Usporen rad Pc-a

1

Usporen rad Pc-a

offline
  • Pridružio: 28 Jun 2008
  • Poruke: 61

Poštovani, evo javljam vam se u vezi usporenja rada PC-a..Čuo sam sve najbolje o vama, pa vas želim zamoliti da mi pogledate što bi mogao biti problem..Prije sam preko jednog prijatelja dobio Combo fix i ATF cleaner, pa sam probao s njima više puta,al me on nije znao baš uputiti u njihov rad nego mi je rekao ako neće da se popravi preko njih da je najbolje da se obratim na ovoj stranici..

Problem je u tome što je spor mislim da je sporiji dvostruko nego prije nekog vremena..i još nešto-npr. kad gledam neki dvd on ga uštopa a ton ide i dalje..Znam da nije do dvd-a jer sam isti probao pokrenuti i na dvd playeru te je normalno radio..

Dopuna: 28 Jun 2008 13:53

Evo i ono što sam dobio u logu!

Logfile of HijackThis v1.99.1
Scan saved at 13:41:37, on 28.06.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
D:\WINDOWS\system32\ctfmon.exe
D:\WINDOWS\system32\wscntfy.exe
D:\WINDOWS\system32\WgaTray.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Documents and Settings\xx\Local Settings\Application Data\Microsoft\Messenger\galinjo25@hotmail.com\Sharing Folders\HijackThis.exe
D:\WINDOWS\svchost.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {385AB8C6-FB22-4D17-8834-064E2BA0A6F0} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: XBTB08033 - {AAAE1C1A-89F7-4AF6-ABD1-F8FBCFA47408} - D:\PROGRA~1\OFMMAN~1\OFMTOO~1.DLL (file missing)
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVP] "D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKCU\..\Run: [MsnMsgr] "D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ares] "D:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EA Core] D:\Program Files\Electronic Arts\EA Downloader\Core.exe -silent
O8 - Extra context menu item: Dodaj u Protiv reklama - D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: I&zvoz u Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: OFM Manager Bar - {BFB5F154-9212-46F3-B547-AC6106030A54} - D:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: OFM Manager Bar - {BFB5F154-9212-46F3-B547-AC6106030A54} - D:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: D:\PROGRA~1\KASPER~1\KASPER~2.0\adialhk.dll
O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - D:\Program Files\Ares\chatServer.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Unknown owner - D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

Unaprijed zahvaljujem!

offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Poz...


Obriši trenutnu verziju ComboFix-a koju imaš - koristićemo najnoviju koju ćeš da preuzmeš sa donjih linkova.


* Klikni desnim tasterom na Kaspersky ikonicu ( ) u donjem, desnom uglu ekrana i izaberi Pause Protection.
* U prozoru koji se otvori, izaberi By User Request.

Napomena: Ne zaboravi da uključiš ovu opciju po završetku čišćenja.



Arrow Skini ComboFix sa jedne od sledecih adresa na Desktop:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Startuj ga i ne diraj prozor programa dok skenira.
Sledi uputstva na ekranu. Kada zavrsi pojavice se log (D:\ComboFix.txt) koji ces nam ovde iskopirati.

offline
  • Pridružio: 28 Jun 2008
  • Poruke: 61

Evo nakon što je odradio combo,dobio sam ovo:

ComboFix 08-06-20.4 - xx 2008-06-28 14:14:56.11 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1033.18.271 [GMT 2:00]
Running from: D:\Documents and Settings\xx\Desktop\ATF CLEANER\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

D:\Documents and Settings\All Users\Application Data\Starware349
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\FindIt.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\FindItHot.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\findithotxp.png
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\finditxp.png
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\Free_Credit_Score0.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\Free_Music0.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\Horoscopes0.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\logo.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\logoxp.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\Reference.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\ReferenceHot.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\referencehotxp.png
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\referencexp.png
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\Ringtones0.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\Weather.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\WeatherHot.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\weatherhotxp.png
D:\Documents and Settings\All Users\Application Data\Starware349\buttons\weatherxp.png
D:\Documents and Settings\All Users\Application Data\Starware349\contexts\error.xml
D:\Documents and Settings\All Users\Application Data\Starware349\contexts\Related.xml
D:\Documents and Settings\All Users\Application Data\Starware349\contexts\Travel.xml
D:\Documents and Settings\All Users\Application Data\Starware349\images\walertXP.bmp
D:\Documents and Settings\All Users\Application Data\Starware349\SimpleUpdate\ProductMessagingConfig.xml
D:\Documents and Settings\All Users\Application Data\Starware349\SimpleUpdate\ProductMessagingConfig.xml.backup
D:\Documents and Settings\All Users\Application Data\Starware349\SimpleUpdate\SimpleUpdateConfig.xml
D:\Documents and Settings\All Users\Application Data\Starware349\SimpleUpdate\SimpleUpdateConfig.xml.backup
D:\Documents and Settings\All Users\Application Data\Starware349\SimpleUpdate\TimerManagerConfig.xml
D:\Documents and Settings\All Users\Application Data\Starware349\SimpleUpdate\TimerManagerConfig.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349
D:\Documents and Settings\xx\Application Data\Starware349\BrowserSearch\BrowserSearch.xml
D:\Documents and Settings\xx\Application Data\Starware349\BrowserSearch\BrowserSearch.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\Configurator\Configurator.xml
D:\Documents and Settings\xx\Application Data\Starware349\Configurator\Configurator.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\ErrorSearch\ErrorSearchOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\ErrorSearch\ErrorSearchOptions.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\Free_Credit_Score\Free_Credit_ScoreOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\Free_Credit_Score\Free_Credit_ScoreOptions.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\Free_Music\Free_MusicOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\Free_Music\Free_MusicOptions.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\Horoscopes\HoroscopesOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\Horoscopes\HoroscopesOptions.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\Layouts\ToolbarLayout.xml
D:\Documents and Settings\xx\Application Data\Starware349\Layouts\ToolbarLayout.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\Manager\ManagerOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\Manager\ManagerOptions.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\Reference\ReferenceOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\Reference\ReferenceOptions.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\RelatedSearch\RelatedSearchOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\RelatedSearch\RelatedSearchOptions.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\Ringtones\RingtonesOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\Ringtones\RingtonesOptions.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\Toolbar\TBProductsOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\Toolbar\TBProductsOptions.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\ToolbarLogo\ToolbarLogoOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\ToolbarLogo\ToolbarLogoOptions.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\ToolbarSearch\ToolbarSearchOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\ToolbarSearch\ToolbarSearchOptions.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\TravelSearch\TravelSearchOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\TravelSearch\TravelSearchOptions.xml.backup
D:\Documents and Settings\xx\Application Data\Starware349\Weather\AlertArchive.xml
D:\Documents and Settings\xx\Application Data\Starware349\Weather\WeatherOptions.xml
D:\Documents and Settings\xx\Application Data\Starware349\Weather\WeatherOptions.xml.backup
D:\WINDOWS\svchost.exe
D:\WINDOWS\system32\cologsver.exe
D:\WINDOWS\system32\google.dll
D:\WINDOWS\system32\lsprst7.dll
D:\WINDOWS\system32\msnserv.exe
I:\autorun.bat
I:\autorun.inf
I:\autorun.vbs
I:\Knight.exe
.
---- Previous Run -------
.
D:\WINDOWS\svchost.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_POWERMANAGER
-------\Service_PowerManager
-------\Legacy_POWERMANAGER
-------\Service_PowerManager


((((((((((((((((((((((((( Files Created from 2008-05-28 to 2008-06-28 )))))))))))))))))))))))))))))))
.

2008-06-27 19:34 . 2008-06-27 19:34 <DIR> d-------- D:\Program Files\Electronic Arts
2008-06-19 18:09 . 2008-06-19 18:09 268 --ah----- D:\sqmdata01.sqm
2008-06-19 18:09 . 2008-06-19 18:09 244 --ah----- D:\sqmnoopt01.sqm
2008-06-18 23:02 . 2008-06-18 23:02 268 --ah----- D:\sqmdata00.sqm
2008-06-18 23:02 . 2008-06-18 23:02 244 --ah----- D:\sqmnoopt00.sqm
2008-06-17 22:42 . 2008-06-17 22:42 <DIR> d-------- D:\Program Files\InstallShield Installation Information
2008-06-11 17:02 . 2008-06-11 17:02 <DIR> d-------- D:\Program Files\Fifa Master
2008-06-11 16:29 . 2008-06-11 16:29 <DIR> dr-h----- D:\Documents and Settings\xx\Application Data\SecuROM
2008-06-11 15:03 . 2008-06-13 15:10 272,128 --------- D:\WINDOWS\system32\drivers\bthport.sys
2008-06-11 15:03 . 2008-06-13 15:10 272,128 -----c--- D:\WINDOWS\system32\dllcache\bthport.sys
2008-06-10 01:11 . 2008-06-10 01:11 <DIR> d-------- D:\Program Files\Davilex
2008-06-09 13:44 . 2008-06-09 13:44 <DIR> d-------- D:\Documents and Settings\xx\.spss
2008-06-09 13:35 . 2008-06-09 13:35 <DIR> d-------- D:\Documents and Settings\All Users\Application Data\SafeNet Sentinel
2008-06-09 13:31 . 2008-06-09 13:31 <DIR> d-------- D:\Program Files\Common Files\SPSS
2008-06-09 13:31 . 2008-06-09 13:31 <DIR> d-------- D:\Documents and Settings\All Users\Application Data\SPSS
2008-06-09 13:30 . 2008-06-09 13:30 1,025 --a------ D:\WINDOWS\system32\sysprs7.tgz
2008-06-09 13:30 . 2008-06-09 13:30 1,025 --a------ D:\WINDOWS\system32\sysprs7.dll
2008-06-09 13:30 . 2008-06-09 13:30 16 ---h----- D:\WINDOWS\system32\servdat.slm
2008-06-07 11:49 . 2008-06-07 11:49 <DIR> d--hs---- D:\WINDOWS\ftpcache
2008-05-31 15:27 . 2008-06-03 17:31 <DIR> d-a------ D:\Documents and Settings\All Users\Application Data\TEMP
2008-05-31 15:26 . 2008-06-17 15:35 <DIR> d-------- D:\Program Files\Neuro-Programmer 2

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-28 12:22 23,890,976 --sha-w D:\WINDOWS\system32\drivers\fidbox.dat
2008-06-28 12:22 1,654,560 --sha-w D:\WINDOWS\system32\drivers\fidbox2.dat
2008-06-28 12:21 323,108 --sha-w D:\WINDOWS\system32\drivers\fidbox.idx
2008-06-28 12:21 158,228 --sha-w D:\WINDOWS\system32\drivers\fidbox2.idx
2008-06-28 07:34 4,192 ----a-w D:\WINDOWS\system32\ealregsnapshot1.reg
2008-06-28 07:31 --------- d-----w D:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-06-24 17:07 --------- d-----w D:\Documents and Settings\xx\Application Data\temp
2008-06-17 14:17 --------- d-----w D:\Program Files\Winamp
2008-06-17 14:12 223,128 ----a-w D:\WINDOWS\system32\drivers\vaxscsi.sys
2008-06-17 13:37 --------- d-----w D:\Program Files\LHM2006
2008-06-17 13:36 --------- d-----w D:\Program Files\XoftSpySE
2008-06-17 13:35 --------- d-----w D:\Program Files\Windows Live Toolbar
2008-06-17 13:35 --------- d-----w D:\Program Files\bfgclient
2008-05-30 13:58 --------- d-----w D:\Program Files\Common Files\Adobe
2008-05-11 15:14 1,292,470 ----a-w D:\Documents and Settings\xx\ddram.exe
2008-05-08 12:28 202,752 ----a-w D:\WINDOWS\system32\drivers\rmcast.sys
2008-05-07 05:18 1,287,680 ----a-w D:\WINDOWS\system32\quartz.dll
2008-04-23 04:16 826,368 ----a-w D:\WINDOWS\system32\wininet.dll
2008-04-12 09:44 286,720 ------w D:\WINDOWS\Setup1.exe
2007-11-03 14:45 13 ----a-w D:\Documents and Settings\xx\Verinfo.dat
2007-11-03 14:44 1,024 ----a-w D:\Documents and Settings\xx\Config.dat
2004-08-03 22:56 221,532 --sh--r D:\WINDOWS\system32\lxkchkv.exe
.

------- Sigcheck -------

md5deep: D:\WINDOWS\svchost.exe: No such file or directory
2004-08-04 00:56 14336 8f078ae4ed187aaabc0a305146de6716 D:\WINDOWS\system32\svchost.exe
2004-08-04 00:56 14336 8f078ae4ed187aaabc0a305146de6716 D:\WINDOWS\system32\dllcache\svchost.exe

2007-03-08 17:36 577536 b409909f6e2e8a7067076ed748abf1e7 D:\WINDOWS\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\sp2gdr\user32.dll
2007-03-08 17:48 578048 7aa4f6c00405dfc4b70ed4214e7d687b D:\WINDOWS\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\sp2qfe\user32.dll
2005-03-02 20:09 577024 de2db164bbb35db061af0997e4499054 D:\WINDOWS\system32\user32.dll
2005-03-02 20:09 577024 de2db164bbb35db061af0997e4499054 D:\WINDOWS\system32\dllcache\user32.dll

2004-08-04 00:56 82944 2ed0b7f12a60f90092081c50fa0ec2b2 D:\WINDOWS\system32\ws2_32.dll
2004-08-04 00:56 82944 2ed0b7f12a60f90092081c50fa0ec2b2 D:\WINDOWS\system32\dllcache\ws2_32.dll

2007-10-30 19:20 360064 90caff4b094573449a0872a0f919b178 D:\WINDOWS\system32\dllcache\tcpip.sys
2007-10-30 19:20 360064 90caff4b094573449a0872a0f919b178 D:\WINDOWS\system32\drivers\tcpip.sys

2004-08-04 00:56 502272 01c3346c241652f43aed8e2149881bfe D:\WINDOWS\system32\winlogon.exe
2004-08-04 00:56 502272 01c3346c241652f43aed8e2149881bfe D:\WINDOWS\system32\dllcache\winlogon.exe

2004-08-03 23:14 182912 558635d3af1c7546d26067d5d9b6959e D:\WINDOWS\system32\dllcache\ndis.sys
2004-08-03 23:14 182912 558635d3af1c7546d26067d5d9b6959e D:\WINDOWS\system32\drivers\ndis.sys

2004-08-03 23:00 29056 4448006b6bc60e6c027932cfc38d6855 D:\WINDOWS\system32\dllcache\ip6fw.sys
2004-08-03 23:00 29056 4448006b6bc60e6c027932cfc38d6855 D:\WINDOWS\system32\drivers\ip6fw.sys

2005-03-02 02:34 2056832 81013f36b21c7f72cf784cc6731e0002 D:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe
2007-02-28 10:38 2057600 515d30e2c90a3665a2739309334c9283 D:\WINDOWS\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2gdr\ntkrnlpa.exe
2007-02-28 11:15 2059392 4d3dbdccbf97f5ba1e74f322b155c3ba D:\WINDOWS\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2qfe\ntkrnlpa.exe
2005-03-02 02:34 2056832 81013f36b21c7f72cf784cc6731e0002 D:\WINDOWS\system32\ntkrnlpa.exe

2005-03-02 02:59 2179328 4d4cf2c14550a4b7718e94a6e581856e D:\WINDOWS\Driver Cache\i386\ntoskrnl.exe
2007-02-28 11:10 2180352 582a8dbaa58c3b1f176eb2817daee77c D:\WINDOWS\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2gdr\ntoskrnl.exe
2007-02-28 11:55 2182144 5a5c8db4aa962c714c8371fbdf189fc9 D:\WINDOWS\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2qfe\ntoskrnl.exe
2005-03-02 02:59 2179328 4d4cf2c14550a4b7718e94a6e581856e D:\WINDOWS\system32\ntoskrnl.exe

2004-08-04 00:56 1032192 a0732187050030ae399b241436565e64 D:\WINDOWS\explorer.exe
2008-03-01 19:10 1033216 97bd6515465659ff8f3b7be375b2ea87 D:\WINDOWS\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\sp2gdr\explorer.exe
2008-03-01 21:00 1033216 7712df0cdde3a5ac89843e61cd5b3658 D:\WINDOWS\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\sp2qfe\explorer.exe
2004-08-04 00:56 1032192 a0732187050030ae399b241436565e64 D:\WINDOWS\system32\dllcache\explorer.exe

2004-08-04 00:56 108032 c6ce6eec82f187615d1002bb3bb50ed4 D:\WINDOWS\system32\services.exe
2004-08-04 00:56 108032 c6ce6eec82f187615d1002bb3bb50ed4 D:\WINDOWS\system32\dllcache\services.exe

2004-08-04 00:56 13312 84885f9b82f4d55c6146ebf6065d75d2 D:\WINDOWS\system32\lsass.exe
2004-08-04 00:56 13312 84885f9b82f4d55c6146ebf6065d75d2 D:\WINDOWS\system32\dllcache\lsass.exe

2004-08-04 00:56 15360 24232996a38c0b0cf151c2140ae29fc8 D:\WINDOWS\system32\ctfmon.exe
2004-08-04 00:56 15360 24232996a38c0b0cf151c2140ae29fc8 D:\WINDOWS\system32\dllcache\ctfmon.exe
.
((((((((((((((((((((((((((((( snapshot_2008-05-06_21.59.11.41 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-01-23 04:56:21 554,008 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll
+ 2007-12-10 12:41:11 518,944 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll
+ 2007-12-10 12:41:11 326,432 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
+ 2007-12-10 12:41:11 1,516,568 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll
+ 2007-12-10 12:41:11 355,112 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
+ 2008-03-27 07:39:13 151,583 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll
+ 2007-12-10 12:41:12 60,192 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll
+ 2007-12-10 12:41:12 248,608 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
+ 2007-12-10 12:41:12 219,936 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll
+ 2007-12-10 12:41:12 355,104 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
+ 2007-12-10 12:41:13 432,928 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
+ 2007-12-10 12:41:13 322,336 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
+ 2007-12-10 12:41:13 559,904 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
+ 2007-12-10 12:41:13 264,992 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll
+ 2007-12-10 12:41:13 838,432 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
+ 2007-12-10 12:41:14 621,344 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
+ 2007-12-10 12:41:14 355,104 ----a-w D:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
+ 2007-03-06 01:22:36 14,048 ----a-w D:\WINDOWS\$hf_mig$\KB950749\spmsg.dll
+ 2007-03-06 01:22:41 213,216 ----a-w D:\WINDOWS\$hf_mig$\KB950749\spuninst.exe
+ 2007-03-06 01:22:34 22,752 ----a-w D:\WINDOWS\$hf_mig$\KB950749\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 ----a-w D:\WINDOWS\$hf_mig$\KB950749\update\update.exe
+ 2007-03-06 01:23:51 371,424 ----a-w D:\WINDOWS\$hf_mig$\KB950749\update\updspapi.dll
+ 2008-05-07 04:55:40 1,288,192 ----a-w D:\WINDOWS\$hf_mig$\KB951698\SP2QFE\quartz.dll
+ 2008-05-07 05:12:40 1,288,192 ----a-w D:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll
+ 2008-05-07 05:04:15 1,288,192 ----a-w D:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll
+ 2007-11-30 11:18:51 17,272 ----a-w D:\WINDOWS\$hf_mig$\KB951698\spmsg.dll
+ 2007-11-30 11:18:51 231,288 ----a-w D:\WINDOWS\$hf_mig$\KB951698\spuninst.exe
+ 2007-11-30 11:18:51 26,488 ----a-w D:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w D:\WINDOWS\$hf_mig$\KB951698\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w D:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll
+ 2004-08-03 22:56:44 561,179 -c----w D:\WINDOWS\$NtUninstallKB950749$\dao360.dll
+ 2004-08-03 22:56:44 512,029 -c----w D:\WINDOWS\$NtUninstallKB950749$\msexch40.dll
+ 2004-08-03 22:56:44 319,517 -c----w D:\WINDOWS\$NtUninstallKB950749$\msexcl40.dll
+ 2004-08-03 22:56:44 1,507,356 -c----w D:\WINDOWS\$NtUninstallKB950749$\msjet40.dll
+ 2004-07-17 09:34:48 358,976 -c----w D:\WINDOWS\$NtUninstallKB950749$\msjetol1.dll
+ 2004-07-17 09:34:48 358,976 -c----w D:\WINDOWS\$NtUninstallKB950749$\msjetoledb40.dll
+ 2004-08-03 22:56:44 151,583 -c----w D:\WINDOWS\$NtUninstallKB950749$\msjint40.dll
+ 2004-08-03 22:56:44 53,279 -c----w D:\WINDOWS\$NtUninstallKB950749$\msjter40.dll
+ 2004-08-03 22:56:44 241,693 -c----w D:\WINDOWS\$NtUninstallKB950749$\msjtes40.dll
+ 2004-08-03 22:56:44 213,023 -c----w D:\WINDOWS\$NtUninstallKB950749$\msltus40.dll
+ 2004-08-03 22:56:44 348,189 -c----w D:\WINDOWS\$NtUninstallKB950749$\mspbde40.dll
+ 2004-08-03 22:56:44 421,919 -c----w D:\WINDOWS\$NtUninstallKB950749$\msrd2x40.dll
+ 2004-08-03 22:56:44 315,423 -c----w D:\WINDOWS\$NtUninstallKB950749$\msrd3x40.dll
+ 2004-08-03 22:56:44 552,989 -c----w D:\WINDOWS\$NtUninstallKB950749$\msrepl40.dll
+ 2004-08-03 22:56:44 258,077 -c----w D:\WINDOWS\$NtUninstallKB950749$\mstext40.dll
+ 2004-08-03 22:56:46 831,519 -c----w D:\WINDOWS\$NtUninstallKB950749$\mswdat10.dll
+ 2004-08-03 22:56:46 614,429 -c----w D:\WINDOWS\$NtUninstallKB950749$\mswstr10.dll
+ 2004-08-03 22:56:46 348,189 -c----w D:\WINDOWS\$NtUninstallKB950749$\msxbde40.dll
+ 2007-03-06 01:22:41 213,216 -c----w D:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c----w D:\WINDOWS\$NtUninstallKB950749$\spuninst\updspapi.dll
- 2008-03-16 14:41:23 53,248 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2008-06-11 13:46:10 53,248 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2008-03-16 14:41:28 12,800 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2008-06-11 13:46:10 12,800 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2008-03-16 14:41:32 473,600 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2008-06-11 13:46:11 473,600 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2008-03-16 14:40:32 2,676,224 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-11 13:46:02 2,676,224 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-03-16 14:40:45 2,846,720 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-11 13:46:03 2,846,720 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-03-16 14:40:52 563,712 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-11 13:46:04 563,712 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-03-16 14:40:59 567,296 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-11 13:46:05 567,296 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-03-16 14:41:05 576,000 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-11 13:46:05 576,000 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-03-08 21:38:53 577,024 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-11 13:46:06 577,024 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-03-08 21:38:55 577,536 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-11 13:46:07 577,536 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-03-08 21:38:56 577,536 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-11 13:46:07 577,536 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-03-08 21:38:57 578,560 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-11 13:46:08 578,560 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-03-16 14:41:37 578,560 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-11 13:46:11 578,560 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-03-16 14:41:41 145,920 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2008-06-11 13:46:12 145,920 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2008-03-16 14:41:45 159,232 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2008-06-11 13:46:12 159,232 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2008-03-16 14:41:50 364,544 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2008-06-11 13:46:12 364,544 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2008-03-16 14:41:55 178,176 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2008-06-11 13:46:13 178,176 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
- 2008-03-16 14:41:18 223,232 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2008-06-11 13:46:09 223,232 ----a-w D:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2008-05-06 19:53:43 2,048 --s-a-w D:\WINDOWS\bootstat.dat
+ 2008-06-28 12:22:17 2,048 --s-a-w D:\WINDOWS\bootstat.dat
+ 2008-06-13 13:10:50 272,128 ------w D:\WINDOWS\Driver Cache\i386\bthport.sys
- 2000-08-31 06:00:00 73,728 ----a-w D:\WINDOWS\fdsv.exe
+ 2000-08-31 06:00:00 89,504 ----a-w D:\WINDOWS\fdsv.exe
+ 2008-03-01 13:06:20 124,928 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\advpack.dll
+ 2008-03-01 13:06:21 347,136 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\dxtmsft.dll
+ 2008-03-01 13:06:21 214,528 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\dxtrans.dll
+ 2008-03-01 13:06:21 133,120 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\extmgr.dll
+ 2008-03-01 13:06:21 63,488 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\icardie.dll
+ 2008-02-29 08:55:23 70,656 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\ie4uinit.exe
+ 2008-03-01 13:06:21 153,088 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\ieakeng.dll
+ 2008-03-01 13:06:21 230,400 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\ieaksie.dll
+ 2008-02-15 05:44:25 161,792 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\ieakui.dll
+ 2008-03-01 13:06:22 383,488 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\ieapfltr.dll
+ 2008-03-01 13:06:22 384,512 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\iedkcs32.dll
+ 2008-03-01 13:06:24 6,066,176 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\ieframe.dll
+ 2008-03-01 13:06:24 44,544 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\iernonce.dll
+ 2008-03-01 13:06:25 267,776 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\iertutil.dll
+ 2008-02-22 10:00:51 13,824 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\ieudinit.exe
+ 2008-02-29 08:55:46 625,664 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\iexplore.exe
+ 2008-03-01 13:06:25 27,648 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\jsproxy.dll
+ 2008-03-01 13:06:26 459,264 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\msfeeds.dll
+ 2008-03-01 13:06:26 52,224 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\msfeedsbs.dll
+ 2008-03-01 16:36:30 3,591,680 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\mshtml.dll
+ 2008-03-01 13:06:28 478,208 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\mshtmled.dll
+ 2008-03-01 13:06:28 193,024 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\msrating.dll
+ 2008-03-01 13:06:29 671,232 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\mstime.dll
+ 2008-03-01 13:06:29 102,912 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\occache.dll
+ 2008-03-01 13:06:29 44,544 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\pngfilt.dll
+ 2007-03-06 01:22:39 213,216 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\spuninst\updspapi.dll
+ 2008-03-01 13:06:29 105,984 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\url.dll
+ 2008-03-01 13:06:30 1,159,680 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\urlmon.dll
+ 2008-03-01 13:06:30 233,472 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\webcheck.dll
+ 2008-03-01 13:06:31 826,368 -c----w D:\WINDOWS\ie7updates\KB950759-IE7\wininet.dll
+ 2008-06-03 19:21:48 21,342 ----a-r D:\WINDOWS\Installer\{015983A5-EAD2-4D06-8AA3-A5E3E8DDE815}\ARPPRODUCTICON.exe
+ 2008-06-03 19:21:48 61,440 ----a-r D:\WINDOWS\Installer\{015983A5-EAD2-4D06-8AA3-A5E3E8DDE815}\NewShortcut3_F3536A0AB5814C33A03D5A508BFBEB89.exe
+ 2008-06-03 19:21:48 61,440 ----a-r D:\WINDOWS\Installer\{015983A5-EAD2-4D06-8AA3-A5E3E8DDE815}\NewShortcut4_5E4862AFBE9C4B18A47FD3EF3DF92F06.exe
+ 2008-06-03 19:21:48 61,440 ----a-r D:\WINDOWS\Installer\{015983A5-EAD2-4D06-8AA3-A5E3E8DDE815}\NewShortcut5_1D96F5E278E84C218CB266CBB748EB31.exe
+ 2008-06-27 17:34:21 6,318 ----a-r D:\WINDOWS\Installer\{1D171963-9063-4423-898B-8EC4F1F190B7}\ARPPRODUCTICON.exe
+ 2008-06-27 17:34:22 6,318 ----a-r D:\WINDOWS\Installer\{1D171963-9063-4423-898B-8EC4F1F190B7}\NewShortcut1_1D17196390634423898B8EC4F1F190B7_1.exe
+ 2008-06-27 17:34:21 6,318 ----a-r D:\WINDOWS\Installer\{1D171963-9063-4423-898B-8EC4F1F190B7}\NewShortcut2_1D17196390634423898B8EC4F1F190B7.exe
+ 2008-06-09 11:35:00 45,056 ----a-r D:\WINDOWS\Installer\{9A657E90-E2B7-44DE-8929-055948162595}\ARPPRODUCTICON.exe
+ 2008-06-09 11:35:00 45,056 ----a-r D:\WINDOWS\Installer\{9A657E90-E2B7-44DE-8929-055948162595}\BaseShortcut_621025AE3510478EBC271A647150976F.exe
+ 2008-05-30 13:59:36 295,606 ----a-r D:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-A81200000003}\SC_Reader.exe
- 2000-08-31 06:00:00 28,160 ----a-w D:\WINDOWS\Nircmd.exe
+ 2000-08-31 06:00:00 28,672 ----a-w D:\WINDOWS\Nircmd.exe
+ 2008-06-28 07:36:30 6,974 ----a-w D:\WINDOWS\SoftwareDistribution\EventCache\{E0572FBD-713F-44BF-A39A-0FFB6580855A}.bin
- 2008-03-01 13:06:20 124,928 ----a-w D:\WINDOWS\system32\advpack.dll
+ 2008-04-23 04:16:28 124,928 ----a-w D:\WINDOWS\system32\advpack.dll
+ 2006-05-13 03:06:02 696,320 ----a-w D:\WINDOWS\system32\dk\calling.com
+ 2003-03-16 13:49:00 33,792 ----a-w D:\WINDOWS\system32\dk\d.dll
+ 2007-09-05 09:02:02 61,440 ----a-w D:\WINDOWS\system32\dk\lam1.exe
+ 2007-09-05 09:02:02 90,112 ----a-w D:\WINDOWS\system32\dk\lam2.exe
+ 2007-09-05 09:02:04 19,968 ----a-w D:\WINDOWS\system32\dk\lam3.exe
+ 2007-09-05 09:02:06 17,408 ----a-w D:\WINDOWS\system32\dk\lam4.exe
+ 2007-09-05 09:02:08 31,744 ----a-w D:\WINDOWS\system32\dk\lam5.exe
+ 2007-11-25 01:16:46 35,542 ----a-w D:\WINDOWS\system32\dk\lmz.exe
+ 2006-03-15 19:51:32 18,432 ----a-w D:\WINDOWS\system32\dk\msn.dll
+ 2003-04-19 09:43:12 86,016 ----a-w D:\WINDOWS\system32\dk\reg.dll
+ 2002-08-27 16:03:14 29,184 ----a-w D:\WINDOWS\system32\dk\systemac.dll
- 2008-03-01 13:06:20 124,928 -c--a-w D:\WINDOWS\system32\dllcache\advpack.dll
+ 2008-04-23 04:16:28 124,928 -c--a-w D:\WINDOWS\system32\dllcache\advpack.dll
- 2004-08-03 22:56:44 561,179 -c--a-w D:\WINDOWS\system32\dllcache\dao360.dll
+ 2008-03-25 04:50:25 554,008 -c--a-w D:\WINDOWS\system32\dllcache\dao360.dll
- 2008-03-01 13:06:21 347,136 -c--a-w D:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2008-04-23 04:16:28 347,136 -c--a-w D:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2008-03-01 13:06:21 214,528 -c--a-w D:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2008-04-23 04:16:28 214,528 -c--a-w D:\WINDOWS\system32\dllcache\dxtrans.dll
- 2008-03-01 13:06:21 133,120 -c--a-w D:\WINDOWS\system32\dllcache\extmgr.dll
+ 2008-04-23 04:16:28 133,120 -c--a-w D:\WINDOWS\system32\dllcache\extmgr.dll
- 2008-03-01 13:06:21 63,488 -c----w D:\WINDOWS\system32\dllcache\icardie.dll
+ 2008-04-23 04:16:28 63,488 -c----w D:\WINDOWS\system32\dllcache\icardie.dll
- 2008-02-29 08:55:23 70,656 -c--a-w D:\WINDOWS\system32\dllcache\ie4uinit.exe
+ 2008-04-22 07:39:58 70,656 -c--a-w D:\WINDOWS\system32\dllcache\ie4uinit.exe
- 2008-03-01 13:06:21 153,088 -c--a-w D:\WINDOWS\system32\dllcache\ieakeng.dll
+ 2008-04-23 04:16:28 153,088 -c--a-w D:\WINDOWS\system32\dllcache\ieakeng.dll
- 2008-03-01 13:06:21 230,400 -c--a-w D:\WINDOWS\system32\dllcache\ieaksie.dll
+ 2008-04-23 04:16:28 230,400 -c--a-w D:\WINDOWS\system32\dllcache\ieaksie.dll
- 2008-02-15 05:44:25 161,792 -c--a-w D:\WINDOWS\system32\dllcache\ieakui.dll
+ 2008-04-20 05:07:51 161,792 -c--a-w D:\WINDOWS\system32\dllcache\ieakui.dll
- 2008-03-01 13:06:22 383,488 -c----w D:\WINDOWS\system32\dllcache\ieapfltr.dll
+ 2008-04-23 04:16:28 383,488 -c----w D:\WINDOWS\system32\dllcache\ieapfltr.dll
- 2008-03-01 13:06:22 384,512 -c--a-w D:\WINDOWS\system32\dllcache\iedkcs32.dll
+ 2008-04-23 04:16:28 384,512 -c--a-w D:\WINDOWS\system32\dllcache\iedkcs32.dll
- 2008-03-01 13:06:24 6,066,176 -c----w D:\WINDOWS\system32\dllcache\ieframe.dll
+ 2008-04-23 04:16:28 6,066,176 -c----w D:\WINDOWS\system32\dllcache\ieframe.dll
- 2008-03-01 13:06:24 44,544 -c--a-w D:\WINDOWS\system32\dllcache\iernonce.dll
+ 2008-04-23 04:16:28 44,544 -c--a-w D:\WINDOWS\system32\dllcache\iernonce.dll
- 2008-03-01 13:06:25 267,776 -c----w D:\WINDOWS\system32\dllcache\iertutil.dll
+ 2008-04-23 04:16:28 267,776 -c----w D:\WINDOWS\system32\dllcache\iertutil.dll
- 2008-02-22 10:00:51 13,824 -c----w D:\WINDOWS\system32\dllcache\ieudinit.exe
+ 2008-04-22 07:39:58 13,824 -c----w D:\WINDOWS\system32\dllcache\ieudinit.exe
- 2008-02-29 08:55:46 625,664 -c--a-w D:\WINDOWS\system32\dllcache\iexplore.exe
+ 2008-04-22 07:40:18 625,664 -c--a-w D:\WINDOWS\system32\dllcache\iexplore.exe
- 2008-03-01 13:06:25 27,648 -c--a-w D:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2008-04-23 04:16:28 27,648 -c--a-w D:\WINDOWS\system32\dllcache\jsproxy.dll
- 2004-08-03 22:56:44 294,400 -c--a-w D:\WINDOWS\system32\dllcache\msctf.dll
+ 2008-02-26 11:59:50 294,912 -c--a-w D:\WINDOWS\system32\dllcache\msctf.dll
- 2004-08-03 22:56:44 512,029 -c--a-w D:\WINDOWS\system32\dllcache\msexch40.dll
+ 2008-03-25 04:50:28 518,944 -c--a-w D:\WINDOWS\system32\dllcache\msexch40.dll
- 2004-08-03 22:56:44 319,517 -c--a-w D:\WINDOWS\system32\dllcache\msexcl40.dll
+ 2008-03-25 04:50:30 326,432 -c--a-w D:\WINDOWS\system32\dllcache\msexcl40.dll
- 2008-03-01 13:06:26 459,264 -c----w D:\WINDOWS\system32\dllcache\msfeeds.dll
+ 2008-04-23 04:16:28 459,264 -c----w D:\WINDOWS\system32\dllcache\msfeeds.dll
- 2008-03-01 13:06:26 52,224 -c----w D:\WINDOWS\system32\dllcache\msfeedsbs.dll
+ 2008-04-23 04:16:28 52,224 -c----w D:\WINDOWS\system32\dllcache\msfeedsbs.dll
- 2008-03-01 16:36:30 3,591,680 -c--a-w D:\WINDOWS\system32\dllcache\mshtml.dll
+ 2008-04-23 20:16:30 3,591,680 -c--a-w D:\WINDOWS\system32\dllcache\mshtml.dll
- 2008-03-01 13:06:28 478,208 -c--a-w D:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2008-04-23 04:16:28 478,208 -c--a-w D:\WINDOWS\system32\dllcache\mshtmled.dll
- 2004-08-03 22:56:44 1,507,356 -c--a-w D:\WINDOWS\system32\dllcache\msjet40.dll
+ 2008-03-25 04:50:34 1,516,568 -c--a-w D:\WINDOWS\system32\dllcache\msjet40.dll
- 2004-07-17 09:34:48 358,976 -c--a-w D:\WINDOWS\system32\dllcache\msjetol1.dll
+ 2008-03-25 04:50:40 355,112 -c--a-w D:\WINDOWS\system32\dllcache\msjetol1.dll
- 2004-08-03 22:56:44 151,583 -c--a-w D:\WINDOWS\system32\dllcache\msjint40.dll
+ 2008-03-27 08:12:54 151,583 -c--a-w D:\WINDOWS\system32\dllcache\msjint40.dll
- 2004-08-03 22:56:44 53,279 -c--a-w D:\WINDOWS\system32\dllcache\msjter40.dll
+ 2008-03-25 04:50:42 60,192 -c--a-w D:\WINDOWS\system32\dllcache\msjter40.dll
- 2004-08-03 22:56:44 241,693 -c--a-w D:\WINDOWS\system32\dllcache\msjtes40.dll
+ 2008-03-25 04:50:42 248,608 -c--a-w D:\WINDOWS\system32\dllcache\msjtes40.dll
- 2004-08-03 22:56:44 213,023 -c--a-w D:\WINDOWS\system32\dllcache\msltus40.dll
+ 2008-03-25 04:50:44 219,936 -c--a-w D:\WINDOWS\system32\dllcache\msltus40.dll
- 2004-08-03 22:56:44 348,189 -c--a-w D:\WINDOWS\system32\dllcache\mspbde40.dll
+ 2008-03-25 04:50:45 355,104 -c--a-w D:\WINDOWS\system32\dllcache\mspbde40.dll
- 2008-03-01 13:06:28 193,024 -c--a-w D:\WINDOWS\system32\dllcache\msrating.dll
+ 2008-04-23 04:16:28 193,024 -c--a-w D:\WINDOWS\system32\dllcache\msrating.dll
- 2004-08-03 22:56:44 421,919 -c--a-w D:\WINDOWS\system32\dllcache\msrd2x40.dll
+ 2008-03-25 04:50:47 432,928 -c--a-w D:\WINDOWS\system32\dllcache\msrd2x40.dll
- 2004-08-03 22:56:44 315,423 -c--a-w D:\WINDOWS\system32\dllcache\msrd3x40.dll
+ 2008-03-25 04:50:49 322,336 -c--a-w D:\WINDOWS\system32\dllcache\msrd3x40.dll
- 2004-08-03 22:56:44 552,989 -c--a-w D:\WINDOWS\system32\dllcache\msrepl40.dll
+ 2008-03-25 04:50:52 559,904 -c--a-w D:\WINDOWS\system32\dllcache\msrepl40.dll
- 2004-08-03 22:56:44 258,077 -c--a-w D:\WINDOWS\system32\dllcache\mstext40.dll
+ 2008-03-25 04:50:55 264,992 -c--a-w D:\WINDOWS\system32\dllcache\mstext40.dll
- 2008-03-01 13:06:29 671,232 -c--a-w D:\WINDOWS\system32\dllcache\mstime.dll
+ 2008-04-23 04:16:28 671,232 -c--a-w D:\WINDOWS\system32\dllcache\mstime.dll
- 2004-08-03 22:56:46 831,519 -c--a-w D:\WINDOWS\system32\dllcache\mswdat10.dll
+ 2008-03-25 04:50:57 838,432 -c--a-w D:\WINDOWS\system32\dllcache\mswdat10.dll
- 2004-08-03 22:56:46 614,429 -c--a-w D:\WINDOWS\system32\dllcache\mswstr10.dll
+ 2008-03-25 04:50:58 621,344 -c--a-w D:\WINDOWS\system32\dllcache\mswstr10.dll
- 2004-08-03 22:56:46 348,189 -c--a-w D:\WINDOWS\system32\dllcache\msxbde40.dll
+ 2008-03-25 04:50:58 355,104 -c--a-w D:\WINDOWS\system32\dllcache\msxbde40.dll
- 2008-03-01 13:06:29 102,912 -c--a-w D:\WINDOWS\system32\dllcache\occache.dll
+ 2008-04-23 04:16:28 102,912 -c--a-w D:\WINDOWS\system32\dllcache\occache.dll
- 2008-03-01 13:06:29 44,544 -c--a-w D:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2008-04-23 04:16:28 44,544 -c--a-w D:\WINDOWS\system32\dllcache\pngfilt.dll
- 2007-10-29 22:43:03 1,287,680 -c--a-w D:\WINDOWS\system32\dllcache\quartz.dll
+ 2008-05-07 05:18:48 1,287,680 -c--a-w D:\WINDOWS\system32\dllcache\quartz.dll
- 2006-07-13 08:48:58 202,240 -c--a-w D:\WINDOWS\system32\dllcache\rmcast.sys
+ 2008-05-08 12:28:49 202,752 -c--a-w D:\WINDOWS\system32\dllcache\rmcast.sys
- 2008-03-01 13:06:29 105,984 -c--a-w D:\WINDOWS\system32\dllcache\url.dll
+ 2008-04-23 04:16:28 105,984 -c--a-w D:\WINDOWS\system32\dllcache\url.dll
- 2008-03-01 13:06:30 1,159,680 -c--a-w D:\WINDOWS\system32\dllcache\urlmon.dll
+ 2008-04-23 04:16:29 1,159,680 -c--a-w D:\WINDOWS\system32\dllcache\urlmon.dll
- 2008-03-01 13:06:30 233,472 -c--a-w D:\WINDOWS\system32\dllcache\webcheck.dll
+ 2008-04-23 04:16:29 233,472 -c--a-w D:\WINDOWS\system32\dllcache\webcheck.dll
- 2008-03-01 13:06:31 826,368 -c--a-w D:\WINDOWS\system32\dllcache\wininet.dll
+ 2008-04-23 04:16:29 826,368 -c--a-w D:\WINDOWS\system32\dllcache\wininet.dll
- 2008-03-01 13:06:21 347,136 ----a-w D:\WINDOWS\system32\dxtmsft.dll
+ 2008-04-23 04:16:28 347,136 ----a-w D:\WINDOWS\system32\dxtmsft.dll
- 2008-03-01 13:06:21 214,528 ----a-w D:\WINDOWS\system32\dxtrans.dll
+ 2008-04-23 04:16:28 214,528 ----a-w D:\WINDOWS\system32\dxtrans.dll
- 2008-03-01 13:06:21 133,120 ----a-w D:\WINDOWS\system32\extmgr.dll
+ 2008-04-23 04:16:28 133,120 ----a-w D:\WINDOWS\system32\extmgr.dll
- 2008-04-13 21:16:03 259,840 ----a-w D:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-06-12 08:10:04 264,616 ----a-w D:\WINDOWS\system32\FNTCACHE.DAT
- 2008-03-01 13:06:21 63,488 ----a-w D:\WINDOWS\system32\icardie.dll
+ 2008-04-23 04:16:28 63,488 ----a-w D:\WINDOWS\system32\icardie.dll
- 2008-02-29 08:55:23 70,656 ----a-w D:\WINDOWS\system32\ie4uinit.exe
+ 2008-04-22 07:39:58 70,656 ----a-w D:\WINDOWS\system32\ie4uinit.exe
- 2008-03-01 13:06:21 153,088 ----a-w D:\WINDOWS\system32\ieakeng.dll
+ 2008-04-23 04:16:28 153,088 ----a-w D:\WINDOWS\system32\ieakeng.dll
- 2008-03-01 13:06:21 230,400 ----a-w D:\WINDOWS\system32\ieaksie.dll
+ 2008-04-23 04:16:28 230,400 ----a-w D:\WINDOWS\system32\ieaksie.dll
- 2008-02-15 05:44:25 161,792 ----a-w D:\WINDOWS\system32\ieakui.dll
+ 2008-04-20 05:07:51 161,792 ----a-w D:\WINDOWS\system32\ieakui.dll
- 2008-03-01 13:06:22 383,488 ----a-w D:\WINDOWS\system32\ieapfltr.dll
+ 2008-04-23 04:16:28 383,488 ----a-w D:\WINDOWS\system32\ieapfltr.dll
- 2008-03-01 13:06:22 384,512 ----a-w D:\WINDOWS\system32\iedkcs32.dll
+ 2008-04-23 04:16:28 384,512 ----a-w D:\WINDOWS\system32\iedkcs32.dll
- 2008-03-01 13:06:24 6,066,176 ----a-w D:\WINDOWS\system32\ieframe.dll
+ 2008-04-23 04:16:28 6,066,176 ----a-w D:\WINDOWS\system32\ieframe.dll
- 2008-03-01 13:06:24 44,544 ----a-w D:\WINDOWS\system32\iernonce.dll
+ 2008-04-23 04:16:28 44,544 ----a-w D:\WINDOWS\system32\iernonce.dll
- 2008-03-01 13:06:25 267,776 ----a-w D:\WINDOWS\system32\iertutil.dll
+ 2008-04-23 04:16:28 267,776 ----a-w D:\WINDOWS\system32\iertutil.dll
- 2008-02-22 10:00:51 13,824 ----a-w D:\WINDOWS\system32\ieudinit.exe
+ 2008-04-22 07:39:58 13,824 ----a-w D:\WINDOWS\system32\ieudinit.exe
- 2008-03-01 13:06:25 27,648 ----a-w D:\WINDOWS\system32\jsproxy.dll
+ 2008-04-23 04:16:28 27,648 ----a-w D:\WINDOWS\system32\jsproxy.dll
- 2004-08-03 22:56:44 294,400 ----a-w D:\WINDOWS\system32\MSCTF.dll
+ 2008-02-26 11:59:50 294,912 ----a-w D:\WINDOWS\system32\msctf.dll
- 2004-08-03 22:56:44 512,029 ----a-w D:\WINDOWS\system32\msexch40.dll
+ 2008-03-25 04:50:28 518,944 ----a-w D:\WINDOWS\system32\msexch40.dll
- 2004-08-03 22:56:44 319,517 ----a-w D:\WINDOWS\system32\msexcl40.dll
+ 2008-03-25 04:50:30 326,432 ----a-w D:\WINDOWS\system32\msexcl40.dll
- 2008-03-01 13:06:26 459,264 ----a-w D:\WINDOWS\system32\msfeeds.dll
+ 2008-04-23 04:16:28 459,264 ----a-w D:\WINDOWS\system32\msfeeds.dll
- 2008-03-01 13:06:26 52,224 ----a-w D:\WINDOWS\system32\msfeedsbs.dll
+ 2008-04-23 04:16:28 52,224 ----a-w D:\WINDOWS\system32\msfeedsbs.dll
- 2008-03-01 16:36:30 3,591,680 ----a-w D:\WINDOWS\system32\mshtml.dll
+ 2008-04-23 20:16:30 3,591,680 ----a-w D:\WINDOWS\system32\mshtml.dll
- 2008-03-01 13:06:28 478,208 ----a-w D:\WINDOWS\system32\mshtmled.dll
+ 2008-04-23 04:16:28 478,208 ----a-w D:\WINDOWS\system32\mshtmled.dll
- 2004-08-03 22:56:44 1,507,356 ----a-w D:\WINDOWS\system32\msjet40.dll
+ 2008-03-25 04:50:34 1,516,568 ----a-w D:\WINDOWS\system32\msjet40.dll
- 2004-07-17 09:34:48 358,976 ----a-w D:\WINDOWS\system32\msjetoledb40.dll
+ 2008-03-25 04:50:40 355,112 ----a-w D:\WINDOWS\system32\msjetoledb40.dll
- 2004-08-03 22:56:44 151,583 ----a-w D:\WINDOWS\system32\msjint40.dll
+ 2008-03-27 08:12:54 151,583 ----a-w D:\WINDOWS\system32\msjint40.dll
- 2004-08-03 22:56:44 53,279 ----a-w D:\WINDOWS\system32\msjter40.dll
+ 2008-03-25 04:50:42 60,192 ----a-w D:\WINDOWS\system32\msjter40.dll
- 2004-08-03 22:56:44 241,693 ----a-w D:\WINDOWS\system32\msjtes40.dll
+ 2008-03-25 04:50:42 248,608 ----a-w D:\WINDOWS\system32\msjtes40.dll
- 2004-08-03 22:56:44 213,023 ----a-w D:\WINDOWS\system32\msltus40.dll
+ 2008-03-25 04:50:44 219,936 ----a-w D:\WINDOWS\system32\msltus40.dll
- 2004-08-03 22:56:44 348,189 ----a-w D:\WINDOWS\system32\mspbde40.dll
+ 2008-03-25 04:50:45 355,104 ----a-w D:\WINDOWS\system32\mspbde40.dll
- 2008-03-01 13:06:28 193,024 ----a-w D:\WINDOWS\system32\msrating.dll
+ 2008-04-23 04:16:28 193,024 ----a-w D:\WINDOWS\system32\msrating.dll
- 2004-08-03 22:56:44 421,919 ----a-w D:\WINDOWS\system32\msrd2x40.dll
+ 2008-03-25 04:50:47 432,928 ----a-w D:\WINDOWS\system32\msrd2x40.dll
- 2004-08-03 22:56:44 315,423 ----a-w D:\WINDOWS\system32\msrd3x40.dll
+ 2008-03-25 04:50:49 322,336 ----a-w D:\WINDOWS\system32\msrd3x40.dll
- 2004-08-03 22:56:44 552,989 ----a-w D:\WINDOWS\system32\msrepl40.dll
+ 2008-03-25 04:50:52 559,904 ----a-w D:\WINDOWS\system32\msrepl40.dll
- 2004-08-03 22:56:44 258,077 ----a-w D:\WINDOWS\system32\mstext40.dll
+ 2008-03-25 04:50:55 264,992 ----a-w D:\WINDOWS\system32\mstext40.dll
- 2008-03-01 13:06:29 671,232 ----a-w D:\WINDOWS\system32\mstime.dll
+ 2008-04-23 04:16:28 671,232 ----a-w D:\WINDOWS\system32\mstime.dll
- 2004-08-03 22:56:46 831,519 ----a-w D:\WINDOWS\system32\mswdat10.dll
+ 2008-03-25 04:50:57 838,432 ----a-w D:\WINDOWS\system32\mswdat10.dll
- 2004-08-03 22:56:46 614,429 ----a-w D:\WINDOWS\system32\mswstr10.dll
+ 2008-03-25 04:50:58 621,344 ----a-w D:\WINDOWS\system32\mswstr10.dll
- 2004-08-03 22:56:46 348,189 ----a-w D:\WINDOWS\system32\msxbde40.dll
+ 2008-03-25 04:50:58 355,104 ----a-w D:\WINDOWS\system32\msxbde40.dll
+ 2008-03-01 17:17:23 176,128 ----a-w D:\WINDOWS\system32\nvudisp.exe
- 2008-03-01 13:06:29 102,912 ----a-w D:\WINDOWS\system32\occache.dll
+ 2008-04-23 04:16:28 102,912 ----a-w D:\WINDOWS\system32\occache.dll
- 2008-03-01 13:06:29 44,544 ----a-w D:\WINDOWS\system32\pngfilt.dll
+ 2008-04-23 04:16:28 44,544 ----a-w D:\WINDOWS\system32\pngfilt.dll
- 2006-12-10 13:10:02 14,640 ------w D:\WINDOWS\system32\spmsg.dll
+ 2007-11-30 11:18:51 17,272 ------w D:\WINDOWS\system32\spmsg.dll
- 2008-03-01 13:06:29 105,984 ----a-w D:\WINDOWS\system32\url.dll
+ 2008-04-23 04:16:28 105,984 ----a-w D:\WINDOWS\system32\url.dll
- 2008-03-01 13:06:30 1,159,680 ----a-w D:\WINDOWS\system32\urlmon.dll
+ 2008-04-23 04:16:29 1,159,680 ----a-w D:\WINDOWS\system32\urlmon.dll
- 2008-03-01 13:06:30 233,472 ----a-w D:\WINDOWS\system32\webcheck.dll
+ 2008-04-23 04:16:29 233,472 ----a-w D:\WINDOWS\system32\webcheck.dll
+ 2005-09-22 21:49:12 95,744 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll
+ 2006-12-01 20:56:00 96,256 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
+ 2006-12-01 20:54:32 479,232 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
+ 2006-12-01 20:54:34 548,864 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
+ 2006-12-01 20:54:32 626,688 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
+ 2005-09-22 23:16:02 1,093,632 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfc80.dll
+ 2005-09-22 23:16:06 1,079,808 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfc80u.dll
+ 2005-09-22 23:16:08 69,632 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfcm80.dll
+ 2005-09-22 23:16:10 57,344 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfcm80u.dll
+ 2006-12-01 22:25:52 1,101,824 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
+ 2006-12-01 22:25:56 1,093,120 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
+ 2006-12-01 22:25:58 69,632 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
+ 2006-12-01 22:26:00 57,856 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
+ 2006-12-01 22:08:00 40,960 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
+ 2006-12-01 22:08:00 45,056 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
+ 2006-12-01 22:08:00 65,536 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
+ 2006-12-01 22:08:00 57,344 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
+ 2006-12-01 22:08:00 61,440 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
+ 2006-12-01 22:08:00 61,440 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
+ 2006-12-01 22:08:00 61,440 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
+ 2006-12-01 22:08:00 49,152 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
+ 2006-12-01 22:08:00 49,152 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
+ 2006-12-01 22:46:44 65,536 ----a-w D:\WINDOWS\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="D:\Program Files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 12:54 5674352]
"swg"="D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-23 21:38 68856]
"ares"="D:\Program Files\Ares\Ares.exe" [2007-07-16 23:54 961536]
"ctfmon.exe"="D:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56 15360]
"EA Core"="D:\Program Files\Electronic Arts\EA Downloader\Core.exe" [2006-08-16 12:33 1826816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="D:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
"DAEMON Tools-1033"="D:\Program Files\D-Tools\daemon.exe" [2004-08-22 17:05 81920]
"TkBellExe"="D:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-02-23 19:18 185896]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="D:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:56 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=D:\PROGRA~1\KASPER~1\KASPER~2.0\adialhk.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
--a------ 2001-07-09 10:50 155648 D:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]


[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"D:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"=
"D:\\Program Files\\Ares\\Ares.exe"=
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"D:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"D:\\Program Files\\MSN Messenger\\livecall.exe"=
"D:\\WINDOWS\\system32\\lxkchkv.exe"=
"D:\\WINDOWS\\system32\\dk\\calling.com"=
"C:\\SPSS\\spss.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"17380:TCP"= 17380:TCP:NortonAV
"13806:TCP"= 13806:TCP:NortonAV
"15789:TCP"= 15789:TCP:NortonAV

R2 acedrv10;acedrv10;D:\WINDOWS\system32\drivers\acedrv10.sys [2007-07-24 09:45]
R2 acehlp10;acehlp10;D:\WINDOWS\system32\drivers\acehlp10.sys [2007-07-11 10:20]
R2 PowerManager;Power Manager;D:\WINDOWS\svchost.exe []
R3 klim5;Kaspersky Anti-Virus NDIS Filter;D:\WINDOWS\system32\DRIVERS\klim5.sys [2007-04-04 14:58]
R3 USB_RNDIS_51;Broadcom USB Remote NDIS Device Driver;D:\WINDOWS\system32\DRIVERS\usb8023.sys [2004-08-03 23:04]
S3 usnjsvc;Usluga Messenger Sharing Folders USN Journal Reader;"D:\Program Files\MSN Messenger\usnsvc.exe" [2007-01-19 13:54]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0693c984-53cc-11dc-97c0-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0c66ad34-5006-11dc-9bda-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1b0244f4-55f5-11dc-bcb3-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2a94f570-7038-11dc-ac81-971d5fe1e1d2}]
\Shell\AutoOpen\command - J:\.\MSOCache\90000804-6000-11D3-8CFE-0150048383C9\KB915865.exe
\Shell\AutoRun\command - D:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL .\MSOCache\90000804-6000-11D3-8CFE-0150048383C9\KB915865.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3aa86754-5574-11dc-b7bc-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{693805c0-65fd-11dc-8ec8-a8783cb692d6}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b9b802e4-6c38-11dc-8921-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b9b802e5-6c38-11dc-8921-806d6172696f}]
\Shell\AutoRun\command - H:\RunGame.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ddb9ccf0-4f1f-11dc-a32d-c62ea26f04d2}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e72a6ba4-5394-11dc-9fce-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ed8d4574-5175-11dc-a4e0-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ee1772d0-813a-11dc-ac9b-cb6bcd068dd0}]
\Shell\AutoOpen\command - J:\.\MSOCache\90000804-6000-11D3-8CFE-0150048383C9\KB915865.exe
\Shell\AutoRun\command - D:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL .\MSOCache\90000804-6000-11D3-8CFE-0150048383C9\KB915865.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fe2abfc4-56b2-11dc-b76a-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

*Newly Created Service* - POWERMANAGER

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{72637363-7069-7374-652E-336D65747300}]
D:\WINDOWS\system32\cscripts.exe
.
Contents of the 'Scheduled Tasks' folder
"2008-06-28 11:59:13 D:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job"
- D:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
"2008-06-27 16:00:00 D:\WINDOWS\Tasks\Norton Security Scan.job"
- D:\Program Files\Norton Security Scan\Nss.exe
"2008-06-28 12:22:53 D:\WINDOWS\Tasks\XoftSpySE 2.job"
- D:\Program Files\XoftSpySE\XoftSpy.exe
"2008-06-28 01:04:14 D:\WINDOWS\Tasks\XoftSpySE.job"
- D:\Program Files\XoftSpySE\XoftSpy.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, gmer.net
Rootkit scan 2008-06-28 14:24:29
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
D:\WINDOWS\system32\WgaTray.exe
D:\WINDOWS\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2008-06-28 14:29:36 - machine was rebooted [xx]
ComboFix-quarantined-files.txt 2008-06-28 12:29:19
ComboFix2.txt 2008-04-13 21:38:35
ComboFix3.txt 2008-04-12 12:52:38
ComboFix4.txt 2008-03-16 12:11:16
ComboFix5.txt 2008-03-15 19:38:59

Pre-Run: 612,585,472 bytes free
Post-Run: 703,475,712 bytes free

657 --- E O F --- 2008-06-28 01:22:11

offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Spakuj u zip/rar sledeći file: D:\Documents and Settings\xx\ddram.exe

i uploaduj ga preko ove forme: http://www.mycity.rs/ambulanta-upload.php


-------------------------------------------------------------------------------------



Otvoriti Notepad i iskopirati sledeci tekst:

File::
D:\WINDOWS\system32\lxkchkv.exe
D:\WINDOWS\system32\cscripts.exe

Folder::
D:\WINDOWS\system32\dk

Driver::
PowerManager

Registry::
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"D:\\WINDOWS\\system32\\lxkchkv.exe"=-
"D:\\WINDOWS\\system32\\dk\\calling.com"=-
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"17380:TCP"=-
"13806:TCP"=-
"15789:TCP"=-
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2a94f570-7038-11dc-ac81-971d5fe1e1d2}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ee1772d0-813a-11dc-ac9b-cb6bcd068dd0}]
[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{72637363-7069-7374-652E-336D65747300}]




Snimiti na Desktop fajl iz Notepada kao "CFScript"




Prevuci snimljeni skript/tekst na ComboFix ikonicu kao na slici.
Postaviti u sledecoj poruci log koji bude bio napravljen na kraju ciscenja/skeniranja.

offline
  • Pridružio: 28 Jun 2008
  • Poruke: 61

Uploadirao sam file

Dopuna: 28 Jun 2008 15:42

ComboFix 08-06-20.4 - xx 2008-06-28 15:23:45.12 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1033.18.268 [GMT 2:00]
Running from: D:\Documents and Settings\xx\Desktop\ATF CLEANER\ComboFix.exe
Command switches used :: D:\Documents and Settings\xx\Desktop\CFScript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::
D:\WINDOWS\system32\cscripts.exe
D:\WINDOWS\system32\lxkchkv.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

D:\WINDOWS\svchost.exe
D:\WINDOWS\system32\cscripts.exe
D:\WINDOWS\system32\dk
D:\WINDOWS\system32\dk\137.reg
D:\WINDOWS\system32\dk\14101435.INS
D:\WINDOWS\system32\dk\16122731.INS
D:\WINDOWS\system32\dk\16263294.INS
D:\WINDOWS\system32\dk\17431570.INS
D:\WINDOWS\system32\dk\19771436.INS
D:\WINDOWS\system32\dk\26811774.INS
D:\WINDOWS\system32\dk\27296716.INS
D:\WINDOWS\system32\dk\28008771.INS
D:\WINDOWS\system32\dk\28511559.INS
D:\WINDOWS\system32\dk\286.reg
D:\WINDOWS\system32\dk\293.reg
D:\WINDOWS\system32\dk\34128188.INS
D:\WINDOWS\system32\dk\37224256.INS
D:\WINDOWS\system32\dk\46602466.INS
D:\WINDOWS\system32\dk\48171491.INS
D:\WINDOWS\system32\dk\49258879.INS
D:\WINDOWS\system32\dk\49528816.INS
D:\WINDOWS\system32\dk\5008216.INS
D:\WINDOWS\system32\dk\50995733.INS
D:\WINDOWS\system32\dk\592996.INS
D:\WINDOWS\system32\dk\593.reg
D:\WINDOWS\system32\dk\5972932.INS
D:\WINDOWS\system32\dk\608.reg
D:\WINDOWS\system32\dk\60977396.INS
D:\WINDOWS\system32\dk\67612956.INS
D:\WINDOWS\system32\dk\68105928.INS
D:\WINDOWS\system32\dk\68932878.INS
D:\WINDOWS\system32\dk\7058408.INS
D:\WINDOWS\system32\dk\71793066.INS
D:\WINDOWS\system32\dk\7464803.INS
D:\WINDOWS\system32\dk\77047081.INS
D:\WINDOWS\system32\dk\77279764.INS
D:\WINDOWS\system32\dk\77446506.INS
D:\WINDOWS\system32\dk\77463279.INS
D:\WINDOWS\system32\dk\80583816.INS
D:\WINDOWS\system32\dk\8204747.INS
D:\WINDOWS\system32\dk\82562790.INS
D:\WINDOWS\system32\dk\8272202.INS
D:\WINDOWS\system32\dk\87432872.INS
D:\WINDOWS\system32\dk\91357841.INS
D:\WINDOWS\system32\dk\91723679.INS
D:\WINDOWS\system32\dk\9366289.INS
D:\WINDOWS\system32\dk\99832437.INS
D:\WINDOWS\system32\dk\aliases.ini
D:\WINDOWS\system32\dk\calling.com
D:\WINDOWS\system32\dk\d.dll
D:\WINDOWS\system32\dk\dbqp.fon
D:\WINDOWS\system32\dk\dcw.x
D:\WINDOWS\system32\dk\lam1.exe
D:\WINDOWS\system32\dk\lam2.exe
D:\WINDOWS\system32\dk\lam3.exe
D:\WINDOWS\system32\dk\lam4.exe
D:\WINDOWS\system32\dk\lam5.exe
D:\WINDOWS\system32\dk\law.x
D:\WINDOWS\system32\dk\lmz.exe
D:\WINDOWS\system32\dk\lmz1.bmp
D:\WINDOWS\system32\dk\lmz2.bmp
D:\WINDOWS\system32\dk\lmz3.bmp
D:\WINDOWS\system32\dk\mirc.ini
D:\WINDOWS\system32\dk\msn.dll
D:\WINDOWS\system32\dk\poiyu
D:\WINDOWS\system32\dk\qaz
D:\WINDOWS\system32\dk\Refix.ocx
D:\WINDOWS\system32\dk\reg.dll
D:\WINDOWS\system32\dk\systemac.dll
D:\WINDOWS\system32\dk\winreg.oce
D:\WINDOWS\system32\dk\wsx
D:\WINDOWS\system32\lxkchkv.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_POWERMANAGER
-------\Service_PowerManager


((((((((((((((((((((((((( Files Created from 2008-05-28 to 2008-06-28 )))))))))))))))))))))))))))))))
.

2008-06-28 15:16 . 2008-06-28 15:16 1,145,141 --a------ D:\Documents and Settings\xx\ddram.zip
2008-06-27 19:34 . 2008-06-27 19:34 <DIR> d-------- D:\Program Files\Electronic Arts
2008-06-19 18:09 . 2008-06-19 18:09 268 --ah----- D:\sqmdata01.sqm
2008-06-19 18:09 . 2008-06-19 18:09 244 --ah----- D:\sqmnoopt01.sqm
2008-06-18 23:02 . 2008-06-18 23:02 268 --ah----- D:\sqmdata00.sqm
2008-06-18 23:02 . 2008-06-18 23:02 244 --ah----- D:\sqmnoopt00.sqm
2008-06-17 22:42 . 2008-06-17 22:42 <DIR> d-------- D:\Program Files\InstallShield Installation Information
2008-06-11 17:02 . 2008-06-11 17:02 <DIR> d-------- D:\Program Files\Fifa Master
2008-06-11 16:29 . 2008-06-11 16:29 <DIR> dr-h----- D:\Documents and Settings\xx\Application Data\SecuROM
2008-06-11 15:03 . 2008-06-13 15:10 272,128 --------- D:\WINDOWS\system32\drivers\bthport.sys
2008-06-11 15:03 . 2008-06-13 15:10 272,128 -----c--- D:\WINDOWS\system32\dllcache\bthport.sys
2008-06-10 01:11 . 2008-06-10 01:11 <DIR> d-------- D:\Program Files\Davilex
2008-06-09 13:44 . 2008-06-09 13:44 <DIR> d-------- D:\Documents and Settings\xx\.spss
2008-06-09 13:35 . 2008-06-09 13:35 <DIR> d-------- D:\Documents and Settings\All Users\Application Data\SafeNet Sentinel
2008-06-09 13:31 . 2008-06-09 13:31 <DIR> d-------- D:\Program Files\Common Files\SPSS
2008-06-09 13:31 . 2008-06-09 13:31 <DIR> d-------- D:\Documents and Settings\All Users\Application Data\SPSS
2008-06-09 13:30 . 2008-06-09 13:30 1,025 --a------ D:\WINDOWS\system32\sysprs7.tgz
2008-06-09 13:30 . 2008-06-09 13:30 1,025 --a------ D:\WINDOWS\system32\sysprs7.dll
2008-06-09 13:30 . 2008-06-09 13:30 16 ---h----- D:\WINDOWS\system32\servdat.slm
2008-06-07 11:49 . 2008-06-07 11:49 <DIR> d--hs---- D:\WINDOWS\ftpcache
2008-05-31 15:27 . 2008-06-03 17:31 <DIR> d-a------ D:\Documents and Settings\All Users\Application Data\TEMP
2008-05-31 15:26 . 2008-06-17 15:35 <DIR> d-------- D:\Program Files\Neuro-Programmer 2

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-28 13:33 23,937,568 --sha-w D:\WINDOWS\system32\drivers\fidbox.dat
2008-06-28 13:32 1,658,400 --sha-w D:\WINDOWS\system32\drivers\fidbox2.dat
2008-06-28 13:29 323,684 --sha-w D:\WINDOWS\system32\drivers\fidbox.idx
2008-06-28 13:29 158,564 --sha-w D:\WINDOWS\system32\drivers\fidbox2.idx
2008-06-28 07:34 4,192 ----a-w D:\WINDOWS\system32\ealregsnapshot1.reg
2008-06-28 07:31 --------- d-----w D:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-06-24 17:07 --------- d-----w D:\Documents and Settings\xx\Application Data\temp
2008-06-17 14:17 --------- d-----w D:\Program Files\Winamp
2008-06-17 14:12 223,128 ----a-w D:\WINDOWS\system32\drivers\vaxscsi.sys
2008-06-17 13:37 --------- d-----w D:\Program Files\LHM2006
2008-06-17 13:36 --------- d-----w D:\Program Files\XoftSpySE
2008-06-17 13:35 --------- d-----w D:\Program Files\Windows Live Toolbar
2008-06-17 13:35 --------- d-----w D:\Program Files\bfgclient
2008-05-30 13:58 --------- d-----w D:\Program Files\Common Files\Adobe
2008-05-11 15:14 1,292,470 ----a-w D:\Documents and Settings\xx\ddram.exe
2008-05-08 12:28 202,752 ----a-w D:\WINDOWS\system32\drivers\rmcast.sys
2008-05-07 05:18 1,287,680 ----a-w D:\WINDOWS\system32\quartz.dll
2008-04-23 04:16 826,368 ----a-w D:\WINDOWS\system32\wininet.dll
2008-04-12 09:44 286,720 ------w D:\WINDOWS\Setup1.exe
2007-11-03 14:45 13 ----a-w D:\Documents and Settings\xx\Verinfo.dat
2007-11-03 14:44 1,024 ----a-w D:\Documents and Settings\xx\Config.dat
.

------- Sigcheck -------

2004-08-04 00:56 14336 8f078ae4ed187aaabc0a305146de6716 D:\WINDOWS\system32\svchost.exe
2004-08-04 00:56 14336 8f078ae4ed187aaabc0a305146de6716 D:\WINDOWS\system32\dllcache\svchost.exe

2007-03-08 17:36 577536 b409909f6e2e8a7067076ed748abf1e7 D:\WINDOWS\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\sp2gdr\user32.dll
2007-03-08 17:48 578048 7aa4f6c00405dfc4b70ed4214e7d687b D:\WINDOWS\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\sp2qfe\user32.dll
2005-03-02 20:09 577024 de2db164bbb35db061af0997e4499054 D:\WINDOWS\system32\user32.dll
2005-03-02 20:09 577024 de2db164bbb35db061af0997e4499054 D:\WINDOWS\system32\dllcache\user32.dll

2004-08-04 00:56 82944 2ed0b7f12a60f90092081c50fa0ec2b2 D:\WINDOWS\system32\ws2_32.dll
2004-08-04 00:56 82944 2ed0b7f12a60f90092081c50fa0ec2b2 D:\WINDOWS\system32\dllcache\ws2_32.dll

2007-10-30 19:20 360064 90caff4b094573449a0872a0f919b178 D:\WINDOWS\system32\dllcache\tcpip.sys
2007-10-30 19:20 360064 90caff4b094573449a0872a0f919b178 D:\WINDOWS\system32\drivers\tcpip.sys

2004-08-04 00:56 502272 01c3346c241652f43aed8e2149881bfe D:\WINDOWS\system32\winlogon.exe
2004-08-04 00:56 502272 01c3346c241652f43aed8e2149881bfe D:\WINDOWS\system32\dllcache\winlogon.exe

2004-08-03 23:14 182912 558635d3af1c7546d26067d5d9b6959e D:\WINDOWS\system32\dllcache\ndis.sys
2004-08-03 23:14 182912 558635d3af1c7546d26067d5d9b6959e D:\WINDOWS\system32\drivers\ndis.sys

2004-08-03 23:00 29056 4448006b6bc60e6c027932cfc38d6855 D:\WINDOWS\system32\dllcache\ip6fw.sys
2004-08-03 23:00 29056 4448006b6bc60e6c027932cfc38d6855 D:\WINDOWS\system32\drivers\ip6fw.sys

2005-03-02 02:34 2056832 81013f36b21c7f72cf784cc6731e0002 D:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe
2007-02-28 10:38 2057600 515d30e2c90a3665a2739309334c9283 D:\WINDOWS\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2gdr\ntkrnlpa.exe
2007-02-28 11:15 2059392 4d3dbdccbf97f5ba1e74f322b155c3ba D:\WINDOWS\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2qfe\ntkrnlpa.exe
2005-03-02 02:34 2056832 81013f36b21c7f72cf784cc6731e0002 D:\WINDOWS\system32\ntkrnlpa.exe

2005-03-02 02:59 2179328 4d4cf2c14550a4b7718e94a6e581856e D:\WINDOWS\Driver Cache\i386\ntoskrnl.exe
2007-02-28 11:10 2180352 582a8dbaa58c3b1f176eb2817daee77c D:\WINDOWS\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2gdr\ntoskrnl.exe
2007-02-28 11:55 2182144 5a5c8db4aa962c714c8371fbdf189fc9 D:\WINDOWS\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2qfe\ntoskrnl.exe
2005-03-02 02:59 2179328 4d4cf2c14550a4b7718e94a6e581856e D:\WINDOWS\system32\ntoskrnl.exe

2004-08-04 00:56 1032192 a0732187050030ae399b241436565e64 D:\WINDOWS\explorer.exe
2008-03-01 19:10 1033216 97bd6515465659ff8f3b7be375b2ea87 D:\WINDOWS\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\sp2gdr\explorer.exe
2008-03-01 21:00 1033216 7712df0cdde3a5ac89843e61cd5b3658 D:\WINDOWS\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\sp2qfe\explorer.exe
2004-08-04 00:56 1032192 a0732187050030ae399b241436565e64 D:\WINDOWS\system32\dllcache\explorer.exe

2004-08-04 00:56 108032 c6ce6eec82f187615d1002bb3bb50ed4 D:\WINDOWS\system32\services.exe
2004-08-04 00:56 108032 c6ce6eec82f187615d1002bb3bb50ed4 D:\WINDOWS\system32\dllcache\services.exe

2004-08-04 00:56 13312 84885f9b82f4d55c6146ebf6065d75d2 D:\WINDOWS\system32\lsass.exe
2004-08-04 00:56 13312 84885f9b82f4d55c6146ebf6065d75d2 D:\WINDOWS\system32\dllcache\lsass.exe

2004-08-04 00:56 15360 24232996a38c0b0cf151c2140ae29fc8 D:\WINDOWS\system32\ctfmon.exe
2004-08-04 00:56 15360 24232996a38c0b0cf151c2140ae29fc8 D:\WINDOWS\system32\dllcache\ctfmon.exe
.
((((((((((((((((((((((((((((( snapshot_2008-06-28_14.28.30.85 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-06-28 12:22:17 2,048 --s-a-w D:\WINDOWS\bootstat.dat
+ 2008-06-28 13:30:02 2,048 --s-a-w D:\WINDOWS\bootstat.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="D:\Program Files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 12:54 5674352]
"swg"="D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-23 21:38 68856]
"ares"="D:\Program Files\Ares\Ares.exe" [2007-07-16 23:54 961536]
"ctfmon.exe"="D:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56 15360]
"EA Core"="D:\Program Files\Electronic Arts\EA Downloader\Core.exe" [2006-08-16 12:33 1862144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="D:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
"DAEMON Tools-1033"="D:\Program Files\D-Tools\daemon.exe" [2004-08-22 17:05 81920]
"TkBellExe"="D:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-02-23 19:18 185896]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="D:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:56 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=D:\PROGRA~1\KASPER~1\KASPER~2.0\adialhk.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
--a------ 2001-07-09 10:50 155648 D:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]


[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"D:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"=
"D:\\Program Files\\Ares\\Ares.exe"=
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"D:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"D:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\SPSS\\spss.exe"=

R2 acedrv10;acedrv10;D:\WINDOWS\system32\drivers\acedrv10.sys [2007-07-24 09:45]
R2 acehlp10;acehlp10;D:\WINDOWS\system32\drivers\acehlp10.sys [2007-07-11 10:20]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;D:\WINDOWS\system32\DRIVERS\klim5.sys [2007-04-04 14:58]
R3 USB_RNDIS_51;Broadcom USB Remote NDIS Device Driver;D:\WINDOWS\system32\DRIVERS\usb8023.sys [2004-08-03 23:04]
S3 usnjsvc;Usluga Messenger Sharing Folders USN Journal Reader;"D:\Program Files\MSN Messenger\usnsvc.exe" [2007-01-19 13:54]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0693c984-53cc-11dc-97c0-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0c66ad34-5006-11dc-9bda-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1b0244f4-55f5-11dc-bcb3-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3aa86754-5574-11dc-b7bc-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{693805c0-65fd-11dc-8ec8-a8783cb692d6}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b9b802e4-6c38-11dc-8921-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b9b802e5-6c38-11dc-8921-806d6172696f}]
\Shell\AutoRun\command - H:\RunGame.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ddb9ccf0-4f1f-11dc-a32d-c62ea26f04d2}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e72a6ba4-5394-11dc-9fce-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ed8d4574-5175-11dc-a4e0-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fe2abfc4-56b2-11dc-b76a-806d6172696f}]
\Shell\AutoRun\command - G:\autorun.exe

.
Contents of the 'Scheduled Tasks' folder
"2008-06-28 12:59:08 D:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job"
- D:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
"2008-06-27 16:00:00 D:\WINDOWS\Tasks\Norton Security Scan.job"
- D:\Program Files\Norton Security Scan\Nss.exe
"2008-06-28 13:30:55 D:\WINDOWS\Tasks\XoftSpySE 2.job"
- D:\Program Files\XoftSpySE\XoftSpy.exe
"2008-06-28 01:04:14 D:\WINDOWS\Tasks\XoftSpySE.job"
- D:\Program Files\XoftSpySE\XoftSpy.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, gmer.net
Rootkit scan 2008-06-28 15:32:14
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
D:\WINDOWS\system32\wscntfy.exe
D:\WINDOWS\system32\WgaTray.exe
D:\WINDOWS\system32\imapi.exe
.
**************************************************************************
.
Completion time: 2008-06-28 15:37:30 - machine was rebooted
ComboFix-quarantined-files.txt 2008-06-28 13:37:12
ComboFix2.txt 2008-06-28 12:29:40
ComboFix3.txt 2008-04-13 21:38:35
ComboFix4.txt 2008-04-12 12:52:38
ComboFix5.txt 2008-03-16 12:11:16

Pre-Run: 678,809,600 bytes free
Post-Run: 660,119,552 bytes free

279 --- E O F --- 2008-06-28 01:22:11

offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Obriši: D:\Documents and Settings\xx\ddram.exe


Pošto postoje naznake da na kompjuteru imaš i virus (file infektor), želim da odradimo i skeniranje jednim AV cleaner-om.



Preuzmi Norman Malware Cleaner na Desktop.

Uraditi sledeće:
Restartovati kompjuter u Safe Mode (uputstvo)
Dvoklikom pokrenuti Norman_Malware_Cleaner.exe
Kliknuti Accept da bi prešli na sledeći ekran
Pokrenuti skeniranje klikom na Start Scan i sačekati da se završi
Ukoliko se pojavi upit o restartovanju kompjutera:

Kliknuti Yes
Nakon restarta, skeniranje/čišćenje će biti nastavljeno

Kada proces bude završen, zatvoriti program klikom na Quit

Uz iduću poruku priložiti logfile NFix_datum_vreme.log koji će se nalaziti na Desktop-u.

offline
  • Pridružio: 28 Jun 2008
  • Poruke: 61

Evo skenirao sam i evo rezultata:

Norman Malware Cleaner
Copyright © 1990 - 2008, Norman ASA. Built 2008/06/16 19:12:25

Norman Scanner Engine Version: 5.92.08
Nvcbin.def Version: 5.92.00, Date: 2008/06/16 19:12:25, Variants: 1752355

Running pre-scan cleanup routine:
Operating System: Microsoft Windows XP Professional 5.1.2600(Safe mode) Service Pack 2
Logged on user: XX-8DBBF7C4EC9E\xx

Set registry value: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLS = "D:\PROGRA~1\KASPER~1\KASPER~2.0\adialhk.dll" -> ""
Removed registry value: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System -> DisableRegistryTools = 0x00000000

Scan started: 28/06/2008 16:19:10


Scanning running processes and process memory...

Number of processes/threads found: 570
Number of processes/threads scanned: 567
Number of processes/threads not scanned: 3
Number of infected processes/threads terminated: 0
Total scanning time: 50s


Scanning file system...

Scanning: C:\*.*

C:\Rock Tour.exe (Infected with W32/Hidrag.A)
Deleted file

C:\scrt.exe (Infected with W32/Agent.FQGA)
Deleted file

C:\Downloads\Simtel\lhm2006setup.exe (Infected with W32/Hidrag.A)
Deleted file

C:\Fifa Manager 2006\eauninstall.exe (Infected with W32/Hidrag.A)
Deleted file

C:\Fifa Manager 2006\Manager07.exe (Infected with W32/Hidrag.A)
Removed link file: D:\Documents and Settings\All Users\Desktop\FIFA Manager 07.lnk
Deleted file

C:\Fifa Manager 2006\Support\ead-installer.exe (Infected with W32/Hidrag.A)
Deleted file

C:\Fifa Manager 2006\Support\EasyInfo.exe (Infected with W32/Hidrag.A)
Deleted file

C:\Fifa Manager 2006\Support\EReg.exe (Infected with W32/Hidrag.A)
Deleted file

C:\Fifa Manager 2006\Support\FIFA Manager 07_code.exe (Infected with W32/Hidrag.A)
Deleted file

C:\found.000\dir0000.chk\Marko\Winamp 5.112\Winamp[1].Pro.v5.112.WinALL.Keymaker.Only-CORE.ZIP/Winamp.Pro.v5.112.WinALL.Keymaker.Only-CORE/keygen.exe (Infected with W32/Agent.ANOG)
Deleted file

C:\found.000\dir0000.chk\Marko\WinZip 10.0\WinZip.Pro.v10.0.6667.KeyGen.Only-TMG.rar/CMT (Error whilst scanning file: I/O Error)

C:\found.000\dir0000.chk\Multimedia\fo-ACDSee60_sd\keygen.exe (Infected with Suspicious_F.gen)
Deleted file

C:\Moje pjesme\Domoljubne\avg antivirus (zabranjeno)(1).exe (Infected with Suspicious_F.gen)
Deleted file

C:\MSOCache\All Users\9000041a-6000-11D3-8CFE-0150048383C9\FILES\PFILES\COMMON\MSSHARED\DW\DW20.EXE (Infected with W32/Hidrag.A)
Deleted file

C:\NVIDIA\Win2KXP\78.01\nvudisp.exe (Infected with W32/Hidrag.A)
Deleted file

C:\NVIDIA\Win2KXP\78.01\setup.exe (Infected with W32/Hidrag.A)
Deleted file

C:\Program Files\Real\RealPlayer\realplay.exe (Infected with W32/Hidrag.A)
Removed registry value: HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List -> C:\Program Files\Real\RealPlayer\realplay.exe = "C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
Failed to remove registry key (0x00000005): HKCR\Applications\ -> realplay.exe
Removed link file: D:\Documents and Settings\All Users\Desktop\RealPlayer.lnk
Deleted file

C:\Program Files\Real\RealPlayer\RecordingManager.exe (Infected with W32/Hidrag.A)
Deleted file

C:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise.exe (Infected with W32/AutoRun.CGJ)
Deleted file

C:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe (Infected with W32/Agent.FQGA)
Deleted file

C:\SPSS\AUNINST.EXE (Infected with W32/Hidrag.A)
Deleted file

C:\SPSS\law.exe (Infected with W32/Hidrag.A)
Deleted file

C:\SPSS\lsinitstub.exe (Infected with W32/Hidrag.A)
Deleted file

C:\SPSS\SPSS16.0.1EvalVersion_a.exe (Infected with W32/Hidrag.A)
Deleted file

C:\SPSS\JRE\bin\javaws.exe (Infected with W32/Hidrag.A)
Deleted file

C:\SPSS\JRE\bin\jucheck.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP324\A0076216.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076339.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076340.exe (Infected with W32/Agent.FQGA)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076341.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076342.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076344.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076345.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076346.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076347.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076348.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076349.exe (Infected with Suspicious_F.gen)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076350.exe (Infected with Suspicious_F.gen)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076351.EXE (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076352.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076353.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076355.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076356.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076357.exe (Infected with W32/AutoRun.CGJ)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076358.exe (Infected with W32/Agent.FQGA)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076359.EXE (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076360.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076361.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076362.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076363.exe (Infected with W32/Hidrag.A)
Deleted file

C:\System Volume Information\_RESTO~2\RP325\A0076364.exe (Infected with W32/Hidrag.A)
Deleted file

Scanning: D:\*.*

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\1CLICK DVD Copy 5.2.2.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Adobe CS3 Keygen Package Serial.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Adobe Photoshop CS2 Police Tested.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Advanced Spyware Remover Professional.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Alien Shooter Vengeance 2007.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Alive 3GP Video Converter v1.8.0.2.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Alive DVD Ripper v2.2.3.6.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Bad Boys 2 Pcgame.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Bloody Roar 4 PAL DVD.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Blumentals Screensaver Factory Enterprise v4.5.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\ConvertXtoDVD v2.2.1.253.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\CopyToDVD v4.0.4.60.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Crush Usa Eng PSP.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Cute girl gets fucked by a older man.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Dangerous Waters Exclusive Mission.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Dave Mirra Freestyle Bmx.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Diner Dash 3.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\DOOM 3 Full 3 CD Bonus.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Dragon Naturally Speaking Preffered v9.51.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\DreamLight Photo Editor v1.77.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Driver76.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Dungeon Siege 2 Reloaded MaxGrab Working 4CD vers.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Dungeon Siege.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Elvandia Story NTSC-J.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Enemy Territory QUAKE Wars Beta LEAK.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Error Expert 1.2.9.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Error Killer 2.6.2 Full.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Fifa 2007 5 links only.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\FIM Speedway Grand Prix 2.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Football Manager 2007 Graphics Mega Pack.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Fruity Loops 7.0 Udate Plugins.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Geist PAL.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Geometry Wars for XP.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Grand Theft Auto III.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Grim Fandango.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\GTA Vice City.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\GTA Tokyo Xtreme Racer Drift PL.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\GTA Vice City Deluxe.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Half Life 2 Episode One.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\HDD Life Pro v3.0.138.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Hooligans Storm Over Europe.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Hot girl gets fucked by another woman.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Hoyle Card Games 2007.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Jamiroquai The Return of the Space C.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Jefferson Airplane Long John Silver.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\JetAudio v7.0.0.3001 Plus Vx.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Johnny Cash Greatest Hits.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Jon Bon Jovi Young Guns II Blaze Of.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Kevin Burke Up Close.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Kick Shot Pool.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\King Crimson Heavy ConstruKction.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Led Zeppelin Box Set Vol.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Lemonade Tycoon 2 New York Edition.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\LimeWire Pro 4.13.2.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Lionel Richie Can't Slow Down.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Liquidator.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Live for Speed S2 0.5U Alpha.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Lucio Dalla Storie di casa mia.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Mature wife rubs her pussy.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Metal Gear Solid 3Subsistence PAL ENG 3 DVDs.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Metal Slug Anthology NTSC.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Microsoft Money 2007.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Microsoft Windows Vista Ultimate X86 iSO.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Microsoft Windows XP SP2 Genuine.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\MooMa MP3 Ringtone Maker v1.20.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\MotoRacer 3 Gold Edition.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\MP3 Remix For Winamp 3.102 Final.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\My first homemade fuck video.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\NOD32 2.70.39 w Patch.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\NVidia DVD Player 2.55.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Oasis Familiar To Millions.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Open Video Capture 1.24.477.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\OrgScheduler LAN ver.5.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Overlord 2007.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Passware Kit Enterprise v8.0.2596.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\PC Error Eliminator 3.0.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\PhotoDex ProShow Gold 3.0.1935.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Pirates of the Caribbean At Worlds End Pc Rip.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Pirates of the Carribean At Worlds End.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Powerzip 7.06 Full.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Prince of Persia Sands of Time.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\RAW DANGER DVD NTSC ENG.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Resident Evil 4.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\RollerCoaster Tycoon 3 Multilanguage ISO.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Rome Total War.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Roxio Copy And Convert 3.4.0.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\RS Premium Accounts.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Serif PagePlus X2 v12.0 ISO.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\She is filmed by a hidden cam.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Shrek The Third Pcgame.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Sleepwalker.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Smoking Guns Shooting Gallery.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Sony Sound Forge v9.0 Full.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\SpongeBob SquarePants Obstacle Odyssea 2 Time Trouble v.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Spyware Killer v2.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Star Wars Republic Commando.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Sygate Personal Firewall 5.6.3408.0.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\The Matrix Path Of Neo.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Time Crisis II PS2 CD.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Tom Clancys Splinter Cell FAiRLiGHT.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Tropico Gold-BiRDFLUSUX.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\TV Giant.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Virtual DJ 4.3 Pc & Mac.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Vista Codec Package 4.3.3.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Voyeur in the beach.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\WarCraft III Reign of Chaos.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Weekend in Italy.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\WinAVI 3GP_MP4_PSP_iPod Video Converter v3.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\WindowBlinds Enhanced 5.50.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Windows Vista Ultimate 32bit Final.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Windows Vista Ultimate SP3 2007 (zabranjeno).zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Windows Xp on PsP.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Windows XP Pro Essential Final.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Winrar 3.70 Final.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\WordWeb Pro v5.02.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\X Men Legends II Rise of Apocalypse.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\You Are Empty.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Zone of the Enders 2nd Runner PS2 pal.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\1CLICK DVD Copy 5.2.2.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Adobe CS3 Keygen Package Serial.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Adobe Photoshop CS2 Police Tested.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Advanced Spyware Remover Professional.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Alien Shooter Vengeance 2007.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Alive 3GP Video Converter v1.8.0.2.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Alive DVD Ripper v2.2.3.6.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Bad Boys 2 Pcgame.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Blumentals Screensaver Factory Enterprise v4.5.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\ConvertXtoDVD v2.2.1.253.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\CopyToDVD v4.0.4.60.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Crush Usa Eng PSP.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Cute girl gets fucked by a older man.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Dangerous Waters Exclusive Mission.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Diner Dash 3.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\DOOM 3 Full 3 CD Bonus.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Dragon Naturally Speaking Preffered v9.51.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\DreamLight Photo Editor v1.77.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Driver76.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Dungeon Siege 2 Reloaded MaxGrab Working 4CD vers.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Dungeon Siege.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Enemy Territory QUAKE Wars Beta LEAK.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Error Expert 1.2.9.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Error Killer 2.6.2 Full.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Fifa 2007 5 links only.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Football Manager 2007 Graphics Mega Pack.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Fruity Loops 7.0 Udate Plugins.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Grand Theft Auto III.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\GTA Tokyo Xtreme Racer Drift PL.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\GTA Vice City Deluxe.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Half Life 2 Episode One.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\HDD Life Pro v3.0.138.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Hot girl gets fucked by another woman.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Hoyle Card Games 2007.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Jamiroquai The Return of the Space C.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Jefferson Airplane Long John Silver.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\JetAudio v7.0.0.3001 Plus Vx.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Johnny Cash Greatest Hits.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Jon Bon Jovi Young Guns II Blaze Of.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Kevin Burke Up Close.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Kick Shot Pool.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\King Crimson Heavy ConstruKction.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Led Zeppelin Box Set Vol.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Lemonade Tycoon 2 New York Edition.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\LimeWire Pro 4.13.2.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Lionel Richie Can't Slow Down.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Liquidator.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Live for Speed S2 0.5U Alpha.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Lucio Dalla Storie di casa mia.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Mature wife rubs her pussy.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Microsoft Money 2007.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Microsoft Windows Vista Ultimate X86 iSO.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Microsoft Windows XP SP2 Genuine.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\MooMa MP3 Ringtone Maker v1.20.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\MotoRacer 3 Gold Edition.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\MP3 Remix For Winamp 3.102 Final.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\My first homemade fuck video.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\NVidia DVD Player 2.55.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Oasis Familiar To Millions.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Open Video Capture 1.24.477.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\OrgScheduler LAN ver.5.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Overlord 2007.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Passware Kit Enterprise v8.0.2596.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\PC Error Eliminator 3.0.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\PhotoDex ProShow Gold 3.0.1935.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Pirates of the Caribbean At Worlds End Pc Rip.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Powerzip 7.06 Full.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Prince of Persia Sands of Time.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Resident Evil 4.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\RollerCoaster Tycoon 3 Multilanguage ISO.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Rome Total War.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Roxio Copy And Convert 3.4.0.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\RS Premium Accounts.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Serif PagePlus X2 v12.0 ISO.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\She is filmed by a hidden cam.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Shrek The Third Pcgame.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Sleepwalker.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Smoking Guns Shooting Gallery.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Sony Sound Forge v9.0 Full.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\SpongeBob SquarePants Obstacle Odyssea 2 Time Trouble v.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Spyware Killer v2.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Star Wars Republic Commando.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Sygate Personal Firewall 5.6.3408.0.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\The Matrix Path Of Neo.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Time Crisis II PS2 CD.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Tom Clancys Splinter Cell FAiRLiGHT.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\TV Giant.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Virtual DJ 4.3 Pc & Mac.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Vista Codec Package 4.3.3.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Voyeur in the beach.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\WarCraft III Reign of Chaos.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Weekend in Italy.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\WinAVI 3GP_MP4_PSP_iPod Video Converter v3.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\WindowBlinds Enhanced 5.50.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Windows Vista Ultimate 32bit Final.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Windows Vista Ultimate SP3 2007 (zabranjeno).zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Windows Xp on PsP.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Windows XP Pro Essential Final.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\Winrar 3.70 Final.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\WordWeb Pro v5.02.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\X Men Legends II Rise of Apocalypse.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\Macromedia\Flash Player\#SharedObjects\You Are Empty.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Application Data\MegauploadToolbar\megauper.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\aresregular209_installer.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Setup_CM08_Rel_1_01.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\a\S interneta\Sa interneta\antivirus 2007 mas de antivirus en uno avg,mcafee,norton, entre otros.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\a\S interneta\Sa interneta\bttf+mod+0[1] 2a.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\a\S interneta\Sa interneta\gta back to the future.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\a\S interneta\Sa interneta\indiana jones 3.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\a\S interneta\Sa interneta\indiana jones and the fate of atlantis [self extracting zip].exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\a\S interneta\Sa interneta\league handball manager 2006.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\a\S interneta\Sa interneta\mafia-no-cd (zabranjeno)(2)(2).exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\a\S interneta\Sa interneta\norton antivirus 2007 keygen.exe (Infected with Suspicious_F.gen)
Deleted file

D:\Documents and Settings\xx\Desktop\a\S interneta\Sa interneta\norton_antivirus_2007_full_by_ugm.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\a\S interneta\Sa interneta\panda antivirus platinum 2007- oskar_sparrow316.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\a\S interneta\Sa interneta\protected_dailydonkeybot.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\ATF CLEANER\Flash_Disinfector.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\BS Player\bsplayer226.956_video.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\BS Player\TotalGISConverter.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\EngHrv\Rjecnik.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Fifa manager 2007 i 2008\ENG_MPNMegaPatch2008_5.0.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Fifa manager 2007 i 2008\en_PLP07.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Fifa manager 2007 i 2008\FifaM Cropatch Update.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Fifa manager 2007 i 2008\HNL_Patch_07.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Fifa manager 2007 i 2008\Manager08.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Fifa manager 2007 i 2008\MP2007.4.2.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Fifa manager 2007 i 2008\MP2007BadgesUEFA1.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Fifa manager 2007 i 2008\MP2007BadgesUEFA2.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Fifa manager 2007 i 2008\ndlpatch.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Fifa manager 2007 i 2008\RegUPDATE3_final.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Games\FTBDL.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\grafike\FM2008_v8.0.1_Patch.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\grafike\steklo_1point3.zip/steklo/graphics/table/custom/fixtures/continental/row_middle_middle.png (Error whilst scanning file: I/O Error)

D:\Documents and Settings\xx\Desktop\grafike\toolbar.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\grafike\FM Genie Scout 2008\FMGenieScout.exe (Infected with W32/Hidrag.A)
Removed registry key: HKCR\Applications\ -> FMGenieScout.exe
Deleted file

D:\Documents and Settings\xx\Desktop\grafike\FM Genie Scout 2008\FM Genie Scout 2008\FMGenieScout.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\grafike\fm_genie_scout_2008_limited_beta_2\FM Genie Scout 2008\FMGenieScout.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Manager 3-4\championship manager 03-04.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Mikser\a2vmixer.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Monopoly\MHNE.rar/Monopoly Here & Now Edition\(zabranjeno)\Monopoly Here & Now Edition From GameHouse By TFT-TEAM.exe (Infected with W32/Malware.AGSV)
Deleted file

D:\Documents and Settings\xx\Desktop\Monopoly\Monopoly Here & Now Edition\(zabranjeno)\Monopoly Here & Now Edition From GameHouse By TFT-TEAM.exe (Infected with W32/Malware.AGSV)
Deleted file

D:\Documents and Settings\xx\Desktop\Scauti\cm0304.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Scauti\(zabranjeno) 2003\championship manager 03-04_(zabranjeno).exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Scauti\(zabranjeno) 2003\cm0304.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Scauti\Scaut 0102\CMScout.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Scauti\Scaut 03\scaut3.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Desktop\Scauti\Scaut 03\CMScout\CMScout.exe (Infected with W32/Hidrag.A)
Removed link file: D:\Documents and Settings\xx\Start Menu\CM Scout.lnk
Removed link file: D:\Documents and Settings\xx\Desktop\CM Scout.lnk
Deleted file

D:\Documents and Settings\xx\Desktop\WINRAR\wrar371.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares\My Shared Folder\mafia - lost heaven368.exe (Infected with W32/Hidrag.A)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Alien Shooter Vengeance 2007.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Bad Boys 2 Pcgame.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Crush Usa Eng PSP.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Cute girl gets fucked by a older man.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Diner Dash 3.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Driver76.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Dungeon Siege 2 Reloaded MaxGrab Working 4CD vers.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Dungeon Siege.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Enemy Territory QUAKE Wars Beta LEAK.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Error Expert 1.2.9.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Error Killer 2.6.2 Full.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Football Manager 2007 Graphics Mega Pack.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Fruity Loops 7.0 Udate Plugins.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Grand Theft Auto III.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\GTA Tokyo Xtreme Racer Drift PL.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\GTA Vice City Deluxe.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Half Life 2 Episode One.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Hot girl gets fucked by another woman.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Jamiroquai The Return of the Space C.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Jefferson Airplane Long John Silver.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\JetAudio v7.0.0.3001 Plus Vx.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Johnny Cash Greatest Hits.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Jon Bon Jovi Young Guns II Blaze Of.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Kevin Burke Up Close.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\King Crimson Heavy ConstruKction.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Led Zeppelin Box Set Vol.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Lemonade Tycoon 2 New York Edition.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\LimeWire Pro 4.13.2.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Lionel Richie Can't Slow Down.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Lucio Dalla Storie di casa mia.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Mature wife rubs her pussy.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Microsoft Money 2007.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\MotoRacer 3 Gold Edition.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\MP3 Remix For Winamp 3.102 Final.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\My first homemade fuck video.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Oasis Familiar To Millions.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\OrgScheduler LAN ver.5.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\PC Error Eliminator 3.0.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Pirates of the Caribbean At Worlds End Pc Rip.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Powerzip 7.06 Full.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Resident Evil 4.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\RollerCoaster Tycoon 3 Multilanguage ISO.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Roxio Copy And Convert 3.4.0.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\RS Premium Accounts.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Serif PagePlus X2 v12.0 ISO.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\She is filmed by a hidden cam.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Shrek The Third Pcgame.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Sleepwalker.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Spyware Killer v2.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Star Wars Republic Commando.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\The Matrix Path Of Neo.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Time Crisis II PS2 CD.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Tropico Gold-BiRDFLUSUX.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\TV Giant.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Voyeur in the beach.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Weekend in Italy.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Windows Vista Ultimate 32bit Final.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Windows Xp on PsP.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Windows XP Pro Essential Final.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\Winrar 3.70 Final.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\X Men Legends II Rise of Apocalypse.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Ares Ultra\My Shared Folder\You Are Empty.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\1CLICK DVD Copy 5.2.2.1.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Adobe CS3 Keygen Package Serial.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Adobe Photoshop CS2 Police Tested.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Advanced Spyware Remover Professional.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Alien Shooter Vengeance 2007.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Alive 3GP Video Converter v1.8.0.2.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Alive DVD Ripper v2.2.3.6.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Bad Boys 2 Pcgame.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Blumentals Screensaver Factory Enterprise v4.5.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\ConvertXtoDVD v2.2.1.253.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\CopyToDVD v4.0.4.60.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Cute girl gets fucked by a older man.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Dangerous Waters Exclusive Mission.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Dave Mirra Freestyle Bmx.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\DOOM 3 Full 3 CD Bonus.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Dragon Naturally Speaking Preffered v9.51.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\DreamLight Photo Editor v1.77.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Driver76.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Dungeon Siege 2 Reloaded MaxGrab Working 4CD vers.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Enemy Territory QUAKE Wars Beta LEAK.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Error Expert 1.2.9.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Error Killer 2.6.2 Full.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Fifa 2007 5 links only.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

D:\Documents and Settings\xx\Local Settings\Application Data\Downloaded Installations\Football Manager 2007 Graphics Mega Pack.zip.exe (Infected with W32/Smallworm.AAP)
Deleted file

offline
  • Pridružio: 28 Jun 2008
  • Poruke: 61

I zanima me dali bih mogao negdje downloadirati neki dobar antivirus, ovaj mi usporava pc, a i isteklo mu je vrijeme..Tako da nemam nikakav antivirus..

offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Uhh... Ovo ne izgleda dobro.

Virus W32/Hidrag.A se proširio po disku i vrlo je upitno da li tu možemo išta učiniti.
Čak i ako bi uspeli da se rešimo infekcije, određeni broj programa ti neće raditi. Takođe, upitno je u kakvom stanju bi bio Windows nakon završenog procesa (ne mogu ti garantovati da bi i dalje bio funkcionalan).

U ovakvim situacijama, obično je jedino rešenje formatiranje svih particija na disku te ponovna instalacija operativnog sistema.



Uzevši gore navedeno u obzir, da li želiš da pokušamo ukloniti ovu infekciju?

Ukoliko želiš, ići ćemo na skeniranje još jednim antivirusom.
Takođe, potrebno je da priložiš Norman-ov logfile uz poruku (korišćenjem opcije Prikači fajl) pošto je ovo gore što si postavio nekompletno (log je predugačak da bi stao u poruku, zato ga treba priložiti).

offline
  • Pridružio: 28 Jun 2008
  • Poruke: 61

Ma ništa, nema veze..Ovo je svakako jako star pc, pa mislim ubrzo kupovati novi..Nego, gdje bi mogao downloadirati kakav dobar antivirus kad budem kupovao novi pc..A da mi ne uspori jako rad pc-a?Jer ovaj Kasparovski ga je baš usporavao..

Dopuna: 29 Jun 2008 13:09

A i malo solidnije radi nego što je radio jučer,pa ću ga istrpjeti još do mjesec dana,valjda ću u tom vremenu kupiti novi..Sad mi je bitan samo radi diplomskog..Pišem ga, pa mi je neophodan..Za druge stvari ga trenutačno ne upotrebljavam. Zahvaljujem!

Ko je trenutno na forumu
 

Ukupno su 995 korisnika na forumu :: 48 registrovanih, 5 sakrivenih i 942 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: A.R.Chafee.Jr., Asparagus, babaroga, bojanM84, BORUTUS, BraneS, brundo65, CrazyDiablo, Dannyboy, doklevise, DonRumataEstorski, doom83, Dorcolac, DragoslavS, GenZee, Georgius, havoc995, ikan, Ivan Campo, Karla, kunktator, kybonacci, ljuba, ljubacv, LUDI, Luka Blažević, Marko Marković, mercedesamg, Metanoja, mgolub, misa1xx, mrav pesadinac, Nemanja.M, operniki, Parker, raptorsi, repac, sap, sasakrajina, savaskytec, slonic_tonic, solic, stalja, Stija zmija, Vlad000, voja64, Wrangler, zlaya011