A sajat gepben, jobb klik a pendrire es Format.

A helyzet, hogy minden ugyanúgy ott van a pendrive-on. Megint kezd nyökögni a gép. Formázni a pendrive-ot le lehet valahogy? Az lenne a legegyszerűbb, nem?

Na, mi a helyzet??

Itt a log:


All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
Folder move failed. E:\FOUND.001 scheduled to be moved on reboot.
File move failed. E:\BOOTEX.LOG scheduled to be moved on reboot.
File move failed. E:\CV1.doc scheduled to be moved on reboot.
Folder move failed. E:\Képek\Farsang 2011 scheduled to be moved on reboot.
Folder move failed. E:\Képek\Gyereknap ovi 2011 scheduled to be moved on reboot.
Folder move failed. E:\Képek\Karácsony scheduled to be moved on reboot.
Folder move failed. E:\Képek\Originals1 scheduled to be moved on reboot.
Folder move failed. E:\Képek\Originals2 scheduled to be moved on reboot.
Folder move failed. E:\Képek\ovi szüreti mulatság 2010 scheduled to be moved on reboot.
Folder move failed. E:\Képek\Szüreti mulatság 2011 scheduled to be moved on reboot.
Folder move failed. E:\Képek\Évzáró ovi 2011 scheduled to be moved on reboot.
Folder move failed. E:\Képek scheduled to be moved on reboot.
Folder move failed. E:\Erdei iskola scheduled to be moved on reboot.
========== COMMANDS ==========
Restore point Set: OTM Restore Point (0)

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 1068152 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 1002168 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Rendszergazda
->Temp folder emptied: 1110442 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->FireFox cache emptied: 6063295 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1133940 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 19216976 bytes

Total Files Cleaned = 28,00 mb


OTM by OldTimer - Version 3.1.19.0 log created on 12162011_200239

Files moved on Reboot...
Folder move failed. E:\FOUND.001 scheduled to be moved on reboot.
File move failed. E:\BOOTEX.LOG scheduled to be moved on reboot.
File move failed. E:\CV1.doc scheduled to be moved on reboot.
Folder move failed. E:\Képek\Farsang 2011 scheduled to be moved on reboot.
Folder move failed. E:\Képek\Gyereknap ovi 2011 scheduled to be moved on reboot.
Folder move failed. E:\Képek\Karácsony scheduled to be moved on reboot.
Folder move failed. E:\Képek\Originals1 scheduled to be moved on reboot.
Folder move failed. E:\Képek\Originals2 scheduled to be moved on reboot.
Folder move failed. E:\Képek\ovi szüreti mulatság 2010 scheduled to be moved on reboot.
Folder move failed. E:\Képek\Szüreti mulatság 2011 scheduled to be moved on reboot.
Folder move failed. E:\Képek\Évzáró ovi 2011 scheduled to be moved on reboot.
File E:\Képek not found!
File E:\Erdei iskola not found!
C:\Documents and Settings\Rendszergazda\Local Settings\Temp\~DF1346.tmp moved successfully.
C:\Documents and Settings\Rendszergazda\Local Settings\Application Data\Mozilla\Firefox\Profiles\y5pqgezw.default\startupCache\startupCache.4.little moved successfully.
C:\Documents and Settings\Rendszergazda\Local Settings\Application Data\Mozilla\Firefox\Profiles\y5pqgezw.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\Rendszergazda\Local Settings\Application Data\Mozilla\Firefox\Profiles\y5pqgezw.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\Rendszergazda\Local Settings\Application Data\Mozilla\Firefox\Profiles\y5pqgezw.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\Rendszergazda\Local Settings\Application Data\Mozilla\Firefox\Profiles\y5pqgezw.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\Rendszergazda\Local Settings\Application Data\Mozilla\Firefox\Profiles\y5pqgezw.default\urlclassifier3.sqlite moved successfully.
C:\WINDOWS\temp\_av_proI.tm~a01980\setup.lok moved successfully.
C:\WINDOWS\temp\_av_proI.tm~a01980\stamp.tmp.dld moved successfully.
File C:\WINDOWS\temp\_avast4_\Webshlock.txt not found!
C:\WINDOWS\temp\Perflib_Perfdata_620.dat moved successfully.
C:\WINDOWS\temp\ZLT0529a.TMP moved successfully.

Registry entries deleted on Reboot...

Tolds le az asztalra.
http://oldtimer.geekstogo.com/OTM.exe
Futtasd, az Bal-ablakjaba masold be a textet, es klikelj a MOVEIT gombra.
A logot a restart utan tedd ide.

Rendben.

BOOTEX
CV1
Képek
FOUND.001
Erdei iskola

Ezek amik nem kellenek. BOOTEX és CV1 nevű fájlt kitörlöm, eltűnik, de újra visszajön. A többit pedig nem lehet manuálisan törölni.

Ird ide mit akarsz torolni ezekbol, es kitoroljuk.

SystemLook 30.07.11 by jpshortstuff
Log created at 17:08 on 16/12/2011 by Rendszergazda
Administrator - Elevation successful

========== dir ==========

E: - Parameters: "(none)"

---Files---
javitas.bat ------- 154 bytes [08:47 16/12/2011] [19:14 15/12/2011]
BOOTEX.LOG ------- 2792 bytes [04:52 13/11/2011] [07:01 11/12/2011]
CV1.doc ------- 36352 bytes [19:13 12/09/2011] [19:26 18/09/2011]
Igazolás.bmp ------- 2359350 bytes [07:52 03/10/2011] [07:52 03/10/2011]
Amina zumba.bmp ------- 718674 bytes [18:30 03/10/2011] [18:36 02/10/2011]
cib.txt ------- 63 bytes [12:21 02/02/2011] [19:35 08/11/2011]
Másolat - CV1.doc ------- 21504 bytes [18:11 12/09/2011] [18:12 12/09/2011]
CV1.1.doc ------- 36352 bytes [05:34 17/10/2010] [08:02 10/11/2011]

---Folders---
Új mappa d------ [06:28 07/10/2011]
Erdei iskola d------ [13:29 18/06/2011]
Autorun.inf drahs-- [09:26 16/12/2011]
keretek d------ [17:51 09/12/2011]
bújók d------ [18:34 27/10/2011]
Játékpénz d------ [05:16 12/11/2011]
FOUND.001 d------ [12:17 26/07/2011]
Képek d------ [16:57 09/12/2011]
Sütemények d------ [17:44 09/12/2011]
Stronghold.Europe d------ [08:13 10/12/2011]
Filmek d------ [19:42 09/11/2010]
Feladatlapok d------ [08:40 30/01/2011]
Színezők d------ [17:35 14/03/2011]

-= EOF =-

A pendriv legyen a gephez csatolva.
Tolds le a systemlook programot az asztalra.
32-bit),,,
http://www.virus-stell.com/2010/04/systemlook.html

Futtasd, az ablakjaba masold be a textet, es klik, LOOOK, a logjat tedd ide, az asztalon lesz.

Azt leszámítva, hogy a képekből sok eltűnt, úgy érzem minden ok. Ezek a fotók, amik eltűntek a mappákból, gondolom annyi, ugye?
Van két mappa, amiről nem tudok semmit, Recycled és FOUND.001 nevű. Az elsőt töröltem, a másodikat nem lehet törölni, mert sérült vagy nem olvasható.. Ezzel mit tudok kezdeni, hogy ne legyen itt?

, most hogy nez ki??

Itt a log:

############################## | UsbFix V 7.073 | [Deletion]

User: Rendszergazda (Administrator) # NEMETH
Updated 12/12/2011 by El Desaparecido
Started at 10:17:41 | 16/12/2011

Website: http://eldesaparecido.com
Suspicious file ? : http://eldesaparecido.com/support.php
Contact: contact@eldesaparecido.com

PC: Dell Computer Corporation (OptiPlex GX110 ) (X86-based PC) # Desktop Computer
CPU: Intel Pentium III processzor (664)
RAM -> [ Total : 126 | Free : 28 ]
BIOS: Phoenix ROM BIOS PLUS Version 1.10 A09
BOOT: Normal boot

OS: Microsoft Windows XP Professional (5.1.2600 32-Bit) # Szervizcsomag 2
WB: Windows Internet Explorer 6.0.2900.2180

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Fixed drive # 10 Gb (7 Mb free - 72%) [] # NTFS
D:\ -> CD-ROM
E:\ -> Removable drive # 8 Gb (1 Mb free - 19%) [] # FAT32

################## | Active Processes |

C:\WINDOWS\System32\smss.exe (440)
C:\WINDOWS\system32\winlogon.exe (532)
C:\WINDOWS\system32\services.exe (576)
C:\WINDOWS\system32\lsass.exe (588)
C:\WINDOWS\system32\svchost.exe (740)
C:\WINDOWS\System32\svchost.exe (852)
C:\WINDOWS\Explorer.EXE (1256)
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (1552)
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe (1568)
C:\Program Files\Alwil Software\Avast4\ashServ.exe (1632)
C:\WINDOWS\system32\spoolsv.exe (180)
C:\WINDOWS\system32\wscntfy.exe (1788)
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (1844)
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe (2160)
C:\WINDOWS\system32\ctfmon.exe (2248)
C:\WINDOWS\system32\taskmgr.exe (1688)
C:\Program Files\Alwil Software\Avast4\setup\avast.setup (2536)
C:\WINDOWS\system32\cmd.exe (2756)
C:\WINDOWS\system32\attrib.exe (2508)
C:\UsbFix\UsbFix.exe (2808)

################## | Stopped processes |

Stopped! C:\WINDOWS\Explorer.EXE (1256)
Stopped! C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (1552)
Stopped! C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe (1568)
Stopped! C:\Program Files\Alwil Software\Avast4\ashServ.exe (1632)
Stopped! C:\WINDOWS\system32\spoolsv.exe (180)
Stopped! C:\WINDOWS\system32\wscntfy.exe (1788)
Stopped! C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (1844)
Stopped! C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe (2160)
Stopped! C:\WINDOWS\system32\ctfmon.exe (2248)
Stopped! C:\WINDOWS\system32\taskmgr.exe (1688)
Stopped! C:\Program Files\Alwil Software\Avast4\setup\avast.setup (2536)
Stopped! C:\WINDOWS\system32\cmd.exe (2756)
Stopped! C:\WINDOWS\system32\attrib.exe (2508)

################## | Files # Infected Folders |


(!) Temporary files deleted.

################## | Registry |


################## | Mountpoints2 |


################## | Listing |

[15/12/2011 - 18:51:25 | N | 0] C:\AUTOEXEC.BAT
[15/12/2011 - 18:39:11 | N | 220] C:\boot.ini
[26/10/2001 - 13:00:00 | N | 4952] C:\Bootfont.bin
[15/12/2011 - 18:51:25 | N | 0] C:\CONFIG.SYS
[16/12/2011 - 06:10:34 | D ] C:\d3060f782a8100a5440dad42
[15/12/2011 - 19:01:22 | D ] C:\Documents and Settings
[16/12/2011 - 06:21:32 | ASH | 132427776] C:\hiberfil.sys
[15/12/2011 - 18:51:25 | N | 0] C:\IO.SYS
[15/12/2011 - 18:51:25 | N | 0] C:\MSDOS.SYS
[03/08/2004 - 21:38:34 | N | 47564] C:\NTDETECT.COM
[03/08/2004 - 21:59:48 | N | 250624] C:\ntldr
[16/12/2011 - 09:05:52 | ASH | 402653184] C:\pagefile.sys
[16/12/2011 - 06:12:21 | RD ] C:\Program Files
[16/12/2011 - 10:19:08 | SHD ] C:\RECYCLER
[15/12/2011 - 19:01:12 | SHD ] C:\System Volume Information
[16/12/2011 - 10:19:09 | D ] C:\UsbFix
[16/12/2011 - 10:19:09 | A | 2778] C:\UsbFix.txt
[16/12/2011 - 06:24:16 | D ] C:\WINDOWS
[15/12/2011 - 20:14:02 | N | 154] E:\javitas.bat
[11/12/2011 - 08:01:50 | N | 2792] E:\BOOTEX.LOG
[18/09/2011 - 20:26:54 | N | 36352] E:\CV1.doc
[07/10/2011 - 07:28:08 | D ] E:\Új mappa
[03/10/2011 - 08:52:16 | N | 2359350] E:\Igazolás.bmp
[02/10/2011 - 19:36:38 | N | 718674] E:\Amina zumba.bmp
[08/11/2011 - 20:35:22 | N | 63] E:\cib.txt
[18/06/2011 - 14:29:04 | D ] E:\Erdei iskola
[09/12/2011 - 18:51:18 | D ] E:\keretek
[27/10/2011 - 19:34:46 | D ] E:\bújók
[12/11/2011 - 06:16:32 | D ] E:\Játékpénz
[26/07/2011 - 13:17:32 | D ] E:\FOUND.001
[12/09/2011 - 19:12:40 | N | 21504] E:\Másolat - CV1.doc
[09/12/2011 - 17:57:02 | D ] E:\Képek
[09/12/2011 - 18:44:06 | D ] E:\Sütemények
[10/11/2011 - 09:02:14 | N | 36352] E:\CV1.1.doc
[11/12/2011 - 07:55:14 | RASHD ] E:\Autorun.inf
[10/12/2011 - 09:13:44 | D ] E:\Stronghold.Europe
[09/11/2010 - 20:42:34 | D ] E:\Filmek
[24/11/2010 - 20:03:28 | D ] E:\Recycled
[30/01/2011 - 09:40:34 | D ] E:\Feladatlapok
[14/03/2011 - 18:35:04 | D ] E:\Színezők

################## | Vaccin |

C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

################## | E.O.F |

Pctools, azert mert felraktad az ZoneAlarm, tuzfalat, ra raktad a PCTOOLS tuzfalat, es oszeverekedtek,

Csak csinald azt amit irtam, es semmi masat,
Tehat Pendrive, es futtasd a .bat fajlot.
Es utana az USBFIX programot, de a Bat fajlot ugy ahogy leirtam, .

1. Futtasson egy szövegszerkesztőt, például a Jegyzettömb programot.
2. Másolja, majd illessze be a következő információt a szövegszerkesztőbe, és fix.bat néven mentse a fájlt:
mint minden fajlo.

Még az lemaradt, hogy reggel mikor letöltöttem a PCtools tűzfalat, jelentkezett a kék halál is, vagy hogyan mondják. Nehezen letöröltem, és azóta ilyen nem volt..

Az a nagy helyzet, hogy meghalt minden este. Mérgemben lekapcsoltam, de le sem állt negyed óra után miután visszanéztem, miért van világos még mindig a nappaliban. A konnektornál áramtalanítottam, reggel pedig el sem indult NTLDR fájl hiányzik. Javítótelepítést nem engedte, így formázásra került, majd feltelepült az xp. Nem merem bedugni a pendriveot megmondom őszintén.. Fél óra alatt meghalt a gép tegnap.
Akkor a pendriveon van valami még mindig, ugye? Menthető még, vagy inkább dobjam ki?
A képeket sajnálnám, ha elveszne még az a maradék, amit este láttam. Segíts kérlek!

Ezt a javitas.bat fájlt hogyan hozom létre?

Ha lehet csinalj egy javitas.bat fajlot, es tedd az Pendrivre, aztan futtasd.


Utana
Futtasd ujbol az USBFIX eszkozt, a pendrivet kapcsold a gephez, a logjat tedd ide.
Aztan restart.

Szia. Megint én zavarkolódnék az előzményekkel kapcsolatban. A pendriveon az adatokkal mi történhetett? Ma használni szerettem volna, de minden sérült, így nem tölthető be. Illetve nem lehet törölni sem, de azt mégis törölte közben.. Több ismeretlen eredetű mappa is volt rajta. Most meg nem jelenik meg a sajátgépben sem már. Mit tudok csinálni? Mi okozza ezt?

nincsen mit.
Udv

Köszönöm szépen Stell! Azt hiszem minden rendben van már! Remélem így is marad!

Köszi még egyszer! És szép estét!

amcsi

Igen a G;\ es a C:\ meghajton Worm,,, Fereg volt

Kapcsold ki az Rendszer visszaallitasat, restart es kapcsold be vissza.
Nezd meg a lemez kezelobe ha nincsen e valami kiss particio, ccc 10-20 MB kozot,
Ha minden rendben akkor ez minden.

############################## | UsbFix V 7.072 | [Deletion]

User: Ami (Administrator) # TOMPIKA
Updated 04/12/2011 by El Desaparecido
Started at 07:44:50 | 11/12/2011

Website: http://eldesaparecido.com
Suspicious file ? : http://eldesaparecido.com/support.php
Contact: contact@eldesaparecido.com

PC: Dell Computer Corporation (OptiPlex GX110 ) (X86-based PC) # Desktop Computer
CPU: Intel Pentium III processzor (664)
RAM -> [ Total : 126 | Free : 18 ]
BIOS: Phoenix ROM BIOS PLUS Version 1.10 A09
BOOT: Normal boot

OS: Microsoft Windows XP Professional (5.1.2600 32-Bit) # Szervizcsomag 2
WB: Windows Internet Explorer 6.0.2900.2180

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Fixed drive # 10 Gb (4 Mb free - 44%) [] # NTFS
D:\ -> CD-ROM
G:\ -> Removable drive # 8 Gb (157 Mb free - 2%) [] # FAT32

################## | Active Processes |

C:\WINDOWS\System32\smss.exe (412)
C:\WINDOWS\system32\winlogon.exe (528)
C:\WINDOWS\system32\services.exe (572)
C:\WINDOWS\system32\lsass.exe (584)
C:\WINDOWS\system32\svchost.exe (736)
C:\WINDOWS\System32\svchost.exe (844)
C:\WINDOWS\system32\ZoneLabs\vsmon.exe (1088)
C:\WINDOWS\system32\spoolsv.exe (1436)
C:\WINDOWS\system32\wscntfy.exe (332)
C:\WINDOWS\Explorer.EXE (468)
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (928)
C:\Program Files\Mozilla Firefox\firefox.exe (1352)
C:\UsbFix\UsbFix.exe (3452)

################## | Stopped processes |

Stopped! C:\WINDOWS\system32\ZoneLabs\vsmon.exe (1088)
Stopped! C:\WINDOWS\system32\spoolsv.exe (1436)
Stopped! C:\WINDOWS\system32\wscntfy.exe (332)
Stopped! C:\WINDOWS\Explorer.EXE (468)
Stopped! C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (928)
Stopped! C:\Program Files\Mozilla Firefox\firefox.exe (1352)

################## | Files # Infected Folders |

Deleted ! C:\Recycler\S-1-5-21-343818398-1078145449-1202660629-1003
Deleted ! G:\Recycled\ctfmon.exe

(!) Temporary files deleted.

################## | Registry |


################## | Mountpoints2 |


################## | Listing |

[22/08/2010 - 12:58:05 | N | 0] C:\AUTOEXEC.BAT
[11/12/2011 - 07:22:28 | RASHD ] C:\Autorun.inf
[11/12/2011 - 06:47:17 | N | 291] C:\boot.ini
[26/10/2001 - 13:00:00 | N | 4952] C:\Bootfont.bin
[09/12/2011 - 20:06:27 | D ] C:\cmdcons
[03/08/2004 - 23:00:00 | N | 260272] C:\cmldr
[09/12/2011 - 20:06:32 | D ] C:\ComboFix
[10/12/2011 - 12:58:49 | D ] C:\Config.Msi
[22/08/2010 - 12:58:05 | N | 0] C:\CONFIG.SYS
[10/12/2011 - 14:56:39 | D ] C:\Documents and Settings
[05/10/2011 - 20:55:21 | D ] C:\Downloads
[11/12/2011 - 07:28:45 | ASH | 132427776] C:\hiberfil.sys
[22/08/2010 - 12:58:05 | N | 0] C:\IO.SYS
[04/08/2011 - 18:28:58 | D ] C:\MANOKA
[22/08/2010 - 12:58:05 | N | 0] C:\MSDOS.SYS
[03/08/2004 - 21:38:34 | N | 47564] C:\NTDETECT.COM
[03/08/2004 - 21:59:48 | N | 250624] C:\ntldr
[11/12/2011 - 07:39:59 | ASH | 234881024] C:\pagefile.sys
[10/12/2011 - 14:12:15 | RD ] C:\Program Files
[09/12/2011 - 19:59:17 | D ] C:\Qoobox
[11/12/2011 - 07:48:03 | SHD ] C:\RECYCLER
[09/12/2011 - 10:27:02 | D ] C:\rsit
[10/12/2011 - 10:55:49 | SHD ] C:\System Volume Information
[11/12/2011 - 07:12:41 | N | 42414] C:\TDSSKiller.2.6.22.0_11.12.2011_07.11.24_log.txt
[11/12/2011 - 07:48:03 | D ] C:\UsbFix
[11/12/2011 - 07:48:03 | A | 2110] C:\UsbFix.txt
[11/12/2011 - 07:23:22 | N | 59377456] C:\UsbFix_Upload_Me_TOMPIKA.zip
[10/12/2011 - 12:43:19 | D ] C:\WINDOWS
[24/11/2010 - 20:05:36 | D ] G:\FOUND.000
[13/11/2011 - 05:52:24 | N | 1350] G:\BOOTEX.LOG
[18/09/2011 - 20:26:54 | N | 36352] G:\CV1.doc
[07/10/2011 - 07:28:08 | D ] G:\Új mappa
[03/10/2011 - 08:52:16 | N | 2359350] G:\Igazolás.bmp
[02/10/2011 - 19:36:38 | N | 718674] G:\Amina zumba.bmp
[08/11/2011 - 20:35:22 | N | 63] G:\cib.txt
[18/06/2011 - 14:29:04 | D ] G:\Erdei iskola
[18/11/2011 - 17:22:52 | N | 0] G:\photothumb.db
[09/12/2011 - 18:51:18 | D ] G:\keretek
[27/10/2011 - 19:34:46 | D ] G:\bújók
[12/11/2011 - 06:16:32 | D ] G:\Játékpénz
[12/11/2011 - 17:07:48 | N | 1559197696] G:\CSK_SZXR_KLLSZ_HUN_RIP_Magicmaker.avi
[20/11/2011 - 01:04:20 | N | 130217] G:\apa müve.JPG
[26/07/2011 - 13:17:32 | D ] G:\FOUND.001
[18/11/2011 - 17:22:52 | N | 0] G:\photothumb.db-journal
[12/09/2011 - 19:12:40 | N | 21504] G:\Másolat - CV1.doc
[09/12/2011 - 17:57:02 | D ] G:\Képek
[09/12/2011 - 18:44:06 | D ] G:\Sütemények
[10/11/2011 - 09:02:14 | N | 36352] G:\CV1.1.doc
[10/12/2011 - 09:13:44 | D ] G:\Stronghold.Europe
[09/11/2010 - 20:42:34 | D ] G:\Filmek
[24/11/2010 - 20:03:28 | D ] G:\Recycled
[30/01/2011 - 09:40:34 | D ] G:\Feladatlapok
[14/03/2011 - 18:35:04 | D ] G:\Színezők

################## | Vaccin |

C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

################## | Upload |

Please send the file: C:\UsbFix_Upload_Me_TOMPIKA.zip
http://eldesaparecido.com/upload.html
Thank you for your contribution.

################## | Reboot |

(!) The computer was restarted.

################## | E.O.F |

07:11:24.0492 0484 TDSS rootkit removing tool 2.6.22.0 Dec 7 2011 13:21:06
07:11:26.0525 0484 ============================================================
07:11:26.0525 0484 Current date / time: 2011/12/11 07:11:26.0525
07:11:26.0525 0484 SystemInfo:
07:11:26.0525 0484
07:11:26.0555 0484 OS Version: 5.1.2600 ServicePack: 2.0
07:11:26.0555 0484 Product type: Workstation
07:11:26.0555 0484 ComputerName: TOMPIKA
07:11:26.0625 0484 UserName: Ami
07:11:26.0625 0484 Windows directory: C:\WINDOWS
07:11:26.0625 0484 System windows directory: C:\WINDOWS
07:11:26.0625 0484 Processor architecture: Intel x86
07:11:26.0625 0484 Number of processors: 1
07:11:26.0625 0484 Page size: 0x1000
07:11:26.0625 0484 Boot type: Normal boot
07:11:26.0625 0484 ============================================================
07:11:34.0095 0484 Initialize success
07:11:49.0838 0348 ============================================================
07:11:49.0838 0348 Scan started
07:11:49.0838 0348 Mode: Manual;
07:11:49.0838 0348 ============================================================
07:11:51.0520 0348 Abiosdsk - ok
07:11:51.0631 0348 abp480n5 - ok
07:11:51.0841 0348 ACPI (4b60d4e72648207eb98287464fe3489d) C:\WINDOWS\system32\DRIVERS\ACPI.sys
07:11:51.0851 0348 ACPI - ok
07:11:52.0021 0348 ACPIEC (582c901174a7f0733c6fe41c37c9a80b) C:\WINDOWS\system32\drivers\ACPIEC.sys
07:11:52.0021 0348 ACPIEC - ok
07:11:52.0121 0348 adpu160m - ok
07:11:52.0242 0348 aec (841f385c6cfaf66b58fbd898722bb4f0) C:\WINDOWS\system32\drivers\aec.sys
07:11:52.0262 0348 aec - ok
07:11:52.0402 0348 AFD (5ac495f4cb807b2b98ad2ad591e6d92e) C:\WINDOWS\System32\drivers\afd.sys
07:11:52.0412 0348 AFD - ok
07:11:52.0522 0348 Aha154x - ok
07:11:52.0592 0348 aic78u2 - ok
07:11:52.0672 0348 aic78xx - ok
07:11:52.0822 0348 AliIde - ok
07:11:53.0023 0348 amsint - ok
07:11:53.0253 0348 asc - ok
07:11:53.0403 0348 asc3350p - ok
07:11:53.0493 0348 asc3550 - ok
07:11:53.0664 0348 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
07:11:53.0714 0348 AsyncMac - ok
07:11:54.0144 0348 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
07:11:54.0184 0348 atapi - ok
07:11:54.0575 0348 Atdisk - ok
07:11:54.0805 0348 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
07:11:54.0815 0348 Atmarpc - ok
07:11:55.0026 0348 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
07:11:55.0026 0348 audstub - ok
07:11:55.0286 0348 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
07:11:55.0316 0348 Beep - ok
07:11:55.0546 0348 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
07:11:55.0556 0348 cbidf2k - ok
07:11:55.0837 0348 cd20xrnt - ok
07:11:56.0017 0348 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
07:11:56.0017 0348 Cdaudio - ok
07:11:56.0317 0348 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
07:11:56.0317 0348 Cdfs - ok
07:11:56.0448 0348 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
07:11:56.0458 0348 Cdrom - ok
07:11:56.0548 0348 Changer - ok
07:11:56.0728 0348 CmdIde - ok
07:11:56.0868 0348 Cpqarray - ok
07:11:56.0978 0348 dac2w2k - ok
07:11:57.0058 0348 dac960nt - ok
07:11:57.0249 0348 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
07:11:57.0249 0348 Disk - ok
07:11:57.0499 0348 dmboot (89e3734f8b92bc9322b0b4331e94bcb4) C:\WINDOWS\system32\drivers\dmboot.sys
07:11:57.0599 0348 dmboot - ok
07:11:57.0910 0348 dmio (1811ad47c0ac9a082f1761138e2f2022) C:\WINDOWS\system32\drivers\dmio.sys
07:11:57.0930 0348 dmio - ok
07:11:58.0070 0348 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
07:11:58.0080 0348 dmload - ok
07:11:58.0210 0348 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
07:11:58.0230 0348 DMusic - ok
07:11:58.0360 0348 dpti2o - ok
07:11:58.0450 0348 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
07:11:58.0450 0348 drmkaud - ok
07:11:58.0581 0348 EL90XBC (6e883bf518296a40959131c2304af714) C:\WINDOWS\system32\DRIVERS\el90xbc5.sys
07:11:58.0591 0348 EL90XBC - ok
07:11:58.0781 0348 es1371 (a55dd7d8ced5d2624a9ee2dda7be0319) C:\WINDOWS\system32\drivers\es1371mp.sys
07:11:58.0781 0348 es1371 - ok
07:11:59.0091 0348 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
07:11:59.0101 0348 Fastfat - ok
07:11:59.0252 0348 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
07:11:59.0252 0348 Fdc - ok
07:11:59.0382 0348 Fips (3e16f14a26c5f2f663a14669a0e09544) C:\WINDOWS\system32\drivers\Fips.sys
07:11:59.0392 0348 Fips - ok
07:11:59.0512 0348 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
07:11:59.0522 0348 Flpydisk - ok
07:11:59.0642 0348 FltMgr (157754f0df355a9e0a6f54721914f9c6) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
07:11:59.0652 0348 FltMgr - ok
07:11:59.0822 0348 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
07:11:59.0822 0348 Fs_Rec - ok
07:11:59.0983 0348 Ftdisk (44225407f69666099c4d4c6bc9cd804d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
07:12:00.0003 0348 Ftdisk - ok
07:12:00.0113 0348 gameenum (5f92fd09e5610a5995da7d775eadcd12) C:\WINDOWS\system32\DRIVERS\gameenum.sys
07:12:00.0123 0348 gameenum - ok
07:12:00.0233 0348 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
07:12:00.0243 0348 Gpc - ok
07:12:00.0423 0348 hidusb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
07:12:00.0423 0348 hidusb - ok
07:12:00.0513 0348 hpn - ok
07:12:00.0684 0348 HTTP (c19b522a9ae0bbc3293397f3055e80a1) C:\WINDOWS\system32\Drivers\HTTP.sys
07:12:00.0714 0348 HTTP - ok
07:12:00.0954 0348 i2omgmt - ok
07:12:01.0054 0348 i2omp - ok
07:12:01.0164 0348 i8042prt (cced51afecf99e8d7b9e2ab45cf3ceb2) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
07:12:01.0164 0348 i8042prt - ok
07:12:01.0295 0348 i81x (06b7ef73ba5f302eecc294cdf7e19702) C:\WINDOWS\system32\DRIVERS\i81xnt5.sys
07:12:01.0315 0348 i81x - ok
07:12:01.0445 0348 iAimFP0 (7b5b44efe5eb9dadfb8ee29700885d23) C:\WINDOWS\system32\DRIVERS\wADV01nt.sys
07:12:01.0455 0348 iAimFP0 - ok
07:12:01.0565 0348 iAimFP1 (eb1f6bab6c22ede0ba551b527475f7e9) C:\WINDOWS\system32\DRIVERS\wADV02NT.sys
07:12:01.0565 0348 iAimFP1 - ok
07:12:01.0665 0348 iAimFP2 (03ce989d846c1aa81145cb22fcb86d06) C:\WINDOWS\system32\DRIVERS\wADV05NT.sys
07:12:01.0665 0348 iAimFP2 - ok
07:12:01.0785 0348 iAimFP3 (525849b4469de021d5d61b4db9be3a9d) C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys
07:12:01.0785 0348 iAimFP3 - ok
07:12:01.0905 0348 iAimFP4 (589c2bcdb5bd602bf7b63d210407ef8c) C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys
07:12:01.0915 0348 iAimFP4 - ok
07:12:02.0006 0348 iAimFP5 (0308aef61941e4af478fa1a0f83812f5) C:\WINDOWS\system32\DRIVERS\wADV07nt.sys
07:12:02.0006 0348 iAimFP5 - ok
07:12:02.0126 0348 iAimFP6 (714038a8aa5de08e12062202cd7eaeb5) C:\WINDOWS\system32\DRIVERS\wADV08nt.sys
07:12:02.0126 0348 iAimFP6 - ok
07:12:02.0236 0348 iAimFP7 (7bb3aa595e4507a788de1cdc63f4c8c4) C:\WINDOWS\system32\DRIVERS\wADV09nt.sys
07:12:02.0246 0348 iAimFP7 - ok
07:12:02.0366 0348 iAimTV0 (d83bdd5c059667a2f647a6be5703a4d2) C:\WINDOWS\system32\DRIVERS\wATV01nt.sys
07:12:02.0366 0348 iAimTV0 - ok
07:12:02.0496 0348 iAimTV1 (ed968d23354daa0d7c621580c012a1f6) C:\WINDOWS\system32\DRIVERS\wATV02NT.sys
07:12:02.0496 0348 iAimTV1 - ok
07:12:02.0626 0348 iAimTV3 (d738273f218a224c1ddac04203f27a84) C:\WINDOWS\system32\DRIVERS\wATV04nt.sys
07:12:02.0626 0348 iAimTV3 - ok
07:12:02.0787 0348 iAimTV4 (0052d118995cbab152daabe6106d1442) C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys
07:12:02.0797 0348 iAimTV4 - ok
07:12:02.0917 0348 iAimTV5 (791cc45de6e50445be72e8ad6401ff45) C:\WINDOWS\system32\DRIVERS\wATV10nt.sys
07:12:02.0917 0348 iAimTV5 - ok
07:12:03.0037 0348 iAimTV6 (352fa0e98bc461ce1ce5d41f64db558d) C:\WINDOWS\system32\DRIVERS\wATV06nt.sys
07:12:03.0037 0348 iAimTV6 - ok
07:12:03.0237 0348 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
07:12:03.0237 0348 Imapi - ok
07:12:03.0368 0348 ini910u - ok
07:12:03.0498 0348 IntelIde (0d13a30de5dfdec8938801a8a2dfc792) C:\WINDOWS\system32\DRIVERS\intelide.sys
07:12:03.0498 0348 IntelIde - ok
07:12:03.0668 0348 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
07:12:03.0668 0348 Ip6Fw - ok
07:12:03.0838 0348 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
07:12:03.0848 0348 IpFilterDriver - ok
07:12:03.0978 0348 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
07:12:03.0978 0348 IpInIp - ok
07:12:04.0109 0348 IpNat (b5a8e215ac29d24d60b4d1250ef05ace) C:\WINDOWS\system32\DRIVERS\ipnat.sys
07:12:04.0119 0348 IpNat - ok
07:12:04.0249 0348 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
07:12:04.0259 0348 IPSec - ok
07:12:04.0449 0348 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
07:12:04.0449 0348 IRENUM - ok
07:12:04.0619 0348 isapnp (ae9857353a6d45f101c4496789585c25) C:\WINDOWS\system32\DRIVERS\isapnp.sys
07:12:04.0629 0348 isapnp - ok
07:12:04.0860 0348 Kbdclass (059b59b694dbb143a5b627187c9d8860) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
07:12:04.0860 0348 Kbdclass - ok
07:12:05.0020 0348 kmixer (d93cad07c5683db066b0b2d2d3790ead) C:\WINDOWS\system32\drivers\kmixer.sys
07:12:05.0040 0348 kmixer - ok
07:12:05.0160 0348 KSecDD (eb7ffe87fd367ea8fca0506f74a87fbb) C:\WINDOWS\system32\drivers\KSecDD.sys
07:12:05.0170 0348 KSecDD - ok
07:12:05.0340 0348 lbrtfdc - ok
07:12:05.0541 0348 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
07:12:05.0541 0348 mnmdd - ok
07:12:05.0941 0348 Modem (af00a5a5a613e165f3bdea187df796ec) C:\WINDOWS\system32\drivers\Modem.sys
07:12:05.0961 0348 Modem - ok
07:12:06.0362 0348 Mouclass (de28319707eb33dd721559110acd757d) C:\WINDOWS\system32\DRIVERS\mouclass.sys
07:12:06.0362 0348 Mouclass - ok
07:12:06.0572 0348 mouhid (6a79cb27d0e608a45638cd9468269a3e) C:\WINDOWS\system32\DRIVERS\mouhid.sys
07:12:06.0572 0348 mouhid - ok
07:12:06.0682 0348 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
07:12:06.0682 0348 MountMgr - ok
07:12:06.0782 0348 mraid35x - ok
07:12:06.0893 0348 MRxDAV (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
07:12:06.0913 0348 MRxDAV - ok
07:12:07.0113 0348 MRxSmb (1fd607fc67f7f7c633c3da65bfc53d18) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
07:12:07.0163 0348 MRxSmb - ok
07:12:07.0383 0348 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
07:12:07.0393 0348 Msfs - ok
07:12:07.0533 0348 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
07:12:07.0533 0348 MSKSSRV - ok
07:12:07.0644 0348 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
07:12:07.0654 0348 MSPCLOCK - ok
07:12:07.0834 0348 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
07:12:07.0834 0348 MSPQM - ok
07:12:08.0004 0348 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
07:12:08.0004 0348 mssmbios - ok
07:12:08.0164 0348 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
07:12:08.0174 0348 Mup - ok
07:12:08.0325 0348 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
07:12:08.0335 0348 NDIS - ok
07:12:08.0455 0348 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
07:12:08.0455 0348 NdisTapi - ok
07:12:08.0605 0348 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
07:12:08.0605 0348 Ndisuio - ok
07:12:08.0785 0348 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
07:12:08.0795 0348 NdisWan - ok
07:12:08.0946 0348 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
07:12:08.0956 0348 NDProxy - ok
07:12:09.0096 0348 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
07:12:09.0096 0348 NetBIOS - ok
07:12:09.0246 0348 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
07:12:09.0266 0348 NetBT - ok
07:12:09.0486 0348 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
07:12:09.0486 0348 Npfs - ok
07:12:09.0647 0348 Ntfs (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys
07:12:09.0707 0348 Ntfs - ok
07:12:09.0937 0348 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
07:12:09.0937 0348 Null - ok
07:12:10.0057 0348 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
07:12:10.0067 0348 NwlnkFlt - ok
07:12:10.0187 0348 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
07:12:10.0187 0348 NwlnkFwd - ok
07:12:10.0348 0348 P3 (4b9a660626c199b1f838f67635e3d402) C:\WINDOWS\system32\DRIVERS\p3.sys
07:12:10.0358 0348 P3 - ok
07:12:10.0488 0348 Parport (99d001d603b5c27c01fe9fc55b4bb181) C:\WINDOWS\system32\DRIVERS\parport.sys
07:12:10.0498 0348 Parport - ok
07:12:10.0628 0348 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
07:12:10.0638 0348 PartMgr - ok
07:12:10.0788 0348 ParVdm (4df92a889e7fe15ed3834d288a0271f5) C:\WINDOWS\system32\drivers\ParVdm.sys
07:12:10.0788 0348 ParVdm - ok
07:12:10.0968 0348 PCI (0827cc4cb7c97ef6d94e97927db55df8) C:\WINDOWS\system32\DRIVERS\pci.sys
07:12:10.0978 0348 PCI - ok
07:12:11.0069 0348 PCIDump - ok
07:12:11.0149 0348 PCIIde - ok
07:12:11.0289 0348 Pcmcia (eca393902f8b2ca5233cbb325f0b4488) C:\WINDOWS\system32\drivers\Pcmcia.sys
07:12:11.0299 0348 Pcmcia - ok
07:12:11.0389 0348 PDCOMP - ok
07:12:11.0459 0348 PDFRAME - ok
07:12:11.0649 0348 PDRELI - ok
07:12:11.0940 0348 PDRFRAME - ok
07:12:12.0020 0348 perc2 - ok
07:12:12.0070 0348 perc2hib - ok
07:12:12.0310 0348 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
07:12:12.0320 0348 PptpMiniport - ok
07:12:12.0481 0348 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
07:12:12.0491 0348 PSched - ok
07:12:12.0621 0348 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
07:12:12.0621 0348 Ptilink - ok
07:12:12.0731 0348 ql1080 - ok
07:12:12.0821 0348 Ql10wnt - ok
07:12:12.0941 0348 ql12160 - ok
07:12:13.0041 0348 ql1240 - ok
07:12:13.0132 0348 ql1280 - ok
07:12:13.0262 0348 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
07:12:13.0262 0348 RasAcd - ok
07:12:13.0442 0348 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
07:12:13.0442 0348 Rasl2tp - ok
07:12:13.0582 0348 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
07:12:13.0592 0348 RasPppoe - ok
07:12:13.0712 0348 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
07:12:13.0722 0348 Raspti - ok
07:12:13.0893 0348 Rdbss (29d66245adba878fff574cd66abd2884) C:\WINDOWS\system32\DRIVERS\rdbss.sys
07:12:13.0913 0348 Rdbss - ok
07:12:14.0073 0348 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
07:12:14.0083 0348 RDPCDD - ok
07:12:14.0243 0348 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
07:12:14.0263 0348 rdpdr - ok
07:12:14.0413 0348 RDPWD (d4f5643d7714ef499ae9527fdcd50894) C:\WINDOWS\system32\drivers\RDPWD.sys
07:12:14.0423 0348 RDPWD - ok
07:12:14.0564 0348 redbook (de6e09ca3a6fa6fc2b0bac66ae617726) C:\WINDOWS\system32\DRIVERS\redbook.sys
07:12:14.0564 0348 redbook - ok
07:12:14.0934 0348 Secdrv (d26e26ea516450af9d072635c60387f4) C:\WINDOWS\system32\DRIVERS\secdrv.sys
07:12:14.0934 0348 Secdrv - ok
07:12:15.0114 0348 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
07:12:15.0124 0348 serenum - ok
07:12:15.0255 0348 Serial (eb35db11a54056f7ef2f2187b9a4f24a) C:\WINDOWS\system32\DRIVERS\serial.sys
07:12:15.0265 0348 Serial - ok
07:12:15.0425 0348 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
07:12:15.0425 0348 Sfloppy - ok
07:12:15.0555 0348 Simbad - ok
07:12:15.0645 0348 Sparrow - ok
07:12:15.0815 0348 splitter (8e186b8f23295d1e42c573b82b80d548) C:\WINDOWS\system32\drivers\splitter.sys
07:12:15.0815 0348 splitter - ok
07:12:15.0976 0348 sr (d11ef3ba5bb0f718d5fefe761101782b) C:\WINDOWS\system32\DRIVERS\sr.sys
07:12:15.0986 0348 sr - ok
07:12:16.0196 0348 Srv (20b7e396720353e4117d64d9dcb926ca) C:\WINDOWS\system32\DRIVERS\srv.sys
07:12:16.0236 0348 Srv - ok
07:12:16.0456 0348 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
07:12:16.0466 0348 swenum - ok
07:12:16.0587 0348 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
07:12:16.0597 0348 swmidi - ok
07:12:16.0807 0348 symc810 - ok
07:12:17.0067 0348 symc8xx - ok
07:12:17.0167 0348 sym_hi - ok
07:12:17.0227 0348 sym_u3 - ok
07:12:17.0368 0348 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
07:12:17.0378 0348 sysaudio - ok
07:12:17.0618 0348 Tcpip (9f4b36614a0fc234525ba224957de55c) C:\WINDOWS\system32\DRIVERS\tcpip.sys
07:12:17.0648 0348 Tcpip - ok
07:12:17.0928 0348 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
07:12:17.0938 0348 TDPIPE - ok
07:12:18.0079 0348 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
07:12:18.0079 0348 TDTCP - ok
07:12:18.0209 0348 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
07:12:18.0219 0348 TermDD - ok
07:12:18.0389 0348 TosIde - ok
07:12:18.0589 0348 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
07:12:18.0599 0348 Udfs - ok
07:12:18.0680 0348 ultra - ok
07:12:18.0870 0348 Update (aff2e5045961bbc0a602bb6f95eb1345) C:\WINDOWS\system32\DRIVERS\update.sys
07:12:18.0890 0348 Update - ok
07:12:19.0130 0348 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
07:12:19.0130 0348 usbhub - ok
07:12:19.0240 0348 usbuhci (f8fd1400092e23c8f2f31406ef06167b) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
07:12:19.0250 0348 usbuhci - ok
07:12:19.0411 0348 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
07:12:19.0411 0348 VgaSave - ok
07:12:19.0511 0348 ViaIde - ok
07:12:19.0621 0348 VolSnap (1cafd39fec4cb1fe96f408983bb0c106) C:\WINDOWS\system32\drivers\VolSnap.sys
07:12:19.0631 0348 VolSnap - ok
07:12:19.0911 0348 vsdatant (050c38ebb22512122e54b47dc278bccd) C:\WINDOWS\system32\vsdatant.sys
07:12:20.0132 0348 vsdatant - ok
07:12:20.0342 0348 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
07:12:20.0352 0348 Wanarp - ok
07:12:20.0412 0348 WDICA - ok
07:12:20.0532 0348 wdmaud (2797f33ebf50466020c430ee4f037933) C:\WINDOWS\system32\drivers\wdmaud.sys
07:12:20.0532 0348 wdmaud - ok
07:12:20.0913 0348 MBR (0x1B8) (186a4159d7661245314a7a933981403e) \Device\Harddisk0\DR0
07:12:21.0093 0348 \Device\Harddisk0\DR0 - ok
07:12:21.0133 0348 Boot (0x1200) (f395ce4948b9b1c54e59d8e225404914) \Device\Harddisk0\DR0\Partition0
07:12:21.0143 0348 \Device\Harddisk0\DR0\Partition0 - ok
07:12:21.0163 0348 ============================================================
07:12:21.0163 0348 Scan finished
07:12:21.0163 0348 ============================================================
07:12:21.0233 1484 Detected object count: 0
07:12:21.0233 1484 Actual detected object count: 0
07:12:41.0032 1160 Deinitialize success

Akkor te csak javito telepitest csinaltal,
Akkor igy
1:futtasd a TDSSKILLERT, a logjat tedd ide
http://www.virus-stell.com/2010/08/root ... -tdl3.html

2:Futtasd az USBFIX programot, az logjat tedd ide. minden hordozhato eszkozt kapcsol a gephez.
http://www.virus-stell.com/2010/04/auto ... itasa.html

Aztan ,meglassuk,,,

Igen igen, én írtam volna neked, de sajnos nem tudtam csatlakozni a nethez. Máshonnan pedig jelenleg nincs lehetőségem netezni. Van egy telepítő lemezem, arról ment ment minden. Formázni nem tudom hogyan kell, de gondoltam így is úgy is rossz, tehát rontani nem tudtam volna sokat, ha nem sikerül a telepítés. De elindítottam a telepítőt, gyakorlatilag mindent kiírt, hogy mit tegyek. Felülírta a Windows fájlokat.
Akkor a Malwarebytest lefuttatom még, és letöltöm a tűzfalat amit írtál. Pendrive-ra tettem a képeimet és egy pár dokumentumot, akkor lehetséges, hogy fertőzve lett az is? Azt is át lehet nézni pl a Malwarebytes programmal? Esetleg valami más helyette?

Igenn, a Virusok, blokoljak a combofixet, de ha irtal volna akkor megoldotuk vonlna a problemat, de igy ha ujra raktad akkor mar mindegy.Ha leformaztad, es raktal uj particiokat is akkor mar virussok nem lehetnek a gepen, ha csak nem vol VIRUT, vagy szality es ezek mindent megfertoznek, tehat pendrivet, es minden hordozhato eszkozt, es ha a gep osze van, volt kotve halozaton, hazzai halozat, akkor a masik gepet is megfertozi ezzek az fileinfektorok.Eppen lefuttathatod a Malwarebytest, es meglatod talal e valamit.
Tuzfal, rakd fel a PCTOOLS tuzfalat.

Szeretném megkérdezni, hogy a vírus vagy akármi is okozta a problémát, most akkor nyom nélkül eltűnt? Csak mert néhány fájlt és programot, ami fent volt a gépen ugyanúgy itt maradt. Nem kellene átnézni szerinted, hogy rendben van-e minden? Bár látszólag igen, rendkívül gyors a net is most..

Szia Stell.

Nem tudtam lefuttatni a Combofix programot. Vagyis elindult, de nem csinált semmit órákon keresztül. Nekem el kellett mennem itthonról, így lekapcsoltam a gépet. Este meg már nem volt net sem, programokat törölni sem tudtam, vagyis semmit nem lehetett csinálni. Így újra lett telepítve.
Felrakok valami tűzfalat és vírusirtót, aztán meglátjuk, hogy beválik-e. Tűzfalnak a Zone Alarm megfelelő?

1:Futasd az TDSSKILLERT a logjat tedd ide
http://www.virus-stell.com/2010/08/root ... -tdl3.html

2:Futtasd a combofixet a logjat tedd ide.
http://www.virus-stell.com/2010/04/combofix.html

Szia Stell.

Reggel letöltöttem az Avastot, lefutott, de semmit nem talált a gépen.

Itt az Rsit logja:


Logfile of random's system information tool 1.09 (written by random/random)
Run by Rendszergazda at 2011-12-09 10:28:31
Microsoft Windows XP Professional Szervizcsomag 2
System drive C: has 1 GB (12%) free of 10 GB
Total RAM: 126 MB (13% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:28:55, on 2011.12.09.
Platform: Windows XP Szervizcsomag 2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Documents and Settings\Rendszergazda\Asztal\RSIT.exe
C:\Program Files\trend micro\Rendszergazda.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66022
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=66022
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:50444
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O22 - SharedTaskScheduler: Browseui előbetöltője - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Komponenskategóriák gyorsítótárazási szolgáltatása - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Logikai lemezkezelő felügyeleti szolgáltatás (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Eseménynapló (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Dolphin Knight Guard (GuardService) - Unknown owner - C:\Program Files\DolphinTechnology\DolphinKnightP\dkpGuard.exe (file missing)
O23 - Service: Google frissítési szolgáltatás (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: IMAPI CD-égető COM-szolgáltatás (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NetMeeting távoli asztalmegosztás (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Dolphin Knight P Program Restriction (ProgramRestService) - Unknown owner - C:\Program Files\DolphinTechnology\DolphinKnightP\dkpProgramRest.exe (file missing)
O23 - Service: Távoli asztal súgó-munkamenetének kezelője (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Intelligens kártya (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Teljesítménynaplók és riasztások (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Telnet (TlntSvr) - Unknown owner - C:\WINDOWS\system32\tlntsvr.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Kötet árnyékmásolata (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: WMI teljesítményadapter (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 4771 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Rendszergazda\Application Data\Mozilla\Firefox\Profiles\vbwszi7g.default

prefs.js - "browser.startup.homepage" - "http://www.google.hu/"
prefs.js - "extensions.enabledItems" - "jqs@sun.com:1.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.4"
prefs.js - "keyword.URL" - "http://mystart.incredimail.com//?loc=ff_address_bar&a=1eyo9ldKQhQ&search="

"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0]
"Description"=DivX® Content Upload Plugin
"Path"=C:\Program Files\DivX\DivX Content Uploader\npUpload.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=8]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
aboutRobots.js
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPostUpdateWin.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
npnul32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
amazondotcom.xml
answers.xml
creativecommons.xml
eBay.xml
google.xml
wikipedia-hu.xml
yahoo.xml

C:\Documents and Settings\Rendszergazda\Application Data\Mozilla\Firefox\Profiles\vbwszi7g.default\searchplugins\
conduit.xml
MyStart Search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-02 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-02-02 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3}
{D4027C7F-154A-4066-A1AD-4243D8127440}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2008-03-13 919016]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-07-04 3493720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\0D0.exe]
C:\Program Files\LP\D2BB\0D0.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
C:\Program Files\DAEMON Tools\daemon.exe -lang 1033 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe /CHECKNOW []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DolphinKnightPAutoRun]
C:\Program Files\DolphinTechnology\DolphinKnightP\dkpDesktop.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2011-08-31 449608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe -atboottime []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\1.2.911.3380\GoogleToolbarNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Workrave]
C:\Program Files\Workrave\lib\Workrave.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Indítópult^Microsoft Gyorskereső.lnk]
C:\PROGRA~1\MICROS~2\Office\FINDFAST.EXE [1997-09-30 111376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Indítópult^Microsoft Office Irányítópult.lnk]
C:\PROGRA~1\MICROS~2\Office\MSOFFICE.EXE [1997-09-30 335872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Indítópult^Office Indítópult.lnk]
C:\PROGRA~1\MICROS~2\Office\OSA.EXE [1997-09-30 51984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Rendszergazda^Start Menu^Programs^Indítópult^Adobe Gamma.lnk]
C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2005-03-16 113664]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
"RestrictRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"RestrictRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Documents and Settings\Rendszergazda\Dokumentumok\Downloads\incredimail_install.exe"="C:\Documents and Settings\Rendszergazda\Dokumentumok\Downloads\incredimail_install.exe:*:Enabled:IncrediMail Installer"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"msacm.siren"=sirenacm.dll
"vidc.XVID"=xvidvfw.dll
"msacm.ac3filter"=ac3filter.acm

======List of files/folders created in the last 1 month======

2011-12-09 10:21:56 ----D---- C:\Program Files\trend micro
2011-12-09 10:21:18 ----D---- C:\rsit
2011-12-09 10:00:22 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2011-12-09 06:19:04 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-12-09 06:19:02 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-12-09 06:18:53 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-12-09 06:18:51 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-12-09 06:18:48 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-12-09 06:18:46 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-12-09 06:18:46 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-12-09 06:18:43 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-12-09 06:14:49 ----A---- C:\WINDOWS\system32\TBD5C.tmp
2011-12-09 06:06:34 ----A---- C:\WINDOWS\avastSS.scr
2011-12-09 06:06:12 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-12-09 06:02:04 ----D---- C:\Documents and Settings\All Users\Application Data\AVAST Software
2011-12-09 06:02:03 ----D---- C:\Program Files\AVAST Software
2011-12-08 06:25:15 ----D---- C:\Program Files\ESET
2011-12-06 06:06:23 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2011-12-04 11:00:15 ----D---- C:\Documents and Settings\Rendszergazda\Application Data\BC193
2011-11-25 17:50:15 ----D---- C:\Program Files\Infogrames Interactive
2011-11-23 19:10:29 ----D---- C:\Program Files\GameTop.com
2011-11-22 17:47:02 ----D---- C:\Program Files\Fairy Tower
2011-11-22 14:05:19 ----D---- C:\Documents and Settings\All Users\Application Data\n7-89-o9-3r-4t-r9
2011-11-22 14:03:39 ----D---- C:\Documents and Settings\Rendszergazda\Application Data\GameHouse
2011-11-22 14:03:24 ----D---- C:\Program Files\GameHouse
2011-11-16 09:29:30 ----D---- C:\Program Files\GT Interactive
2011-11-13 09:37:26 ----D---- C:\Program Files\Warmux
2011-11-12 17:19:51 ----D---- C:\Program Files\AC3Filter

======List of files/folders modified in the last 1 month======

2011-12-09 10:26:18 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-12-09 10:26:10 ----D---- C:\WINDOWS\system32\drivers
2011-12-09 10:25:44 ----D---- C:\WINDOWS\system32\CatRoot2
2011-12-09 10:23:44 ----D---- C:\WINDOWS\Internet Logs
2011-12-09 10:23:30 ----D---- C:\WINDOWS\Prefetch
2011-12-09 10:21:56 ----D---- C:\Program Files
2011-12-09 10:04:56 ----D---- C:\Program Files\Mozilla Firefox
2011-12-09 07:06:10 ----D---- C:\WINDOWS\Temp
2011-12-09 06:15:36 ----SHD---- C:\WINDOWS\Installer
2011-12-09 06:15:31 ----D---- C:\WINDOWS\WinSxS
2011-12-09 06:15:04 ----D---- C:\WINDOWS\pchealth
2011-12-09 06:14:57 ----D---- C:\WINDOWS\system32
2011-12-09 06:14:49 ----D---- C:\WINDOWS\system32\mui
2011-12-09 06:14:49 ----D---- C:\Program Files\Internet Explorer
2011-12-09 06:13:25 ----HD---- C:\WINDOWS\inf
2011-12-09 06:13:25 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-12-09 06:11:41 ----RSD---- C:\WINDOWS\assembly
2011-12-09 06:06:34 ----D---- C:\WINDOWS
2011-12-08 19:08:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-12-06 07:17:27 ----D---- C:\WINDOWS\PeerNet
2011-12-06 06:08:21 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-11-30 18:35:35 ----HD---- C:\Program Files\InstallShield Installation Information
2011-11-30 18:04:00 ----D---- C:\Program Files\Common Files\InstallShield
2011-11-30 17:51:38 ----D---- C:\Documents and Settings\Rendszergazda\Application Data\GetRightToGo
2011-11-22 16:20:00 ----D---- C:\WINDOWS\Microsoft.NET
2011-11-22 13:56:19 ----D---- C:\Program Files\PopCap Games
2011-11-21 19:36:59 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-10-31 443448]
R0 srescan;srescan; C:\WINDOWS\system32\ZoneLabs\srescan.sys [2008-02-27 51176]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-07-04 30808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-07-04 25432]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-07-04 309848]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-07-04 43608]
R1 KLIF;KLIF; C:\WINDOWS\system32\DRIVERS\klif.sys [2007-07-19 127768]
R1 netfilter2;netfilter2; C:\WINDOWS\system32\drivers\netfilter2.sys [2011-08-12 42112]
R1 P3;Intel PentiumIII processzor-illesztőprogram; C:\WINDOWS\system32\DRIVERS\p3.sys [2004-08-17 46720]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2008-03-13 394952]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-07-04 19544]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-07-04 102616]
R3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys [2010-09-06 223128]
R3 EL90XBC;3Com EtherLink XL 90XB/C adapter Driver; C:\WINDOWS\system32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
R3 es1371;Creative AudioPCI (ES1371,ES1373) (WDM); C:\WINDOWS\system32\drivers\es1371mp.sys [2001-08-17 40704]
R3 HidUsb;Microsoft HID osztályú illesztőprogram; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 i81x;i81x; C:\WINDOWS\system32\DRIVERS\i81xnt5.sys [2004-08-03 161020]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 mouhid;Egér HID-illesztőprogram; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-26 12160]
R3 usbuhci;Microsoft USB univerzális állomásvezérlő miniport illesztőprogramja; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-07-04 441176]
S3 a6fdk188;a6fdk188; C:\WINDOWS\system32\drivers\a6fdk188.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\RENDSZ~1\LOCALS~1\Temp\catchme.sys []
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt []
S3 iAimFP0;iAimFP0; C:\WINDOWS\system32\DRIVERS\wADV01nt.sys [2004-08-03 12415]
S3 iAimFP1;iAimFP1; C:\WINDOWS\system32\DRIVERS\wADV02NT.sys [2004-08-03 12127]
S3 iAimFP2;iAimFP2; C:\WINDOWS\system32\DRIVERS\wADV05NT.sys [2004-08-03 11775]
S3 iAimFP3;iAimFP3; C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys [2004-08-03 12063]
S3 iAimFP4;iAimFP4; C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys [2004-08-03 19455]
S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2004-08-03 11807]
S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2004-08-03 11295]
S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2004-08-03 11871]
S3 iAimTV0;iAimTV0; C:\WINDOWS\system32\DRIVERS\wATV01nt.sys [2004-08-03 29311]
S3 iAimTV1;iAimTV1; C:\WINDOWS\system32\DRIVERS\wATV02NT.sys [2004-08-03 19551]
S3 iAimTV3;iAimTV3; C:\WINDOWS\system32\DRIVERS\wATV04nt.sys [2004-08-03 33599]
S3 iAimTV4;iAimTV4; C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys [2004-08-03 23615]
S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2004-08-03 25471]
S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2004-08-03 22271]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 SJProcDrv;Sajin Process Driver; \??\C:\WINDOWS\system32\drivers\SJProcDrv.sys []
S3 USBSTOR;USB háttértár illesztőprogramja; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S4 WS2IFSL;Windows Socket 2.0 - nem IFS-t szolgáltató támogatási környezet; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-26 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-07-04 42184]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2008-03-13 75304]
S2 gupdate;Google frissítési szolgáltatás (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe /svc []
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-02-02 153376]
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]
S2 ProgramRestService;Dolphin Knight P Program Restriction; C:\Program Files\DolphinTechnology\DolphinKnightP\dkpProgramRest.exe []
S2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-11-15 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 GuardService;Dolphin Knight Guard; C:\Program Files\DolphinTechnology\DolphinKnightP\dkpGuard.exe []

-----------------EOF-----------------