Btdna.exe - Need Steidzami Help !!!!!!

AussieKid00 · #11 Decembris 17, 2007, 23:38

ComboFix 07-12-17.1 - Boriss Mitchell 2007-12-18 17:17:23.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.673 [GMT 11:00]
Sākot no: C: \ Documents and Settings \ Boris Mitchell \ Desktop \ ComboFix.exe
* Izveido jaunu atjaunošanas punktu
.
((((((((((((((((((((((((((((((((((((((( Citi Svītrojumi ))))))))) ))))))))))))))))))))))))))))))))))))))))
.
C: \ WINDOWS \ system32 \ drivers \ sfsync03.sys
.
((((((((((((((((((((((((((((((((((((((( Drivers / Pakalpojumi )))))))) )))))))))))))))))))))))))))))))))))))))))
.
------- \ LEGACY_SFSYNC03
------- \ sfsync03

((((((((((((((((((((((((( Faili Created no 2007/11/18 līdz 2007/12/18 ))))))))))) ))))))))))))))))))))
.
2007/12/17 07:58. 2007/09/24 23:31 69.632 - ------ C: \ WINDOWS \ system32 \ javacpl.cpl
2007/12/17 07:55. 2007/12/17 07:55 <DIR> d -------- C: \ Program Files \ Common Files \ Java
2007/12/16 15:41. 2007/12/17 15:37 <DIR> d -------- C: \ Program Files \ SUPERAntiSpyware
2007/12/16 15:41. 2007/12/16 15:41 <DIR> d -------- C: \ Documents and Settings \ Boris Mitchell \ Application Data \ SUPERAntiSpyware.com
2007/12/16 15:41. 2007/12/16 15:41 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ SUPERAntiSpyware.com
2007/12/16 07:12. 2007/12/16 07:12 <DIR> d -------- C: \ Program Files \ Real
2007/12/16 07:12. 2007/12/16 07:12 <DIR> d -------- C: \ Program Files \ Common Files \ xing dalītas
2007/12/16 06:59. 2007/12/16 06:59 565.170 - ------ C: \ WINDOWS \ system32 \ large.bnk
2007/12/16 06:59. 2007/12/16 06:59 278.528 - ------ C: \ WINDOWS \ system32 \ livesnth.dll
2007/12/16 06:58. 2007/12/16 06:58 203.776 - ------ C: \ WINDOWS \ system32 \ clrviddc.dll
2007/12/16 05:01. 2007/05/29 13:55 22.112 - ------ C: \ WINDOWS \ system32 \ drivers \ COH_Mon.sys
2007/12/16 05:01. 2007/05/29 13:55 10.592 - ------ C: \ WINDOWS \ system32 \ drivers \ COH_Mon.cat
2007/12/16 05:01. 2007/05/29 13:55 705 - ------ C: \ WINDOWS \ system32 \ drivers \ COH_Mon.inf
2007/12/15 20:12. 2007/12/15 20:12 <DIR> d -------- C: \ Documents and Settings \ Boris Mitchell \ Application Data \ Locktime
2007/12/15 20:10. 2007/12/15 20:10 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Locktime
2007/12/15 19:01. 2007/12/16 07:36 <DIR> d -------- C: \ Documents and Settings \ Boris Mitchell \ Application Data \ BitTorrent
2007/12/15 19:00. 2007/12/15 19:00 <DIR> d -------- C: \ Program Files \ DNS
2007/12/15 19:00. 2007/12/18 17:28 <DIR> d -------- C: \ Documents and Settings \ Boris Mitchell \ Application Data \ DNS
2007/12/15 15:13. 2007/12/18 17:29 <DIR> d -------- C: \ Program Files \ Norton 360
2007/12/15 15:12. 2007/12/15 19:32 123.952 - ------ C: \ WINDOWS \ system32 \ drivers \ SYMEVENT.SYS
2007/12/15 15:12. 2007/12/15 19:32 60.800 - ------ C: \ WINDOWS \ system32 \ S32EVNT1.DLL
2007/12/15 15:12. 2007/12/15 19:32 10.740 - ------ C: \ WINDOWS \ system32 \ drivers \ SYMEVENT.CAT
2007/12/15 15:12. 2007/12/15 19:32 805 - ------ C: \ WINDOWS \ system32 \ drivers \ SYMEVENT.INF
2007/12/15 15:11. 2007/12/15 19:32 <DIR> d -------- C: \ Program Files \ Symantec
2007/12/15 15:11. 2007/12/18 16:54 <DIR> d -------- C: \ Program Files \ Common Files \ Symantec Shared
2007/12/15 15:11. 2007/12/18 16:55 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Symantec
2007/12/15 11:35. 2007/07/10 00:16 582.656 ----- c --- C: \ WINDOWS \ system32 \ dllcache \ rpcrt4.dll
2007/12/15 11:29. 2007/12/15 11:33 <DIR> d -------- C: \ Program Files \ Windows Live
2007/12/15 11:29. 2007/12/15 11:32 <DIR> d - HSC --- C: \ Program Files \ Common Files \ WindowsLiveInstaller
2007/12/15 11:29. 2007/12/15 11:29 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ WLInstaller
2007/12/15 11:22. 2007/12/15 11:22 479.298 - ------ C: \ WINDOWS \ system32 \ wbocx.ocx
2007/12/15 11:22. 2007/12/15 11:22 172.032 - ------ C: \ WINDOWS \ system32 \ AniGIF.ocx
2007/12/15 11:22. 2007/12/15 11:22 50.688 - ------ C: \ WINDOWS \ system32 \ wbhelp2.dll
2007/12/15 11:18. 2007/12/15 11:18 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Avg7
2007/12/15 11:13. 2007/07/30 19:18 34.136 - ------ C: \ WINDOWS \ system32 \ wucltui.dll.mui
2007/12/15 11:13. 2007/07/30 19:19 30.072 - ------ C: \ WINDOWS \ system32 \ mucltui.dll.mui
2007/12/15 11:13. 2007/07/30 19:19 25.944 - ------ C: \ WINDOWS \ system32 \ wuaucpl.cpl.mui
2007/12/15 11:13. 2007/07/30 19:19 25.944 - ------ C: \ WINDOWS \ system32 \ wuapi.dll.mui
2007/12/15 11:13. 2007/07/30 19:18 20.312 - ------ C: \ WINDOWS \ system32 \ wuaueng.dll.mui
2007/12/04 19:56. 2007/12/04 19:56 <DIR> d -------- C: \ Program Files \ Common Files \ GTK
2007/12/03 20:18. 2007/12/03 20:18 <DIR> d -------- C: \ Documents and Settings \ Boris Mitchell \ Application Data \ Lavasoft
2007/12/03 20:17. 2007/12/03 20:17 <DIR> d -------- C: \ Program Files \ Lavasoft
2007/12/03 20:16. 2007/12/16 15:40 <DIR> d -------- C: \ Program Files \ Common Files \ Wise Installation Wizard
2007/11/30 23:57. 2007/11/30 23:57 317.616 - ------ C: \ WINDOWS \ system32 \ drivers \ srtspl.sys
2007/11/30 23:57. 2007/11/30 23:57 279.088 - ------ C: \ WINDOWS \ system32 \ drivers \ srtsp.sys
2007/11/30 23:57. 2007/11/30 23:57 43.696 - ------ C: \ WINDOWS \ system32 \ drivers \ srtspx.sys
2007/11/30 23:57. 2007/11/30 23:57 10.549 - ------ C: \ WINDOWS \ system32 \ drivers \ srtspx.cat
2007/11/30 23:57. 2007/11/30 23:57 10.549 - ------ C: \ WINDOWS \ system32 \ drivers \ srtspl.cat
2007/11/30 23:57. 2007/11/30 23:57 10.545 - ------ C: \ WINDOWS \ system32 \ drivers \ srtsp.cat
2007/11/30 23:57. 2007/11/30 23:57 1.430 - ------ C: \ WINDOWS \ system32 \ drivers \ srtspl.inf
2007/11/30 23:57. 2007/11/30 23:57 1.421 - ------ C: \ WINDOWS \ system32 \ drivers \ srtspx.inf
2007/11/30 23:57. 2007/11/30 23:57 1.415 - ------ C: \ WINDOWS \ system32 \ drivers \ srtsp.inf
2007/11/29 22:21. 2007/12/01 08:24 <DIR> d -------- C: \ Documents and Settings \ Boris Mitchell \ Application Data \ InstallShield Installation Information
2007/11/29 15:01. 2004/11/23 08:34 1.323.095 - ------ C: \ WINDOWS \ system32 \ odSupp_M.dll
2007/11/29 15:01. 2005/08/08 10:58 372.736 - ------ C: \ WINDOWS \ system32 \ ANIWZCS2.dll
2007/11/29 15:01. 2005/08/02 18:20 233.472 - ------ C: \ WINDOWS \ system32 \ wlanapi.dll
2007/11/29 15:01. 2005/06/30 19:30 208.896 - ------ C: \ WINDOWS \ system32 \ aIPH.dll
2007/11/29 15:01. 2005/08/09 15:36 143.360 - ------ C: \ WINDOWS \ system32 \ WlanApp.dll
2007/11/29 15:01. 2004/10/22 13:42 57.407 - ------ C: \ WINDOWS \ system32 \ ANICtl.dll
2007/11/29 15:01. 2005/08/04 13:54 49.152 - ------ C: \ WINDOWS \ system32 \ JJAKEn.dll
2007/11/29 15:01. 2004/10/22 13:42 49.152 - ------ C: \ WINDOWS \ system32 \ AQCKGen.dll
2007/11/29 15:00. 2007/11/29 15:00 <DIR> d -------- C: \ Program Files \ D-Link
2007/11/29 15:00. 2007/11/29 15:00 <DIR> d -------- C: \ Program Files \ ANI
2007/11/29 15:00. 2004/07/27 11:20 36.864 - ------ C: \ WINDOWS \ system32 \ ANIOApi.dll
2007/11/29 15:00. 2004/07/27 11:20 28.205 - ------ C: \ WINDOWS \ system32 \ ANIO.sys
2007/11/29 15:00. 2004/07/27 11:20 16.997 - ------ C: \ WINDOWS \ system32 \ ANIO.VXD
2007/11/29 15:00. 2004/07/27 11:20 11.904 - ------ C: \ WINDOWS \ system32 \ anio4.sys
2007/11/24 21:23. 2007/11/24 21:23 <DIR> d -------- C: \ Program Files \ Telstra
2007/11/23 07:41. 2007/11/23 07:41 <DIR> d -------- C: \ Program Files \ Raven
2007/11/23 07:40. 2007/11/23 07:43 934 - ------ C: \ WINDOWS \ SOFPLAT.ini
.
(((((((((((((((((((((((((((((((((((((((( Find3M Ziņojums )))))))) ))))))))))))))))))))))))))))))))))))))))))))
.
2007/12/18 06:31 --------- d --- aw C: \ Documents and Settings \ All Users \ Application Data \ TEMP
2007/12/16 20:58 --------- d ----- w C: \ Program Files \ Java
2007/12/15 20:10 --------- d ----- w C: \ Program Files \ Common Files \ Real
2007/12/15 08:58 --------- d ----- w C: \ Program Files \ Common Files \ Adobe
2007/12/15 00:46 --------- d ----- w C: \ Program Files \ MSN Messenger
2007/12/15 00:23 --------- d ----- w C: \ Program Files \ Google
2007/12/11 10:00 --------- d ----- w C: \ Program Files \ Electronic Arts
2007/12/04 10:19 --------- d ----- w C: \ Documents and Settings \ Boris Mitchell \ Application Data \ gtk-2.0
2007/12/04 08:57 --------- d ----- w C: \ Program Files \ GIMP-2.0
2007/11/30 06:19 --------- d - h - w C: \ Program Files \ InstallShield Installation Information
2007/11/29 20:41 --------- d ----- w C: \ Program Files \ EA GAMES
2007/11/24 10:31 --------- d ----- w C: \ Program Files \ Radical Spēles
2007/11/24 10:21 --------- d ----- w C: \ Program Files \ AlienGUIse
2007/11/24 09:59 --------- d ----- w C: \ Documents and Settings \ All Users \ Application Data \ Spybot - Search & Destroy
2007/11/17 06:25 108.144 ---- aw C: \ WINDOWS \ system32 \ CmdLineExt.dll
2007/11/15 10:04 --------- d ----- w C: \ Program Files \ THQ
2007/11/14 08:58 --------- d ----- w C: \ Program Files \ BinarySense
2007/11/14 08:58 --------- d ----- w C: \ Documents and Settings \ Boris Mitchell \ Application Data \ BinarySense
2007/11/13 10:25 20.480 ------ w C: \ WINDOWS \ system32 \ drivers \ secdrv.sys
2007/10/29 22:43 1.287.680 ---- aw C: \ WINDOWS \ system32 \ quartz.dll
2007/10/27 06:40 222.720 ---- aw C: \ WINDOWS \ system32 \ wmasf.dll
2007/09/10 08:51 94.080-c - aw C: \ Documents and Settings \ Boris Mitchell \ Application Data \ ezplay.sys
2007/09/10 08:51 87.608 ---- aw C: \ Documents and Settings \ Boris Mitchell \ Application Data \ ezpinst.exe
2007/09/10 08:51 47.360-c - aw C: \ Documents and Settings \ Boris Mitchell \ Application Data \ pcouffin.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))) ))))))))))))))))))))))))))))))))))))))))
.
.
* Piezīme * tukši ieraksti & legit default ieraksti netiek parādīti
REGEDIT4
[HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Run]
"ctfmon.exe" = "C: \ WINDOWS \ system32 \ ctfmon.exe" [2004/08/04 18:56]
"Start WingMan Profiler" = "" []
"SWG" = "C: \ Program Files \ Google \ GoogleToolbarNotifier \ 1.2.1128.5462 \ G oogleToolbarNotifier.exe" [2007/12/15 11:23]
"BitTorrent DNA" = "C: \ Program Files \ DNS \ btdna.exe" [2007/12/15 19:00]
"OnlineTextBuddy" = "C: \ Program Files \ Telstra \ OnlineTextBuddy \ OnlineTextBuddy.exe" [2005/04/07 14:13]
"SUPERAntiSpyware" = "C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe" [2007/06/21 14:06]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Run]
"Anvshell" = "C: \ WINDOWS \ Anvshell.exe" [2002/10/22 17:45]
"Share-to-Web Namespace Daemon" = "C: \ Program Files \ Hewlett-Packard \ HP Share-to-Web \ hpgs2wnd.exe" [2001/07/03 09:11]
"HPDJ Uzdevumjosla Utility" = "C: \ WINDOWS \ system32 \ spool \ drivers \ w32x86 \ 3 \ hpztsb04.exe" [2001/11/09 22:42]
"NvCplDaemon" = "RUNDLL32.exe" [2004/08/04 18:56 C: \ WINDOWS \ system32 \ rundll32.exe]
"nwiz" = "nwiz.exe" [2006/06/23 16:49 C: \ WINDOWS \ system32 \ nwiz.exe]
"NvMediaCenter" = "RUNDLL32.exe" [2004/08/04 18:56 C: \ WINDOWS \ system32 \ rundll32.exe]
"NeroFilterCheck" = "C: \ WINDOWS \ system32 \ NeroCheck.e XE" [2001/07/09 11:50]
"QuickTime Task" = "C: \ Program Files \ QuickTime \ qttask.exe" [2007/06/29 07:24]
"iTunesHelper" = "C: \ Documents and Settings \ Boris Mitchell \ My Documents \ iTunes \ iTunesHelper.exe" [2007/09/07 17:55]
"ANIWZCS2Service" = "C: \ Program Files \ VIA \ ANIWZCS2 Service \ WZCSLDR2.exe" [2004/12/16 17:49]
"DownloadAccelerator" = "C: \ Documents and Settings \ Boris Mitchell \ My Documents \ Download Accelerator Plus \ DAP \ DAP.exe" [2007/12/15 11:22]
"ccApp" = "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe" [2007/07/18 12:54]
"Adobe Reader Speed Launcher" = "C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe" [2007/10/10 19:51]
"SunJavaUpdateSched" = "C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe" [2007/09/25 01:11]
[HKEY_USERS \. DEFAULT \ Software \ Microsoft \ Windows \ Cur rentVersion \ Run]
"CTFMON.EXE" = "C: \ WINDOWS \ System32 \ CTFMON.EXE" [2004/08/04 18:56]
C: \ Documents and Settings \ Boris Mitchell \ Start Menu \ Programs \ Startup \
HDDlife.lnk - C: \ Program Files \ BinarySense \ HDDlife \ HDDlifePro.exe [2007/04/05 14:56:14]
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntversion \ Policies \ Explorer]
"NoUserNameInStartMenu" = 01000000
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entversion \ Explorer \ shellexecutehooks]
"(5AE067D3-9AFB-48E0-853A-EBB7F4A000DA)" = C: \ Program Files \ SUPERAntiSpyware \ SASSEH.DLL [2006/12/20 13:55 77.824]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ paziņot \! SASWinLogon]
C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll 2007/04/19 13:41 294.912 C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ paziņot \ WB]
C: \ Program Files \ AlienGUIse \ fastload.dll 2001/12/21 00:34 24.576 C: \ Program Files \ AlienGUIse \ fastload.dll
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Windows]
"AppInit_DLLs" = 72.dll, wbsys.dll
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ contro l \ securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, zwebauth.dll
R1 nltdi; nltdi, C: \ WINDOWS \ system32 \ drivers \ nltdi.sys [2007/04/24 03:08]
R3 WmBEnum; Logitech Virtual Bus Enumerator Driver; C: \ WINDOWS \ system32 \ drivers \ WmBEnum.sys [2005/04/12 19:21]
R3 WmXlCore; Logitech WingMan Translation Layer Driver; C: \ WINDOWS \ system32 \ drivers \ WmXlCore.sys [2005/04/12 19:21]
S3 BTNetFilter; Bluetooth Tīkla filtrs; C: \ WINDOWS \ system32 \ drivers \ BTNetFilter.sys [2004/12/16 16:32]
S3 GcKernel; Microsoft sitiens no sāniem Value Pievienot - Filter Driver; C: \ WINDOWS \ system32 \ drivers \ GcKernel.sys [2004/08/04 17:08]
S3 glauiad, D-Link DSL-302G Modem, C: \ WINDOWS \ system32 \ drivers \ glauiad.sys [2003/03/07 16:07]
S3 HIDSwvd; Microsoft sitiens no sāniem Virtual HID Device Mini-Driver, C: \ WINDOWS \ system32 \ drivers \ HIDSwvd.sys [2001/08/17 14:02]
S3 iatmunin; iatmunin, C: \ DOCUME ~ 1 \ BORISM ~ 1 \ Lokālie ~ 1 \ Te mp \ iatmunin.sys []
S3 sony_ssm.sys; sony_ssm.sys, C: \ DOCUME ~ 1 \ BORISM ~ 1 \ LOC ALS ~ 1 \ Temp \ sony_ssm.sys []
S3 usbprint; Microsoft USB PRINTER kategorija, C: \ WINDOWS \ system32 \ drivers \ usbprint.sys [2004/08/04 16:01]
S3 wanusb, D-Link DSL-200 USB ADSL Modem (WAN), C: \ WINDOWS \ system32 \ drivers \ gwausb.sys []
S3 WmFilter; Logitech Gaming HID Filter Driver; C: \ WINDOWS \ system32 \ drivers \ WmFilter.sys [2005/04/12 19:21]
S3 WmVirHid; Logitech Virtual HID Device Driver, C: \ WINDOWS \ system32 \ drivers \ WmVirHid.sys [2005/04/12 19:21]
* Jaunizveidoto Service * - COMHOST
.
Saturs "Scheduled Tasks" mape
"2007/12/18 06:30:00 C: \ WINDOWS \ Uzdevumi \ User_Feed_Synchronization-(8E249D77-F640-426A-A4F2-E69D87D83C68). Job"
- C: \ WINDOWS \ system32 \ msfeedssync.exe
.
************************************************** ************************
catchme 0.3.1333 W2K/XP/Vista - rootkit / Stealth malware detektoru, ar Gmer, http://www.gmer.net
Rootkit scan 2007/12/18 17:32:29
Windows 5.1.2600 Service Pack 2 NTFS
skenēšana slēptās procesi ...
skenēšana slēptās palaišana ieraksti ...
skenēšana slēptos failus ...
scan sekmīgi pabeigta
slēptos failus: 0
************************************************** ************************
.
Pabeigšanas laiks: 2007/12/18 17:34:50 - mašīna bija rebooted
.
2007/12/15 20:40:59 --- EOF ---

Logfile of Trend Micro HijackThis v2.0.2
Scan saglabāta 17:38, uz 2007/12/18
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Running procesiem:
C: \ WINDOWS \ System32 \ Smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ Program Files \ Common Files \ Symantec Shared \ ccSvcHst.exe
C: \ WINDOWS \ system32 \ Spoolsv.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ Program Files \ IVT Corporation \ BlueSoleil \ BTNtService.exe
C: \ Program Files \ WIDCOMM \ Bluetooth Software \ bin \ btwdins.exe
C: \ Documents and Settings \ Boris Mitchell \ My Documents \ Net Limiter 2 Monitor \ NetLimiter 2 Monitor \ nlsvc.exe
C: \ Windows \ Explorer.exe
C: \ WINDOWS \ system32 \ nvsvc32.exe
C: \ Program Files \ Common Files \ Roxio Shared \ 9,0 \ SharedCOM \ RoxWatch9.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ system32 \ UAService7.exe
C: \ Documents and Settings \ Boris Mitchell \ My Documents \ Net Limiter 2 Monitor \ NetLimiter 2 Monitor \ NLClient.exe
C: \ WINDOWS \ system32 \ ctfmon.exe
C: \ WINDOWS \ Anvshell.exe
C: \ Program Files \ Hewlett-Packard \ HP Share-to-Web \ hpgs2wnd.exe
C: \ WINDOWS \ system32 \ RUNDLL32.EXE
C: \ Documents and Settings \ Boris Mitchell \ My Documents \ iTunes \ iTunesHelper.exe
C: \ Program Files \ VIA \ ANIWZCS2 Service \ WZCSLDR2.exe
C: \ PROGRA ~ 1 \ HEWLET ~ 1 \ HPSHAR ~ 1 \ hpgs2wnf.exe
C: \ Documents and Settings \ Boris Mitchell \ My Documents \ Download Accelerator Plus \ DAP \ DAP.EXE
C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe
C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe
C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe
C: \ WINDOWS \ system32 \ devldr32.exe
C: \ Program Files \ Google \ GoogleToolbarNotifier \ 1.2.1128.5462 \ G oogleToolbarNotifier.exe
C: \ Program Files \ DNS \ btdna.exe
C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe
C: \ Program Files \ BinarySense \ HDDlife \ HDDlifePro.exe
C: \ Program Files \ iPod \ bin \ iPodService.exe
C: \ WINDOWS \ system32 \ taskmgr.exe
C: \ Program Files \ Internet Explorer \ iexplore.exe
C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WLLoginProxy.exe
C: \ Documents and Settings \ Boris Mitchell \ My Documents \ HijackThis \ HijackThis.exe
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet iestatījumi ProxyOverride = *. vietējo
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll
O2 - BHO: (no name) - (1E8A6170-7.264-4D0F-BEAE-D42A53123C75) - C: \ Program Files \ Common Files \ Symantec Shared \ coShared \ Browser \ 1,7 \ NppBho.dll
O2 - BHO: RealPlayer Download and Record Plugin Internet Explorer - (3049C3E9-B461-4BC5-8870-4C09146192CA) - C: \ Documents and Settings \ Boris Mitchell \ My Documents \ John \ Real Player \ rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8.333-CF10577473F7) - C: \ Program Files \ Google \ googletoolbar2.dll
O3 - Toolbar: & Google - (2318C2B1-4.965-11d4-9B18-009027A5CD4F) - C: \ Program Files \ Google \ googletoolbar2.dll
O3 - Toolbar: Rādīt Norton Toolbar - (90.222.687-F593-4.738-B738-FBEE9C7B26DF) - C: \ Program Files \ Common Files \ Symantec Shared \ coShared \ Browser \ 1,7 \ UIBHO.dll
O4 - HKLM \ .. \ Run: [Anvshell] C: \ WINDOWS \ Anvshell.exe
O4 - HKLM \ .. \ Run: [Share-to-Web Namespace Daemon] C: \ Program Files \ Hewlett-Packard \ HP Share-to-Web \ hpgs2wnd.exe
O4 - HKLM \ .. \ Run: [HPDJ Taskbar Utility] C: \ WINDOWS \ system32 \ spool \ drivers \ w32x86 \ 3 \ hpztsb0 4.exe
O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup
O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install
O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit
O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ WINDOWS \ system32 \ NeroCheck.exe
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime
O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Documents and Settings \ Boris Mitchell \ My Documents \ iTunes \ iTunesHelper.exe"
O4 - HKLM \ .. \ Run: [ANIWZCS2Service] C: \ Program Files \ VIA \ ANIWZCS2 Service \ WZCSLDR2.exe
O4 - HKLM \ .. \ Run: [DownloadAccelerator] "C: \ Documents and Settings \ Boris Mitchell \ My Documents \ Download Accelerator Plus \ DAP \ DAP.EXE" / Uzsākšana
O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe"
O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe"
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe"
O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe
O4 - HKCU \ .. \ Run: [SWG] C: \ Program Files \ Google \ GoogleToolbarNotifier \ 1.2.1128.5462 \ G oogleToolbarNotifier.exe
O4 - HKCU \ .. \ Run: [BitTorrent DNA] "C: \ Program Files \ DNS \ btdna.exe"
O4 - HKCU \ .. \ Run: [OnlineTextBuddy] C: \ Program Files \ Telstra \ OnlineTextBuddy \ OnlineTextBuddy.exe / quiet
O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe
O4 - HKUS \ S-1-5-18 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ System32 \ CTFMON.EXE (User "SISTĒMA")
O4 - HKUS \. DEFAULT \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ System32 \ CTFMON.EXE (User 'Default user')
O4 - Startup: HDDlife.lnk = C: \ Program Files \ BinarySense \ HDDlife \ HDDlifePro.exe
O4 - Global Startup: billeo.lnk = C: \ Documents and Settings \ Boris Mitchell \ My Documents \ John \ Billeo \ billeo.exe
O4 - Global Startup: Microsoft Office.lnk = C: \ Program Files \ Microsoft Office \ Office \ OSA9.EXE
Ø8 - ārpus konteksta menu item: & Clean Traces - C: \ Documents and Settings \ Boris Mitchell \ My Documents \ Download Accelerator Plus \ DAP \ Privacy Package \ dapcleanerie.htm
Ø8 - ārpus konteksta menu item: & Download ar & DAP - C: \ Documents and Settings \ Boris Mitchell \ My Documents \ Download Accelerator Plus \ DAP \ dapextie.htm
Ø8 - ārpus konteksta menu item: Download & visi ar DAP - C: \ Documents and Settings \ Boris Mitchell \ My Documents \ Download Accelerator Plus \ DAP \ dapextie2.htm
Ø8 - ārpus konteksta menu item: Send To & Bluetooth - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ btsendto_ie_ctx.htm
Ø9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll
Ø9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll
Ø9 - Extra button: Blog Šī - (219C3416-8CB2-491a-A3C7-D9FCDDC9D600) - C: \ Program Files \ Windows Live \ Writer \ WriterBrowserExtension.dll
Ø9 - Extra 'Tools' MENUITEM: & Blog Šis Windows Live Writer - (219C3416-8CB2-491a-A3C7-D9FCDDC9D600) - C: \ Program Files \ Windows Live \ Writer \ WriterBrowserExtension.dll
Ø9 - Extra button: @ btrez.dll, -4.015 - (CCA281CA-C863-46ef-9.331-5C8D4460577F) - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ btsendto_ie.htm
Ø9 - Extra 'Tools' MENUITEM: @ btrez.dll, -4.017 - (CCA281CA-C863-46ef-9.331-5C8D4460577F) - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ btsendto_ie.htm
Ø9 - Extra button: (no name) - (e2e2dd38-d088-4.134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
Ø9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20.001 - (e2e2dd38-d088-4.134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
Ø9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
Ø9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
Ø12 - Spraudnis. Spop: C: \ Program Files \ Internet Explorer \ Plugins \ NPDocBox.dll
Ø16 - DPF: (4ED9DDF0-7.479-4BBE-9.335-5A1EDB1D8A21) -- http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
Ø16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl klase) -- http://update.microsoft.com/microsof...?1145619375421
Ø16 - DPF: (8AD9C840-044E-11D1-B3E9-00805F499D93) (Java Runtime Environment 1.6.0) -- http://javadl-esd.sun.com/update/1.6...ws-i586-jc.cab
Ø20 - AppInit_DLLs: 72.dll, wbsys.dll
Ø20 - Winlogon Paziņot:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alfa Networks Inc - C: \ Program Files \ VIA \ ANIWZCS2 Service \ ANIWZCSdS.exe
O23 - Service: Apple Mobile Device - Apple, Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: BlueSoleil HID Service - Unknown īpašnieks - C: \ Program Files \ IVT Corporation \ BlueSoleil \ BTNtService.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ bin \ btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect dienests (CLTNetCnService) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ VAScanner \ comHost.exe
O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C: \ PROGRA ~ 1 \ Symantec \ LIVEUP ~ 1 \ LUCOMS ~ 1.EXE
O23 - Service: NetLimiter (nlsvc) - Locktime Software - C: \ Documents and Settings \ Boris Mitchell \ My Documents \ Net Limiter 2 Monitor \ NetLimiter 2 Monitor \ nlsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe
O23 - Service: Roxio UPnP attēlotājs 9 - Sonic Solutions - C: \ Program Files \ Roxio \ Roxio Easy Media Creator 9 Suite \ Digital Home 9 \ RoxioUPnPRenderer9.exe
O23 - Service: Roxio UPnP Server 9 - Sonic Solutions - C: \ Program Files \ Roxio \ Roxio Easy Media Creator 9 Suite \ Digital Home 9 \ RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C: \ Program Files \ Common Files \ Roxio Shared \ 9,0 \ SharedCOM \ RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C: \ Program Files \ Common Files \ Roxio Shared \ 9,0 \ SharedCOM \ RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C: \ Program Files \ Common Files \ Roxio Shared \ 9,0 \ SharedCOM \ RoxWatch9.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C: \ WINDOWS \ system32 \ UAService7.exe
--
End of failu - 11.570 bytes

**evilfantasy** · #12 Decembris 18, 2007, 00:03

Kāds bija vārdu spēle?

AussieKid00 · #13 Decembris 18, 2007, 12:57

im diezgan pārliecināts, ka tā saukto pilsētas teroru vai to varētu saukt pasaulē padman. Instalēju viss kaudzes vienā naktī, bet es atceros sirēna vienā no 2.

**evilfantasy** · #14 Decembris 18, 2007, 17:01

tas bija Starforce?

AussieKid00 · #15 Decembris 19, 2007, 00:28

no i dont think so

~~dice14u~~ · #16 Decembris 19, 2007, 00:29

mēs varam iegūt šos. txt fails saites, iespējams, tā vietā? (pielikumi rakstot atbildes

~~dice14u~~ · #17 Decembris 19, 2007, 00:49

Pēc tam, ka dažas dīvainas lietas, iv redzams no šiem sarakstiem
First off pārtraukt instalēšanu stuff to my dokumentus, tā tikai dīvaini ..
next jūs zināt, kas C: \ Program Files \ DNS \ btdna.exe ir, ja nē, tad tur varētu būt kaut kas
izputināt visu, kas papildus junk, kas darbojas ar jūsu starta O4 - HKLM \ .. \ Run: *
O4 - Global Startup: billeo.lnk = C: \ Documents and Settings \ Boris Mitchell \ My Documents \ John \ Billeo \ billeo.exe thats weird, ja jūs nezināt, kas tas ir.
Ø12 - Spraudnis. Spop: C: \ Program Files \ Internet Explorer \ Plugins \ NPDocBox.dll
Ø20 - AppInit_DLLs: 72.dll, wbsys.dll
Tie ir visi weirdos nevar teikt par dažiem, bet tās streiks man par dīvainībām un varētu jums, iespējams, novērstu dažas no šīm citām programmām pirms tam, ka tik mums nav skatīties jūsu Downloader un telestra un tīkla uzrauga un Roxio un jebkurus citus extrenuous programmas, darbojas. Arī tad skaņa parādās tad, kad jūs kaut ko varētu reāli logi paziņojumiem iestatījumu. Tādā gadījumā nekas no tā nav problēma varētu būt spēle konfigurēt savu datoru, lai padarītu šos trokšņus doties uz vadības paneļa un to skaņas un audio ierīces un mainīt sistēmas skaņas

**evilfantasy** · #18 Decembris 19, 2007, 11:32

Quote:

Originally Posted by dice14u

mēs varam iegūt šos. txt fails saites, iespējams, tā vietā? (pielikumi rakstot atbildes

Nē, mēs gribētu, lai tie tiktu pievienoti pastu. Nevis kā pielikumus. btdna.exe - BitTorrent O4 billeo.exe - Billeo Free Password Manager Plus 012 npdocbox.dll ir modulis, kas saistīti ar Adobe Acrobat 20 wbsys.dll - WindowBlinds / Stardock Izveidot Uninstall List 1. Sākums HijackThis 2. Noklikšķiniet uz Open Misc sadaļā Rīki 3. Noklikšķiniet uz Open Uninstall Manager pogu. 4. Noklikšķiniet uz Saglabāt saraksts pogu un norādiet, kur vēlaties saglabāt šo failu. Kad nospiežat Glābt poga notepad atver ar šī faila saturu. 5. Nokopējiet un ielīmējiet uninstall_list.txt in next post. Create Startup List 1. Open HijackThis un izvēlieties Open Misc sadaļā Rīki 2. Noklikšķiniet uz pogas, kas saka Ģenerēt StartupList log 3. Click Jā Kad Jums un notepad dokuments tiks atvērts. 4. Nokopējiet un ielīmējiet to nākamajā amatā

AussieKid00 · #19 Decembris 19, 2007, 13:02

1-abc.net Synchronizer (Remove only)
Ad-Aware SE Personal
Adobe Acrobat 4.0, 5.0
Adobe Flash Player 9 ActiveX
Adobe Reader 8.1.1
Age of Empires III
AlienGUIse Theme Manager
Anio Service
ANIWZCS2 Service
AppCore
Apple Mobile Device Support
Apple Software Update
ArcSoft PhotoImpression
AV
Battlefield 2: Special Forces
BCArchive 1,0
BlueSoleil
Call of Duty (R) 2
ccCommon
CCleaner (noņemt tikai)
CCScore
ComproDVD 2
Download Accelerator Plus (DAP)
DVD Decrypter (Remove Only)
EA SPORTS online 2.006
ESSBrwr
ESSCDBK
ESScore
ESSgui
ESShelp
ESSini
ESSPCD
ESSPDock
ESSSONIC
ESSTOOLS
essvatgt
essvcpt
FEAR
GameGuard
GameSpy Arcade
GearDrvs
Google Toolbar Internet Explorer
Google Toolbar Internet Explorer
GTK + 2.10.6-1 runtime vide
HDDlife
HijackThis 2.0.2
HLPPDOCK
Labojumfailu Windows Media Format 11 SDK (KB929399)
Labojumfailu Windows Media Player 11 (KB939683)
Labojumfailu Windows XP (KB896344)
Labojumfailu Windows XP (KB914440)
Labojumfailu Windows XP (KB915865)
Labojumfailu Windows XP (KB926239)
HP Deskjet 948c sērija
HP Deskjet 948c series (Remove only)
HP Photo Printing Software
HP Precisionscan Pro 3,1
HP Share-to-Web
Indeo ® Software
IrfanView (noņemt tikai)
iTunes
Java (TM) 6 Update 3
kgcbaby
kgcbase
kgchday
kgchlwn
kgcinvt
kgckids
kgcmove
kgcvday
Kodak EasyShare programmatūra
KSU
L & H TTS3000 British angļu
Limewire 4.14.12
LiveUpdate 3.2 (Symantec Corporation)
Logitech Gaming Software
Microsoft. NET Framework (Angļu)
Microsoft. NET Framework (Angļu) v1.0.3705
Microsoft. NET Framework 1,0 Hotfix (KB928367)
Microsoft. NET Framework 1.1
Microsoft. NET Framework 1.1
Microsoft. NET Framework 1.1 Hotfix (KB928366)
Microsoft. NET Framework 2.0
Microsoft Base Smart Card kriptogrāfiskā Service Provider Package
Microsoft Compression Client Pack 1,0 uz Windows XP
Microsoft Data Access Components KB870669
Microsoft Flight Simulator X
Microsoft Internationalized Domain Names mazināšanas APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2000 Premium
Microsoft User-Mode Driver Framework Feature Pack 1,0
Microsoft Visual C + + 2005 Redistributable
MSXML 4,0 SP2 (KB925672)
MSXML 4,0 SP2 (KB927978)
MSXML 4,0 SP2 (KB936181)
MSXML 4,0 SP2 Parser un SDK
MSXML4 Parser
Need for Speed ™ Most Wanted
Nero Media Player
Nero OEM
NeroVision Express 2
NetLimiter 2 Monitor (noņemt tikai)
Network Play System (Patching)
Norton 360
Norton 360
Norton 360
Norton 360 (Symantec Corporation)
Norton 360 Help
Norton Konfidenciāli Browser Component
Norton Konfidenciāli Web Autentifikācija Component
Norton Konfidenciāli Web Protection Component
Paziņotājs
NVIDIA Drivers
OfotoXMI
OTtBP
OTtBPSDK
Photo Story 3 for Windows
QuickTime
RealPlayer
Rapsodija Player Engine
Roxio aktivizēšana Module
Roxio BDAV Plugin
Roxio Creator 9 Home
Roxio Easy Media Creator 9 Suite
Roxio EasyArchive
Roxio RecordNow Audio
Roxio RecordNow Kopēt
Roxio RecordNow Data
Roxio RecordNow Tools
Sam un Max - Season One - Episode 104 - Abe Lincoln Must Die!
Security Update for Microsoft. NET Framework 2.0 (KB928365)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB944653)
SFR
Shasta
Shockwave
SKIN0001
SKINXSDK
Soldier of Fortune Platinum
Skaņas CinePlayer Decoder Pack
SPBBC 32bit
staticcr
SUPERAntiSpyware Free Edition
SuppSoft
Symantec Technical Support Controls
SymNet
Darba grupu (noņemt tikai)
Telstra Tiešsaistes teksta Draugs 1,0
GIMP 2.2.13
Movies (TM) Stunts & Efekti
Sims 2
Sims 2 Body Shop
Sims 2 HomeCrafter Plus
Sims 2 Nightlife
Sims 2 Open For Business
Sims 2 Pets
Sims 2 University
Trellix Web Express Site Building
Kniebiens UI
Ulead Burn.Now
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB930916)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
VPRINTOL
WIBU-KEY Setup (WIBU-KEY atcelt)
WIDCOMM Bluetooth Software
Logi Blaster Worm Removal Tool (KB833330)
Windows Defender Signatures
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live uzstādītājs
Windows Live Mail
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Writer
Windows Media Format 11 Runtime
Windows Media Format 11 Runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Service Pack 2
WIRELESS

Pārbaude Windows NT Userinit:
[HKLM \ Software \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon]
Userinit = C: \ WINDOWS \ system32 \ userinit.exe,
--------------------------------------------------
Autorun ierakstus no reģistra:
HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Run
Anvshell = C: \ WINDOWS \ Anvshell.exe
Share-to-Web Namespace Daemon = C: \ Program Files \ Hewlett-Packard \ HP Share-to-Web \ hpgs2wnd.exe
HPDJ Uzdevumjosla Utility = C: \ WINDOWS \ system32 \ spool \ drivers \ w32x86 \ 3 \ hpztsb0 4.exe
NvCplDaemon = RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup
nwiz = nwiz.exe / install
NvMediaCenter = RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit
NeroFilterCheck = C: \ WINDOWS \ system32 \ NeroCheck.exe
QuickTime Task = "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime
iTunesHelper = "C: \ Documents and Settings \ Boris Mitchell \ My Documents \ iTunes \ iTunesHelper.exe"
ANIWZCS2Service = C: \ Program Files \ VIA \ ANIWZCS2 Service \ WZCSLDR2.exe
DownloadAccelerator = "C: \ Documents and Settings \ Boris Mitchell \ My Documents \ Download Accelerator Plus \ DAP \ DAP.EXE" / Uzsākšana
ccApp = "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe"
Adobe Reader Speed Launcher = "C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe"
SunJavaUpdateSched = "C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe"
--------------------------------------------------
Autorun ierakstus no reģistra:
HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Run OnceEx
(Default) =
--------------------------------------------------
Autorun ierakstus no reģistra:
HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Run
ctfmon.exe = C: \ WINDOWS \ system32 \ ctfmon.exe
Start WingMan Profiler =
SWG = C: \ Program Files \ Google \ GoogleToolbarNotifier \ 1.2.1128.5462 \ G oogleToolbarNotifier.exe
BitTorrent DNS = "C: \ Program Files \ DNS \ btdna.exe"
OnlineTextBuddy = C: \ Program Files \ Telstra \ OnlineTextBuddy \ OnlineTextBuddy.exe / quiet
SUPERAntiSpyware = C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe
--------------------------------------------------
Autorun ieraksti Registry apakšatslēgas par:
HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Run
[OptionalComponents]
=
--------------------------------------------------
Load / Run atslēgas no C: \ WINDOWS \ WIN.INI:
slodze =* INI sadaļā nav atrasts *
palaist =* INI sadaļā nav atrasts *
Load / Run atslēgas no reģistra:
HKLM \ .. \ Windows NT \ CurrentVersion \ Winlogon: kravas =* Registry vērtības nav atrasts *
HKLM \ .. \ Windows NT \ CurrentVersion \ Winlogon: palaist =* Registry vērtības nav atrasts *
HKLM \ .. \ Windows \ CurrentVersion \ Winlogon: kravas =* reģistra atslēgu nav atrasts *
HKLM \ .. \ Windows \ CurrentVersion \ Winlogon: palaist =* reģistra atslēgu nav atrasts *
HKCU \ .. \ Windows NT \ CurrentVersion \ Winlogon: kravas =* Registry vērtības nav atrasts *
HKCU \ .. \ Windows NT \ CurrentVersion \ Winlogon: palaist =* Registry vērtības nav atrasts *
HKCU \ .. \ Windows \ CurrentVersion \ Winlogon: kravas =* reģistra atslēgu nav atrasts *
HKCU \ .. \ Windows \ CurrentVersion \ Winlogon: palaist =* reģistra atslēgu nav atrasts *
HKCU \ .. \ Windows NT \ CurrentVersion \ Windows: kravas =* Registry vērtības nav atrasts *
HKCU \ .. \ Windows NT \ CurrentVersion \ Windows: palaist =* Registry vērtības nav atrasts *
HKLM \ .. \ Windows NT \ CurrentVersion \ Windows: kravas =* Registry vērtības nav atrasts *
HKLM \ .. \ Windows NT \ CurrentVersion \ Windows: palaist =* Registry vērtības nav atrasts *
HKLM \ .. \ Windows NT \ CurrentVersion \ Windows: AppInit_DLLs = 72.dll, wbsys.dll
--------------------------------------------------
Shell & ekrānsaudzētājs atslēgu no C: \ WINDOWS \ SYSTEM.INI:
Shell =* INI sadaļā nav atrasts *
SCRNSAVE.EXE =* INI sadaļā nav atrasts *
autovadītāju =* INI sadaļā nav atrasts *
Shell & ekrānsaudzētājs atslēgu no reģistra:
Shell = Explorer.exe
SCRNSAVE.EXE =* Registry vērtības nav atrasts *
autovadītāju =* Registry vērtības nav atrasts *
Politikas Shell atslēga:
HKCU \ .. \ Policies: Shell =* Registry vērtības nav atrasts *
HKLM \ .. \ Policies: Shell =* Registry vērtības nav atrasts *
--------------------------------------------------

Uzskaitot Browser Helper Objects:
(bez nosaukuma) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3)
(bez nosaukuma) - C: \ Program Files \ Common Files \ Symantec Shared \ coShared \ Browser \ 1,7 \ NppBho.dll - (1E8A6170-7.264-4D0F-BEAE-D42A53123C75)
(bez nosaukuma) - C: \ Documents and Settings \ Boris Mitchell \ My Documents \ John \ Real Player \ rpbrowserrecordplugin.dll - (3049C3E9-B461-4BC5-8870-4C09146192CA)
(bez nosaukuma) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43)
(bez nosaukuma) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll - (9030D464-4C02-4ABF-8ECC-5164760863C6)
(bez nosaukuma) - C: \ Program Files \ Google \ googletoolbar2.dll - (AA58ED58-01DD-4d91-8.333-CF10577473F7)
--------------------------------------------------
Uzskaitot Task plānotājs darba vietas:
User_Feed_Synchronization-(8E249D77-F640-426A-A4F2-E69D87D83C68). Darbā
--------------------------------------------------
Uzskaitot Download Program Files:
[Windows Genuine Advantage Validation Tool]
InProcServer32 = C: \ WINDOWS \ system32 \ legitcheckcontrol.dll
CODEBASE = http://download.microsoft.com/downlo...eckControl.cab
[(4ED9DDF0-7.479-4BBE-9.335-5A1EDB1D8A21)]
CODEBASE = http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
[MUWebControl Class]
InProcServer32 = C: \ WINDOWS \ system32 \ muweb.dll
CODEBASE = http://update.microsoft.com/microsof...?1145619375421
[Java Plug-in 1.6.0_03]
InProcServer32 = C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll
CODEBASE = http://javadl-esd.sun.com/update/1.6...ws-i586-jc.cab
[(9F1C11AA-197B-4.942-BA54-47A8489BB47F)]
CODEBASE = http://v4.windowsupdate.microsoft.co...?38050.6634375
[Shockwave Flash Object]
InProcServer32 = C: \ WINDOWS \ system32 \ Macromed \ Flash \ Flash9b.ocx
CODEBASE = http://fpdownload.macromedia.com/get...nt/swflash.cab
--------------------------------------------------
Uzskaitot ShellServiceObjectDelayLoad posteņus:
PostBootReminder: C: \ WINDOWS \ system32 \ shell32.dll
CDBurn: C: \ WINDOWS \ system32 \ shell32.dll
WebCheck: C: \ WINDOWS \ system32 \ webcheck.dll
SysTray: C: \ WINDOWS \ System32 \ stobject.dll
WPDShServiceObj: C: \ WINDOWS \ system32 \ WPDShServiceObj.dll
--------------------------------------------------
Gada beigām ziņojumu, 9.928 baiti
Report generated in 0,391 seconds
Komandrindas opcijas:
/ runīgs - pievienot papildu informācija par katras sadaļas
/ pabeigts - iekļaut tukšs nodaļās un netur aizdomas dati
/ Pilns - lai arī vairāki reti nozīmīgu sadaļu
/ force9x - iekļaut Win9x tikai jaunizveidotiem uzņēmumiem, pat ja palaists WinNT
/ forcent - iekļaut WinNT tikai jaunizveidotiem uzņēmumiem, pat ja palaists Win9x
/ forceall - iekļaut visus Win9x un WinNT jaunizveidotiem neatkarīgi no platformas
/ vēstures - pie saraksta versiju vēsture tikai

**evilfantasy** · #20 Decembris 19, 2007, 14:04

Es nezinu, es neredzu neko, ko var izraisīt tā.

Ja vien tas ir kaut kas cits citu, tad spēle to dara.