MyCity » Ambulanta -> Arhiva Ambulante » Moze to, al' samo bez kabla (gos'n Kecmane)

Moze to, al' samo bez kabla (gos'n Kecmane)

Napisano na dan: 22.10.2012

Moze to, al' samo bez kabla (gos'n Kecmane)

Sledeća strana

Pagination

Odgovori

MoscowBeast Poslao: 22 Okt 2012 20:42 Idi na vrh
offline MoscowBeast Nepopravljivi optimista Civil Works Team Leader @ IKEA Centres Russia Pridružio: 22 Jun 2005 Poruke: 7911 Gde živiš: Moskva, Rusija	1Ovo se svidja korisniku: _Sale Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Dobro vece, prijatelji, opet ja. Nisam naslov stavio tek tako bezveze, da se setimo serije "Slozna braca". Imam problem sa kompjuterom koji otprilike moze da se opise upravo obrnuto od: "Postujem ja Vas, gos'n Kecmane, al' ne moze to bez kabla!" Imam kuci malu mrezu - dva laptopa i fiksni komp. Mrezu daje ruter, koji je vezan na net i daje bezicni signal (tipican sistem). Problem je vrlo cudan - laptopi "vide" internet putem bezicne veze normalno, al fiksni (vezan preko kabla) ga ne vidi. Vidi on ruter, pinguje ga, kapira kad iskljucim ruter, al' Interneta nema (zuti trougao sa uzvicnikom). Posumnjao sam na kabl, promenio sam ga, ali problem ostaje. Sistem ne detektuje nikakav problem sa mreznom kartom. Pri dijagnostici veze daje standardno resenje sa resetovanjem rutera (ne pomaze, probano). Tehnicka sluzba provajdera kaze da i ona "vidi" ruter normalno, kazu da je problem u kompjuteru. Kompjuter je nesto stariji, na Win7 Ultimate 64 bit. Karakteristike: Dvojezgreni Core2Duo Intel E6550 procesor (2.33GHz), 2 GB RAM-a, video karta nVidia GeForce GTS 250. Ruter je Thompson, al nemam pojma koji model. Mrezna karta Atheros L2 Fast Ethernet 10/100Base-T. Na kompu je instaliran i funkcionise KIS 2012 (znam da cete to videti i iz loga), mada zbog nedostatka Interneta nije neko vreme obnavljan. Log OTL-a (inace sam ga skinuo preko laptopa na kom ovo pisem i snimio na hard fiksnog kroz mrezu normalno; posle skeniranja sam logove vratio ovamo na laptop kroz mrezu - sve radi OK) sledi: OTL logfile created on: 22.10.2012 22:21:22 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\MilNas\Desktop 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000419 \| Country: Russia \| Language: RUS \| Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory \| 0,99 Gb Available Physical Memory \| 49,72% Memory free 4,00 Gb Paging File \| 2,54 Gb Available in Paging File \| 63,44% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 29,30 Gb Total Space \| 0,30 Gb Free Space \| 1,02% Space Free \| Partition Type: NTFS Drive D: \| 149,05 Gb Total Space \| 76,94 Gb Free Space \| 51,62% Space Free \| Partition Type: NTFS Drive E: \| 268,79 Gb Total Space \| 148,74 Gb Free Space \| 55,34% Space Free \| Partition Type: NTFS Drive F: \| 693,66 Mb Total Space \| 0,00 Mb Free Space \| 0,00% Space Free \| Partition Type: CDFS Drive G: \| 1863,01 Gb Total Space \| 607,67 Gb Free Space \| 32,62% Space Free \| Partition Type: NTFS Computer Name: HOMECOMP \| User Name: MilNas \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.10.22 22:20:08 \| 000,602,112 \| ---- \| M] (OldTimer Tools) -- C:\Users\MilNas\Desktop\OTL.exe PRC - [2012.07.28 00:51:26 \| 000,063,960 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012.01.24 17:19:10 \| 002,606,912 \| ---- \| M] (DT Soft Ltd) -- D:\Program Files\DAEMON Tools Lite\DTShellHlp.exe PRC - [2012.01.18 10:44:52 \| 000,450,848 \| ---- \| M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe PRC - [2012.01.11 16:09:04 \| 001,534,976 \| ---- \| M] (Yandex LLC) -- C:\Users\MilNas\AppData\Local\Yandex\Updater\praetorian.exe PRC - [2011.11.17 00:04:20 \| 000,822,384 \| ---- \| M] (ACD Systems) -- D:\Program Files\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe PRC - [2011.11.11 14:08:06 \| 000,205,336 \| ---- \| M] (Logitech Inc.) -- D:\Program Files\Logitech\LWS\Webcam Software\LWS.exe PRC - [2011.11.11 14:07:54 \| 000,265,240 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe PRC - [2011.08.12 12:19:40 \| 000,680,984 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe PRC - [2011.05.21 06:01:00 \| 002,214,504 \| ---- \| M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011.04.24 23:15:02 \| 000,202,296 \| ---- \| M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe PRC - [2011.02.02 14:08:16 \| 000,018,656 \| ---- \| M] () -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe ========== Modules (No Company Name) ========== MOD - [2011.11.11 14:09:20 \| 000,336,408 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll MOD - [2011.11.11 14:07:54 \| 000,265,240 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe MOD - [2011.08.12 12:19:40 \| 000,680,984 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe MOD - [2011.08.12 12:18:56 \| 000,342,552 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\QTXml4.dll MOD - [2011.08.12 12:18:56 \| 000,128,536 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll MOD - [2011.08.12 12:18:56 \| 000,029,208 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll MOD - [2011.08.12 12:18:54 \| 007,956,504 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\QTGui4.dll MOD - [2011.08.12 12:18:54 \| 002,145,304 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\QTCore4.dll MOD - [2011.04.24 23:13:30 \| 007,008,656 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtgui4.dll MOD - [2011.04.24 23:13:28 \| 000,192,912 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtsql4.dll MOD - [2011.04.24 23:13:26 \| 001,270,160 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtscript4.dll MOD - [2011.04.24 23:13:26 \| 000,758,160 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtnetwork4.dll MOD - [2011.04.24 23:13:24 \| 002,118,032 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtcore4.dll MOD - [2011.04.24 23:13:24 \| 002,089,360 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtdeclarative4.dll MOD - [2011.04.20 19:56:28 \| 000,025,088 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\imageformats\qgif4.dll ========== Services (SafeList) ========== SRV:64bit: - [2012.03.31 15:43:19 \| 001,431,888 \| ---- \| M] (Flexera Software, Inc.) [On_Demand \| Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:64bit: - [2009.07.14 05:41:27 \| 001,011,712 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:64bit: - [2009.07.14 05:40:01 \| 000,193,536 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:64bit: - [2008.07.29 13:20:28 \| 004,737,024 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon90) SRV - [2012.07.28 00:51:26 \| 000,063,960 \| ---- \| M] (Adobe Systems Incorporated) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012.07.13 13:29:06 \| 000,160,944 \| R--- \| M] (Skype Technologies) [Auto \| Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012.01.18 10:44:52 \| 000,450,848 \| ---- \| M] (Logitech Inc.) [Auto \| Running] -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv) SRV - [2011.05.21 06:01:00 \| 002,214,504 \| ---- \| M] (NVIDIA Corporation) [Auto \| Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011.04.24 23:15:02 \| 000,202,296 \| ---- \| M] (Kaspersky Lab ZAO) [Auto \| Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe -- (AVP) SRV - [2011.02.02 14:08:16 \| 000,018,656 \| ---- \| M] () [Auto \| Running] -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service) SRV - [2010.03.18 14:16:28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009.07.14 05:16:20 \| 000,010,752 \| ---- \| M] (Корпорация Майкрософт) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\wpcsvc.dll -- (WPCSvc) SRV - [2009.06.11 01:23:09 \| 000,066,384 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008.06.13 04:05:48 \| 001,539,224 \| ---- \| M] (Autodesk, Inc.) [On_Demand \| Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskNetSrv.exe -- (Autodesk Network Licensing Service) SRV - [2007.05.31 17:11:54 \| 000,443,784 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007.05.31 17:11:46 \| 000,225,672 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) ========== Driver Services (SafeList) ========== DRV:64bit: - [2012.03.01 10:46:16 \| 000,023,408 \| ---- \| M] (Microsoft Corporation) [Recognizer \| Boot \| Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2012.02.11 23:36:50 \| 000,283,200 \| ---- \| M] (DT Soft Ltd) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:64bit: - [2012.01.18 10:44:36 \| 004,865,568 \| ---- \| M] (Logitech Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) DRV:64bit: - [2012.01.18 10:44:28 \| 000,351,136 \| ---- \| M] (Logitech Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64) DRV:64bit: - [2011.12.25 22:55:02 \| 000,615,728 \| ---- \| M] (Kaspersky Lab) [File_System \| System \| Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF) DRV:64bit: - [2011.03.11 10:41:12 \| 000,107,904 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 10:41:12 \| 000,027,008 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.03.10 18:36:24 \| 000,029,488 \| ---- \| M] (Kaspersky Lab ZAO) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6) DRV:64bit: - [2011.03.04 13:23:28 \| 000,011,864 \| ---- \| M] (Kaspersky Lab ZAO) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\kl2.sys -- (kl2) DRV:64bit: - [2011.03.04 13:23:24 \| 000,460,888 \| ---- \| M] (Kaspersky Lab ZAO) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (KL1) DRV:64bit: - [2010.11.20 17:33:35 \| 000,078,720 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.11.20 15:07:05 \| 000,059,392 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010.11.20 15:03:42 \| 000,020,992 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:64bit: - [2009.11.02 20:27:10 \| 000,022,544 \| ---- \| M] (Kaspersky Lab) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt) DRV:64bit: - [2009.09.23 19:23:02 \| 006,180,832 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2009.07.14 05:52:20 \| 000,194,128 \| ---- \| M] (AMD Technologies Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 05:48:04 \| 000,065,600 \| ---- \| M] (LSI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 05:45:55 \| 000,024,656 \| ---- \| M] (Promise Technology) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.07.14 04:09:50 \| 000,019,968 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx) DRV:64bit: - [2009.06.11 00:34:33 \| 003,286,016 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.11 00:34:28 \| 000,468,480 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.11 00:34:23 \| 000,270,848 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.11 00:34:21 \| 000,034,304 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\l260x64.sys -- (Atc002) DRV:64bit: - [2009.06.11 00:31:59 \| 000,031,232 \| ---- \| M] (Hauppauge Computer Works, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2005.03.29 02:30:38 \| 000,008,192 \| ---- \| M] () [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV - [2012.10.22 21:43:41 \| 000,018,048 \| ---- \| M] () [Kernel \| Auto \| Stopped] -- C:\Windows\SysWOW64\drivers\lirsgt.sys -- (lirsgt) DRV - [2009.07.14 05:19:10 \| 000,019,008 \| ---- \| M] (Microsoft Corporation) [File_System \| On_Demand \| Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yandex.ru/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ru.msn.com/?rd=1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 5E B8 BF C1 C1 C2 CC 01 [binary data] IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://yandex.ru/yandsearch?clid=41530&text={searchTerms} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local> ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "http://www.mail.ru/" FF - prefs.js..browser.search.defaulturl: "http://go.mail.ru/search?fr=fftb&utf8in&q=" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.yandex.ru/" FF - prefs.js..extensions.enabledAddons: linkfilter@kaspersky.ru:12.0.0.477 FF - prefs.js..extensions.enabledAddons: virtualKeyboard@kaspersky.ru:12.0.0.477 FF - prefs.js..extensions.enabledAddons: KavAntiBanner@Kaspersky.ru:12.0.0.477 FF - prefs.js..extensions.enabledAddons: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}:6.0.33 FF - prefs.js..keyword.URL: "http://go.mail.ru/search?utf8in=1&fr=fftbUFix&q=" FF - prefs.js..network.proxy.type: 0 FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_33: C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\linkfilter@kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2012.09.03 17:16:07 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2012.09.03 17:16:07 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\KavAntiBanner@Kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2012.09.03 17:16:06 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2012.09.07 13:18:26 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2012.09.07 13:18:26 \| 000,000,000 \| ---D \| M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2011.12.25 23:00:27 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\MilNas\AppData\Roaming\mozilla\Extensions [2012.05.02 16:33:54 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\MilNas\AppData\Roaming\mozilla\Firefox\Profiles\nnosy8kt.default\extensions [2012.03.17 08:37:03 \| 000,001,533 \| ---- \| M] () -- C:\Users\MilNas\AppData\Roaming\mozilla\firefox\profiles\nnosy8kt.default\searchplugins\mailru---.xml [2011.12.21 09:19:19 \| 000,001,719 \| ---- \| M] () -- C:\Users\MilNas\AppData\Roaming\mozilla\firefox\profiles\nnosy8kt.default\searchplugins\ybqs-yandex.xml [2012.09.03 17:16:06 \| 000,000,000 \| ---D \| M] (Anti-Banner) -- C:\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 2012\FFEXT\KAVANTIBANNER@KASPERSKY.RU [2012.09.03 17:16:07 \| 000,000,000 \| ---D \| M] (Kaspersky URL Advisor) -- C:\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 2012\FFEXT\LINKFILTER@KASPERSKY.RU [2012.09.03 17:16:07 \| 000,000,000 \| ---D \| M] (Kaspersky Virtual Keyboard) -- C:\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 2012\FFEXT\VIRTUALKEYBOARD@KASPERSKY.RU [2012.09.07 13:18:22 \| 000,000,000 \| ---D \| M] (Java Console) -- D:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} CHR - Extension: No name found = C:\Users\MilNas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\ O1 HOSTS File: ([2009.06.11 01:00:26 \| 000,000,824 \| ---- \| M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO) O2:64bit: - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Визуальные закладки) - {C93F72A2-2162-4BBA-A07A-F13663C297A6} - C:\Program Files (x86)\Yandex\YandexBarIE\fastdial.dll () O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO) O3 - HKLM\..\Toolbar: (Яндекс.Бар) - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files (x86)\Yandex\YandexBarIE\yndbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (Яндекс.Бар) - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files (x86)\Yandex\YandexBarIE\yndbar.dll () O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation) O4 - HKLM..\Run: [ACPW05EN] D:\Program Files\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe (ACD Systems) O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe (Kaspersky Lab ZAO) O4 - HKLM..\Run: [LWS] D:\Program Files\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.) O4 - HKCU..\Run: [DAEMON Tools Lite] D:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [drm.exe] D:\Program Files\Nevosoft\Roaming\Nevosoft.Games\drm.exe () O4 - HKCU..\Run: [Praetorian] C:\Users\MilNas\AppData\Local\Yandex\Updater\praetorian.exe (Yandex LLC) O4 - HKCU..\Run: [uTorrent] D:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: Добавить в Анти-Баннер - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm () O8 - Extra context menu item: Добавить в Анти-Баннер - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm () O9:64bit: - Extra Button: &Виртуальная клавиатура - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO) O9:64bit: - Extra Button: Проверка ссы&лок - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: &Виртуальная клавиатура - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO) O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.) O9 - Extra Button: Проверка ссы&лок - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33) O16 - DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.10.39.4 217.10.32.4 217.10.36.5 217.10.44.35 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ACEC0FD5-9143-45B5-B411-7B368E96F037}: DhcpNameServer = 217.10.39.4 217.10.32.4 217.10.36.5 217.10.44.35 O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O20:64bit: - Winlogon\Notify\klogon: DllName - (%SystemRoot%\System32\klogon.dll) - C:\Windows\SysNative\klogon.dll (Kaspersky Lab ZAO) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012.03.31 15:00:59 \| 000,000,000 \| ---D \| M] - E:\Autodesk -- [ NTFS ] O32 - AutoRun File - [2006.05.16 14:35:00 \| 001,886,720 \| R--- \| M] () - F:\Autorun.exe -- [ CDFS ] O32 - AutoRun File - [2006.05.16 14:54:04 \| 000,000,043 \| R--- \| M] () - F:\autorun.inf -- [ CDFS ] O32 - AutoRun File - [2010.08.27 16:01:23 \| 000,000,000 \| RH-D \| M] - G:\autorun -- [ NTFS ] O32 - AutoRun File - [2002.10.16 16:56:50 \| 000,000,036 \| RH-- \| M] () - G:\autorun.inf -- [ NTFS ] O33 - MountPoints2\{66de161f-4c3c-11e1-a364-0018f30e4639}\Shell - "" = AutoRun O33 - MountPoints2\{66de161f-4c3c-11e1-a364-0018f30e4639}\Shell\AutoRun\command - "" = H:\Setup.exe O33 - MountPoints2\{6949dbe4-2f70-11e1-b0e7-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{6949dbe4-2f70-11e1-b0e7-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Autorun.exe -- [2006.05.16 14:35:00 \| 001,886,720 \| R--- \| M] () O34 - HKLM BootExecute: (autocheck autochk ) O35:64bit: - HKLM\..comfile [open] -- "%1" % O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2012.10.22 22:19:55 \| 000,602,112 \| ---- \| C] (OldTimer Tools) -- C:\Users\MilNas\Desktop\OTL.exe [2012.10.22 12:53:06 \| 000,000,000 \| ---D \| C] -- C:\Users\MilNas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Новый Диск [2012.10.11 14:51:46 \| 000,000,000 \| ---D \| C] -- C:\Users\MilNas\AppData\Roaming\northerntale_nevosoft_ru [2012.10.11 11:59:52 \| 000,000,000 \| ---D \| C] -- C:\Users\MilNas\AppData\Roaming\Rumbic Studio [2012.10.10 06:12:18 \| 005,559,664 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2012.10.10 06:12:16 \| 003,968,880 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2012.10.10 06:12:16 \| 003,914,096 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2012.10.10 06:12:09 \| 001,162,240 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll [2012.10.10 06:12:09 \| 000,424,448 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll [2012.10.10 06:12:09 \| 000,338,432 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe [2012.10.10 06:12:09 \| 000,215,040 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2012.10.10 06:12:08 \| 000,243,200 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2012.10.10 06:12:07 \| 000,362,496 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll [2012.10.10 06:12:07 \| 000,025,600 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2012.10.10 06:12:07 \| 000,016,384 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll [2012.10.10 06:12:07 \| 000,014,336 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2012.10.10 06:12:07 \| 000,013,312 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll [2012.10.10 06:12:07 \| 000,005,120 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2012.10.10 06:12:07 \| 000,004,608 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll [2012.10.10 06:12:07 \| 000,004,608 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll [2012.10.10 06:12:07 \| 000,004,608 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll [2012.10.10 06:12:07 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll [2012.10.10 06:12:07 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll [2012.10.10 06:12:07 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll [2012.10.10 06:12:07 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll [2012.10.10 06:12:07 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll [2012.10.10 06:12:07 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll [2012.10.10 06:12:06 \| 000,007,680 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2012.10.10 06:12:06 \| 000,006,144 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll [2012.10.10 06:12:06 \| 000,005,120 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll [2012.10.10 06:12:06 \| 000,005,120 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll [2012.10.10 06:12:06 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll [2012.10.10 06:12:06 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll [2012.10.10 06:12:06 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll [2012.10.10 06:12:04 \| 000,006,144 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll [2012.10.10 06:12:04 \| 000,004,608 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll [2012.10.10 06:12:04 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll [2012.10.10 06:12:04 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll [2012.10.10 06:12:04 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll [2012.10.10 06:12:04 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll [2012.10.10 06:12:04 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll [2012.10.10 06:12:04 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll [2012.10.10 06:12:03 \| 000,002,048 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2012.10.10 06:11:49 \| 000,220,160 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2012.10.10 06:11:23 \| 001,464,320 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll [2012.10.10 06:11:23 \| 000,140,288 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll [2012.09.25 21:24:00 \| 000,245,760 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\OxpsConverter.exe [2012.09.23 21:06:44 \| 000,000,000 \| ---D \| C] -- C:\Users\MilNas\AppData\Roaming\Friday's games [2012.09.23 03:01:09 \| 000,096,768 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012.09.23 03:01:09 \| 000,073,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012.09.23 03:01:08 \| 000,248,320 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012.09.23 03:01:08 \| 000,237,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012.09.23 03:01:08 \| 000,231,936 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012.09.23 03:01:08 \| 000,176,640 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012.09.23 03:01:08 \| 000,173,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2012.09.23 03:01:08 \| 000,142,848 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2012.09.23 03:01:07 \| 002,312,704 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2012.09.23 03:01:07 \| 001,494,528 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2012.09.23 03:01:07 \| 001,427,968 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2012.09.23 03:01:06 \| 000,729,088 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2012.09.23 03:01:04 \| 000,816,640 \| ---- \| C] (Корпорация Майкрософт) -- C:\Windows\SysNative\jscript.dll [2012.09.23 03:01:04 \| 000,717,824 \| ---- \| C] (Корпорация Майкрософт) -- C:\Windows\SysWow64\jscript.dll [2012.09.23 03:01:04 \| 000,599,040 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll ========== Files - Modified Within 30 Days ========== [2012.10.22 22:24:38 \| 000,014,224 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.10.22 22:24:38 \| 000,014,224 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.10.22 22:20:08 \| 000,602,112 \| ---- \| M] (OldTimer Tools) -- C:\Users\MilNas\Desktop\OTL.exe [2012.10.22 21:43:41 \| 000,018,048 \| ---- \| M] () -- C:\Windows\SysWow64\drivers\lirsgt.sys [2012.10.22 20:24:53 \| 001,642,822 \| ---- \| M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012.10.22 20:24:53 \| 000,722,456 \| ---- \| M] () -- C:\Windows\SysNative\perfh019.dat [2012.10.22 20:24:53 \| 000,652,150 \| ---- \| M] () -- C:\Windows\SysNative\perfh009.dat [2012.10.22 20:24:53 \| 000,149,494 \| ---- \| M] () -- C:\Windows\SysNative\perfc019.dat [2012.10.22 20:24:53 \| 000,121,082 \| ---- \| M] () -- C:\Windows\SysNative\perfc009.dat [2012.10.22 20:19:51 \| 004,342,784 \| -H-- \| M] () -- C:\Users\MilNas\AppData\Roaming\base.db [2012.10.22 20:18:59 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2012.10.22 20:18:55 \| 1610,014,720 \| -HS- \| M] () -- C:\hiberfil.sys [2012.10.22 12:53:07 \| 000,000,652 \| ---- \| M] () -- C:\Users\MilNas\Desktop\Тайна да Винчи.lnk [2012.10.21 21:36:55 \| 000,489,536 \| ---- \| M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012.10.21 14:51:11 \| 000,000,954 \| ---- \| M] () -- C:\Users\MilNas\Desktop\перенести на ноут новые схемы - Ярлык.lnk [2012.10.21 14:51:03 \| 000,000,842 \| ---- \| M] () -- C:\Users\MilNas\Desktop\схемы вышивки - Ярлык.lnk [2012.10.11 11:58:52 \| 000,000,793 \| ---- \| M] () -- C:\Users\MilNas\Desktop\Тайна ночи.lnk [2012.09.24 16:19:40 \| 000,003,584 \| ---- \| M] () -- C:\Users\MilNas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini ========== Files Created - No Company Name ========== [2012.10.22 21:33:32 \| 000,018,048 \| ---- \| C] () -- C:\Windows\SysWow64\drivers\lirsgt.sys [2012.10.22 12:53:07 \| 000,000,652 \| ---- \| C] () -- C:\Users\MilNas\Desktop\Тайна да Винчи.lnk [2012.10.21 20:43:59 \| 000,489,536 \| ---- \| C] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012.10.21 14:51:11 \| 000,000,954 \| ---- \| C] () -- C:\Users\MilNas\Desktop\перенести на ноут новые схемы - Ярлык.lnk [2012.10.21 14:51:03 \| 000,000,842 \| ---- \| C] () -- C:\Users\MilNas\Desktop\схемы вышивки - Ярлык.lnk [2012.10.11 11:58:52 \| 000,000,793 \| ---- \| C] () -- C:\Users\MilNas\Desktop\Тайна ночи.lnk [2012.03.31 15:44:11 \| 000,000,153 \| ---- \| C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc [2012.02.06 17:47:27 \| 000,003,584 \| ---- \| C] () -- C:\Users\MilNas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012.01.18 10:44:00 \| 010,920,984 \| ---- \| C] () -- C:\Windows\SysWow64\LogiDPP.dll [2012.01.18 10:44:00 \| 000,336,408 \| ---- \| C] () -- C:\Windows\SysWow64\DevManagerCore.dll [2012.01.18 10:44:00 \| 000,104,472 \| ---- \| C] () -- C:\Windows\SysWow64\LogiDPPApp.exe [2012.01.05 19:27:17 \| 004,342,784 \| -H-- \| C] () -- C:\Users\MilNas\AppData\Roaming\base.db [2012.01.05 18:42:16 \| 000,003,072 \| ---- \| C] () -- C:\Program Files (x86)\deree.exe [2011.12.25 22:57:22 \| 000,017,408 \| ---- \| C] () -- C:\Users\MilNas\AppData\Local\WebpageIcons.db [2011.12.25 08:52:16 \| 001,620,280 \| ---- \| C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011.12.25 08:35:35 \| 000,921,665 \| ---- \| C] () -- C:\Windows\SysWow64\msvcrt-ruby18.dll [2011.12.25 08:35:35 \| 000,271,264 \| ---- \| C] () -- C:\Windows\SysWow64\vbrun100.dll [2011.12.25 08:35:35 \| 000,210,944 \| ---- \| C] () -- C:\Windows\SysWow64\msvcrt10.dll [2011.12.25 08:35:35 \| 000,027,136 \| ---- \| C] () -- C:\Windows\SysWow64\pythonw.exe [2011.12.25 08:35:35 \| 000,026,624 \| ---- \| C] () -- C:\Windows\SysWow64\python.exe [2011.12.25 08:35:35 \| 000,020,537 \| ---- \| C] () -- C:\Windows\SysWow64\rubyw.exe [2011.12.25 08:35:35 \| 000,020,536 \| ---- \| C] () -- C:\Windows\SysWow64\ruby.exe ========== ZeroAccess Check ========== [2009.07.14 08:55:00 \| 000,000,227 \| RHS- \| M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 09:43:10 \| 014,172,672 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 08:41:00 \| 012,873,728 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 05:40:51 \| 000,909,312 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 16:19:02 \| 000,606,208 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 05:41:56 \| 000,505,856 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] ========== Alternate Data Streams ========== @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:75CC0165 < End of report > Fajl Extras.txt sledi: https://www.mycity.rs/must-login.png Hvala unapred za pomoc!

Profil

Sass Drake Poslao: 22 Okt 2012 22:01 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10445 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Korak 1 Pošalji sljedeći fajl: C:\Program Files (x86)\deree.exe preko http://www.mycity.rs/ambulanta-upload.php Korak 2 Preuzmi aswMBR i sačuvaj ga na Desktop. Dvoklikom pokreni aswMBR. Ukoliko dobiješ sljedeću poruku: Would you like to download latest Avast! virus definitions? Klikni na dugme Yes i pričekaj da se proces preuzimanja definicija završi. Provjeri da je pod AV Scan: izabrana opcija QuickScan Klikni na Scan. Kada završi skeniranje ( Scan finished successfully ) klikni Save log. Sačuvaj aswMBR log na Desktop. Sadržaj tog loga iskopiraj u temi.

Profil

MoscowBeast Poslao: 23 Okt 2012 05:21 Idi na vrh
offline MoscowBeast Nepopravljivi optimista Civil Works Team Leader @ IKEA Centres Russia Pridružio: 22 Jun 2005 Poruke: 7911 Gde živiš: Moskva, Rusija	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Napisano: 23 Okt 2012 7:11 Sass Drake :: Korak 1 Pošalji sljedeći fajl: C:\Program Files (x86)\deree.exe preko http://www.mycity.rs/ambulanta-upload.php Fajl je uploadovan. Sass Drake ::... Korak 2 ... Ukoliko dobiješ sljedeću poruku: Would you like to download latest Avast! virus definitions? Klikni na dugme Yes i pričekaj da se proces preuzimanja definicija završi. A je l' ovaj korak preko potreban? Jerbo nemam varijantu da se prikacim na internet sa "bolesnog" kompjutera. Moze li taj apdejt da se uradi nekako drugacije, offline? Dopuna: 23 Okt 2012 7:21 Evo staje dao Avast bez update-a: aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software Run date: 2012-10-23 07:16:04 ----------------------------- 07:16:04.195 OS Version: Windows x64 6.1.7601 Service Pack 1 07:16:04.195 Number of processors: 2 586 0xF0B 07:16:04.211 ComputerName: HOMECOMP UserName: MilNas 07:16:07.719 Initialize success 07:16:15.797 Disk 0 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T1L0-5 07:16:15.797 Disk 0 Vendor: ST3160215A 3.AAC Size: 152627MB BusType: 3 07:16:15.797 Disk 1 (boot) \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP2T0L0-2 07:16:15.797 Disk 1 Vendor: ST3320820AS 3.AAE Size: 305245MB BusType: 3 07:16:15.813 Disk 1 MBR read successfully 07:16:15.813 Disk 1 MBR scan 07:16:15.813 Disk 1 Windows 7 default MBR code 07:16:15.828 Disk 1 Partition 1 80 (A) 07 HPFS/NTFS NTFS 30004 MB offset 63 07:16:15.844 Disk 1 Partition 2 00 07 HPFS/NTFS NTFS 275238 MB offset 61448625 07:16:15.859 Disk 1 scanning C:\Windows\system32\drivers 07:16:21.429 Service scanning 07:16:26.140 Service KL1 C:\Windows\system32\DRIVERS\kl1.sys LOCKED 5 07:16:26.155 Service kl2 C:\Windows\system32\DRIVERS\kl2.sys LOCKED 5 07:16:26.233 Service KLIM6 C:\Windows\system32\DRIVERS\klim6.sys LOCKED 5 07:16:26.265 Service klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys LOCKED 5 07:16:33.690 Modules scanning 07:16:33.690 Disk 1 trace - called modules: 07:16:33.706 ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS intelide.sys PCIIDEX.SYS hal.dll atapi.sys 07:16:33.721 1 nt!IofCallDriver -> \Device\Harddisk1\DR1[0xfffffa80027fb5d0] 07:16:33.721 3 CLASSPNP.SYS[fffff880019c743f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0xfffffa80022f6060] 07:16:33.737 Scan finished successfully 07:17:02.082 Disk 1 MBR has been saved successfully to "C:\Users\MilNas\Documents\MBR.dat" 07:17:02.082 The log file has been saved successfully to "C:\Users\MilNas\Documents\aswMBR.txt"

Profil

Sass Drake Poslao: 23 Okt 2012 10:42 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10445 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Ponovo pokreni program OTL dvoklikom na ikonu. U bijeli okvir prozora gdje piše Custom Scans/Fixes iskopirati sljedeći tekst: `:files C:\Program Files (x86)\deree.exe :commands [emptytemp]` Klikni taster Run Fix; Izvještaj koji dobiješ iskopiraj ovde u poruci. Postavi mi svjež OTL izvještaj.

Profil

MoscowBeast Poslao: 23 Okt 2012 21:53 Idi na vrh
offline MoscowBeast Nepopravljivi optimista Civil Works Team Leader @ IKEA Centres Russia Pridružio: 22 Jun 2005 Poruke: 7911 Gde živiš: Moskva, Rusija	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Izvestaj posle Run Fix je sledeci: All processes killed ========== FILES ========== C:\Program Files (x86)\deree.exe moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 56475 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: MilNas ->Temp folder emptied: 18638818 bytes ->Temporary Internet Files folder emptied: 3220605 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 44005235 bytes ->Flash cache emptied: 684 bytes User: Public User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 53728 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50333 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 63,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 10232012_232738 Files\Folders moved on Reboot... C:\Users\MilNas\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot... ---------------------------------------------------------------------- Novi OTL log: OTL logfile created on: 23.10.2012 23:32:09 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\MilNas\Desktop 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000419 \| Country: Russia \| Language: RUS \| Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory \| 0,93 Gb Available Physical Memory \| 46,38% Memory free 4,00 Gb Paging File \| 2,71 Gb Available in Paging File \| 67,89% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 29,30 Gb Total Space \| 0,68 Gb Free Space \| 2,32% Space Free \| Partition Type: NTFS Drive D: \| 149,05 Gb Total Space \| 76,94 Gb Free Space \| 51,62% Space Free \| Partition Type: NTFS Drive E: \| 268,79 Gb Total Space \| 148,74 Gb Free Space \| 55,34% Space Free \| Partition Type: NTFS Drive G: \| 1863,01 Gb Total Space \| 607,67 Gb Free Space \| 32,62% Space Free \| Partition Type: NTFS Computer Name: HOMECOMP \| User Name: MilNas \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.10.23 23:30:22 \| 000,840,520 \| ---- \| M] (Nevosoft) -- C:\Users\MilNas\AppData\Local\Temp\7129.tmp\drm PRC - [2012.10.22 22:20:08 \| 000,602,112 \| ---- \| M] (OldTimer Tools) -- C:\Users\MilNas\Desktop\OTL.exe PRC - [2012.07.28 00:51:26 \| 000,063,960 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012.07.02 06:50:08 \| 001,022,352 \| ---- \| M] (BitTorrent, Inc.) -- D:\Program Files (x86)\uTorrent\uTorrent.exe PRC - [2012.01.18 10:44:52 \| 000,450,848 \| ---- \| M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe PRC - [2012.01.11 16:09:04 \| 001,534,976 \| ---- \| M] (Yandex LLC) -- C:\Users\MilNas\AppData\Local\Yandex\Updater\praetorian.exe PRC - [2011.11.17 00:04:20 \| 000,822,384 \| ---- \| M] (ACD Systems) -- D:\Program Files\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe PRC - [2011.11.11 14:08:06 \| 000,205,336 \| ---- \| M] (Logitech Inc.) -- D:\Program Files\Logitech\LWS\Webcam Software\LWS.exe PRC - [2011.11.11 14:07:54 \| 000,265,240 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe PRC - [2011.08.12 12:19:40 \| 000,680,984 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe PRC - [2011.05.21 06:01:00 \| 002,214,504 \| ---- \| M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011.04.24 23:15:02 \| 000,202,296 \| ---- \| M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe PRC - [2011.02.02 14:08:16 \| 000,018,656 \| ---- \| M] () -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe ========== Modules (No Company Name) ========== MOD - [2012.10.23 23:30:39 \| 000,807,936 \| -H-- \| M] () -- C:\Users\MilNas\AppData\Local\Temp\thmA092.tmp MOD - [2011.11.11 14:09:20 \| 000,336,408 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll MOD - [2011.11.11 14:07:54 \| 000,265,240 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe MOD - [2011.08.12 12:19:40 \| 000,680,984 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe MOD - [2011.08.12 12:18:56 \| 000,342,552 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\QTXml4.dll MOD - [2011.08.12 12:18:56 \| 000,128,536 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll MOD - [2011.08.12 12:18:56 \| 000,029,208 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll MOD - [2011.08.12 12:18:54 \| 007,956,504 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\QTGui4.dll MOD - [2011.08.12 12:18:54 \| 002,145,304 \| ---- \| M] () -- D:\Program Files\Logitech\LWS\Webcam Software\QTCore4.dll MOD - [2011.04.24 23:13:30 \| 007,008,656 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtgui4.dll MOD - [2011.04.24 23:13:28 \| 000,192,912 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtsql4.dll MOD - [2011.04.24 23:13:26 \| 001,270,160 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtscript4.dll MOD - [2011.04.24 23:13:26 \| 000,758,160 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtnetwork4.dll MOD - [2011.04.24 23:13:24 \| 002,118,032 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtcore4.dll MOD - [2011.04.24 23:13:24 \| 002,089,360 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtdeclarative4.dll MOD - [2011.04.20 19:56:28 \| 000,025,088 \| ---- \| M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\imageformats\qgif4.dll ========== Services (SafeList) ========== SRV:64bit: - [2012.03.31 15:43:19 \| 001,431,888 \| ---- \| M] (Flexera Software, Inc.) [On_Demand \| Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:64bit: - [2009.07.14 05:41:27 \| 001,011,712 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:64bit: - [2009.07.14 05:40:01 \| 000,193,536 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:64bit: - [2008.07.29 13:20:28 \| 004,737,024 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon90) SRV - [2012.07.28 00:51:26 \| 000,063,960 \| ---- \| M] (Adobe Systems Incorporated) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012.07.13 13:29:06 \| 000,160,944 \| R--- \| M] (Skype Technologies) [Auto \| Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012.01.18 10:44:52 \| 000,450,848 \| ---- \| M] (Logitech Inc.) [Auto \| Running] -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv) SRV - [2011.05.21 06:01:00 \| 002,214,504 \| ---- \| M] (NVIDIA Corporation) [Auto \| Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011.04.24 23:15:02 \| 000,202,296 \| ---- \| M] (Kaspersky Lab ZAO) [Auto \| Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe -- (AVP) SRV - [2011.02.02 14:08:16 \| 000,018,656 \| ---- \| M] () [Auto \| Running] -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service) SRV - [2010.03.18 14:16:28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009.07.14 05:16:20 \| 000,010,752 \| ---- \| M] (Корпорация Майкрософт) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\wpcsvc.dll -- (WPCSvc) SRV - [2009.06.11 01:23:09 \| 000,066,384 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008.06.13 04:05:48 \| 001,539,224 \| ---- \| M] (Autodesk, Inc.) [On_Demand \| Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskNetSrv.exe -- (Autodesk Network Licensing Service) SRV - [2007.05.31 17:11:54 \| 000,443,784 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007.05.31 17:11:46 \| 000,225,672 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) ========== Driver Services (SafeList) ========== DRV:64bit: - [2012.03.01 10:46:16 \| 000,023,408 \| ---- \| M] (Microsoft Corporation) [Recognizer \| Boot \| Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2012.02.11 23:36:50 \| 000,283,200 \| ---- \| M] (DT Soft Ltd) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:64bit: - [2012.01.18 10:44:36 \| 004,865,568 \| ---- \| M] (Logitech Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) DRV:64bit: - [2012.01.18 10:44:28 \| 000,351,136 \| ---- \| M] (Logitech Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64) DRV:64bit: - [2011.12.25 22:55:02 \| 000,615,728 \| ---- \| M] (Kaspersky Lab) [File_System \| System \| Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF) DRV:64bit: - [2011.03.11 10:41:12 \| 000,107,904 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 10:41:12 \| 000,027,008 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.03.10 18:36:24 \| 000,029,488 \| ---- \| M] (Kaspersky Lab ZAO) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6) DRV:64bit: - [2011.03.04 13:23:28 \| 000,011,864 \| ---- \| M] (Kaspersky Lab ZAO) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\kl2.sys -- (kl2) DRV:64bit: - [2011.03.04 13:23:24 \| 000,460,888 \| ---- \| M] (Kaspersky Lab ZAO) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (KL1) DRV:64bit: - [2010.11.20 17:33:35 \| 000,078,720 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.11.20 15:07:05 \| 000,059,392 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010.11.20 15:03:42 \| 000,020,992 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:64bit: - [2009.11.02 20:27:10 \| 000,022,544 \| ---- \| M] (Kaspersky Lab) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt) DRV:64bit: - [2009.09.23 19:23:02 \| 006,180,832 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2009.07.14 05:52:20 \| 000,194,128 \| ---- \| M] (AMD Technologies Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 05:48:04 \| 000,065,600 \| ---- \| M] (LSI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 05:45:55 \| 000,024,656 \| ---- \| M] (Promise Technology) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.07.14 04:09:50 \| 000,019,968 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx) DRV:64bit: - [2009.06.11 00:34:33 \| 003,286,016 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.11 00:34:28 \| 000,468,480 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.11 00:34:23 \| 000,270,848 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.11 00:34:21 \| 000,034,304 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\l260x64.sys -- (Atc002) DRV:64bit: - [2009.06.11 00:31:59 \| 000,031,232 \| ---- \| M] (Hauppauge Computer Works, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2005.03.29 02:30:38 \| 000,008,192 \| ---- \| M] () [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV - [2012.10.23 13:05:20 \| 000,018,048 \| ---- \| M] () [Kernel \| Auto \| Stopped] -- C:\Windows\SysWOW64\drivers\lirsgt.sys -- (lirsgt) DRV - [2009.07.14 05:19:10 \| 000,019,008 \| ---- \| M] (Microsoft Corporation) [File_System \| On_Demand \| Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yandex.ru/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ru.msn.com/?rd=1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 5E B8 BF C1 C1 C2 CC 01 [binary data] IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://yandex.ru/yandsearch?clid=41530&text={searchTerms} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local> ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "http://www.mail.ru/" FF - prefs.js..browser.search.defaulturl: "http://go.mail.ru/search?fr=fftb&utf8in&q=" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.yandex.ru/" FF - prefs.js..extensions.enabledAddons: linkfilter@kaspersky.ru:12.0.0.477 FF - prefs.js..extensions.enabledAddons: virtualKeyboard@kaspersky.ru:12.0.0.477 FF - prefs.js..extensions.enabledAddons: KavAntiBanner@Kaspersky.ru:12.0.0.477 FF - prefs.js..extensions.enabledAddons: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}:6.0.33 FF - prefs.js..keyword.URL: "http://go.mail.ru/search?utf8in=1&fr=fftbUFix&q=" FF - prefs.js..network.proxy.type: 0 FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_33: C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\linkfilter@kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2012.09.03 17:16:07 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2012.09.03 17:16:07 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\KavAntiBanner@Kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2012.09.03 17:16:06 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2012.09.07 13:18:26 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2012.09.07 13:18:26 \| 000,000,000 \| ---D \| M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2011.12.25 23:00:27 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\MilNas\AppData\Roaming\mozilla\Extensions [2012.05.02 16:33:54 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\MilNas\AppData\Roaming\mozilla\Firefox\Profiles\nnosy8kt.default\extensions [2012.03.17 08:37:03 \| 000,001,533 \| ---- \| M] () -- C:\Users\MilNas\AppData\Roaming\mozilla\firefox\profiles\nnosy8kt.default\searchplugins\mailru---.xml [2011.12.21 09:19:19 \| 000,001,719 \| ---- \| M] () -- C:\Users\MilNas\AppData\Roaming\mozilla\firefox\profiles\nnosy8kt.default\searchplugins\ybqs-yandex.xml [2012.09.03 17:16:06 \| 000,000,000 \| ---D \| M] (Anti-Banner) -- C:\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 2012\FFEXT\KAVANTIBANNER@KASPERSKY.RU [2012.09.03 17:16:07 \| 000,000,000 \| ---D \| M] (Kaspersky URL Advisor) -- C:\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 2012\FFEXT\LINKFILTER@KASPERSKY.RU [2012.09.03 17:16:07 \| 000,000,000 \| ---D \| M] (Kaspersky Virtual Keyboard) -- C:\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 2012\FFEXT\VIRTUALKEYBOARD@KASPERSKY.RU [2012.09.07 13:18:22 \| 000,000,000 \| ---D \| M] (Java Console) -- D:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} CHR - Extension: No name found = C:\Users\MilNas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\ O1 HOSTS File: ([2009.06.11 01:00:26 \| 000,000,824 \| ---- \| M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO) O2:64bit: - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Визуальные закладки) - {C93F72A2-2162-4BBA-A07A-F13663C297A6} - C:\Program Files (x86)\Yandex\YandexBarIE\fastdial.dll () O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO) O3 - HKLM\..\Toolbar: (Яндекс.Бар) - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files (x86)\Yandex\YandexBarIE\yndbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (Яндекс.Бар) - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files (x86)\Yandex\YandexBarIE\yndbar.dll () O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation) O4 - HKLM..\Run: [ACPW05EN] D:\Program Files\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe (ACD Systems) O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe (Kaspersky Lab ZAO) O4 - HKLM..\Run: [LWS] D:\Program Files\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.) O4 - HKCU..\Run: [DAEMON Tools Lite] D:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [drm.exe] D:\Program Files\Nevosoft\Roaming\Nevosoft.Games\drm.exe () O4 - HKCU..\Run: [Praetorian] C:\Users\MilNas\AppData\Local\Yandex\Updater\praetorian.exe (Yandex LLC) O4 - HKCU..\Run: [uTorrent] D:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: Добавить в Анти-Баннер - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm () O8 - Extra context menu item: Добавить в Анти-Баннер - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm () O9:64bit: - Extra Button: &Виртуальная клавиатура - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO) O9:64bit: - Extra Button: Проверка ссы&лок - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: &Виртуальная клавиатура - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO) O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.) O9 - Extra Button: Проверка ссы&лок - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33) O16 - DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.10.39.4 217.10.32.4 217.10.36.5 217.10.44.35 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ACEC0FD5-9143-45B5-B411-7B368E96F037}: DhcpNameServer = 217.10.39.4 217.10.32.4 217.10.36.5 217.10.44.35 O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O20:64bit: - Winlogon\Notify\klogon: DllName - (%SystemRoot%\System32\klogon.dll) - C:\Windows\SysNative\klogon.dll (Kaspersky Lab ZAO) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012.03.31 15:00:59 \| 000,000,000 \| ---D \| M] - E:\Autodesk -- [ NTFS ] O32 - AutoRun File - [2010.08.27 16:01:23 \| 000,000,000 \| RH-D \| M] - G:\autorun -- [ NTFS ] O32 - AutoRun File - [2002.10.16 16:56:50 \| 000,000,036 \| RH-- \| M] () - G:\autorun.inf -- [ NTFS ] O33 - MountPoints2\{66de161f-4c3c-11e1-a364-0018f30e4639}\Shell - "" = AutoRun O33 - MountPoints2\{66de161f-4c3c-11e1-a364-0018f30e4639}\Shell\AutoRun\command - "" = H:\Setup.exe O34 - HKLM BootExecute: (autocheck autochk ) O35:64bit: - HKLM\..comfile [open] -- "%1" % O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2012.10.23 23:27:38 \| 000,000,000 \| ---D \| C] -- C:\_OTL [2012.10.23 06:57:21 \| 004,731,392 \| ---- \| C] (AVAST Software) -- C:\Users\MilNas\Desktop\aswMBR.exe [2012.10.22 22:19:55 \| 000,602,112 \| ---- \| C] (OldTimer Tools) -- C:\Users\MilNas\Desktop\OTL.exe [2012.10.22 12:53:06 \| 000,000,000 \| ---D \| C] -- C:\Users\MilNas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Новый Диск [2012.10.11 14:51:46 \| 000,000,000 \| ---D \| C] -- C:\Users\MilNas\AppData\Roaming\northerntale_nevosoft_ru [2012.10.11 11:59:52 \| 000,000,000 \| ---D \| C] -- C:\Users\MilNas\AppData\Roaming\Rumbic Studio [2012.10.10 06:12:18 \| 005,559,664 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2012.10.10 06:12:16 \| 003,968,880 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2012.10.10 06:12:16 \| 003,914,096 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2012.10.10 06:12:09 \| 001,162,240 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll [2012.10.10 06:12:09 \| 000,424,448 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll [2012.10.10 06:12:09 \| 000,338,432 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe [2012.10.10 06:12:09 \| 000,215,040 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2012.10.10 06:12:08 \| 000,243,200 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2012.10.10 06:12:07 \| 000,362,496 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll [2012.10.10 06:12:07 \| 000,025,600 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2012.10.10 06:12:07 \| 000,016,384 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll [2012.10.10 06:12:07 \| 000,014,336 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2012.10.10 06:12:07 \| 000,013,312 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll [2012.10.10 06:12:07 \| 000,005,120 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2012.10.10 06:12:07 \| 000,004,608 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll [2012.10.10 06:12:07 \| 000,004,608 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll [2012.10.10 06:12:07 \| 000,004,608 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll [2012.10.10 06:12:07 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll [2012.10.10 06:12:07 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll [2012.10.10 06:12:07 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll [2012.10.10 06:12:07 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll [2012.10.10 06:12:07 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll [2012.10.10 06:12:07 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll [2012.10.10 06:12:06 \| 000,007,680 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2012.10.10 06:12:06 \| 000,006,144 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll [2012.10.10 06:12:06 \| 000,005,120 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll [2012.10.10 06:12:06 \| 000,005,120 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll [2012.10.10 06:12:06 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll [2012.10.10 06:12:06 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll [2012.10.10 06:12:06 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll [2012.10.10 06:12:06 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll [2012.10.10 06:12:04 \| 000,006,144 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll [2012.10.10 06:12:04 \| 000,004,608 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll [2012.10.10 06:12:04 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll [2012.10.10 06:12:04 \| 000,004,096 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll [2012.10.10 06:12:04 \| 000,003,584 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll [2012.10.10 06:12:04 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll [2012.10.10 06:12:04 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll [2012.10.10 06:12:04 \| 000,003,072 \| -H-- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll [2012.10.10 06:12:03 \| 000,002,048 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2012.10.10 06:11:49 \| 000,220,160 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2012.10.10 06:11:23 \| 001,464,320 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll [2012.10.10 06:11:23 \| 000,140,288 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll [2012.09.25 21:24:00 \| 000,245,760 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\OxpsConverter.exe ========== Files - Modified Within 30 Days ========== [2012.10.23 23:36:37 \| 000,014,224 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.10.23 23:36:37 \| 000,014,224 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.10.23 23:36:09 \| 001,642,822 \| ---- \| M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012.10.23 23:36:09 \| 000,722,456 \| ---- \| M] () -- C:\Windows\SysNative\perfh019.dat [2012.10.23 23:36:09 \| 000,652,150 \| ---- \| M] () -- C:\Windows\SysNative\perfh009.dat [2012.10.23 23:36:09 \| 000,149,494 \| ---- \| M] () -- C:\Windows\SysNative\perfc019.dat [2012.10.23 23:36:09 \| 000,121,082 \| ---- \| M] () -- C:\Windows\SysNative\perfc009.dat [2012.10.23 23:30:33 \| 004,342,784 \| -H-- \| M] () -- C:\Users\MilNas\AppData\Roaming\base.db [2012.10.23 23:29:03 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2012.10.23 23:28:58 \| 1610,014,720 \| -HS- \| M] () -- C:\hiberfil.sys [2012.10.23 13:05:20 \| 000,018,048 \| ---- \| M] () -- C:\Windows\SysWow64\drivers\lirsgt.sys [2012.10.23 07:17:02 \| 000,000,512 \| ---- \| M] () -- C:\Users\MilNas\Documents\MBR.dat [2012.10.23 06:57:47 \| 004,731,392 \| ---- \| M] (AVAST Software) -- C:\Users\MilNas\Desktop\aswMBR.exe [2012.10.22 22:20:08 \| 000,602,112 \| ---- \| M] (OldTimer Tools) -- C:\Users\MilNas\Desktop\OTL.exe [2012.10.22 12:53:07 \| 000,000,652 \| ---- \| M] () -- C:\Users\MilNas\Desktop\Тайна да Винчи.lnk [2012.10.21 21:36:55 \| 000,489,536 \| ---- \| M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012.10.21 14:51:11 \| 000,000,954 \| ---- \| M] () -- C:\Users\MilNas\Desktop\перенести на ноут новые схемы - Ярлык.lnk [2012.10.21 14:51:03 \| 000,000,842 \| ---- \| M] () -- C:\Users\MilNas\Desktop\схемы вышивки - Ярлык.lnk [2012.10.11 11:58:52 \| 000,000,793 \| ---- \| M] () -- C:\Users\MilNas\Desktop\Тайна ночи.lnk [2012.09.24 16:19:40 \| 000,003,584 \| ---- \| M] () -- C:\Users\MilNas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini ========== Files Created - No Company Name ========== [2012.10.23 07:17:02 \| 000,000,512 \| ---- \| C] () -- C:\Users\MilNas\Documents\MBR.dat [2012.10.22 21:33:32 \| 000,018,048 \| ---- \| C] () -- C:\Windows\SysWow64\drivers\lirsgt.sys [2012.10.22 12:53:07 \| 000,000,652 \| ---- \| C] () -- C:\Users\MilNas\Desktop\Тайна да Винчи.lnk [2012.10.21 20:43:59 \| 000,489,536 \| ---- \| C] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012.10.21 14:51:11 \| 000,000,954 \| ---- \| C] () -- C:\Users\MilNas\Desktop\перенести на ноут новые схемы - Ярлык.lnk [2012.10.21 14:51:03 \| 000,000,842 \| ---- \| C] () -- C:\Users\MilNas\Desktop\схемы вышивки - Ярлык.lnk [2012.10.11 11:58:52 \| 000,000,793 \| ---- \| C] () -- C:\Users\MilNas\Desktop\Тайна ночи.lnk [2012.03.31 15:44:11 \| 000,000,153 \| ---- \| C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc [2012.02.06 17:47:27 \| 000,003,584 \| ---- \| C] () -- C:\Users\MilNas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012.01.18 10:44:00 \| 010,920,984 \| ---- \| C] () -- C:\Windows\SysWow64\LogiDPP.dll [2012.01.18 10:44:00 \| 000,336,408 \| ---- \| C] () -- C:\Windows\SysWow64\DevManagerCore.dll [2012.01.18 10:44:00 \| 000,104,472 \| ---- \| C] () -- C:\Windows\SysWow64\LogiDPPApp.exe [2012.01.05 19:27:17 \| 004,342,784 \| -H-- \| C] () -- C:\Users\MilNas\AppData\Roaming\base.db [2011.12.25 22:57:22 \| 000,017,408 \| ---- \| C] () -- C:\Users\MilNas\AppData\Local\WebpageIcons.db [2011.12.25 08:52:16 \| 001,620,280 \| ---- \| C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011.12.25 08:35:35 \| 000,921,665 \| ---- \| C] () -- C:\Windows\SysWow64\msvcrt-ruby18.dll [2011.12.25 08:35:35 \| 000,271,264 \| ---- \| C] () -- C:\Windows\SysWow64\vbrun100.dll [2011.12.25 08:35:35 \| 000,210,944 \| ---- \| C] () -- C:\Windows\SysWow64\msvcrt10.dll [2011.12.25 08:35:35 \| 000,027,136 \| ---- \| C] () -- C:\Windows\SysWow64\pythonw.exe [2011.12.25 08:35:35 \| 000,026,624 \| ---- \| C] () -- C:\Windows\SysWow64\python.exe [2011.12.25 08:35:35 \| 000,020,537 \| ---- \| C] () -- C:\Windows\SysWow64\rubyw.exe [2011.12.25 08:35:35 \| 000,020,536 \| ---- \| C] () -- C:\Windows\SysWow64\ruby.exe ========== ZeroAccess Check ========== [2009.07.14 08:55:00 \| 000,000,227 \| RHS- \| M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 09:43:10 \| 014,172,672 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 08:41:00 \| 012,873,728 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 05:40:51 \| 000,909,312 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 16:19:02 \| 000,606,208 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 05:41:56 \| 000,505,856 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] ========== Alternate Data Streams ========== @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:75CC0165 < End of report >

Profil

Sass Drake Poslao: 24 Okt 2012 00:06 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10445 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! To bi bilo to. Ostaje ti još da uradiš ovo: Ponovo pokreni OTL i klikni na dugme CleanUp. aswMBR možeš da obrišeš. Preporučujem da za zaštitu USB memorijskih uređaja koristiš MCShield. Nema nikakve veze sa antivirus-om tj. neće ometati njegov rad, a pokazao se kao jedan od najboljih vida zaštite od malware-a koji se prenosi putem USB mem. uređaja. Home Page MCShield-a: http://amf.mycity.rs/mcshield/ Više o MCShield-u možeš saznati u ovoj temi: http://www.mycity.rs/MyCity-Laboratorija/MCShield-v2.html Facebook stranica MCShield-a: http://www.facebook.com/MCShield Tvoj problem je najvjerovatnije izazvan ili pogrešno podešenom IP i DHCP IP adresom ili neispravnom mrežnom kartom, u najboljem slučaju, njenim drajverom. Bilo kako bilo, otvori temu u Windows forumu i tamo iznesi svoj problem. Pozdrav.

Profil

MoscowBeast Poslao: 26 Okt 2012 13:11 Idi na vrh
offline MoscowBeast Nepopravljivi optimista Civil Works Team Leader @ IKEA Centres Russia Pridružio: 22 Jun 2005 Poruke: 7911 Gde živiš: Moskva, Rusija	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Izvinjavam se što ranije nisam odgovorio - hvala na pomoći, će se ćeram s mrežnom kartom dalje.

Profil

MyCity » Ambulanta -> Arhiva Ambulante » Moze to, al' samo bez kabla (gos'n Kecmane)

Ko je trenutno na forumu

Ukupno su 442 korisnika na forumu :: 36 registrovanih, 3 sakrivenih i 403 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 1798 - dana 19 Sep 2019 18:42

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: A.R.Chafee.Jr., aljosa7, bieffe, Buzdovan2, caesar, CUCLA70, d.arsenal321, darkangel, dovla p, Georgius2, goxin, husky, i.jovanovich, ivan979, JOntra, kozi, krkalon, Kubovac, ljuba sd, LUDI, madza2, Mihajlo2, milos.cbr, NoOneEver Dreams, novator, Raptor12, RJ, royst33, StepskiVuk2, Toni, USSVoyager, virked, VJ, vlvl, Wisdomseeker, yufighter

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by