMIinit.dll - C:\Windows\System32\LMIinit.dll (LogMeIn, Inc.)
O20 - Winlogon\Notify\windnv32: DllName - windnv32.dll - File not found
O21 - SSODL: 0aMCPClient - {F5DF91F9-15E9-416B-A7C3-7519B11ECBFC} - CLSID or File not found.
O24 - Desktop WallPaper: C:\Documents and Settings\InoxComputers\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\InoxComputers\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/05/01 00:29:36 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{0d3c0085-170e-11dd-8829-b1f918c7eb49}\Shell - "" = AutoRun
O33 - MountPoints2\{0d3c0085-170e-11dd-8829-b1f918c7eb49}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{0d3c0085-170e-11dd-8829-b1f918c7eb49}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2010/11/14 17:52:11 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\InoxComputers\Desktop\iexplore.exe
[2010/11/10 00:05:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\InoxComputers\My Documents\ElectronicParadise
[2010/11/10 00:04:17 | 000,060,273 | ---- | C] (Open Source Software community project) -- C:\Windows\System32\pthreadGC2.dll
[2010/11/10 00:02:19 | 000,000,000 | ---D | C] -- C:\Program Files\Novый Disk
[2010/11/05 19:08:46 | 025,871,524 | ---- | C] ($SMOKY'Z$ portable game) -- C:\Documents and Settings\InoxComputers\Desktop\Cake-Mania.exe
[2010/03/25 15:45:02 | 000,965,120 | ---- | C] (e-merge GmbH) -- C:\Program Files\winace.exe
[2010/03/25 15:45:02 | 000,044,544 | ---- | C] (ACE Compression Software) -- C:\Program Files\UNACE32.EXE
[2010/03/25 15:44:57 | 000,231,424 | ---- | C] (ACE Compression Software) -- C:\Program Files\ace.dll
[2010/02/27 18:06:47 | 000,018,944 | ---- | C] ( ) -- C:\Windows\System32\IMPLODE.DLL
[2008/12/03 18:47:39 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\InoxComputers\Application Data\pcouffin.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2010/11/14 18:38:21 | 000,001,008 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1326574676-725345543-1003UA.job
[2010/11/14 18:19:16 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/11/14 18:01:06 | 000,000,868 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2010/11/14 18:00:52 | 000,089,134 | ---- | M] () -- C:\Windows\System32\nvapps.xml
[2010/11/14 18:00:49 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/11/14 18:00:46 | 000,002,048 | ---- | M] () -- C:\Windows\bootstat.dat
[2010/11/14 17:52:20 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\InoxComputers\Desktop\iexplore.exe
[2010/11/14 17:04:29 | 053,123,856 | ---- | M] () -- C:\Documents and Settings\InoxComputers\My Documents\xxx.exe.exe
[2010/11/14 16:38:01 | 000,000,956 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1326574676-725345543-1003Core.job
[2010/11/13 18:00:21 | 000,000,458 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Registration.job
[2010/11/13 11:58:17 | 000,002,262 | ---- | M] () -- C:\Windows\System32\wpa.dbl
[2010/11/12 10:14:01 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2010/11/10 00:04:23 | 000,001,934 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Dюйmovočka v Strane эlьfov. Dom modeleй.lnk
[2010/11/06 10:38:50 | 000,002,344 | ---- | M] () -- C:\Documents and Settings\InoxComputers\Desktop\Google Chrome.lnk
[2010/11/06 10:38:50 | 000,002,322 | ---- | M] () -- C:\Documents and Settings\InoxComputers\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/11/05 18:58:50 | 000,031,744 | ---- | M] () -- C:\Documents and Settings\InoxComputers\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/05 18:39:45 | 000,000,114 | ---- | M] () -- C:\Windows\System32\Painter.ini
[2010/11/04 20:26:16 | 000,000,457 | ---- | M] () -- C:\Windows\ka.ini
[2010/11/03 13:09:13 | 000,002,359 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\PaintAlbum.lnk
[2010/11/01 14:34:11 | 000,000,202 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2010/10/31 12:08:05 | 000,518,402 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/10/31 12:08:05 | 000,099,902 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/10/30 20:42:46 | 000,002,495 | ---- | M] () -- C:\Documents and Settings\InoxComputers\Desktop\Microsoft Office Excel 2003.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010/11/14 17:04:19 | 053,123,856 | ---- | C] () -- C:\Documents and Settings\InoxComputers\My Documents\xxx.exe.exe
[2010/11/10 00:04:23 | 000,001,934 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Dюйmovočka v Strane эlьfov. Dom modeleй.lnk
[2010/08/01 13:02:38 | 000,031,744 | ---- | C] () -- C:\Documents and Settings\InoxComputers\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/04/21 23:40:40 | 000,000,247 | ---- | C] () -- C:\Windows\asqlpr.ini
[2010/04/20 09:52:23 | 000,000,115 | ---- | C] () -- C:\Windows\Crypkey.ini
[2010/04/20 09:52:19 | 000,019,584 | ---- | C] () -- C:\Windows\System32\Ckldrv.sys
[2010/04/20 09:52:19 | 000,018,432 | ---- | C] () -- C:\Windows\Setup_ck.dll
[2010/04/06 15:40:20 | 000,000,024 | ---- | C] () -- C:\Program Files\ib_affinity
[2010/04/06 15:39:42 | 000,000,000 | ---- | C] () -- C:\Program Files\ib_iffinity
[2010/03/25 15:45:02 | 000,057,222 | ---- | C] () -- C:\Program Files\VistaXP-VISTAXPS2.skn
[2010/03/25 15:45:02 | 000,031,145 | ---- | C] () -- C:\Program Files\Royale Glass-INDIGO.skn
[2010/03/25 15:45:02 | 000,030,910 | ---- | C] () -- C:\Program Files\Royale Glass-GRAPHITE.skn
[2010/03/25 15:45:02 | 000,029,704 | ---- | C] () -- C:\Program Files\Royale1-BLUE.skn
[2010/03/25 15:45:02 | 000,028,846 | ---- | C] () -- C:\Program Files\wmpx-XMP2.skn
[2010/03/25 15:45:02 | 000,028,390 | ---- | C] () -- C:\Program Files\Royale1-HOMESTEAD.skn
[2010/03/25 15:45:02 | 000,000,019 | R--- | C] () -- C:\Program Files\SETUP.DAT
[2010/03/25 15:45:02 | 000,000,005 | ---- | C] () -- C:\Program Files\ZONKASA.TXT
[2010/03/25 15:45:02 | 000,000,005 | ---- | C] () -- C:\Program Files\alias_jazik.txt
[2010/03/25 15:45:02 | 000,000,002 | ---- | C] () -- C:\Program Files\SYSTEM.TXT
[2010/03/25 15:45:01 | 003,821,144 | ---- | C] () -- C:\Program Files\pos5.bmp
[2010/03/25 15:45:01 | 003,821,144 | ---- | C] () -- C:\Program Files\pos4.bmp
[2010/03/25 15:45:01 | 003,821,144 | ---- | C] () -- C:\Program Files\pos3.bmp
[2010/03/25 15:45:01 | 003,821,144 | ---- | C] () -- C:\Program Files\pos1.bmp
[2010/03/25 15:45:01 | 003,793,328 | ---- | C] () -- C:\Program Files\pos2.bmp
[2010/03/25 15:45:01 | 001,335,296 | ---- | C] () -- C:\Program Files\PRENOS.GDB
[2010/03/25 15:45:00 | 000,888,409 | ---- | C] () -- C:\Program Files\mdb.jpg
[2010/03/25 15:45:00 | 000,412,160 | ---- | C] () -- C:\Program Files\MATKART.XLS
[2010/03/25 15:45:00 | 000,298,496 | ---- | C] () -- C:\Program Files\KritKol.xls
[2010/03/25 15:45:00 | 000,082,740 | ---- | C] () -- C:\Program Files\mxskin36.skn
[2010/03/25 15:45:00 | 000,067,463 | ---- | C] () -- C:\Program Files\Longhorn Slate-Plex-SLATE.skn
[2010/03/25 15:45:00 | 000,065,606 | ---- | C] () -- C:\Program Files\mxskin44.skn
[2010/03/25 15:45:00 | 000,060,709 | ---- | C] () -- C:\Program Files\mxskin56.skn
[2010/03/25 15:45:00 | 000,057,613 | ---- | C] () -- C:\Program Files\macos.skn
[2010/03/25 15:45:00 | 000,053,820 | ---- | C] () -- C:\Program Files\mxskin24.skn
[2010/03/25 15:45:00 | 000,048,351 | ---- | C] () -- C:\Program Files\mxskin64.skn
[2010/03/25 15:45:00 | 000,045,743 | ---- | C] () -- C:\Program Files\MSN.skn
[2010/03/25 15:45:00 | 000,043,843 | ---- | C] () -- C:\Program Files\luna-HOMESTEAD.skn
[2010/03/25 15:45:00 | 000,041,261 | ---- | C] () -- C:\Program Files\mxskin54.skn
[2010/03/25 15:45:00 | 000,040,826 | ---- | C] () -- C:\Program Files\mxskin58.skn
[2010/03/25 15:45:00 | 000,039,655 | ---- | C] () -- C:\Program Files\mxskin27.skn
[2010/03/25 15:45:00 | 000,037,370 | ---- | C] () -- C:\Program Files\Longhorn Style-BLUE.skn
[2010/03/25 15:45:00 | 000,035,828 | ---- | C] () -- C:\Program Files\Plex Style-PLEXM6SVR.skn
[2010/03/25 15:45:00 | 000,031,936 | ---- | C] () -- C:\Program Files\mxskin14.skn
[2010/03/25 15:45:00 | 000,029,207 | ---- | C] () -- C:\Program Files\luna-METALLIC.skn
[2010/03/25 15:45:00 | 000,000,032 | ---- | C] () -- C:\Program Files\ITEMS.TXT
[2010/03/25 15:45:00 | 000,000,003 | ---- | C] () -- C:\Program Files\TAIL.EXM
[2010/03/25 15:45:00 | 000,000,000 | ---- | C] () -- C:\Program Files\logdok2.lgc
[2010/03/25 15:45:00 | 000,000,000 | ---- | C] () -- C:\Program Files\logdok.lgc
[2010/03/25 15:44:59 | 000,049,152 | ---- | C] () -- C:\Program Files\KILL.EXE
[2010/03/25 15:44:59 | 000,031,232 | ---- | C] () -- C:\Program Files\InfosKirDneven.xls
[2010/03/25 15:44:59 | 000,001,382 | ---- | C] () -- C:\Program Files\HELIX.ini
[2010/03/25 15:44:59 | 000,000,065 | ---- | C] () -- C:\Program Files\dcViking32.ini
[2010/03/25 15:44:59 | 000,000,062 | ---- | C] () -- C:\Program Files\FISKAL.INI
[2010/03/25 15:44:59 | 000,000,011 | ---- | C] () -- C:\Program Files\font02.TXT
[2010/03/25 15:44:59 | 000,000,011 | ---- | C] () -- C:\Program Files\font01.txt
[2010/03/25 15:44:59 | 000,000,007 | ---- | C] () -- C:\Program Files\HEADER.EXM
[2010/03/25 15:44:58 | 003,821,144 | ---- | C] () -- C:\Program Files\bu2.bmp
[2010/03/25 15:44:58 | 003,821,144 | ---- | C] () -- C:\Program Files\bu1.bmp
[2010/03/25 15:44:58 | 000,969,012 | ---- | C] () -- C:\Program Files\DB1.bmp
[2010/03/25 15:44:58 | 000,045,605 | ---- | C] () -- C:\Program Files\corona-CORONA12.skn
[2010/03/25 15:44:58 | 000,033,019 | ---- | C] () -- C:\Program Files\ClearLooks-BLUE.skn
[2010/03/25 15:44:58 | 000,013,824 | ---- | C] () -- C:\Program Files\ispl.xls
[2010/03/25 15:44:58 | 000,000,043 | ---- | C] () -- C:\Program Files\DAVID_K.BAT
[2010/03/25 15:44:57 | 003,810,520 | ---- | C] () -- C:\Program Files\bs2.bmp
[2010/03/25 15:44:57 | 003,787,320 | ---- | C] () -- C:\Program Files\bs4.bmp
[2010/03/25 15:44:57 | 003,778,040 | ---- | C] () -- C:\Program Files\bs6.bmp
[2010/03/25 15:44:57 | 003,745,560 | ---- | C] () -- C:\Program Files\bs7.bmp
[2010/03/25 15:44:57 | 003,740,920 | ---- | C] () -- C:\Program Files\bs3.bmp
[2010/03/25 15:44:57 | 003,703,800 | ---- | C] () -- C:\Program Files\bs5.bmp
[2010/03/25 15:44:57 | 003,689,880 | ---- | C] () -- C:\Program Files\bs1.bmp
[2010/03/25 15:44:57 | 000,038,475 | ---- | C] () -- C:\Program Files\Crystal Clear-CRCL1S.skn
[2010/03/25 15:44:57 | 000,000,034 | ---- | C] () -- C:\Program Files\BODY1.EXM
[2010/03/25 15:44:57 | 000,000,014 | ---- | C] () -- C:\Program Files\alias_prenos.txt
[2010/03/25 15:44:57 | 000,000,007 | ---- | C] () -- C:\Program Files\ALIAS1.TXT
[2010/03/02 14:08:26 | 000,000,125 | ---- | C] () -- C:\Windows\compedia.ini
[2010/02/27 18:06:52 | 000,069,632 | ---- | C] () -- C:\Windows\System32\U2FXLS.DLL
[2010/02/27 18:06:52 | 000,069,632 | ---- | C] () -- C:\Windows\System32\U2FWORDW.DLL
[2010/02/27 18:06:52 | 000,053,248 | ---- | C] () -- C:\Windows\System32\U2FWKS.DLL
[2010/02/27 18:06:52 | 000,053,248 | ---- | C] () -- C:\Windows\System32\U2FTEXT.DLL
[2010/02/27 18:06:52 | 000,053,248 | ---- | C] () -- C:\Windows\System32\U2FSEPV.DLL
[2010/02/27 18:06:51 | 000,153,761 | ---- | C] () -- C:\Windows\System32\U2FRTF.DLL
[2010/02/27 18:06:51 | 000,124,256 | ---- | C] () -- C:\Windows\System32\U2DMAPI.DLL
[2010/02/27 18:06:51 | 000,109,568 | ---- | C] () -- C:\Windows\System32\U2FHTML.DLL
[2010/02/27 18:06:51 | 000,097,489 | ---- | C] () -- C:\Windows\System32\U2FCR.DLL
[2010/02/27 18:06:51 | 000,049,152 | ---- | C] () -- C:\Windows\System32\U2FREC.DLL
[2010/02/27 18:06:51 | 000,049,152 | ---- | C] () -- C:\Windows\System32\U2FDIF.DLL
[2010/02/27 18:06:51 | 000,045,056 | ---- | C] () -- C:\Windows\System32\U2DDISK.DLL
[2010/02/27 18:06:50 | 000,036,352 | ---- | C] () -- C:\Windows\System32\P2BBND.DLL
[2010/02/27 18:06:46 | 000,039,936 | ---- | C] () -- C:\Windows\System32\CRXLAT32.DLL
[2010/02/27 18:06:45 | 000,748,160 | ---- | C] () -- C:\Windows\System32\CO2C40EN.DLL
[2010/02/24 18:11:30 | 000,000,066 | ---- | C] () -- C:\Windows\prijen44.INI
[2010/02/18 00:38:19 | 000,000,068 | ---- | C] () -- C:\Windows\kam44.INI
[2010/02/12 15:36:19 | 000,005,490 | ---- | C] () -- C:\Windows\EasyMAcc.ini
[2010/02/11 14:49:06 | 000,001,117 | ---- | C] () -- C:\Windows\kasa534.INI
[2010/02/11 14:42:22 | 000,000,372 | ---- | C] () -- C:\Windows\wpr44.INI
[2010/02/11 14:41:40 | 000,001,449 | ---- | C] () -- C:\Windows\sac44.INI
[2010/02/11 14:40:41 | 000,000,142 | ---- | C] () -- C:\Windows\manag44.INI
[2010/02/11 14:40:22 | 000,001,945 | ---- | C] () -- C:\Windows\fak44.INI
[2010/02/11 14:34:13 | 000,001,036 | ---- | C] () -- C:\Windows\wt44.INI
[2010/02/11 14:30:32 | 000,000,461 | ---- | C] () -- C:\Windows\korp44.INI
[2010/02/11 14:26:54 | 000,001,159 | ---- | C] () -- C:\Windows\uvz44.INI
[2010/02/11 14:26:36 | 000,002,687 | ---- | C] () -- C:\Windows\fink44.INI
[2010/02/04 21:43:11 | 000,000,027 | ---- | C] () -- C:\Windows\4DXY.ini
[2010/01/29 00:10:10 | 000,000,202 | ---- | C] () -- C:\Windows\4D_RTF.INI
[2010/01/26 01:22:55 | 000,000,324 | ---- | C] () -- C:\Documents and Settings\LocalService\Application Data\PrimoPDFSet.xml
[2010/01/26 01:22:32 | 000,006,847 | ---- | C] () -- C:\Documents and Settings\InoxComputers\Application Data\PrimoPDFSet.xml
[2010/01/26 01:21:06 | 000,176,235 | ---- | C] () -- C:\Windows\System32\Primomonnt.dll
[2009/11/30 19:24:05 | 000,004,096 | -H-- | C] () -- C:\Documents and Settings\InoxComputers\Local Settings\Application Data\keyfile3.drm
[2009/11/30 19:20:37 | 000,000,103 | ---- | C] () -- C:\Windows\pro.INI
[2009/11/21 01:25:59 | 000,437,272 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2009/11/20 15:23:36 | 000,000,027 | ---- | C] () -- C:\Windows\SDAddressBox1633cb8581916.ini
[2009/11/20 15:22:37 | 000,007,852 | ---- | C] () -- C:\Windows\System32\mcdmsg7.dll
[2009/10/27 22:59:21 | 000,000,065 | ---- | C] () -- C:\Windows\wininit.ini
[2009/10/06 13:37:11 | 000,001,371 | ---- | C] () -- C:\Windows\disney.ini
[2009/10/05 17:08:39 | 000,000,114 | ---- | C] () -- C:\Windows\System32\Painter.ini
[2009/10/05 14:09:08 | 000,002,516 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys
[2009/10/05 14:09:08 | 000,000,088 | R--- | C] () -- C:\Documents and Settings\All Users\Application Data\E010E518CD.sys
[2009/08/21 16:09:11 | 000,000,000 | ---- | C] () -- C:\Windows\STMMain.INI
[2009/07/13 13:51:25 | 000,004,077 | ---- | C] () -- C:\Windows\aopr.ini
[2009/07/06 14:13:46 | 000,138,464 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2009/07/06 14:13:45 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\InoxComputers\Application Data\PnkBstrK.sys
[2009/07/02 23:05:17 | 000,000,000 | ---- | C] () -- C:\Windows\IROTVIEW.INI
[2009/07/01 23:25:27 | 000,000,032 | ---- | C] () -- C:\Windows\email5.INI
[2009/07/01 23:24:29 | 000,000,290 | ---- | C] () -- C:\Windows\kasa532.INI
[2009/07/01 16:02:02 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
[2009/07/01 15:54:01 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2009/07/01 00:00:27 | 000,000,000 | ---- | C] () -- C:\Windows\SPYXX.INI
[2009/06/18 17:48:53 | 000,002,916 | ---- | C] () -- C:\Windows\ilan_txt.ini
[2009/06/18 17:48:52 | 000,000,069 | ---- | C] () -- C:\Windows\iltwain.ini
[2009/06/10 13:52:46 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2009/06/04 12:30:28 | 000,012,288 | ---- | C] () -- C:\Windows\System32\Hlinkprx.dll
[2009/04/27 05:13:36 | 000,000,314 | ---- | C] () -- C:\Windows\primopdf.ini
[2009/03/09 23:40:47 | 000,000,027 | ---- | C] () -- C:\Program Files\SKLanguage.ini
[2009/03/09 23:39:48 | 000,000,903 | ---- | C] () -- C:\Program Files\index.htm
[2009/03/02 14:15:54 | 000,129,024 | ---- | C] () -- C:\Windows\System32\AVERM.dll
[2009/02/23 14:04:28 | 000,001,505 | ---- | C] () -- C:\Windows\Bringer.INI
[2009/02/23 13:40:31 | 000,000,796 | ---- | C] () -- C:\Windows\gnuchess.ini
[2009/01/23 13:57:33 | 000,000,151 | ---- | C] () -- C:\Windows\PhotoSnapViewer.INI
[2009/01/22 18:38:06 | 000,034,308 | ---- | C] () -- C:\Windows\System32\BASSMOD.dll
[2009/01/16 15:33:09 | 000,168,448 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2009/01/16 15:33:07 | 000,795,648 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2009/01/16 15:33:06 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2009/01/16 15:33:06 | 000,130,048 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2009/01/16 15:33:04 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2009/01/10 15:18:18 | 000,000,025 | ---- | C] () -- C:\Windows\CDEEPL6200L.ini
[2008/12/22 15:16:45 | 000,000,078 | ---- | C] () -- C:\Documents and Settings\InoxComputers\Application Data\Printer.ini
[2008/12/03 18:47:59 | 000,253,456 | ---- | C] () -- C:\Documents and Settings\InoxComputers\Application Data\vso_ts_preview.xml
[2008/12/03 18:47:45 | 000,000,034 | ---- | C] () -- C:\Documents and Settings\InoxComputers\Application Data\pcouffin.log
[2008/12/03 18:47:40 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\InoxComputers\Application Data\inst.exe
[2008/12/03 18:47:40 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\InoxComputers\Application Data\pcouffin.cat
[2008/12/03 18:47:39 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\InoxComputers\Application Data\pcouffin.inf
[2008/12/01 16:32:50 | 000,000,000 | ---- | C] () -- C:\Windows\mngui.INI
[2008/11/18 13:06:45 | 000,000,134 | ---- | C] () -- C:\Windows\cdplayer.ini
[2008/10/30 22:30:03 | 000,000,067 | ---- | C] () -- C:\Windows\Easy Video to DVD.INI
[2008/10/28 18:07:30 | 000,000,277 | ---- | C] () -- C:\Windows\madagascar.ini
[2008/10/28 16:40:48 | 000,173,552 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2008/09/25 21:02:30 | 000,000,319 | ---- | C] () -- C:\Windows\pdf2word.INI
[2008/09/17 14:46:50 | 000,000,079 | ---- | C] () -- C:\Windows\skypetrance.ini
[2008/09/14 20:06:47 | 000,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2008/05/02 11:59:21 | 000,000,202 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2008/05/01 15:51:34 | 000,000,457 | ---- | C] () -- C:\Windows\ka.ini
[2008/05/01 00:50:33 | 000,135,168 | ---- | C] () -- C:\Windows\System32\RtlCPAPI.dll
[2008/05/01 00:39:27 | 000,007,766 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2008/05/01 00:39:13 | 000,010,288 | ---- | C] () -- C:\Windows\System32\drivers\ASUSHWIO.SYS
[2008/04/30 20:20:52 | 000,004,346 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2008/04/30 20:06:02 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\ezsid.dat
[2008/04/30 19:10:11 | 000,000,636 | ---- | C] () -- C:\Windows\ODBC.INI
[2008/04/30 18:59:30 | 000,000,014 | ---- | C] () -- C:\Windows\System32\SystemInfo32.sys
[2007/04/20 04:38:11 | 000,000,018 | ---- | C] () -- C:\Windows\nshelikg.ini
[2006/10/22 05:22:00 | 001,662,976 | ---- | C] () -- C:\Windows\System32\nvwdmcpl.dll
[2006/10/22 05:22:00 | 001,470,464 | ---- | C] () -- C:\Windows\System32\nview.dll
[2006/10/22 05:22:00 | 001,019,904 | ---- | C] () -- C:\Windows\System32\nvwimg.dll
[2006/10/22 05:22:00 | 000,581,632 | ---- | C] () -- C:\Windows\System32\nvhwvid.dll
[2006/10/22 05:22:00 | 000,466,944 | ---- | C] () -- C:\Windows\System32\nvshell.dll
[2006/10/22 05:22:00 | 000,286,720 | ---- | C] () -- C:\Windows\System32\nvnt4cpl.dll
[2006/10/22 05:22:00 | 000,212,992 | ---- | C] () -- C:\Windows\System32\nvapi.dll
[2003/01/07 14:05:08 | 000,002,695 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
[2002/07/05 15:12:06 | 000,027,136 | ---- | C] () -- C:\Windows\System32\authdvd.dll
[2002/05/10 19:14:36 | 000,091,136 | ---- | C] () -- C:\Windows\System32\mp4fil32.dll

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6FDE1666
@Alternate Data Stream - 229 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8FF81EB0
@Alternate Data Stream - 144 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CBF70FA7

< End of report >
 
Odgovor na temu

kristi1

Član broj: 151211
Poruke: 2012
*.dynamic.isp.telekom.rs.

Sajt: www.mycity.rs/Ambulanta


+88 Profil

icon Re: security tool mi se pojavio14.11.2010. u 18:39 - pre 166 meseci
Hm, zanimljivo.

U beli okvir prozora gde piše Custom Scans/Fixes iskopiraj sledece

Code:


:OTL
O20 - Winlogon\Notify\windnv32: DllName - windnv32.dll - File not found
O33 - MountPoints2\{0d3c0085-170e-11dd-8829-b1f918c7eb49}\Shell - "" = AutoRun
O33 - MountPoints2\{0d3c0085-170e-11dd-8829-b1f918c7eb49}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{0d3c0085-170e-11dd-8829-b1f918c7eb49}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found
O24 - Desktop WallPaper: C:\Documents and Settings\InoxComputers\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\InoxComputers\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[Reboot] 


Klikni Run Fix i postavi mi log koji dobijes.
 
Odgovor na temu

morihei ueshiba

Član broj: 174125
Poruke: 294
*.cust.dsl.vodafone.it.



+439 Profil

icon Re: security tool mi se pojavio14.11.2010. u 18:52 - pre 166 meseci
remove fake antivirus...

Ima o ovome u vise tema. Pogledaj ovu:
http://www.elitesecurity.org/t411795-0#2716680

Juce sam ocistio kolegi racunar sa ovim.Brzo,lako,jednostavno.Probaj ;)
Mio papa' dice che ogni uomo ha tre misure:
altezza, larghezza e lunghezza
 
Odgovor na temu

[es] :: Zaštita :: security tool mi se pojavio

[ Pregleda: 2994 | Odgovora: 4 ] > FB > Twit

Postavi temu Odgovori

Navigacija
Lista poslednjih: 16, 32, 64, 128 poruka.