Spylocked - została ikona w trayu

Araiser · 3 Maj 2007 13:40

Wygląda ona tak (miga):

I łączy ze stroną Spylocked.

A oto log:

Logfile of HijackThis v1.99.1 Scan saved at 15:19:56, on 2007-05-03 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\SYSTEM32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\System32\cisvc.exe D:\WINDOWS\System32\nvsvc32.exe D:\WINDOWS\System32\oodag.exe D:\WINDOWS\System32\svchost.exe D:\Tlen.pl\tlen.exe D:\WINDOWS\System32\cidaemon.exe D:\WINDOWS\explorer.exe D:\Tweak-XP Pro 4\tweak-xp.exe D:\WINDOWS\TEMP\idd5F6A.tmp.exe D:\PROGRA~1\MOZILL~1\FIREFOX.EXE e:\FREEDO~1\fdm.exe D:\DOCUME~1\User\USTAWI~1\Temp\Rar$EX01.782\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.accoona.com/search_assistant … 400055utm _content=leftnavutm_source=wdz3utm_medium=bundutm_campaign=wdz0805 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.accoona.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://prosearching.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = prosearching.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchmyrequest.com/sp.php R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://searchmyrequest.com/sp.php R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.accoona.com/search?q=%s R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = prosearching.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com F3 - REG:win.ini: load=c:\YDPDict\watch.exe F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\PROGRA~1\FlashGet\jccatch.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\BitComet\tools\BitCometBHO.dll O2 - BHO: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - D:\PROGRA~1\MINICL~1\MINICL~1.DLL O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - e:\Free Download Manager\iefdmcks.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll O3 - Toolbar: Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - D:\PROGRA~1\MINICL~1\MINICL~1.DLL O4 - HKLM…\Run: [NetPanel] “D:\Program Files\NetPanel\Starter.exe” /path=“D:\Program Files\NetPanel” O4 - HKLM…\Run: [explorer] D:\WINDOWS\System32\explorer.exe O4 - HKLM…\Run: [MULTIMEDIA KEYBOARD] D:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe O4 - HKLM…\RunServices: [WINRUN] taskgmr.exe O4 - HKLM…\RunOnce: [AAW] “D:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe” “+b1” O4 - HKCU…\Run: [Komunikator] D:\Tlen.pl\tlen.exe O4 - HKCU…\RunOnce: [FFTI] D:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\ugqesii8.default\extensions{B13721C7-F507-4982-B2E5-502A71474FED} \ffti.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /DestPath=“D:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles/ugqesii8.default\extensions{B13721C7-F507-4982-B2E5-502A71474FED}” O4 - Startup: .protected O4 - Global Startup: .protected O8 - Extra context menu item: Download All by FlashGet - D:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Download all links using BitComet - res://C:\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Download all videos using BitComet - res://C:\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Download all with Free Download Manager - file://e:\Free Download Manager\dlall.htm O8 - Extra context menu item: Download link using BitComet - res://C:\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: Download selected with Free Download Manager - file://e:\Free Download Manager\dlselected.htm O8 - Extra context menu item: Download using FlashGet - D:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Download with Free Download Manager - file://e:\Free Download Manager\dllink.htm O8 - Extra context menu item: Eksport do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\ICQLite\ICQLite.exe O9 - Extra ‘Tools’ menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\ICQLite\ICQLite.exe O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe O9 - Extra ‘Tools’ menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe O12 - Plugin for .pdf: D:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/Media … e-c403.cab O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip.com/puzzlepirates/m … Loader.dll O16 - DPF: {65D72393-E210-4A2A-B8E0-10AC45986770} - http://megapanel.gem.pl/WebInstaller.dll O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/YazzleAc … refid=1162 O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://212.239.40.78/cdo/pl/game.exe O17 - HKLM\System\CCS\Services\Tcpip…{0FDFE9FC-0E65-4743-A124-3FE61ED878B0}: NameServer = 62.233.223.3,62.233.223.10 O20 - Winlogon Notify: winbme32 - D:\WINDOWS\SYSTEM32\winbme32.dll O20 - Winlogon Notify: winzzd32 - winzzd32.dll (file missing) O20 - Winlogon Notify: wudb - D:\WINDOWS\System32\wudb.dll O23 - Service: avast! Antivirus - Unknown owner - D:\Antywirus\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - D:\Antywirus\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - D:\Antywirus\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe O23 - Service: OO Defrag - OO Software GmbH - D:\WINDOWS\System32\oodag.exe O23 - Service: Pml Driver HPZ12 - HP - D:\WINDOWS\System32\HPZipm12.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - D:\Program Files\CyberLink\Shared Files\RichVideo.exe

Aha, ten RichVideo, to też nie wiem co jest

I drugi:

“Silent Runners.vbs”, revision R50, http://www.silentrunners.org/ Operating System: Windows XP Output limited to non-default values, except where indicated by “{++}” Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} “Komunikator” = “D:\Tlen.pl\tlen.exe” [“o2.pl Sp. z o.o.”] HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\ {++} “FFTI” = “D:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\ugqesii8.default\extensions{B13721C7-F507-4982-B2E5-502A71474FED}\ffti.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /DestPath=“D:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles/ugqesii8.default\extensions{B13721C7-F507-4982-B2E5-502A71474FED}”” [" "] HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++} “NetPanel” = ““D:\Program Files\NetPanel\Starter.exe” /path=“D:\Program Files\NetPanel”” [null data] “explorer” = “D:\WINDOWS\System32\explorer.exe” [null data] “MULTIMEDIA KEYBOARD” = “D:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe” [“Netropa Corp.”] HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\ {++} “AAW” = "“D:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe” “+b1"” [“Lavasoft Sweden”] HKLM\Software\Microsoft\Active Setup\Installed Components\ {ACC563BC-4266-43f0-B6ED-9D38C4202C7E}(Default) = “Dostęp do programu Internet Explorer” \StubPath = “rundll32 iesetup.dll,IEAccessUserInst” [MS] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {2F364306-AA45-47B5-9F9D-39A8B94E7EF7}(Default) = (no title provided) - {HKLM…CLSID} = “IeCatch5 Class” \InProcServer32(Default) = “D:\PROGRA~1\FlashGet\jccatch.dll” [“FlashGet”] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}(Default) = “BitComet ClickCapture” - {HKLM…CLSID} = “BitComet Helper” \InProcServer32(Default) = “C:\BitComet\tools\BitCometBHO.dll” [“BitComet”] {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D}(Default) = (no title provided) - {HKLM…CLSID} = “Miniclip” \InProcServer32(Default) = “D:\PROGRA~1\MINICL~1\MINICL~1.DLL” [empty string] {53707962-6F74-2D53-2644-206D7942484F}(Default) = (no title provided) - {HKLM…CLSID} = (no title provided) \InProcServer32(Default) = “D:\PROGRA~1\SPYBOT~1\SDHelper.dll” [“Safer Networking Limited”] {CC59E0F9-7E43-44FA-9FAA-8377850BF205}(Default) = (no title provided) - {HKLM…CLSID} = “FDMIECookiesBHO Class” \InProcServer32(Default) = “e:\Free Download Manager\iefdmcks.dll” [null data]

Hmmmm, ikonka się sama wyłączyła, ale może warto to sprawdzić, coby się nie włączyła znowu ; ) I co zrobić z tym RichVideo?

adam9870 · 3 Maj 2007 19:14

Nie trzymaj hijacka w TEMPie lub innym katalogu tymczasowym. Umieść go np. na pulpicie.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.accoona.com/search_assistant … 400055&utm _content=leftnav&utm_source=wdz3&utm_medium=bund&utm_campaign=wdz0805 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.accoona.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://prosearching.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = prosearching.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchmyrequest.com/sp.php R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://searchmyrequest.com/sp.php R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.accoona.com/search?q=%s R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = prosearching.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com F2 - REG:system.ini: UserInit=userinit.exe O4 - HKLM…\Run: [explorer] D:\WINDOWS\System32\explorer.exe O4 - HKLM…\RunServices: [WINRUN] taskgmr.exe O4 - HKCU…\RunOnce: [FFTI] D:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\ugqesii8.default\extensions{B13721C7-F507-4982-B2E5-502A71474FED} \ffti.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /DestPath=“D:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles/ugqesii8.default\extensions{B13721C7-F507-4982-B2E5-502A71474FED}” O4 - Startup: .protected O4 - Global Startup: .protected O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/Media … e-c403.cab O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/YazzleAc … refid=1162 O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://212.239.40.78/cdo/pl/game.exe O20 - Winlogon Notify: winbme32 - D:\WINDOWS\SYSTEM32\winbme32.dll O20 - Winlogon Notify: winzzd32 - winzzd32.dll (file missing) O20 - Winlogon Notify: wudb - D:\WINDOWS\System32\wudb.dll

Pliki usuń ręcznie w trybie awaryjnym natomiast wpisy HijackThis.

Użyj narzędzia SmitFraudFix z opcji numer 2 w trybie awaryjnym.

Miniclip Toolbar nie został uznany jako szkodliwy, ale jest uznawany za toolbar wątpliwej reputacji. Decyzję o jego usunięciu pozostawiam Tobie.

Po wykonaniu pokaż nowy log z HijackThis, SilentRunners oraz zawartość pliku c:\rapport.txt

Araiser · 5 Maj 2007 17:12

Dzięki za odpisanie

SmitFraudFix v2.174 Scan done at 18:55:41,35, 2007-05-05 Run from E:\SmitfraudFix OS: Microsoft Windows XP [Wersja 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in safe mode »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix !Attention, following keys are not inevitably infected! SrchSTS.exe by S!Ri Search SharedTaskScheduler’s .dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] “{716002db-288c-4bf0-80cd-a467e78d8b55}”=“depreciable” [HKEY_CLASSES_ROOT\CLSID{716002db-288c-4bf0-80cd-a467e78d8b55}\InProcServer32] @=“D:\WINDOWS\System32\dxovx.dll” [HKEY_LOCAL_MACHINE\Software\Classes\CLSID{716002db-288c-4bf0-80cd-a467e78d8b55}\InProcServer32] @=“D:\WINDOWS\System32\dxovx.dll” »»»»»»»»»»»»»»»»»»»»»»»» Killing process »»»»»»»»»»»»»»»»»»»»»»»» hosts 127.0.0.1 localhost »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix GenericRenosFix by S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files D:\WINDOWS.protected Deleted D:\WINDOWS\system32\winstyle3.dll Deleted D:\DOCUME~1\User\MENUST~1\Programy\AUTOST~1.protected Deleted D:\DOCUME~1\ALLUSE~1\MENUST~1\Online Security Guide.url Deleted D:\DOCUME~1\ALLUSE~1\MENUST~1\Security Troubleshooting.url Deleted D:\DOCUME~1\ALLUSE~1\MENUST~1\Programy\AUTOST~1.protected Deleted D:\DOCUME~1\ALLUSE~1\Pulpit\Online Security Guide.url Deleted D:\DOCUME~1\ALLUSE~1\Pulpit\Security Troubleshooting.url Deleted D:\DOCUME~1\User\Ulubione\Online Security Test.url Deleted »»»»»»»»»»»»»»»»»»»»»»»» DNS HKLM\SYSTEM\CCS\Services\Tcpip…{0FDFE9FC-0E65-4743-A124-3FE61ED878B0}: NameServer=62.233.223.3,62.233.223.10 HKLM\SYSTEM\CCS\Services\Tcpip…{89CCB1B9-FA22-4D0A-98A7-AC3DBDB7846D}: DhcpNameServer=217.172.224.92 89.228.7.226 HKLM\SYSTEM\CS2\Services\Tcpip…{0FDFE9FC-0E65-4743-A124-3FE61ED878B0}: NameServer=62.233.223.3,62.233.223.10 HKLM\SYSTEM\CS2\Services\Tcpip…{89CCB1B9-FA22-4D0A-98A7-AC3DBDB7846D}: DhcpNameServer=217.172.224.92 89.228.7.226 HKLM\SYSTEM\CS3\Services\Tcpip…{0FDFE9FC-0E65-4743-A124-3FE61ED878B0}: NameServer=62.233.223.3,62.233.223.10 HKLM\SYSTEM\CS3\Services\Tcpip…{89CCB1B9-FA22-4D0A-98A7-AC3DBDB7846D}: DhcpNameServer=217.172.224.92 89.228.7.226 HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=217.172.224.92 89.228.7.226 HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=217.172.224.92 89.228.7.226 HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=217.172.224.92 89.228.7.226 »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System !Attention, following keys are not inevitably infected! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] “System”="" »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning Registry Cleaning done. »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix !Attention, following keys are not inevitably infected! SrchSTS.exe by S!Ri Search SharedTaskScheduler’s .dll »»»»»»»»»»»»»»»»»»»»»»»» End Logfile of HijackThis v1.99.1 Scan saved at 18:57:40, on 2007-05-05 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\SYSTEM32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\Program Files\Mozilla Firefox\firefox.exe D:\WINDOWS\explorer.exe E:\HijackThis.exe F3 - REG:win.ini: load=c:\YDPDict\watch.exe O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\PROGRA~1\FlashGet\jccatch.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\BitComet\tools\BitCometBHO.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {6BB1FD17-6280-1D50-F24E-6BE336E1AECC} - D:\WINDOWS\System32\yaslebc.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - e:\Free Download Manager\iefdmcks.dll O2 - BHO: IEHlprObj Class - {CE7C3CF0-4B15-11D1-ABED-709549C10000} - D:\Program Files\NetPanel\IEHelper.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll O3 - Toolbar: Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx O4 - HKLM…\Run: [NetPanel] “D:\Program Files\NetPanel\Starter.exe” /path=“D:\Program Files\NetPanel” O4 - HKLM…\Run: [MULTIMEDIA KEYBOARD] D:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKCU…\Run: [Komunikator] D:\Tlen.pl\tlen.exe O4 - HKCU…\Run: [Dtrr] “D:\PROGRA~1\COMMON~1\FNTS~1\taskmgr.exe” -vt yazb O4 - HKCU…\Run: [Zscwojs] “D:\Documents and Settings\User\Moje dokumenty??sembly\n?tepad.exe” O4 - HKCU…\RunOnce: [iCQ Lite] D:\ICQLite\ICQLite.exe -trayboot O8 - Extra context menu item: Download All by FlashGet - D:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Download all links using BitComet - res://C:\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Download all videos using BitComet - res://C:\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Download all with Free Download Manager - file://e:\Free Download Manager\dlall.htm O8 - Extra context menu item: Download link using BitComet - res://C:\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: Download selected with Free Download Manager - file://e:\Free Download Manager\dlselected.htm O8 - Extra context menu item: Download using FlashGet - D:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Download with Free Download Manager - file://e:\Free Download Manager\dllink.htm O8 - Extra context menu item: Eksport do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\ICQLite\ICQLite.exe O9 - Extra ‘Tools’ menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\ICQLite\ICQLite.exe O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe O9 - Extra ‘Tools’ menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe O12 - Plugin for .pdf: D:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip.com/puzzlepirates/m … Loader.dll O16 - DPF: {65D72393-E210-4A2A-B8E0-10AC45986770} - http://megapanel.gem.pl/WebInstaller.dll O17 - HKLM\System\CCS\Services\Tcpip…{0FDFE9FC-0E65-4743-A124-3FE61ED878B0}: NameServer = 62.233.223.3,62.233.223.10 O17 - HKLM\System\CS2\Services\Tcpip…{0FDFE9FC-0E65-4743-A124-3FE61ED878B0}: NameServer = 62.233.223.3,62.233.223.10 O17 - HKLM\System\CS3\Services\Tcpip…{0FDFE9FC-0E65-4743-A124-3FE61ED878B0}: NameServer = 62.233.223.3,62.233.223.10 O17 - HKLM\System\CS4\Services\Tcpip…{0FDFE9FC-0E65-4743-A124-3FE61ED878B0}: NameServer = 62.233.223.3,62.233.223.10 O23 - Service: avast! Antivirus - Unknown owner - D:\Antywirus\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - D:\Antywirus\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - D:\Antywirus\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe O23 - Service: OO Defrag - OO Software GmbH - D:\WINDOWS\System32\oodag.exe O23 - Service: Pml Driver HPZ12 - HP - D:\WINDOWS\System32\HPZipm12.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - D:\Program Files\CyberLink\Shared Files\RichVideo.exe “Silent Runners.vbs”, revision R50, http://www.silentrunners.org/ Operating System: Windows XP Output limited to non-default values, except where indicated by “{++}” Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} “Komunikator” = “D:\Tlen.pl\tlen.exe” [“o2.pl Sp. z o.o.”] “Dtrr” = ““D:\PROGRA~1\COMMON~1\FNTS~1\taskmgr.exe” -vt yazb” [null data] “Zscwojs” = ““D:\Documents and Settings\User\Moje dokumenty**sembly\n*tepad.exe”” (unwritable string) [null data] HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\ {++} “ICQ Lite” = “D:\ICQLite\ICQLite.exe -trayboot” [“ICQ Ltd.”] HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++} “NetPanel” = ““D:\Program Files\NetPanel\Starter.exe” /path=“D:\Program Files\NetPanel”” [null data] “MULTIMEDIA KEYBOARD” = “D:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe” [“Netropa Corp.”] “NvCplDaemon” = “RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup” [MS] HKLM\Software\Microsoft\Active Setup\Installed Components\ {ACC563BC-4266-43f0-B6ED-9D38C4202C7E}(Default) = “Dostęp do programu Internet Explorer” \StubPath = “rundll32 iesetup.dll,IEAccessUserInst” [MS] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {2F364306-AA45-47B5-9F9D-39A8B94E7EF7}(Default) = (no title provided) - {HKLM…CLSID} = “IeCatch5 Class” \InProcServer32(Default) = “D:\PROGRA~1\FlashGet\jccatch.dll” [“FlashGet”] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}(Default) = “BitComet ClickCapture” - {HKLM…CLSID} = “BitComet Helper” \InProcServer32(Default) = “C:\BitComet\tools\BitCometBHO.dll” [“BitComet”] {53707962-6F74-2D53-2644-206D7942484F}(Default) = (no title provided) - {HKLM…CLSID} = (no title provided) \InProcServer32(Default) = “D:\PROGRA~1\SPYBOT~1\SDHelper.dll” [“Safer Networking Limited”] {6BB1FD17-6280-1D50-F24E-6BE336E1AECC}(Default) = (no title provided) - {HKLM…CLSID} = (no title provided) \InProcServer32(Default) = “D:\WINDOWS\System32\yaslebc.dll” [null data] {CC59E0F9-7E43-44FA-9FAA-8377850BF205}(Default) = (no title provided) - {HKLM…CLSID} = “FDMIECookiesBHO Class” \InProcServer32(Default) = “e:\Free Download Manager\iefdmcks.dll” [null data] {CE7C3CF0-4B15-11D1-ABED-709549C10000}(Default) = (no title provided) - {HKLM…CLSID} = “IEHlprObj Class” \InProcServer32(Default) = “D:\Program Files\NetPanel\IEHelper.dll” [null data] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ “{88895560-9AA2-1069-930E-00AA0030EBC8}” = “Rozszerzenie ikony HyperTerminalu” - {HKLM…CLSID} = “HyperTerminal Icon Ext” \InProcServer32(Default) = “D:\WINDOWS\System32\hticons.dll” [“Hilgraeve, Inc.”] Mam jeszcze jedno pytanie; mianowicie przy starcie systemu wyskakuje mi jakieś okienko, że (nie pamiętam teraz jak to dokładnie brzmi) jest jakiś problem z autoexec.nt (chyba nt ) w windows/system32, mozna cos z tym zrobic?

adam9870 · 5 Maj 2007 19:55

Ściągnij program KillBox, zaznaczasz Delete on reboot , w polu full path of file wklej ścieżkę:

D:\WINDOWS\System32\yaslebc.dll

Kliknij czerwonego iksa i reset.

Plik i folder zaznaczony na czerwono usuń ręcznie w trybie awaryjnym natomiast wpisy HijackThis.

Poczytaj o usuwaniu plików i folderów z pytajnikiem - Usuwanie PurityScan.

Wrzuć log z ComboFix. Aby zrobić w nim log należy go uruchomić => nacisnąć klawisz Y => czekać cierpliwie i log powinien być w formie pliku .txt o nazwie combofix na partycji C.

Araiser · 6 Maj 2007 15:33

Nie znalazło mi żadnych plików z pytajnikami, a tutaj widzę, że dalej jest ten plik co miałem go usunąć.

ComboFix 07-04-25.4V - Running from: “e:\Free Download Manager” /wow section - STAGE #3 (((((((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) D:\Program Files\outerinfo\Terms.rtf D:\windows\system32\explorer.exe D:\WINDOWS\hosts D:\Program Files\outerinfo ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Folders Quarantined: D:\qoobox\purity\D\DOCUME~1 D:\qoobox\purity\D\DOCUME~1\User D:\qoobox\purity\D\DOCUME~1\User\DANEAP~1 D:\qoobox\purity\D\DOCUME~1\User\MOJEDO~1 D:\qoobox\purity\D\DOCUME~1\User\DANEAP~1\CROSOF~1 D:\qoobox\purity\D\DOCUME~1\User\DANEAP~1\ECURIT~1 D:\qoobox\purity\D\DOCUME~1\User\DANEAP~1\FNTS~1 D:\qoobox\purity\D\DOCUME~1\User\DANEAP~1\MCROSO~1.NET D:\qoobox\purity\D\DOCUME~1\User\DANEAP~1\SSEMBL~1 D:\qoobox\purity\D\DOCUME~1\User\DANEAP~1\STEM~1 D:\qoobox\purity\D\DOCUME~1\User\MOJEDO~1\CROSOF~1 D:\qoobox\purity\D\DOCUME~1\User\MOJEDO~1\ECURIT~1 D:\qoobox\purity\D\DOCUME~1\User\MOJEDO~1\RACLE~1 D:\qoobox\purity\D\DOCUME~1\User\MOJEDO~1\SEMBLY~1 D:\qoobox\purity\D\DOCUME~1\User\MOJEDO~1\SEMBLY~1\n?tepad.exe D:\qoobox\purity\D\Program Files\ASKS~1 D:\qoobox\purity\D\Program Files\CROSOF~1.NET D:\qoobox\purity\D\Program Files\FNTS~1 D:\qoobox\purity\D\Program Files\STEM~1 D:\qoobox\purity\D\Program Files\Common Files\FNTS~1 D:\qoobox\purity\D\Program Files\Common Files\TSKS~1 D:\qoobox\purity\D\WINDOWS\DOBE~1 D:\qoobox\purity\D\WINDOWS\system32\APPATC~1 D:\qoobox\purity\D\WINDOWS\system32\ASKS~1 D:\qoobox\purity\D\WINDOWS\system32\SSEMBL~1 D:\qoobox\purity\D\WINDOWS\system32\WNSXS~1 ((((((((((((((((((((((((((((((( Files Created from 2007-04-06 to 2007-05-06 )))))))))))))))))))))))))))))))))) 2007-05-06 16:08 71,680 --a------ D:\WINDOWS\g2876656.exe 2007-05-06 15:47 71,680 --a------ D:\WINDOWS\g1621515.exe 2007-05-06 15:27 71,680 --a------ D:\WINDOWS\g421609.exe 2007-05-06 00:36 71,680 --a------ D:\WINDOWS\g19919937.exe 2007-05-06 00:16 71,680 --a------ D:\WINDOWS\g18727203.exe 2007-05-05 23:56 71,680 --a------ D:\WINDOWS\g17512500.exe 2007-05-05 23:36 71,680 --a------ D:\WINDOWS\g16303828.exe 2007-05-05 22:56 71,680 --a------ D:\WINDOWS\g13893968.exe 2007-05-05 22:15 71,680 --a------ D:\WINDOWS\g11472921.exe 2007-05-05 22:01 2007-05-05 21:53 71,680 --a------ D:\WINDOWS\g10140250.exe 2007-05-05 21:33 71,680 --a------ D:\WINDOWS\g8930375.exe 2007-05-05 21:13 71,680 --a------ D:\WINDOWS\g7718203.exe 2007-05-05 20:53 71,680 --a------ D:\WINDOWS\g6517031.exe 2007-05-05 20:32 71,680 --a------ D:\WINDOWS\g5287062.exe 2007-05-05 20:10 71,680 --a------ D:\WINDOWS\g3969000.exe 2007-05-05 19:50 71,680 --a------ D:\WINDOWS\g2761312.exe 2007-05-05 19:30 71,680 --a------ D:\WINDOWS\g1564531.exe 2007-05-05 19:10 71,680 --a------ D:\WINDOWS\g361359.exe 2007-05-05 18:55 53,248 --a------ D:\WINDOWS\system32\Process.exe 2007-05-05 18:55 51,200 --a------ D:\WINDOWS\system32\dumphive.exe 2007-05-05 18:55 288,417 --a------ D:\WINDOWS\system32\SrchSTS.exe 2007-05-05 18:55 1,604 --a------ D:\WINDOWS\system32\tmp.reg 2007-05-05 18:38 71,680 --a------ D:\WINDOWS\g7987312.exe 2007-05-05 18:18 71,680 --a------ D:\WINDOWS\g6775140.exe 2007-05-05 17:58 71,680 --a------ D:\WINDOWS\g5570343.exe 2007-05-05 17:37 71,680 --a------ D:\WINDOWS\g4367359.exe 2007-05-05 17:17 71,680 --a------ D:\WINDOWS\g3153562.exe 2007-05-05 16:57 71,680 --a------ D:\WINDOWS\g1951796.exe 2007-05-05 16:37 71,680 --a------ D:\WINDOWS\g737421.exe 2007-05-05 03:13 71,680 --a------ D:\WINDOWS\g1811218.exe 2007-05-05 02:53 71,680 --a------ D:\WINDOWS\g591984.exe 2007-05-04 19:09 71,680 --a------ D:\WINDOWS\g6516312.exe 2007-05-04 18:49 71,680 --a------ D:\WINDOWS\g5311078.exe 2007-05-04 18:29 71,680 --a------ D:\WINDOWS\g4108093.exe 2007-05-04 18:09 71,680 --a------ D:\WINDOWS\g2909484.exe 2007-05-04 17:49 71,680 --a------ D:\WINDOWS\g1706781.exe 2007-05-04 17:29 71,680 --a------ D:\WINDOWS\g513468.exe 2007-05-03 16:03 71,680 --a------ D:\WINDOWS\g5426984.exe 2007-05-03 15:43 71,680 --a------ D:\WINDOWS\g4196968.exe 2007-05-03 15:30 347,253 --a------ D:\Silent Runners.vbs 2007-05-03 14:16 71,680 --a------ D:\WINDOWS\g1386765.exe 2007-05-02 23:37 71,680 --a------ D:\WINDOWS\g39946046.exe 2007-05-02 23:15 71,680 --a------ D:\WINDOWS\g38620921.exe 2007-05-02 20:47 71,680 --a------ D:\WINDOWS\g29719406.exe 2007-05-02 20:09 2007-05-02 19:25 71,680 --a------ D:\WINDOWS\g24800265.exe 2007-05-02 19:05 71,680 --a------ D:\WINDOWS\g23599125.exe 2007-05-02 17:45 71,680 --a------ D:\WINDOWS\g18797218.exe 2007-05-02 17:25 71,680 --a------ D:\WINDOWS\g17597093.exe 2007-05-02 16:05 71,680 --a------ D:\WINDOWS\g12774937.exe 2007-05-02 15:45 71,680 --a------ D:\WINDOWS\g11571343.exe 2007-05-02 14:24 71,680 --a------ D:\WINDOWS\g6767609.exe 2007-05-02 14:05 71,680 --a------ D:\WINDOWS\g5570140.exe 2007-05-02 13:48 2007-05-02 12:44 71,680 --a------ D:\WINDOWS\g753218.exe 2007-05-02 00:06 71,680 --a------ D:\WINDOWS\g5212734.exe 2007-05-01 23:45 71,680 --a------ D:\WINDOWS\g4002953.exe 2007-05-01 17:35 146,432 —hs---- D:\Program Files\Common Files\Yazzle1162OinAdmin.exe 2007-05-01 14:46 4,469,078 --a------ D:\IPChanger20Eng.exe 2007-05-01 14:00 2007-05-01 14:00 2007-05-01 13:59 813,947 --a------ D:\hideippla.exe 2007-05-01 13:51 71,680 --a------ D:\WINDOWS\g12823203.exe 2007-05-01 13:31 71,680 --a------ D:\WINDOWS\g11626765.exe 2007-05-01 13:11 71,680 --a------ D:\WINDOWS\g10425421.exe 2007-05-01 12:51 71,680 --a------ D:\WINDOWS\g9229671.exe 2007-05-01 12:31 71,680 --a------ D:\WINDOWS\g8022437.exe 2007-05-01 12:11 71,680 --a------ D:\WINDOWS\g6825125.exe 2007-05-01 11:51 71,680 --a------ D:\WINDOWS\g5621578.exe 2007-05-01 11:31 71,680 --a------ D:\WINDOWS\g4415859.exe 2007-05-01 11:11 71,680 --a------ D:\WINDOWS\g3213687.exe 2007-05-01 10:51 71,680 --a------ D:\WINDOWS\g2012890.exe 2007-05-01 10:29 71,680 --a------ D:\WINDOWS\g684078.exe 2007-05-01 00:58 71,680 --a------ D:\WINDOWS\g35300468.exe 2007-05-01 00:38 71,680 --a------ D:\WINDOWS\g34094484.exe 2007-05-01 00:18 71,680 --a------ D:\WINDOWS\g32896421.exe 2007-04-30 23:58 71,680 --a------ D:\WINDOWS\g31689734.exe 2007-04-30 23:36 71,680 --a------ D:\WINDOWS\g30361578.exe 2007-04-30 23:16 71,680 --a------ D:\WINDOWS\g29162593.exe 2007-04-30 22:53 71,680 --a------ D:\WINDOWS\g27837046.exe 2007-04-30 22:31 71,680 --a------ D:\WINDOWS\g26517281.exe 2007-04-30 22:12 71,680 --a------ D:\WINDOWS\g25316953.exe 2007-04-30 21:51 71,680 --a------ D:\WINDOWS\g24116546.exe 2007-04-30 21:31 71,680 --a------ D:\WINDOWS\g22909265.exe 2007-04-30 21:11 71,680 --a------ D:\WINDOWS\g21706484.exe 2007-04-30 20:51 71,680 --a------ D:\WINDOWS\g20506250.exe 2007-04-30 20:32 71,680 --a------ D:\WINDOWS\g19317906.exe 2007-04-30 20:11 71,680 --a------ D:\WINDOWS\g18098921.exe 2007-04-30 19:51 71,680 --a------ D:\WINDOWS\g16912625.exe 2007-04-30 19:31 71,680 --a------ D:\WINDOWS\g15704515.exe 2007-04-30 19:11 71,680 --a------ D:\WINDOWS\g14492875.exe 2007-04-30 18:51 71,680 --a------ D:\WINDOWS\g13271937.exe 2007-04-30 18:30 71,680 --a------ D:\WINDOWS\g12056734.exe 2007-04-30 18:09 71,680 --a------ D:\WINDOWS\g10739843.exe 2007-04-30 17:47 71,680 --a------ D:\WINDOWS\g9420203.exe 2007-04-30 17:24 71,680 --a------ D:\WINDOWS\g8096187.exe 2007-04-30 17:04 71,680 --a------ D:\WINDOWS\g6896921.exe 2007-04-30 16:42 71,680 --a------ D:\WINDOWS\g5570953.exe 2007-04-30 16:22 71,680 --a------ D:\WINDOWS\g4376031.exe 2007-04-30 16:00 71,680 --a------ D:\WINDOWS\g3053125.exe 2007-04-30 15:40 71,680 --a------ D:\WINDOWS\g1851953.exe 2007-04-30 15:19 71,680 --a------ D:\WINDOWS\g529078.exe 2007-04-30 06:09 71,680 --a------ D:\WINDOWS\g1753218.exe 2007-04-30 05:49 71,680 --a------ D:\WINDOWS\g551968.exe 2007-04-29 21:44 71,680 --a------ D:\WINDOWS\g43273671.exe 2007-04-29 21:24 71,680 --a------ D:\WINDOWS\g42065531.exe 2007-04-29 21:04 71,680 --a------ D:\WINDOWS\g40865968.exe 2007-04-29 20:44 71,680 --a------ D:\WINDOWS\g39663218.exe 2007-04-29 20:22 71,680 --a------ D:\WINDOWS\g38349296.exe 2007-04-29 20:02 71,680 --a------ D:\WINDOWS\g37153015.exe 2007-04-29 19:42 71,680 --a------ D:\WINDOWS\g35938859.exe 2007-04-29 19:20 71,680 --a------ D:\WINDOWS\g34615578.exe 2007-04-29 19:00 71,680 --a------ D:\WINDOWS\g33421171.exe 2007-04-29 18:40 71,680 --a------ D:\WINDOWS\g32218843.exe 2007-04-29 18:20 71,680 --a------ D:\WINDOWS\g31018656.exe 2007-04-29 18:00 71,680 --a------ D:\WINDOWS\g29816312.exe 2007-04-29 17:40 71,680 --a------ D:\WINDOWS\g28617609.exe 2007-04-29 17:20 71,680 --a------ D:\WINDOWS\g27417781.exe 2007-04-29 17:00 71,680 --a------ D:\WINDOWS\g26211062.exe 2007-04-29 16:39 71,680 --a------ D:\WINDOWS\g25004234.exe 2007-04-29 16:19 71,680 --a------ D:\WINDOWS\g23802296.exe 2007-04-29 15:59 71,680 --a------ D:\WINDOWS\g22597015.exe 2007-04-29 15:19 71,680 --a------ D:\WINDOWS\g20201671.exe 2007-04-29 14:59 71,680 --a------ D:\WINDOWS\g18984140.exe 2007-04-29 14:39 71,680 --a------ D:\WINDOWS\g17781593.exe 2007-04-29 14:17 71,680 --a------ D:\WINDOWS\g16451703.exe 2007-04-29 13:55 71,680 --a------ D:\WINDOWS\g15129890.exe 2007-04-29 13:35 71,680 --a------ D:\WINDOWS\g13928531.exe 2007-04-29 13:15 71,680 --a------ D:\WINDOWS\g12723796.exe 2007-04-29 12:55 71,680 --a------ D:\WINDOWS\g11527437.exe 2007-04-29 12:35 71,680 --a------ D:\WINDOWS\g10329843.exe 2007-04-29 12:15 71,680 --a------ D:\WINDOWS\g9111375.exe 2007-04-29 11:52 71,680 --a------ D:\WINDOWS\g7787328.exe 2007-04-29 11:32 71,680 --a------ D:\WINDOWS\g6588125.exe 2007-04-29 11:12 71,680 --a------ D:\WINDOWS\g5366546.exe 2007-04-29 10:50 71,680 --a------ D:\WINDOWS\g4044218.exe 2007-04-29 10:30 71,680 --a------ D:\WINDOWS\g2847531.exe 2007-04-29 10:17 20,942,920 --a------ D:\SkypeSetup.exe 2007-04-29 10:10 71,680 --a------ D:\WINDOWS\g1650468.exe 2007-04-29 09:50 71,680 --a------ D:\WINDOWS\g447875.exe 2007-04-29 02:56 71,680 --a------ D:\WINDOWS\g42045640.exe 2007-04-29 02:36 71,680 --a------ D:\WINDOWS\g40844312.exe 2007-04-29 02:16 71,680 --a------ D:\WINDOWS\g39643500.exe 2007-04-29 01:56 71,680 --a------ D:\WINDOWS\g38453265.exe 2007-04-29 01:36 71,680 --a------ D:\WINDOWS\g37237437.exe 2007-04-29 01:16 71,680 --a------ D:\WINDOWS\g36035468.exe 2007-04-29 00:56 71,680 --a------ D:\WINDOWS\g34833406.exe 2007-04-29 00:36 71,680 --a------ D:\WINDOWS\g33628437.exe 2007-04-29 00:14 71,680 --a------ D:\WINDOWS\g32309390.exe 2007-04-28 23:54 71,680 --a------ D:\WINDOWS\g31119968.exe 2007-04-28 23:34 71,680 --a------ D:\WINDOWS\g29908984.exe 2007-04-28 23:13 71,680 --a------ D:\WINDOWS\g28695312.exe 2007-04-28 22:53 71,680 --a------ D:\WINDOWS\g27493187.exe 2007-04-28 22:33 71,680 --a------ D:\WINDOWS\g26288531.exe 2007-04-28 22:24 2007-04-28 22:21 2007-04-28 22:14 8,023,276 --a------ D:\konnekt_setup_0.6.22.137.exe 2007-04-28 22:13 71,680 --a------ D:\WINDOWS\g25086203.exe 2007-04-28 21:53 71,680 --a------ D:\WINDOWS\g23877437.exe 2007-04-28 21:33 71,680 --a------ D:\WINDOWS\g22673390.exe 2007-04-28 21:11 71,680 --a------ D:\WINDOWS\g21347546.exe 2007-04-28 20:51 71,680 --a------ D:\WINDOWS\g20152078.exe 2007-04-28 20:29 71,680 --a------ D:\WINDOWS\g18828156.exe 2007-04-28 20:09 71,680 --a------ D:\WINDOWS\g17632781.exe 2007-04-28 19:49 71,680 --a------ D:\WINDOWS\g16429734.exe 2007-04-28 19:29 71,680 --a------ D:\WINDOWS\g15220531.exe 2007-04-28 19:09 71,680 --a------ D:\WINDOWS\g14049656.exe 2007-04-28 18:48 71,680 --a------ D:\WINDOWS\g12780421.exe 2007-04-28 18:26 71,680 --a------ D:\WINDOWS\g11449984.exe 2007-04-28 18:06 71,680 --a------ D:\WINDOWS\g10253421.exe 2007-04-28 18:02 2007-04-28 17:47 71,680 --a------ D:\WINDOWS\g9056406.exe 2007-04-28 17:26 71,680 --a------ D:\WINDOWS\g7843781.exe 2007-04-28 17:06 71,680 --a------ D:\WINDOWS\g6655359.exe 2007-04-28 16:46 71,680 --a------ D:\WINDOWS\g5417765.exe 2007-04-28 16:06 71,680 --a------ D:\WINDOWS\g3013109.exe 2007-04-28 15:45 71,680 --a------ D:\WINDOWS\g1807500.exe 2007-04-28 09:11 71,680 --a------ D:\WINDOWS\g1738125.exe 2007-04-28 08:51 71,680 --a------ D:\WINDOWS\g557062.exe 2007-04-28 00:12 71,680 --a------ D:\WINDOWS\g38441828.exe 2007-04-27 23:50 71,680 --a------ D:\WINDOWS\g37117062.exe 2007-04-27 23:30 71,680 --a------ D:\WINDOWS\g35921406.exe 2007-04-27 23:10 71,680 --a------ D:\WINDOWS\g34716921.exe 2007-04-27 22:48 71,680 --a------ D:\WINDOWS\g33393062.exe 2007-04-27 22:28 71,680 --a------ D:\WINDOWS\g32191890.exe 2007-04-27 22:08 71,680 --a------ D:\WINDOWS\g30991203.exe 2007-04-27 21:46 71,680 --a------ D:\WINDOWS\g29668250.exe 2007-04-27 21:26 71,680 --a------ D:\WINDOWS\g28467593.exe 2007-04-27 21:04 71,680 --a------ D:\WINDOWS\g27146593.exe 2007-04-27 20:42 71,680 --a------ D:\WINDOWS\g25826328.exe 2007-04-27 20:22 71,680 --a------ D:\WINDOWS\g24630421.exe 2007-04-27 20:00 71,680 --a------ D:\WINDOWS\g23305796.exe 2007-04-27 19:38 71,680 --a------ D:\WINDOWS\g21985750.exe 2007-04-27 19:16 71,680 --a------ D:\WINDOWS\g20669781.exe 2007-04-27 18:56 71,680 --a------ D:\WINDOWS\g19469218.exe 2007-04-27 18:34 71,680 --a------ D:\WINDOWS\g18139031.exe 2007-04-27 18:12 71,680 --a------ D:\WINDOWS\g16819187.exe 2007-04-27 17:50 71,680 --a------ D:\WINDOWS\g15497968.exe 2007-04-27 17:30 71,680 --a------ D:\WINDOWS\g14296984.exe 2007-04-27 17:07 71,680 --a------ D:\WINDOWS\g12972578.exe 2007-04-27 16:45 71,680 --a------ D:\WINDOWS\g11651781.exe 2007-04-27 16:24 71,680 --a------ D:\WINDOWS\g10334656.exe 2007-04-27 15:42 71,680 --a------ D:\WINDOWS\g7816703.exe 2007-04-27 15:22 71,680 --a------ D:\WINDOWS\g6607812.exe 2007-04-27 14:59 71,680 --a------ D:\WINDOWS\g5289250.exe 2007-04-27 14:38 71,680 --a------ D:\WINDOWS\g3968953.exe 2007-04-27 14:17 71,680 --a------ D:\WINDOWS\g2770656.exe 2007-04-27 13:57 71,680 --a------ D:\WINDOWS\g1565140.exe 2007-04-27 13:37 71,680 --a------ D:\WINDOWS\g368750.exe 2007-04-27 07:34 71,680 --a------ D:\WINDOWS\g2996765.exe 2007-04-27 07:14 71,680 --a------ D:\WINDOWS\g1813875.exe 2007-04-26 22:06 71,680 --a------ D:\WINDOWS\g6841953.exe 2007-04-26 21:46 71,680 --a------ D:\WINDOWS\g5640468.exe 2007-04-26 21:24 71,680 --a------ D:\WINDOWS\g4316546.exe 2007-04-26 21:02 71,680 --a------ D:\WINDOWS\g2999546.exe 2007-04-26 20:42 71,680 --a------ D:\WINDOWS\g1799234.exe 2007-04-26 20:20 71,680 --a------ D:\WINDOWS\g473609.exe 2007-04-26 20:20 33,792 --------- D:\WINDOWS\system32\wudb.dll 2007-04-16 21:31 2007-04-16 21:27 (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-05-06 15:21 -------- d-------- D:\Program Files\netpanel 2007-05-06 00:55 24 --a------ D:\WINDOWS\system32\dvcstatebkp-{00000000-00000000-0000000a-00001102-00000002-80641102}.dat 2007-05-06 00:55 24 --a------ D:\WINDOWS\system32\dvcstate-{00000000-00000000-0000000a-00001102-00000002-80641102}.dat 2007-05-05 23:53 -------- d-------- D:\DOCUME~1\User\DANEAP~1\tlen.pl 2007-05-05 18:56 -------- d-------- D:\Program Files\minicliptoolbar toolbar 2007-05-05 02:48 2 --a------ D:\WINDOWS\system32\wintisv.exe 2007-05-03 18:02 40183 —hs---- D:\Program Files\Common Files\yazzle1162oinuninstaller.exe 2007-05-02 19:20 -------- d-------- D:\DOCUME~1\User\DANEAP~1\skype 2007-04-27 22:32 -------- d-------- D:\DOCUME~1\User\DANEAP~1\teamspeak2 2007-03-30 21:45 3331 --a------ D:\WINDOWS\system32\spoonuninstall-dbpoweramp ogg vorbis lancer encoder.dat 2007-03-30 21:42 806264 --a------ D:\WINDOWS\system32\spoonuninstall.exe 2007-03-25 08:45 50748 --a------ D:\WINDOWS\system32\perfc015.dat 2007-03-25 08:45 358702 --a------ D:\WINDOWS\system32\perfh015.dat 2007-03-25 00:48 11032 --a------ D:\WINDOWS\system32\spoonuninstall-dmc sveta portable audio.dat 2007-03-25 00:47 36417 --a------ D:\WINDOWS\system32\spoonuninstall-dbpoweramp music converter.dat 2007-03-19 21:39 -------- d–h----- D:\Program Files\installshield installation information 2007-03-15 07:41 11816 --a------ D:\WINDOWS\mozver.dat 2007-02-28 15:39 18432 --a------ D:\WINDOWS\system32\winbme32.dll 2007-02-12 06:58 68 --a------ D:\WINDOWS\system32\remstats32.dll 2007-02-10 10:48 0 --a------ D:\DOCUME~1\User\DANEAP~1\milihk32.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} D:\PROGRA~1\FlashGet\jccatch.dll {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} C:\BitComet\tools\BitCometBHO.dll {53707962-6F74-2D53-2644-206D7942484F} D:\PROGRA~1\SPYBOT~1\SDHelper.dll {6BB1FD17-6280-1D50-F24E-6BE336E1AECC} D:\WINDOWS\System32\yaslebc.dll [x] {CC59E0F9-7E43-44FA-9FAA-8377850BF205} e:\Free Download Manager\iefdmcks.dll {CE7C3CF0-4B15-11D1-ABED-709549C10000} D:\Program Files\NetPanel\IEHelper.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] “NetPanel”="“D:\Program Files\NetPanel\Starter.exe” /path=“D:\Program Files\NetPanel”" “MULTIMEDIA KEYBOARD”=“D:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe” “NvCplDaemon”=“RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup” [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] “Komunikator”=“D:\Tlen.pl\tlen.exe” [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] “NoAutoUpdate”=dword:00000001 “ClearRecentDocsOnExit”=dword:00000001 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run] HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winbme32 HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wudb HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa Authentication Packages REG_MULTI_SZ msv1_0\0\0 Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0 Notification Packages REG_MULTI_SZ scecli\0\0 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\D:^Documents and Settings^All Users^Menu Start^Programy^Autostart^hp psc 2000 Series.lnk] “location”=“Common Startup” “command”=“D:\PROGRA~1\HEWLET~1\DIGITA~1\bin\hpobnz08.exe " “item”=“hp psc 2000 Series” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\D:^Documents and Settings^All Users^Menu Start^Programy^Autostart^officejet 6100.lnk] “location”=“Common Startup” “command”=“D:\PROGRA~1\HEWLET~1\DIGITA~1\bin\hposol08.exe " “item”=“officejet 6100” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Jet Detection] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“ADGJDet” “hkey”=“HKLM” “command”=”“D:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe”” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“msmsgs” “hkey”=“HKCU” “command”="“D:\Program Files\Messenger\msmsgs.exe” /background" “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Share-to-Web Namespace Daemon] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“hpgs2wnd” “hkey”=“HKLM” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\THGuard] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“THGuard” “hkey”=“HKLM” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“UpdReg” “hkey”=“HKLM” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WINDVDPatch] “key”=“SOFTWARE\Microsoft\Windows\CurrentVersion\Run” “item”=“CTHELPER” “hkey”=“HKLM” “command”=“CTHELPER.EXE” “inimapping”=“0” [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 ~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ backup-20070506-151720-797 O4 - HKCU…\Run: [Zscwojs] “D:\Documents and Settings\User\Moje dokumenty??sembly\n?tepad.exe” backup-20070506-151720-975 O4 - HKCU…\Run: [Dtrr] “D:\PROGRA~1\COMMON~1\FNTS~1\taskmgr.exe” -vt yazb backup-20070505-185655-555 O3 - Toolbar: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - D:\PROGRA~1\MINICL~1\MINICL~1.DLL backup-20070505-185654-261 O2 - BHO: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - D:\PROGRA~1\MINICL~1\MINICL~1.DLL backup-20070505-185450-319 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com backup-20070505-185450-518 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com backup-20070505-185450-187 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank backup-20070505-185450-181 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = prosearching.com backup-20070505-185450-935 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com backup-20070505-185450-672 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com backup-20070505-185450-195 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchmyrequest.com/sp.php backup-20070505-185450-625 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://searchmyrequest.com/sp.php backup-20070505-185450-867 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.accoona.com/search?q=%s backup-20070505-185450-142 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com backup-20070505-185450-785 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = prosearching.com backup-20070505-185450-230 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://prosearching.com/ backup-20070505-185450-849 F2 - REG:system.ini: UserInit=userinit.exe backup-20070505-185450-928 O4 - HKLM…\Run: [explorer] D:\WINDOWS\System32\explorer.exe backup-20070505-185450-426 O4 - HKLM…\RunServices: [WINRUN] taskgmr.exe backup-20070505-185450-198 O4 - HKCU…\RunOnce: [FFTI] D:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\ugqesii8.default\extensions{B13721C7-F507-4982-B2E5-502A71474FED}\ffti.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /DestPath=“D:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles/ugqesii8.default\extensions{B13721C7-F507-4982-B2E5-502A71474FED}” backup-20070505-185450-149 O4 - Startup: .protected backup-20070505-185450-384 O4 - Global Startup: .protected backup-20070505-185450-326 O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/Media … e-c403.cab backup-20070505-185451-648 O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/YazzleAc … refid=1162 backup-20070505-185451-725 O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://212.239.40.78/cdo/pl/game.exe backup-20070505-185451-791 O20 - Winlogon Notify: winbme32 - D:\WINDOWS\SYSTEM32\winbme32.dll backup-20070505-185451-241 O20 - Winlogon Notify: winzzd32 - winzzd32.dll (file missing) backup-20070505-185451-240 O20 - Winlogon Notify: wudb - D:\WINDOWS\System32\wudb.dll backup-20070505-185450-241 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.accoona.com/search_assistant … gn=wdz0805 backup-20070505-185450-416 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.accoona.com backup-20070505-185450-121 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com backup-20070505-185450-323 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com Contents of the ‘Scheduled Tasks’ folder D:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 2100 series#1148279505.job ******************************************************************** catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-05-06 16:20:01 Windows 5.1.2600 NTFS scanning hidden processes … scanning hidden services … scanning hidden autostart entries … scanning hidden files …

Gutek · 7 Maj 2007 19:07

Pobierz The Avenger. Wypakuj => uruchom => zaznacz opcję Input script manually => kliknij w taką lupkę => w okienku, które się otworzy wklej:

Files to delete: D:\WINDOWS\g2876656.exe D:\WINDOWS\g1621515.exe D:\WINDOWS\g421609.exe D:\WINDOWS\g19919937.exe D:\WINDOWS\g18727203.exe D:\WINDOWS\g17512500.exe D:\WINDOWS\g16303828.exe D:\WINDOWS\g13893968.exe D:\WINDOWS\g11472921.exe D:\WINDOWS\g10140250.exe D:\WINDOWS\g8930375.exe D:\WINDOWS\g7718203.exe D:\WINDOWS\g6517031.exe D:\WINDOWS\g5287062.exe D:\WINDOWS\g3969000.exe D:\WINDOWS\g2761312.exe D:\WINDOWS\g1564531.exe D:\WINDOWS\g361359.exe D:\WINDOWS\g7987312.exe D:\WINDOWS\g6775140.exe D:\WINDOWS\g5570343.exe D:\WINDOWS\g4367359.exe D:\WINDOWS\g3153562.exe D:\WINDOWS\g1951796.exe D:\WINDOWS\g737421.exe D:\WINDOWS\g1811218.exe D:\WINDOWS\g591984.exe D:\WINDOWS\g6516312.exe D:\WINDOWS\g5311078.exe D:\WINDOWS\g4108093.exe D:\WINDOWS\g2909484.exe D:\WINDOWS\g1706781.exe D:\WINDOWS\g513468.exe D:\WINDOWS\g5426984.exe D:\WINDOWS\g4196968.exe D:\WINDOWS\g1386765.exe D:\WINDOWS\g39946046.exe D:\Program Files\Common Files\Yazzle1162OinAdmin.exe D:\WINDOWS\g38620921.exe D:\WINDOWS\g29719406.exe D:\WINDOWS\g24800265.exe D:\WINDOWS\g23599125.exe D:\WINDOWS\g18797218.exe D:\WINDOWS\g17597093.exe D:\WINDOWS\g12774937.exe D:\WINDOWS\g11571343.exe D:\WINDOWS\g6767609.exe D:\WINDOWS\g5570140.exe D:\WINDOWS\g753218.exe D:\WINDOWS\g5212734.exe D:\WINDOWS\g4002953.exe D:\IPChanger20Eng.exe D:\WINDOWS\g12823203.exe D:\WINDOWS\g11626765.exe D:\WINDOWS\g10425421.exe D:\WINDOWS\g9229671.exe D:\WINDOWS\g8022437.exe D:\WINDOWS\g6825125.exe D:\WINDOWS\g5621578.exe D:\WINDOWS\g4415859.exe D:\WINDOWS\g3213687.exe D:\WINDOWS\g2012890.exe D:\WINDOWS\g684078.exe D:\WINDOWS\g35300468.exe D:\WINDOWS\g34094484.exe D:\WINDOWS\g32896421.exe D:\WINDOWS\g31689734.exe D:\WINDOWS\g30361578.exe D:\WINDOWS\g29162593.exe D:\WINDOWS\g27837046.exe D:\WINDOWS\g26517281.exe D:\WINDOWS\g25316953.exe D:\WINDOWS\g24116546.exe D:\WINDOWS\g22909265.exe D:\WINDOWS\g21706484.exe D:\WINDOWS\g20506250.exe D:\WINDOWS\g19317906.exe D:\WINDOWS\g18098921.exe D:\WINDOWS\g16912625.exe D:\WINDOWS\g15704515.exe D:\WINDOWS\g14492875.exe D:\WINDOWS\g13271937.exe D:\WINDOWS\g12056734.exe D:\WINDOWS\g10739843.exe D:\WINDOWS\g9420203.exe D:\WINDOWS\g8096187.exe D:\WINDOWS\g6896921.exe D:\WINDOWS\g5570953.exe D:\WINDOWS\g4376031.exe D:\WINDOWS\g3053125.exe D:\WINDOWS\g1851953.exe D:\WINDOWS\g529078.exe D:\WINDOWS\g1753218.exe D:\WINDOWS\g551968.exe D:\WINDOWS\g43273671.exe D:\WINDOWS\g42065531.exe D:\WINDOWS\g40865968.exe D:\WINDOWS\g39663218.exe D:\WINDOWS\g38349296.exe D:\WINDOWS\g37153015.exe D:\WINDOWS\g35938859.exe D:\WINDOWS\g34615578.exe D:\WINDOWS\g33421171.exe D:\WINDOWS\g32218843.exe D:\WINDOWS\g31018656.exe D:\WINDOWS\g29816312.exe D:\WINDOWS\g28617609.exe D:\WINDOWS\g27417781.exe D:\WINDOWS\g26211062.exe D:\WINDOWS\g25004234.exe D:\WINDOWS\g23802296.exe D:\WINDOWS\g22597015.exe D:\WINDOWS\g20201671.exe D:\WINDOWS\g18984140.exe D:\WINDOWS\g17781593.exe D:\WINDOWS\g16451703.exe D:\WINDOWS\g15129890.exe D:\WINDOWS\g13928531.exe D:\WINDOWS\g12723796.exe D:\WINDOWS\g11527437.exe D:\WINDOWS\g10329843.exe D:\WINDOWS\g9111375.exe D:\WINDOWS\g7787328.exe D:\WINDOWS\g6588125.exe D:\WINDOWS\g5366546.exe D:\WINDOWS\g4044218.exe D:\WINDOWS\g2847531.exe D:\WINDOWS\g1650468.exe D:\WINDOWS\g447875.exe D:\WINDOWS\g42045640.exe D:\WINDOWS\g40844312.exe D:\WINDOWS\g39643500.exe D:\WINDOWS\g38453265.exe D:\WINDOWS\g37237437.exe D:\WINDOWS\g36035468.exe D:\WINDOWS\g34833406.exe D:\WINDOWS\g33628437.exe D:\WINDOWS\g32309390.exe D:\WINDOWS\g31119968.exe D:\WINDOWS\g29908984.exe D:\WINDOWS\g28695312.exe D:\WINDOWS\g27493187.exe D:\WINDOWS\g26288531.exe D:\WINDOWS\g25086203.exe D:\WINDOWS\g23877437.exe D:\WINDOWS\g22673390.exe D:\WINDOWS\g21347546.exe D:\WINDOWS\g20152078.exe D:\WINDOWS\g18828156.exe D:\WINDOWS\g17632781.exe D:\WINDOWS\g16429734.exe D:\WINDOWS\g15220531.exe D:\WINDOWS\g14049656.exe D:\WINDOWS\g12780421.exe D:\WINDOWS\g11449984.exe D:\WINDOWS\g10253421.exe D:\WINDOWS\g9056406.exe D:\WINDOWS\g7843781.exe D:\WINDOWS\g6655359.exe D:\WINDOWS\g5417765.exe D:\WINDOWS\g3013109.exe D:\WINDOWS\g1807500.exe D:\WINDOWS\g1738125.exe D:\WINDOWS\g557062.exe D:\WINDOWS\g38441828.exe D:\WINDOWS\g37117062.exe D:\WINDOWS\g35921406.exe D:\WINDOWS\g34716921.exe D:\WINDOWS\g33393062.exe D:\WINDOWS\g32191890.exe D:\WINDOWS\g30991203.exe D:\WINDOWS\g29668250.exe D:\WINDOWS\g28467593.exe D:\WINDOWS\g27146593.exe D:\WINDOWS\g25826328.exe D:\WINDOWS\g24630421.exe D:\WINDOWS\g23305796.exe D:\WINDOWS\g21985750.exe D:\WINDOWS\g20669781.exe D:\WINDOWS\g19469218.exe D:\WINDOWS\g18139031.exe D:\WINDOWS\g16819187.exe D:\WINDOWS\g15497968.exe D:\WINDOWS\g14296984.exe D:\WINDOWS\g12972578.exe D:\WINDOWS\g11651781.exe D:\WINDOWS\g10334656.exe D:\WINDOWS\g7816703.exe D:\WINDOWS\g6607812.exe D:\WINDOWS\g5289250.exe D:\WINDOWS\g3968953.exe D:\WINDOWS\g2770656.exe D:\WINDOWS\g1565140.exe D:\WINDOWS\g368750.exe D:\WINDOWS\g2996765.exe D:\WINDOWS\g1813875.exe D:\WINDOWS\g6841953.exe D:\WINDOWS\g5640468.exe D:\WINDOWS\g4316546.exe D:\WINDOWS\g2999546.exe D:\WINDOWS\g1799234.exe D:\WINDOWS\g473609.exe D:\WINDOWS\system32\wudb.dll D:\WINDOWS\system32\dvcstatebkp-{00000000-00000000-0000000a-00001102-00000002-80641102}.dat D:\WINDOWS\system32\dvcstate-{00000000-00000000-0000000a-00001102-00000002-80641102}.dat D:\WINDOWS\system32\wintisv.exe D:\DOCUME~1\User\DANEAP~1\milihk32.dll D:\WINDOWS\system32\winbme32.dll D:\WINDOWS\system32\remstats32.dll Folders to delete: D:\DOCUME~1\ALLUSE~1\DANEAP~1\TEMP D:\Program Files\minicliptoolbar toolbar D:\DOCUME~1\User\DANEAP~1\stamina Registry keys to delete: HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winbme32 HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wudb

kliknij klawisz Done => teraz kliknij na zielone światełko => powinna pojawić się pewna informacja i kliknij OK (teraz restart).

Araiser · 11 Maj 2007 05:47

Logfile of The Avenger version 1, by Swandog46 Running from registry key: \Registry\Machine\System\CurrentControlSet\Services\cnayoqsm ******************* Script file located at: ??\D:\WINDOWS\System32\xquonpxu.txt Script file opened successfully. Script file read successfully Backups directory opened successfully at D:\Avenger ******************* Beginning to process script file: File D:\WINDOWS\g2876656.exe deleted successfully. File D:\WINDOWS\g1621515.exe deleted successfully. File D:\WINDOWS\g421609.exe deleted successfully. File D:\WINDOWS\g19919937.exe deleted successfully. File D:\WINDOWS\g18727203.exe deleted successfully. File D:\WINDOWS\g17512500.exe deleted successfully. File D:\WINDOWS\g16303828.exe deleted successfully. File D:\WINDOWS\g13893968.exe deleted successfully. File D:\WINDOWS\g11472921.exe deleted successfully. File D:\WINDOWS\g10140250.exe deleted successfully. File D:\WINDOWS\g8930375.exe deleted successfully. File D:\WINDOWS\g7718203.exe deleted successfully. File D:\WINDOWS\g6517031.exe deleted successfully. File D:\WINDOWS\g5287062.exe deleted successfully. File D:\WINDOWS\g3969000.exe deleted successfully. File D:\WINDOWS\g2761312.exe deleted successfully. File D:\WINDOWS\g1564531.exe deleted successfully. File D:\WINDOWS\g361359.exe deleted successfully. File D:\WINDOWS\g7987312.exe deleted successfully. File D:\WINDOWS\g6775140.exe deleted successfully. File D:\WINDOWS\g5570343.exe deleted successfully. File D:\WINDOWS\g4367359.exe deleted successfully. File D:\WINDOWS\g3153562.exe deleted successfully. File D:\WINDOWS\g1951796.exe deleted successfully. File D:\WINDOWS\g737421.exe deleted successfully. File D:\WINDOWS\g1811218.exe deleted successfully. File D:\WINDOWS\g591984.exe deleted successfully. File D:\WINDOWS\g6516312.exe deleted successfully. File D:\WINDOWS\g5311078.exe deleted successfully. File D:\WINDOWS\g4108093.exe deleted successfully. File D:\WINDOWS\g2909484.exe deleted successfully. File D:\WINDOWS\g1706781.exe deleted successfully. File D:\WINDOWS\g513468.exe deleted successfully. File D:\WINDOWS\g5426984.exe deleted successfully. File D:\WINDOWS\g4196968.exe deleted successfully. File D:\WINDOWS\g1386765.exe deleted successfully. File D:\WINDOWS\g39946046.exe deleted successfully. File D:\Program Files\Common Files\Yazzle1162OinAdmin.exe deleted successfully. File D:\WINDOWS\g38620921.exe deleted successfully. File D:\WINDOWS\g29719406.exe deleted successfully. File D:\WINDOWS\g24800265.exe deleted successfully. File D:\WINDOWS\g23599125.exe deleted successfully. File D:\WINDOWS\g18797218.exe deleted successfully. File D:\WINDOWS\g17597093.exe deleted successfully. File D:\WINDOWS\g12774937.exe deleted successfully. File D:\WINDOWS\g11571343.exe deleted successfully. File D:\WINDOWS\g6767609.exe deleted successfully. File D:\WINDOWS\g5570140.exe deleted successfully. File D:\WINDOWS\g753218.exe deleted successfully. File D:\WINDOWS\g5212734.exe deleted successfully. File D:\WINDOWS\g4002953.exe deleted successfully. File D:\IPChanger20Eng.exe deleted successfully. File D:\WINDOWS\g12823203.exe deleted successfully. File D:\WINDOWS\g11626765.exe deleted successfully. File D:\WINDOWS\g10425421.exe deleted successfully. File D:\WINDOWS\g9229671.exe deleted successfully. File D:\WINDOWS\g8022437.exe deleted successfully. File D:\WINDOWS\g6825125.exe deleted successfully. File D:\WINDOWS\g5621578.exe deleted successfully. File D:\WINDOWS\g4415859.exe deleted successfully. File D:\WINDOWS\g3213687.exe deleted successfully. File D:\WINDOWS\g2012890.exe deleted successfully. File D:\WINDOWS\g684078.exe deleted successfully. File D:\WINDOWS\g35300468.exe deleted successfully. File D:\WINDOWS\g34094484.exe deleted successfully. File D:\WINDOWS\g32896421.exe deleted successfully. File D:\WINDOWS\g31689734.exe deleted successfully. File D:\WINDOWS\g30361578.exe deleted successfully. File D:\WINDOWS\g29162593.exe deleted successfully. File D:\WINDOWS\g27837046.exe deleted successfully. File D:\WINDOWS\g26517281.exe deleted successfully. File D:\WINDOWS\g25316953.exe deleted successfully. File D:\WINDOWS\g24116546.exe deleted successfully. File D:\WINDOWS\g22909265.exe deleted successfully. File D:\WINDOWS\g21706484.exe deleted successfully. File D:\WINDOWS\g20506250.exe deleted successfully. File D:\WINDOWS\g19317906.exe deleted successfully. File D:\WINDOWS\g18098921.exe deleted successfully. File D:\WINDOWS\g16912625.exe deleted successfully. File D:\WINDOWS\g15704515.exe deleted successfully. File D:\WINDOWS\g14492875.exe deleted successfully. File D:\WINDOWS\g13271937.exe deleted successfully. File D:\WINDOWS\g12056734.exe deleted successfully. File D:\WINDOWS\g10739843.exe deleted successfully. File D:\WINDOWS\g9420203.exe deleted successfully. File D:\WINDOWS\g8096187.exe deleted successfully. File D:\WINDOWS\g6896921.exe deleted successfully. File D:\WINDOWS\g5570953.exe deleted successfully. File D:\WINDOWS\g4376031.exe deleted successfully. File D:\WINDOWS\g3053125.exe deleted successfully. File D:\WINDOWS\g1851953.exe deleted successfully. File D:\WINDOWS\g529078.exe deleted successfully. File D:\WINDOWS\g1753218.exe deleted successfully. File D:\WINDOWS\g551968.exe deleted successfully. File D:\WINDOWS\g43273671.exe deleted successfully. File D:\WINDOWS\g42065531.exe deleted successfully. File D:\WINDOWS\g40865968.exe deleted successfully. File D:\WINDOWS\g39663218.exe deleted successfully. File D:\WINDOWS\g38349296.exe deleted successfully. File D:\WINDOWS\g37153015.exe deleted successfully. File D:\WINDOWS\g35938859.exe deleted successfully. File D:\WINDOWS\g34615578.exe deleted successfully. File D:\WINDOWS\g33421171.exe deleted successfully. File D:\WINDOWS\g32218843.exe deleted successfully. File D:\WINDOWS\g31018656.exe deleted successfully. File D:\WINDOWS\g29816312.exe deleted successfully. File D:\WINDOWS\g28617609.exe deleted successfully. File D:\WINDOWS\g27417781.exe deleted successfully. File D:\WINDOWS\g26211062.exe deleted successfully. File D:\WINDOWS\g25004234.exe deleted successfully. File D:\WINDOWS\g23802296.exe deleted successfully. File D:\WINDOWS\g22597015.exe deleted successfully. File D:\WINDOWS\g20201671.exe deleted successfully. File D:\WINDOWS\g18984140.exe deleted successfully. File D:\WINDOWS\g17781593.exe deleted successfully. File D:\WINDOWS\g16451703.exe deleted successfully. File D:\WINDOWS\g15129890.exe deleted successfully. File D:\WINDOWS\g13928531.exe deleted successfully. File D:\WINDOWS\g12723796.exe deleted successfully. File D:\WINDOWS\g11527437.exe deleted successfully. File D:\WINDOWS\g10329843.exe deleted successfully. File D:\WINDOWS\g9111375.exe deleted successfully. File D:\WINDOWS\g7787328.exe deleted successfully. File D:\WINDOWS\g6588125.exe deleted successfully. File D:\WINDOWS\g5366546.exe deleted successfully. File D:\WINDOWS\g4044218.exe deleted successfully. File D:\WINDOWS\g2847531.exe deleted successfully. File D:\WINDOWS\g1650468.exe deleted successfully. File D:\WINDOWS\g447875.exe deleted successfully. File D:\WINDOWS\g42045640.exe deleted successfully. File D:\WINDOWS\g40844312.exe deleted successfully. File D:\WINDOWS\g39643500.exe deleted successfully. File D:\WINDOWS\g38453265.exe deleted successfully. File D:\WINDOWS\g37237437.exe deleted successfully. File D:\WINDOWS\g36035468.exe deleted successfully. File D:\WINDOWS\g34833406.exe deleted successfully. File D:\WINDOWS\g33628437.exe deleted successfully. File D:\WINDOWS\g32309390.exe deleted successfully. File D:\WINDOWS\g31119968.exe deleted successfully. File D:\WINDOWS\g29908984.exe deleted successfully. File D:\WINDOWS\g28695312.exe deleted successfully. File D:\WINDOWS\g27493187.exe deleted successfully. File D:\WINDOWS\g26288531.exe deleted successfully. File D:\WINDOWS\g25086203.exe deleted successfully. File D:\WINDOWS\g23877437.exe deleted successfully. File D:\WINDOWS\g22673390.exe deleted successfully. File D:\WINDOWS\g21347546.exe deleted successfully. File D:\WINDOWS\g20152078.exe deleted successfully. File D:\WINDOWS\g18828156.exe deleted successfully. File D:\WINDOWS\g17632781.exe deleted successfully. File D:\WINDOWS\g16429734.exe deleted successfully. File D:\WINDOWS\g15220531.exe deleted successfully. File D:\WINDOWS\g14049656.exe deleted successfully. File D:\WINDOWS\g12780421.exe deleted successfully. File D:\WINDOWS\g11449984.exe deleted successfully. File D:\WINDOWS\g10253421.exe deleted successfully. File D:\WINDOWS\g9056406.exe deleted successfully. File D:\WINDOWS\g7843781.exe deleted successfully. File D:\WINDOWS\g6655359.exe deleted successfully. File D:\WINDOWS\g5417765.exe deleted successfully. File D:\WINDOWS\g3013109.exe deleted successfully. File D:\WINDOWS\g1807500.exe deleted successfully. File D:\WINDOWS\g1738125.exe deleted successfully. File D:\WINDOWS\g557062.exe deleted successfully. File D:\WINDOWS\g38441828.exe deleted successfully. File D:\WINDOWS\g37117062.exe deleted successfully. File D:\WINDOWS\g35921406.exe deleted successfully. File D:\WINDOWS\g34716921.exe deleted successfully. File D:\WINDOWS\g33393062.exe deleted successfully. File D:\WINDOWS\g32191890.exe deleted successfully. File D:\WINDOWS\g30991203.exe deleted successfully. File D:\WINDOWS\g29668250.exe deleted successfully. File D:\WINDOWS\g28467593.exe deleted successfully. File D:\WINDOWS\g27146593.exe deleted successfully. File D:\WINDOWS\g25826328.exe deleted successfully. File D:\WINDOWS\g24630421.exe deleted successfully. File D:\WINDOWS\g23305796.exe deleted successfully. File D:\WINDOWS\g21985750.exe deleted successfully. File D:\WINDOWS\g20669781.exe deleted successfully. File D:\WINDOWS\g19469218.exe deleted successfully. File D:\WINDOWS\g18139031.exe deleted successfully. File D:\WINDOWS\g16819187.exe deleted successfully. File D:\WINDOWS\g15497968.exe deleted successfully. File D:\WINDOWS\g14296984.exe deleted successfully. File D:\WINDOWS\g12972578.exe deleted successfully. File D:\WINDOWS\g11651781.exe deleted successfully. File D:\WINDOWS\g10334656.exe deleted successfully. File D:\WINDOWS\g7816703.exe deleted successfully. File D:\WINDOWS\g6607812.exe deleted successfully. File D:\WINDOWS\g5289250.exe deleted successfully. File D:\WINDOWS\g3968953.exe deleted successfully. File D:\WINDOWS\g2770656.exe deleted successfully. File D:\WINDOWS\g1565140.exe deleted successfully. File D:\WINDOWS\g368750.exe deleted successfully. File D:\WINDOWS\g2996765.exe deleted successfully. File D:\WINDOWS\g1813875.exe deleted successfully. File D:\WINDOWS\g6841953.exe deleted successfully. File D:\WINDOWS\g5640468.exe deleted successfully. File D:\WINDOWS\g4316546.exe deleted successfully. File D:\WINDOWS\g2999546.exe deleted successfully. File D:\WINDOWS\g1799234.exe deleted successfully. File D:\WINDOWS\g473609.exe deleted successfully. File D:\WINDOWS\system32\wudb.dll deleted successfully. File D:\WINDOWS\system32\dvcstatebkp-{00000000-00000000-0000000a-00001102-00000002-80641102}.dat deleted successfully. File D:\WINDOWS\system32\dvcstate-{00000000-00000000-0000000a-00001102-00000002-80641102}.dat deleted successfully. File D:\WINDOWS\system32\wintisv.exe deleted successfully. File D:\DOCUME~1\User\DANEAP~1\milihk32.dll deleted successfully. File D:\WINDOWS\system32\winbme32.dll deleted successfully. File D:\WINDOWS\system32\remstats32.dll deleted successfully. Folder D:\DOCUME~1\ALLUSE~1\DANEAP~1\TEMP deleted successfully. Folder D:\Program Files\minicliptoolbar toolbar deleted successfully. Folder D:\DOCUME~1\User\DANEAP~1\stamina deleted successfully. Registry key HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winbme32 deleted successfully. Registry key HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wudb deleted successfully. Completed script processing. ******************* Finished! Terminate.////////////////////////////////////////// Logfile of The Avenger version 1, by Swandog46 Running from registry key: \Registry\Machine\System\CurrentControlSet\Services\twjkao^e ******************* Script file located at: ??\D:\Program Files\khgjshjt.txt Script file opened successfully. Script file read successfully Backups directory opened successfully at D:\Avenger ******************* Beginning to process script file: File D:\WINDOWS\g2876656.exe not found! Deletion of file D:\WINDOWS\g2876656.exe failed! Could not process line: D:\WINDOWS\g2876656.exe Status: 0xc0000034 File D:\WINDOWS\g1621515.exe not found! Deletion of file D:\WINDOWS\g1621515.exe failed! Could not process line: D:\WINDOWS\g1621515.exe Status: 0xc0000034 File D:\WINDOWS\g421609.exe not found! Deletion of file D:\WINDOWS\g421609.exe failed! Could not process line: D:\WINDOWS\g421609.exe Status: 0xc0000034 File D:\WINDOWS\g19919937.exe not found! Deletion of file D:\WINDOWS\g19919937.exe failed! Could not process line: D:\WINDOWS\g19919937.exe Status: 0xc0000034 File D:\WINDOWS\g18727203.exe not found! Deletion of file D:\WINDOWS\g18727203.exe failed! Could not process line: D:\WINDOWS\g18727203.exe Status: 0xc0000034 File D:\WINDOWS\g17512500.exe not found! Deletion of file D:\WINDOWS\g17512500.exe failed! Could not process line: D:\WINDOWS\g17512500.exe Status: 0xc0000034 File D:\WINDOWS\g16303828.exe not found! Deletion of file D:\WINDOWS\g16303828.exe failed! Could not process line: D:\WINDOWS\g16303828.exe Status: 0xc0000034 File D:\WINDOWS\g13893968.exe not found! Deletion of file D:\WINDOWS\g13893968.exe failed! Could not process line: D:\WINDOWS\g13893968.exe Status: 0xc0000034 File D:\WINDOWS\g11472921.exe not found! Deletion of file D:\WINDOWS\g11472921.exe failed! Could not process line: D:\WINDOWS\g11472921.exe Status: 0xc0000034 File D:\WINDOWS\g10140250.exe not found! Deletion of file D:\WINDOWS\g10140250.exe failed! Could not process line: D:\WINDOWS\g10140250.exe Status: 0xc0000034 File D:\WINDOWS\g8930375.exe not found! Deletion of file D:\WINDOWS\g8930375.exe failed! Could not process line: D:\WINDOWS\g8930375.exe Status: 0xc0000034 File D:\WINDOWS\g7718203.exe not found! Deletion of file D:\WINDOWS\g7718203.exe failed! Could not process line: D:\WINDOWS\g7718203.exe Status: 0xc0000034 File D:\WINDOWS\g6517031.exe not found! Deletion of file D:\WINDOWS\g6517031.exe failed! Could not process line: D:\WINDOWS\g6517031.exe Status: 0xc0000034 File D:\WINDOWS\g5287062.exe not found! Deletion of file D:\WINDOWS\g5287062.exe failed! Could not process line: D:\WINDOWS\g5287062.exe Status: 0xc0000034 File D:\WINDOWS\g3969000.exe not found! Deletion of file D:\WINDOWS\g3969000.exe failed! Could not process line: D:\WINDOWS\g3969000.exe Status: 0xc0000034 File D:\WINDOWS\g2761312.exe not found! Deletion of file D:\WINDOWS\g2761312.exe failed! Could not process line: D:\WINDOWS\g2761312.exe Status: 0xc0000034 File D:\WINDOWS\g1564531.exe not found! Deletion of file D:\WINDOWS\g1564531.exe failed! Could not process line: D:\WINDOWS\g1564531.exe Status: 0xc0000034 File D:\WINDOWS\g361359.exe not found! Deletion of file D:\WINDOWS\g361359.exe failed! Could not process line: D:\WINDOWS\g361359.exe Status: 0xc0000034 File D:\WINDOWS\g7987312.exe not found! Deletion of file D:\WINDOWS\g7987312.exe failed! Could not process line: D:\WINDOWS\g7987312.exe Status: 0xc0000034 File D:\WINDOWS\g6775140.exe not found! Deletion of file D:\WINDOWS\g6775140.exe failed! Could not process line: D:\WINDOWS\g6775140.exe Status: 0xc0000034 File D:\WINDOWS\g5570343.exe not found! Deletion of file D:\WINDOWS\g5570343.exe failed! Could not process line: D:\WINDOWS\g5570343.exe Status: 0xc0000034 File D:\WINDOWS\g4367359.exe not found! Deletion of file D:\WINDOWS\g4367359.exe failed! Could not process line: D:\WINDOWS\g4367359.exe Status: 0xc0000034 File D:\WINDOWS\g3153562.exe not found! Deletion of file D:\WINDOWS\g3153562.exe failed! Could not process line: D:\WINDOWS\g3153562.exe Status: 0xc0000034 File D:\WINDOWS\g1951796.exe not found! Deletion of file D:\WINDOWS\g1951796.exe failed! Could not process line: D:\WINDOWS\g1951796.exe Status: 0xc0000034 File D:\WINDOWS\g737421.exe not found! Deletion of file D:\WINDOWS\g737421.exe failed! Could not process line: D:\WINDOWS\g737421.exe Status: 0xc0000034 File D:\WINDOWS\g1811218.exe not found! Deletion of file D:\WINDOWS\g1811218.exe failed! Could not process line: D:\WINDOWS\g1811218.exe Status: 0xc0000034 File D:\WINDOWS\g591984.exe not found! Deletion of file D:\WINDOWS\g591984.exe failed! Could not process line: D:\WINDOWS\g591984.exe Status: 0xc0000034 File D:\WINDOWS\g6516312.exe not found! Deletion of file D:\WINDOWS\g6516312.exe failed! Could not process line: D:\WINDOWS\g6516312.exe Status: 0xc0000034 File D:\WINDOWS\g5311078.exe not found! Deletion of file D:\WINDOWS\g5311078.exe failed! Could not process line: D:\WINDOWS\g5311078.exe Status: 0xc0000034 File D:\WINDOWS\g4108093.exe not found! Deletion of file D:\WINDOWS\g4108093.exe failed! Could not process line: D:\WINDOWS\g4108093.exe Status: 0xc0000034 File D:\WINDOWS\g2909484.exe not found! Deletion of file D:\WINDOWS\g2909484.exe failed! Could not process line: D:\WINDOWS\g2909484.exe Status: 0xc0000034 File D:\WINDOWS\g1706781.exe not found! Deletion of file D:\WINDOWS\g1706781.exe failed! Could not process line: D:\WINDOWS\g1706781.exe Status: 0xc0000034 File D:\WINDOWS\g513468.exe not found! Deletion of file D:\WINDOWS\g513468.exe failed! Could not process line: D:\WINDOWS\g513468.exe Status: 0xc0000034 File D:\WINDOWS\g5426984.exe not found! Deletion of file D:\WINDOWS\g5426984.exe failed! Could not process line: D:\WINDOWS\g5426984.exe Status: 0xc0000034 File D:\WINDOWS\g4196968.exe not found! Deletion of file D:\WINDOWS\g4196968.exe failed! Could not process line: D:\WINDOWS\g4196968.exe Status: 0xc0000034 File D:\WINDOWS\g1386765.exe not found! Deletion of file D:\WINDOWS\g1386765.exe failed! Could not process line: D:\WINDOWS\g1386765.exe Status: 0xc0000034 File D:\WINDOWS\g39946046.exe not found! Deletion of file D:\WINDOWS\g39946046.exe failed! Could not process line: D:\WINDOWS\g39946046.exe Status: 0xc0000034 File D:\Program Files\Common Files\Yazzle1162OinAdmin.exe not found! Deletion of file D:\Program Files\Common Files\Yazzle1162OinAdmin.exe failed! Could not process line: D:\Program Files\Common Files\Yazzle1162OinAdmin.exe Status: 0xc0000034 File D:\WINDOWS\g38620921.exe not found! Deletion of file D:\WINDOWS\g38620921.exe failed! Could not process line: D:\WINDOWS\g38620921.exe Status: 0xc0000034 File D:\WINDOWS\g29719406.exe not found! Deletion of file D:\WINDOWS\g29719406.exe failed! Could not process line: D:\WINDOWS\g29719406.exe Status: 0xc0000034 File D:\WINDOWS\g24800265.exe not found! Deletion of file D:\WINDOWS\g24800265.exe failed! Could not process line: D:\WINDOWS\g24800265.exe Status: 0xc0000034 File D:\WINDOWS\g23599125.exe not found! Deletion of file D:\WINDOWS\g23599125.exe failed! Could not process line: D:\WINDOWS\g23599125.exe Status: 0xc0000034 File D:\WINDOWS\g18797218.exe not found! Deletion of file D:\WINDOWS\g18797218.exe failed! Could not process line: D:\WINDOWS\g18797218.exe Status: 0xc0000034 File D:\WINDOWS\g17597093.exe not found! Deletion of file D:\WINDOWS\g17597093.exe failed! Could not process line: D:\WINDOWS\g17597093.exe Status: 0xc0000034 File D:\WINDOWS\g12774937.exe not found! Deletion of file D:\WINDOWS\g12774937.exe failed! Could not process line: D:\WINDOWS\g12774937.exe Status: 0xc0000034 File D:\WINDOWS\g11571343.exe not found! Deletion of file D:\WINDOWS\g11571343.exe failed! Could not process line: D:\WINDOWS\g11571343.exe Status: 0xc0000034 File D:\WINDOWS\g6767609.exe not found! Deletion of file D:\WINDOWS\g6767609.exe failed! Could not process line: D:\WINDOWS\g6767609.exe Status: 0xc0000034 File D:\WINDOWS\g5570140.exe not found! Deletion of file D:\WINDOWS\g5570140.exe failed! Could not process line: D:\WINDOWS\g5570140.exe Status: 0xc0000034 File D:\WINDOWS\g753218.exe not found! Deletion of file D:\WINDOWS\g753218.exe failed! Could not process line: D:\WINDOWS\g753218.exe Status: 0xc0000034 File D:\WINDOWS\g5212734.exe not found! Deletion of file D:\WINDOWS\g5212734.exe failed! Could not process line: D:\WINDOWS\g5212734.exe Status: 0xc0000034 File D:\WINDOWS\g4002953.exe not found! Deletion of file D:\WINDOWS\g4002953.exe failed! Could not process line: D:\WINDOWS\g4002953.exe Status: 0xc0000034 File D:\IPChanger20Eng.exe not found! Deletion of file D:\IPChanger20Eng.exe failed! Could not process line: D:\IPChanger20Eng.exe Status: 0xc0000034 File D:\WINDOWS\g12823203.exe not found! Deletion of file D:\WINDOWS\g12823203.exe failed! Could not process line: D:\WINDOWS\g12823203.exe Status: 0xc0000034 File D:\WINDOWS\g11626765.exe not found! Deletion of file D:\WINDOWS\g11626765.exe failed! Could not process line: D:\WINDOWS\g11626765.exe Status: 0xc0000034 File D:\WINDOWS\g10425421.exe not found! Deletion of file D:\WINDOWS\g10425421.exe failed! Could not process line: D:\WINDOWS\g10425421.exe Status: 0xc0000034 File D:\WINDOWS\g9229671.exe not found! Deletion of file D:\WINDOWS\g9229671.exe failed! Could not process line: D:\WINDOWS\g9229671.exe Status: 0xc0000034 File D:\WINDOWS\g8022437.exe not found! Deletion of file D:\WINDOWS\g8022437.exe failed! Could not process line: D:\WINDOWS\g8022437.exe Status: 0xc0000034 File D:\WINDOWS\g6825125.exe not found! Deletion of file D:\WINDOWS\g6825125.exe failed! Could not process line: D:\WINDOWS\g6825125.exe Status: 0xc0000034 File D:\WINDOWS\g5621578.exe not found! Deletion of file D:\WINDOWS\g5621578.exe failed! Could not process line: D:\WINDOWS\g5621578.exe Status: 0xc0000034 File D:\WINDOWS\g4415859.exe not found! Deletion of file D:\WINDOWS\g4415859.exe failed! Could not process line: D:\WINDOWS\g4415859.exe Status: 0xc0000034 File D:\WINDOWS\g3213687.exe not found! Deletion of file D:\WINDOWS\g3213687.exe failed! Could not process line: D:\WINDOWS\g3213687.exe Status: 0xc0000034 File D:\WINDOWS\g2012890.exe not found! Deletion of file D:\WINDOWS\g2012890.exe failed! Could not process line: D:\WINDOWS\g2012890.exe Status: 0xc0000034 File D:\WINDOWS\g684078.exe not found! Deletion of file D:\WINDOWS\g684078.exe failed! Could not process line: D:\WINDOWS\g684078.exe Status: 0xc0000034 File D:\WINDOWS\g35300468.exe not found! Deletion of file D:\WINDOWS\g35300468.exe failed! Could not process line: D:\WINDOWS\g35300468.exe Status: 0xc0000034 File D:\WINDOWS\g34094484.exe not found! Deletion of file D:\WINDOWS\g34094484.exe failed! Could not process line: D:\WINDOWS\g34094484.exe Status: 0xc0000034 File D:\WINDOWS\g32896421.exe not found! Deletion of file D:\WINDOWS\g32896421.exe failed! Could not process line: D:\WINDOWS\g32896421.exe Status: 0xc0000034 File D:\WINDOWS\g31689734.exe not found! Deletion of file D:\WINDOWS\g31689734.exe failed! Could not process line: D:\WINDOWS\g31689734.exe Status: 0xc0000034 File D:\WINDOWS\g30361578.exe not found! Deletion of file D:\WINDOWS\g30361578.exe failed! Could not process line: D:\WINDOWS\g30361578.exe Status: 0xc0000034 File D:\WINDOWS\g29162593.exe not found! Deletion of file D:\WINDOWS\g29162593.exe failed! Could not process line: D:\WINDOWS\g29162593.exe Status: 0xc0000034 File D:\WINDOWS\g27837046.exe not found! Deletion of file D:\WINDOWS\g27837046.exe failed! Could not process line: D:\WINDOWS\g27837046.exe Status: 0xc0000034 File D:\WINDOWS\g26517281.exe not found! Deletion of file D:\WINDOWS\g26517281.exe failed! Could not process line: D:\WINDOWS\g26517281.exe Status: 0xc0000034 File D:\WINDOWS\g25316953.exe not found! Deletion of file D:\WINDOWS\g25316953.exe failed! Could not process line: D:\WINDOWS\g25316953.exe Status: 0xc0000034 File D:\WINDOWS\g24116546.exe not found! Deletion of file D:\WINDOWS\g24116546.exe failed! Could not process line: D:\WINDOWS\g24116546.exe Status: 0xc0000034 File D:\WINDOWS\g22909265.exe not found! Deletion of file D:\WINDOWS\g22909265.exe failed! Could not process line: D:\WINDOWS\g22909265.exe Status: 0xc0000034 File D:\WINDOWS\g21706484.exe not found! Deletion of file D:\WINDOWS\g21706484.exe failed! Could not process line: D:\WINDOWS\g21706484.exe Status: 0xc0000034 File D:\WINDOWS\g20506250.exe not found! Deletion of file D:\WINDOWS\g20506250.exe failed! Could not process line: D:\WINDOWS\g20506250.exe Status: 0xc0000034 File D:\WINDOWS\g19317906.exe not found! Deletion of file D:\WINDOWS\g19317906.exe failed! Could not process line: D:\WINDOWS\g19317906.exe Status: 0xc0000034 File D:\WINDOWS\g18098921.exe not found! Deletion of file D:\WINDOWS\g18098921.exe failed! Could not process line: D:\WINDOWS\g18098921.exe Status: 0xc0000034 File D:\WINDOWS\g16912625.exe not found! Deletion of file D:\WINDOWS\g16912625.exe failed! Could not process line: D:\WINDOWS\g16912625.exe Status: 0xc0000034 File D:\WINDOWS\g15704515.exe not found! Deletion of file D:\WINDOWS\g15704515.exe failed! Could not process line: D:\WINDOWS\g15704515.exe Status: 0xc0000034 File D:\WINDOWS\g14492875.exe not found! Deletion of file D:\WINDOWS\g14492875.exe failed! Could not process line: D:\WINDOWS\g14492875.exe Status: 0xc0000034 File D:\WINDOWS\g13271937.exe not found! Deletion of file D:\WINDOWS\g13271937.exe failed! Could not process line: D:\WINDOWS\g13271937.exe Status: 0xc0000034 File D:\WINDOWS\g12056734.exe not found! Deletion of file D:\WINDOWS\g12056734.exe failed! Could not process line: D:\WINDOWS\g12056734.exe Status: 0xc0000034 File D:\WINDOWS\g10739843.exe not found! Deletion of file D:\WINDOWS\g10739843.exe failed! Could not process line: D:\WINDOWS\g10739843.exe Status: 0xc0000034 File D:\WINDOWS\g9420203.exe not found! Deletion of file D:\WINDOWS\g9420203.exe failed! Could not process line: D:\WINDOWS\g9420203.exe Status: 0xc0000034 File D:\WINDOWS\g8096187.exe not found! Deletion of file D:\WINDOWS\g8096187.exe failed! Could not process line: D:\WINDOWS\g8096187.exe Status: 0xc0000034 File D:\WINDOWS\g6896921.exe not found! Deletion of file D:\WINDOWS\g6896921.exe failed! Could not process line: D:\WINDOWS\g6896921.exe Status: 0xc0000034 File D:\WINDOWS\g5570953.exe not found! Deletion of file D:\WINDOWS\g5570953.exe failed! Could not process line: D:\WINDOWS\g5570953.exe Status: 0xc0000034 File D:\WINDOWS\g4376031.exe not found! Deletion of file D:\WINDOWS\g4376031.exe failed! Could not process line: D:\WINDOWS\g4376031.exe Status: 0xc0000034 File D:\WINDOWS\g3053125.exe not found! Deletion of file D:\WINDOWS\g3053125.exe failed! Could not process line: D:\WINDOWS\g3053125.exe Status: 0xc0000034 File D:\WINDOWS\g1851953.exe not found! Deletion of file D:\WINDOWS\g1851953.exe failed! Could not process line: D:\WINDOWS\g1851953.exe Status: 0xc0000034 File D:\WINDOWS\g529078.exe not found! Deletion of file D:\WINDOWS\g529078.exe failed! Could not process line: D:\WINDOWS\g529078.exe Status: 0xc0000034 File D:\WINDOWS\g1753218.exe not found! Deletion of file D:\WINDOWS\g1753218.exe failed! Could not process line: D:\WINDOWS\g1753218.exe Status: 0xc0000034 File D:\WINDOWS\g551968.exe not found! Deletion of file D:\WINDOWS\g551968.exe failed! Could not process line: D:\WINDOWS\g551968.exe Status: 0xc0000034 File D:\WINDOWS\g43273671.exe not found! Deletion of file D:\WINDOWS\g43273671.exe failed! Could not process line: D:\WINDOWS\g43273671.exe Status: 0xc0000034 File D:\WINDOWS\g42065531.exe not found! Deletion of file D:\WINDOWS\g42065531.exe failed! Could not process line: D:\WINDOWS\g42065531.exe Status: 0xc0000034 File D:\WINDOWS\g40865968.exe not found! Deletion of file D:\WINDOWS\g40865968.exe failed! Could not process line: D:\WINDOWS\g40865968.exe Status: 0xc0000034 File D:\WINDOWS\g39663218.exe not found! Deletion of file D:\WINDOWS\g39663218.exe failed! Could not process line: D:\WINDOWS\g39663218.exe Status: 0xc0000034 File D:\WINDOWS\g38349296.exe not found! Deletion of file D:\WINDOWS\g38349296.exe failed! Could not process line: D:\WINDOWS\g38349296.exe Status: 0xc0000034 File D:\WINDOWS\g37153015.exe not found! Deletion of file D:\WINDOWS\g37153015.exe failed! Could not process line: D:\WINDOWS\g37153015.exe Status: 0xc0000034 File D:\WINDOWS\g35938859.exe not found! Deletion of file D:\WINDOWS\g35938859.exe failed! Could not process line: D:\WINDOWS\g35938859.exe Status: 0xc0000034 File D:\WINDOWS\g34615578.exe not found! Deletion of file D:\WINDOWS\g34615578.exe failed! Could not process line: D:\WINDOWS\g34615578.exe Status: 0xc0000034 File D:\WINDOWS\g33421171.exe not found! Deletion of file D:\WINDOWS\g33421171.exe failed! Could not process line: D:\WINDOWS\g33421171.exe Status: 0xc0000034 File D:\WINDOWS\g32218843.exe not found! Deletion of file D:\WINDOWS\g32218843.exe failed! Could not process line: D:\WINDOWS\g32218843.exe Status: 0xc0000034 File D:\WINDOWS\g31018656.exe not found! Deletion of file D:\WINDOWS\g31018656.exe failed! Could not process line: D:\WINDOWS\g31018656.exe Status: 0xc0000034 File D:\WINDOWS\g29816312.exe not found! Deletion of file D:\WINDOWS\g29816312.exe failed! Could not process line: D:\WINDOWS\g29816312.exe Status: 0xc0000034 File D:\WINDOWS\g28617609.exe not found! Deletion of file D:\WINDOWS\g28617609.exe failed! Could not process line: D:\WINDOWS\g28617609.exe Status: 0xc0000034 File D:\WINDOWS\g27417781.exe not found! Deletion of file D:\WINDOWS\g27417781.exe failed! Could not process line: D:\WINDOWS\g27417781.exe Status: 0xc0000034 File D:\WINDOWS\g26211062.exe not found! Deletion of file D:\WINDOWS\g26211062.exe failed! Could not process line: D:\WINDOWS\g26211062.exe Status: 0xc0000034 File D:\WINDOWS\g25004234.exe not found! Deletion of file D:\WINDOWS\g25004234.exe failed! Could not process line: D:\WINDOWS\g25004234.exe Status: 0xc0000034 File D:\WINDOWS\g23802296.exe not found! Deletion of file D:\WINDOWS\g23802296.exe failed! Could not process line: D:\WINDOWS\g23802296.exe Status: 0xc0000034 File D:\WINDOWS\g22597015.exe not found! Deletion of file D:\WINDOWS\g22597015.exe failed! Could not process line: D:\WINDOWS\g22597015.exe Status: 0xc0000034 File D:\WINDOWS\g20201671.exe not found! Deletion of file D:\WINDOWS\g20201671.exe failed! Could not process line: D:\WINDOWS\g20201671.exe Status: 0xc0000034 File D:\WINDOWS\g18984140.exe not found! Deletion of file D:\WINDOWS\g18984140.exe failed! Could not process line: D:\WINDOWS\g18984140.exe Status: 0xc0000034 File D:\WINDOWS\g17781593.exe not found! Deletion of file D:\WINDOWS\g17781593.exe failed! Could not process line: D:\WINDOWS\g17781593.exe Status: 0xc0000034 File D:\WINDOWS\g16451703.exe not found! Deletion of file D:\WINDOWS\g16451703.exe failed! Could not process line: D:\WINDOWS\g16451703.exe Status: 0xc0000034 File D:\WINDOWS\g15129890.exe not found! Deletion of file D:\WINDOWS\g15129890.exe failed! Could not process line: D:\WINDOWS\g15129890.exe Status: 0xc0000034 File D:\WINDOWS\g13928531.exe not found! Deletion of file D:\WINDOWS\g13928531.exe failed! Could not process line: D:\WINDOWS\g13928531.exe Status: 0xc0000034 File D:\WINDOWS\g12723796.exe not found! Deletion of file D:\WINDOWS\g12723796.exe failed! Could not process line: D:\WINDOWS\g12723796.exe Status: 0xc0000034 File D:\WINDOWS\g11527437.exe not found! Deletion of file D:\WINDOWS\g11527437.exe failed! Could not process line: D:\WINDOWS\g11527437.exe Status: 0xc0000034 File D:\WINDOWS\g10329843.exe not found! Deletion of file D:\WINDOWS\g10329843.exe failed! Could not process line: D:\WINDOWS\g10329843.exe Status: 0xc0000034 File D:\WINDOWS\g9111375.exe not found! Deletion of file D:\WINDOWS\g9111375.exe failed! Could not process line: D:\WINDOWS\g9111375.exe Status: 0xc0000034 File D:\WINDOWS\g7787328.exe not found! Deletion of file D:\WINDOWS\g7787328.exe failed! Could not process line: D:\WINDOWS\g7787328.exe Status: 0xc0000034 File D:\WINDOWS\g6588125.exe not found! Deletion of file D:\WINDOWS\g6588125.exe failed! Could not process line: D:\WINDOWS\g6588125.exe Status: 0xc0000034 File D:\WINDOWS\g5366546.exe not found! Deletion of file D:\WINDOWS\g5366546.exe failed! Could not process line: D:\WINDOWS\g5366546.exe Status: 0xc0000034 File D:\WINDOWS\g4044218.exe not found! Deletion of file D:\WINDOWS\g4044218.exe failed! Could not process line: D:\WINDOWS\g4044218.exe Status: 0xc0000034 File D:\WINDOWS\g2847531.exe not found! Deletion of file D:\WINDOWS\g2847531.exe failed! Could not process line: D:\WINDOWS\g2847531.exe Status: 0xc0000034 File D:\WINDOWS\g1650468.exe not found! Deletion of file D:\WINDOWS\g1650468.exe failed! Could not process line: D:\WINDOWS\g1650468.exe Status: 0xc0000034 File D:\WINDOWS\g447875.exe not found! Deletion of file D:\WINDOWS\g447875.exe failed! Could not process line: D:\WINDOWS\g447875.exe Status: 0xc0000034 File D:\WINDOWS\g42045640.exe not found! Deletion of file D:\WINDOWS\g42045640.exe failed! Could not process line: D:\WINDOWS\g42045640.exe Status: 0xc0000034 File D:\WINDOWS\g40844312.exe not found! Deletion of file D:\WINDOWS\g40844312.exe failed! Could not process line: D:\WINDOWS\g40844312.exe Status: 0xc0000034 File D:\WINDOWS\g39643500.exe not found! Deletion of file D:\WINDOWS\g39643500.exe failed! Could not process line: D:\WINDOWS\g39643500.exe Status: 0xc0000034 File D:\WINDOWS\g38453265.exe not found! Deletion of file D:\WINDOWS\g38453265.exe failed! Could not process line: D:\WINDOWS\g38453265.exe Status: 0xc0000034 File D:\WINDOWS\g37237437.exe not found! Deletion of file D:\WINDOWS\g37237437.exe failed! Could not process line: D:\WINDOWS\g37237437.exe Status: 0xc0000034 File D:\WINDOWS\g36035468.exe not found! Deletion of file D:\WINDOWS\g36035468.exe failed! Could not process line: D:\WINDOWS\g36035468.exe Status: 0xc0000034 File D:\WINDOWS\g34833406.exe not found! Deletion of file D:\WINDOWS\g34833406.exe failed! Could not process line: D:\WINDOWS\g34833406.exe Status: 0xc0000034 File D:\WINDOWS\g33628437.exe not found! Deletion of file D:\WINDOWS\g33628437.exe failed! Could not process line: D:\WINDOWS\g33628437.exe Status: 0xc0000034 File D:\WINDOWS\g32309390.exe not found! Deletion of file D:\WINDOWS\g32309390.exe failed! Could not process line: D:\WINDOWS\g32309390.exe Status: 0xc0000034 File D:\WINDOWS\g31119968.exe not found! Deletion of file D:\WINDOWS\g31119968.exe failed! Could not process line: D:\WINDOWS\g31119968.exe Status: 0xc0000034 File D:\WINDOWS\g29908984.exe not found! Deletion of file D:\WINDOWS\g29908984.exe failed! Could not process line: D:\WINDOWS\g29908984.exe Status: 0xc0000034 File D:\WINDOWS\g28695312.exe not found! Deletion of file D:\WINDOWS\g28695312.exe failed! Could not process line: D:\WINDOWS\g28695312.exe Status: 0xc0000034 File D:\WINDOWS\g27493187.exe not found! Deletion of file D:\WINDOWS\g27493187.exe failed! Could not process line: D:\WINDOWS\g27493187.exe Status: 0xc0000034 File D:\WINDOWS\g26288531.exe not found! Deletion of file D:\WINDOWS\g26288531.exe failed! Could not process line: D:\WINDOWS\g26288531.exe Status: 0xc0000034 File D:\WINDOWS\g25086203.exe not found! Deletion of file D:\WINDOWS\g25086203.exe failed! Could not process line: D:\WINDOWS\g25086203.exe Status: 0xc0000034 File D:\WINDOWS\g23877437.exe not found! Deletion of file D:\WINDOWS\g23877437.exe failed! Could not process line: D:\WINDOWS\g23877437.exe Status: 0xc0000034 File D:\WINDOWS\g22673390.exe not found! Deletion of file D:\WINDOWS\g22673390.exe failed! Could not process line: D:\WINDOWS\g22673390.exe Status: 0xc0000034 File D:\WINDOWS\g21347546.exe not found! Deletion of file D:\WINDOWS\g21347546.exe failed! Could not process line: D:\WINDOWS\g21347546.exe Status: 0xc0000034 File D:\WINDOWS\g20152078.exe not found! Deletion of file D:\WINDOWS\g20152078.exe failed! Could not process line: D:\WINDOWS\g20152078.exe Status: 0xc0000034 File D:\WINDOWS\g18828156.exe not found! Deletion of file D:\WINDOWS\g18828156.exe failed! Could not process line: D:\WINDOWS\g18828156.exe Status: 0xc0000034 File D:\WINDOWS\g17632781.exe not found! Deletion of file D:\WINDOWS\g17632781.exe failed! Could not process line: D:\WINDOWS\g17632781.exe Status: 0xc0000034 File D:\WINDOWS\g16429734.exe not found! Deletion of file D:\WINDOWS\g16429734.exe failed! Could not process line: D:\WINDOWS\g16429734.exe Status: 0xc0000034 File D:\WINDOWS\g15220531.exe not found! Deletion of file D:\WINDOWS\g15220531.exe failed! Could not process line: D:\WINDOWS\g15220531.exe Status: 0xc0000034 File D:\WINDOWS\g14049656.exe not found! Deletion of file D:\WINDOWS\g14049656.exe failed! Could not process line: D:\WINDOWS\g14049656.exe Status: 0xc0000034 File D:\WINDOWS\g12780421.exe not found! Deletion of file D:\WINDOWS\g12780421.exe failed! Could not process line: D:\WINDOWS\g12780421.exe Status: 0xc0000034 File D:\WINDOWS\g11449984.exe not found! Deletion of file D:\WINDOWS\g11449984.exe failed! Could not process line: D:\WINDOWS\g11449984.exe Status: 0xc0000034 File D:\WINDOWS\g10253421.exe not found! Deletion of file D:\WINDOWS\g10253421.exe failed! Could not process line: D:\WINDOWS\g10253421.exe Status: 0xc0000034 File D:\WINDOWS\g9056406.exe not found! Deletion of file D:\WINDOWS\g9056406.exe failed! Could not process line: D:\WINDOWS\g9056406.exe Status: 0xc0000034 File D:\WINDOWS\g7843781.exe not found! Deletion of file D:\WINDOWS\g7843781.exe failed! Could not process line: D:\WINDOWS\g7843781.exe Status: 0xc0000034 File D:\WINDOWS\g6655359.exe not found! Deletion of file D:\WINDOWS\g6655359.exe failed! Could not process line: D:\WINDOWS\g6655359.exe Status: 0xc0000034 File D:\WINDOWS\g5417765.exe not found! Deletion of file D:\WINDOWS\g5417765.exe failed! Could not process line: D:\WINDOWS\g5417765.exe Status: 0xc0000034 File D:\WINDOWS\g3013109.exe not found! Deletion of file D:\WINDOWS\g3013109.exe failed! Could not process line: D:\WINDOWS\g3013109.exe Status: 0xc0000034 File D:\WINDOWS\g1807500.exe not found! Deletion of file D:\WINDOWS\g1807500.exe failed! Could not process line: D:\WINDOWS\g1807500.exe Status: 0xc0000034 File D:\WINDOWS\g1738125.exe not found! Deletion of file D:\WINDOWS\g1738125.exe failed! Could not process line: D:\WINDOWS\g1738125.exe Status: 0xc0000034 File D:\WINDOWS\g557062.exe not found! Deletion of file D:\WINDOWS\g557062.exe failed! Could not process line: D:\WINDOWS\g557062.exe Status: 0xc0000034 File D:\WINDOWS\g38441828.exe not found! Deletion of file D:\WINDOWS\g38441828.exe failed! Could not process line: D:\WINDOWS\g38441828.exe Status: 0xc0000034 File D:\WINDOWS\g37117062.exe not found! Deletion of file D:\WINDOWS\g37117062.exe failed! Could not process line: D:\WINDOWS\g37117062.exe Status: 0xc0000034 File D:\WINDOWS\g35921406.exe not found! Deletion of file D:\WINDOWS\g35921406.exe failed! Could not process line: D:\WINDOWS\g35921406.exe Status: 0xc0000034 File D:\WINDOWS\g34716921.exe not found! Deletion of file D:\WINDOWS\g34716921.exe failed! Could not process line: D:\WINDOWS\g34716921.exe Status: 0xc0000034 File D:\WINDOWS\g33393062.exe not found! Deletion of file D:\WINDOWS\g33393062.exe failed! Could not process line: D:\WINDOWS\g33393062.exe Status: 0xc0000034 File D:\WINDOWS\g32191890.exe not found! Deletion of file D:\WINDOWS\g32191890.exe failed! Could not process line: D:\WINDOWS\g32191890.exe Status: 0xc0000034 File D:\WINDOWS\g30991203.exe not found! Deletion of file D:\WINDOWS\g30991203.exe failed! Could not process line: D:\WINDOWS\g30991203.exe Status: 0xc0000034 File D:\WINDOWS\g29668250.exe not found! Deletion of file D:\WINDOWS\g29668250.exe failed! Could not process line: D:\WINDOWS\g29668250.exe Status: 0xc0000034 File D:\WINDOWS\g28467593.exe not found! Deletion of file D:\WINDOWS\g28467593.exe failed! Could not process line: D:\WINDOWS\g28467593.exe Status: 0xc0000034 File D:\WINDOWS\g27146593.exe not found! Deletion of file D:\WINDOWS\g27146593.exe failed! Could not process line: D:\WINDOWS\g27146593.exe Status: 0xc0000034 File D:\WINDOWS\g25826328.exe not found! Deletion of file D:\WINDOWS\g25826328.exe failed! Could not process line: D:\WINDOWS\g25826328.exe Status: 0xc0000034 File D:\WINDOWS\g24630421.exe not found! Deletion of file D:\WINDOWS\g24630421.exe failed! Could not process line: D:\WINDOWS\g24630421.exe Status: 0xc0000034 File D:\WINDOWS\g23305796.exe not found! Deletion of file D:\WINDOWS\g23305796.exe failed! Could not process line: D:\WINDOWS\g23305796.exe Status: 0xc0000034 File D:\WINDOWS\g21985750.exe not found! Deletion of file D:\WINDOWS\g21985750.exe failed! Could not process line: D:\WINDOWS\g21985750.exe Status: 0xc0000034 File D:\WINDOWS\g20669781.exe not found! Deletion of file D:\WINDOWS\g20669781.exe failed! Could not process line: D:\WINDOWS\g20669781.exe Status: 0xc0000034 File D:\WINDOWS\g19469218.exe not found! Deletion of file D:\WINDOWS\g19469218.exe failed! Could not process line: D:\WINDOWS\g19469218.exe Status: 0xc0000034 File D:\WINDOWS\g18139031.exe not found! Deletion of file D:\WINDOWS\g18139031.exe failed! Could not process line: D:\WINDOWS\g18139031.exe Status: 0xc0000034 File D:\WINDOWS\g16819187.exe not found! Deletion of file D:\WINDOWS\g16819187.exe failed! Could not process line: D:\WINDOWS\g16819187.exe Status: 0xc0000034 File D:\WINDOWS\g15497968.exe not found! Deletion of file D:\WINDOWS\g15497968.exe failed! Could not process line: D:\WINDOWS\g15497968.exe Status: 0xc0000034 File D:\WINDOWS\g14296984.exe not found! Deletion of file D:\WINDOWS\g14296984.exe failed! Could not process line: D:\WINDOWS\g14296984.exe Status: 0xc0000034 File D:\WINDOWS\g12972578.exe not found! Deletion of file D:\WINDOWS\g12972578.exe failed! Could not process line: D:\WINDOWS\g12972578.exe Status: 0xc0000034 File D:\WINDOWS\g11651781.exe not found! Deletion of file D:\WINDOWS\g11651781.exe failed! Could not process line: D:\WINDOWS\g11651781.exe Status: 0xc0000034 File D:\WINDOWS\g10334656.exe not found! Deletion of file D:\WINDOWS\g10334656.exe failed! Could not process line: D:\WINDOWS\g10334656.exe Status: 0xc0000034 File D:\WINDOWS\g7816703.exe not found! Deletion of file D:\WINDOWS\g7816703.exe failed! Could not process line: D:\WINDOWS\g7816703.exe Status: 0xc0000034 File D:\WINDOWS\g6607812.exe not found! Deletion of file D:\WINDOWS\g6607812.exe failed! Could not process line: D:\WINDOWS\g6607812.exe Status: 0xc0000034 File D:\WINDOWS\g5289250.exe not found! Deletion of file D:\WINDOWS\g5289250.exe failed! Could not process line: D:\WINDOWS\g5289250.exe Status: 0xc0000034 File D:\WINDOWS\g3968953.exe not found! Deletion of file D:\WINDOWS\g3968953.exe failed! Could not process line: D:\WINDOWS\g3968953.exe Status: 0xc0000034 File D:\WINDOWS\g2770656.exe not found! Deletion of file D:\WINDOWS\g2770656.exe failed! Could not process line: D:\WINDOWS\g2770656.exe Status: 0xc0000034 File D:\WINDOWS\g1565140.exe not found! Deletion of file D:\WINDOWS\g1565140.exe failed! Could not process line: D:\WINDOWS\g1565140.exe Status: 0xc0000034 File D:\WINDOWS\g368750.exe not found! Deletion of file D:\WINDOWS\g368750.exe failed! Could not process line: D:\WINDOWS\g368750.exe Status: 0xc0000034 File D:\WINDOWS\g2996765.exe not found! Deletion of file D:\WINDOWS\g2996765.exe failed! Could not process line: D:\WINDOWS\g2996765.exe Status: 0xc0000034 File D:\WINDOWS\g1813875.exe not found! Deletion of file D:\WINDOWS\g1813875.exe failed! Could not process line: D:\WINDOWS\g1813875.exe Status: 0xc0000034 File D:\WINDOWS\g6841953.exe not found! Deletion of file D:\WINDOWS\g6841953.exe failed! Could not process line: D:\WINDOWS\g6841953.exe Status: 0xc0000034 File D:\WINDOWS\g5640468.exe not found! Deletion of file D:\WINDOWS\g5640468.exe failed! Could not process line: D:\WINDOWS\g5640468.exe Status: 0xc0000034 File D:\WINDOWS\g4316546.exe not found! Deletion of file D:\WINDOWS\g4316546.exe failed! Could not process line: D:\WINDOWS\g4316546.exe Status: 0xc0000034 File D:\WINDOWS\g2999546.exe not found! Deletion of file D:\WINDOWS\g2999546.exe failed! Could not process line: D:\WINDOWS\g2999546.exe Status: 0xc0000034 File D:\WINDOWS\g1799234.exe not found! Deletion of file D:\WINDOWS\g1799234.exe failed! Could not process line: D:\WINDOWS\g1799234.exe Status: 0xc0000034 File D:\WINDOWS\g473609.exe not found! Deletion of file D:\WINDOWS\g473609.exe failed! Could not process line: D:\WINDOWS\g473609.exe Status: 0xc0000034 File D:\WINDOWS\system32\wudb.dll not found! Deletion of file D:\WINDOWS\system32\wudb.dll failed! Could not process line: D:\WINDOWS\system32\wudb.dll Status: 0xc0000034 File D:\WINDOWS\system32\dvcstatebkp-{00000000-00000000-0000000a-00001102-00000002-80641102}.dat not found! Deletion of file D:\WINDOWS\system32\dvcstatebkp-{00000000-00000000-0000000a-00001102-00000002-80641102}.dat failed! Could not process line: D:\WINDOWS\system32\dvcstatebkp-{00000000-00000000-0000000a-00001102-00000002-80641102}.dat Status: 0xc0000034 File D:\WINDOWS\system32\dvcstate-{00000000-00000000-0000000a-00001102-00000002-80641102}.dat not found! Deletion of file D:\WINDOWS\system32\dvcstate-{00000000-00000000-0000000a-00001102-00000002-80641102}.dat failed! Could not process line: D:\WINDOWS\system32\dvcstate-{00000000-00000000-0000000a-00001102-00000002-80641102}.dat Status: 0xc0000034 File D:\WINDOWS\system32\wintisv.exe not found! Deletion of file D:\WINDOWS\system32\wintisv.exe failed! Could not process line: D:\WINDOWS\system32\wintisv.exe Status: 0xc0000034 File D:\DOCUME~1\User\DANEAP~1\milihk32.dll not found! Deletion of file D:\DOCUME~1\User\DANEAP~1\milihk32.dll failed! Could not process line: D:\DOCUME~1\User\DANEAP~1\milihk32.dll Status: 0xc0000034 File D:\WINDOWS\system32\winbme32.dll not found! Deletion of file D:\WINDOWS\system32\winbme32.dll failed! Could not process line: D:\WINDOWS\system32\winbme32.dll Status: 0xc0000034 File D:\WINDOWS\system32\remstats32.dll not found! Deletion of file D:\WINDOWS\system32\remstats32.dll failed! Could not process line: D:\WINDOWS\system32\remstats32.dll Status: 0xc0000034 Folder D:\DOCUME~1\ALLUSE~1\DANEAP~1\TEMP not found! Deletion of folder D:\DOCUME~1\ALLUSE~1\DANEAP~1\TEMP failed! Could not process line: D:\DOCUME~1\ALLUSE~1\DANEAP~1\TEMP Status: 0xc0000034 Folder D:\Program Files\minicliptoolbar toolbar not found! Deletion of folder D:\Program Files\minicliptoolbar toolbar failed! Could not process line: D:\Program Files\minicliptoolbar toolbar Status: 0xc0000034 Folder D:\DOCUME~1\User\DANEAP~1\stamina not found! Deletion of folder D:\DOCUME~1\User\DANEAP~1\stamina failed! Could not process line: D:\DOCUME~1\User\DANEAP~1\stamina Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winbme32 not found! Deletion of registry key HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winbme32 failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wudb not found! Deletion of registry key HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wudb failed! Status: 0xc0000034 Completed script processing. ******************* Finished! Terminate.

VKO123 · 11 Maj 2007 06:54

Wykonaj skan AVG Anti-Spyware 7.5

http://free.grisoft.com/doc/5390/lng/us/tpl/v5#avg-anti-spyware-free

po update i zamieść logi z raportu.