Feltelepiteni a FREE AVIRA virusirtot, es valami tuzfalat, lehet a KERIO tuzfal is
Nincsen mit
UDV.

Nincsen, már megnyílik az összes oldal. Újból köszönöm a segítséged, aztán ki tudja mikor jelentkezik újra.

akkor most mi van?? van e meg problema??

ComboFix 12-04-19.01 - l 012.04.19. 20:20:24.2.1 - x86 NETWORK
Microsoft Windows XP Professional 5.1.2600.2.1250.36.1038.18.1023.773 [GMT 2:00]
Running from: d:\documents and settings\l\Dokumentumok\Downloads\ComboFix.exe
Command switches used :: d:\documents and settings\l\Dokumentumok\Downloads\CFScript.txt
.
FILE ::
"D:\sys20370.bin"
.
.
((((((((((((((((((((((((( Files Created from 2012-03-19 to 2012-04-19 )))))))))))))))))))))))))))))))
.
.
2012-04-19 17:15 . 2012-04-19 17:15 -------- d-----w- D:\_OTL
2012-04-19 14:00 . 2012-04-19 14:00 512 ----a-w- D:\PhysicalMBR.bin
2012-04-18 17:43 . 2012-04-18 17:44 -------- d-----w- D:\UsbFix
2012-04-02 16:14 . 2012-04-02 16:15 111 ---ha-w- D:\sys20370.bin
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2008-07-23 16804864]
"LogMeIn Hamachi Ui"="d:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="d:\windows\system32\CTFMON.EXE" [2004-08-18 15360]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"d:\\Program Files\\Opera\\opera.exe"=
"d:\\Program Files\\Vuze\\Azureus.exe"=
"d:\\Program Files\\Veetle\\Player\\VeetleNet.exe"=
"d:\\Program Files\\LucasArts\\Star Wars Jedi Knight Jedi Academy\\GameData\\jamp.exe"=
"d:\\Program Files\\SopCast\\SopCast.exe"=
"d:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\\Program Files\\Skype\\Phone\\Skype.exe"=
"d:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"d:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"d:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"d:\\Program Files\\PANDORA.TV\\PanService\\PandoraService.exe"=
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;d:\windows\system32\drivers\dtsoftbus01.sys [2012.03.29. 16:31 239168]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;d:\program files\LogMeIn Hamachi\hamachi-2.exe [2012.02.28. 17:38 1373576]
S2 PanService;PandoraService;d:\program files\PANDORA.TV\PanService\PandoraService.exe [2012.03.25. 22:52 624856]
S2 SkypeUpdate;Skype Updater;d:\program files\Skype\Updater\Updater.exe [2012.02.29. 8:50 158856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;d:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012.04.10. 14:51 253088]
S3 MBAMProtector;MBAMProtector;d:\windows\system32\drivers\mbam.sys [2012.04.17. 16:53 22344]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
Contents of the 'Scheduled Tasks' folder
.
2012-03-26 d:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1417001333-412668190-682003330-1003Core.job
- d:\documents and settings\l\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-03-25 20:36]
.
2012-03-26 d:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1417001333-412668190-682003330-1003UA.job
- d:\documents and settings\l\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-03-25 20:36]
.
.
------- Supplementary Scan -------
.
TCP: DhcpNameServer = 192.168.1.254
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-04-19 20:33
Windows 5.1.2600 Szervizcsomag 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(472)
d:\windows\system32\Ati2evxx.dll
d:\windows\system32\atiadlxx.dll
.
Completion time: 2012-04-19 20:35:42 - machine was rebooted
ComboFix-quarantined-files.txt 2012-04-19 18:35
ComboFix2.txt 2012-04-19 17:48
.
Pre-Run: 114 378 625 024 bájt szabad
Post-Run: 114 362 548 224 bájt szabad
.
- - End Of File - - 6F4E6F2843C5AF6E276B6CC236A2CA4C

Miert van ezen a gepen 3x Windows??


Script készítés:
Kinyitunk - Notepadot (Jegyzetfüzetet)igy: Start>futtatás>beírod: notepad
és bemásolod- a Kód: címszó alatt található zöld textet(Kód: szó nélkül), aztán a notepadba beillesztett textet elmentjük scriptnek az asztalra , úgy:- Fájl>Mentés Másként>Fájlnév>CFScript.txt>Fájl típusa>Minden fájl>Mentés.(Ásztálra),.Kész, az astalon lévő CFScript txt húzzunk rá a ComboFix ikonnyara. Es mostan megcsinalod eztett:

A combofix maga elindul es lehet hogy restartol es befejezi a scent.A naplojat tedd ide, ha restartol, akkor mar mehet a windowsba.

ComboFix 12-04-19.01 - l 012.04.19. 19:38:44.1.1 - x86 NETWORK
Microsoft Windows XP Professional 5.1.2600.2.1250.36.1038.18.1023.829 [GMT 2:00]
Running from: d:\documents and settings\l\Dokumentumok\Downloads\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
d:\windows\msmqinst.log
.
.
((((((((((((((((((((((((( Files Created from 2012-03-19 to 2012-04-19 )))))))))))))))))))))))))))))))
.
.
2012-04-19 17:15 . 2012-04-19 17:15 -------- d-----w- D:\_OTL
2012-04-19 14:00 . 2012-04-19 14:00 512 ----a-w- D:\PhysicalMBR.bin
2012-04-18 17:43 . 2012-04-18 17:44 -------- d-----w- D:\UsbFix
2012-04-02 16:14 . 2012-04-02 16:15 111 ---ha-w- D:\sys20370.bin
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="d:\program files\uTorrent\uTorrent.exe" [2012-04-05 742264]
"Skype"="d:\program files\Skype\Phone\Skype.exe" [2012-02-29 17148552]
"DAEMON Tools Lite"="d:\program files\DAEMON Tools Lite\DTLite.exe" [2011-11-10 3514176]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="d:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-02-14 98304]
"RTHDCPL"="RTHDCPL.EXE" [2008-07-23 16804864]
"LogMeIn Hamachi Ui"="d:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"Malwarebytes' Anti-Malware"="d:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="d:\windows\system32\CTFMON.EXE" [2004-08-18 15360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2012-03-25 20:36 116648 ----atw- d:\documents and settings\l\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"d:\\Program Files\\Opera\\opera.exe"=
"d:\\Program Files\\Vuze\\Azureus.exe"=
"d:\\Program Files\\Veetle\\Player\\VeetleNet.exe"=
"d:\\Program Files\\LucasArts\\Star Wars Jedi Knight Jedi Academy\\GameData\\jamp.exe"=
"d:\\Program Files\\SopCast\\SopCast.exe"=
"d:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\\Program Files\\Skype\\Phone\\Skype.exe"=
"d:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"d:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"d:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"d:\\Program Files\\PANDORA.TV\\PanService\\PandoraService.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"6302:TCP"= 6302:TCP:ggnhrj
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;d:\windows\system32\drivers\dtsoftbus01.sys [2012.03.29. 16:31 239168]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;d:\program files\LogMeIn Hamachi\hamachi-2.exe [2012.02.28. 17:38 1373576]
S2 PanService;PandoraService;d:\program files\PANDORA.TV\PanService\PandoraService.exe [2012.03.25. 22:52 624856]
S2 SkypeUpdate;Skype Updater;d:\program files\Skype\Updater\Updater.exe [2012.02.29. 8:50 158856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;d:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012.04.10. 14:51 253088]
S3 MBAMProtector;MBAMProtector;d:\windows\system32\drivers\mbam.sys [2012.04.17. 16:53 22344]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
tcatbf
.
Contents of the 'Scheduled Tasks' folder
.
2012-03-26 d:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1417001333-412668190-682003330-1003Core.job
- d:\documents and settings\l\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-03-25 20:36]
.
2012-03-26 d:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1417001333-412668190-682003330-1003UA.job
- d:\documents and settings\l\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-03-25 20:36]
.
.
------- Supplementary Scan -------
.
TCP: DhcpNameServer = 192.168.1.254
.
- - - - ORPHANS REMOVED - - - -
.
MSConfigStartUp-ApnUpdater - d:\program files\Ask.com\Updater\Updater.exe
AddRemove-AVG Secure Search - d:\program files\AVG Secure Search\UNINSTALL.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-04-19 19:46
Windows 5.1.2600 Szervizcsomag 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(472)
d:\windows\system32\Ati2evxx.dll
d:\windows\system32\atiadlxx.dll
.
Completion time: 2012-04-19 19:48:42
ComboFix-quarantined-files.txt 2012-04-19 17:48
.
Pre-Run: 114 417 074 176 bájt szabad
Post-Run: 114 371 080 192 bájt szabad
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(4)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(4)\WINDOWS="Microsoft Windows XP Professional - magyar" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional - magyar" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(5)\WINDOWS="Microsoft Windows XP Professional - magyar" /NOEXECUTE=OPTIN /FASTDETECT
.
- - End Of File - - 3D67405B4C5615FA5E197881F4801139

Ok, futtasd csokkentet modban a combofixet
http://www.bleepingcomputer.com/downloa ... s/combofix
naplojat tedd ide.

All processes killed
========== OTL ==========
Service tcatbf stopped successfully!
Service tcatbf deleted successfully!
D:\WINDOWS\system32\dbhqijtf.dll moved successfully.
Service vToolbarUpdater10.2.0 stopped successfully!
Service vToolbarUpdater10.2.0 deleted successfully!
D:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe moved successfully.
Service MBAMService stopped successfully!
Service MBAMService deleted successfully!
D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe moved successfully.
Registry key HKEY_USERS\S-1-5-21-1417001333-412668190-682003330-1003\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.
HKU\S-1-5-21-1417001333-412668190-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
File HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\avg@toolbar: D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.
D:\Program Files\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.
File D:\Program Files\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll not found.
Registry value HKEY_USERS\S-1-5-21-1417001333-412668190-682003330-1003\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
D:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol\ deleted successfully.
Invalid CLSID key: D:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll
File D:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll not found.
D:\WINDOWS\SET3.tmp deleted successfully.
D:\WINDOWS\SET4.tmp deleted successfully.
D:\WINDOWS\SET8.tmp deleted successfully.
D:\WINDOWS\System32\CONFIG.TMP deleted successfully.
D:\WINDOWS\tasks\Adobe Flash Player Updater.job moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\skin folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\zh-tw folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\zh-cn folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\tr folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\sr folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\sk folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\ru folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\pt-br folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\pt folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\pl folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\nl folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\ms folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\ko folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\ja folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\it folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\id folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\hu folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\fr folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\es-es folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\es folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\en folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\de folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\da folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale\cs folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules\locale folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\modules folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\locale\en-US folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\locale folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\components\FF4 folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\components folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\chrome folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3 folder moved successfully.
D:\Documents and Settings\All Users\Application Data\AVG Secure Search folder moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\vProt deleted successfully.
D:\Program Files\AVG Secure Search\vprot.exe moved successfully.
========== COMMANDS ==========
D:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: l
->Temp folder emptied: 161598765 bytes
->Temporary Internet Files folder emptied: 10580014 bytes
->Google Chrome cache emptied: 356234822 bytes
->Opera cache emptied: 128390922 bytes
->Flash cache emptied: 8994 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2287230 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 657578132 bytes

Total Files Cleaned = 1 256,00 mb

Restore points cleared and new OTL Restore Point set!

OTL by OldTimer - Version 3.2.40.0 log created on 04192012_191539

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

Irtam tegnap, mindent csinalj csokkentet modban,
ha nem megy akkor az otl utan tolds le az AVG removert.

Avg-s link nem működik, OTL-t meg csökkentett módba kell futtatni, vagy jó az alap?

1:AZ AVG virusvedelmet szed le a geprol, es hasznald a letelepito programot is.
http://www.avg.com/us-en/utilities

2:Igen Ott van egy csunya virus.
Tehat most futtasd az OTL-programot, a bealitasokat hagyd ugy ahogy van.

Az aljan az ablakjaba masold be ezt a textet, es most raklikelsz az RunFix-Gombra.

A naplojat tedd ide.

http://www.2shared.com/document/el4-qu0d/OTL.htmlOLT.TXT

OTL Extras logfile created on: 2012.04.19. 15:51:55 - Run 1
OTL by OldTimer - Version 3.2.40.0 Folder = D:\Documents and Settings\l\Dokumentumok\Downloads
Windows XP Professional Edition Szervizcsomag 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 0000040E | Country: Magyarország | Language: HUN | Date Format: yyyy.MM.dd.

1023,23 Mb Total Physical Memory | 833,52 Mb Available Physical Memory | 81,46% Memory free
2,39 Gb Paging File | 2,33 Gb Available in Paging File | 97,19% Paging File free
Paging file location(s): D:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files
Drive C: | 97,65 Gb Total Space | 12,95 Gb Free Space | 13,26% Space Free | Partition Type: NTFS
Drive D: | 146,49 Gb Total Space | 105,15 Gb Free Space | 71,78% Space Free | Partition Type: NTFS
Drive E: | 37,57 Gb Total Space | 36,38 Gb Free Space | 96,83% Space Free | Partition Type: NTFS
Drive L: | 184,04 Gb Total Space | 85,97 Gb Free Space | 46,71% Space Free | Partition Type: NTFS

Computer Name: SDGF-D881730D9B | User Name: l | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Opera.HTML] -- D:\Program Files\Opera\Opera.exe (Opera Software)
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-1417001333-412668190-682003330-1003\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- D:\Program Files\Opera\Opera.exe (Opera Software)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "D:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "D:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"6302:TCP" = 6302:TCP:*:Enabled:ggnhrj
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"D:\Program Files\Veetle\Player\VeetleNet.exe" = D:\Program Files\Veetle\Player\VeetleNet.exe:*:Enabled:VeetleNet -- ()

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\Program Files\Opera\opera.exe" = D:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"D:\Program Files\Vuze\Azureus.exe" = D:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus / Vuze -- (Vuze Inc.)
"D:\Program Files\Veetle\Player\VeetleNet.exe" = D:\Program Files\Veetle\Player\VeetleNet.exe:*:Enabled:VeetleNet -- ()
"D:\Program Files\LucasArts\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe" = D:\Program Files\LucasArts\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe:*:Enabled:Jedi Academy MultiPlayer -- (Activision Inc)
"D:\Program Files\SopCast\SopCast.exe" = D:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (www.sopcast.com)
"D:\Program Files\uTorrent\uTorrent.exe" = D:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"D:\Program Files\PANDORA.TV\PanService\PandoraService.exe" = D:\Program Files\PANDORA.TV\PanService\PandoraService.exe:*:Enabled:PandoraService -- (Pandora.TV)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{053A8677-8139-6869-0157-21F36368B5B2}" = CCC Help Danish
"{08ED1CD1-1CB1-B7CE-677E-110D0A118590}" = AMD Catalyst Install Manager
"{09713414-6CBB-F885-8784-E3202514A97D}" = CCC Help Chinese Traditional
"{16EB8FB7-A791-B483-FBF2-81E56AD1E936}" = Catalyst Control Center Localization All
"{1A47E3FB-A5FE-C27E-B080-8EAF73B782AC}" = Catalyst Control Center
"{1EECBA68-8BE4-4076-94DF-E9ED206B1D21}" = Star Wars Jedi Knight Jedi Academy
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{207DE839-8CE6-F8E7-6E0A-D75AD84C1629}" = CCC Help Spanish
"{21659FCD-EA29-ABE9-2E19-0EA64C9FB37B}" = CCC Help Swedish
"{221F93A5-4ABE-BFB5-781E-E1E38A7102DB}" = CCC Help Portuguese
"{27555031-A116-4EC6-9991-7B400142A936}" = HP PSC & OfficeJet 6.1.A
"{2B4041FE-0E77-BE39-D31A-057B2F7F4CFF}" = CCC Help Chinese Standard
"{2C7946AF-8AE9-6369-0075-7A3419F59441}" = Catalyst Control Center InstallProxy
"{2ECA81CA-D932-4AD3-AD59-BF5CCF099C83}" = Catalyst Control Center - Branding
"{33AEE368-3F04-27E3-39C2-F41E1C4611B6}" = CCC Help English
"{350C940e-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{46192793-5011-565F-41A3-3712B5EC0608}" = CCC Help Finnish
"{4D62FAE5-B503-40CA-A33B-2BFAA6574155}" = LittlePPT
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{739126B3-1B80-4F9F-8D59-312A19633E1A}_is1" = MP4 player
"{76AFBB49-1402-0FD2-E324-9B86A8029CA6}" = CCC Help Japanese
"{7EB0954B-30A8-8414-092B-792BA3A82F20}" = ccc-utility
"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder
"{8CF61023-24BD-1356-8B84-75863E711DA2}" = CCC Help Czech
"{8EE0102A-1D61-8631-B4B2-CDF6BDF2BDF6}" = CCC Help Thai
"{903C704F-B35E-CB0C-6475-A851A82FE00E}" = CCC Help Hungarian
"{90AF0409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office PowerPoint Viewer 2003
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9F0C2B61-2958-EC02-1852-83FBE7BF2992}" = CCC Help Dutch
"{AB23A8EF-1246-9E17-0C87-477B2C089E2B}" = CCC Help German
"{AC35BEC3-AC61-F2F5-217A-70FA16DFD3C8}" = Catalyst Control Center Graphics Previews Common
"{B5ACA897-3570-F936-43DD-7E6B736B1A6F}" = CCC Help Korean
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B8CB7B7D-C106-A95E-9E93-203BD81F4D4F}" = CCC Help Russian
"{BE3DE6C8-5886-424E-B119-2B04DF05D342}" = OpenOffice.org 3.3
"{C6812939-B117-48E6-A3BA-1709C14A3C8C}" = Scan
"{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA
"{C927F550-AAAE-5653-73C0-F523951417B8}" = CCC Help French
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{DDE3EF07-816C-7D76-F7F1-E16262D4439F}" = CCC Help Italian
"{E167EA39-6D3B-D947-F8C4-2FCEEE41F803}" = CCC Help Polish
"{E2494AD8-314D-44F8-B39C-4358A60DC184}" = LogMeIn Hamachi
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.8
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F7FEEF47-4D61-93DB-5926-D9656DCC03CE}" = CCC Help Norwegian
"{F8EF8AC9-0CD7-56BF-B42A-8DFB9E85448E}" = CCC Help Turkish
"{FB150FB5-B153-6866-918D-3865C73152E5}" = CCC Help Greek
"4F6D5E84-5826-4394-9F40-3A9A19165651_is1" = Pandora Service
"8461-7759-5462-8226" = Vuze
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE v.6.80
"AVG Secure Search" = AVG Security Toolbar
"AVS Screen Capture_is1" = AVS Screen Capture version 2.0.1
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS Video Editor_is1" = AVS Video Editor 6
"AVS Video Recorder_is1" = AVS Video Recorder 2.4
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4
"CCleaner" = CCleaner
"DAEMON Tools Lite" = DAEMON Tools Lite
"easypdf" = Easy PDF V1.5
"Foxit Reader_is1" = Foxit Reader 5.1
"LogMeIn Hamachi" = LogMeIn Hamachi
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware 1.61.0.1400 verzió
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Opera 11.62.1347" = Opera 11.62
"PIXresizer_is1" = PIXresizer
"SopCast" = SopCast 3.5.0
"Star Wars Jedi Knight: Jedi Academy [Honosítás]" = Star Wars Jedi Knight: Jedi Academy [Honosítás]
"SubtitleWorkshop" = Subtitle Workshop 2.51
"The KMPlayer" = The KMPlayer (remove only)
"Usbfix" = UsbFix By El Desaparecido
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"WinRAR archiver" = WinRAR 4.11 (32-bit)
"WMFDist11" = Windows Media Format 11 runtime

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1417001333-412668190-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"TimeAdjuster" = Time Adjuster STANDARD 3.1

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2012.04.16. 8:31:56 | Computer Name = SDGF-D881730D9B | Source = crypt32 | ID = 131080
Description = Nem sikerült lekérni az automatikus frissítés segítségével a külső
féltől származó legfelső szintű listát a következőtől: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>.
Hiba: A hálózati kapcsolat nem létezik.

Error - 2012.04.16. 15:58:01 | Computer Name = SDGF-D881730D9B | Source = Application Hang | ID = 1002
Description = Nem válaszoló alkalmazás: opera.exe, verzió: 11.62.1347.0, nem válaszoló
modul: hungapp, verzió: 0.0.0.0, memóriacím: 0x00000000.

Error - 2012.04.17. 7:37:39 | Computer Name = SDGF-D881730D9B | Source = PandoraService.exe | ID = 0
Description =

Error - 2012.04.17. 7:39:42 | Computer Name = SDGF-D881730D9B | Source = crypt32 | ID = 131080
Description = Nem sikerült lekérni az automatikus frissítés segítségével a külső
féltől származó legfelső szintű listát a következőtől: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>.
Hiba: A kiszolgálónév vagy -cím nem azonosítható.

Error - 2012.04.17. 7:39:42 | Computer Name = SDGF-D881730D9B | Source = crypt32 | ID = 131080
Description = Nem sikerült lekérni az automatikus frissítés segítségével a külső
féltől származó legfelső szintű listát a következőtől: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>.
Hiba: A hálózati kapcsolat nem létezik.

Error - 2012.04.17. 7:47:27 | Computer Name = SDGF-D881730D9B | Source = PandoraService.exe | ID = 0
Description =

Error - 2012.04.17. 7:49:27 | Computer Name = SDGF-D881730D9B | Source = crypt32 | ID = 131080
Description = Nem sikerült lekérni az automatikus frissítés segítségével a külső
féltől származó legfelső szintű listát a következőtől: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>.
Hiba: A kiszolgálónév vagy -cím nem azonosítható.

Error - 2012.04.17. 7:49:27 | Computer Name = SDGF-D881730D9B | Source = crypt32 | ID = 131080
Description = Nem sikerült lekérni az automatikus frissítés segítségével a külső
féltől származó legfelső szintű listát a következőtől: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>.
Hiba: A hálózati kapcsolat nem létezik.

Error - 2012.04.18. 15:12:59 | Computer Name = SDGF-D881730D9B | Source = Application Hang | ID = 1002
Description = Nem válaszoló alkalmazás: OTL.exe, verzió: 3.2.40.0, nem válaszoló
modul: hungapp, verzió: 0.0.0.0, memóriacím: 0x00000000.

Error - 2012.04.18. 15:35:12 | Computer Name = SDGF-D881730D9B | Source = Application Hang | ID = 1002
Description = Nem válaszoló alkalmazás: OTL.exe, verzió: 3.2.40.0, nem válaszoló
modul: hungapp, verzió: 0.0.0.0, memóriacím: 0x00000000.

[ System Events ]
Error - 2012.04.09. 6:40:29 | Computer Name = SDGF-D881730D9B | Source = Service Control Manager | ID = 7023
Description = A szolgáltatás (Helper System) leállt a következő hibával: %%1114

Error - 2012.04.09. 6:40:31 | Computer Name = SDGF-D881730D9B | Source = W32Time | ID = 39452689
Description = Időszolgáltató NTP-ügyfél: A manuálisan beállított partner ("time.windows.com,0x1")
DNS-címének keresésekor hiba történt. Az NTP-ügyfél 15 percen belül ismét megkísérli
a DNS-címkeresést. A hiba: Szoftvercsatorna-művelet végrehajtására történt kísérlet
egy nem elérhető állomáson. (0x80072751)

Error - 2012.04.09. 6:40:31 | Computer Name = SDGF-D881730D9B | Source = W32Time | ID = 39452701
Description = Az időszolgáltatás NTP-ügyfele úgy van konfigurálva, hogy egy vagy
több forrásból kérdezze le az időt, de egyik forrás sem használható. 14 percig nem
történik kísérlet egyik forrás elérésére sem. Az NTP-ügyfélhez nincsen pontos időforrás.


Error - 2012.04.09. 6:40:31 | Computer Name = SDGF-D881730D9B | Source = W32Time | ID = 39452689
Description = Időszolgáltató NTP-ügyfél: A manuálisan beállított partner ("time.windows.com,0x1")
DNS-címének keresésekor hiba történt. Az NTP-ügyfél 15 percen belül ismét megkísérli
a DNS-címkeresést. A hiba: Szoftvercsatorna-művelet végrehajtására történt kísérlet
egy nem elérhető állomáson. (0x80072751)

Error - 2012.04.09. 6:40:31 | Computer Name = SDGF-D881730D9B | Source = W32Time | ID = 39452701
Description = Az időszolgáltatás NTP-ügyfele úgy van konfigurálva, hogy egy vagy
több forrásból kérdezze le az időt, de egyik forrás sem használható. 14 percig nem
történik kísérlet egyik forrás elérésére sem. Az NTP-ügyfélhez nincsen pontos időforrás.


Error - 2012.04.10. 6:10:31 | Computer Name = SDGF-D881730D9B | Source = Service Control Manager | ID = 7023
Description = A szolgáltatás (Helper System) leállt a következő hibával: %%1114

Error - 2012.04.10. 15:24:39 | Computer Name = SDGF-D881730D9B | Source = Service Control Manager | ID = 7023
Description = A szolgáltatás (Helper System) leállt a következő hibával: %%1114

Error - 2012.04.10. 15:26:06 | Computer Name = SDGF-D881730D9B | Source = Service Control Manager | ID = 7022
Description = A következő szolgáltatás nem indul el: PandoraService.

Error - 2012.04.11. 6:37:22 | Computer Name = SDGF-D881730D9B | Source = Service Control Manager | ID = 7023
Description = A szolgáltatás (Helper System) leállt a következő hibával: %%1114

Error - 2012.04.11. 9:38:14 | Computer Name = SDGF-D881730D9B | Source = Service Control Manager | ID = 7023
Description = A szolgáltatás (Helper System) leállt a következő hibával: %%1114


< End of report >

ok, van időnk,

Holnap küldöm, most már alszom.

Csinald csokkentet modban, a halozattal,,es maradj ott

汐慥敳眠楡⁴桷汩⁥䵗䍉挠浯楰敬⁳灵慤整⁤位⁆楦敬⹳Model Name Size
SAMSUNG HD502HJ \\.\PHYSICALDRIVE0 500105249280
Android Adapter USB Device \\.\PHYSICALDRIVE1
Android Adapter USB Device \\.\PHYSICALDRIVE2
Bootable Name Size Type
TRUE Lemez: #0, partíció: #0 104855837184 Installable File System
Lemez: #0, partíció: #1 197628740096 Extended w/Extended Int 13
Lemez: #0, partíció: #2 197611487232 Installable File System
Lemez: #0, partíció: #3 8225280 16-bit FAT


OTL lefagy a modulesnél.

1:Futtasd ujbol az ROGUEKILLERT es nyomd be a PROXYFIX gombot,
2:csinalj egy disk.bat
fajlot es futtasd le.



log.txt, tedd ide.

3:Tolds le az asztalra
http://oldtimer.geekstogo.com/OTL.exe
Futtasd pipazd be ALL USERS,LOOP,PURITY,
az aljan az ablkjaba masold be a textet es klik RUNSCAN


OTL.txt a Extras.txt, tedd ide

Google Chromeot, de Operába se nyitja meg. De közben átküldettem emailben ismerősömmel, itt a napló:



20:50:49.0109 3044 TDSS rootkit removing tool 2.7.17.0 Feb 29 2012 14:02:24
20:50:49.0218 3044 ============================================================
20:50:49.0218 3044 Current date / time: 2012/04/18 20:50:49.0218
20:50:49.0218 3044 SystemInfo:
20:50:49.0218 3044
20:50:49.0218 3044 OS Version: 5.1.2600 ServicePack: 2.0
20:50:49.0218 3044 Product type: Workstation
20:50:49.0218 3044 ComputerName: SDGF-D881730D9B
20:50:49.0234 3044 UserName: l
20:50:49.0234 3044 Windows directory: D:\WINDOWS
20:50:49.0234 3044 System windows directory: D:\WINDOWS
20:50:49.0234 3044 Processor architecture: Intel x86
20:50:49.0234 3044 Number of processors: 1
20:50:49.0234 3044 Page size: 0x1000
20:50:49.0234 3044 Boot type: Normal boot
20:50:49.0234 3044 ============================================================
20:50:52.0484 3044 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
20:50:52.0500 3044 \Device\Harddisk0\DR0:
20:50:52.0515 3044 MBR used
20:50:52.0515 3044 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xC34F28D
20:50:52.0531 3044 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0xC34F348, BlocksNum 0x124FAA77
20:50:52.0531 3044 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1E849DFE, BlocksNum 0x4B220E9
20:50:52.0531 3044 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x2336C000, BlocksNum 0x17014800
20:50:52.0531 3044 \Device\Harddisk0\DR0\Partition4: MBR, Type 0x4, StartLBA 0x3A380D80, BlocksNum 0x3EC1
20:50:52.0734 3044 Initialize success
20:50:52.0734 3044 ============================================================
20:51:12.0484 1740 ============================================================
20:51:12.0484 1740 Scan started
20:51:12.0484 1740 Mode: Manual; TDLFS;
20:51:12.0484 1740 ============================================================
20:51:12.0765 1740 Abiosdsk - ok
20:51:12.0796 1740 abp480n5 - ok
20:51:12.0875 1740 ACPI (4b60d4e72648207eb98287464fe3489d) D:\WINDOWS\system32\DRIVERS\ACPI.sys
20:51:12.0875 1740 ACPI - ok
20:51:12.0921 1740 ACPIEC (582c901174a7f0733c6fe41c37c9a80b) D:\WINDOWS\system32\drivers\ACPIEC.sys
20:51:12.0937 1740 ACPIEC - ok
20:51:12.0968 1740 adpu160m - ok
20:51:13.0031 1740 aec (841f385c6cfaf66b58fbd898722bb4f0) D:\WINDOWS\system32\drivers\aec.sys
20:51:13.0046 1740 aec - ok
20:51:13.0078 1740 AFD (5ac495f4cb807b2b98ad2ad591e6d92e) D:\WINDOWS\System32\drivers\afd.sys
20:51:13.0078 1740 AFD - ok
20:51:13.0109 1740 Aha154x - ok
20:51:13.0140 1740 aic78u2 - ok
20:51:13.0187 1740 aic78xx - ok
20:51:13.0281 1740 AliIde - ok
20:51:13.0328 1740 amsint - ok
20:51:13.0375 1740 asc - ok
20:51:13.0406 1740 asc3350p - ok
20:51:13.0453 1740 asc3550 - ok
20:51:13.0531 1740 AsyncMac (02000abf34af4c218c35d257024807d6) D:\WINDOWS\system32\DRIVERS\asyncmac.sys
20:51:13.0546 1740 AsyncMac - ok
20:51:13.0593 1740 atapi (cdfe4411a69c224bd1d11b2da92dac51) D:\WINDOWS\system32\DRIVERS\atapi.sys
20:51:13.0609 1740 atapi - ok
20:51:13.0640 1740 Atdisk - ok
20:51:13.0968 1740 ati2mtag (b4368b39a18630c3ec8d7f496f76f19b) D:\WINDOWS\system32\DRIVERS\ati2mtag.sys
20:51:14.0406 1740 ati2mtag - ok
20:51:14.0531 1740 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) D:\WINDOWS\system32\DRIVERS\atmarpc.sys
20:51:14.0531 1740 Atmarpc - ok
20:51:14.0578 1740 audstub (d9f724aa26c010a217c97606b160ed68) D:\WINDOWS\system32\DRIVERS\audstub.sys
20:51:14.0578 1740 audstub - ok
20:51:14.0656 1740 Beep (da1f27d85e0d1525f6621372e7b685e9) D:\WINDOWS\system32\drivers\Beep.sys
20:51:14.0671 1740 Beep - ok
20:51:14.0750 1740 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) D:\WINDOWS\system32\drivers\cbidf2k.sys
20:51:14.0750 1740 cbidf2k - ok
20:51:14.0781 1740 cd20xrnt - ok
20:51:14.0828 1740 Cdaudio (c1b486a7658353d33a10cc15211a873b) D:\WINDOWS\system32\drivers\Cdaudio.sys
20:51:14.0828 1740 Cdaudio - ok
20:51:14.0921 1740 Cdfs (cd7d5152df32b47f4e36f710b35aae02) D:\WINDOWS\system32\drivers\Cdfs.sys
20:51:14.0921 1740 Cdfs - ok
20:51:14.0953 1740 Cdrom (af9c19b3100fe010496b1a27181fbf72) D:\WINDOWS\system32\DRIVERS\cdrom.sys
20:51:14.0968 1740 Cdrom - ok
20:51:15.0000 1740 Changer - ok
20:51:15.0078 1740 CmdIde - ok
20:51:15.0156 1740 Cpqarray - ok
20:51:15.0218 1740 dac2w2k - ok
20:51:15.0265 1740 dac960nt - ok
20:51:15.0343 1740 Disk (00ca44e4534865f8a3b64f7c0984bff0) D:\WINDOWS\system32\DRIVERS\disk.sys
20:51:15.0343 1740 Disk - ok
20:51:15.0437 1740 dmboot (89e3734f8b92bc9322b0b4331e94bcb4) D:\WINDOWS\system32\drivers\dmboot.sys
20:51:15.0453 1740 dmboot - ok
20:51:15.0500 1740 dmio (1811ad47c0ac9a082f1761138e2f2022) D:\WINDOWS\system32\drivers\dmio.sys
20:51:15.0515 1740 dmio - ok
20:51:15.0546 1740 dmload (e9317282a63ca4d188c0df5e09c6ac5f) D:\WINDOWS\system32\drivers\dmload.sys
20:51:15.0546 1740 dmload - ok
20:51:15.0640 1740 DMusic (a6f881284ac1150e37d9ae47ff601267) D:\WINDOWS\system32\drivers\DMusic.sys
20:51:15.0656 1740 DMusic - ok
20:51:15.0687 1740 dpti2o - ok
20:51:15.0734 1740 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) D:\WINDOWS\system32\drivers\drmkaud.sys
20:51:15.0750 1740 drmkaud - ok
20:51:15.0812 1740 dtsoftbus01 (fb38473835476a6fb272215a1d972af9) D:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys
20:51:15.0828 1740 dtsoftbus01 - ok
20:51:15.0906 1740 Fastfat (3117f595e9615e04f05a54fc15a03b20) D:\WINDOWS\system32\drivers\Fastfat.sys
20:51:15.0906 1740 Fastfat - ok
20:51:15.0953 1740 Fdc (ced2e8396a8838e59d8fd529c680e02c) D:\WINDOWS\system32\DRIVERS\fdc.sys
20:51:15.0953 1740 Fdc - ok
20:51:16.0000 1740 Fips (3e16f14a26c5f2f663a14669a0e09544) D:\WINDOWS\system32\drivers\Fips.sys
20:51:16.0000 1740 Fips - ok
20:51:16.0031 1740 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) D:\WINDOWS\system32\DRIVERS\flpydisk.sys
20:51:16.0031 1740 Flpydisk - ok
20:51:16.0093 1740 FltMgr (157754f0df355a9e0a6f54721914f9c6) D:\WINDOWS\system32\DRIVERS\fltMgr.sys
20:51:16.0109 1740 FltMgr - ok
20:51:16.0140 1740 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) D:\WINDOWS\system32\drivers\Fs_Rec.sys
20:51:16.0140 1740 Fs_Rec - ok
20:51:16.0171 1740 Ftdisk (44225407f69666099c4d4c6bc9cd804d) D:\WINDOWS\system32\DRIVERS\ftdisk.sys
20:51:16.0171 1740 Ftdisk - ok
20:51:16.0218 1740 Gpc (c0f1d4a21de5a415df8170616703debf) D:\WINDOWS\system32\DRIVERS\msgpc.sys
20:51:16.0218 1740 Gpc - ok
20:51:16.0265 1740 hamachi (833051c6c6c42117191935f734cfbd97) D:\WINDOWS\system32\DRIVERS\hamachi.sys
20:51:16.0265 1740 hamachi - ok
20:51:16.0312 1740 HDAudBus (3fcc124b6e08ee0e9351f717dd136939) D:\WINDOWS\system32\DRIVERS\HDAudBus.sys
20:51:16.0328 1740 HDAudBus - ok
20:51:16.0406 1740 hidusb (1de6783b918f540149aa69943bdfeba8) D:\WINDOWS\system32\DRIVERS\hidusb.sys
20:51:16.0406 1740 hidusb - ok
20:51:16.0437 1740 hpn - ok
20:51:16.0546 1740 HPZid412 (30ca91e657cede2f95359d6ef186f650) D:\WINDOWS\system32\DRIVERS\HPZid412.sys
20:51:16.0546 1740 HPZid412 - ok
20:51:16.0593 1740 HPZipr12 (efd31afa752aa7c7bbb57bcbe2b01c78) D:\WINDOWS\system32\DRIVERS\HPZipr12.sys
20:51:16.0593 1740 HPZipr12 - ok
20:51:16.0687 1740 HPZius12 (7ac43c38ca8fd7ed0b0a4466f753e06e) D:\WINDOWS\system32\DRIVERS\HPZius12.sys
20:51:16.0703 1740 HPZius12 - ok
20:51:16.0750 1740 HTTP (c19b522a9ae0bbc3293397f3055e80a1) D:\WINDOWS\system32\Drivers\HTTP.sys
20:51:16.0765 1740 HTTP - ok
20:51:16.0812 1740 i2omgmt - ok
20:51:16.0843 1740 i2omp - ok
20:51:16.0921 1740 i8042prt (cced51afecf99e8d7b9e2ab45cf3ceb2) D:\WINDOWS\system32\DRIVERS\i8042prt.sys
20:51:16.0921 1740 i8042prt - ok
20:51:16.0953 1740 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) D:\WINDOWS\system32\DRIVERS\imapi.sys
20:51:16.0953 1740 Imapi - ok
20:51:17.0015 1740 ini910u - ok
20:51:17.0312 1740 IntcAzAudAddService (4aaa8312732655f93a254d1fa695eb79) D:\WINDOWS\system32\drivers\RtkHDAud.sys
20:51:17.0484 1740 IntcAzAudAddService - ok
20:51:17.0515 1740 IntelIde - ok
20:51:17.0562 1740 intelppm (4582c0bbd89ec62a821f02cfef12c471) D:\WINDOWS\system32\DRIVERS\intelppm.sys
20:51:17.0562 1740 intelppm - ok
20:51:17.0593 1740 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) D:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
20:51:17.0609 1740 Ip6Fw - ok
20:51:17.0671 1740 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) D:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
20:51:17.0671 1740 IpFilterDriver - ok
20:51:17.0718 1740 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) D:\WINDOWS\system32\DRIVERS\ipinip.sys
20:51:17.0718 1740 IpInIp - ok
20:51:17.0781 1740 IpNat (b5a8e215ac29d24d60b4d1250ef05ace) D:\WINDOWS\system32\DRIVERS\ipnat.sys
20:51:17.0796 1740 IpNat - ok
20:51:17.0859 1740 IPSec (64537aa5c003a6afeee1df819062d0d1) D:\WINDOWS\system32\DRIVERS\ipsec.sys
20:51:17.0859 1740 IPSec - ok
20:51:17.0906 1740 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) D:\WINDOWS\system32\DRIVERS\irenum.sys
20:51:17.0921 1740 IRENUM - ok
20:51:17.0984 1740 isapnp (ae9857353a6d45f101c4496789585c25) D:\WINDOWS\system32\DRIVERS\isapnp.sys
20:51:18.0000 1740 isapnp - ok
20:51:18.0093 1740 Kbdclass (059b59b694dbb143a5b627187c9d8860) D:\WINDOWS\system32\DRIVERS\kbdclass.sys
20:51:18.0109 1740 Kbdclass - ok
20:51:18.0218 1740 kmixer (d93cad07c5683db066b0b2d2d3790ead) D:\WINDOWS\system32\drivers\kmixer.sys
20:51:18.0234 1740 kmixer - ok
20:51:18.0281 1740 KSecDD (eb7ffe87fd367ea8fca0506f74a87fbb) D:\WINDOWS\system32\drivers\KSecDD.sys
20:51:18.0281 1740 KSecDD - ok
20:51:18.0343 1740 lbrtfdc - ok
20:51:18.0437 1740 MBAMProtector (fb097bbc1a18f044bd17bd2fccf97865) D:\WINDOWS\system32\drivers\mbam.sys
20:51:18.0453 1740 MBAMProtector - ok
20:51:18.0546 1740 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) D:\WINDOWS\system32\drivers\mnmdd.sys
20:51:18.0546 1740 mnmdd - ok
20:51:18.0625 1740 Modem (af00a5a5a613e165f3bdea187df796ec) D:\WINDOWS\system32\drivers\Modem.sys
20:51:18.0625 1740 Modem - ok
20:51:18.0687 1740 Mouclass (de28319707eb33dd721559110acd757d) D:\WINDOWS\system32\DRIVERS\mouclass.sys
20:51:18.0687 1740 Mouclass - ok
20:51:18.0750 1740 mouhid (6a79cb27d0e608a45638cd9468269a3e) D:\WINDOWS\system32\DRIVERS\mouhid.sys
20:51:18.0750 1740 mouhid - ok
20:51:18.0796 1740 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) D:\WINDOWS\system32\drivers\MountMgr.sys
20:51:18.0796 1740 MountMgr - ok
20:51:18.0828 1740 mraid35x - ok
20:51:18.0875 1740 MRxDAV (46edcc8f2db2f322c24f48785cb46366) D:\WINDOWS\system32\DRIVERS\mrxdav.sys
20:51:18.0875 1740 MRxDAV - ok
20:51:18.0937 1740 MRxSmb (1fd607fc67f7f7c633c3da65bfc53d18) D:\WINDOWS\system32\DRIVERS\mrxsmb.sys
20:51:18.0953 1740 MRxSmb - ok
20:51:19.0015 1740 Msfs (561b3a4333ca2dbdba28b5b956822519) D:\WINDOWS\system32\drivers\Msfs.sys
20:51:19.0015 1740 Msfs - ok
20:51:19.0062 1740 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) D:\WINDOWS\system32\drivers\MSKSSRV.sys
20:51:19.0062 1740 MSKSSRV - ok
20:51:19.0109 1740 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) D:\WINDOWS\system32\drivers\MSPCLOCK.sys
20:51:19.0109 1740 MSPCLOCK - ok
20:51:19.0156 1740 MSPQM (1988a33ff19242576c3d0ef9ce785da7) D:\WINDOWS\system32\drivers\MSPQM.sys
20:51:19.0156 1740 MSPQM - ok
20:51:19.0203 1740 mssmbios (469541f8bfd2b32659d5d463a6714bce) D:\WINDOWS\system32\DRIVERS\mssmbios.sys
20:51:19.0203 1740 mssmbios - ok
20:51:19.0234 1740 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) D:\WINDOWS\system32\drivers\Mup.sys
20:51:19.0250 1740 Mup - ok
20:51:19.0281 1740 NDIS (558635d3af1c7546d26067d5d9b6959e) D:\WINDOWS\system32\drivers\NDIS.sys
20:51:19.0281 1740 NDIS - ok
20:51:19.0328 1740 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) D:\WINDOWS\system32\DRIVERS\ndistapi.sys
20:51:19.0343 1740 NdisTapi - ok
20:51:19.0375 1740 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) D:\WINDOWS\system32\DRIVERS\ndisuio.sys
20:51:19.0390 1740 Ndisuio - ok
20:51:19.0421 1740 NdisWan (0b90e255a9490166ab368cd55a529893) D:\WINDOWS\system32\DRIVERS\ndiswan.sys
20:51:19.0437 1740 NdisWan - ok
20:51:19.0500 1740 NDProxy (59fc3fb44d2669bc144fd87826bb571f) D:\WINDOWS\system32\drivers\NDProxy.sys
20:51:19.0500 1740 NDProxy - ok
20:51:19.0531 1740 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) D:\WINDOWS\system32\DRIVERS\netbios.sys
20:51:19.0546 1740 NetBIOS - ok
20:51:19.0578 1740 NetBT (0c80e410cd2f47134407ee7dd19cc86b) D:\WINDOWS\system32\DRIVERS\netbt.sys
20:51:19.0593 1740 NetBT - ok
20:51:19.0671 1740 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) D:\WINDOWS\system32\drivers\Npfs.sys
20:51:19.0671 1740 Npfs - ok
20:51:19.0750 1740 Ntfs (b78be402c3f63dd55521f73876951cdd) D:\WINDOWS\system32\drivers\Ntfs.sys
20:51:19.0765 1740 Ntfs - ok
20:51:19.0859 1740 Null (73c1e1f395918bc2c6dd67af7591a3ad) D:\WINDOWS\system32\drivers\Null.sys
20:51:19.0875 1740 Null - ok
20:51:19.0921 1740 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) D:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
20:51:19.0921 1740 NwlnkFlt - ok
20:51:19.0968 1740 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) D:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
20:51:19.0968 1740 NwlnkFwd - ok
20:51:20.0046 1740 Parport (99d001d603b5c27c01fe9fc55b4bb181) D:\WINDOWS\system32\DRIVERS\parport.sys
20:51:20.0046 1740 Parport - ok
20:51:20.0109 1740 PartMgr (3334430c29dc338092f79c38ef7b4cd0) D:\WINDOWS\system32\drivers\PartMgr.sys
20:51:20.0109 1740 PartMgr - ok
20:51:20.0187 1740 ParVdm (4df92a889e7fe15ed3834d288a0271f5) D:\WINDOWS\system32\drivers\ParVdm.sys
20:51:20.0187 1740 ParVdm - ok
20:51:20.0250 1740 PCI (0827cc4cb7c97ef6d94e97927db55df8) D:\WINDOWS\system32\DRIVERS\pci.sys
20:51:20.0250 1740 PCI - ok
20:51:20.0281 1740 PCIDump - ok
20:51:20.0328 1740 PCIIde (fbf3cc42488fd2ce49f9427240cd5809) D:\WINDOWS\system32\DRIVERS\pciide.sys
20:51:20.0328 1740 PCIIde - ok
20:51:20.0359 1740 Pcmcia (eca393902f8b2ca5233cbb325f0b4488) D:\WINDOWS\system32\drivers\Pcmcia.sys
20:51:20.0375 1740 Pcmcia - ok
20:51:20.0421 1740 PDCOMP - ok
20:51:20.0453 1740 PDFRAME - ok
20:51:20.0500 1740 PDRELI - ok
20:51:20.0531 1740 PDRFRAME - ok
20:51:20.0562 1740 perc2 - ok
20:51:20.0593 1740 perc2hib - ok
20:51:20.0718 1740 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) D:\WINDOWS\system32\DRIVERS\raspptp.sys
20:51:20.0718 1740 PptpMiniport - ok
20:51:20.0781 1740 PSched (48671f327553dcf1d27f6197f622a668) D:\WINDOWS\system32\DRIVERS\psched.sys
20:51:20.0781 1740 PSched - ok
20:51:20.0812 1740 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) D:\WINDOWS\system32\DRIVERS\ptilink.sys
20:51:20.0812 1740 Ptilink - ok
20:51:20.0843 1740 ql1080 - ok
20:51:20.0875 1740 Ql10wnt - ok
20:51:20.0906 1740 ql12160 - ok
20:51:20.0921 1740 ql1240 - ok
20:51:20.0953 1740 ql1280 - ok
20:51:21.0000 1740 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) D:\WINDOWS\system32\DRIVERS\rasacd.sys
20:51:21.0000 1740 RasAcd - ok
20:51:21.0062 1740 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) D:\WINDOWS\system32\DRIVERS\rasl2tp.sys
20:51:21.0062 1740 Rasl2tp - ok
20:51:21.0093 1740 RasPppoe (7306eeed8895454cbed4669be9f79faa) D:\WINDOWS\system32\DRIVERS\raspppoe.sys
20:51:21.0093 1740 RasPppoe - ok
20:51:21.0125 1740 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) D:\WINDOWS\system32\DRIVERS\raspti.sys
20:51:21.0125 1740 Raspti - ok
20:51:21.0203 1740 Rdbss (29d66245adba878fff574cd66abd2884) D:\WINDOWS\system32\DRIVERS\rdbss.sys
20:51:21.0203 1740 Rdbss - ok
20:51:21.0250 1740 RDPCDD (4912d5b403614ce99c28420f75353332) D:\WINDOWS\system32\DRIVERS\RDPCDD.sys
20:51:21.0250 1740 RDPCDD - ok
20:51:21.0312 1740 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) D:\WINDOWS\system32\DRIVERS\rdpdr.sys
20:51:21.0312 1740 rdpdr - ok
20:51:21.0437 1740 RDPWD (d4f5643d7714ef499ae9527fdcd50894) D:\WINDOWS\system32\drivers\RDPWD.sys
20:51:21.0453 1740 RDPWD - ok
20:51:21.0546 1740 redbook (de6e09ca3a6fa6fc2b0bac66ae617726) D:\WINDOWS\system32\DRIVERS\redbook.sys
20:51:21.0562 1740 redbook - ok
20:51:21.0671 1740 RTLE8023xp (f0a21c62b9b835e1c96268eaae31d239) D:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
20:51:21.0687 1740 RTLE8023xp - ok
20:51:21.0750 1740 Secdrv (d26e26ea516450af9d072635c60387f4) D:\WINDOWS\system32\DRIVERS\secdrv.sys
20:51:21.0750 1740 Secdrv - ok
20:51:21.0843 1740 serenum (a2d868aeeff612e70e213c451a70cafb) D:\WINDOWS\system32\DRIVERS\serenum.sys
20:51:21.0843 1740 serenum - ok
20:51:21.0890 1740 Serial (eb35db11a54056f7ef2f2187b9a4f24a) D:\WINDOWS\system32\DRIVERS\serial.sys
20:51:21.0906 1740 Serial - ok
20:51:21.0937 1740 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) D:\WINDOWS\system32\drivers\Sfloppy.sys
20:51:21.0937 1740 Sfloppy - ok
20:51:22.0015 1740 Simbad - ok
20:51:22.0156 1740 Sparrow - ok
20:51:22.0281 1740 splitter (8e186b8f23295d1e42c573b82b80d548) D:\WINDOWS\system32\drivers\splitter.sys
20:51:22.0281 1740 splitter - ok
20:51:22.0359 1740 sr (d11ef3ba5bb0f718d5fefe761101782b) D:\WINDOWS\system32\DRIVERS\sr.sys
20:51:22.0375 1740 sr - ok
20:51:22.0453 1740 Srv (20b7e396720353e4117d64d9dcb926ca) D:\WINDOWS\system32\DRIVERS\srv.sys
20:51:22.0468 1740 Srv - ok
20:51:22.0515 1740 swenum (03c1bae4766e2450219d20b993d6e046) D:\WINDOWS\system32\DRIVERS\swenum.sys
20:51:22.0515 1740 swenum - ok
20:51:22.0562 1740 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) D:\WINDOWS\system32\drivers\swmidi.sys
20:51:22.0578 1740 swmidi - ok
20:51:22.0625 1740 symc810 - ok
20:51:22.0656 1740 symc8xx - ok
20:51:22.0703 1740 sym_hi - ok
20:51:22.0734 1740 sym_u3 - ok
20:51:22.0781 1740 sysaudio (650ad082d46bac0e64c9c0e0928492fd) D:\WINDOWS\system32\drivers\sysaudio.sys
20:51:22.0796 1740 sysaudio - ok
20:51:22.0828 1740 Suspicious service (NoAccess): tcatbf
20:51:22.0875 1740 Tcpip (9f4b36614a0fc234525ba224957de55c) D:\WINDOWS\system32\DRIVERS\tcpip.sys
20:51:22.0906 1740 Tcpip - ok
20:51:22.0937 1740 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) D:\WINDOWS\system32\drivers\TDPIPE.sys
20:51:22.0937 1740 TDPIPE - ok
20:51:22.0968 1740 TDTCP (ed0580af02502d00ad8c4c066b156be9) D:\WINDOWS\system32\drivers\TDTCP.sys
20:51:22.0968 1740 TDTCP - ok
20:51:23.0015 1740 TermDD (a540a99c281d933f3d69d55e48727f47) D:\WINDOWS\system32\DRIVERS\termdd.sys
20:51:23.0015 1740 TermDD - ok
20:51:23.0078 1740 TosIde - ok
20:51:23.0140 1740 Udfs (12f70256f140cd7d52c58c7048fde657) D:\WINDOWS\system32\drivers\Udfs.sys
20:51:23.0156 1740 Udfs - ok
20:51:23.0187 1740 ultra - ok
20:51:23.0234 1740 Update (aff2e5045961bbc0a602bb6f95eb1345) D:\WINDOWS\system32\DRIVERS\update.sys
20:51:23.0250 1740 Update - ok
20:51:23.0312 1740 usbccgp (bffd9f120cc63bcbaa3d840f3eef9f79) D:\WINDOWS\system32\DRIVERS\usbccgp.sys
20:51:23.0328 1740 usbccgp - ok
20:51:23.0375 1740 usbehci (15e993ba2f6946b2bfbbfcd30398621e) D:\WINDOWS\system32\DRIVERS\usbehci.sys
20:51:23.0375 1740 usbehci - ok
20:51:23.0421 1740 usbhub (c72f40947f92cea56a8fb532edf025f1) D:\WINDOWS\system32\DRIVERS\usbhub.sys
20:51:23.0421 1740 usbhub - ok
20:51:23.0468 1740 usbprint (a42369b7cd8886cd7c70f33da6fcbcf5) D:\WINDOWS\system32\DRIVERS\usbprint.sys
20:51:23.0468 1740 usbprint - ok
20:51:23.0531 1740 usbscan (a6bc71402f4f7dd5b77fd7f4a8ddba85) D:\WINDOWS\system32\DRIVERS\usbscan.sys
20:51:23.0531 1740 usbscan - ok
20:51:23.0593 1740 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
20:51:23.0593 1740 USBSTOR - ok
20:51:23.0640 1740 usbuhci (f8fd1400092e23c8f2f31406ef06167b) D:\WINDOWS\system32\DRIVERS\usbuhci.sys
20:51:23.0640 1740 usbuhci - ok
20:51:23.0671 1740 VgaSave (8a60edd72b4ea5aea8202daf0e427925) D:\WINDOWS\System32\drivers\vga.sys
20:51:23.0671 1740 VgaSave - ok
20:51:23.0703 1740 ViaIde - ok
20:51:23.0765 1740 VolSnap (1cafd39fec4cb1fe96f408983bb0c106) D:\WINDOWS\system32\drivers\VolSnap.sys
20:51:23.0765 1740 VolSnap - ok
20:51:23.0921 1740 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) D:\WINDOWS\system32\DRIVERS\wanarp.sys
20:51:23.0984 1740 Wanarp - ok
20:51:24.0046 1740 WDICA - ok
20:51:24.0171 1740 wdmaud (2797f33ebf50466020c430ee4f037933) D:\WINDOWS\system32\drivers\wdmaud.sys
20:51:24.0171 1740 wdmaud - ok
20:51:24.0500 1740 MBR (0x1B8) (186a4159d7661245314a7a933981403e) \Device\Harddisk0\DR0
20:51:24.0906 1740 \Device\Harddisk0\DR0 - ok
20:51:24.0906 1740 Boot (0x1200) (4b22da6f28384a117fffb54203751ffd) \Device\Harddisk0\DR0\Partition0
20:51:24.0921 1740 \Device\Harddisk0\DR0\Partition0 - ok
20:51:24.0937 1740 Boot (0x1200) (4f690090cbc660cf1d8fbc13946e81f7) \Device\Harddisk0\DR0\Partition1
20:51:24.0937 1740 \Device\Harddisk0\DR0\Partition1 - ok
20:51:24.0984 1740 Boot (0x1200) (a9aec728ee1c10b77bd2df0aef991e73) \Device\Harddisk0\DR0\Partition2
20:51:24.0984 1740 \Device\Harddisk0\DR0\Partition2 - ok
20:51:25.0000 1740 Boot (0x1200) (c5c67958866b17f92f1b075651fe03ae) \Device\Harddisk0\DR0\Partition3
20:51:25.0015 1740 \Device\Harddisk0\DR0\Partition3 - ok
20:51:25.0031 1740 Boot (0x1200) (b1e27aa018409de6bfd73f8afb883a65) \Device\Harddisk0\DR0\Partition4
20:51:25.0046 1740 \Device\Harddisk0\DR0\Partition4 - ok
20:51:25.0062 1740 ============================================================
20:51:25.0062 1740 Scan finished
20:51:25.0062 1740 ============================================================
20:51:25.0109 4728 Detected object count: 0
20:51:25.0109 4728 Actual detected object count: 0

Milyen bongeszot hasznalsz??

Ezt sem nyitja meg, és a kaspersky oldaláról sem tudom letölteni.

egy par perc, vatjal vagy 10 percet es ha nem fut le akkor zard be, es foltasd a TDSSKILLER programmal.
http://virus-stell.blogspot.com/2010/08 ... -tdl3.html
Futtatod
Ra klikelsz az CHANGE parameters es bepipazol
Detect TDLFS file system
Service and drivers
Boot sectors
klik OK
Start scan, a Naplojat tedd ide

Mennyi idő kell a lefutáshoz?

http://www.commentcamarche.net/download ... 838-usbfix

Vagy innnen
http://leteckaposta.cz/181947315
Innen toltsd le, es futtasd ugy ahogy irtam, a gephez kapcsold hozza az oszes pendrivet, mp3, mindent amit hasznalsz.
Klik a Gombra Suppression, Deletion
C:\USBFix.txt
tedd ide

Ezt az oldalt se nyitja meg

USBFIX-Letöltés
1:Letöltsük az asztalra.
2:Futtassuk.
Minden USB eszkozt a gehez kapcsolni, nezd meg a videot is, a naplojat tedd ide.
http://virus-stell.blogspot.com/2010/04 ... itasa.html

Tegnap megcsináltam még csökkentett módban a malwarebytes full scant is, itt a naplója.


Malwarebytes Anti-Malware (Próba) 1.61.0.1400
www.malwarebytes.org

Adatbázis verzió: v2012.04.17.04

Windows XP Service Pack 2 x86 NTFS (Csökkentett üzemmód/Hálózat)
Internet Explorer 6.0.2900.2180
l :: SDGF-D881730D9B [rendszergazda]

Védelem: Letiltva

2012.04.17. 16:57:52
mbam-log-2012-04-17 (16-57-52).txt

Vizsgálat típusa: Teljes vizsgálat
Engedélyezett vizsgálati beállítások: Memória | Indítópult | Rendszerleíró | Fájlrendszer | Heurisztikus/Extra | Heurisztikus/Shuriken | PUP | PUM
Letiltott vizsgálati beállítások: P2P
Átvizsgált objektumok: 401255
Eltelt idő: 1 óra, 20 perc, 21 másodperc

Fertőzött memóriafolyamatok: 0
(Nem találhatók rosszindulatú elemek)

Fertőzött memória modulok: 0
(Nem találhatók rosszindulatú elemek)

Fertőzött Rendszerleíró kulcsok: 0
(Nem találhatók rosszindulatú elemek)

Fertőzött Rendszerleíró értékek: 0
(Nem találhatók rosszindulatú elemek)

Fertőzött Rendszerleíró adatelemek: 0
(Nem találhatók rosszindulatú elemek)

Fertőzött mappák: 0
(Nem találhatók rosszindulatú elemek)

Fertőzött fájlok: 5
C:\Documents and Settings\é\Local Settings\Application Data\MediaSearch\search.exe (Trojan.Downloader) -> A karanténba helyezés, és a törlés sikerült.
C:\Documents and Settings\é\Local Settings\Temp\Rar$EXa0.333\Save2pc Pro 4.exe (Trojan.Agent) -> A karanténba helyezés, és a törlés sikerült.
D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\5YWR9HK8\tmklugh[1].jpg (Extension.Mismatch) -> A karanténba helyezés, és a törlés sikerült.
D:\RECYCLER\S-1-5-21-1417001333-412668190-682003330-1003\Dd54.exe (Affiliate.Downloader) -> A karanténba helyezés, és a törlés sikerült.
D:\RECYCLER\S-1-5-21-1417001333-412668190-682003330-1003\Dd59.exe (PUP.BundleInstaller.OI) -> A karanténba helyezés, és a törlés sikerült.

(befejezés)

RogueKiller V7.3.2 [03/20/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Szervizcsomag 2) 32 bits version
Started in : Normal mode
User: l [Admin rights]
Mode: Scan -- Date: 04/18/2012 19:08:47

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Registry Entries: 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: SAMSUNG HD502HJ +++++
--- User ---
[MBR] 8bbdaa9e698db0114b31eba890dcb738
[BSP] c97960c6136b35d4f09b1808482c4ed8 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 99998 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 204796742 | Size: 188473 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 590790656 | Size: 188457 Mo
3 - [XXXXXX] FAT16 (0x04) [VISIBLE] Offset (sectors): 976752000 | Size: 7 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

Udv

Meglássuk.

1:Letöltés RogueKiller az asztalra.
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Bezárni minden futó programot.
A Vista / Win7, kattintson a jobb gombbal a RogueKiller ikonjára,futtatás rendszergazdaként.

2:nyomni a Gombot SCAN, aztan,,(Delete) aztan REPORT, a naplot tedd ide,

Sajnos újra jelentkezett ez a probléma, most ugyanezeket kell csinálnom, vagy más a leányzó fekvése?

ok,
telepitsd le a geprol az combofixet
Start>futtatsba >.masold be ezt a parancsot
combofix /uninstall
klik ok.
Nincsen mit
Udv

Most már behoz minden oldalt, úgy tűnik megjavult. Köszönöm szépen a segítséget !

Ok, mi a helyzet , most a gepel??ird le ha van e meg problema.

All processes killed
========== OTL ==========
Error: No service named xzicnnlh was found to stop!
Service\Driver key xzicnnlh not found.
HKU\S-1-5-21-1409082233-1417001333-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: toolbar@ask.com:3.12.2.16749 removed from extensions.enabledItems
File/Folder C:\WINDOWS\*.tmp not found.
File/Folder C:\WINDOWS\System32\*.tmp not found.
File C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job not found.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:430C6D84 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2 deleted successfully.
========== SERVICES/DRIVERS ==========
Error: No service named xzicnnlh was found to stop!
Service\Driver key xzicnnlh not found.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP konfiguráció
A DNS-feloldási gyorsítótár kiürítése sikeresen megtörtént.
C:\Documents and Settings\asd\Asztal\cmd.bat deleted successfully.
C:\Documents and Settings\asd\Asztal\cmd.txt deleted successfully.
========== COMMANDS ==========
Restore point Set: OTL Restore Point (0)

[EMPTYTEMP]

User: 4
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Opera cache emptied: 2552714 bytes
->Flash cache emptied: 456 bytes

User: All Users

User: asd
->Temp folder emptied: 26917005 bytes
->Temporary Internet Files folder emptied: 634149 bytes
->Java cache emptied: 14599027 bytes
->FireFox cache emptied: 52907810 bytes
->Google Chrome cache emptied: 54083775 bytes
->Opera cache emptied: 11813567 bytes
->Flash cache emptied: 3845 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 193035 bytes

User: Rendszergazda
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 95684129 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 247,00 mb


OTL by OldTimer - Version 3.2.26.1 log created on 07162011_164731

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

OK, Futtasd az OTL-programot, az ablakjaba masold be a zold textet es most klikelj az RunFix>>gombra.
A naplojat a restrt utan tedd ide,
probald ki a gepet es ird meg hogy mi van.

http://virusscan.jotti.org/en/scanresult/587de1544c0676b4627fca3691b5875e54846b2a

found nothing az összesnél.

an virustotal, le van terhelve,, csinald meg itt
http://virusscan.jotti.org/

csinálom, itt van egy print screen.

Miért nem csinálod, amit írok??

Meg egyszer, es ha eztet kiirja, akkor klikelj a REANALYSE gombra, vard meg a teszt veget es a linket tedd ide

www.virustotal.com
klikelj a linkre>>talozas>>talald meg a
C:\WINDOWS\System32\GBKVBLE.dll
Kuldes>>vard meg a teszt veget, es a vegen a tedd ide az oldal linkjet.

megcsináltam, csak nem kattintottam a reportra. a virustotalról pontosan mit is kell bemásolni?

2011/07/16 13:19:47.0437 3628 TDSS rootkit removing tool 2.5.11.0 Jul 11 2011 16:56:56
2011/07/16 13:19:48.0093 3628 ================================================================================
2011/07/16 13:19:48.0093 3628 SystemInfo:
2011/07/16 13:19:48.0093 3628
2011/07/16 13:19:48.0093 3628 OS Version: 5.1.2600 ServicePack: 2.0
2011/07/16 13:19:48.0093 3628 Product type: Workstation
2011/07/16 13:19:48.0093 3628 ComputerName: LACI-FCADFD999C
2011/07/16 13:19:48.0093 3628 UserName: asd
2011/07/16 13:19:48.0093 3628 Windows directory: C:\WINDOWS
2011/07/16 13:19:48.0093 3628 System windows directory: C:\WINDOWS
2011/07/16 13:19:48.0093 3628 Processor architecture: Intel x86
2011/07/16 13:19:48.0093 3628 Number of processors: 1
2011/07/16 13:19:48.0093 3628 Page size: 0x1000
2011/07/16 13:19:48.0093 3628 Boot type: Normal boot
2011/07/16 13:19:48.0093 3628 ================================================================================
2011/07/16 13:19:49.0500 3628 Initialize success
2011/07/16 13:19:52.0265 2188 ================================================================================
2011/07/16 13:19:52.0265 2188 Scan started
2011/07/16 13:19:52.0265 2188 Mode: Manual;
2011/07/16 13:19:52.0265 2188 ================================================================================
2011/07/16 13:19:53.0375 2188 ACPI (4b60d4e72648207eb98287464fe3489d) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/07/16 13:19:53.0421 2188 ACPIEC (582c901174a7f0733c6fe41c37c9a80b) C:\WINDOWS\system32\drivers\ACPIEC.sys
2011/07/16 13:19:53.0484 2188 aec (841f385c6cfaf66b58fbd898722bb4f0) C:\WINDOWS\system32\drivers\aec.sys
2011/07/16 13:19:53.0531 2188 AFD (5ac495f4cb807b2b98ad2ad591e6d92e) C:\WINDOWS\System32\drivers\afd.sys
2011/07/16 13:19:53.0671 2188 Ambfilt (f6af59d6eee5e1c304f7f73706ad11d8) C:\WINDOWS\system32\drivers\Ambfilt.sys
2011/07/16 13:19:53.0812 2188 ASNDIS5 (05a56c3156e1b6cc7bbd8e1d54d491f2) C:\WINDOWS\system32\ASNDIS5.SYS
2011/07/16 13:19:53.0875 2188 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2011/07/16 13:19:53.0890 2188 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
2011/07/16 13:19:53.0921 2188 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2011/07/16 13:19:53.0968 2188 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2011/07/16 13:19:54.0031 2188 BCM43XX (e7debb46b9ef1f28932e533be4a3d1a9) C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
2011/07/16 13:19:54.0265 2188 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2011/07/16 13:19:54.0328 2188 Cardex (04e1c782cf14b7282ebc633b0fd3ed16) C:\WINDOWS\system32\drivers\TBPANEL.SYS
2011/07/16 13:19:54.0375 2188 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2011/07/16 13:19:54.0421 2188 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
2011/07/16 13:19:54.0484 2188 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2011/07/16 13:19:54.0515 2188 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
2011/07/16 13:19:54.0546 2188 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2011/07/16 13:19:54.0703 2188 d347bus (5776322f93cdb91086111f5ffbfda2a0) C:\WINDOWS\system32\DRIVERS\d347bus.sys
2011/07/16 13:19:54.0734 2188 d347prt (b49f79ace459763f4e0380071be9cb45) C:\WINDOWS\system32\Drivers\d347prt.sys
2011/07/16 13:19:54.0812 2188 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
2011/07/16 13:19:54.0875 2188 dmboot (89e3734f8b92bc9322b0b4331e94bcb4) C:\WINDOWS\system32\drivers\dmboot.sys
2011/07/16 13:19:54.0906 2188 dmio (1811ad47c0ac9a082f1761138e2f2022) C:\WINDOWS\system32\drivers\dmio.sys
2011/07/16 13:19:54.0937 2188 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2011/07/16 13:19:54.0968 2188 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
2011/07/16 13:19:55.0031 2188 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
2011/07/16 13:19:55.0078 2188 DrvAgent32 (651554e483712b708ede864d0ca1aa73) C:\WINDOWS\system32\Drivers\DrvAgent32.sys
2011/07/16 13:19:55.0156 2188 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
2011/07/16 13:19:55.0187 2188 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
2011/07/16 13:19:55.0234 2188 Fips (3e16f14a26c5f2f663a14669a0e09544) C:\WINDOWS\system32\drivers\Fips.sys
2011/07/16 13:19:55.0250 2188 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2011/07/16 13:19:55.0296 2188 FltMgr (157754f0df355a9e0a6f54721914f9c6) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
2011/07/16 13:19:55.0328 2188 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2011/07/16 13:19:55.0343 2188 Ftdisk (44225407f69666099c4d4c6bc9cd804d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2011/07/16 13:19:55.0390 2188 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2011/07/16 13:19:55.0437 2188 hamachi (833051c6c6c42117191935f734cfbd97) C:\WINDOWS\system32\DRIVERS\hamachi.sys
2011/07/16 13:19:55.0468 2188 HDAudBus (3fcc124b6e08ee0e9351f717dd136939) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
2011/07/16 13:19:55.0515 2188 hidusb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
2011/07/16 13:19:55.0546 2188 hotcore3 (e15a62f27545db10a960ed01f012eb36) C:\WINDOWS\system32\DRIVERS\hotcore3.sys
2011/07/16 13:19:55.0609 2188 HTTP (c19b522a9ae0bbc3293397f3055e80a1) C:\WINDOWS\system32\Drivers\HTTP.sys
2011/07/16 13:19:55.0656 2188 hwdatacard (2310ca92d37d97c9231adf1796b47b9d) C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys
2011/07/16 13:19:55.0734 2188 i8042prt (cced51afecf99e8d7b9e2ab45cf3ceb2) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2011/07/16 13:19:55.0843 2188 ialm (2aae7be67911f4aec9ad28e9cfb9096f) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
2011/07/16 13:19:56.0015 2188 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
2011/07/16 13:19:56.0156 2188 IntcAzAudAddService (e8656858d8b2da7c9cf59fb4e5ce32ed) C:\WINDOWS\system32\drivers\RtkHDAud.sys
2011/07/16 13:19:56.0281 2188 intelppm (4582c0bbd89ec62a821f02cfef12c471) C:\WINDOWS\system32\DRIVERS\intelppm.sys
2011/07/16 13:19:56.0328 2188 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
2011/07/16 13:19:56.0375 2188 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2011/07/16 13:19:56.0406 2188 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2011/07/16 13:19:56.0437 2188 IpNat (b5a8e215ac29d24d60b4d1250ef05ace) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2011/07/16 13:19:56.0484 2188 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2011/07/16 13:19:56.0546 2188 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
2011/07/16 13:19:56.0609 2188 isapnp (ae9857353a6d45f101c4496789585c25) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2011/07/16 13:19:56.0656 2188 Kbdclass (059b59b694dbb143a5b627187c9d8860) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2011/07/16 13:19:56.0718 2188 kmixer (d93cad07c5683db066b0b2d2d3790ead) C:\WINDOWS\system32\drivers\kmixer.sys
2011/07/16 13:19:56.0812 2188 KSecDD (eb7ffe87fd367ea8fca0506f74a87fbb) C:\WINDOWS\system32\drivers\KSecDD.sys
2011/07/16 13:19:56.0937 2188 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2011/07/16 13:19:57.0046 2188 Modem (af00a5a5a613e165f3bdea187df796ec) C:\WINDOWS\system32\drivers\Modem.sys
2011/07/16 13:19:57.0265 2188 Monfilt (9fa7207d1b1adead88ae8eed9cdbbaa5) C:\WINDOWS\system32\drivers\Monfilt.sys
2011/07/16 13:19:57.0421 2188 Mouclass (de28319707eb33dd721559110acd757d) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2011/07/16 13:19:57.0453 2188 mouhid (6a79cb27d0e608a45638cd9468269a3e) C:\WINDOWS\system32\DRIVERS\mouhid.sys
2011/07/16 13:19:57.0484 2188 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
2011/07/16 13:19:57.0531 2188 MRxDAV (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2011/07/16 13:19:57.0562 2188 MRxSmb (1fd607fc67f7f7c633c3da65bfc53d18) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2011/07/16 13:19:57.0609 2188 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
2011/07/16 13:19:57.0640 2188 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011/07/16 13:19:57.0687 2188 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011/07/16 13:19:57.0718 2188 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
2011/07/16 13:19:57.0750 2188 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2011/07/16 13:19:57.0796 2188 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
2011/07/16 13:19:57.0812 2188 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
2011/07/16 13:19:57.0828 2188 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
2011/07/16 13:19:57.0859 2188 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
2011/07/16 13:19:57.0890 2188 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
2011/07/16 13:19:57.0953 2188 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2011/07/16 13:19:57.0968 2188 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2011/07/16 13:19:58.0000 2188 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2011/07/16 13:19:58.0046 2188 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
2011/07/16 13:19:58.0062 2188 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
2011/07/16 13:19:58.0093 2188 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
2011/07/16 13:19:58.0156 2188 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
2011/07/16 13:19:58.0187 2188 Ntfs (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys
2011/07/16 13:19:58.0234 2188 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2011/07/16 13:19:58.0437 2188 nv (cb0ce8de9f66a297cd86eb98921b8e58) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
2011/07/16 13:19:58.0656 2188 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2011/07/16 13:19:58.0687 2188 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2011/07/16 13:19:58.0718 2188 Parport (99d001d603b5c27c01fe9fc55b4bb181) C:\WINDOWS\system32\DRIVERS\parport.sys
2011/07/16 13:19:58.0765 2188 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
2011/07/16 13:19:58.0796 2188 ParVdm (4df92a889e7fe15ed3834d288a0271f5) C:\WINDOWS\system32\drivers\ParVdm.sys
2011/07/16 13:19:58.0828 2188 PCI (0827cc4cb7c97ef6d94e97927db55df8) C:\WINDOWS\system32\DRIVERS\pci.sys
2011/07/16 13:19:58.0890 2188 PCIIde (fbf3cc42488fd2ce49f9427240cd5809) C:\WINDOWS\system32\DRIVERS\pciide.sys
2011/07/16 13:19:58.0906 2188 Pcmcia (eca393902f8b2ca5233cbb325f0b4488) C:\WINDOWS\system32\drivers\Pcmcia.sys
2011/07/16 13:19:59.0078 2188 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2011/07/16 13:19:59.0109 2188 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
2011/07/16 13:19:59.0140 2188 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2011/07/16 13:19:59.0265 2188 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2011/07/16 13:19:59.0296 2188 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2011/07/16 13:19:59.0312 2188 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2011/07/16 13:19:59.0343 2188 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2011/07/16 13:19:59.0375 2188 Rdbss (29d66245adba878fff574cd66abd2884) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2011/07/16 13:19:59.0406 2188 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2011/07/16 13:19:59.0437 2188 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
2011/07/16 13:19:59.0468 2188 RDPWD (d4f5643d7714ef499ae9527fdcd50894) C:\WINDOWS\system32\drivers\RDPWD.sys
2011/07/16 13:19:59.0500 2188 redbook (de6e09ca3a6fa6fc2b0bac66ae617726) C:\WINDOWS\system32\DRIVERS\redbook.sys
2011/07/16 13:19:59.0578 2188 RT73 (6ea04a4370609e5e1eaeee898a2ab6ac) C:\WINDOWS\system32\DRIVERS\rt73.sys
2011/07/16 13:19:59.0625 2188 RTLE8023xp (f0a21c62b9b835e1c96268eaae31d239) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
2011/07/16 13:19:59.0718 2188 SASDIFSV (a3281aec37e0720a2bc28034c2df2a56) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
2011/07/16 13:19:59.0734 2188 SASKUTIL (61db0d0756a99506207fd724e3692b25) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
2011/07/16 13:19:59.0828 2188 Secdrv (d26e26ea516450af9d072635c60387f4) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2011/07/16 13:19:59.0859 2188 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
2011/07/16 13:19:59.0890 2188 Serial (eb35db11a54056f7ef2f2187b9a4f24a) C:\WINDOWS\system32\DRIVERS\serial.sys
2011/07/16 13:19:59.0921 2188 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
2011/07/16 13:20:00.0015 2188 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
2011/07/16 13:20:00.0078 2188 splitter (8e186b8f23295d1e42c573b82b80d548) C:\WINDOWS\system32\drivers\splitter.sys
2011/07/16 13:20:00.0140 2188 sptd (cc76043f9e3ee8c8b019a9ed4578dca1) C:\WINDOWS\system32\Drivers\sptd.sys
2011/07/16 13:20:00.0140 2188 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: cc76043f9e3ee8c8b019a9ed4578dca1
2011/07/16 13:20:00.0140 2188 sptd - detected LockedFile.Multi.Generic (1)
2011/07/16 13:20:00.0203 2188 sr (d11ef3ba5bb0f718d5fefe761101782b) C:\WINDOWS\system32\DRIVERS\sr.sys
2011/07/16 13:20:00.0250 2188 Srv (20b7e396720353e4117d64d9dcb926ca) C:\WINDOWS\system32\DRIVERS\srv.sys
2011/07/16 13:20:00.0296 2188 streamip (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
2011/07/16 13:20:00.0328 2188 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
2011/07/16 13:20:00.0359 2188 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
2011/07/16 13:20:00.0468 2188 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
2011/07/16 13:20:00.0531 2188 TBPanel (04e1c782cf14b7282ebc633b0fd3ed16) C:\WINDOWS\system32\drivers\TBPanel.sys
2011/07/16 13:20:00.0562 2188 Tcpip (9f4b36614a0fc234525ba224957de55c) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2011/07/16 13:20:00.0593 2188 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
2011/07/16 13:20:00.0609 2188 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
2011/07/16 13:20:00.0640 2188 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
2011/07/16 13:20:00.0703 2188 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
2011/07/16 13:20:00.0750 2188 UimBus (de1b2980484aaf20a1dd8b743f96284b) C:\WINDOWS\system32\DRIVERS\UimBus.sys
2011/07/16 13:20:00.0781 2188 Uim_IM (e40d444bc1d1fbc2cadfbcc99551bae0) C:\WINDOWS\system32\Drivers\Uim_IM.sys
2011/07/16 13:20:00.0828 2188 Update (aff2e5045961bbc0a602bb6f95eb1345) C:\WINDOWS\system32\DRIVERS\update.sys
2011/07/16 13:20:00.0875 2188 usbccgp (bffd9f120cc63bcbaa3d840f3eef9f79) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
2011/07/16 13:20:00.0921 2188 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys
2011/07/16 13:20:00.0953 2188 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2011/07/16 13:20:00.0984 2188 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2011/07/16 13:20:01.0015 2188 usbuhci (f8fd1400092e23c8f2f31406ef06167b) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2011/07/16 13:20:01.0046 2188 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
2011/07/16 13:20:01.0093 2188 VolSnap (1cafd39fec4cb1fe96f408983bb0c106) C:\WINDOWS\system32\drivers\VolSnap.sys
2011/07/16 13:20:01.0140 2188 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2011/07/16 13:20:01.0203 2188 wdmaud (2797f33ebf50466020c430ee4f037933) C:\WINDOWS\system32\drivers\wdmaud.sys
2011/07/16 13:20:01.0328 2188 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
2011/07/16 13:20:01.0375 2188 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
2011/07/16 13:20:01.0453 2188 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2011/07/16 13:20:01.0468 2188 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2011/07/16 13:20:01.0546 2188 ZDPSp50 (00ae175b903d45ed4a62384d3315dc2a) C:\WINDOWS\system32\Drivers\ZDPSp50.sys
2011/07/16 13:20:01.0578 2188 ZSMC301b (1e41295eac56589efd9dc3ca14bf3fec) C:\WINDOWS\system32\Drivers\usbVM31b.sys
2011/07/16 13:20:01.0656 2188 MBR (0x1B8) (10ae9eb13951b8e206480773f877a330) \Device\Harddisk0\DR0
2011/07/16 13:20:01.0671 2188 Boot (0x1200) (a2cd55bd97389d70545634d841ecb774) \Device\Harddisk0\DR0\Partition0
2011/07/16 13:20:01.0703 2188 Boot (0x1200) (7b02d657c82b48fda674e2354da63e31) \Device\Harddisk0\DR0\Partition1
2011/07/16 13:20:01.0734 2188 Boot (0x1200) (b1e27aa018409de6bfd73f8afb883a65) \Device\Harddisk0\DR0\Partition2
2011/07/16 13:20:01.0750 2188 ================================================================================
2011/07/16 13:20:01.0750 2188 Scan finished
2011/07/16 13:20:01.0750 2188 ================================================================================
2011/07/16 13:20:01.0765 2184 Detected object count: 1
2011/07/16 13:20:01.0765 2184 Actual detected object count: 1
2011/07/16 13:20:04.0203 2184 LockedFile.Multi.Generic(sptd) - User select action: Skip

AZ TDSSKILLERT, miert nem csinaltad, meg?/
teszteld le a www.virustotal.com
C:\WINDOWS\System32\GBKVBLE.dll

A linket a tesztrol tedd ide,

OTL Extras logfile created on: 2011.07.16. 11:38:17 - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\asd\Asztal
Windows XP Professional Edition Szervizcsomag 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 0000040E | Country: Magyarország | Language: HUN | Date Format: yyyy.MM.dd.

1023,23 Mb Total Physical Memory | 418,15 Mb Available Physical Memory | 40,87% Memory free
2,39 Gb Paging File | 1,75 Gb Available in Paging File | 73,00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 28,90 Gb Free Space | 29,59% Space Free | Partition Type: NTFS
Drive D: | 184,06 Gb Total Space | 76,68 Gb Free Space | 41,66% Space Free | Partition Type: NTFS
Drive F: | 4,02 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive G: | 3,93 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: LACI-FCADFD999C | User Name: asd | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-1409082233-1417001333-839522115-1003\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"5023:TCP" = 5023:TCP:*:Enabled:ybdgyns

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Sierra\Empire Earth - The Art of Conquest\EE-AOC.exe" = C:\Sierra\Empire Earth - The Art of Conquest\EE-AOC.exe:*:Enabled:EE-AOC -- ()
"C:\Program Files\Sports Interactive\Football Manager 2011\fm.exe" = C:\Program Files\Sports Interactive\Football Manager 2011\fm.exe:*:Enabled:Football Manager 2011 -- (Sports Interactive)
"C:\Program Files\Counter-Strike 1.6 V40\hl.exe" = C:\Program Files\Counter-Strike 1.6 V40\hl.exe:*:Enabled:Half-Life Launcher -- (Valve)
"C:\Program Files\Counter-Strike Source\hl2.exe" = C:\Program Files\Counter-Strike Source\hl2.exe:*:Enabled:hl2 -- ()


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{15095BF3-A3D7-4DDF-B193-3A496881E003}" = Microsoft .NET Framework 3.0
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1E104AF0-EA49-11DE-AC07-005056C00008}" = Paragon Hard Disk Manager™ 2010 Professional
"{1F77C418-2C90-459C-BD33-B56A4182B9FA}" = System Requirements Lab CYRI
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{23E8D2D6-F7C8-4A35-816C-6C914EE0A601}" = Citrix Presentation Server Client - Web Only
"{2447500B-22D7-47BD-9B13-1A927F43A267}" = Empire Earth
"{257A92C3-7E41-4678-9144-6920F4289D0F}" = Windows Live Messenger
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 23
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{32343DB6-9A52-40C9-87E4-5E7C79791C87}" = MSXML 4.0 SP2 and SOAP Toolkit 3.0
"{350C940e-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}" = DAEMON Tools
"{3EF79591-BF16-4CF8-8FF0-D8AD968228B1}" = Aliens vs. Predator 2
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{491DD792-AD81-429C-9EB4-86DD3D22E333}" = Windows Communication Foundation
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B35F00C-E63D-40DC-9839-DF15A33EAC46}" = Grand Theft Auto Vice City
"{50595869-139F-466F-B6C3-7B58988A0F3A}" = CSCop
"{542068F1-9AAE-4E1B-8ACA-094FE03728BE}" = Carambis Driver Updater
"{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}" = GetDataBack for NTFS
"{581CE7EA-A30D-0000-1211-088635773309}" = MSI US54SE 802.11 b+g USB Stick
"{605333A6-963F-480C-A358-1301CAA6CFF6}" = TES Construction Set
"{640D4A85-C158-4FB4-B771-01730D6EE9CB}" = Signed Document eXpert BE
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}" = Windows Workflow Foundation
"{80843623-6460-4A3E-BFE6-6C66BDAE5178}" = Angry Birds
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8F722FA9-B994-4C9B-B292-FD32D6206EDF}" = ASUS WLAN Card Utilities/Driver
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-040E-0000-0000000FF1CE}" = Kompatibilitási csomag a 2007-es Office rendszerhez
"{903B0409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Project Professional 2003
"{9370105C-71BB-4FF9-A85B-36D79B95457A}_is1" = ALLConverter PRO 1.1
"{93A1EDF5-5DC5-4963-AF0D-8CDEB5CA977A}" = Morrowind magyarítása
"{94895EA7-873E-4FCB-9C7B-DD3F7019D618}_is1" = Free Video Cutter 1.1
"{97A19679-4C07-4B34-8ACB-D5565C3440FC}" = Stronghold
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B49C924C-A651-4378-94F6-5D9BF44A959F}" = Empire Earth - The Art of Conquest
"{B5761811-28F3-4257-B537-815C5EEF472C}" = Vodafone Mobile Connect Lite
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}" = Skype™ 5.3
"{D8DD8617-10CF-4D94-B997-53994EF53A66}" = Look 312P
"{DC785DB7-D389-48C3-B146-96FE99BF4E2B}" = Vegas Pro 9.0
"{E10DB5DA-E576-40EA-A7FC-1CB2A7B283A6}" = NVIDIA PhysX
"{EEF985E8-8B36-4230-B174-117A2381C17F}" = LogMeIn Hamachi
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AnyToISO_is1" = AnyToISO
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE
"AVS Screen Capture_is1" = AVS Screen Capture version 2.0.1
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS Video Editor_is1" = AVS Video Editor 5
"AVS Video Recorder_is1" = AVS Video Recorder 2.4
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4
"Browser Defender_is1" = Browser Defender 3.0
"Burn4Free CD & DVD_is1" = Burn4Free CD & DVD 5.2.0.0
"Burn4Free DB Toolbar" = Burn4Free DB Toolbar
"CCleaner" = CCleaner
"cdrtools Frontend_is1" = cdrtfe 1.3.8
"conduitEngine" = Conduit Engine
"Counter-Strike 1.6 V40.1" = Counter-Strike 1.6 V40.1
"Counter-Strike: Source" = Counter-Strike: Source
"DreamWorks Interactive: Chaos Island" = Chaos Island
"DriverAgent.exe" = DriverAgent by eSupport.com
"E.M. Total Video Player 1.31_is1" = E.M. Total Video Player 1.31
"eMule" = eMule
"EXPERTool_is1" = EXPERTool 6.4
"FM Genie Scout 11_is1" = FM Genie Scout 11 version 1.00 beta 2
"Football Manager 2011" = Football Manager 2011
"Foxit Reader" = Foxit Reader
"Free Download Manager_is1" = Free Download Manager 3.0
"GamePlayLabs Plugin" = GamePlayLabs Plugin
"Grand Theft Auto: San Andreas hun" = Grand Theft Auto: San Andreas hun [Honosítás]
"Graph Viewer 2D" = Graph Viewer 2D
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"IsoBuster Toolbar" = IsoBuster Toolbar
"IsoBuster_is1" = IsoBuster 2.8.5
"JDownloader" = JDownloader
"LogMeIn Hamachi" = LogMeIn Hamachi
"Magic ISO Maker v5.4 (build 0239)" = Magic ISO Maker v5.4 (build 0239)
"Magic ISO Maker v5.5 (build 0281)" = Magic ISO Maker v5.5 (build 0281)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Messenger Plus!" = Messenger Plus! 5
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Microsoft .NET Framework 3.0" = Microsoft .NET Framework 3.0
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"OpenSubtitlesPlayer_is1" = OpenSubtitlesPlayer V4.X
"Opera 11.50.1074" = Opera 11.50
"PIXresizer_is1" = PIXresizer 2.0.4
"Software Informer_is1" = Software Informer 1.1
"SopCast" = SopCast 3.2.9
"Stronghold magyarítás" = Stronghold magyarítás
"The KMPlayer" = The KMPlayer (remove only)
"Total Video Converter 3.70_is1" = Total Video Converter 3.70 100621
"Totalcmd" = Total Commander (Remove or Repair)
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV 0.9.18
"Video Cutter_is1" = Video Cutter 1.0
"VIPRE 4.0 magyarítás" = VIPRE 4.0 magyarítás
"VLC media player" = VLC media player 1.0.5
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR archiváló
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Xilisoft Video Cutter 2" = Xilisoft Video Cutter 2
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1409082233-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"1001" = 1001
"1053" = 1053
"1065" = 1065
"10A60" = 10A60
"1101" = 1101
"AbevJava" = AbevJava
"Game Organizer" = EasyBits GO
"Google Chrome" = Google Chrome
"The Web Blocker" = The Web Blocker

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2011.07.15. 10:03:14 | Computer Name = LACI-FCADFD999C | Source = MsiInstaller | ID = 1013
Description = Product: VIPRE Antivirus -- You are trying to install a product in
the VIPRE family that has fewer features than your currently installed version.
To perform this migration successfully, you will need to manually uninstall your
current VIPRE product using Add/Remove Programs.

Error - 2011.07.15. 14:52:12 | Computer Name = LACI-FCADFD999C | Source = PerfNet | ID = 2004
Description = Nem lehet megnyitni a kiszolgáló szolgáltatást. A kiszolgáló teljesítményadatai
nem lesznek visszaadva. A visszaadott hibakód a duplaszó 0 adatban van.

Error - 2011.07.15. 14:59:23 | Computer Name = LACI-FCADFD999C | Source = Application Error | ID = 1000
Description = Hibás alkalmazás: svchost.exe, verzió: 5.1.2600.2180, hibás modul:
unknown, verzió: 0.0.0.0, memóriacím: 0x6f8917c2.

Error - 2011.07.15. 15:19:00 | Computer Name = LACI-FCADFD999C | Source = Application Error | ID = 1000
Description = Hibás alkalmazás: pev.exe, verzió: 0.0.0.0, hibás modul: pev.exe,
verzió: 0.0.0.0, memóriacím: 0x0008d1c0.

Error - 2011.07.16. 1:41:25 | Computer Name = LACI-FCADFD999C | Source = PerfNet | ID = 2004
Description = Nem lehet megnyitni a kiszolgáló szolgáltatást. A kiszolgáló teljesítményadatai
nem lesznek visszaadva. A visszaadott hibakód a duplaszó 0 adatban van.

Error - 2011.07.16. 4:46:22 | Computer Name = LACI-FCADFD999C | Source = PerfNet | ID = 2004
Description = Nem lehet megnyitni a kiszolgáló szolgáltatást. A kiszolgáló teljesítményadatai
nem lesznek visszaadva. A visszaadott hibakód a duplaszó 0 adatban van.

Error - 2011.07.16. 5:01:15 | Computer Name = LACI-FCADFD999C | Source = PerfNet | ID = 2004
Description = Nem lehet megnyitni a kiszolgáló szolgáltatást. A kiszolgáló teljesítményadatai
nem lesznek visszaadva. A visszaadott hibakód a duplaszó 0 adatban van.

Error - 2011.07.16. 5:04:30 | Computer Name = LACI-FCADFD999C | Source = Application Error | ID = 1000
Description = Hibás alkalmazás: svchost.exe, verzió: 5.1.2600.2180, hibás modul:
unknown, verzió: 0.0.0.0, memóriacím: 0x001f1cb0.

Error - 2011.07.16. 5:12:08 | Computer Name = LACI-FCADFD999C | Source = PerfNet | ID = 2004
Description = Nem lehet megnyitni a kiszolgáló szolgáltatást. A kiszolgáló teljesítményadatai
nem lesznek visszaadva. A visszaadott hibakód a duplaszó 0 adatban van.

Error - 2011.07.16. 5:41:29 | Computer Name = LACI-FCADFD999C | Source = Application Error | ID = 1000
Description = Hibás alkalmazás: svchost.exe, verzió: 5.1.2600.2180, hibás modul:
unknown, verzió: 0.0.0.0, memóriacím: 0x001f1cb0.

[ System Events ]
Error - 2011.07.16. 5:01:31 | Computer Name = LACI-FCADFD999C | Source = Service Control Manager | ID = 7023
Description = A szolgáltatás (Config Image) leállt a következő hibával: %%126

Error - 2011.07.16. 5:01:31 | Computer Name = LACI-FCADFD999C | Source = Service Control Manager | ID = 7026
Description = A következő boot- vagy rendszerindító illesztőprogram(ok) nem indult(ak)
el: SBRE

Error - 2011.07.16. 5:01:31 | Computer Name = LACI-FCADFD999C | Source = Service Control Manager | ID = 7000
Description = A szolgáltatás (Cardex) a következő hiba következtében leállt: %%183

Error - 2011.07.16. 5:01:34 | Computer Name = LACI-FCADFD999C | Source = DCOM | ID = 10005
Description = A DCOM a következő hibát észlelte :"%1058" BITS szolgáltatásnak ""
paraméterekkel való indítása közben. Ezért a következő kiszolgálót nem sikerült
futtatni: {4991D34B-80A1-4291-83B6-3328366B9097}

Error - 2011.07.16. 5:11:57 | Computer Name = LACI-FCADFD999C | Source = DCOM | ID = 10005
Description = A DCOM a következő hibát észlelte :"%1058" BITS szolgáltatásnak ""
paraméterekkel való indítása közben. Ezért a következő kiszolgálót nem sikerült
futtatni: {4991D34B-80A1-4291-83B6-3328366B9097}

Error - 2011.07.16. 5:12:16 | Computer Name = LACI-FCADFD999C | Source = DCOM | ID = 10005
Description = A DCOM a következő hibát észlelte :"%1058" BITS szolgáltatásnak ""
paraméterekkel való indítása közben. Ezért a következő kiszolgálót nem sikerült
futtatni: {4991D34B-80A1-4291-83B6-3328366B9097}

Error - 2011.07.16. 5:12:16 | Computer Name = LACI-FCADFD999C | Source = Service Control Manager | ID = 7023
Description = A szolgáltatás (Config Image) leállt a következő hibával: %%126

Error - 2011.07.16. 5:12:21 | Computer Name = LACI-FCADFD999C | Source = Service Control Manager | ID = 7026
Description = A következő boot- vagy rendszerindító illesztőprogram(ok) nem indult(ak)
el: SBRE

Error - 2011.07.16. 5:12:22 | Computer Name = LACI-FCADFD999C | Source = Service Control Manager | ID = 7000
Description = A szolgáltatás (Cardex) a következő hiba következtében leállt: %%183

Error - 2011.07.16. 5:45:01 | Computer Name = LACI-FCADFD999C | Source = DCOM | ID = 10005
Description = A DCOM a következő hibát észlelte :"%1058" BITS szolgáltatásnak ""
paraméterekkel való indítása közben. Ezért a következő kiszolgálót nem sikerült
futtatni: {4991D34B-80A1-4291-83B6-3328366B9097}


< End of report >

========== Files Created - No Company Name ==========

[2011.07.15 20:12:20 | 000,000,220 | ---- | C] () -- C:\Boot.bak
[2011.07.15 20:12:18 | 000,260,272 | RHS- | C] () -- C:\cmldr
[2011.07.15 20:10:05 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011.07.15 20:10:05 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011.07.15 20:10:05 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011.07.15 20:10:05 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011.07.15 20:10:05 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011.07.15 19:29:39 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Asztal\Malwarebytes' Anti-Malware.lnk
[2011.07.15 19:20:32 | 000,516,608 | ---- | C] () -- C:\Documents and Settings\asd\Asztal\RogueKiller.exe
[2011.07.15 18:50:38 | 000,000,549 | ---- | C] () -- C:\fix.bat
[2011.07.15 18:46:32 | 000,000,232 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2011.07.15 16:22:16 | 000,001,980 | ---- | C] () -- C:\Documents and Settings\asd\Asztal\HiJackThis.lnk
[2011.07.14 13:01:43 | 324,952,767 | ---- | C] () -- C:\Documents and Settings\asd\Asztal\1parte - Brasil VS Ecuador.flv
[2011.07.14 12:47:05 | 347,656,203 | ---- | C] () -- C:\Documents and Settings\asd\Asztal\2parte - Brasil VS Ecuador.flv
[2011.07.14 12:44:58 | 001,835,008 | ---- | C] () -- C:\Documents and Settings\asd\Asztal\CopaAmerica.2011_Brazil_vs_Ecuador_FullMatch-1stHalf.avi
[2011.07.14 12:44:29 | 021,860,416 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\CopaAmerica.2011_Brazil_vs_Ecuador_FullMatch-1stHal5f.avi
[2011.07.14 12:41:24 | 016,188,480 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\CopaAmerica.2011_Brazil_vs_Ecuador_FullMatch-1stHalf.avi
[2011.07.11 22:37:11 | 000,001,678 | ---- | C] () -- C:\Documents and Settings\All Users\Asztal\SUPERAntiSpyware Free Edition.lnk
[2011.07.11 22:25:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\SBFC.dat
[2011.07.11 21:46:23 | 000,511,968 | ---- | C] () -- C:\Documents and Settings\asd\Asztal\sdsetup.exe
[2011.07.11 21:24:06 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Asztal\CCleaner.lnk
[2011.07.11 21:23:42 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll0727.old
[2011.07.11 21:23:42 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll
[2011.07.11 21:23:40 | 000,002,125 | ---- | C] () -- C:\WINDOWS\UDB.zip
[2011.07.11 21:23:40 | 000,000,882 | ---- | C] () -- C:\WINDOWS\RegSDImport.xml
[2011.07.11 21:23:40 | 000,000,879 | ---- | C] () -- C:\WINDOWS\RegISSImport.xml
[2011.07.11 21:23:40 | 000,000,131 | ---- | C] () -- C:\WINDOWS\IDB.zip
[2011.07.11 21:22:56 | 000,493,718 | ---- | C] () -- C:\WINDOWS\System32\drivers\Cat.DB
[2011.07.11 17:15:06 | 000,000,000 | RHS- | C] () -- C:\Documents and Settings\All Users\Dokumentumok\ctf
[2011.07.11 16:18:18 | 000,248,624 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\The.Adjustment.Bureau.DVDRip.XviD-DEFACED.avi
[2011.07.11 14:29:34 | 000,000,166 | ---- | C] () -- C:\WINDOWS\install.dat
[2011.07.10 17:01:30 | 366,776,452 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E19.HDTV.XviD-LOL.avi
[2011.07.08 22:02:51 | 000,000,665 | ---- | C] () -- C:\Documents and Settings\All Users\Asztal\Look 312P.lnk
[2011.07.08 14:51:51 | 366,783,136 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E16.HDTV.XviD-LOL.avi
[2011.07.08 14:37:44 | 000,002,596 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\Register Vegas Pro.htm
[2011.07.08 14:16:57 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2011.07.08 14:12:35 | 366,712,664 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E15.HDTV.XviD-LOL.avi
[2011.07.08 14:11:05 | 000,158,688 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2011.07.08 13:30:27 | 366,669,500 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E14.HDTV.XviD-LOL.avi
[2011.07.07 22:13:29 | 366,528,176 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E13.HDTV.XviD-2HD.avi
[2011.07.07 20:07:30 | 366,574,578 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.s08e12.proper.hdtv.xvid-2hd.avi
[2011.07.07 10:49:24 | 367,458,760 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E11.HDTV.XviD-FQM.avi
[2011.07.07 10:24:28 | 367,278,086 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E10.HDTV.XviD-P0W4.avi
[2011.07.07 10:10:30 | 367,103,000 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E09.HDTV.XviD-P0W4.avi
[2011.07.06 22:41:51 | 366,875,240 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.s08e08.hdtv.xvid.avi
[2011.07.06 17:12:27 | 366,990,786 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E07.HDTV.XviD-P0W4.avi
[2011.07.06 16:59:19 | 367,025,590 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E06.HDTV.XviD-FQM.avi
[2011.07.06 16:48:34 | 367,498,630 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E05.HDTV.XviD-FQM.avi
[2011.07.06 15:30:37 | 367,483,108 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E04.HDTV.XviD-FQM.avi
[2011.07.06 15:02:50 | 367,440,196 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.s08e03.hdtv.xvid-fqm.by.CJRobert.avi
[2011.07.05 15:48:28 | 367,017,816 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E02.HDTV.XviD-2HD.avi
[2011.07.05 13:22:12 | 052,517,037 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\Egy éjszaka Bohémiában [2008].rar
[2011.07.05 00:33:37 | 000,001,775 | ---- | C] () -- C:\Documents and Settings\asd\Application Data\Microsoft\Internet Explorer\Quick Launch\Xilisoft Video Cutter 2.lnk
[2011.07.05 00:33:37 | 000,001,757 | ---- | C] () -- C:\Documents and Settings\All Users\Asztal\Xilisoft Video Cutter 2.lnk
[2011.07.04 22:47:25 | 366,733,134 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.s08e01.hdtv.xvid-2hd.avi
[2011.07.04 15:52:54 | 367,681,536 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E24.DVDrip.XviD-TOPAZ.avi
[2011.07.04 15:13:22 | 367,503,360 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E23.DVDrip.XviD-TOPAZ.avi
[2011.07.03 21:28:23 | 366,729,216 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.722.hdtv-lol.www.diviksfilm.com.laztrix.avi
[2011.07.03 19:36:51 | 366,788,774 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E21.HDTV.XviD-LOL.avi
[2011.07.01 21:20:46 | 366,778,368 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E20.HDTV.XviD-LOL.avi
[2011.07.01 21:09:46 | 000,058,892 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.s07e17.hdtv.xvid-fqm.hun.srt
[2011.07.01 21:02:56 | 366,718,212 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E19.HDTV.XviD-LOL.avi
[2011.07.01 20:48:41 | 000,043,439 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24 - 7x18 - Day 7 1 00 A.M.-2 00 A.M..HDTV.NoTV.hu.srt
[2011.06.30 21:27:27 | 366,923,044 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24 - 7x18 - Day 7 1 00 A.M.-2 00 A.M..HDTV.NoTV.hu.avi
[2011.06.30 21:06:13 | 366,870,398 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.s07e17.hdtv.xvid-fqm.hun.avi
[2011.06.30 16:44:30 | 366,746,514 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E15.HDTV.XviD-LOL_SeriesGringas.Org.avi
[2011.06.30 14:28:13 | 366,788,516 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E14.HDTV.XviD-LOL.[VTV].avi
[2011.06.30 14:26:51 | 000,003,162 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\index.htm
[2011.06.30 13:10:18 | 366,798,848 | ---- | C] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E13.HDTV.XviD-LOL.avi
[2011.06.16 09:04:03 | 000,922,312 | ---- | C] () -- C:\WINDOWS\Grand Theft Auto_ San Andreas hun Uninstaller.exe
[2011.06.16 08:33:57 | 002,283,526 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2011.06.16 08:21:48 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011.05.26 19:10:05 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2011.05.26 19:10:05 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2011.05.26 19:10:05 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2011.05.14 14:51:43 | 000,004,799 | ---- | C] () -- C:\Program Files\clipboard01gl (130 x 130).jpg
[2011.05.14 14:50:56 | 000,003,295 | ---- | C] () -- C:\Program Files\clipboard01gl (130 x 76).jpg
[2011.05.14 14:49:47 | 000,005,201 | ---- | C] () -- C:\Program Files\clipboard01gl (180 x 106).jpg
[2011.05.10 20:30:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PROTOCOL.INI
[2011.04.18 21:01:38 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\ZyDelReg.exe
[2011.04.18 21:01:37 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\InsDrvZD.dll
[2011.04.18 21:01:37 | 000,015,872 | ---- | C] () -- C:\WINDOWS\System32\InsDrvZD64.DLL
[2011.04.11 18:16:46 | 000,005,115 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\mtbjfghn.xbe
[2011.04.03 18:07:09 | 000,505,856 | ---- | C] () -- C:\WINDOWS\System32\ASWL2K.exe
[2011.04.03 18:07:09 | 000,496,640 | ---- | C] () -- C:\WINDOWS\System32\ASWLSVC.exe
[2011.04.03 18:07:09 | 000,159,827 | ---- | C] () -- C:\WINDOWS\System32\RemSvc.exe
[2011.03.23 16:30:06 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011.03.23 16:30:06 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2011.02.09 15:07:33 | 000,056,320 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll
[2011.02.02 20:40:09 | 000,000,382 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2011.01.31 20:44:09 | 000,000,515 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2011.01.31 20:36:01 | 000,096,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd0045.sys
[2011.01.31 19:16:22 | 000,000,046 | ---- | C] () -- C:\WINDOWS\TP-LINK ADSL Modem_Router Utility.INI
[2011.01.28 12:47:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011.01.28 12:16:15 | 000,312,968 | ---- | C] () -- C:\WINDOWS\System32\SDX.dll
[2011.01.28 12:16:15 | 000,300,680 | ---- | C] () -- C:\WINDOWS\System32\SDXFree.exe
[2011.01.23 22:29:06 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2011.01.07 01:13:50 | 000,014,336 | ---- | C] () -- C:\Documents and Settings\asd\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.07 01:08:48 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2011.01.07 01:08:34 | 000,204,800 | R--- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4764.dll
[2011.01.06 23:48:38 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011.01.06 23:47:33 | 000,267,800 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011.01.06 23:24:07 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011.01.06 23:18:54 | 000,021,948 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008.07.03 11:07:43 | 000,007,237 | ---- | C] () -- C:\WINDOWS\cadx2.ini
[2006.10.30 11:30:30 | 000,010,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\SBTEDrv.sys
[2005.11.02 11:39:16 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\SDelete.dll
[2005.11.02 11:39:16 | 000,024,924 | ---- | C] () -- C:\WINDOWS\System32\openports.dll
[2004.08.18 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004.08.18 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004.08.18 14:00:00 | 000,433,082 | ---- | C] () -- C:\WINDOWS\System32\perfh00E.dat
[2004.08.18 14:00:00 | 000,430,496 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004.08.18 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004.08.18 14:00:00 | 000,264,338 | ---- | C] () -- C:\WINDOWS\System32\perfi00E.dat
[2004.08.18 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004.08.18 14:00:00 | 000,092,822 | ---- | C] () -- C:\WINDOWS\System32\perfc00E.dat
[2004.08.18 14:00:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2004.08.18 14:00:00 | 000,067,220 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004.08.18 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004.08.18 14:00:00 | 000,043,990 | ---- | C] () -- C:\WINDOWS\System32\perfd00E.dat
[2004.08.18 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004.08.18 14:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2004.08.18 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004.08.18 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004.08.18 14:00:00 | 000,001,788 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2004.08.18 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003.01.07 16:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI

========== LOP Check ==========

[2011.04.12 15:53:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\4\Application Data\Opera
[2011.03.23 16:30:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ALLPlayer
[2011.01.17 21:09:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ashampoo
[2011.02.02 21:47:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\backup
[2011.01.07 01:14:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\createonepart
[2011.06.19 11:15:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Easybits GO
[2011.01.07 01:14:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\explauncher
[2011.04.09 23:19:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FreeDownloadManager.ORG
[2011.01.07 01:14:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\launcher
[2011.02.14 20:29:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
[2011.01.07 01:14:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\redistpart
[2011.02.02 21:48:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\restore
[2011.07.08 14:29:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sony
[2011.02.09 17:45:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sports Interactive
[2011.07.16 11:12:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2011.07.05 00:33:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Xilisoft
[2011.01.17 21:09:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Ashampoo
[2011.03.25 20:06:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Atari
[2011.04.11 18:16:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Carambis
[2011.01.31 19:37:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Foxit
[2011.01.31 19:37:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Foxit Software
[2011.07.16 11:36:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Free Download Manager
[2011.02.09 22:16:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\GetRightToGo
[2011.02.27 00:08:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\GHISLER
[2011.06.19 11:15:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\go
[2011.01.08 15:01:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\ICAClient
[2011.03.25 20:04:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Leadertech
[2011.01.07 21:27:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Opera
[2011.03.03 22:42:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Petroglyph
[2011.07.08 14:38:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Publish Providers
[2011.06.09 19:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Rovio
[2011.04.22 21:11:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Save-EE
[2011.07.15 08:27:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Software Informer
[2011.07.08 14:38:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Sony
[2011.07.08 13:56:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Sony Setup
[2011.02.09 17:44:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Sports Interactive
[2011.07.11 14:25:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Tific
[2011.02.09 22:17:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Toolbar4
[2011.07.16 11:14:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\uTorrent
[2011.07.05 00:33:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Xilisoft
[2011.07.16 11:01:08 | 000,000,230 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job

========== Purity Check ==========



========== Custom Scans ==========


< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"swg" = "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" -- [2011.01.07 21:25:06 | 000,039,408 | ---- | M] (Google Inc.)
"uTorrent" = "C:\Program Files\uTorrent\uTorrent.exe" -- [2011.04.22 20:57:44 | 000,399,736 | ---- | M] (BitTorrent, Inc.)
"msnmsgr" = "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background -- [2010.04.16 23:11:38 | 003,872,080 | ---- | M] (Microsoft Corporation)
"ALLUpdate" = "C:\Program Files\OpenSubtitlesPlayer\ALLUpdate.exe" "sleep" -- [2010.03.24 02:05:38 | 001,432,064 | ---- | M] ()
"ISUSPM" = "C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler -- [2007.03.29 15:41:26 | 000,222,128 | ---- | M] (Macrovision Corporation)
"Free Download Manager" = "C:\Program Files\Free Download Manager\fdm.exe" -autorun -- [2010.04.28 22:28:18 | 003,727,411 | ---- | M] (FreeDownloadManager.ORG)
"GAINWARD" = "C:\Program Files\EXPERTool\TBPanel.exe" /A -- [2008.07.03 16:50:36 | 002,177,576 | ---- | M] (Gainward Co.)
"Skype" = "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized -- [2011.06.15 15:02:58 | 015,141,768 | R--- | M] (Skype Technologies S.A.)
"SUPERAntiSpyware" = C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe -- [2011.06.30 15:50:31 | 002,424,192 | ---- | M] (SUPERAntiSpyware.com)
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2004.08.18 14:00:00 | 000,015,360 | ---- | M] (Microsoft Corporation)

< c:\windows\*.* /U >
[3 c:\windows\*.tmp files -> c:\windows\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >
[2011.03.23 16:30:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ALLPlayer
[2011.01.17 21:09:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ashampoo
[2011.03.23 17:57:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVS4YOU
[2011.02.02 21:47:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\backup
[2011.01.07 01:14:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\createonepart
[2011.06.19 11:15:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Easybits GO
[2011.01.07 01:14:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\explauncher
[2011.04.09 23:19:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FreeDownloadManager.ORG
[2011.01.07 21:25:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google
[2011.01.07 01:14:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\launcher
[2011.03.31 16:37:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Macrovision
[2011.07.15 19:29:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011.02.14 20:29:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
[2011.06.09 19:55:08 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2011.07.11 15:07:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Norton
[2011.07.11 14:16:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NortonInstaller
[2011.06.16 08:35:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
[2011.07.11 22:00:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Tools
[2011.01.07 01:14:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\redistpart
[2011.02.02 21:48:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\restore
[2011.06.19 11:16:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skype
[2011.06.17 12:56:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skype Extras
[2011.07.08 14:29:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sony
[2011.02.09 17:45:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sports Interactive
[2011.07.15 20:56:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2011.01.22 16:33:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sun
[2011.07.11 22:24:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sunbelt Software
[2011.07.11 22:37:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2011.07.16 11:12:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2011.07.08 14:15:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2011.07.05 00:33:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Xilisoft

< %ALLUSERSPROFILE%\Application Data\*.exe /s >
[2011.05.28 12:11:35 | 000,423,296 | ---- | M] (EasyBits Software AS) -- C:\Documents and Settings\All Users\Application Data\Easybits GO\EasyBitsGO.exe
[2011.05.28 12:11:35 | 000,014,208 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Easybits GO\ezShell64Run.exe
[2011.05.28 12:11:35 | 000,718,208 | ---- | M] (EasyBits Media) -- C:\Documents and Settings\All Users\Application Data\Easybits GO\Svc\GOUpdate.exe
[2011.05.20 17:31:25 | 000,526,512 | ---- | M] (Google Inc.) -- C:\Documents and Settings\All Users\Application Data\Google\Google Toolbar\Update\GoogleToolbarInstaller_updater_signed.exe
[2007.03.29 15:41:28 | 000,992,176 | ---- | M] (Macrovision Corporation) -- C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\agent.exe
[2007.03.20 15:25:36 | 000,205,744 | ---- | M] (InstallShield Software Corporation) -- C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\dwusplay.exe
[2007.03.29 15:41:28 | 000,287,664 | ---- | M] (Macrovision Corporation) -- C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISDM.exe
[2007.03.29 15:41:26 | 000,086,960 | ---- | M] (Macrovision Corporation) -- C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\issch.exe
[2007.03.29 15:41:26 | 000,222,128 | ---- | M] (Macrovision Corporation) -- C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe

< %APPDATA%\*. >
[2011.01.07 21:25:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Adobe
[2011.01.17 21:09:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Ashampoo
[2011.03.25 20:06:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Atari
[2011.03.23 17:57:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\AVS4YOU
[2011.04.11 18:16:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Carambis
[2011.05.06 20:46:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\dvdcss
[2011.01.31 19:37:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Foxit
[2011.01.31 19:37:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Foxit Software
[2011.07.16 11:36:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Free Download Manager
[2011.02.09 22:16:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\GetRightToGo
[2011.02.27 00:08:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\GHISLER
[2011.06.19 11:15:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\go
[2011.01.07 21:25:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Google
[2011.01.08 15:01:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\ICAClient
[2011.01.06 23:25:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Identities
[2011.01.07 01:06:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\InstallShield
[2011.03.25 20:04:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Leadertech
[2011.01.07 21:25:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Macromedia
[2011.03.31 18:07:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Macrovision
[2011.07.15 19:29:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Malwarebytes
[2011.05.18 21:51:47 | 000,000,000 | --SD | M] -- C:\Documents and Settings\asd\Application Data\Microsoft
[2011.01.28 12:48:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Mozilla
[2011.01.07 21:27:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Opera
[2011.03.03 22:42:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Petroglyph
[2011.07.08 14:38:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Publish Providers
[2011.06.09 19:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Rovio
[2011.04.22 21:11:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Save-EE
[2011.07.16 11:14:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Skype
[2011.05.27 16:03:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\skypePM
[2011.07.15 08:27:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Software Informer
[2011.07.08 14:38:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Sony
[2011.07.08 13:56:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Sony Setup
[2011.02.09 17:44:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Sports Interactive
[2011.01.22 16:32:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Sun
[2011.07.11 22:24:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Sunbelt Software
[2011.07.11 22:37:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\SUPERAntiSpyware.com
[2011.07.11 14:25:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Tific
[2011.02.09 22:17:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Toolbar4
[2011.07.16 11:14:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\uTorrent
[2011.07.08 19:19:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\vlc
[2011.01.14 13:15:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\WinRAR
[2011.07.05 00:33:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\asd\Application Data\Xilisoft

< %APPDATA%\*.exe /s >
[2011.07.15 16:22:19 | 000,388,096 | R--- | M] (Trend Micro Inc.) -- C:\Documents and Settings\asd\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
[2011.05.18 21:51:47 | 000,007,680 | R--- | M] () -- C:\Documents and Settings\asd\Application Data\Microsoft\Installer\{50595869-139F-466F-B6C3-7B58988A0F3A}\Icon50595869.exe


< MD5 for: AGP440.SYS >
[2004.08.18 14:00:00 | 018,786,561 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys

< MD5 for: ATAPI.SYS >
[2004.08.18 14:00:00 | 018,786,561 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2004.08.18 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2004.08.18 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\drivers\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2004.08.18 14:00:00 | 000,605,184 | ---- | M] (Microsoft Corporation) MD5=9E8636075B6F0F16C8724E12EC084F2C -- C:\cmdcons\autochk.exe
[2004.08.18 14:00:00 | 000,605,184 | ---- | M] (Microsoft Corporation) MD5=9E8636075B6F0F16C8724E12EC084F2C -- C:\WINDOWS\system32\autochk.exe
[2004.08.18 14:00:00 | 000,605,184 | ---- | M] (Microsoft Corporation) MD5=9E8636075B6F0F16C8724E12EC084F2C -- C:\WINDOWS\system32\dllcache\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.18 14:00:00 | 018,786,561 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2004.08.18 14:00:00 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\system32\drivers\cdrom.sys

< MD5 for: CHANGER.SYS >
[2004.08.18 14:00:00 | 018,786,561 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys

< MD5 for: CRYPTSVC.DLL >
[2004.08.18 14:00:00 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=98EA924C4C1B0EA53393289D64218822 -- C:\WINDOWS\ERDNT\cache\cryptsvc.dll
[2004.08.18 14:00:00 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=98EA924C4C1B0EA53393289D64218822 -- C:\WINDOWS\system32\cryptsvc.dll
[2004.08.18 14:00:00 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=98EA924C4C1B0EA53393289D64218822 -- C:\WINDOWS\system32\dllcache\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2004.08.18 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=9BF16BF2A92E9946C034947E45C6FB4E -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2004.08.18 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=9BF16BF2A92E9946C034947E45C6FB4E -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2004.08.18 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=9BF16BF2A92E9946C034947E45C6FB4E -- C:\WINDOWS\system32\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2004.08.18 14:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=5BF20DA8E16049C4BE8E15EEE1F427C1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2004.08.18 14:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=5BF20DA8E16049C4BE8E15EEE1F427C1 -- C:\WINDOWS\explorer.exe
[2004.08.18 14:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=5BF20DA8E16049C4BE8E15EEE1F427C1 -- C:\WINDOWS\system32\dllcache\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.18 14:00:00 | 018,786,561 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2004.08.18 14:00:00 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\system32\hal.dll

< MD5 for: ISAPNP.SYS >
[2004.08.18 14:00:00 | 000,036,096 | ---- | M] (Microsoft Corporation) MD5=AE9857353A6D45F101C4496789585C25 -- C:\WINDOWS\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2004.08.18 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=13C29FBA0388BEF38F06600994FAA2BA -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2004.08.18 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=13C29FBA0388BEF38F06600994FAA2BA -- C:\WINDOWS\system32\dllcache\lsass.exe
[2004.08.18 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=13C29FBA0388BEF38F06600994FAA2BA -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2004.08.18 14:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2004.08.18 14:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\system32\dllcache\ndis.sys
[2004.08.18 14:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\system32\drivers\ndis.sys

< MD5 for: NETLOGON.DLL >
[2004.08.18 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=38A4E873DEBBA38F1E7E8D9D6AF593D8 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2004.08.18 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=38A4E873DEBBA38F1E7E8D9D6AF593D8 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2004.08.18 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=38A4E873DEBBA38F1E7E8D9D6AF593D8 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004.08.18 14:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=DE117DA3508ECAAECEA21901DBA31DAB -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2004.08.18 14:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=DE117DA3508ECAAECEA21901DBA31DAB -- C:\WINDOWS\system32\dllcache\scecli.dll
[2004.08.18 14:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=DE117DA3508ECAAECEA21901DBA31DAB -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2004.08.18 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=6B0B3C8487EA447BDD155FB52222A156 -- C:\WINDOWS\system32\dllcache\smss.exe
[2004.08.18 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=6B0B3C8487EA447BDD155FB52222A156 -- C:\WINDOWS\system32\smss.exe
[2004.08.04 00:56:58 | 000,152,576 | ---- | M] (Microsoft Corporation) MD5=DA5CF1C368B33D75602FD6B3A7F5E0C6 -- C:\cmdcons\SYSTEM32\SMSS.EXE

< MD5 for: SVCHOST.EXE >
[2004.08.18 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=22D8D9F0F5EBE312A1747D6172205F1B -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2004.08.18 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=22D8D9F0F5EBE312A1747D6172205F1B -- C:\WINDOWS\system32\dllcache\svchost.exe
[2004.08.18 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=22D8D9F0F5EBE312A1747D6172205F1B -- C:\WINDOWS\system32\svchost.exe

< MD5 for: TCPIP.SYS >
[2004.08.18 14:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2004.08.18 14:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2004.08.18 14:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\system32\drivers\tcpip.sys

< MD5 for: USERINIT.EXE >
[2004.08.18 14:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=B722651FB16A7777E885711DB94571DA -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2004.08.18 14:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=B722651FB16A7777E885711DB94571DA -- C:\WINDOWS\system32\dllcache\userinit.exe
[2004.08.18 14:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=B722651FB16A7777E885711DB94571DA -- C:\WINDOWS\system32\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.18 14:00:00 | 000,504,320 | ---- | M] (Microsoft Corporation) MD5=63E65D180BB0607B7240E700D2F73EAD -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2004.08.18 14:00:00 | 000,504,320 | ---- | M] (Microsoft Corporation) MD5=63E65D180BB0607B7240E700D2F73EAD -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2004.08.18 14:00:00 | 000,504,320 | ---- | M] (Microsoft Corporation) MD5=63E65D180BB0607B7240E700D2F73EAD -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2004.08.18 14:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=AF3CC3CB92FB06A47CE979FB9D2CA127 -- C:\WINDOWS\ERDNT\cache\ws2_32.dll
[2004.08.18 14:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=AF3CC3CB92FB06A47CE979FB9D2CA127 -- C:\WINDOWS\system32\dllcache\ws2_32.dll
[2004.08.18 14:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=AF3CC3CB92FB06A47CE979FB9D2CA127 -- C:\WINDOWS\system32\ws2_32.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2011.01.31 20:36:01 | 000,664,064 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys
[2011.01.31 20:36:01 | 000,096,256 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd0045.sys

< %systemroot%\System32\config\*.sav >
[2011.01.06 23:46:49 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2011.01.06 23:46:49 | 000,663,552 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2011.01.06 23:46:48 | 000,442,368 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2038.01.18 23:14:08 | 000,143,360 | ---- | M] (GBK) -- C:\WINDOWS\system32\GBKVBLE.dll
[2011.07.16 11:11:56 | 000,271,490 | ---- | M] () -- C:\WINDOWS\system32\NvApps.xml
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

========== Alternate Data Streams ==========

@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:430C6D84
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2

< End of report >

OTL logfile created on: 2011.07.16. 11:38:17 - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\asd\Asztal
Windows XP Professional Edition Szervizcsomag 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 0000040E | Country: Magyarország | Language: HUN | Date Format: yyyy.MM.dd.

1023,23 Mb Total Physical Memory | 418,15 Mb Available Physical Memory | 40,87% Memory free
2,39 Gb Paging File | 1,75 Gb Available in Paging File | 73,00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 28,90 Gb Free Space | 29,59% Space Free | Partition Type: NTFS
Drive D: | 184,06 Gb Total Space | 76,68 Gb Free Space | 41,66% Space Free | Partition Type: NTFS
Drive F: | 4,02 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive G: | 3,93 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: LACI-FCADFD999C | User Name: asd | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011.07.15 22:18:12 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\asd\Asztal\OTL.exe
PRC - [2011.06.30 15:50:31 | 002,424,192 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2011.06.30 12:47:29 | 000,947,056 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2011.05.25 17:29:54 | 001,951,112 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2011.05.25 17:29:48 | 001,336,712 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2011.04.27 15:37:00 | 000,337,872 | ---- | M] (Threat Expert Ltd.) -- C:\Program Files\PC Tools Security\BDT\BDTUpdateService.exe
PRC - [2011.01.07 14:54:12 | 000,108,496 | ---- | M] (Threat Expert Ltd.) -- C:\Program Files\PC Tools Security\BDT\FGuard.exe
PRC - [2010.05.14 12:44:46 | 000,501,480 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe
PRC - [2010.04.28 22:28:18 | 003,727,411 | ---- | M] (FreeDownloadManager.ORG) -- C:\Program Files\Free Download Manager\fdm.exe
PRC - [2008.07.03 16:50:36 | 002,177,576 | ---- | M] (Gainward Co.) -- C:\Program Files\EXPERTool\TBPANEL.exe
PRC - [2007.03.29 15:41:26 | 000,222,128 | ---- | M] (Macrovision Corporation) -- C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe
PRC - [2006.02.17 02:51:08 | 000,483,328 | ---- | M] () -- C:\Program Files\MSI\US54SE_Utility\ZDWlan.exe
PRC - [2004.11.29 17:17:28 | 000,505,856 | ---- | M] () -- C:\WINDOWS\system32\ASWL2K.exe
PRC - [2004.08.18 14:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004.05.06 12:21:04 | 000,496,640 | ---- | M] () -- C:\WINDOWS\system32\ASWLSVC.exe


========== Modules (SafeList) ==========

MOD - [2011.07.15 22:18:12 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\asd\Asztal\OTL.exe
MOD - [2004.08.18 14:00:00 | 001,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (xzicnnlh)
SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2011.05.25 17:29:48 | 001,336,712 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2011.04.27 15:37:00 | 000,337,872 | ---- | M] (Threat Expert Ltd.) [Auto | Running] -- C:\Program Files\PC Tools Security\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2004.05.06 12:21:04 | 000,496,640 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\ASWLSVC.exe -- (ASWLSVC)


========== Driver Services (SafeList) ==========

DRV - [2011.05.21 16:09:19 | 000,023,456 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DrvAgent32.sys -- (DrvAgent32)
DRV - [2011.01.31 20:36:01 | 000,664,064 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010.05.10 20:41:30 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010.02.17 20:25:48 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2010.01.17 14:10:54 | 000,385,544 | ---- | M] (Paragon) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Uim_IM.sys -- (Uim_IM)
DRV - [2010.01.17 14:10:54 | 000,040,560 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\hotcore3.sys -- (hotcore3)
DRV - [2010.01.17 14:10:54 | 000,034,392 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\UimBus.sys -- (UimBus)
DRV - [2009.08.18 11:32:00 | 005,884,416 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2009.03.18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2008.08.07 13:14:56 | 000,111,360 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2008.08.05 14:10:12 | 001,684,736 | R--- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2007.12.19 10:53:48 | 000,101,120 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2007.03.16 10:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel)
DRV - [2007.03.16 10:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TBPanel.sys -- (Cardex)
DRV - [2006.01.12 12:46:28 | 000,252,928 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt73.sys -- (RT73)
DRV - [2006.01.04 09:41:48 | 001,389,056 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2005.02.11 21:46:22 | 000,371,712 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2004.10.25 13:40:58 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZDPSp50.sys -- (ZDPSp50)
DRV - [2004.08.22 17:31:48 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt)
DRV - [2004.08.22 17:31:10 | 000,155,136 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\d347bus.sys -- (d347bus)
DRV - [2004.03.19 18:11:22 | 000,090,968 | ---- | M] (VM) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbVM31b.sys -- (ZSMC301b)
DRV - [2002.09.09 19:54:06 | 000,016,269 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\ASNDIS5.sys -- (ASNDIS5)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\..\URLSearchHook: {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - C:\Program Files\IsoBuster\prxtbIsoB.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
IE - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "IsoBuster Customized Web Search"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.12.2.16749
FF - prefs.js..extensions.enabledItems: {75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.7
FF - prefs.js..extensions.enabledItems: fdm_ffext@freedownloadmanager.org:1.3.4
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
FF - prefs.js..extensions.enabledItems: {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6}:3.3.3.2
FF - prefs.js..extensions.enabledItems: {cb84136f-9c44-433a-9048-c5cd9df1dc16}:3.0.0.311
FF - prefs.js..network.proxy.type: 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\asd\Local Settings\Application Data\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\asd\Local Settings\Application Data\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{cb84136f-9c44-433a-9048-c5cd9df1dc16}: C:\Program Files\PC Tools Security\BDT\Firefox\ [2011.07.11 21:56:36 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.01.28 12:47:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009.11.19 18:38:17 | 000,000,000 | ---D | M]

[2011.01.28 12:48:11 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\asd\Application Data\Mozilla\Extensions
[2011.07.15 21:25:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions
[2011.05.26 17:47:21 | 000,000,000 | ---D | M] (IsoBuster Community Toolbar) -- C:\Documents and Settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{266fcdca-7bb3-4da7-b3bf-f845dea2ebd6}
[2011.04.28 14:30:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\plugin3@gameplaylabs.com
[2011.07.15 15:57:30 | 000,002,399 | ---- | M] () -- C:\Documents and Settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\searchplugins\askcom.xml
[2011.05.18 16:21:36 | 000,000,921 | ---- | M] () -- C:\Documents and Settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\searchplugins\conduit.xml
[2011.02.10 01:38:38 | 000,002,376 | ---- | M] () -- C:\Documents and Settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\searchplugins\search.xml
[2011.07.15 15:57:09 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ASD\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\TV8IW28C.DEFAULT\EXTENSIONS\{75656794-AB59-4712-BFBC-5D816D56F3BC}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ASD\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\TV8IW28C.DEFAULT\EXTENSIONS\ENGINE@CONDUIT.COM
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ASD\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\TV8IW28C.DEFAULT\EXTENSIONS\TOOLBAR@ASK.COM
[2011.04.09 23:19:59 | 000,000,000 | ---D | M] (Free Download Manager plugin) -- C:\PROGRAM FILES\FREE DOWNLOAD MANAGER\FIREFOX\EXTENSION
[2011.01.22 16:33:31 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011.07.11 21:56:36 | 000,000,000 | ---D | M] (Browser Defender Toolbar) -- C:\PROGRAM FILES\PC TOOLS SECURITY\BDT\FIREFOX
[2010.12.03 20:44:48 | 000,000,760 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2010.12.30 12:47:50 | 000,002,037 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrchostpl.xml
[2010.12.03 20:44:48 | 000,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\polymeta.xml
[2010.12.03 20:44:48 | 000,001,628 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\sztaki-en-hu.xml
[2010.12.03 20:44:48 | 000,000,974 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\vatera.xml
[2010.12.03 20:44:48 | 000,001,189 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-hu.xml

O1 HOSTS File: ([2011.07.15 21:36:26 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (IsoBuster Toolbar) - {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - C:\Program Files\IsoBuster\prxtbIsoB.dll (Conduit Ltd.)
O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)
O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Burn4Free DB Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (IsoBuster Toolbar) - {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - C:\Program Files\IsoBuster\prxtbIsoB.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\..\Toolbar\WebBrowser: (IsoBuster Toolbar) - {266FCDCA-7BB3-4DA7-B3BF-F845DEA2EBD6} - C:\Program Files\IsoBuster\prxtbIsoB.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\..\Toolbar\WebBrowser: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O4 - HKLM..\Run: [DAEMON Tools-1033] C:\Program Files\D-Tools\daemon.exe (DAEMON'S HOME)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [PCTools FGuard] C:\Program Files\PC Tools Security\BDT\FGuard.exe (Threat Expert Ltd.)
O4 - HKU\S-1-5-21-1409082233-1417001333-839522115-1003..\Run: [ALLUpdate] C:\Program Files\OpenSubtitlesPlayer\ALLUpdate.exe ()
O4 - HKU\S-1-5-21-1409082233-1417001333-839522115-1003..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe (FreeDownloadManager.ORG)
O4 - HKU\S-1-5-21-1409082233-1417001333-839522115-1003..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe (Gainward Co.)
O4 - HKU\S-1-5-21-1409082233-1417001333-839522115-1003..\Run: [ISUSPM] C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\S-1-5-21-1409082233-1417001333-839522115-1003..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - HKU\S-1-5-21-1409082233-1417001333-839522115-1003..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Indítópult\MSI US54SE 802.11b+g USB Stick Utility.lnk = C:\Program Files\MSI\US54SE_Utility\ZDWlan.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1409082233-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Az összes letöltése Free Download Managerrel - C:\Program Files\Free Download Manager\dlall.htm ()
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll (Google Inc.)
O8 - Extra context menu item: Kijelölés letöltése Free Download Managerrel - C:\Program Files\Free Download Manager\dlselected.htm ()
O8 - Extra context menu item: Letöltés Free Download Managerrel - C:\Program Files\Free Download Manager\dllink.htm ()
O8 - Extra context menu item: Video letöltése a Free Download Manager-rel - C:\Program Files\Free Download Manager\dlfvideo.htm ()
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O24 - Desktop Components:0 (Jelenlegi saját honlap) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\asd\Asztal\ikon\névtelen.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\asd\Asztal\ikon\névtelen.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.01.06 23:21:56 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2005.02.25 19:24:46 | 000,000,051 | R--- | M] () - G:\autorun.inf -- [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: xzicnnlh - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Ligos Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Ligos Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2038.01.18 23:14:08 | 000,143,360 | ---- | C] (GBK) -- C:\WINDOWS\System32\GBKVBLE.dll
[2011.07.15 23:07:49 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2011.07.15 22:18:11 | 000,579,584 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\asd\Asztal\OTL.exe
[2011.07.15 22:14:14 | 001,436,976 | ---- | C] (Kaspersky Lab ZAO) -- C:\Documents and Settings\asd\Asztal\tdsskiller.exe
[2011.07.15 21:25:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2011.07.15 20:12:16 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011.07.15 20:10:05 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011.07.15 20:10:05 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011.07.15 20:10:05 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011.07.15 20:10:05 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011.07.15 20:09:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2011.07.15 20:09:54 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011.07.15 20:09:52 | 000,000,000 | R--D | C] -- C:\Documents and Settings\asd\Start Menu\Programs\Felügyeleti eszközök
[2011.07.15 20:09:14 | 004,153,571 | R--- | C] (Swearware) -- C:\Documents and Settings\asd\Asztal\ComboFix.exe
[2011.07.15 19:29:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Application Data\Malwarebytes
[2011.07.15 19:29:39 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011.07.15 19:29:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.07.15 19:29:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011.07.15 19:29:36 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011.07.15 19:29:36 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.07.15 19:21:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Asztal\RK_Quarantine
[2011.07.15 19:01:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Local Settings\Application Data\Threat Expert
[2011.07.15 16:22:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Start Menu\Programs\HiJackThis
[2011.07.15 16:22:15 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2011.07.15 16:09:54 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2011.07.15 16:09:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2011.07.15 16:02:28 | 016,278,832 | ---- | C] (Sunbelt Software ) -- C:\Documents and Settings\asd\Asztal\VIPRE.AV.AS.4.0.3904.exe
[2011.07.11 22:37:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Application Data\SUPERAntiSpyware.com
[2011.07.11 22:37:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2011.07.11 22:37:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware
[2011.07.11 22:36:45 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2011.07.11 22:24:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Application Data\Sunbelt Software
[2011.07.11 22:24:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sunbelt Software
[2011.07.11 22:22:09 | 000,000,000 | ---D | C] -- C:\Program Files\Sunbelt Software
[2011.07.11 21:54:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools
[2011.07.11 21:46:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\PC Tools
[2011.07.11 21:30:03 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\asd\Recent
[2011.07.11 21:24:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\CCleaner
[2011.07.11 21:24:03 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011.07.11 21:23:40 | 000,149,456 | ---- | C] (PC Tools) -- C:\WINDOWS\SGDetectionTool.dll0726.old
[2011.07.11 21:23:40 | 000,149,456 | ---- | C] (PC Tools) -- C:\WINDOWS\SGDetectionTool.dll
[2011.07.11 21:23:39 | 002,074,576 | ---- | C] (Threat Expert Ltd.) -- C:\WINDOWS\PCTBDCore.dll
[2011.07.11 21:23:39 | 002,000,848 | ---- | C] (Threat Expert Ltd.) -- C:\WINDOWS\PCTBDCore.dll0726.old
[2011.07.11 21:23:38 | 001,533,904 | ---- | C] (Threat Expert Ltd.) -- C:\WINDOWS\PCTBDRes.dll
[2011.07.11 21:22:02 | 000,000,000 | ---D | C] -- C:\Program Files\PC Tools Security
[2011.07.11 21:20:26 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2011.07.11 21:16:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2011.07.11 14:39:55 | 000,000,000 | ---D | C] -- C:\Program Files\MSSOAP
[2011.07.11 14:39:25 | 000,000,000 | ---D | C] -- C:\Program Files\Webroot
[2011.07.11 14:25:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Application Data\Tific
[2011.07.11 14:25:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Local Settings\Application Data\Symantec
[2011.07.11 14:17:33 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Sidebar
[2011.07.11 14:17:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Norton
[2011.07.11 14:16:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\NortonInstaller
[2011.07.08 22:04:55 | 000,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstee.sys
[2011.07.08 22:04:49 | 000,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndisip.sys
[2011.07.08 22:04:45 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\streamip.sys
[2011.07.08 22:04:44 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax
[2011.07.08 22:04:44 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ipsink.ax
[2011.07.08 22:04:40 | 000,011,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\slip.sys
[2011.07.08 22:04:34 | 000,019,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstcodec.sys
[2011.07.08 22:04:28 | 000,085,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2011.07.08 22:04:23 | 000,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ccdecode.sys
[2011.07.08 22:03:27 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax
[2011.07.08 22:03:27 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2011.07.08 22:03:27 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax
[2011.07.08 22:03:27 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kstvtune.ax
[2011.07.08 22:03:27 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax
[2011.07.08 22:03:27 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vidcap.ax
[2011.07.08 22:03:24 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll
[2011.07.08 22:03:24 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2011.07.08 22:03:23 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax
[2011.07.08 22:03:23 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksxbar.ax
[2011.07.08 22:02:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\Album
[2011.07.08 22:02:51 | 000,184,392 | ---- | C] (VM) -- C:\WINDOWS\System32\VM31bPrp.Ax
[2011.07.08 22:02:51 | 000,090,968 | ---- | C] (VM) -- C:\WINDOWS\System32\drivers\usbVM31b.sys
[2011.07.08 22:02:51 | 000,061,440 | ---- | C] (VM) -- C:\WINDOWS\System32\VM31bSTI.dll
[2011.07.08 22:02:51 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Look312P
[2011.07.08 22:02:51 | 000,000,000 | ---D | C] -- C:\Program Files\Look 312P
[2011.07.08 22:02:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Look 312P
[2011.07.08 22:02:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Asztal\Ui
[2011.07.08 14:38:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Application Data\Publish Providers
[2011.07.08 14:35:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Local Settings\Application Data\Sony
[2011.07.08 14:30:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Sony
[2011.07.08 14:29:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sony
[2011.07.08 14:29:02 | 000,000,000 | ---D | C] -- C:\Program Files\Sony
[2011.07.08 14:20:09 | 000,014,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2011.07.08 14:19:15 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2
[2011.07.08 14:16:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF
[2011.07.08 14:16:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
[2011.07.08 14:15:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2011.07.08 14:11:08 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2011.07.08 14:02:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2011.07.08 14:02:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-us
[2011.07.08 14:01:45 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2011.07.08 14:01:16 | 000,014,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg2.dll
[2011.07.08 13:56:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Application Data\Sony Setup
[2011.07.08 13:45:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Application Data\Sony
[2011.07.05 21:43:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Start Menu\Programs\San Andreas Multiplayer
[2011.07.05 00:33:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Application Data\Xilisoft
[2011.07.05 00:33:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Xilisoft
[2011.07.05 00:33:23 | 000,000,000 | ---D | C] -- C:\Program Files\Xilisoft
[2011.07.05 00:33:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Xilisoft
[2011.07.05 00:31:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Video Cutter
[2011.07.05 00:31:03 | 000,212,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\richtx32.ocx
[2011.07.05 00:31:02 | 000,000,000 | ---D | C] -- C:\Program Files\Video Cutter
[2011.07.05 00:28:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Free Video Cutter
[2011.07.05 00:28:54 | 000,000,000 | ---D | C] -- C:\Program Files\Free Video Cutter
[2011.06.29 16:50:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\asd\Start Menu\Programs\Counter-Strike Source
[2011.06.29 16:37:38 | 000,000,000 | ---D | C] -- C:\Program Files\Counter-Strike Source
[2011.06.19 11:16:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Skype
[2011.06.17 12:47:16 | 000,026,176 | -H-- | C] (LogMeIn, Inc.) -- C:\WINDOWS\System32\hamachi.sys
[2011.06.17 12:47:11 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2011.06.17 12:47:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\LogMeIn Hamachi
[2011.01.31 20:36:56 | 000,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys
[2011.01.31 20:36:56 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2038.01.18 23:14:08 | 000,143,360 | ---- | M] (GBK) -- C:\WINDOWS\System32\GBKVBLE.dll
[2011.07.16 11:11:57 | 000,001,006 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011.07.16 11:11:56 | 000,271,490 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2011.07.16 11:11:49 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011.07.16 11:01:08 | 000,000,230 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011.07.16 10:47:00 | 000,001,100 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1409082233-1417001333-839522115-1003UA.job
[2011.07.16 07:45:27 | 000,001,010 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011.07.15 22:33:36 | 000,637,440 | ---- | M] () -- C:\Documents and Settings\All Users\Dokumentumok\irhpvb.exe
[2011.07.15 22:18:12 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\asd\Asztal\OTL.exe
[2011.07.15 22:14:14 | 001,436,976 | ---- | M] (Kaspersky Lab ZAO) -- C:\Documents and Settings\asd\Asztal\tdsskiller.exe
[2011.07.15 21:47:03 | 000,001,048 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1409082233-1417001333-839522115-1003Core.job
[2011.07.15 21:36:26 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011.07.15 20:12:20 | 000,000,336 | RHS- | M] () -- C:\boot.ini
[2011.07.15 20:09:38 | 004,153,571 | R--- | M] (Swearware) -- C:\Documents and Settings\asd\Asztal\ComboFix.exe
[2011.07.15 19:29:39 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Asztal\Malwarebytes' Anti-Malware.lnk
[2011.07.15 19:20:32 | 000,516,608 | ---- | M] () -- C:\Documents and Settings\asd\Asztal\RogueKiller.exe
[2011.07.15 18:50:38 | 000,000,549 | ---- | M] () -- C:\fix.bat
[2011.07.15 18:46:45 | 000,000,232 | ---- | M] () -- C:\WINDOWS\wininit.ini
[2011.07.15 16:22:16 | 000,001,980 | ---- | M] () -- C:\Documents and Settings\asd\Asztal\HiJackThis.lnk
[2011.07.14 21:38:01 | 000,014,336 | ---- | M] () -- C:\Documents and Settings\asd\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.07.14 13:10:36 | 324,952,767 | ---- | M] () -- C:\Documents and Settings\asd\Asztal\1parte - Brasil VS Ecuador.flv
[2011.07.14 12:56:11 | 347,656,203 | ---- | M] () -- C:\Documents and Settings\asd\Asztal\2parte - Brasil VS Ecuador.flv
[2011.07.14 12:47:22 | 021,860,416 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\CopaAmerica.2011_Brazil_vs_Ecuador_FullMatch-1stHal5f.avi
[2011.07.14 12:45:16 | 001,835,008 | ---- | M] () -- C:\Documents and Settings\asd\Asztal\CopaAmerica.2011_Brazil_vs_Ecuador_FullMatch-1stHalf.avi
[2011.07.14 12:44:34 | 016,188,480 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\CopaAmerica.2011_Brazil_vs_Ecuador_FullMatch-1stHalf.avi
[2011.07.11 22:37:11 | 000,001,678 | ---- | M] () -- C:\Documents and Settings\All Users\Asztal\SUPERAntiSpyware Free Edition.lnk
[2011.07.11 22:25:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\SBFC.dat
[2011.07.11 21:46:21 | 000,511,968 | ---- | M] () -- C:\Documents and Settings\asd\Asztal\sdsetup.exe
[2011.07.11 21:24:06 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Asztal\CCleaner.lnk
[2011.07.11 21:23:08 | 000,493,718 | ---- | M] () -- C:\WINDOWS\System32\drivers\Cat.DB
[2011.07.11 17:15:06 | 000,000,000 | RHS- | M] () -- C:\Documents and Settings\All Users\Dokumentumok\ctf
[2011.07.11 16:18:43 | 000,248,624 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\The.Adjustment.Bureau.DVDRip.XviD-DEFACED.avi
[2011.07.11 14:29:37 | 000,000,166 | ---- | M] () -- C:\WINDOWS\install.dat
[2011.07.11 10:34:02 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011.07.10 17:11:16 | 366,776,452 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E19.HDTV.XviD-LOL.avi
[2011.07.09 11:19:09 | 000,267,800 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011.07.08 22:02:54 | 000,000,665 | ---- | M] () -- C:\Documents and Settings\All Users\Asztal\Look 312P.lnk
[2011.07.08 15:01:27 | 366,783,136 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E16.HDTV.XviD-LOL.avi
[2011.07.08 14:37:44 | 000,002,596 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\Register Vegas Pro.htm
[2011.07.08 14:24:30 | 366,712,664 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E15.HDTV.XviD-LOL.avi
[2011.07.08 14:22:33 | 000,000,800 | ---- | M] () -- C:\Documents and Settings\asd\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011.07.08 14:19:44 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2011.07.08 14:19:44 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2011.07.08 14:16:57 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2011.07.08 14:12:08 | 000,433,082 | ---- | M] () -- C:\WINDOWS\System32\perfh00E.dat
[2011.07.08 14:12:08 | 000,430,496 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011.07.08 14:12:08 | 000,092,822 | ---- | M] () -- C:\WINDOWS\System32\perfc00E.dat
[2011.07.08 14:12:08 | 000,067,220 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011.07.08 13:46:32 | 366,669,500 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E14.HDTV.XviD-LOL.avi
[2011.07.07 22:26:31 | 366,528,176 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E13.HDTV.XviD-2HD.avi
[2011.07.07 20:18:04 | 366,574,578 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.s08e12.proper.hdtv.xvid-2hd.avi
[2011.07.07 10:59:33 | 367,458,760 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E11.HDTV.XviD-FQM.avi
[2011.07.07 10:35:23 | 367,278,086 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E10.HDTV.XviD-P0W4.avi
[2011.07.07 10:21:28 | 367,103,000 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E09.HDTV.XviD-P0W4.avi
[2011.07.07 10:09:42 | 366,875,240 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.s08e08.hdtv.xvid.avi
[2011.07.06 17:24:40 | 366,990,786 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E07.HDTV.XviD-P0W4.avi
[2011.07.06 17:08:47 | 367,025,590 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E06.HDTV.XviD-FQM.avi
[2011.07.06 16:58:20 | 367,498,630 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E05.HDTV.XviD-FQM.avi
[2011.07.06 15:40:53 | 367,483,108 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E04.HDTV.XviD-FQM.avi
[2011.07.06 15:13:38 | 367,440,196 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.s08e03.hdtv.xvid-fqm.by.CJRobert.avi
[2011.07.05 15:58:29 | 367,017,816 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S08E02.HDTV.XviD-2HD.avi
[2011.07.05 13:23:42 | 052,517,037 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\Egy éjszaka Bohémiában [2008].rar
[2011.07.05 00:33:37 | 000,001,775 | ---- | M] () -- C:\Documents and Settings\asd\Application Data\Microsoft\Internet Explorer\Quick Launch\Xilisoft Video Cutter 2.lnk
[2011.07.05 00:33:37 | 000,001,757 | ---- | M] () -- C:\Documents and Settings\All Users\Asztal\Xilisoft Video Cutter 2.lnk
[2011.07.04 23:09:50 | 366,733,134 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.s08e01.hdtv.xvid-2hd.avi
[2011.07.04 16:02:49 | 367,681,536 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E24.DVDrip.XviD-TOPAZ.avi
[2011.07.04 15:22:55 | 367,503,360 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E23.DVDrip.XviD-TOPAZ.avi
[2011.07.03 21:37:50 | 366,729,216 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.722.hdtv-lol.www.diviksfilm.com.laztrix.avi
[2011.07.03 19:47:30 | 366,788,774 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E21.HDTV.XviD-LOL.avi
[2011.07.01 21:32:07 | 366,778,368 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E20.HDTV.XviD-LOL.avi
[2011.07.01 21:13:34 | 366,718,212 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E19.HDTV.XviD-LOL.avi
[2011.06.30 21:37:18 | 366,923,044 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24 - 7x18 - Day 7 1 00 A.M.-2 00 A.M..HDTV.NoTV.hu.avi
[2011.06.30 21:18:58 | 366,870,398 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.s07e17.hdtv.xvid-fqm.hun.avi
[2011.06.30 16:53:52 | 366,746,514 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E15.HDTV.XviD-LOL_SeriesGringas.Org.avi
[2011.06.30 15:13:11 | 366,788,516 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E14.HDTV.XviD-LOL.[VTV].avi
[2011.06.30 14:26:51 | 000,003,162 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\index.htm
[2011.06.30 13:21:47 | 366,798,848 | ---- | M] () -- C:\Documents and Settings\asd\Dokumentumok\24.S07E13.HDTV.XviD-LOL.avi
[2011.06.29 08:02:12 | 000,002,246 | ---- | M] () -- C:\Documents and Settings\asd\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011.06.26 08:45:56 | 000,256,000 | ---- | M] () -- C:\WINDOWS\PEV.exe
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

Naaa, mar eleg jol nez ki,,
mar kinyilik akarmijen oldal??
Kapcsold ki a rendszervisszallitasat>>restrt>.es kapcsold be vissza.

Meg lefutatol 2 programot, majd tedd ide a naplojat, majd holnap megnezem

1-so>>TDSSKillert
http://www.virus-stell.com/2010/08/root ... -tdl3.html

Es eztet:
Letolteni az asztalra>OTListIt2>> http://oldtimer.geekstogo.com/OTL.exe
-Futatni
-bepipazni
-Scan all users.
-Lop check.
-Purity check.
-v sekciobaExtra Registry>bepotyozni>Use SafeList
-az ablakjaba -customscan/fixes masold be a zold textet-es klik RUNSCAN
-5-10 perc mulva add logot tedd ide
-OTL.txt (az asztalon lesz). Tedd ide
-extras.txt-a talcan lesz.tedd ide

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_abtedxjb
-------\Service_bsvxq
-------\Service_chvahk
-------\Service_cvygyik
-------\Service_eckcs
-------\Service_efmocrxpa
-------\Service_fpdib
-------\Service_geufcze
-------\Service_hiivmdnmh
-------\Service_ilpva
-------\Service_iuxffsc
-------\Service_jufbow
-------\Service_lpzimwnf
-------\Service_nmzgibh
-------\Service_npaxfcfcm
-------\Service_odqqf
-------\Service_ozbjiug
-------\Service_pmgfwxxt
-------\Service_sstllgbj
-------\Service_ugesesdmd
-------\Service_uvgxzwidu
-------\Service_wofmewuto
-------\Service_wsnoli
-------\Service_ywuwadoxe
.
.
((((((((((((((((((((((((( Files Created from 2011-06-15 to 2011-07-15 )))))))))))))))))))))))))))))))
.
.
2038-01-18 21:14 . 2038-01-18 21:14 143360 ----a-w- c:\windows\system32\GBKVBLE.dll
2011-07-15 18:52 . 2011-05-11 14:26 74968 ----a-w- c:\windows\system32\drivers\sbapifs.sys
2011-07-15 18:52 . 2011-05-11 14:26 21592 ----a-w- c:\windows\system32\drivers\sbaphd.sys
2011-07-15 17:29 . 2011-07-15 17:29 -------- d-----w- c:\documents and settings\asd\Application Data\Malwarebytes
2011-07-15 17:29 . 2011-07-15 17:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2011-07-15 17:29 . 2010-12-20 16:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-15 17:29 . 2011-07-15 17:29 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-07-15 17:29 . 2010-12-20 16:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-07-15 17:17 . 2011-07-15 17:17 -------- d-----w- c:\documents and settings\Rendszergazda
2011-07-15 17:01 . 2011-07-15 17:01 -------- d-----w- c:\documents and settings\asd\Local Settings\Application Data\Threat Expert
2011-07-15 16:50 . 2011-07-15 16:50 549 ----a-w- C:\fix.bat
2011-07-15 14:22 . 2011-07-15 14:22 388096 ----a-r- c:\documents and settings\asd\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-07-15 14:22 . 2011-07-15 14:22 -------- d-----w- c:\program files\Trend Micro
2011-07-15 14:09 . 2011-07-15 18:56 -------- d-----w- c:\program files\Spybot - Search & Destroy
2011-07-15 14:09 . 2011-07-15 18:56 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2011-07-15 13:30 . 2011-07-15 13:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Sunbelt
2011-07-15 13:29 . 2011-07-15 13:29 -------- d-----w- c:\documents and settings\asd\Application Data\Sunbelt
2011-07-15 13:21 . 2011-04-05 15:35 94040 ----a-w- c:\windows\system32\drivers\sbhips.sys
2011-07-15 13:21 . 2011-04-05 15:35 212568 ----a-w- c:\windows\system32\drivers\sbtis.sys
2011-07-15 13:21 . 2011-04-05 15:35 332248 ----a-w- c:\windows\system32\drivers\SbFw.sys
2011-07-15 13:21 . 2011-02-08 07:14 69208 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2011-07-11 20:37 . 2011-07-11 20:37 -------- d-----w- c:\documents and settings\asd\Application Data\SUPERAntiSpyware.com
2011-07-11 20:37 . 2011-07-11 20:37 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2011-07-11 20:36 . 2011-07-11 20:37 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-07-11 20:24 . 2011-07-11 20:24 -------- d-----w- c:\documents and settings\asd\Application Data\Sunbelt Software
2011-07-11 20:24 . 2011-07-11 20:24 -------- d-----w- c:\documents and settings\All Users\Application Data\Sunbelt Software
2011-07-11 20:22 . 2011-07-15 13:19 -------- d-----w- c:\program files\Sunbelt Software
2011-07-11 19:54 . 2011-07-11 20:06 -------- d-----w- c:\program files\Common Files\PC Tools
2011-07-11 19:46 . 2011-07-11 20:00 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Tools
2011-07-11 19:24 . 2011-07-11 19:24 -------- d-----w- c:\program files\CCleaner
2011-07-11 19:23 . 2011-04-27 13:36 767952 ----a-w- c:\windows\BDTSupport.dll
2011-07-11 19:23 . 2011-04-27 13:37 149456 ----a-w- c:\windows\SGDetectionTool.dll
2011-07-11 19:23 . 2011-04-27 13:37 2074576 ----a-w- c:\windows\PCTBDCore.dll
2011-07-11 19:23 . 2011-04-27 13:37 1533904 ----a-w- c:\windows\PCTBDRes.dll
2011-07-11 19:22 . 2011-07-11 20:06 -------- d-----w- c:\program files\PC Tools Security
2011-07-11 19:16 . 2011-07-15 19:36 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2011-07-11 12:39 . 2011-07-11 12:39 -------- d-----w- c:\program files\MSSOAP
2011-07-11 12:39 . 2011-07-11 12:39 -------- d-----w- c:\program files\Webroot
2011-07-11 12:25 . 2011-07-11 12:25 -------- d-----w- c:\documents and settings\asd\Application Data\Tific
2011-07-11 12:25 . 2011-07-11 12:25 -------- d-----w- c:\documents and settings\asd\Local Settings\Application Data\Symantec
2011-07-11 12:17 . 2011-07-11 12:17 -------- d-----w- c:\program files\Windows Sidebar
2011-07-11 12:17 . 2011-07-11 13:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
2011-07-08 20:03 . 2004-08-17 14:48 28672 ----a-w- c:\windows\system32\vidcap.ax
2011-07-08 20:03 . 2004-08-17 14:48 91136 ----a-w- c:\windows\system32\kswdmcap.ax
2011-07-08 20:03 . 2004-08-17 14:48 61952 ----a-w- c:\windows\system32\kstvtune.ax
2011-07-08 20:03 . 2004-08-17 14:47 54272 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2011-07-08 20:03 . 2004-08-17 14:47 54272 ----a-w- c:\windows\system32\vfwwdm32.dll
2011-07-08 20:03 . 2004-08-17 14:48 43008 ----a-w- c:\windows\system32\ksxbar.ax
2011-07-08 20:02 . 2011-07-08 20:02 -------- d-----w- c:\windows\Album
2011-07-08 20:02 . 2011-07-08 20:02 -------- d-----w- c:\program files\Look 312P
2011-07-08 20:02 . 2011-07-08 20:02 -------- d-----w- c:\program files\Common Files\Look312P
2011-07-08 20:02 . 2005-06-27 16:24 184392 ----a-w- c:\windows\system32\VM31bPrp.Ax
2011-07-08 20:02 . 2004-03-19 16:11 90968 ----a-w- c:\windows\system32\drivers\usbVM31b.sys
2011-07-08 20:02 . 2003-05-15 15:17 61440 ----a-w- c:\windows\system32\VM31bSTI.dll
2011-07-08 12:38 . 2011-07-08 12:38 -------- d-----w- c:\documents and settings\asd\Application Data\Publish Providers
2011-07-08 12:35 . 2011-07-08 12:35 -------- d-----w- c:\documents and settings\asd\Local Settings\Application Data\Sony
2011-07-08 12:29 . 2011-07-08 12:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Sony
2011-07-08 12:29 . 2011-07-08 12:29 -------- d-----w- c:\program files\Sony
2011-07-08 12:22 . 2004-08-18 12:00 25600 ----a-w- c:\documents and settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2011-07-08 12:19 . 2011-07-08 12:19 -------- d-----w- c:\program files\Windows Media Connect 2
2011-07-08 12:16 . 2011-07-08 12:17 -------- d-----w- c:\windows\system32\drivers\UMDF
2011-07-08 12:16 . 2011-07-08 12:16 -------- d-----w- c:\windows\system32\LogFiles
2011-07-08 12:11 . 2011-07-08 12:11 -------- d-----w- c:\program files\MSBuild
2011-07-08 12:02 . 2011-07-08 12:02 -------- d-----w- c:\windows\system32\XPSViewer
2011-07-08 12:01 . 2011-07-08 12:01 -------- d-----w- c:\program files\Reference Assemblies
2011-07-08 12:01 . 2006-10-14 14:43 27648 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2011-07-08 12:01 . 2006-06-29 11:07 14048 ------w- c:\windows\system32\spmsg2.dll
2011-07-08 11:56 . 2011-07-08 11:56 -------- d-----w- c:\documents and settings\asd\Application Data\Sony Setup
2011-07-08 11:45 . 2011-07-08 12:38 -------- d-----w- c:\documents and settings\asd\Application Data\Sony
2011-07-04 22:33 . 2011-07-04 22:33 -------- d-----w- c:\documents and settings\asd\Application Data\Xilisoft
2011-07-04 22:33 . 2011-07-04 22:33 -------- d-----w- c:\program files\Xilisoft
2011-07-04 22:33 . 2011-07-04 22:33 -------- d-----w- c:\documents and settings\All Users\Application Data\Xilisoft
2011-07-04 22:31 . 2004-03-08 19:30 212240 ----a-w- c:\windows\system32\richtx32.ocx
2011-07-04 22:31 . 2011-07-04 22:31 -------- d-----w- c:\program files\Video Cutter
2011-07-04 22:28 . 2011-07-04 22:28 -------- d-----w- c:\program files\Free Video Cutter
2011-06-29 14:37 . 2011-06-30 10:09 -------- d-----w- c:\program files\Counter-Strike Source
2011-06-17 10:47 . 2009-03-18 15:35 26176 ---ha-w- c:\windows\system32\hamachi.sys
2011-06-17 10:47 . 2011-06-17 10:47 -------- d-----w- c:\program files\LogMeIn Hamachi
2011-06-16 07:04 . 2011-06-16 07:04 922312 ----a-w- c:\windows\Grand Theft Auto_ San Andreas hun Uninstaller.exe
2011-06-16 06:40 . 2004-10-22 00:18 749568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll
2011-06-16 06:40 . 2004-10-22 00:17 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll
2011-06-16 06:40 . 2004-10-22 00:17 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll
2011-06-16 06:40 . 2004-10-22 00:16 180224 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll
2011-06-16 06:40 . 2004-10-22 00:16 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe
2011-06-16 06:40 . 2011-06-16 06:40 323716 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll
2011-06-16 06:40 . 2011-06-16 06:40 192644 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll
2011-06-16 06:35 . 2011-06-16 06:35 -------- d-----w- c:\program files\AGEIA Technologies
2011-06-16 06:35 . 2011-06-16 06:35 -------- d-----w- c:\documents and settings\All Users\Application Data\NVIDIA Corporation
2011-06-16 06:34 . 2011-06-16 06:35 -------- d-----w- c:\program files\NVIDIA Corporation
2011-06-16 06:34 . 2010-01-12 04:03 61440 ----a-w- c:\windows\system32\OpenCL.dll
2011-06-16 06:34 . 2010-01-12 04:03 10276768 -c--a-w- c:\windows\system32\dllcache\nv4_mini.sys
2011-06-16 06:34 . 2010-01-12 04:03 10276768 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-06-16 06:34 . 2010-01-12 04:03 4104192 ----a-w- c:\windows\system32\nvcuda.dll
2011-06-16 06:34 . 2010-01-12 04:03 4077672 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-06-16 06:34 . 2010-01-12 04:03 2259560 ----a-w- c:\windows\system32\nvcuvid.dll
2011-06-16 06:34 . 2010-01-12 04:03 182888 ----a-w- c:\windows\system32\nvcodins.dll
2011-06-16 06:34 . 2010-01-12 04:03 182888 ----a-w- c:\windows\system32\nvcod.dll
2011-06-16 06:34 . 2010-01-12 04:03 14458880 ----a-w- c:\windows\system32\nvoglnt.dll
2011-06-16 06:34 . 2010-01-12 04:03 11632640 ----a-w- c:\windows\system32\nvcompiler.dll
2011-06-16 06:34 . 2010-01-12 04:03 1081344 ----a-w- c:\windows\system32\nvapi.dll
2011-06-16 06:33 . 2010-01-12 04:03 6359168 -c--a-w- c:\windows\system32\dllcache\nv4_disp.dll
2011-06-16 06:33 . 2010-01-12 04:03 6359168 ----a-w- c:\windows\system32\nv4_disp.dll
2011-06-16 06:33 . 2010-01-12 04:03 2283526 ----a-w- c:\windows\system32\nvdata.bin
2011-06-16 06:33 . 2011-06-16 06:33 -------- d-----w- C:\NVIDIA
2011-06-16 06:23 . 2007-03-16 08:11 12256 ----a-w- c:\windows\system32\drivers\TBPanel.sys
2011-06-16 06:23 . 2011-06-16 06:39 -------- d-----w- c:\program files\EXPERTool
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-08 14:38 . 2011-02-07 10:29 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-05-26 17:15 . 2011-05-26 17:10 21840 ----atw- c:\windows\system32\SIntfNT.dll
2011-05-26 17:15 . 2011-05-26 17:10 17212 ----atw- c:\windows\system32\SIntf32.dll
2011-05-26 17:15 . 2011-05-26 17:10 12067 ----atw- c:\windows\system32\SIntf16.dll
2011-05-21 14:09 . 2011-05-21 14:09 23456 ----a-w- c:\windows\system32\drivers\DrvAgent32.sys
2011-05-18 19:51 . 2011-05-18 19:51 7680 ----a-r- c:\documents and settings\asd\Application Data\Microsoft\Installer\{50595869-139F-466F-B6C3-7B58988A0F3A}\Icon50595869.exe
2011-05-11 14:55 . 2011-05-11 14:55 42832 ----a-w- c:\windows\system32\sbbd.exe
2011-04-29 12:15 . 2011-04-29 12:15 101720 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
.
.
((((((((((((((((((((((((((((( SnapShot@2011-07-15_18.20.58 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-07-15 19:36 . 2011-07-15 19:36 16384 c:\windows\temp\Perflib_Perfdata_afc.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{266fcdca-7bb3-4da7-b3bf-f845dea2ebd6}"= "c:\program files\IsoBuster\prxtbIsoB.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{266fcdca-7bb3-4da7-b3bf-f845dea2ebd6}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{266fcdca-7bb3-4da7-b3bf-f845dea2ebd6}]
2011-01-17 14:54 175912 ----a-w- c:\program files\IsoBuster\prxtbIsoB.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{266fcdca-7bb3-4da7-b3bf-f845dea2ebd6}"= "c:\program files\IsoBuster\prxtbIsoB.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{266fcdca-7bb3-4da7-b3bf-f845dea2ebd6}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{266FCDCA-7BB3-4DA7-B3BF-F845DEA2EBD6}"= "c:\program files\IsoBuster\prxtbIsoB.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{266fcdca-7bb3-4da7-b3bf-f845dea2ebd6}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-01-07 39408]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-04-22 399736]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
"ALLUpdate"="c:\program files\OpenSubtitlesPlayer\ALLUpdate.exe" [2010-03-24 1432064]
"ISUSPM"="c:\documents and settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2007-03-29 222128]
"Free Download Manager"="c:\program files\Free Download Manager\fdm.exe" [2010-04-28 3727411]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2008-07-03 2177576]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-06-15 15141768]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-06-30 2424192]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-18 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-01-13 131072]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-01-13 163840]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-01-13 135168]
"RTHDCPL"="RTHDCPL.EXE" [2009-08-14 18702336]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"DAEMON Tools-1033"="c:\program files\D-Tools\daemon.exe" [2004-08-22 81920]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-11 13666408]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-01-11 110696]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2011-05-25 1951112]
"PCTools FGuard"="c:\program files\PC Tools Security\BDT\FGuard.exe" [2011-01-07 108496]
"SBAMTray"="c:\program files\Sunbelt Software\CounterSpy\SBAMTray.exe" [2011-05-11 1353040]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-18 15360]
.
c:\documents and settings\All Users\Start Menu\Programs\Indˇt˘pult\
MSI US54SE 802.11b+g USB Stick Utility.lnk - c:\program files\MSI\US54SE_Utility\ZDWlan.exe [2011-4-18 483328]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBPIMSvc]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Sierra\\Empire Earth - The Art of Conquest\\EE-AOC.exe"=
"c:\\Program Files\\Sports Interactive\\Football Manager 2011\\fm.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Counter-Strike 1.6 V40\\hl.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Counter-Strike Source\\hl2.exe"=
.
R0 d347bus;d347bus;c:\windows\system32\drivers\d347bus.sys [2011.01.31. 20:36 155136]
R0 d347prt;d347prt;c:\windows\system32\drivers\d347prt.sys [2011.01.31. 20:36 5248]
R0 hotcore3;hc3ServiceName;c:\windows\system32\drivers\hotcore3.sys [2011.02.02. 21:45 40560]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2011.01.31. 20:36 664064]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2010.02.17. 20:25 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010.05.10. 20:41 67656]
R1 sbaphd;sbaphd;c:\windows\system32\drivers\sbaphd.sys [2011.07.15. 20:52 21592]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [2011.07.15. 15:21 332248]
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREDrv.sys [2011.04.29. 14:15 101720]
R1 SbTis;SbTis;c:\windows\system32\drivers\sbtis.sys [2011.07.15. 15:21 212568]
R2 Browser Defender Update Service;Browser Defender Update Service;c:\program files\PC Tools Security\BDT\BDTUpdateService.exe [2011.07.11. 21:23 337872]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2011.05.25. 17:29 1336712]
R2 SBAMSvc;VIPRE Antivirus Premium;c:\program files\Sunbelt Software\CounterSpy\SBAMSvc.exe [2011.05.11. 16:54 2804280]
R2 sbapifs;sbapifs;c:\windows\system32\drivers\sbapifs.sys [2011.07.15. 20:52 74968]
R2 SBPIMSvc;SB Recovery Service;c:\program files\Sunbelt Software\CounterSpy\SBPIMSvc.exe [2011.05.11. 16:54 181584]
R3 SBFWIMCLMP;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [2011.07.15. 15:21 69208]
S2 gupdate;Google frissítési szolgáltatás (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011.01.07. 21:25 136176]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2011.01.07. 1:11 1684736]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [2011.05.21. 16:09 23456]
S3 gupdatem;Google frissítés Szolgáltatás (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011.01.07. 21:25 136176]
S3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service;c:\windows\system32\drivers\SbFwIm.sys [2011.07.15. 15:21 69208]
S3 sbhips;sbhips;c:\windows\system32\drivers\sbhips.sys [2011.07.15. 15:21 94040]
.
Contents of the 'Scheduled Tasks' folder
.
2011-07-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-07 19:25]
.
2011-07-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-07 19:25]
.
2011-07-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1409082233-1417001333-839522115-1003Core.job
- c:\documents and settings\asd\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-06-08 09:40]
.
2011-07-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1409082233-1417001333-839522115-1003UA.job
- c:\documents and settings\asd\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-06-08 09:40]
.
2011-07-15 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2011-05-17 11:29]
.
.
------- Supplementary Scan -------
.
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
mDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
IE: Az összes letöltése Free Download Managerrel - file://c:\program files\Free Download Manager\dlall.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
IE: Kijelölés letöltése Free Download Managerrel - file://c:\program files\Free Download Manager\dlselected.htm
IE: Letöltés Free Download Managerrel - file://c:\program files\Free Download Manager\dllink.htm
IE: Video letöltése a Free Download Manager-rel - file://c:\program files\Free Download Manager\dlfvideo.htm
TCP: DhcpNameServer = 192.168.1.254
FF - ProfilePath - c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: IsoBuster Community Toolbar: {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - %profile%\extensions\{266fcdca-7bb3-4da7-b3bf-f845dea2ebd6}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Browser Defender Toolbar: {cb84136f-9c44-433a-9048-c5cd9df1dc16} - c:\program files\PC Tools Security\BDT\Firefox
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-07-15 21:37
Windows 5.1.2600 Szervizcsomag 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1409082233-1417001333-839522115-1003\Software\G*e*n*i*e*"!\FM Genie Scout 11]
"GameDir"="c:\\Documents and Settings\\asd\\Dokumentumok\\Sports Interactive\\Football Manager 2011\\games"
"ShortlistDir"=""
"FMPath"="c:\\Program Files\\Sports Interactive\\Football Manager 2011\\"
"ScreenshotsDir"="c:\\Documents and Settings\\asd\\Dokumentumok\\Sports Interactive\\Football Manager 2011"
"SaveDir"="c:\\Documents and Settings\\asd\\Dokumentumok\\Sports Interactive\\Football Manager 2011\\"
"HistoryDir"="c:\\FM Genie Scout 11\\History Points"
"LangDB"="c:\\Program Files\\Sports Interactive\\Football Manager 2011\\data\\db\\1100\\lang_db.dat"
"LastSaveGame"="c:\\Documents and Settings\\asd\\Dokumentumok\\Sports Interactive\\Football Manager 2011\\games\\Névtelen játék (v02).fm"
"Language"="English"
"LoadLangDB"=dword:00000001
"CompressHistoryPoints"=dword:00000000
"HighlightedAttributes"=dword:00000000
"MinCondition"=dword:00000050
"GraphStep"=dword:00000000
"SkinName"="FM 2011"
"LastUpdateCheck"=dword:00009e8a
"HighQualityGUI"=dword:00000001
"AutomaticallyUpdateCheck"=dword:00000001
"AdvancedGeneration"=dword:00000000
"TranslateStaffSkills"=dword:00000001
"TranslatePlayerSkills"=dword:00000001
"TranslatePositions"=dword:00000001
"ShowHistory"=dword:00000001
"Version"=dword:00000080
"UniqueID"="D4-0C50-4A6F"
"UseProxy"=dword:00000000
"ProxyHost"=""
"ProxyPort"=""
"UseAuthentication"=dword:00000000
"UserName"=""
"UserPassword"=""
"PlayerSearchFeatureNum"=dword:00000003
"StaffSearchFeatureNum"=dword:00000001
"ClubSearchFeatureNum"=dword:00000000
"FilterByClubFeatureNum"=dword:00000000
"CompareFeatureNum"=dword:00000000
"ShortlistFeatureNum"=dword:00000000
"ExportFeatureNum"=dword:00000000
"HistoryFeatureNum"=dword:00000000
"LanguageDBFeatureNum"=dword:00000002
"HintsFeatureNum"=dword:00000000
"GenieReportFeatureNum"=dword:00000000
"TopFormationFeatureNum"=dword:00000000
"ScreenshotFeatureNum"=dword:00000000
"Currency"=dword:00000056
.
[HKEY_USERS\S-1-5-21-1409082233-1417001333-839522115-1003\Software\G*e*n*i*e*"!\FM Genie Scout 11g]
"PicturesNumber"=dword:00000000
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(652)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
- - - - - - - > 'explorer.exe'(3588)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\SUPERAntiSpyware\SASSEH.DLL
c:\windows\system32\browselc.dll
c:\program files\Microsoft Office\OFFICE11\msohev.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\ASWLSVC.exe
c:\windows\system32\ASWL2K.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\wscntfy.exe
c:\program files\Common Files\Java\Java Update\jucheck.exe
.
**************************************************************************
.
Completion time: 2011-07-15 21:42:19 - machine was rebooted
ComboFix-quarantined-files.txt 2011-07-15 19:42
ComboFix2.txt 2011-07-15 18:24
.
Pre-Run: 24 977 567 744 bájt szabad
Post-Run: 24 887 078 912 bájt szabad
.
- - End Of File - - EEB1F3B0E38EBC3875B8FF221D39F980

ComboFix 11-07-15.02 - asd 011.07.15. 21:16:52.2.1 - x86
Microsoft Windows XP Professional 5.1.2600.2.1250.36.1038.18.1023.475 [GMT 2:00]
Running from: c:\documents and settings\asd\Asztal\ComboFix.exe
Command switches used :: c:\documents and settings\asd\Asztal\CFScript.txt
AV: Sunbelt VIPRE *Disabled/Updated* {964FCE60-0B18-4D30-ADD6-EB178909041C}
FW: Sunbelt VIPRE *Disabled* {FF1CD5B7-1553-4625-A258-1775385CED33}
.
FILE ::
"c:\windows\system32\GBKVBLE.dll"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1409082233-1417001333-839522115-1003UA.job"
"c:\windows\Tasks\Scheduled Update for Ask Toolbar.job"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome.manifest
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\1.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\10.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\11.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\12.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\13.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\14.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\15.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\16.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\17.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\18.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\19.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\2.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\20.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\21.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\22.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\23.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\24.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\25.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\26.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\27.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\28.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\29.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\3.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\30.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\31.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\32.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\33.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\34.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\35.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\36.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\37.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\38.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\39.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\4.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\40.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\41.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\42.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\43.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\44.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\45.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\46.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\47.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\48.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\49.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\5.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\50.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\51.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\52.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\53.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\54.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\55.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\56.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\57.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\6.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\7.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\8.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\9.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\affid.dat
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\basis.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\bubble.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\bubble.xul
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\colorpicker.htm
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\contents.rdf
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\icons.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\info.txt
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\jscontainer.htm
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\mbback.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\mbbigopen.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\mbclose.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\mbfwd.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\mbsep.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\md5.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\mozilla.xul
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\mymenuitem.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\nav1c.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\options.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\options.xul
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\separator.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\tb.css
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\tb.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\tb.xsl
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\tb.xul
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\tbcore3.inf
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto\version.txt
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\install.rdf
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\chrome.manifest
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\chrome\conduitengine.jar
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\components\ConduitAutoCompleteSearch.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\components\ConduitAutoCompleteSearch.xpt
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\components\ConduitToolbar.idl
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\components\ConduitToolbar.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\components\ConduitToolbar.xpt
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\components\RadioWMPCore.dll
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\components\RadioWMPCore.xpt
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\defaults\alertSettingsComponent.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\defaults\appContextMenu.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\defaults\engineContextMenu.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\defaults\engineSettings.json
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\defaults\fbAlert.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\defaults\getAppsContextMenu.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\defaults\postAppsContextMenu.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\defaults\toolbarContextMenu.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\defaults\unsharedAppsContextMenu.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\DualPackage\install.rdf
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\INSTALL.LOG
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\install.rdf
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\lib\xpcom.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\META-INF\manifest.mf
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\META-INF\zigbert.rsa
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\META-INF\zigbert.sf
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\searchplugin\conduit.gif
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\searchplugin\conduit.ico
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\searchplugin\conduit.PNG
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\searchplugin\conduit.src
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\searchplugin\conduit.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\engine@conduit.com\version.txt
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome.manifest
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\about.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\about.xul
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\bindings.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\button-bindings.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\cache.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\constants.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\core.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\custom-command-listener.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\dynamic-button-manager.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\dynamic-button.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\events.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\feeds.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\http-headers.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\json.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\lifecycle.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\listeners.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\locale.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\logger.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\network.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\newtab-manager.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\newtab-overlay.xul
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\newtab.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\newtab.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\notification-popup-controller.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\notification-popup-ff3.xul
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\notification-popup.xul
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\notification.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\observer.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\options.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\options.xul
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\preferences.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\prefetch.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\ss-popup-bindings.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\suggestions.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\update.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\utilities.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\webframe-bindings.xml
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\webframe-manager.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\widget-controller.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\widget-popup.xul
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\content\widgets.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\abc.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\amazon_16x.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\as.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\ask_16x16.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\ask_32x32.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\ask_blue_logo.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\ask_browser_ff_chrome.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\asklogo.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\b-p.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\b.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\bbc_news.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\beppe_grillo.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\bg.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\bild.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\bl-pbl.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\bl-pbr.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\bl.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\blogs.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\br-pbl.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\br-pbr.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\br.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\business.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\businessRU.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\celebrity.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\chevron.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\close.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\cnn_16x.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\corriere_della_sera.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\creator.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\dictionary.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\el_mundo.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\email_16x.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\expansion.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\facebook_16x.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\film1.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\folha.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\foxit-logo.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\foxit-logo16.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\FoxitMessages.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\ft.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\ftd.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\g1.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\games_16x.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\gazzetta_dello_sport.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\globe_18x.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\gripper.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\highlighter_off.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\highlighter_on.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\history.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\hola.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\images.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\kicker.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\l.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\labels-de.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\labels-en.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\labels-es.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\labels-fr.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\labels-it.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\labels-nl.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\labels-pt.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\labels-ru.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\laposte.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\lemonde.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\lequipe.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\libero_it.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\links-BR.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\links-DE.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\links-ES.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\links-EU.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\links-FR.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\links-IT.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\links-NL.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\links-RU.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\links-UK.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\links-US.properties
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\logo_32x32.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\magnify_search.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\maps.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\mtv.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\news.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\newsNL.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\newsRU.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\newtab.css
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\newtab_bkg.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\newtab_search_bkg.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\notification.css
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\oglobo.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\orkut.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\personas.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\preferences.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\Products.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\r.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\radiodigital.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_ask.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_ask_de.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_ask_es.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_ask_fr.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_ask_it.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_ask_nl.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_ask_pl.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_ask_pt.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_ask_ru.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_cobrand.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_current_site.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_de.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_es.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_fr.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_grey_73x24.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_it.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_nl.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_pl.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_pt.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\search_ru.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\service.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\shopping.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\sports.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\sportsNL.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\sportsRU.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\stocks.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\t-p.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\t.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\terra.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\titlebar_bg.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\tl-ptl.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\tl-ptr.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\tl.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\toolbar.css
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\toolbar.xul
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\tr-ptl.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\tr-ptr.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\tr.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\tv.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\tv_movie_de.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\uol.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\vk.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\voici_16x.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\weather.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\web.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\wordoftheday_16x.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\youtube_16x.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\skin\zoomall.png
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\temp\askToolbar.exe
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Mon-31-Jan-2011-18-35-03-GMT\ff-config.zip
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Sat-26-Mar-2011-18-43-23-GMT\ff-config.zip
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Thu-16-Jun-2011-10-31-39-GMT\ff-config.zip
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\datastore\cache.sqlite
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\defaults.js.bak
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\defaults\preferences\defaults.js
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\defaults\preferences\defaults.js.bak
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\install.rdf
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1303463286457.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1303468351607.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1303553625269.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1303668406208.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1303810046043.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1303812362661.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1304005582850.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1304100619171.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1304412586381.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1304418450666.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1304532824210.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1304586112857.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1304615400154.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1304785295418.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1305455442621.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1305466125003.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1305482541280.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1305571674568.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1305646496774.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1308184756468.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1308220298867.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1308220315272.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1309287132448.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\logs\asktb-log-1310738250090.html
c:\documents and settings\asd\Application Data\Mozilla\Firefox\Profiles\tv8iw28c.default\extensions\toolbar@ask.com\searchplugins\askcom.xml
.
.