ThinkPoint

[Cecilia]

Alla resterna av Kaspersky är kvar tyvärr.

 

Spara OTL på Skrivbordet.

http://oldtimer.geekstogo.com/OTL.exe

 

Starta programmet OTL (i Vista/Windows7 högerklicka och välj Kör som administratör).

Här i forumet kopierar du alla raderna i del 2 och del 3 av OTLPE-loggen, dvs de rader som liknar denna:

@Alternate Data Stream - 68 bytes -> C:\WINDOWS\wmprfSVE.prx:KAVICHS

 

Klistra in dem i rutan Custom Scans/Fixes. Kontrollera att det ser exakt likadant ut, t ex när det gäller radbrytningar.

 

Allra först i rutan Custom Scans/Fixes gör du en ny rad och på den skriver du:

:OTL

 

Stäng av alla program du ser inklusive antivirusprogram och antispionprogram så att de inte krockar med OTL.

Hur? Se http://www.bleepingcomputer.com/forums/topic114351.html

 

Tryck på Run Fix.

Om du blir tillfrågad om att starta om datorn så gör det.

Det kommer upp en logg i Anteckningar. Kopiera den och klistra in i ditt svar.

 

Om den inte kommer automatiskt så hittar du den i mappen c:\_OTL\Moved Files med ett namn som innehåller dagens datum och klockslaget för körningen.

 

Se till att aktivera antivirusprogram mm innan du ansluter datorn till internet.

 

Om datorn inte har startats om sen OTL körde så gör det.

[The OldBoy]

Cecilia såg du att jag hittade viruset vars det låg???

 

Då ska vi se här kommer den för LÅNGA loggen efter körning:

 

========== OTL ==========

ADS C:\WINDOWS\wmprfSVE.prx:KAVICHS deleted successfully.

ADS C:\WINDOWS\WMCSetup.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\WgaNotify.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\wallpaper.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\URLDownload.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\TASKMAN.EXE:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wupdmgr.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wuaueng1.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wuauclt1.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\write.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wpdtrace.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wpdmtpdr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wowexec.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmv8dmoe.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmpns.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmerrSVE.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmaudsdk.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\winmine.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\winhlp32.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wfwnet.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wdmioctl.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\w29NCPA.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\VSFLEX3.OCX:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vga.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vga.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\VEN2232.OLB:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vct3216.acm:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\VBAME.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\VB6STKIT.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\user.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\UNWISE.EXE:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\unicode.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tssoft32.acm:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tsappcmp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\TransFrameCTL.ocx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\timer.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\telephon.cpl:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\taskman.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tapiui.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\systray.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\system.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\SynTPFcs.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\SynTPCo2.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\swprv.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\stdole32.tlb:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sound.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sortkey.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sol.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sndvol32.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\SmartUI2.ocx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\skdll.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\shell.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\services.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\secpol.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\SCP32.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rsvp.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rsmsink.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rend.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\redir.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\RDOCURS.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rasautou.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pusbfd2.vxd:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pusbfd1.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\PUBDLG.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\plusmpix.scr:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pifmgr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\OVUI2RC.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\OVUI2.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\OVComS.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\OVComC.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\OVCodec2.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\olethk32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\olesvr32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\oleaccrc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\oembios.sig:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\oembios.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\oembios.bin:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\nwc.cpl:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntsdexts.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntmsevt.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Npindeo.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\netmsg.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\netevent.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ncxpnt.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\NCTWMAFile.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\NCTAudioVisualization.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\NCTAudioTransform.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\NCTAudioRecord.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\NCTAudioPlayer.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\NCTAudioInformation.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\NCTAudioGrabber.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\NCTAudioFile.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\NCTAudioEditor.oca:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\NCTAudioEditor.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\N067UFW.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mycomput.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msxml3r.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSSTDFMT.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mssign32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSRTEDIT.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msports.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msidntld.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mshearts.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msgsm32.acm:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msg723.acm:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msg711.acm:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSCOMCTL.OCX:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mscdexnt.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msaudite.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msacm32.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mprui.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mouse.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MMTypesX2.OCX:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MMToolsX2.OCX:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mmsystem.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MMRegOCX.EXE:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mmdrv.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mmdriver.inf:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MMCSystemFiles.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mlang.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MFC71KOR.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MFC71JPN.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MFC71ITA.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MFC71ESP.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MFC71ENU.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MFC71DEU.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MFC71CHT.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MFC71CHS.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mfc42loc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mcicda.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mcd32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mapi32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\main.cpl:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\lz32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\LuResult.txt:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\lodctr.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\langwrbk.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\lame_enc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\l_intl.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\krnl386.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\keyboard.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\keyboard.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kdcom.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdus.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdsw.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\KBDAL.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kb16.com:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Iyvu9_32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iuengine.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ir32_32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\INLOADER.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Initask.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\IniTask.Bin:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\inetcplc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxtray.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxsrvc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxress.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxres.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxpph.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhk.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxexps.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxdiag.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxdgps.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxdev.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxcpl.cpl:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\id3lib.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\icfgnt5.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ialmrnt5.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ialmgicd.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ialmgdev.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ialmdnt5.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ialmdev5.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ialmdd5.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iAlmCoIn_v3954.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Iacenc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hpzlnt04.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hprdvtcp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hpqPres.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\HPMPMW.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\HPMBTPMS.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\HPDOMON.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\HPBMMON.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\HPBHEALR.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hkcmd.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\himem.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\gdi.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\freecell.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\fmifs.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\FM20SVE.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\eventvwr.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\EqnClass.Dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\DSndUp.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drwtsn32.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drmstor.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\wmilib.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\w29n51.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\usbd.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\smclib.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\smcirda.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\rootmdm.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\riodrv.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\rio8drv.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\rawwan.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\raspti.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\rasirda.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\rasacd.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\ptilink.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\pciide.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\parvdm.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\OVSound2.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\OVCodek2.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\OVCE.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\OVCam2.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\oprghdlr.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\nwlnkspx.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\nwlnknb.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\nwlnkfwd.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\nwlnkflt.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\null.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\nikedrv.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\mouhid.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\mnmdd.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\mcd.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\ipfltdrv.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\ialmnt5.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\gmreadme.txt:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\gm.dls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\ftdisk.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\fsvga.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\fs_rec.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\enum1394.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\dxgthk.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\dxapi.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\dmload.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\cpqdap01.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\cinemst2.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\cdaudio.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\cbidf2k.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\btwusb.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\beep.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\bcm4sbxp.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\b57xp32.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\audstub.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\atmuni.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\atmepvc.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\aliide.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\AGRSM.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dosx.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dmocx.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dllcache\LegitCheckControl.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\DHTMLEd.ocx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dfrg.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\devmgmt.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dbgeng.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\d3dxof.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\d3drm.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ctype.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\country.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\control.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\system32\config\systemprofile\Start-meny\Program\Autostart\desktop.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\compmgmt.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\command.com:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\comm.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\comctl32.ocx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\comcat.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\CleanUp.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\clb.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ciadmin.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\charmap.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\calc.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_950.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_949.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_932.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_28592.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_28591.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_1258.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_1257.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_1256.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_1255.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_1254.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_1253.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_1251.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_1250.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\btw_ci.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\asuninst.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ActiveSkin.ocx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\activeds.tlb:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\acctres.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\$winnt$.inf:KAVICHS deleted successfully.

ADS C:\WINDOWS\SYMEVENT.LOG:KAVICHS deleted successfully.

ADS C:\WINDOWS\ST6UNST.EXE:KAVICHS deleted successfully.

ADS C:\WINDOWS\REGLOCS.OLD:KAVICHS deleted successfully.

ADS C:\WINDOWS\POCELANG.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\POCE98.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\mozregistry.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\ml-cleanup.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\MedCtrOC.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB918439.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB917734.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB911564.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB902400.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB902344.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB891122.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB887472.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\IsUninst.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\HP Cityscape.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\biwlandrvxpver.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\basecsp.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\AGRSMMSG.exe:KAVICHS deleted successfully.

ADS C:\TVPVR.Install.Log:KAVICHS deleted successfully.

ADS C:\System.Install.Log:KAVICHS deleted successfully.

ADS C:\Program\WindowsXP-KB918005-v2-x86-SVE.exe:KAVICHS deleted successfully.

ADS C:\Program\Install_Messenger.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\xpsp1hfm.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\WMSysPr9.prx:KAVICHS deleted successfully.

ADS C:\WINDOWS\winnt256.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\winnt.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\wininit.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\winhelp.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\vmmreg32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\vbaddin.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\vb.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\Vaxduk.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\updspapi.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\UC.PIF:KAVICHS deleted successfully.

ADS C:\WINDOWS\twunk_32.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\twunk_16.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\twain.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\tsoc.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\tabletoc.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\xenroll.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wshnetbs.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wshisn.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wshatm.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wowfaxui.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wowfax.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wowdeb.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmvdmoe.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmv8dmod.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmpui.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmpcore.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmpcd.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmp.ocx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmiscmgr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmiprop.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmimgmt.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wmidx.ocx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wisptis.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\winstrm.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\winspool.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\winsock.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\winoldap.mod:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\winnls.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\winmsd.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\winhelp.hlp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\winfax.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\winchat.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\win87em.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\win.com:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wifeman.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wiavusd.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wiasf.ax:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\webhits.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\webfldrs.msi:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wdl.trm:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbdbase.sve:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbdbase.nld:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbdbase.ita:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbdbase.fra:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbdbase.esn:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbdbase.enu:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbdbase.deu:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbcache.sve:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbcache.nld:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbcache.ita:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbcache.fra:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbcache.esn:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbcache.enu:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wbcache.deu:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\w32topl.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\w32tm.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\W29MLRES.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vwipxspx.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vwipxspx.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vssadmin.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vss_ps.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vjoy.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Visa kanaler.scf:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vga64k.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vga256.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vfpodbc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\verifier.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ver.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vcdex.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\vbssv.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\VBASV32.OLB:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\VBAEND32.OLB:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\VBAEN32.OLB:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\VB5DB.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\v7vga.rom:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrvpa.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrvoica.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrv80a.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrv42a.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrsvpia.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrshuta.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrsdpia.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrrtosa.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrprbda.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrmlnka.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrlogon.cmd:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrlbva.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrfaxa.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrdtea.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrdpa.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrcoina.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\usrcntra.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ureg.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\UNWISE.INI:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\unlodctr.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Uninstall.ico:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\umdmxfrm.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ufat.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\UCS32P.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\typeperf.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\typelib.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tsshutdn.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tslabels.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tslabels.h:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tskschd.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tskill.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tsdiscon.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tsd32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tscupgrd.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tscon.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\triedit.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tracert6.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\toolhelp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tftp.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\termcap:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tcpsvcs.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tcpmon.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tcmsetup.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tapiperf.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\tapi.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\TABCTL32.OCX:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sysprtj.sep:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sysprint.sep:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\syskey.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sysinv.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sysedit.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\syncapp.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\svcpack.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\subst.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\subrange.uce:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\streamci.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\storage.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sqlwoa.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sqlwid.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sqlsrv32.rll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sqlsodbc.chm:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\spxcoins.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sprio800.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sprio600.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sprestrt.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\spnike.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\softpub.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\SMMedia.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\slbrccsp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\slbcsp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sisbkup.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\shiftjis.uce:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\shellstyle.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\share.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\shadow.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sfmapi.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sfc.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\setver.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\setupdll.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\setup.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\serwvdrv.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\serialui.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\senscfg.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\secupd.sig:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\secupd.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sdpblb.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\scrrnsv.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\scriptpw.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\scredir.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\scosv.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\sccbase.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\scardssp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rwinsta.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\runas.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rtm.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rsvpperf.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rsvpmsg.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rsvpcnts.h:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rsvp.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rsopprov.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rsmui.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rsm.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rsfsaps.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rsaci.rat:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rpcns4.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\routetab.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\routemon.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\route.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\roboex32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rnr20.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\RICHTX32.OCX:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\reset.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\replace.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\relog.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\regwiz.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\regini.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\regedt32.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\recover.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rdpcfgex.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rasser.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rasrad.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rasmxs.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rasmontr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rasdial.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rasctrs.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rasctrs.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\rasctrnm.h:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\qwinsta.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Quick.ico:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\qosname.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\qappsrv.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pubprn.vbs:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\psnppagn.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pscript.sep:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pschdprf.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pschdprf.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pschdcnt.h:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\prodspec.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\prnqctl.vbs:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\prnport.vbs:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\prnmngr.vbs:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\prnjobs.vbs:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\prndrvr.vbs:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\prncnfg.vbs:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\print.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\prflbmsg.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pmspl.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\plustab.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\plusmpix.chm:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ping6.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\perfwci.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\perfwci.h:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\perfts.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\perfnw.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\perfi01D.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\perfi009.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\perffilt.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\perffilt.h:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\perfd01D.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\perfd009.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\perfci.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\perfci.h:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pentnt.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pcl.sep:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pathping.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\paqsp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\panmap.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pagefileconfig.vbs:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\OUTLWAB.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\osuninst.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Open.ico:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\olesvr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\olecli.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ole2nls.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ole2disp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ole2.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\oemdspif.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\odbc16gt.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\nwscript.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\nwevent.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\nwcfg.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\nwapi16.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\nw16.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntsd.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntmsoprq.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntmsmgr.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntlanui2.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntlanui.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntio804.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntio412.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntio411.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntio404.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntio.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntimage.gif:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntdsbcli.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntdos804.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntdos412.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntdos411.sys:KAVICHS deleted successfully.

[The OldBoy]

Del 2:

 

ADS C:\WINDOWS\System32\ntdos404.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ntdos.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\npwmsdrm.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\NovPMQueue.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\NovPMNdps.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\noise.tha:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\noise.sve:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\noise.nld:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\noise.ita:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\noise.fra:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\noise.esn:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\noise.enu:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\noise.eng:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\noise.deu:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\noise.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\noise.cht:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\noise.chs:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\nmevtmsg.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\nlsfunc.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\netware.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\neth.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\netapi.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\net.hlp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ncpa.cpl:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\nbtstat.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\narrhook.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\myodbc3d.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\myodbc3_install.LOG:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\myodbc3.lib:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\myodbc3.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msxmlr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msxml4r.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msxml4a.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msxml2r.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Mswinsck.ocx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msvideo.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msvcrt20.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msvcp50.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msvbvm50.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msswchx.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msswch.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSSTKPRP.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mssip32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSRECR40.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSRDO20.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msrclr40.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msratelc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msr2cenu.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msr2c.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSPRPSV.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msobjs.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSLS2.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSINET.OCX:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSIMUSIC.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSIMRT32.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSIMRT16.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSIMRT.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msg.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msencode.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msdtcprf.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msdtcprf.h:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSDATGRD.OCX:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MSADODC.OCX:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msacm.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\msaatext.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mrinfo.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mqprfsym.h:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mqperf.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mqperf.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mqoa20.tlb:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mqoa10.tlb:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mqoa.tlb:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mqgentr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mqcertui.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mprmsg.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mprddm.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mpnotify.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mountvol.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\modex.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mode.com:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mmutilse.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mmtask.tsk:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mm32DCMP.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mll_qic.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mll_mtf.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mll_hp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\migpwd.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mib.bin:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MFC71u.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MFC42SVE.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MFC42D.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mfc40loc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mem.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mdwmdmsp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MDT2FW95.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mdhcp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mciwave.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mciseq.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mciole32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mciole16.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mciavi.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mchgrcoi.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mcdsrv32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mapistub.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MAPISRVR.EXE:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MAPI.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mag_hook.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\lzexpand.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\lusrmgr.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\lprmonui.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\lpr.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\lpq.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\logoff.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\login.cmd:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\loghours.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\loadfix.com:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\lnkstub.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\lights.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\lanman.drv:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\label.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\l_except.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\korean.uce:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\key01.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdycl.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdycc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbduzb.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdusx.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdusr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdusl.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdur.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbduk.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdtuq.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdtuf.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdtat.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdsp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdsl1.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdsl.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdsg.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdsf.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdru1.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdru.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdro.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdpo.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdpl1.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdpl.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdno.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdne.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdmon.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdmac.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdlv1.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdlv.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdlt1.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdlt.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdla.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdkyr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdkaz.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdit142.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdit.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdir.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdic.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdhu1.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdhu.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdhept.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdhela3.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdhela2.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdhe319.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdhe220.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdhe.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdgr1.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdgr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdgkl.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdgae.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdfr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdfo.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdfi.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdfc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdest.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdes.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbddv.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdda.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdcz2.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdcz1.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdcz.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdcr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdcan.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdca.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdbu.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdbr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdblr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdbene.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdbe.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdazel.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kbdaze.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kanji_2.uce:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\kanji_1.uce:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\jupdate-1.5.0_06-b05.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\jupdate-1.5.0_04-b05.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\jobexec.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\jgsh400.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\jgsd400.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\jgmd400.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\jgaw400.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\jet500.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\IVIresizeW7.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\IVIresizePX.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\IVIresizeP6.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\IVIresizeM6.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\IVIresizeA6.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\IVIresize.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\irclass.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ipxsap.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ipxrtmgr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ipxrip.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ipxpromn.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ipxmontr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ipsec6.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iprtprio.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iprop.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iologmsg.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\instcat.sql:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\InstallUtil.InstallLog:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Installer.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\InnovaDSXP.ocx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\InkEd.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\infosoft.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\inetwh32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\indounin.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iissuba.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxzoom.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrtrk.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrtha.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrsve.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrrus.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrptg.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrptb.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrplk.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrnor.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrnld.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrkor.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrjpn.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrita.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrhun.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrheb.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrfrc.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrfra.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrfin.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxresp.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrenu.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxreng.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrell.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrdeu.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrdan.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrcsy.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrcht.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrchs.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrarb.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxrara.lrc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhtrk.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhtha.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhsve.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhrus.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhptg.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhptb.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhplk.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhnor.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhnld.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhkor.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhjpn.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhita.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhhun.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhheb.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhfrc.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhfra.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhfin.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhesp.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhenu.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxheng.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhell.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhdeu.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhdan.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhcsy.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhcht.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhchs.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxharb.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxhara.lhp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxext.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxeud.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxdo.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\igfxcfg.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ifsutil.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\IE.ico:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ideograf.uce:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\icmui.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iassvcs.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iassdo.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iassam.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iasrecst.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iaspolcy.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iasnap.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iashlpr.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iasads.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\iasacct.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ialmrem.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hticons.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hpzcon04.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hpzcoi04.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hpqactn.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hpmbtprw.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hpmbtppw.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hostname.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\homepage.inf:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hnetmon.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\HLINKPRX.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Help.ico:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\GWFSPidGen.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\graphics.pro:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\graphics.com:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\graftabl.com:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\gpupdate.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\gpkcsp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\gpedit.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\glmf32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\getuname.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\geo.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\gcdef.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\gb2312.uce:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\g711codc.ax:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ftsrch.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\fsutil.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\fsusd.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\fsmgmt.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\FM20.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\fixmapi.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\finger.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\find.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\fc.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\fastopen.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\EXSEC32.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\expand.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\exe2bin.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\eventvwr.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\eventquery.vbs:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\eventcls.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\eula.txt:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\esentutl.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\esentprf.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\esentprf.hxx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\esentprf.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\esent97.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\emptyregdb.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ega.cpi:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\edlin.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\edit.hlp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\edit.com:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\eabhbrn8.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dvdplay.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dssec.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dsound.vxd:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dsauth.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ds16gt.dLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drwatson.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\ws2ifsl.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\vdmindvd.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\tsbvcap.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\tosdvd.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\SUSCOM.SYS:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dpwsock.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dpserial.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dpnwsock.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dpnmodem.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dplay.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\doskey.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\docprop.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dmview.ocx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dmintf.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dmconfig.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dllhst3g.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dllcache\wuaueng1.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dllcache\wuauclt1.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dllcache\wmpui.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dllcache\srgb.icm:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dllcache\smcirda.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dllcache\mouhid.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dllcache\iuengine.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dllcache\drmclien.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\diskperf.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\diskmgmt.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\diskcopy.com:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\diskcomp.com:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dimap.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\diactfrm.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dhcpsapi.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dgsetup.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dgrpsetu.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Desktop.ico:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\deskperf.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\deskmon.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\deskadp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\declrds.ax:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\debug.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ddeml.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\DDAO36.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\d3dramp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\d3dpmesh.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\d3dim.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\csseqchk.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\CSeedOcx.ocx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\cpqinfo.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\convert.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\console.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\CONFIG.TMP:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\compobj.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\compact.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\comp.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\commdlg.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\COMDLG32.OCX:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\cnvfat.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\CNQU70.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\cnetcfg.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\cmpbk32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\cmos.ram:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\cmmgr32.hlp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\cmdlib.wsc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\cliconfg.rll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\cliconf.chm:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ckcnv.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\cidaemon.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ciadv.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\chkntfs.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\chkdsk.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\chcp.com:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\certmgr.msc:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\cdmodem.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ccfgnt.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\capicom.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_936.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_875.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_874.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_869.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_866.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_865.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_863.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_861.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_860.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_857.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_855.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_852.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_850.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_775.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_737.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_500.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_437.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_28605.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_28603.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_28599.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_28598.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\C_28597.NLS:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\C_28595.NLS:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\C_28594.NLS:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_28593.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_21866.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_20905.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_20866.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_20261.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_20127.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_1252.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_1026.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_10082.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_10081.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_10079.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_10029.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_10017.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_10010.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_10007.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_10006.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_10000.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\c_037.nls:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\bopomofo.uce:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\bootvrfy.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\bootok.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\bios4.rom:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\bios1.rom:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\avwav.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\avtapi.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\avmeter.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\avifile.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\avicap.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\AUTOEXEC.NT:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\autodisc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\atrace.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\atmpvcno.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\atkctrs.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\asr_ldm.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\asinst.cfg:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\arp.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\append.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\apcups.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ansi.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\adsnds.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\adptif.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\acledit.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\acelpdec.ax:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ac3filter.cpl:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\aaaamon.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\12520850.cpx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\12520437.cpx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\$ncsp$.inf:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\WFWNET.DRV:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\VGA.DRV:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\VER.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\TIMER.DRV:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\TAPI.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\SYSTEM.DRV:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\stdole.tlb:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\SOUND.DRV:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\SHELL.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\setup.inf:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\OLESVR.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\OLECLI.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\MSVIDEO.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\MOUSE.DRV:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\MMTASK.TSK:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\MMSYSTEM.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\MCIWAVE.DRV:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\MCISEQ.DRV:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\MCIAVI.DRV:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\LZEXPAND.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\KEYBOARD.DRV:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\COMMDLG.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\AVIFILE.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System\AVICAP.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\SynInst.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\Solfjädrar.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\SMWizard.INI:KAVICHS deleted successfully.

ADS C:\WINDOWS\smscfg.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\sessmgr.setup.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\Rhododendron.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\regopt.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\reg.prm:KAVICHS deleted successfully.

ADS C:\WINDOWS\RAR.PIF:KAVICHS deleted successfully.

ADS C:\WINDOWS\PlusDMESetup.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\PKZIP.PIF:KAVICHS deleted successfully.

ADS C:\WINDOWS\PKUNZIP.PIF:KAVICHS deleted successfully.

ADS C:\WINDOWS\Ökensand.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\OEWABLog.txt:KAVICHS deleted successfully.

ADS C:\WINDOWS\ODBCINST.INI:KAVICHS deleted successfully.

ADS C:\WINDOWS\ODBC.INI:KAVICHS deleted successfully.

ADS C:\WINDOWS\ocmsn.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\ocgen.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\ntdtcsetup.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\nsw.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\NOCLOSE.PIF:KAVICHS deleted successfully.

ADS C:\WINDOWS\netfxocm.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\msmqinst.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\msgsocm.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\msdfmap.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\MAXLINK.INI:KAVICHS deleted successfully.

ADS C:\WINDOWS\LUINSTALL.LOG:KAVICHS deleted successfully.

ADS C:\WINDOWS\LHA.PIF:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB918005.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB917953.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB917159.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB916595.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB916281.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB914389.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB914388.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB913580.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB913446.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB912945.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB912919.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB912812.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB911927.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB911567.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB911562.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB911280.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB910437.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB908531.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB908519.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB905915.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB904942.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB904706.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB903235.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB901214.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB900485.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB898461.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB896688.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB896428.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB896422.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB896358.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB893803v2.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB893086.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB893066.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB891781.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB890923.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB890859.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB890175.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB890046.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB888302.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB888113.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB887797.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB887742.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB886185.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB885836.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB885835.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB885250.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB884575.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB883939.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB883667.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB873339.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB873333.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\Kalejdoskop.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\Kaffekoppar.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\ipixActivex.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\iis6.BAK:KAVICHS deleted successfully.

ADS C:\WINDOWS\Gotlandsbris.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\GatorPdpLoudInstaller.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\Fjädrar.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\Fisketur.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\FaxSetup.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\explorer.scf:KAVICHS deleted successfully.

ADS C:\WINDOWS\DtcInstall.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\comsetup.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\COM+.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\cmsetacl.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\clock.avi:KAVICHS deleted successfully.

ADS C:\WINDOWS\chipset.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\Bubblor.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\ARJ.PIF:KAVICHS deleted successfully.

ADS C:\WINDOWS\Ärgad koppar.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\AGRSMMSG(2).exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\agrsmdel.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\ActiveSkin.INI:KAVICHS deleted successfully.

ADS C:\WINDOWS\_default.pif:KAVICHS deleted successfully.

ADS C:\UNWISE.EXE:KAVICHS deleted successfully.

ADS C:\ticrdbus.log:KAVICHS deleted successfully.

ADS C:\syntp.log:KAVICHS deleted successfully.

ADS C:\sunjava.log:KAVICHS deleted successfully.

ADS C:\setup.log:KAVICHS deleted successfully.

ADS C:\sedinst2.log:KAVICHS deleted successfully.

ADS C:\sedinst.log:KAVICHS deleted successfully.

ADS C:\Program\win.com.zip:KAVICHS deleted successfully.

ADS C:\Program\WebfilmBig.wmv:KAVICHS deleted successfully.

ADS C:\Program\usbready.exe:KAVICHS deleted successfully.

ADS C:\Program\tp312swe.exe:KAVICHS deleted successfully.

ADS C:\Program\PlusLabyrinthBonus.exe:KAVICHS deleted successfully.

ADS C:\Program\pllangs.exe:KAVICHS deleted successfully.

ADS C:\Program\personal4.01.exe:KAVICHS deleted successfully.

ADS C:\Program\pcsecuritytest.zip:KAVICHS deleted successfully.

ADS C:\Program\mw9791sve.exe:KAVICHS deleted successfully.

ADS C:\Program\MSNToolbarSetup_sv.exe:KAVICHS deleted successfully.

ADS C:\Program\DESETUP.EXE:KAVICHS deleted successfully.

ADS C:\Program\DCube150D_manual_eng.zip:KAVICHS deleted successfully.

ADS C:\Program\aawsepersonal.exe:KAVICHS deleted successfully.

ADS C:\Program\940-svc-xpinfu.exe:KAVICHS deleted successfully.

ADS C:\NTLDR:KAVICHS deleted successfully.

ADS C:\NTDETECT.COM:KAVICHS deleted successfully.

ADS C:\ioSpecial.ini:KAVICHS deleted successfully.

ADS C:\INSTALL.LOG:KAVICHS deleted successfully.

ADS C:\HSC.log:KAVICHS deleted successfully.

ADS C:\FolderConfig.Install.Log:KAVICHS deleted successfully.

ADS C:\extfmradio.log:KAVICHS deleted successfully.

ADS C:\Documents and Settings\NetworkService\ntuser.ini:KAVICHS deleted successfully.

ADS C:\Documents and Settings\NetworkService\Lokala inställningar\Application Data\fusioncache.dat:KAVICHS deleted successfully.

ADS C:\Documents and Settings\LogMeInRemoteUser\Start-meny\Program\Autostart\desktop.ini:KAVICHS deleted successfully.

ADS C:\Documents and Settings\LogMeInRemoteUser\ntuser.ini:KAVICHS deleted successfully.

ADS C:\Documents and Settings\LogMeInRemoteUser\Mina dokument\desktop.ini:KAVICHS deleted successfully.

ADS C:\Documents and Settings\LogMeInRemoteUser\Lokala inställningar\Application Data\IconCache.db:KAVICHS deleted successfully.

ADS C:\Documents and Settings\LogMeInRemoteUser\Lokala inställningar\Application Data\fusioncache.dat:KAVICHS deleted successfully.

ADS C:\Documents and Settings\LogMeInRemoteUser\Application Data\Microsoft\Internet Explorer\Quick Launch\Visa skrivbordet.scf:KAVICHS deleted successfully.

ADS C:\Documents and Settings\LogMeInRemoteUser\Application Data\Microsoft\Internet Explorer\Quick Launch\Starta webbläsaren Internet Explorer.lnk:KAVICHS deleted successfully.

ADS C:\Documents and Settings\LogMeInRemoteUser\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini:KAVICHS deleted successfully.

ADS C:\Documents and Settings\LogMeInRemoteUser\Application Data\desktop.ini:KAVICHS deleted successfully.

ADS C:\Documents and Settings\LocalService\ntuser.ini:KAVICHS deleted successfully.

ADS C:\bcmwl5.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\wmsetup.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\WindowsUpdate.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\wincmd.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\winamp.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\wiaservc.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\WGA.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wpa.dbl:KAVICHS deleted successfully.

ADS C:\WINDOWS\setupapi.log.0.old:KAVICHS deleted successfully.

ADS C:\WINDOWS\setupact.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\SchedLgU.Txt:KAVICHS deleted successfully.

ADS C:\WINDOWS\popcinfo.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB900725.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB899591.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB899588.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB899587.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB896423.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB893756.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\IsUn041d.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\bootstat.dat:KAVICHS deleted successfully.

ADS C:\WINDOWS\_delis32.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pxwma.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\spupdsvc.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB917344.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB900930.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB896727.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB894391.log:KAVICHS deleted successfully.

ADS C:\Program\Analog Devices\SoundMAX\Smax4.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pxcpyi64.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\MP2enc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\FNTCACHE.DAT:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\BCMWLU00.EXE:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB905749.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB905414.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB901017.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB899589.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB896424.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\UNINSTMMC.EXE:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\wshsv.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\WMErrENU.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\WACntlPnl.cpl:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\utildll.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\traffic.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\SysFCopy.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\SSubTmr6.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\riched32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\pintool.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\oleacc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\OEMLogo.bmp:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\oeminfo.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\netui2.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\mscat32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\jssv.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\IPX32d56.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ifxcardm.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\HPMystPM.DLL:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\HPMProp.bin:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\hccutils.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\FSFWrap.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\Flash.ocx:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drmclien.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\smwdm.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\rdpcdd.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\pfc.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\EabUsb.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\eabfiltr.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\aeaudio.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\drivers\acpiec.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dmdskres.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\dfrgres.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\crtdll.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\ChilkatZip2.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\cards.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\bootvid.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\bcsprsrc.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\BCMWLD2K.EXE:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\basecsp.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\axaltocm.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\avicap32.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\Setup1.exe:KAVICHS deleted successfully.

ADS C:\WINDOWS\KB911565.log:KAVICHS deleted successfully.

ADS C:\WINDOWS\fmj_ti7h.dv3:KAVICHS deleted successfully.

ADS C:\Program\Wikipedia Tracker.msi:KAVICHS deleted successfully.

 

OTL by OldTimer - Version 3.2.17.3 log created on 11272010_202758

[Cecilia]

På sidan http://www.virustotal.com trycker du på Bläddra-knappen och klistrar in följande filnamn i rutan, tryck på Öppna och sedan Skicka Fil. Vänta tills resultatet är klart (Närvarande status blir genomförd). Klistra in en länk till resultatet här.

C:\WINDOVS\system32\wmdrmdev.dll

 

Se om något av programmen som tidigare inte har fungerat nu kan köra.

[The OldBoy]

När jag gör som du skriver så säger den att sökvägen är fel??? Filnamnet som jag skall klistra in är det detta;

C:\WINDOVS\system32\wmdrmdev.dll

 

Jag klickar öppna och vars ska det då skrivas/klistras in??? Jag kan inte heller skriva in direkt i rutan???

[Cecilia]

Ahh, jag kopierade vad du skrev förut men det är ju felstavat.

 

C:\WINDOWS\system32\wmdrmdev.dll

 

På sidan http://www.virustotal.com/ klickar du först på Bläddra knappen och i det nya fönstret som kommer upp går det att klistra in i rutan för filnamn, men det är klart att du kan bläddra fram filen också om du vill.

[The OldBoy]

Oppss...

 

När jag gör som du skriver så säger den att sökvägen är fel??? Filnamnet som jag skall klistra in är det detta;

C:\WINDOVS\system32\wmdrmdev.dll

 

Jag klickar öppna och vars ska det då skrivas/klistras in??? Jag kan inte heller skriva in direkt i rutan???

Detta svar får jag:

 

http://www.virustotal.com/file-scan/reanalysis.html?id=f135abce1daa46e9d8567dae419efa11188c3b5da88aef43d01793418942e9eb-1290906747

[Cecilia]

I så fall ser det ju onekligen ut som att det skulle vara falsklarm av F-secure.

God natt!

[The OldBoy]

Samma sak fortfarande med ALLA programmen dom hänger sig efter ett par minuter...

[Cecilia]

Skanna datorn online på http://www.eset.com/onlinescan/

För att inte skannern ska ta för lång tid på sig stäng av ditt antivirusprogram under tiden.

 

Avbocka alternativet "Remove found threats"

Bocka för "Scan Archives

 

Klicka på "Advanced Settings"

Bocka för:

Scan for potentially unwanted applications

Scan for potentially unsafe applications

Enable Anti-Stealth Technology

 

Tryck på Scan

 

När skanningen är klar skapas loggfilen C:\Program\Eset\Eset Online Scanner\log.txt. Öppna den i Anteckningar och klistra sedan in innehållet i ditt svar.

[The OldBoy]

Här kommer loggen;

 

ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6211

# api_version=3.0.2

# EOSSerial=95f0f89667e1e049a03aa70b14ee793e

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2010-11-29 02:12:39

# local_time=2010-11-29 03:12:39 (+0100, Västeuropa, normaltid)

# country="Sweden"

# lang=1033

# osver=5.1.2600 NT Service Pack 3

# compatibility_mode=512 16777215 100 0 361389 361389 0 0

# compatibility_mode=768 16777215 100 0 104377024 104377024 0 0

# compatibility_mode=1024 16777215 100 0 0 0 0 0

# compatibility_mode=2304 16777191 100 0 0 0 0 0

# compatibility_mode=6143 16777215 0 0 0 0 0 0

# compatibility_mode=8192 67108863 100 0 4077 4077 0 0

# scanned=173872

# found=1

# cleaned=0

# scan_time=24963

C:\Documents and Settings\Administratör\Application Data\Sun\Java\Deployment\cache\6.0\62\7341fe3e-7d2e4646 a variant of Java/TrojanDownloader.OpenStream.NAU trojan 00000000000000000000000000000000 I

[Cecilia]

Det där kan ha varit vägen in för Thinkpoint, en skadlig java-applet som kunde härja fritt på grund av att det installerade Java har fullt med säkerhetshål eftersom det är gamla versioner.

 

Stäng alla program.

Kör OTL.

Under Output högt upp så välj Minimal Output.

Under Standard Registry välj All.

 

I rutan Custom scan's and fixes klistra in följande rader (kolla att du verkligen får med alla raderna):

%SYSTEMDRIVE%\*.*
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\System32\config\*.sav
CREATERESTOREPOINT
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles

 

Tryck på Run Scan och låt programmet köra ostört.

 

När det är klart så skapas två loggfiler på Skrivbordet, OTL.txt och Extras.txt. I ditt svar klistrar du in loggen OTL.txt. Medan du bifogar Extras.txt som en fil.

[The OldBoy]

Här är den senaste loggen!

 

OTL logfile created on: 2010-11-29 11:59:33 - Run 1

OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\Administratör\Skrivbord

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 0000041D | Country: Sverige | Language: SVE | Date Format: yyyy-MM-dd

 

759,00 Mb Total Physical Memory | 212,00 Mb Available Physical Memory | 28,00% Memory free

1,00 Gb Paging File | 0,00 Gb Available in Paging File | 47,00% Paging File free

Paging file location(s): C:\pagefile.sys 372 744 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program

Drive C: | 37,26 Gb Total Space | 12,79 Gb Free Space | 34,32% Space Free | Partition Type: NTFS

 

Computer Name: JIM | User Name: Administratör | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 

========== Processes (SafeList) ==========

 

PRC - C:\Documents and Settings\Administratör\Skrivbord\OTL.exe (OldTimer Tools)

PRC - C:\Program\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)

PRC - C:\Program\Mozilla Firefox\firefox.exe (Mozilla Corporation)

PRC - C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fssm32.exe (F-Secure Corporation)

PRC - C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsgk32.exe (F-Secure Corporation)

PRC - C:\Program\Telia\Telias sakerhetstjanster\Common\FSMA32.EXE (F-Secure Corporation)

PRC - C:\Program\Telia\Telias sakerhetstjanster\Common\FSLAUNCHER0.EXE (F-Secure Corporation)

PRC - C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsgk32st.exe (F-Secure Corporation)

PRC - C:\Program\Telia\Telia_Mobilt_bredband\Telia_Mobilt_bredband.exe (Telia)

PRC - C:\Program\ExtraFilm Designer SE\EFUploadSrv.exe (Textalk AB)

PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)

PRC - C:\Program\Windows Defender\MsMpEng.exe (Microsoft Corporation)

PRC - C:\Program\Microsoft ActiveSync\wcescomm.exe (Microsoft Corporation)

PRC - C:\Program\Microsoft ActiveSync\rapimgr.exe (Microsoft Corporation)

PRC - C:\Program\Analog Devices\SoundMAX\SMax4PNP.exe (Analog Devices, Inc.)

PRC - C:\Program\Analog Devices\SoundMAX\SMAgent.exe (Analog Devices, Inc.)

PRC - C:\Program\ScanSoft\OmniPageSE\opware32.exe (ScanSoft, Inc)

 

 

========== Modules (SafeList) ==========

 

MOD - C:\Documents and Settings\Administratör\Skrivbord\OTL.exe (OldTimer Tools)

MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)

MOD - C:\Program\ScanSoft\OmniPageSE\ophook32.dll (ScanSoft, Inc)

 

 

========== Win32 Services (SafeList) ==========

 

SRV - (GB-PVR Recording Service) -- c:\mmc\program\tvpvr\gbpvrrecordingservice.exe File not found

SRV - (FSORSPClient) -- C:\Program\Telia\Telias sakerhetstjanster\ORSP Client\fsorsp.exe (F-Secure Corporation)

SRV - (FSDFWD) -- C:\Program\Telia\Telias sakerhetstjanster\FWES\Program\fsdfwd.exe (F-Secure Corporation)

SRV - (FSMA) -- C:\Program\Telia\Telias sakerhetstjanster\Common\FSMA32.EXE (F-Secure Corporation)

SRV - (F-Secure Gatekeeper Handler Starter) -- C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsgk32st.exe (F-Secure Corporation)

SRV - (EFUploadSrv) -- C:\Program\ExtraFilm Designer SE\EFUploadSrv.exe (Textalk AB)

SRV - (LMIMaint) -- C:\Program\LogMeIn\x86\RaMaint.exe (LogMeIn, Inc.)

SRV - (LogMeIn) -- C:\Program\LogMeIn\x86\LogMeIn.exe (LogMeIn, Inc.)

SRV - (WLSetupSvc) -- C:\Program\Windows Live\installer\WLSetupSvc.exe (Microsoft Corporation)

SRV - (NMIndexingService) -- C:\Program\Delade filer\Ahead\Lib\NMIndexingService.exe (Nero AG)

SRV - (WinDefend) -- C:\Program\Windows Defender\MsMpEng.exe (Microsoft Corporation)

SRV - (SoundMAX Agent Service (default)) -- C:\Program\Analog Devices\SoundMAX\SMAgent.exe (Analog Devices, Inc.)

 

 

========== Driver Services (SafeList) ==========

 

DRV - (catchme) -- C:\DOCUME~1\ADMINI~1\LOKALA~1\Temp\catchme.sys File not found

DRV - (Ad-Watch Connect Filter) -- C:\WINDOWS\System32\drivers\NSDriver.sys File not found

DRV - (F-Secure Gatekeeper) -- C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\minifilter\fsgk.sys ()

DRV - (fsbts) -- C:\WINDOWS\system32\Drivers\fsbts.sys ()

DRV - (F-Secure HIPS) -- C:\Program\Telia\Telias sakerhetstjanster\HIPS\drivers\fshs.sys (F-Secure Corporation)

DRV - (FSFW) -- C:\WINDOWS\System32\drivers\fsdfw.sys (F-Secure Corporation)

DRV - (F-Secure Filter) -- C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\win2k\fsfilter.sys ()

DRV - (F-Secure Recognizer) -- C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\win2k\fsrec.sys ()

DRV - (GTUHSSER) -- C:\WINDOWS\system32\drivers\gtuhsser.sys (Option N.V.)

DRV - (GTUHSBUS) -- C:\WINDOWS\system32\drivers\gtuhsbus.sys (Option N.V.)

DRV - (GTUHSNDISIPXP) -- C:\WINDOWS\system32\drivers\gtuhs51.sys (Option N.V.)

DRV - (LMIRfsDriver) -- C:\WINDOWS\system32\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)

DRV - (LMIRfsClientNP) -- C:\WINDOWS\System32\LMIRfsClientNP.dll (LogMeIn, Inc.)

DRV - (usbaudio) USB-ljuddrivrutiner (WDM) -- C:\WINDOWS\system32\drivers\usbaudio.sys (Microsoft Corporation)

DRV - (LMIInfo) -- C:\Program\LogMeIn\x86\rainfo.sys (LogMeIn, Inc.)

DRV - (SynTP) -- C:\WINDOWS\system32\drivers\SynTP.sys (Synaptics, Inc.)

DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)

DRV - (se27unic) Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (WDM) -- C:\WINDOWS\system32\drivers\se27unic.sys (MCCI)

DRV - (SE27obex) -- C:\WINDOWS\system32\drivers\SE27obex.sys (MCCI)

DRV - (se27nd5) Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (NDIS) -- C:\WINDOWS\system32\drivers\se27nd5.sys (MCCI)

DRV - (SE27mgmt) Sony Ericsson Device 039 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\system32\drivers\SE27mgmt.sys (MCCI)

DRV - (SE27mdm) -- C:\WINDOWS\system32\drivers\SE27mdm.sys (MCCI)

DRV - (SE27mdfl) -- C:\WINDOWS\system32\drivers\SE27mdfl.sys (MCCI)

DRV - (SE27bus) Sony Ericsson Device 039 Driver driver (WDM) -- C:\WINDOWS\system32\drivers\SE27bus.sys (MCCI)

DRV - (A3AB) D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB) -- C:\WINDOWS\system32\drivers\A3AB.sys (D-Link Corporation)

DRV - (AgereSoftModem) -- C:\WINDOWS\system32\drivers\AGRSM.sys (Agere Systems)

DRV - (w29n51) Intel® -- C:\WINDOWS\system32\drivers\w29n51.sys (Intel® Corporation)

DRV - (BTWUSB) -- C:\WINDOWS\system32\drivers\btwusb.sys (Broadcom Corporation.)

DRV - (b57w2k) -- C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation)

DRV - (SMCIRDA) -- C:\WINDOWS\system32\drivers\smcirda.sys (SMSC)

DRV - (bcm4sbxp) -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys (Broadcom Corporation)

DRV - (eabfiltr) -- C:\WINDOWS\system32\drivers\eabfiltr.sys (Hewlett-Packard Company)

DRV - (ClntMgmt.sys) -- C:\WINDOWS\System32\Drivers\ClntMgmt.sys (Hewlett-Packard)

DRV - (pfc) -- C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)

DRV - (eabusb) -- C:\WINDOWS\system32\drivers\EabUsb.sys (Hewlett-Packard Company)

DRV - (SUSCOM) -- C:\WINDOWS\system32\drivers\SUSCOM.SYS (Susteen Inc.)

DRV - (AliIde) -- C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)

 

 

========== Standard Registry (All) ==========

 

 

========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157'>http://go.microsoft.com/fwlink/?LinkId=69157

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896'>http://go.microsoft.com/fwlink/?LinkId=54896

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/sv/srchasst/srchcust.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = My Web Search

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultUrl = http://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZRxdm077YYSE&fl=0&ptb=v5ZfEERLRIG0y.aD.RwEIQ&url=http://edits.mywebsearch.com/toolbaredits/barsearch.jhtml&st=sb&searchfor={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.sparbanken-nord.se//

IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

========== FireFox ==========

 

FF - prefs.js..browser.startup.homepage: "//eforum.idg.se/topic/325329-thinkpoint/"

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.2.1

FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.12

 

FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program\Java\jre6\lib\deploy\jqs\ff [2009-06-03 09:21:54 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Firefox\extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009-09-02 17:21:39 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program\Mozilla Firefox\components [2010-11-09 15:14:00 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program\Mozilla Firefox\plugins [2010-11-09 15:14:00 | 000,000,000 | ---D | M]

 

[2010-08-05 14:15:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administratör\Application Data\Mozilla\Extensions

[2010-08-05 14:15:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administratör\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

[2010-11-27 21:28:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administratör\Application Data\Mozilla\Firefox\Profiles\968eaeph.default\extensions

[2010-08-13 17:25:23 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Administratör\Application Data\Mozilla\Firefox\Profiles\968eaeph.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}

[2010-09-05 13:19:40 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Documents and Settings\Administratör\Application Data\Mozilla\Firefox\Profiles\968eaeph.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}

[2010-08-05 14:15:39 | 000,000,000 | ---D | M] -- C:\Program\Mozilla Firefox\extensions

[2010-11-09 15:14:00 | 000,000,000 | ---D | M] (Default) -- C:\Program\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

[2010-11-09 15:12:10 | 000,025,048 | ---- | M] (Mozilla Foundation) -- C:\Program\Mozilla Firefox\components\browserdirprovider.dll

[2010-11-09 15:12:12 | 000,140,248 | ---- | M] (Mozilla Foundation) -- C:\Program\Mozilla Firefox\components\brwsrcmp.dll

[2007-07-26 03:50:16 | 000,717,312 | ---- | M] (DivX,Inc.) -- C:\Program\Mozilla Firefox\plugins\npdivx32.dll

[2010-11-09 15:13:04 | 000,066,520 | ---- | M] (mozilla.org) -- C:\Program\Mozilla Firefox\plugins\npnul32.dll

[2010-11-09 15:13:30 | 000,001,470 | ---- | M] () -- C:\Program\Mozilla Firefox\searchplugins\allaannonser-sv-SE.xml

[2010-11-09 15:13:30 | 000,001,534 | ---- | M] () -- C:\Program\Mozilla Firefox\searchplugins\creativecommons.xml

[2010-11-09 15:13:31 | 000,002,371 | ---- | M] () -- C:\Program\Mozilla Firefox\searchplugins\google.xml

[2010-11-09 15:13:31 | 000,002,670 | ---- | M] () -- C:\Program\Mozilla Firefox\searchplugins\prisjakt-sv-SE.xml

[2010-11-09 15:13:31 | 000,000,948 | ---- | M] () -- C:\Program\Mozilla Firefox\searchplugins\tyda-sv-SE.xml

[2010-11-09 15:13:32 | 000,001,174 | ---- | M] () -- C:\Program\Mozilla Firefox\searchplugins\wikipedia-sv-SE.xml

[2010-11-09 15:13:32 | 000,000,951 | ---- | M] () -- C:\Program\Mozilla Firefox\searchplugins\yahoo-sv-SE.xml

 

O1 HOSTS File: ([2004-08-04 09:00:00 | 000,000,710 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (Länkhjälp till Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Delade filer\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (Windows Live inloggningshjälpen) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program\Delade filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)

O3 - HKCU\..\Toolbar\ShellBrowser: (&Adress) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)

O3 - HKCU\..\Toolbar\WebBrowser: (&Adress) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)

O3 - HKCU\..\Toolbar\WebBrowser: (&Länkar) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)

O3 - HKCU\..\Toolbar\WebBrowser: (&Links) - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)

O4 - HKLM..\Run: [AGRSMMSG] C:\WINDOWS\AGRSMMSG.exe (Agere Systems)

O4 - HKLM..\Run: [F-Secure Manager] C:\Program\Telia\Telias sakerhetstjanster\Common\FSM32.EXE (F-Secure Corporation)

O4 - HKLM..\Run: [F-Secure TNB] C:\Program\Telia\Telias sakerhetstjanster\FSGUI\TNBUtil.exe (F-Secure Corporation)

O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation)

O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe (HP)

O4 - HKLM..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe (Intel Corporation)

O4 - HKLM..\Run: [LogMeIn GUI] C:\Program\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)

O4 - HKLM..\Run: [Omnipage] C:\Program\ScanSoft\OmniPageSE\opware32.exe (ScanSoft, Inc)

O4 - HKLM..\Run: [soundMAX] C:\Program\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.)

O4 - HKLM..\Run: [soundMAXPnP] C:\Program\Analog Devices\SoundMAX\SMax4PNP.exe (Analog Devices, Inc.)

O4 - HKLM..\Run: [synTPEnh] C:\Program\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)

O4 - HKLM..\Run: [synTPLpr] C:\Program\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)

O4 - HKLM..\Run: [synTPStart] C:\Program\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)

O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)

O4 - HKCU..\Run: [H/PC Connection Agent] C:\Program\Microsoft ActiveSync\wcescomm.exe (Microsoft Corporation)

O4 - Startup: C:\Documents and Settings\Administratör\Start-meny\Program\Autostart\Telia Mobilt bredband.lnk = C:\Program\Telia\Telia_Mobilt_bredband\Telia_Mobilt_bredband.exe (Telia)

O4 - Startup: C:\Documents and Settings\Administratör\Start-meny\Program\Autostart\Voice Xpress.lnk = C:\Program\LHSP\Voice Xpress\Speechcenter\speechcenter.exe (Lernout & Hauspie Speech Products)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disableregistrytools = 0

O9 - Extra Button: Blogga detta - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : &Blogga detta i Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Skapa mobilfavorit... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation)

O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program\Telia\Telias sakerhetstjanster\FSPS\program\FSLSP.DLL (F-Secure Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program\Telia\Telias sakerhetstjanster\FSPS\program\FSLSP.DLL (F-Secure Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program\Telia\Telias sakerhetstjanster\FSPS\program\FSLSP.DLL (F-Secure Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program\Telia\Telias sakerhetstjanster\FSPS\program\FSLSP.DLL (F-Secure Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Program\Telia\Telias sakerhetstjanster\FSPS\program\FSLSP.DLL (F-Secure Corporation)

O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} http://download.microsoft.com/download/e/7/3/e7345c16-80aa-4488-ae10-9ac6be844f99/OGAControl.cab (Office Genuine Advantage Validation Tool)

O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} http://www.ipix.com/viewers/ipixx.cab (iPIX ActiveX Control)

O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/5/b/0/5b0d4654-aa20-495c-b89f-c1c34c691085/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)

O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} http://office.microsoft.com/officeupdate/content/opuc3.cab (Office Update Installation Engine)

O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} http://www.fujidirekt.se/aurigma/ImageUploader5.cab (Image Uploader Control)

O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase4009.cab (Windows Live Safety Center Base Module)

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1120127310453 (WUWebControl Class)

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (Reg Error: Key error.)

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1259825040421 (MUWebControl Class)

O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab'>http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab'>http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)

O16 - DPF: {8BC53B30-32E4-4ED3-BEF9-DB761DB77453} http://u3.sandisk.com/download/apps/LPInstaller.CAB (CInstallLPCtrl Object)

O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} http://www.pattayalivecam.com/AxisCamControl.cab (CamImage Class)

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab (MsnMessengerSetupDownloadControl Class)

O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} http://office.microsoft.com/officeupdate/content/opuc4.cab (Office Update Installation Engine)

O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Java Plug-in 1.5.0_11)

O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01)

O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)

O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)

O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)

O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} http://83.166.23.7/activex/AMC.cab (AxisMediaControlEmb Class)

O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)

O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\ipp - No CLSID value found

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program\Delade filer\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)

O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)

O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp - No CLSID value found

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program\Delade filer\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program\Delade filer\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)

O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)

O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)

O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)

O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)

O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)

O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)

O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UIHost - (C:\WINDOWS\system32\logonuiX.exe) - C:\WINDOWS\system32\logonuiX.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)

O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)

O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)

O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)

O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - C:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation)

O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)

O20 - Winlogon\Notify\LMIinit: DllName - LMIinit.dll - C:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)

O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)

O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)

O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)

O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)

O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)

O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - C:\WINDOWS\System32\WgaLogon.dll (Microsoft Corporation)

O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - CLSID or File not found.

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll (Microsoft Corporation)

O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)

O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)

O24 - Desktop Components:0 (Min aktuella startsida) - About:Home

O24 - Desktop WallPaper: C:\Documents and Settings\Administratör\Lokala inställningar\Application Data\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administratör\Lokala inställningar\Application Data\Microsoft\Wallpaper1.bmp

O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program\Windows Defender\MpShHook.dll (Microsoft Corporation)

O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)

O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)

O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)

O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)

O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)

O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)

O31 - SafeBoot: AlternateShell - cmd.exe

O32 - HKLM CDRom: AutoRun - 1

O33 - MountPoints2\{5b856eae-4977-11db-bd8a-00904bad9b9a}\Shell - "" = AutoRun

O33 - MountPoints2\{5b856eae-4977-11db-bd8a-00904bad9b9a}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -- File not found

O33 - MountPoints2\{e144e96e-7888-11de-b628-00904bad9b9a}\Shell - "" = AutoRun

O33 - MountPoints2\{e144e96e-7888-11de-b628-00904bad9b9a}\Shell\AutoRun\command - "" = E:\autorun.exe -- File not found

O33 - MountPoints2\{e4f9e50a-dccf-11dd-800e-00904bad9b9a}\Shell - "" = AutoRun

O33 - MountPoints2\{e4f9e50a-dccf-11dd-800e-00904bad9b9a}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -- File not found

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 

CREATERESTOREPOINT

Restore point Set: OTL Restore Point (56027075282206720)

 

========== Files/Folders - Created Within 30 Days ==========

 

[2010-11-28 20:08:43 | 000,000,000 | ---D | C] -- C:\Program\ESET

[2010-11-27 21:52:10 | 000,000,000 | --SD | C] -- C:\ComboFix

[2010-11-27 21:09:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Mina dokument\AXIS Media Control - Snapshots

[2010-11-27 20:27:58 | 000,000,000 | ---D | C] -- C:\_OTL

[2010-11-27 20:22:36 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administratör\Skrivbord\OTL.exe

[2010-11-26 19:49:12 | 000,000,000 | ---D | C] -- C:\klstreamremover

[2010-11-26 19:41:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Skrivbord\klstreamremover

[2010-11-25 16:30:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Skrivbord\tdsskiller

[2010-11-25 10:50:00 | 000,000,000 | RHSD | C] -- C:\cmdcons

[2010-11-25 10:42:32 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe

[2010-11-25 10:42:32 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe

[2010-11-25 10:42:32 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe

[2010-11-25 10:42:32 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe

[2010-11-25 10:42:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT

[2010-11-25 10:34:09 | 000,000,000 | ---D | C] -- C:\Qoobox

[2010-11-24 17:21:19 | 000,050,688 | ---- | C] (Atribune.org) -- C:\Documents and Settings\Administratör\Skrivbord\ATF-Cleaner.exe

[2010-11-24 16:53:31 | 000,000,000 | ---D | C] -- C:\Program\Trend Micro

[2010-11-09 15:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss

[2010-11-09 15:03:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Skrivbord\Katti

[2010-11-07 20:37:44 | 000,000,000 | ---D | C] -- C:\Program\Spybot - Search & Destroy

[2010-11-07 20:37:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy

[2010-11-07 19:46:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Application Data\Malwarebytes

[2010-11-07 19:45:20 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys

[2010-11-07 19:45:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes

[2010-11-07 19:45:07 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[2010-11-07 19:45:03 | 000,000,000 | ---D | C] -- C:\Program\Malwarebytes' Anti-Malware

[2010-11-06 19:35:39 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll

[2010-11-06 19:35:38 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc42.dll

[2010-11-06 19:33:24 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll

[2007-02-01 17:09:16 | 006,653,000 | ---- | C] (Nullsoft, Inc.) -- C:\Program\winamp532_full_emusic-7plus.exe

[2006-09-17 16:46:54 | 000,816,192 | ---- | C] (Google) -- C:\Program\GoogleToolbarInstaller.exe

[2006-07-27 16:20:34 | 006,206,440 | ---- | C] (Nullsoft, Inc.) -- C:\Program\winamp524_full_emusic-7plus.exe

[2006-07-10 06:08:38 | 015,298,344 | ---- | C] (Microsoft Corporation) -- C:\Program\Install_Messenger.exe

[2006-05-28 07:48:36 | 000,588,600 | ---- | C] (Microsoft Corporation) -- C:\Program\WindowsXP-KB918005-v2-x86-SVE.exe

[2005-10-08 08:16:55 | 000,516,514 | ---- | C] (MetaProducts corp.) -- C:\Program\DESETUP.EXE

[2005-06-11 20:35:08 | 000,545,280 | ---- | C] (Intel Corporation) -- C:\Program\usbready.exe

[2005-06-11 12:18:28 | 002,145,904 | ---- | C] (Microsoft Corporation) -- C:\Program\PlusLabyrinthBonus.exe

[2005-06-08 15:27:18 | 000,381,248 | ---- | C] (Microsoft Corporation) -- C:\Program\personal4.01.exe

[2005-06-03 21:07:31 | 000,135,168 | ---- | C] (Gatorhole) -- C:\Program\tp312swe.exe

[2005-06-03 20:59:16 | 005,916,976 | ---- | C] (Hewlett Packard) -- C:\Program\940-svc-xpinfu.exe

[2005-06-02 18:08:08 | 004,296,496 | ---- | C] (Logitech ) -- C:\Program\mw9791sve.exe

[2005-06-02 09:53:15 | 000,617,664 | ---- | C] (Microsoft Corporation) -- C:\Program\MSNToolbarSetup_sv.exe

[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

 

========== Files - Modified Within 30 Days ==========

 

[2010-11-28 16:28:12 | 000,000,318 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job

[2010-11-28 16:12:20 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2010-11-28 16:05:39 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2010-11-28 16:05:21 | 796,315,648 | -HS- | M] () -- C:\hiberfil.sys

[2010-11-27 20:20:12 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administratör\Skrivbord\OTL.exe

[2010-11-26 19:32:34 | 000,000,278 | ---- | M] () -- C:\Documents and Settings\Administratör\Skrivbord\deldriv.bat

[2010-11-26 19:25:46 | 000,002,705 | ---- | M] () -- C:\klstreamremover.zip

[2010-11-25 22:22:20 | 000,296,448 | ---- | M] () -- C:\Documents and Settings\Administratör\Skrivbord\9i69fywp.exe

[2010-11-25 20:56:45 | 000,089,088 | ---- | M] () -- C:\Documents and Settings\Administratör\Skrivbord\mbr.exe

[2010-11-25 17:21:40 | 000,000,327 | RHS- | M] () -- C:\boot.ini

[2010-11-25 16:29:02 | 001,224,671 | ---- | M] () -- C:\Documents and Settings\Administratör\Skrivbord\tdsskiller.zip

[2010-11-25 15:58:52 | 000,000,024 | ---- | M] () -- C:\WINDOWS\LogonStudio.ini

[2010-11-25 14:44:22 | 003,915,339 | R--- | M] () -- C:\Documents and Settings\Administratör\Skrivbord\ComboFix.exe

[2010-11-24 16:53:45 | 000,002,425 | ---- | M] () -- C:\Documents and Settings\Administratör\Skrivbord\HiJackThis.lnk

[2010-11-10 01:01:22 | 000,630,272 | ---- | M] () -- C:\Documents and Settings\Administratör\Skrivbord\dds.scr

[2010-11-09 19:46:05 | 000,000,926 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2010-11-09 17:46:01 | 000,000,922 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2010-11-09 15:56:48 | 000,000,211 | ---- | M] () -- C:\Boot.bak

[2010-11-08 01:20:24 | 000,089,088 | ---- | M] () -- C:\WINDOWS\MBR.exe

[2010-11-08 00:18:04 | 000,364,032 | ---- | M] () -- C:\Documents and Settings\Administratör\Skrivbord\rkill.com

[2010-11-07 20:38:57 | 000,000,889 | ---- | M] () -- C:\Documents and Settings\Administratör\Skrivbord\Spybot - Search & Destroy.lnk

[2010-11-07 19:45:30 | 000,000,664 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivbord\Malwarebytes' Anti-Malware.lnk

[2010-11-07 17:20:56 | 000,000,006 | ---- | M] () -- C:\Documents and Settings\Administratör\Application Data\start

[2010-11-07 17:07:57 | 000,000,006 | ---- | M] () -- C:\Documents and Settings\Administratör\Application Data\completescan

[2010-11-07 16:53:30 | 000,000,010 | ---- | M] () -- C:\Documents and Settings\Administratör\Application Data\install

[2010-11-07 08:40:48 | 000,251,880 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2010-11-06 19:57:52 | 000,460,508 | ---- | M] () -- C:\WINDOWS\System32\perfh01D.dat

[2010-11-06 19:57:52 | 000,458,384 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2010-11-06 19:57:52 | 000,091,112 | ---- | M] () -- C:\WINDOWS\System32\perfc01D.dat

[2010-11-06 19:57:52 | 000,079,246 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2010-11-06 19:49:30 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK

[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

 

========== Files Created - No Company Name ==========

 

[2010-11-28 16:05:21 | 796,315,648 | -HS- | C] () -- C:\hiberfil.sys

[2010-11-26 19:32:33 | 000,000,278 | ---- | C] () -- C:\Documents and Settings\Administratör\Skrivbord\deldriv.bat

[2010-11-26 19:28:34 | 000,016,448 | ---- | C] () -- C:\KLStreamRemover.exe

[2010-11-26 19:25:44 | 000,002,705 | ---- | C] () -- C:\klstreamremover.zip

[2010-11-25 22:32:06 | 000,296,448 | ---- | C] () -- C:\Documents and Settings\Administratör\Skrivbord\9i69fywp.exe

[2010-11-25 21:00:20 | 000,089,088 | ---- | C] () -- C:\Documents and Settings\Administratör\Skrivbord\mbr.exe

[2010-11-25 16:30:02 | 001,224,671 | ---- | C] () -- C:\Documents and Settings\Administratör\Skrivbord\tdsskiller.zip

[2010-11-25 14:50:47 | 003,915,339 | R--- | C] () -- C:\Documents and Settings\Administratör\Skrivbord\ComboFix.exe

[2010-11-25 10:50:09 | 000,000,211 | ---- | C] () -- C:\Boot.bak

[2010-11-25 10:50:05 | 000,260,784 | RHS- | C] () -- C:\cmldr

[2010-11-25 10:42:32 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe

[2010-11-25 10:42:32 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe

[2010-11-25 10:42:32 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe

[2010-11-25 10:42:32 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe

[2010-11-25 10:42:32 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe

[2010-11-24 16:53:31 | 000,002,425 | ---- | C] () -- C:\Documents and Settings\Administratör\Skrivbord\HiJackThis.lnk

[2010-11-24 16:35:27 | 000,364,032 | ---- | C] () -- C:\Documents and Settings\Administratör\Skrivbord\rkill.com

[2010-11-13 17:24:58 | 000,630,272 | ---- | C] () -- C:\Documents and Settings\Administratör\Skrivbord\dds.scr

[2010-11-07 20:38:57 | 000,000,889 | ---- | C] () -- C:\Documents and Settings\Administratör\Skrivbord\Spybot - Search & Destroy.lnk

[2010-11-07 19:45:30 | 000,000,664 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivbord\Malwarebytes' Anti-Malware.lnk

[2010-11-07 17:20:56 | 000,000,006 | ---- | C] () -- C:\Documents and Settings\Administratör\Application Data\start

[2010-11-07 17:07:57 | 000,000,006 | ---- | C] () -- C:\Documents and Settings\Administratör\Application Data\completescan

[2010-11-07 16:53:30 | 000,000,010 | ---- | C] () -- C:\Documents and Settings\Administratör\Application Data\install

[2009-09-16 12:09:54 | 000,041,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\fsbts.sys

[2008-11-08 09:43:45 | 000,000,022 | ---- | C] () -- C:\WINDOWS\DFCD12.ini

[2008-11-08 09:28:57 | 000,000,177 | ---- | C] () -- C:\WINDOWS\mercure.ini

[2008-09-07 09:53:31 | 000,077,824 | ---- | C] () -- C:\WINDOWS\portmon.dll

[2008-05-04 11:34:36 | 000,000,035 | ---- | C] () -- C:\WINDOWS\A5W.INI

[2008-04-06 14:42:38 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\Profiles

[2008-04-06 14:42:38 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\Printer Icons

[2007-11-30 16:33:47 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\ezsid.dat

[2007-10-18 15:54:23 | 001,228,854 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\OrbError.bmp

[2007-10-07 16:56:42 | 000,000,020 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT

[2007-10-07 16:54:08 | 000,000,000 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\PKP_DLds.DAT

[2007-10-07 16:54:08 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Administratör\Application Data\Project Templates

[2007-09-12 19:49:45 | 000,000,024 | ---- | C] () -- C:\WINDOWS\LogonStudio.ini

[2007-09-12 19:49:04 | 000,187,392 | ---- | C] () -- C:\WINDOWS\System32\JPGUtils.dll

[2007-05-02 19:20:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI

[2007-03-05 12:34:28 | 000,676,224 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.DLL

[2007-01-07 17:26:55 | 000,010,752 | ---- | C] () -- C:\Documents and Settings\Administratör\Lokala inställningar\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2006-12-31 15:20:23 | 000,002,508 | ---- | C] () -- C:\Documents and Settings\Administratör\Application Data\$_hpcst$.hpc

[2006-11-27 16:43:59 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI

[2006-09-19 05:53:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\RussSqr.INI

[2006-08-21 16:22:39 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini

[2006-07-19 05:46:26 | 000,025,399 | ---- | C] () -- C:\WINDOWS\CSTBox.INI

[2006-02-21 18:06:40 | 000,077,312 | ---- | C] () -- C:\Program\Wikipedia Tracker.msi

[2006-01-06 13:09:38 | 000,000,078 | ---- | C] () -- C:\Documents and Settings\Administratör\Application Data\FreeGames4Rest.url

[2005-10-08 09:30:43 | 000,000,100 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.INI

[2005-10-08 08:12:24 | 011,292,689 | ---- | C] () -- C:\Program\WebfilmBig.wmv

[2005-09-15 18:35:31 | 000,617,464 | ---- | C] () -- C:\Program\pcsecuritytest.zip

[2005-06-30 14:40:45 | 000,000,599 | ---- | C] () -- C:\WINDOWS\ODBC.INI

[2005-06-27 21:25:37 | 000,001,857 | ---- | C] () -- C:\WINDOWS\wincmd.ini

[2005-06-24 07:49:26 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\MP2enc.dll

[2005-06-24 07:49:25 | 000,221,184 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll

[2005-06-22 19:06:38 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI

[2005-06-22 17:38:33 | 000,000,037 | ---- | C] () -- C:\WINDOWS\ipixActivex.ini

[2005-06-17 04:13:45 | 000,000,044 | ---- | C] () -- C:\WINDOWS\SMWizard.INI

[2005-06-12 08:39:54 | 000,533,574 | ---- | C] () -- C:\Program\pllangs.exe

[2005-06-12 08:36:55 | 002,855,080 | ---- | C] () -- C:\Program\aawsepersonal.exe

[2005-06-11 19:00:58 | 000,004,643 | ---- | C] () -- C:\WINDOWS\_delis32.ini

[2005-06-11 17:53:22 | 001,128,126 | ---- | C] () -- C:\Program\win.com.zip

[2005-06-11 11:42:06 | 001,450,893 | ---- | C] () -- C:\Program\DCube150D_manual_eng.zip

[2005-06-06 07:04:21 | 000,000,501 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI

[2005-06-03 17:27:39 | 000,001,125 | ---- | C] () -- C:\WINDOWS\winamp.ini

[2005-05-28 10:44:19 | 000,000,143 | ---- | C] () -- C:\Documents and Settings\NetworkService\Lokala inställningar\Application Data\fusioncache.dat

[2005-05-15 18:24:26 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll

[2005-05-15 18:24:24 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll

[2005-05-15 18:24:24 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll

[2005-05-15 18:24:24 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll

[2005-05-15 18:24:24 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll

[2005-05-15 18:24:24 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll

[2005-02-16 18:18:15 | 000,000,195 | ---- | C] () -- C:\WINDOWS\wininit.ini

[2005-02-16 18:10:54 | 000,015,669 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini

[2005-02-16 18:00:12 | 000,000,142 | ---- | C] () -- C:\Documents and Settings\Administratör\Lokala inställningar\Application Data\fusioncache.dat

[2004-09-08 10:05:52 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini

[2004-09-08 09:51:14 | 000,004,465 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2004-06-01 10:39:56 | 000,094,274 | ---- | C] () -- C:\WINDOWS\System32\HPBHEALR.DLL

[2003-11-16 15:54:22 | 000,955,203 | ---- | C] () -- C:\WINDOWS\I2E.ini

[2002-05-08 12:43:25 | 000,000,188 | -H-- | C] () -- C:\WINDOWS\Mi1cnie1k1rn5n38.dll

[1999-01-27 12:39:06 | 000,065,024 | ---- | C] () -- C:\WINDOWS\System32\indounin.dll

[1999-01-22 19:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL

[1997-06-13 06:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll

[1996-11-28 12:15:28 | 000,022,016 | R--- | C] () -- C:\WINDOWS\System32\docobj.dll

 

========== Custom Scans ==========

 

 

< %SYSTEMDRIVE%\*.* >

[2008-09-11 09:50:40 | 000,001,024 | ---- | M] () -- C:\.rnd

[2007-07-29 21:43:46 | 003,794,506 | ---- | M] () -- C:\01 Canon.wma

[2007-07-29 21:43:46 | 002,031,608 | ---- | M] () -- C:\02 Prolegndum.wma

[2007-07-29 21:43:46 | 000,991,780 | ---- | M] () -- C:\04 Tracktus.wma

[2007-07-29 21:43:47 | 006,507,604 | ---- | M] () -- C:\05 Pavane.wma

[2007-07-29 21:43:47 | 003,943,944 | ---- | M] () -- C:\06 Nomina offerentium.wma

[2007-07-29 21:43:50 | 004,272,610 | ---- | M] () -- C:\07 Sophie´s theme.wma

[2007-07-29 21:43:50 | 004,493,714 | ---- | M] () -- C:\08 Dies Bildnis ist.wma

[2007-07-29 21:43:50 | 004,553,460 | ---- | M] () -- C:\09 Gymnopedie.wma

[2007-07-29 21:43:51 | 005,569,372 | ---- | M] () -- C:\10 Pavane.wma

[2007-07-29 21:43:52 | 002,521,658 | ---- | M] () -- C:\11 Carmina Burana- O Fortuna.wma

[2007-07-29 21:43:53 | 002,599,370 | ---- | M] () -- C:\12 Carmina Burana- Fortune plango vulnera.wma

[2007-07-29 21:43:59 | 013,457,696 | ---- | M] () -- C:\13 Prelude.wma

[2006-12-31 15:44:13 | 000,001,472 | ---- | M] () -- C:\ASLog.txt

[2005-06-17 04:40:15 | 000,000,166 | ---- | M] () -- C:\bcmwl5.log

[2010-11-09 15:56:48 | 000,000,211 | ---- | M] () -- C:\Boot.bak

[2010-11-25 17:21:40 | 000,000,327 | RHS- | M] () -- C:\boot.ini

[2004-08-04 09:00:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin

[2004-08-03 23:00:18 | 000,260,784 | RHS- | M] () -- C:\cmldr

[2005-10-12 16:57:09 | 000,000,047 | ---- | M] () -- C:\extfmradio.log

[2005-10-08 09:30:38 | 000,000,105 | ---- | M] () -- C:\FolderConfig.Install.Log

[2010-11-28 16:05:21 | 796,315,648 | -HS- | M] () -- C:\hiberfil.sys

[2005-06-17 04:42:04 | 000,000,086 | ---- | M] () -- C:\HSC.log

[2005-06-22 19:06:40 | 000,002,240 | ---- | M] () -- C:\INSTALL.LOG

[2005-06-06 07:03:03 | 000,000,000 | RHS- | M] () -- C:\IO.SYS

[2005-11-19 14:21:15 | 000,000,026 | ---- | M] () -- C:\ioSpecial.ini

[2004-08-12 13:22:00 | 000,016,448 | ---- | M] () -- C:\KLStreamRemover.exe

[2010-11-26 19:25:46 | 000,002,705 | ---- | M] () -- C:\klstreamremover.zip

[2005-06-06 07:03:03 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS

[2004-08-04 09:00:00 | 000,047,564 | -HS- | M] () -- C:\NTDETECT.COM

[2009-05-29 10:38:37 | 000,250,560 | -HS- | M] () -- C:\NTLDR

[2010-11-28 21:45:03 | 000,160,216 | ---- | M] () -- C:\OTL.Txt

[2010-11-28 16:05:00 | 390,070,272 | -HS- | M] () -- C:\pagefile.sys

[2005-06-17 04:45:09 | 000,000,161 | ---- | M] () -- C:\sedinst.log

[2005-06-17 04:45:08 | 000,000,200 | ---- | M] () -- C:\sedinst2.log

[2005-06-17 04:50:41 | 000,000,163 | ---- | M] () -- C:\setup.log

[2005-06-17 04:45:37 | 000,003,082 | ---- | M] () -- C:\sunjava.log

[2005-06-17 04:38:56 | 000,000,181 | ---- | M] () -- C:\syntp.log

[2005-10-08 09:10:58 | 000,001,062 | ---- | M] () -- C:\System.Install.Log

[2010-11-25 17:03:43 | 000,043,986 | ---- | M] () -- C:\TDSSKiller.2.4.8.0_25.11.2010_16.32.09_log.txt

[2005-06-17 04:38:05 | 000,000,032 | ---- | M] () -- C:\ticrdbus.log

[2008-04-16 04:25:57 | 000,053,879 | -H-- | M] () -- C:\treeinfo.wc

[2005-11-08 16:53:46 | 000,003,642 | ---- | M] () -- C:\TVPVR.Install.Log

[2001-05-24 11:59:30 | 000,162,304 | ---- | M] () -- C:\UNWISE.EXE

 

 

< MD5 for: AGP440.SYS >

[2004-08-04 14:00:00 | 018,778,343 | ---- | M] () .cab file -- C:\I386\sp2.cab:AGP440.sys

[2004-08-04 09:00:00 | 018,778,343 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys

[2009-05-29 10:30:42 | 023,884,604 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys

[2009-05-29 10:30:42 | 023,884,604 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys

[2008-04-13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys

[2008-04-13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

 

< MD5 for: ATAPI.SYS >

[2004-08-04 14:00:00 | 018,778,343 | ---- | M] () .cab file -- C:\I386\sp2.cab:atapi.sys

[2004-08-04 09:00:00 | 018,778,343 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys

[2009-05-29 10:30:42 | 023,884,604 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys

[2009-05-29 10:30:42 | 023,884,604 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys

[2008-04-13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys

[2008-04-13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys

[2004-08-03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

[2004-08-03 16:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\atapi.sys

 

< MD5 for: EVENTLOG.DLL >

[2008-04-14 17:04:38 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=0A6DF967AE8E836D053DB46398F603E5 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll

[2008-04-14 17:04:38 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=0A6DF967AE8E836D053DB46398F603E5 -- C:\WINDOWS\system32\eventlog.dll

[2004-08-04 09:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=264DBC116901E89565B830B0CC20F922 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

 

< MD5 for: NETLOGON.DLL >

[2008-04-14 17:04:44 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=4F4A16EAEB932AE413E48923E6A400E0 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll

[2008-04-14 17:04:44 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=4F4A16EAEB932AE413E48923E6A400E0 -- C:\WINDOWS\system32\netlogon.dll

[2004-08-04 09:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=A6FD3341EC1A98A31B044C6E0DAF8F26 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll

 

< MD5 for: SCECLI.DLL >

[2004-08-04 09:00:00 | 000,183,808 | ---- | M] (Microsoft Corporation) MD5=24BADA1C3795CB877C67E0F2F8BBAD1F -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll

[2008-04-14 17:04:47 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=3B50B494647E60CE6AC516E3F5C82B25 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll

[2008-04-14 17:04:47 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=3B50B494647E60CE6AC516E3F5C82B25 -- C:\WINDOWS\system32\scecli.dll

 

< %systemroot%\*. /mp /s >

 

< %systemroot%\System32\config\*.sav >

[2004-09-08 11:40:02 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav

[2004-09-08 11:40:02 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav

[2004-09-08 11:40:02 | 000,438,272 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

 

< %systemroot%\system32\*.dll /lockedfiles >

[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

 

< %systemroot%\Tasks\*.job /lockedfiles >

 

========== Alternate Data Streams ==========

 

@Alternate Data Stream - 68 bytes -> C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll:KAVICHS

@Alternate Data Stream - 68 bytes -> C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll:KAVICHS

@Alternate Data Stream - 68 bytes -> C:\WINDOWS\$NtServicePackUninstall$\atapi.sys:KAVICHS

@Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Start-meny\Program\Autostart\desktop.ini:KAVICHS

@Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Skrivbord\InterVideo WinDVD.lnk:KAVICHS

@Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Skrivbord\Cube AudioManager.lnk:KAVICHS

@Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Application Data\desktop.ini:KAVICHS

@Alternate Data Stream - 36 bytes -> C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\atapi.sys:KAVICHS

@Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\config\system.sav:KAVICHS

@Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\config\software.sav:KAVICHS

@Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\config\default.sav:KAVICHS

@Alternate Data Stream - 36 bytes -> C:\Documents and Settings\All Users\NTUSER.DAT:KAVICHS

@Alternate Data Stream - 36 bytes -> C:\Documents and Settings\All Users\NTUSER.DAT.LOG:KAVICHS

@Alternate Data Stream - 228 bytes -> C:\Documents and Settings\All Users\Dokument\desktop.ini:KAVICHS

@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DA18FD1D

@Alternate Data Stream - 100 bytes -> C:\WINDOWS\$NtServicePackUninstall$\scecli.dll:KAVICHS

 

< End of report >

Extras.Txt

[Cecilia]

Stäng av alla program du ser inklusive antivirusprogram och antispionprogram så att de inte krockar med OTL.

Hur? Se http://www.bleepingcomputer.com/forums/topic114351.html

 

Starta programmet OTL (i Vista/Windows7 högerklicka och välj Kör som administratör).

Kopiera alla raderna i rutan:

:OTL
SRV - (GB-PVR Recording Service) -- c:\mmc\program\tvpvr\gbpvrrecordingservice.exe File not found
DRV - (catchme) -- C:\DOCUME~1\ADMINI~1\LOKALA~1\Temp\catchme.sys File not found
DRV - (Ad-Watch Connect Filter) -- C:\WINDOWS\System32\drivers\NSDriver.sys File not found
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = My Web Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultUrl = http://www.mywebsear...r={searchTerms}
O33 - MountPoints2\{5b856eae-4977-11db-bd8a-00904bad9b9a}\Shell - "" = AutoRun
O33 - MountPoints2\{5b856eae-4977-11db-bd8a-00904bad9b9a}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -- File not found
O33 - MountPoints2\{e144e96e-7888-11de-b628-00904bad9b9a}\Shell - "" = AutoRun
O33 - MountPoints2\{e144e96e-7888-11de-b628-00904bad9b9a}\Shell\AutoRun\command - "" = E:\autorun.exe -- File not found
O33 - MountPoints2\{e4f9e50a-dccf-11dd-800e-00904bad9b9a}\Shell - "" = AutoRun
O33 - MountPoints2\{e4f9e50a-dccf-11dd-800e-00904bad9b9a}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -- File not found
[2010-11-26 19:49:12 | 000,000,000 | ---D | C] -- C:\klstreamremover
[2010-11-26 19:41:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Skrivbord\klstreamremover
[2010-11-26 19:32:34 | 000,000,278 | ---- | M] () -- C:\Documents and Settings\Administratör\Skrivbord\deldriv.bat
[2010-11-26 19:25:46 | 000,002,705 | ---- | M] () -- C:\klstreamremover.zip
[2010-11-26 19:28:34 | 000,016,448 | ---- | C] () -- C:\KLStreamRemover.exe
@Alternate Data Stream - 68 bytes -> C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll:KAVICHS
@Alternate Data Stream - 68 bytes -> C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll:KAVICHS
@Alternate Data Stream - 68 bytes -> C:\WINDOWS\$NtServicePackUninstall$\atapi.sys:KAVICHS
@Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Start-meny\Program\Autostart\desktop.ini:KAVICHS
@Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Skrivbord\InterVideo WinDVD.lnk:KAVICHS
@Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Skrivbord\Cube AudioManager.lnk:KAVICHS
@Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Application Data\desktop.ini:KAVICHS
@Alternate Data Stream - 36 bytes -> C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\atapi.sys:KAVICHS
@Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\config\system.sav:KAVICHS
@Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\config\software.sav:KAVICHS
@Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\config\default.sav:KAVICHS
@Alternate Data Stream - 36 bytes -> C:\Documents and Settings\All Users\NTUSER.DAT:KAVICHS
@Alternate Data Stream - 36 bytes -> C:\Documents and Settings\All Users\NTUSER.DAT.LOG:KAVICHS
@Alternate Data Stream - 228 bytes -> C:\Documents and Settings\All Users\Dokument\desktop.ini:KAVICHS
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DA18FD1D
@Alternate Data Stream - 100 bytes -> C:\WINDOWS\$NtServicePackUninstall$\scecli.dll:KAVICHS
:Commands
[CREATERESTOREPOINT]
[REBOOT]

Klistra in dem i rutan Custom Scans/Fixes. Kontrollera att det ser exakt likadant ut, t ex när det gäller radbrytningar.

Tryck på Run Fix.

Om du blir tillfrågad om att starta om datorn så gör det.

Det kommer upp en logg i Anteckningar. Kopiera den och klistra in i ditt svar.

 

Om den inte kommer automatiskt så hittar du den i mappen c:\_OTL\Moved Files med ett namn som innehåller dagens datum och klockslaget för körningen.

 

Se till att aktivera antivirusprogram mm innan du ansluter datorn till internet.

[The OldBoy]

Och här kommer den senaste OTL-loggen:

 

========== OTL ==========

Service GB-PVR Recording Service stopped successfully!

Service GB-PVR Recording Service deleted successfully!

File c:\mmc\program\tvpvr\gbpvrrecordingservice.exe File not found not found.

Service catchme stopped successfully!

Service catchme deleted successfully!

File C:\DOCUME~1\ADMINI~1\LOKALA~1\Temp\catchme.sys File not found not found.

Service Ad-Watch Connect Filter stopped successfully!

Service Ad-Watch Connect Filter deleted successfully!

File C:\WINDOWS\System32\drivers\NSDriver.sys File not found not found.

HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\SearchMigratedDefaultName| /E : value set successfully!

HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\SearchMigratedDefaultUrl| /E : value set successfully!

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5b856eae-4977-11db-bd8a-00904bad9b9a}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5b856eae-4977-11db-bd8a-00904bad9b9a}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5b856eae-4977-11db-bd8a-00904bad9b9a}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5b856eae-4977-11db-bd8a-00904bad9b9a}\ not found.

File E:\LaunchU3.exe not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e144e96e-7888-11de-b628-00904bad9b9a}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e144e96e-7888-11de-b628-00904bad9b9a}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e144e96e-7888-11de-b628-00904bad9b9a}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e144e96e-7888-11de-b628-00904bad9b9a}\ not found.

File E:\autorun.exe not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e4f9e50a-dccf-11dd-800e-00904bad9b9a}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4f9e50a-dccf-11dd-800e-00904bad9b9a}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e4f9e50a-dccf-11dd-800e-00904bad9b9a}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4f9e50a-dccf-11dd-800e-00904bad9b9a}\ not found.

File E:\LaunchU3.exe not found.

C:\klstreamremover folder moved successfully.

C:\Documents and Settings\Administratör\Skrivbord\klstreamremover folder moved successfully.

C:\Documents and Settings\Administratör\Skrivbord\deldriv.bat moved successfully.

C:\klstreamremover.zip moved successfully.

C:\KLStreamRemover.exe moved successfully.

ADS C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll:KAVICHS deleted successfully.

ADS C:\WINDOWS\$NtServicePackUninstall$\atapi.sys:KAVICHS deleted successfully.

ADS C:\Documents and Settings\All Users\Start-meny\Program\Autostart\desktop.ini:KAVICHS deleted successfully.

ADS C:\Documents and Settings\All Users\Skrivbord\InterVideo WinDVD.lnk:KAVICHS deleted successfully.

ADS C:\Documents and Settings\All Users\Skrivbord\Cube AudioManager.lnk:KAVICHS deleted successfully.

ADS C:\Documents and Settings\All Users\Application Data\desktop.ini:KAVICHS deleted successfully.

ADS C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\atapi.sys:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\config\system.sav:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\config\software.sav:KAVICHS deleted successfully.

ADS C:\WINDOWS\System32\config\default.sav:KAVICHS deleted successfully.

ADS C:\Documents and Settings\All Users\NTUSER.DAT:KAVICHS deleted successfully.

ADS C:\Documents and Settings\All Users\NTUSER.DAT.LOG:KAVICHS deleted successfully.

ADS C:\Documents and Settings\All Users\Dokument\desktop.ini:KAVICHS deleted successfully.

ADS C:\Documents and Settings\All Users\Application Data\TEMP:DA18FD1D deleted successfully.

ADS C:\WINDOWS\$NtServicePackUninstall$\scecli.dll:KAVICHS deleted successfully.

========== COMMANDS ==========

Restore point Set: OTL Restore Point (0)

 

OTL by OldTimer - Version 3.2.17.3 log created on 11292010_131949

[Cecilia]

Spara MBRCheck.exe av a_d_13 på Skrivbordet.

Kör programmet.

Vänta tills programmet är klart eller till texten "Enter 'Y' and hit ENTER for more options, or 'N' to exit:" visas. I det senare fallet tryck på N följt av Enter.

När det är klart skapas en loggfil på Skrivbordet som heter MBRCheckxxxxxx.txt där xxxxxx är klockslaget för körningen. Öppna loggen i Anteckningar genom att dubbelklicka på loggen och klistra in innehållet i ditt svar.

[The OldBoy]

Och nu har jag fått tillbaka datorn så nu kommer fortsättningen...

 

MBRCheck, version 1.2.3

© 2010, AD

 

Command-line:

Windows Version: Windows XP Professional

Windows Information: Service Pack 3 (build 2600)

Logical Drives Mask: 0x0000000c

 

Kernel Drivers (total 131):

0x804D7000 \WINDOWS\system32\ntoskrnl.exe

0x806EE000 \WINDOWS\system32\hal.dll

0xF7CD6000 \WINDOWS\system32\KDCOM.DLL

0xF7BE6000 \WINDOWS\system32\BOOTVID.dll

0xF7787000 ACPI.sys

0xF7CD8000 \WINDOWS\system32\DRIVERS\WMILIB.SYS

0xF7776000 pci.sys

0xF77D6000 isapnp.sys

0xF77E6000 ohci1394.sys

0xF77F6000 \WINDOWS\system32\DRIVERS\1394BUS.SYS

0xF7BEA000 compbatt.sys

0xF7BEE000 \WINDOWS\system32\DRIVERS\BATTC.SYS

0xF7D9E000 pciide.sys

0xF7A56000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS

0xF7CDA000 intelide.sys

0xF7CDC000 viaide.sys

0xF7CDE000 aliide.sys

0xF7758000 pcmcia.sys

0xF7806000 MountMgr.sys

0xF7739000 ftdisk.sys

0xF7CE0000 dmload.sys

0xF7713000 dmio.sys

0xF7BF2000 ACPIEC.sys

0xF7D9F000 \WINDOWS\system32\DRIVERS\OPRGHDLR.SYS

0xF7A5E000 PartMgr.sys

0xF7816000 VolSnap.sys

0xF76FB000 atapi.sys

0xF7826000 disk.sys

0xF7836000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS

0xF76DB000 fltmgr.sys

0xF76C9000 sr.sys

0xF7846000 PxHelp20.sys

0xF76B2000 KSecDD.sys

0xF7625000 Ntfs.sys

0xF7613000 fsdfw.sys

0xF75E6000 \WINDOWS\System32\drivers\NDIS.SYS

0xF75CC000 Mup.sys

0xF7856000 fsbts.sys

0xF7896000 \SystemRoot\system32\DRIVERS\intelppm.sys

0xF74CB000 \SystemRoot\system32\DRIVERS\ialmnt5.sys

0xF74B7000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS

0xF7A9E000 \SystemRoot\system32\DRIVERS\usbuhci.sys

0xF7493000 \SystemRoot\system32\DRIVERS\USBPORT.SYS

0xF7AD6000 \SystemRoot\system32\DRIVERS\usbehci.sys

0xF73FF000 \SystemRoot\system32\DRIVERS\bcmwl5.sys

0xF73BF000 \SystemRoot\system32\drivers\smwdm.sys

0xF739B000 \SystemRoot\system32\drivers\portcls.sys

0xF7906000 \SystemRoot\system32\drivers\drmk.sys

0xF7378000 \SystemRoot\system32\drivers\ks.sys

0xF7358000 \SystemRoot\system32\drivers\aeaudio.sys

0xF7253000 \SystemRoot\system32\DRIVERS\AGRSM.sys

0xF7BD6000 \SystemRoot\System32\Drivers\Modem.SYS

0xF7926000 \SystemRoot\system32\DRIVERS\i8042prt.sys

0xF7A86000 \SystemRoot\system32\DRIVERS\kbdclass.sys

0xF721E000 \SystemRoot\system32\DRIVERS\SynTP.sys

0xF7CF4000 \SystemRoot\system32\DRIVERS\USBD.SYS

0xF7AEE000 \SystemRoot\system32\DRIVERS\mouclass.sys

0xF7976000 \SystemRoot\system32\DRIVERS\imapi.sys

0xF7CBA000 \??\C:\WINDOWS\system32\drivers\pfc.sys

0xF7996000 \SystemRoot\system32\DRIVERS\cdrom.sys

0xF79B6000 \SystemRoot\system32\DRIVERS\redbook.sys

0xF7CCA000 \SystemRoot\system32\DRIVERS\CmBatt.sys

0xF75A8000 \SystemRoot\system32\DRIVERS\wmiacpi.sys

0xF7EEB000 \SystemRoot\system32\DRIVERS\lmimirr.sys

0xF7EEF000 \SystemRoot\system32\DRIVERS\audstub.sys

0xF7B2E000 \SystemRoot\system32\DRIVERS\rasirda.sys

0xF7B3E000 \SystemRoot\system32\DRIVERS\TDI.SYS

0xF79D6000 \SystemRoot\system32\DRIVERS\rasl2tp.sys

0xF7594000 \SystemRoot\system32\DRIVERS\ndistapi.sys

0xF71DF000 \SystemRoot\system32\DRIVERS\ndiswan.sys

0xF7A06000 \SystemRoot\system32\DRIVERS\raspppoe.sys

0xF7A26000 \SystemRoot\system32\DRIVERS\raspptp.sys

0xF712E000 \SystemRoot\system32\DRIVERS\psched.sys

0xF78A6000 \SystemRoot\system32\DRIVERS\msgpc.sys

0xF7BB6000 \SystemRoot\system32\DRIVERS\ptilink.sys

0xF7BCE000 \SystemRoot\system32\DRIVERS\raspti.sys

0xF70FE000 \SystemRoot\system32\DRIVERS\rdpdr.sys

0xF78F6000 \SystemRoot\system32\DRIVERS\termdd.sys

0xF7CFC000 \SystemRoot\system32\DRIVERS\swenum.sys

0xF70A0000 \SystemRoot\system32\DRIVERS\update.sys

0xF7C8E000 \SystemRoot\system32\DRIVERS\mssmbios.sys

0xF79C6000 \SystemRoot\System32\Drivers\NDProxy.SYS

0xF71BF000 \SystemRoot\system32\DRIVERS\usbhub.sys

0xF7D12000 \SystemRoot\System32\Drivers\Fs_Rec.SYS

0xF7DC2000 \SystemRoot\System32\Drivers\Null.SYS

0xF7D18000 \SystemRoot\System32\Drivers\Beep.SYS

0xF7B6E000 \SystemRoot\System32\drivers\vga.sys

0xF7D1E000 \SystemRoot\System32\Drivers\mnmdd.SYS

0xF7D24000 \SystemRoot\System32\DRIVERS\RDPCDD.sys

0xF7B86000 \SystemRoot\System32\Drivers\Msfs.SYS

0xF7B9E000 \SystemRoot\System32\Drivers\Npfs.SYS

0xF71FA000 \SystemRoot\system32\DRIVERS\rasacd.sys

0xAA765000 \SystemRoot\system32\DRIVERS\ipsec.sys

0xAA70C000 \SystemRoot\system32\DRIVERS\tcpip.sys

0xAA6E4000 \SystemRoot\system32\DRIVERS\netbt.sys

0xAA6BE000 \SystemRoot\system32\DRIVERS\ipnat.sys

0xF78C6000 \SystemRoot\system32\DRIVERS\wanarp.sys

0xF7584000 \SystemRoot\System32\drivers\ws2ifsl.sys

0xAA69C000 \SystemRoot\System32\drivers\afd.sys

0xF7936000 \SystemRoot\system32\DRIVERS\netbios.sys

0xAA5D1000 \SystemRoot\system32\DRIVERS\rdbss.sys

0xAA561000 \SystemRoot\system32\DRIVERS\mrxsmb.sys

0xF7A16000 \SystemRoot\System32\Drivers\Fips.SYS

0xF7A46000 \??\C:\Program\Telia\Telias sakerhetstjanster\HIPS\drivers\fshs.sys

0xF7D2E000 \??\C:\WINDOWS\system32\drivers\EABFiltr.sys

0xF78B6000 \SystemRoot\System32\Drivers\ClntMgmt.sys

0xF7966000 \SystemRoot\System32\Drivers\Cdfs.SYS

0xAA470000 \SystemRoot\System32\Drivers\dump_atapi.sys

0xF7D46000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS

0xBF800000 \SystemRoot\System32\win32k.sys

0xF7206000 \SystemRoot\System32\drivers\Dxapi.sys

0xF7BA6000 \SystemRoot\System32\watchdog.sys

0xBF000000 \SystemRoot\System32\drivers\dxg.sys

0xF7DEF000 \SystemRoot\System32\drivers\dxgthk.sys

0xBF020000 \SystemRoot\System32\ialmdnt5.dll

0xBF012000 \SystemRoot\System32\ialmrnt5.dll

0xBF03F000 \SystemRoot\System32\ialmdev5.DLL

0xBF065000 \SystemRoot\System32\ialmdd5.DLL

0xBFFA0000 \SystemRoot\System32\ATMFD.DLL

0xAA2A2000 \SystemRoot\system32\DRIVERS\irda.sys

0xAA0AD000 \SystemRoot\system32\drivers\wdmaud.sys

0xF717F000 \SystemRoot\system32\drivers\sysaudio.sys

0xA9BCA000 \SystemRoot\system32\DRIVERS\mrxdav.sys

0xA9B7E000 \SystemRoot\System32\Drivers\Fastfat.SYS

0xA9B3D000 \SystemRoot\System32\Drivers\HTTP.sys

0xF7D7C000 \??\C:\Program\LogMeIn\x86\RaInfo.sys

0xA9E47000 \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys

0xA98B5000 \SystemRoot\system32\DRIVERS\srv.sys

0xA9752000 \??\C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\minifilter\fsgk.sys

0xA9317000 \SystemRoot\system32\drivers\kmixer.sys

0x7C900000 \WINDOWS\system32\ntdll.dll

 

Processes (total 44):

0 System Idle Process

4 System

604 C:\WINDOWS\system32\smss.exe

668 csrss.exe

692 C:\WINDOWS\system32\winlogon.exe

736 C:\WINDOWS\system32\services.exe

748 C:\WINDOWS\system32\lsass.exe

896 C:\WINDOWS\system32\svchost.exe

996 svchost.exe

1052 C:\Program\Windows Defender\MsMpEng.exe

1092 C:\WINDOWS\system32\svchost.exe

1168 svchost.exe

1240 svchost.exe

1384 C:\WINDOWS\system32\spoolsv.exe

1420 scardsvr.exe

1620 C:\WINDOWS\explorer.exe

1932 C:\WINDOWS\system32\igfxtray.exe

1944 C:\WINDOWS\system32\hkcmd.exe

1952 C:\Program\Analog Devices\SoundMAX\SMax4PNP.exe

1980 C:\Program\Synaptics\SynTP\SynTPEnh.exe

1996 C:\Program\ScanSoft\OmniPageSE\opware32.exe

2020 C:\WINDOWS\AGRSMMSG.exe

184 C:\Program\Telia\Telias sakerhetstjanster\Common\FSM32.EXE

256 C:\Program\Microsoft ActiveSync\wcescomm.exe

264 C:\WINDOWS\system32\ctfmon.exe

304 C:\Program\Telia\Telia_Mobilt_bredband\Telia_Mobilt_bredband.exe

356 C:\Program\MI3AA1~1\rapimgr.exe

924 svchost.exe

1176 C:\Program\ExtraFilm Designer SE\EFUploadSrv.exe

792 C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsgk32st.exe

1280 C:\Program\Telia\Telias sakerhetstjanster\Common\FSMA32.EXE

1312 C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsgk32.exe

1440 C:\Program\Telia\Telias sakerhetstjanster\Common\FSHDLL32.EXE

1488 C:\WINDOWS\system32\svchost.exe

1572 C:\Program\Analog Devices\SoundMAX\SMAgent.exe

1612 C:\WINDOWS\system32\svchost.exe

1772 wmpnetwk.exe

2604 C:\Program\Telia\Telias sakerhetstjanster\FWES\program\fsdfwd.exe

2632 C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fssm32.exe

2924 fsorsp.exe

3192 wmiprvse.exe

3324 alg.exe

4060 C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsav32.exe

3536 C:\Documents and Settings\Administratör\Skrivbord\MBRCheck.exe

 

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)

 

PhysicalDrive0 Model Number: TOSHIBAMK4026GAX, Rev: PA103G

 

Size Device Name MBR Status

--------------------------------------------

37 GB \\.\PhysicalDrive0 Unknown MBR code

SHA1: BBF289AC40BA09F2CC1797655D4799D2AB148CB5

 

 

Found non-standard or infected MBR.

Enter 'Y' and hit ENTER for more options, or 'N' to exit:

 

Done!

[Cecilia]

Vad är det för dator du har? Är det en märkesdator?

Kom Windows förinstallerad?

 

Kör MBRCheck.

Vänta tills texten "Enter 'Y' and hit ENTER for more options, or 'N' to exit:" visas. Tryck Y följt av Enter.

Texten "Enter your choice:" visas. Tryck 1 följt av Enter.

Tryck 0 och Enter för att ange att det gäller den första hårddisken.

 

Därefter kommer en fråga om i vilken mapp dumpfilen ska skapas och vad den ska heta. Du kan t ex skriva in C:\***mbr.txt följt av Enter. Välj filändelsen .txt så blir det lättast att bifoga den till ditt svar.

 

När det är klart tryck på Enter. En loggfil skapas på Skrivbordet som heter MBRCheckxxxxxx.txt där xxxxxx är klockslaget för körningen. Klistra in dess innehåll i ditt svar.

 

Dumpfilen C:\***mbr.txt ska du bifoga till ditt svar.

 

MBAM har kommit ut i en ny version så uppdatera MBAM till version 1.50.

[The OldBoy]

Det är en HP lapptopp med förinstallerat OS...

 

När jag kör enligt ovan så får jag till svar:

"Error opening output file <0>!"

 

Jag antar att det är en nolla du använder i denna text:

"Tryck 0 och Enter för att ange att det gäller den första hårddisken."

[Cecilia]

Det är en HP lapptopp med förinstallerat OS..

Kan vara därför det är en okänd MBR.

 

Texten "Enter your choice:" visas. Tryck 1 följt av Enter.

Tryck 0 och Enter för att ange att det gäller den första hårddisken.

Stämmer de texterna med de du får upp? För det låter ju som att du skriver in 0 på en fråga om vad filen ska heta och inte för att ange att det är den första hårddisken.

[The OldBoy]

Kan vara därför det är en okänd MBR.

 

Stämmer de texterna med de du får upp? För det låter ju som att du skriver in 0 på en fråga om vad filen ska heta och inte för att ange att det är den första hårddisken.

Den texten stämmer med det som jag skriver....

[The OldBoy]

Så här ser de ut när jag kör programmet;

 

"Enter 'Y' and hit ENTER for more options, or 'N' to exit:" visas. Tryck Y följt av Enter.

 

Options:

[1]Dump the MBR of a physical disk to a file.

[2]Restore the MBR...

[3]Exit

 

Enter your choice: 1

 

Enter the physical disk number to dump <0-99, -1 to exit>: 0

Dumping \\.\PhysicalDisk0...

Enter filename to dump to: C:\***mbr.txt

Error opening output file <0>!"

[The OldBoy]

Denna logg har skapats när jag kört programmet??? Vet inte om du behöver den men jag skickar den iaf...

 

MBRCheck, version 1.2.3

© 2010, AD

 

Command-line:

Windows Version: Windows XP Professional

Windows Information: Service Pack 3 (build 2600)

Logical Drives Mask: 0x0000000c

 

Kernel Drivers (total 130):

0x804D7000 \WINDOWS\system32\ntoskrnl.exe

0x806EE000 \WINDOWS\system32\hal.dll

0xF7CD6000 \WINDOWS\system32\KDCOM.DLL

0xF7BE6000 \WINDOWS\system32\BOOTVID.dll

0xF7787000 ACPI.sys

0xF7CD8000 \WINDOWS\system32\DRIVERS\WMILIB.SYS

0xF7776000 pci.sys

0xF77D6000 isapnp.sys

0xF77E6000 ohci1394.sys

0xF77F6000 \WINDOWS\system32\DRIVERS\1394BUS.SYS

0xF7BEA000 compbatt.sys

0xF7BEE000 \WINDOWS\system32\DRIVERS\BATTC.SYS

0xF7D9E000 pciide.sys

0xF7A56000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS

0xF7CDA000 intelide.sys

0xF7CDC000 viaide.sys

0xF7CDE000 aliide.sys

0xF7758000 pcmcia.sys

0xF7806000 MountMgr.sys

0xF7739000 ftdisk.sys

0xF7CE0000 dmload.sys

0xF7713000 dmio.sys

0xF7BF2000 ACPIEC.sys

0xF7D9F000 \WINDOWS\system32\DRIVERS\OPRGHDLR.SYS

0xF7A5E000 PartMgr.sys

0xF7816000 VolSnap.sys

0xF76FB000 atapi.sys

0xF7826000 disk.sys

0xF7836000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS

0xF76DB000 fltmgr.sys

0xF76C9000 sr.sys

0xF7846000 PxHelp20.sys

0xF76B2000 KSecDD.sys

0xF7625000 Ntfs.sys

0xF7613000 fsdfw.sys

0xF75E6000 \WINDOWS\System32\drivers\NDIS.SYS

0xF75CC000 Mup.sys

0xF7856000 fsbts.sys

0xF7896000 \SystemRoot\system32\DRIVERS\intelppm.sys

0xF74CB000 \SystemRoot\system32\DRIVERS\ialmnt5.sys

0xF74B7000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS

0xF7A9E000 \SystemRoot\system32\DRIVERS\usbuhci.sys

0xF7493000 \SystemRoot\system32\DRIVERS\USBPORT.SYS

0xF7AD6000 \SystemRoot\system32\DRIVERS\usbehci.sys

0xF73FF000 \SystemRoot\system32\DRIVERS\bcmwl5.sys

0xF73BF000 \SystemRoot\system32\drivers\smwdm.sys

0xF739B000 \SystemRoot\system32\drivers\portcls.sys

0xF7906000 \SystemRoot\system32\drivers\drmk.sys

0xF7378000 \SystemRoot\system32\drivers\ks.sys

0xF7358000 \SystemRoot\system32\drivers\aeaudio.sys

0xF7253000 \SystemRoot\system32\DRIVERS\AGRSM.sys

0xF7BD6000 \SystemRoot\System32\Drivers\Modem.SYS

0xF7926000 \SystemRoot\system32\DRIVERS\i8042prt.sys

0xF7A86000 \SystemRoot\system32\DRIVERS\kbdclass.sys

0xF721E000 \SystemRoot\system32\DRIVERS\SynTP.sys

0xF7CF4000 \SystemRoot\system32\DRIVERS\USBD.SYS

0xF7AEE000 \SystemRoot\system32\DRIVERS\mouclass.sys

0xF7976000 \SystemRoot\system32\DRIVERS\imapi.sys

0xF7CBA000 \??\C:\WINDOWS\system32\drivers\pfc.sys

0xF7996000 \SystemRoot\system32\DRIVERS\cdrom.sys

0xF79B6000 \SystemRoot\system32\DRIVERS\redbook.sys

0xF7CCA000 \SystemRoot\system32\DRIVERS\CmBatt.sys

0xF75A8000 \SystemRoot\system32\DRIVERS\wmiacpi.sys

0xF7EEB000 \SystemRoot\system32\DRIVERS\lmimirr.sys

0xF7EEF000 \SystemRoot\system32\DRIVERS\audstub.sys

0xF7B2E000 \SystemRoot\system32\DRIVERS\rasirda.sys

0xF7B3E000 \SystemRoot\system32\DRIVERS\TDI.SYS

0xF79D6000 \SystemRoot\system32\DRIVERS\rasl2tp.sys

0xF7594000 \SystemRoot\system32\DRIVERS\ndistapi.sys

0xF71DF000 \SystemRoot\system32\DRIVERS\ndiswan.sys

0xF7A06000 \SystemRoot\system32\DRIVERS\raspppoe.sys

0xF7A26000 \SystemRoot\system32\DRIVERS\raspptp.sys

0xF712E000 \SystemRoot\system32\DRIVERS\psched.sys

0xF78A6000 \SystemRoot\system32\DRIVERS\msgpc.sys

0xF7BB6000 \SystemRoot\system32\DRIVERS\ptilink.sys

0xF7BCE000 \SystemRoot\system32\DRIVERS\raspti.sys

0xF70FE000 \SystemRoot\system32\DRIVERS\rdpdr.sys

0xF78F6000 \SystemRoot\system32\DRIVERS\termdd.sys

0xF7CFC000 \SystemRoot\system32\DRIVERS\swenum.sys

0xF70A0000 \SystemRoot\system32\DRIVERS\update.sys

0xF7C8E000 \SystemRoot\system32\DRIVERS\mssmbios.sys

0xF79C6000 \SystemRoot\System32\Drivers\NDProxy.SYS

0xF71BF000 \SystemRoot\system32\DRIVERS\usbhub.sys

0xF7D12000 \SystemRoot\System32\Drivers\Fs_Rec.SYS

0xF7DC2000 \SystemRoot\System32\Drivers\Null.SYS

0xF7D18000 \SystemRoot\System32\Drivers\Beep.SYS

0xF7B6E000 \SystemRoot\System32\drivers\vga.sys

0xF7D1E000 \SystemRoot\System32\Drivers\mnmdd.SYS

0xF7D24000 \SystemRoot\System32\DRIVERS\RDPCDD.sys

0xF7B86000 \SystemRoot\System32\Drivers\Msfs.SYS

0xF7B9E000 \SystemRoot\System32\Drivers\Npfs.SYS

0xF71FA000 \SystemRoot\system32\DRIVERS\rasacd.sys

0xAA765000 \SystemRoot\system32\DRIVERS\ipsec.sys

0xAA70C000 \SystemRoot\system32\DRIVERS\tcpip.sys

0xAA6E4000 \SystemRoot\system32\DRIVERS\netbt.sys

0xAA6BE000 \SystemRoot\system32\DRIVERS\ipnat.sys

0xF78C6000 \SystemRoot\system32\DRIVERS\wanarp.sys

0xF7584000 \SystemRoot\System32\drivers\ws2ifsl.sys

0xAA69C000 \SystemRoot\System32\drivers\afd.sys

0xF7936000 \SystemRoot\system32\DRIVERS\netbios.sys

0xAA5D1000 \SystemRoot\system32\DRIVERS\rdbss.sys

0xAA561000 \SystemRoot\system32\DRIVERS\mrxsmb.sys

0xF7A16000 \SystemRoot\System32\Drivers\Fips.SYS

0xF7A46000 \??\C:\Program\Telia\Telias sakerhetstjanster\HIPS\drivers\fshs.sys

0xF7D2E000 \??\C:\WINDOWS\system32\drivers\EABFiltr.sys

0xF78B6000 \SystemRoot\System32\Drivers\ClntMgmt.sys

0xF7966000 \SystemRoot\System32\Drivers\Cdfs.SYS

0xAA470000 \SystemRoot\System32\Drivers\dump_atapi.sys

0xF7D46000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS

0xBF800000 \SystemRoot\System32\win32k.sys

0xF7206000 \SystemRoot\System32\drivers\Dxapi.sys

0xF7BA6000 \SystemRoot\System32\watchdog.sys

0xBF000000 \SystemRoot\System32\drivers\dxg.sys

0xF7DEF000 \SystemRoot\System32\drivers\dxgthk.sys

0xBF020000 \SystemRoot\System32\ialmdnt5.dll

0xBF012000 \SystemRoot\System32\ialmrnt5.dll

0xBF03F000 \SystemRoot\System32\ialmdev5.DLL

0xBF065000 \SystemRoot\System32\ialmdd5.DLL

0xBFFA0000 \SystemRoot\System32\ATMFD.DLL

0xAA2A2000 \SystemRoot\system32\DRIVERS\irda.sys

0xAA0AD000 \SystemRoot\system32\drivers\wdmaud.sys

0xF717F000 \SystemRoot\system32\drivers\sysaudio.sys

0xA9BCA000 \SystemRoot\system32\DRIVERS\mrxdav.sys

0xA9B7E000 \SystemRoot\System32\Drivers\Fastfat.SYS

0xA9B3D000 \SystemRoot\System32\Drivers\HTTP.sys

0xF7D7C000 \??\C:\Program\LogMeIn\x86\RaInfo.sys

0xA9E47000 \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys

0xA98B5000 \SystemRoot\system32\DRIVERS\srv.sys

0xA9752000 \??\C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\minifilter\fsgk.sys

0x7C900000 \WINDOWS\system32\ntdll.dll

 

Processes (total 43):

0 System Idle Process

4 System

604 C:\WINDOWS\system32\smss.exe

668 csrss.exe

692 C:\WINDOWS\system32\winlogon.exe

736 C:\WINDOWS\system32\services.exe

748 C:\WINDOWS\system32\lsass.exe

896 C:\WINDOWS\system32\svchost.exe

996 svchost.exe

1052 C:\Program\Windows Defender\MsMpEng.exe

1092 C:\WINDOWS\system32\svchost.exe

1168 svchost.exe

1240 svchost.exe

1384 C:\WINDOWS\system32\spoolsv.exe

1420 scardsvr.exe

1620 C:\WINDOWS\explorer.exe

1932 C:\WINDOWS\system32\igfxtray.exe

1944 C:\WINDOWS\system32\hkcmd.exe

1952 C:\Program\Analog Devices\SoundMAX\SMax4PNP.exe

1980 C:\Program\Synaptics\SynTP\SynTPEnh.exe

1996 C:\Program\ScanSoft\OmniPageSE\opware32.exe

2020 C:\WINDOWS\AGRSMMSG.exe

184 C:\Program\Telia\Telias sakerhetstjanster\Common\FSM32.EXE

256 C:\Program\Microsoft ActiveSync\wcescomm.exe

264 C:\WINDOWS\system32\ctfmon.exe

304 C:\Program\Telia\Telia_Mobilt_bredband\Telia_Mobilt_bredband.exe

356 C:\Program\MI3AA1~1\rapimgr.exe

924 svchost.exe

1176 C:\Program\ExtraFilm Designer SE\EFUploadSrv.exe

792 C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsgk32st.exe

1280 C:\Program\Telia\Telias sakerhetstjanster\Common\FSMA32.EXE

1312 C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsgk32.exe

1440 C:\Program\Telia\Telias sakerhetstjanster\Common\FSHDLL32.EXE

1488 C:\WINDOWS\system32\svchost.exe

1572 C:\Program\Analog Devices\SoundMAX\SMAgent.exe

1612 C:\WINDOWS\system32\svchost.exe

1772 wmpnetwk.exe

2604 C:\Program\Telia\Telias sakerhetstjanster\FWES\program\fsdfwd.exe

2632 C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fssm32.exe

2924 fsorsp.exe

3324 alg.exe

4060 C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsav32.exe

3008 C:\Documents and Settings\Administratör\Skrivbord\MBRCheck.exe

 

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)

 

PhysicalDrive0 Model Number: TOSHIBAMK4026GAX, Rev: PA103G

 

Size Device Name MBR Status

--------------------------------------------

37 GB \\.\PhysicalDrive0 Unknown MBR code

SHA1: BBF289AC40BA09F2CC1797655D4799D2AB148CB5

 

 

Found non-standard or infected MBR.

Enter 'Y' and hit ENTER for more options, or 'N' to exit:

Options:

[1] Dump the MBR of a physical disk to file.

[2] Restore the MBR of a physical disk with a standard boot code.

[3] Exit.

 

Enter your choice: Enter the physical disk number to dump (0-99, -1 to exit): 0Dumping \\.\PhysicalDisk0...

Enter filename to dump to: C:\***mbr.txtError opening output file (0)!

 

Enter the physical disk number to dump (0-99, -1 to exit): 0Dumping \\.\PhysicalDisk0...

Enter filename to dump to: C:\***mbr.txtError opening output file (0)!

 

Enter the physical disk number to dump (0-99, -1 to exit):

[Cecilia]

Förlåt, '*' är inte tillåten i filnamnet. Välj filnamnet t ex C:\OldBoymbr.txt.

[The OldBoy]

Nu gick det bättre:

 

MBRCheck, version 1.2.3

© 2010, AD

 

Command-line:

Windows Version: Windows XP Professional

Windows Information: Service Pack 3 (build 2600)

Logical Drives Mask: 0x0000000c

 

Kernel Drivers (total 130):

0x804D7000 \WINDOWS\system32\ntoskrnl.exe

0x806EE000 \WINDOWS\system32\hal.dll

0xF7CD6000 \WINDOWS\system32\KDCOM.DLL

0xF7BE6000 \WINDOWS\system32\BOOTVID.dll

0xF7787000 ACPI.sys

0xF7CD8000 \WINDOWS\system32\DRIVERS\WMILIB.SYS

0xF7776000 pci.sys

0xF77D6000 isapnp.sys

0xF77E6000 ohci1394.sys

0xF77F6000 \WINDOWS\system32\DRIVERS\1394BUS.SYS

0xF7BEA000 compbatt.sys

0xF7BEE000 \WINDOWS\system32\DRIVERS\BATTC.SYS

0xF7D9E000 pciide.sys

0xF7A56000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS

0xF7CDA000 intelide.sys

0xF7CDC000 viaide.sys

0xF7CDE000 aliide.sys

0xF7758000 pcmcia.sys

0xF7806000 MountMgr.sys

0xF7739000 ftdisk.sys

0xF7CE0000 dmload.sys

0xF7713000 dmio.sys

0xF7BF2000 ACPIEC.sys

0xF7D9F000 \WINDOWS\system32\DRIVERS\OPRGHDLR.SYS

0xF7A5E000 PartMgr.sys

0xF7816000 VolSnap.sys

0xF76FB000 atapi.sys

0xF7826000 disk.sys

0xF7836000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS

0xF76DB000 fltmgr.sys

0xF76C9000 sr.sys

0xF7846000 PxHelp20.sys

0xF76B2000 KSecDD.sys

0xF7625000 Ntfs.sys

0xF7613000 fsdfw.sys

0xF75E6000 \WINDOWS\System32\drivers\NDIS.SYS

0xF75CC000 Mup.sys

0xF7856000 fsbts.sys

0xF7896000 \SystemRoot\system32\DRIVERS\intelppm.sys

0xF74CB000 \SystemRoot\system32\DRIVERS\ialmnt5.sys

0xF74B7000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS

0xF7A9E000 \SystemRoot\system32\DRIVERS\usbuhci.sys

0xF7493000 \SystemRoot\system32\DRIVERS\USBPORT.SYS

0xF7AD6000 \SystemRoot\system32\DRIVERS\usbehci.sys

0xF73FF000 \SystemRoot\system32\DRIVERS\bcmwl5.sys

0xF73BF000 \SystemRoot\system32\drivers\smwdm.sys

0xF739B000 \SystemRoot\system32\drivers\portcls.sys

0xF7906000 \SystemRoot\system32\drivers\drmk.sys

0xF7378000 \SystemRoot\system32\drivers\ks.sys

0xF7358000 \SystemRoot\system32\drivers\aeaudio.sys

0xF7253000 \SystemRoot\system32\DRIVERS\AGRSM.sys

0xF7BD6000 \SystemRoot\System32\Drivers\Modem.SYS

0xF7926000 \SystemRoot\system32\DRIVERS\i8042prt.sys

0xF7A86000 \SystemRoot\system32\DRIVERS\kbdclass.sys

0xF721E000 \SystemRoot\system32\DRIVERS\SynTP.sys

0xF7CF4000 \SystemRoot\system32\DRIVERS\USBD.SYS

0xF7AEE000 \SystemRoot\system32\DRIVERS\mouclass.sys

0xF7976000 \SystemRoot\system32\DRIVERS\imapi.sys

0xF7CBA000 \??\C:\WINDOWS\system32\drivers\pfc.sys

0xF7996000 \SystemRoot\system32\DRIVERS\cdrom.sys

0xF79B6000 \SystemRoot\system32\DRIVERS\redbook.sys

0xF7CCA000 \SystemRoot\system32\DRIVERS\CmBatt.sys

0xF75A8000 \SystemRoot\system32\DRIVERS\wmiacpi.sys

0xF7EEB000 \SystemRoot\system32\DRIVERS\lmimirr.sys

0xF7EEF000 \SystemRoot\system32\DRIVERS\audstub.sys

0xF7B2E000 \SystemRoot\system32\DRIVERS\rasirda.sys

0xF7B3E000 \SystemRoot\system32\DRIVERS\TDI.SYS

0xF79D6000 \SystemRoot\system32\DRIVERS\rasl2tp.sys

0xF7594000 \SystemRoot\system32\DRIVERS\ndistapi.sys

0xF71DF000 \SystemRoot\system32\DRIVERS\ndiswan.sys

0xF7A06000 \SystemRoot\system32\DRIVERS\raspppoe.sys

0xF7A26000 \SystemRoot\system32\DRIVERS\raspptp.sys

0xF712E000 \SystemRoot\system32\DRIVERS\psched.sys

0xF78A6000 \SystemRoot\system32\DRIVERS\msgpc.sys

0xF7BB6000 \SystemRoot\system32\DRIVERS\ptilink.sys

0xF7BCE000 \SystemRoot\system32\DRIVERS\raspti.sys

0xF70FE000 \SystemRoot\system32\DRIVERS\rdpdr.sys

0xF78F6000 \SystemRoot\system32\DRIVERS\termdd.sys

0xF7CFC000 \SystemRoot\system32\DRIVERS\swenum.sys

0xF70A0000 \SystemRoot\system32\DRIVERS\update.sys

0xF7C8E000 \SystemRoot\system32\DRIVERS\mssmbios.sys

0xF79C6000 \SystemRoot\System32\Drivers\NDProxy.SYS

0xF71BF000 \SystemRoot\system32\DRIVERS\usbhub.sys

0xF7D12000 \SystemRoot\System32\Drivers\Fs_Rec.SYS

0xF7DC2000 \SystemRoot\System32\Drivers\Null.SYS

0xF7D18000 \SystemRoot\System32\Drivers\Beep.SYS

0xF7B6E000 \SystemRoot\System32\drivers\vga.sys

0xF7D1E000 \SystemRoot\System32\Drivers\mnmdd.SYS

0xF7D24000 \SystemRoot\System32\DRIVERS\RDPCDD.sys

0xF7B86000 \SystemRoot\System32\Drivers\Msfs.SYS

0xF7B9E000 \SystemRoot\System32\Drivers\Npfs.SYS

0xF71FA000 \SystemRoot\system32\DRIVERS\rasacd.sys

0xAA765000 \SystemRoot\system32\DRIVERS\ipsec.sys

0xAA70C000 \SystemRoot\system32\DRIVERS\tcpip.sys

0xAA6E4000 \SystemRoot\system32\DRIVERS\netbt.sys

0xAA6BE000 \SystemRoot\system32\DRIVERS\ipnat.sys

0xF78C6000 \SystemRoot\system32\DRIVERS\wanarp.sys

0xF7584000 \SystemRoot\System32\drivers\ws2ifsl.sys

0xAA69C000 \SystemRoot\System32\drivers\afd.sys

0xF7936000 \SystemRoot\system32\DRIVERS\netbios.sys

0xAA5D1000 \SystemRoot\system32\DRIVERS\rdbss.sys

0xAA561000 \SystemRoot\system32\DRIVERS\mrxsmb.sys

0xF7A16000 \SystemRoot\System32\Drivers\Fips.SYS

0xF7A46000 \??\C:\Program\Telia\Telias sakerhetstjanster\HIPS\drivers\fshs.sys

0xF7D2E000 \??\C:\WINDOWS\system32\drivers\EABFiltr.sys

0xF78B6000 \SystemRoot\System32\Drivers\ClntMgmt.sys

0xF7966000 \SystemRoot\System32\Drivers\Cdfs.SYS

0xAA470000 \SystemRoot\System32\Drivers\dump_atapi.sys

0xF7D46000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS

0xBF800000 \SystemRoot\System32\win32k.sys

0xF7206000 \SystemRoot\System32\drivers\Dxapi.sys

0xF7BA6000 \SystemRoot\System32\watchdog.sys

0xBF000000 \SystemRoot\System32\drivers\dxg.sys

0xF7DEF000 \SystemRoot\System32\drivers\dxgthk.sys

0xBF020000 \SystemRoot\System32\ialmdnt5.dll

0xBF012000 \SystemRoot\System32\ialmrnt5.dll

0xBF03F000 \SystemRoot\System32\ialmdev5.DLL

0xBF065000 \SystemRoot\System32\ialmdd5.DLL

0xBFFA0000 \SystemRoot\System32\ATMFD.DLL

0xAA2A2000 \SystemRoot\system32\DRIVERS\irda.sys

0xAA0AD000 \SystemRoot\system32\drivers\wdmaud.sys

0xF717F000 \SystemRoot\system32\drivers\sysaudio.sys

0xA9BCA000 \SystemRoot\system32\DRIVERS\mrxdav.sys

0xA9B7E000 \SystemRoot\System32\Drivers\Fastfat.SYS

0xA9B3D000 \SystemRoot\System32\Drivers\HTTP.sys

0xF7D7C000 \??\C:\Program\LogMeIn\x86\RaInfo.sys

0xA9E47000 \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys

0xA98B5000 \SystemRoot\system32\DRIVERS\srv.sys

0xA9752000 \??\C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\minifilter\fsgk.sys

0x7C900000 \WINDOWS\system32\ntdll.dll

 

Processes (total 43):

0 System Idle Process

4 System

604 C:\WINDOWS\system32\smss.exe

668 csrss.exe

692 C:\WINDOWS\system32\winlogon.exe

736 C:\WINDOWS\system32\services.exe

748 C:\WINDOWS\system32\lsass.exe

896 C:\WINDOWS\system32\svchost.exe

996 svchost.exe

1052 C:\Program\Windows Defender\MsMpEng.exe

1092 C:\WINDOWS\system32\svchost.exe

1168 svchost.exe

1240 svchost.exe

1384 C:\WINDOWS\system32\spoolsv.exe

1420 scardsvr.exe

1620 C:\WINDOWS\explorer.exe

1932 C:\WINDOWS\system32\igfxtray.exe

1944 C:\WINDOWS\system32\hkcmd.exe

1952 C:\Program\Analog Devices\SoundMAX\SMax4PNP.exe

1980 C:\Program\Synaptics\SynTP\SynTPEnh.exe

1996 C:\Program\ScanSoft\OmniPageSE\opware32.exe

2020 C:\WINDOWS\AGRSMMSG.exe

184 C:\Program\Telia\Telias sakerhetstjanster\Common\FSM32.EXE

256 C:\Program\Microsoft ActiveSync\wcescomm.exe

264 C:\WINDOWS\system32\ctfmon.exe

304 C:\Program\Telia\Telia_Mobilt_bredband\Telia_Mobilt_bredband.exe

356 C:\Program\MI3AA1~1\rapimgr.exe

924 svchost.exe

1176 C:\Program\ExtraFilm Designer SE\EFUploadSrv.exe

792 C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsgk32st.exe

1280 C:\Program\Telia\Telias sakerhetstjanster\Common\FSMA32.EXE

1312 C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsgk32.exe

1440 C:\Program\Telia\Telias sakerhetstjanster\Common\FSHDLL32.EXE

1488 C:\WINDOWS\system32\svchost.exe

1572 C:\Program\Analog Devices\SoundMAX\SMAgent.exe

1612 C:\WINDOWS\system32\svchost.exe

1772 wmpnetwk.exe

2604 C:\Program\Telia\Telias sakerhetstjanster\FWES\program\fsdfwd.exe

2632 C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fssm32.exe

2924 fsorsp.exe

3324 alg.exe

4060 C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsav32.exe

3872 C:\Documents and Settings\Administratör\Skrivbord\MBRCheck.exe

 

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)

 

PhysicalDrive0 Model Number: TOSHIBAMK4026GAX, Rev: PA103G

 

Size Device Name MBR Status

--------------------------------------------

37 GB \\.\PhysicalDrive0 Unknown MBR code

SHA1: BBF289AC40BA09F2CC1797655D4799D2AB148CB5

 

 

Found non-standard or infected MBR.

Enter 'Y' and hit ENTER for more options, or 'N' to exit:

Options:

[1] Dump the MBR of a physical disk to file.

[2] Restore the MBR of a physical disk with a standard boot code.

[3] Exit.

 

Enter your choice: Enter the physical disk number to dump (0-99, -1 to exit): 0Dumping \\.\PhysicalDisk0...

Enter filename to dump to: C:\OldBoymbr.txtDumped successfully!

 

Enter the physical disk number to dump (0-99, -1 to exit):

OldBoymbr.txt