USB Problem (Resolved)

G

grassman22

New member
Hello,

I have used the help of this forum many times to remove infected files from my system. Now, since i've got this infected flash disk from a friend, i looked for help in the forum and found this post:
http://forums.spybot.info/showthread.php?t=50104

following what said there I:
1. Installed and used ERUNT to backup the registry.
2. Disabled AutoRun using the linked article from Microsoft: http://support.microsoft.com/kb/967715/
3. Downloaded, installed and activated Panda USB Vaccine, also linked in the article.

But now, as I plugged the flash drive, my system doesn't recognize the USB device at all. I tried to disable Panda USB Vaccine, but it didn't help. Maybe I could get some help here in using the registry backup i made, or get a recomandation for a more suitable furom, or any other kind of advice.

Thnx,

Grassman22
 
Hi grassman22,

What happens when you plug in the USB drive ?
Does it appear in "My Computer" ?
 
Let's have a quick look.


Download and Run RSIT
  • Please download Random's System Information Tool by random/random from here and save it to your desktop.
  • Double click on RSIT.exe to run RSIT.
  • Click Continue at the disclaimer screen.
  • Once it has finished, two logs will open:
    • log.txt will be opened maximized.
    • info.txt will be opened minimized.
  • Please post the contents of both log.txt and info.txt.
    ( They can also be found in the C:\RSIT folder )
 
Hi,

Here are the logs:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Doron at 2009-09-07 00:22:45
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 69 GB (92%) free of 75 GB
Total RAM: 1022 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:22:55, on 07/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Crazy Browser\Crazy Browser.exe
C:\Documents and Settings\Doron\שולחן העבודה\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Doron.exe

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 3655 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-08-26 1111320]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-09-22 14854144]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-04-22 5898240]
"nwiz"=nwiz.exe /install []
"SW20"=C:\WINDOWS\system32\sw20.exe [2005-06-30 200704]
"SW24"=C:\WINDOWS\system32\sw24.exe [2005-07-04 69632]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-04-22 86016]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-08-26 2007832]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-02-16 981384]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2009-08-26 11952]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=16895

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2009-09-07 00:22:45 ----D---- C:\rsit
2009-08-31 23:28:25 ----D---- C:\Documents and Settings\Doron\Application Data\WinRAR
2009-08-31 23:26:39 ----D---- C:\Program Files\WinRAR
2009-08-31 01:59:51 ----D---- C:\WINDOWS\system32\NtmsData
2009-08-31 00:27:00 ----D---- C:\Program Files\Panda USB Vaccine
2009-08-30 23:51:03 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2009-08-30 23:50:56 ----HDC---- C:\WINDOWS\$NtUninstallKB970653-v3$
2009-08-30 23:50:53 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2009-08-30 23:50:47 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2009-08-30 23:50:40 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2009-08-30 23:50:35 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2009-08-30 23:50:30 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2009-08-30 23:50:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2009-08-30 23:50:19 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2009-08-30 23:50:12 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2009-08-30 23:50:08 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2009-08-30 23:50:01 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-08-30 23:48:51 ----A---- C:\WINDOWS\system32\MRT.exe
2009-08-30 23:48:40 ----HDC---- C:\WINDOWS\$NtUninstallKB972260$
2009-08-30 23:48:35 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-08-30 23:48:30 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-08-30 23:48:25 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-08-30 23:48:20 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-08-30 23:48:15 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-08-30 23:48:09 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-08-30 23:48:04 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-08-30 23:47:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-08-30 23:47:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-08-30 23:47:38 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-08-30 23:47:32 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-08-30 23:47:28 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-08-30 23:47:23 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-08-30 23:47:19 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-08-30 23:47:14 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-08-30 23:47:08 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-08-30 23:47:04 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-08-30 23:47:00 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-08-30 23:46:55 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-08-30 23:46:50 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-08-30 23:46:46 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-08-30 23:46:41 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-08-30 23:46:36 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-08-30 23:46:32 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-08-30 23:46:28 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-08-30 23:46:24 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-08-30 23:46:19 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-08-30 23:46:14 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-08-30 23:46:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-08-30 23:46:02 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-08-30 23:45:56 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-08-30 23:31:14 ----D---- C:\WINDOWS\Prefetch
2009-08-30 23:27:21 ----D---- C:\WINDOWS\system32\he-il
2009-08-30 23:27:20 ----D---- C:\WINDOWS\system32\he
2009-08-30 23:27:20 ----D---- C:\WINDOWS\l2schemas
2009-08-30 23:27:19 ----D---- C:\WINDOWS\system32\bits
2009-08-30 23:24:11 ----D---- C:\WINDOWS\ServicePackFiles
2009-08-30 23:21:39 ----D---- C:\WINDOWS\network diagnostic
2009-08-30 23:17:54 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-08-30 23:17:51 ----D---- C:\WINDOWS\EHome
2009-08-30 22:41:28 ----D---- C:\Documents and Settings\Doron\Application Data\Malwarebytes
2009-08-30 22:41:22 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-08-30 22:41:22 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-08-30 19:20:33 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-08-30 19:16:29 ----D---- C:\WINDOWS\system32\PreInstall
2009-08-30 19:16:28 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-08-30 19:16:28 ----HD---- C:\WINDOWS\$hf_mig$
2009-08-30 19:16:06 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2009-08-30 16:17:34 ----D---- C:\WINDOWS\ERDNT
2009-08-30 16:16:30 ----D---- C:\Program Files\ERUNT
2009-08-30 16:10:11 ----A---- C:\WINDOWS\CIS_Setup_3.11.108364.552_XP_Vista_x32.INI
2009-08-30 16:00:17 ----D---- C:\Program Files\Trend Micro
2009-08-26 22:52:24 ----D---- C:\Documents and Settings\Doron\Application Data\Macromedia
2009-08-26 22:52:24 ----D---- C:\Documents and Settings\Doron\Application Data\Adobe
2009-08-26 22:47:26 ----HD---- C:\$AVG8.VAULT$
2009-08-26 21:57:17 ----A---- C:\WINDOWS\system32\vsregexp.dll
2009-08-26 21:57:14 ----A---- C:\WINDOWS\system32\zlcommdb.dll
2009-08-26 21:57:13 ----A---- C:\WINDOWS\system32\zlcomm.dll
2009-08-26 21:57:09 ----A---- C:\WINDOWS\system32\vswmi.dll
2009-08-26 21:57:07 ----A---- C:\WINDOWS\system32\zpeng25.dll
2009-08-26 21:57:06 ----D---- C:\WINDOWS\system32\ZoneLabs
2009-08-26 21:57:06 ----A---- C:\WINDOWS\system32\vsxml.dll
2009-08-26 21:57:06 ----A---- C:\WINDOWS\system32\vspubapi.dll
2009-08-26 21:57:06 ----A---- C:\WINDOWS\system32\vsmonapi.dll
2009-08-26 21:54:59 ----A---- C:\WINDOWS\system32\vsutil.dll
2009-08-26 21:54:59 ----A---- C:\WINDOWS\system32\vsinit.dll
2009-08-26 21:54:59 ----A---- C:\WINDOWS\system32\vsdata.dll
2009-08-26 21:53:11 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-08-26 21:53:08 ----HDC---- C:\WINDOWS\$NtUninstallKB943232$
2009-08-26 21:50:10 ----D---- C:\Program Files\Zone Labs
2009-08-26 21:48:40 ----D---- C:\WINDOWS\Internet Logs
2009-08-26 21:28:00 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-08-26 21:28:00 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-08-26 21:08:01 ----A---- C:\WINDOWS\system32\wpa.bak
2009-08-26 21:05:19 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2009-08-26 21:04:54 ----D---- C:\Program Files\AVG
2009-08-26 21:04:53 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2009-08-26 20:56:02 ----D---- C:\Documents and Settings\Doron\Application Data\AVG8
2009-08-26 20:52:10 ----D---- C:\Program Files\Crazy Browser
2009-08-26 20:48:26 ----D---- C:\Documents and Settings\All Users\Application Data\nView_Profiles
2009-08-26 20:47:02 ----A---- C:\WINDOWS\msicpl.ini
2009-08-26 20:42:22 ----D---- C:\WINDOWS\nview
2009-08-26 20:42:22 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-08-26 20:42:18 ----RA---- C:\WINDOWS\system32\WinSys.exe
2009-08-26 20:42:18 ----RA---- C:\WINDOWS\system32\sysinfo.dll
2009-08-26 20:42:18 ----RA---- C:\WINDOWS\system32\sw24.exe
2009-08-26 20:42:18 ----RA---- C:\WINDOWS\system32\sw20.exe
2009-08-26 20:42:17 ----RA---- C:\WINDOWS\system32\Nvgpio.dll
2009-08-26 20:42:17 ----RA---- C:\WINDOWS\system32\msicpl.dll
2009-08-26 20:35:33 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-08-26 20:35:27 ----D---- C:\Program Files\Intel
2009-08-26 20:31:32 ----D---- C:\WINDOWS\system32\Lang
2009-08-26 20:30:26 ----R---- C:\WINDOWS\system32\RtlCPAPI.dll
2009-08-26 20:30:26 ----R---- C:\WINDOWS\system32\ChCfg.exe
2009-08-26 20:30:05 ----D---- C:\WINDOWS\system32\RTCOM
2009-08-26 20:30:03 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-08-26 20:29:37 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-08-26 20:29:35 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2009-08-26 20:29:32 ----R---- C:\WINDOWS\SoundMan.exe
2009-08-26 20:29:32 ----R---- C:\WINDOWS\RtlUpd.exe
2009-08-26 20:29:29 ----R---- C:\WINDOWS\RTLCPL.exe
2009-08-26 20:29:26 ----R---- C:\WINDOWS\RTHDCPL.exe
2009-08-26 20:29:26 ----R---- C:\WINDOWS\MicCal.exe
2009-08-26 20:29:25 ----R---- C:\WINDOWS\Alcmtr.exe
2009-08-26 20:29:24 ----R---- C:\WINDOWS\alcwzrd.exe
2009-08-26 20:29:23 ----D---- C:\Program Files\Realtek
2009-08-26 20:29:22 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-26 20:29:16 ----R---- C:\WINDOWS\RtlExUpd.dll
2009-08-26 20:29:12 ----D---- C:\Program Files\Common Files\InstallShield
2009-08-23 17:14:35 ----RA---- C:\WINDOWS\system32\Prounstl.exe
2009-08-23 17:14:35 ----RA---- C:\WINDOWS\system32\NicIn32.dll
2009-08-23 17:14:35 ----RA---- C:\WINDOWS\system32\NicCo32.dll
2009-08-23 17:14:35 ----RA---- C:\WINDOWS\system32\EtCo32.dll
2009-08-23 17:14:35 ----RA---- C:\WINDOWS\system32\e1000msg.dll
2009-08-23 16:47:28 ----D---- C:\Program Files\Common Files\Adobe
2009-08-23 16:18:27 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-08-20 14:24:30 ----D---- C:\WINDOWS\pss
2009-08-20 14:23:12 ----SHD---- C:\RECYCLER
2009-08-20 04:45:04 ----A---- C:\WINDOWS\system32\h323log.txt
2009-08-20 04:40:01 ----A---- C:\WINDOWS\system32\usbui.dll
2009-08-20 04:39:08 ----A---- C:\WINDOWS\imsins.BAK
2009-08-20 04:39:05 ----SHD---- C:\WINDOWS\Installer
2009-08-20 04:39:05 ----D---- C:\Program Files\Common Files\ODBC
2009-08-20 04:39:05 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-08-20 04:39:05 ----A---- C:\WINDOWS\ODBCINST.INI
2009-08-20 04:39:02 ----D---- C:\Program Files\Common Files\SpeechEngines
2009-08-20 04:39:01 ----RD---- C:\Program Files
2009-08-20 04:39:01 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-08-20 04:39:01 ----D---- C:\Program Files\Common Files
2009-08-20 04:38:58 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-08-20 04:38:58 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-08-20 04:38:58 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-08-20 04:38:56 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-08-20 04:38:56 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-08-20 04:38:56 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-08-20 04:38:56 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-08-20 04:38:56 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-08-20 04:38:56 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-08-20 04:38:56 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-08-20 04:38:56 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-08-20 04:38:56 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-08-20 04:38:56 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-08-20 04:38:56 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-08-20 04:38:56 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-08-20 04:38:54 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-08-20 04:38:54 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-08-20 04:38:54 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-08-20 04:38:54 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-08-20 04:38:54 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-08-20 04:38:54 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-08-20 04:38:54 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-08-20 04:38:52 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-08-20 04:38:52 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-08-20 04:38:52 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-08-20 04:38:52 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-08-20 04:38:52 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-08-20 04:38:50 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\Thawbrkr.dll
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\kbdintel.dll
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\kbdintam.dll
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\kbdinpun.dll
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\kbdinmar.dll
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\kbdinkan.dll
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\kbdinhin.dll
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\kbdinguj.dll
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\kbdindev.dll
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\kbdgeo.dll
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\kbdarmw.dll
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\kbdarme.dll
2009-08-20 04:38:48 ----A---- C:\WINDOWS\system32\c_iscii.dll
2009-08-20 04:38:47 ----A---- C:\WINDOWS\system32\kbdvntc.dll
2009-08-20 04:38:45 ----A---- C:\WINDOWS\system32\kbdusa.dll
2009-08-20 04:38:45 ----A---- C:\WINDOWS\system32\kbdurdu.dll
2009-08-20 04:38:45 ----A---- C:\WINDOWS\system32\kbdsyr2.dll
2009-08-20 04:38:45 ----A---- C:\WINDOWS\system32\kbdsyr1.dll
2009-08-20 04:38:45 ----A---- C:\WINDOWS\system32\kbdfa.dll
2009-08-20 04:38:45 ----A---- C:\WINDOWS\system32\kbddiv2.dll
2009-08-20 04:38:45 ----A---- C:\WINDOWS\system32\kbddiv1.dll
2009-08-20 04:38:45 ----A---- C:\WINDOWS\system32\kbda3.dll
2009-08-20 04:38:45 ----A---- C:\WINDOWS\system32\kbda2.dll
2009-08-20 04:38:45 ----A---- C:\WINDOWS\system32\kbda1.dll
2009-08-20 04:38:39 ----A---- C:\WINDOWS\system32\kbdth3.dll
2009-08-20 04:38:39 ----A---- C:\WINDOWS\system32\kbdth2.dll
2009-08-20 04:38:39 ----A---- C:\WINDOWS\system32\kbdth1.dll
2009-08-20 04:38:38 ----A---- C:\WINDOWS\system32\kbdth0.dll
2009-08-20 04:38:38 ----A---- C:\WINDOWS\system32\ftlx041e.dll
2009-08-20 04:38:37 ----A---- C:\WINDOWS\system32\irclass.dll
2009-08-20 04:38:37 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-08-20 04:38:37 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-08-20 04:38:36 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-08-20 04:38:36 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-08-20 04:38:33 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-08-20 04:38:33 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-08-20 04:38:32 ----A---- C:\WINDOWS\system32\batt.dll
2009-08-20 04:38:31 ----A---- C:\WINDOWS\notepad.exe
2009-08-20 04:38:26 ----A---- C:\WINDOWS\system32\storprop.dll
2009-08-20 04:38:19 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-08-20 04:36:37 ----RA---- C:\WINDOWS\SET8.tmp
2009-08-20 04:36:34 ----RA---- C:\WINDOWS\SET4.tmp
2009-08-20 04:36:33 ----RA---- C:\WINDOWS\SET3.tmp
2009-08-20 04:36:29 ----D---- C:\WINDOWS\system32\CatRoot2
2009-08-20 04:36:29 ----D---- C:\WINDOWS\system32\CatRoot
2009-08-20 04:36:23 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-08-20 04:35:57 ----A---- C:\WINDOWS\setuplog.txt
2009-08-20 04:35:55 ----D---- C:\Documents and Settings
2009-08-20 04:35:54 ----SHD---- C:\System Volume Information
2009-08-20 04:34:58 ----SH---- C:\boot.ini
2009-08-20 04:28:38 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-08-20 04:28:38 ----RSD---- C:\WINDOWS\Fonts
2009-08-20 04:28:38 ----RD---- C:\WINDOWS\Web
2009-08-20 04:28:38 ----HD---- C:\WINDOWS\inf
2009-08-20 04:28:38 ----D---- C:\WINDOWS\WinSxS
2009-08-20 04:28:38 ----D---- C:\WINDOWS\twain_32
2009-08-20 04:28:38 ----D---- C:\WINDOWS\Temp
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\wins
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\wbem
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\usmt
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\spool
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\ShellExt
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\Setup
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\ras
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\oobe
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\npp
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\mui
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\inetsrv
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\IME
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\icsxml
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\ias
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\export
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\drivers
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\dhcp
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\config
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\3com_dmi
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\3076
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\2052
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\1054
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\1042
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\1041
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\1037
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\1033
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\1031
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\1028
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32\1025
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system32
2009-08-20 04:28:38 ----D---- C:\WINDOWS\system
2009-08-20 04:28:38 ----D---- C:\WINDOWS\security
2009-08-20 04:28:38 ----D---- C:\WINDOWS\Resources
2009-08-20 04:28:38 ----D---- C:\WINDOWS\repair
2009-08-20 04:28:38 ----D---- C:\WINDOWS\Provisioning
2009-08-20 04:28:38 ----D---- C:\WINDOWS\PeerNet
2009-08-20 04:28:38 ----D---- C:\WINDOWS\pchealth
2009-08-20 04:28:38 ----D---- C:\WINDOWS\mui
2009-08-20 04:28:38 ----D---- C:\WINDOWS\msapps
2009-08-20 04:28:38 ----D---- C:\WINDOWS\msagent
2009-08-20 04:28:38 ----D---- C:\WINDOWS\Media
2009-08-20 04:28:38 ----D---- C:\WINDOWS\java
2009-08-20 04:28:38 ----D---- C:\WINDOWS\ime
2009-08-20 04:28:38 ----D---- C:\WINDOWS\Help
2009-08-20 04:28:38 ----D---- C:\WINDOWS\Driver Cache
2009-08-20 04:28:38 ----D---- C:\WINDOWS\Debug
2009-08-20 04:28:38 ----D---- C:\WINDOWS\Cursors
2009-08-20 04:28:38 ----D---- C:\WINDOWS\Connection Wizard
2009-08-20 04:28:38 ----D---- C:\WINDOWS\Config
2009-08-20 04:28:38 ----D---- C:\WINDOWS\AppPatch
2009-08-20 04:28:38 ----D---- C:\WINDOWS\addins
2009-08-20 04:28:38 ----D---- C:\WINDOWS
2009-08-20 02:55:13 ----D---- C:\Documents and Settings\Doron\Application Data\Identities
2009-08-20 02:55:11 ----HD---- C:\Program Files\Uninstall Information
2009-08-20 02:54:56 ----ASH---- C:\Documents and Settings\Doron\Application Data\desktop.ini
2009-08-20 02:54:55 ----SD---- C:\Documents and Settings\Doron\Application Data\Microsoft
2009-08-20 02:53:33 ----D---- C:\WINDOWS\SoftwareDistribution
2009-08-20 02:53:31 ----SD---- C:\WINDOWS\system32\Microsoft
2009-08-20 02:53:31 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-08-20 02:50:35 ----D---- C:\WINDOWS\system32\xircom
2009-08-20 02:50:35 ----D---- C:\Program Files\xerox
2009-08-20 02:50:35 ----D---- C:\Program Files\microsoft frontpage
2009-08-20 02:50:22 ----A---- C:\WINDOWS\control.ini
2009-08-20 02:50:22 ----A---- C:\AUTOEXEC.BAT
2009-08-20 02:50:13 ----A---- C:\WINDOWS\OEWABLog.txt
2009-08-20 02:50:09 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-08-20 02:49:27 ----RD---- C:\WINDOWS\Offline Web Pages
2009-08-20 02:49:26 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-08-20 02:49:26 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-08-20 02:49:20 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-08-20 02:49:17 ----HD---- C:\Program Files\WindowsUpdate
2009-08-20 02:49:13 ----D---- C:\Program Files\Online Services
2009-08-20 02:48:57 ----D---- C:\WINDOWS\system32\DirectX
2009-08-20 02:48:37 ----A---- C:\WINDOWS\system32\atrace.dll
2009-08-20 02:48:33 ----A---- C:\WINDOWS\system32\desktop.ini
2009-08-20 02:48:33 ----A---- C:\WINDOWS\desktop.ini
2009-08-20 02:48:22 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-08-20 02:48:21 ----A---- C:\WINDOWS\system32\acctres.dll
2009-08-20 02:48:20 ----D---- C:\Program Files\Common Files\Services
2009-08-20 02:48:18 ----SD---- C:\WINDOWS\Tasks
2009-08-20 02:48:18 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-08-20 02:48:17 ----D---- C:\Program Files\Common Files\MSSoap
2009-08-20 02:48:13 ----D---- C:\WINDOWS\srchasst
2009-08-20 02:48:12 ----D---- C:\WINDOWS\system32\Macromed
2009-08-20 02:48:10 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-08-20 02:48:09 ----A---- C:\WINDOWS\system32\wups.dll
2009-08-20 02:48:09 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-08-20 02:48:09 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-08-20 02:48:09 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-08-20 02:48:09 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-08-20 02:48:09 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-08-20 02:48:09 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-08-20 02:48:09 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-08-20 02:48:08 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-08-20 02:48:08 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-08-20 02:48:08 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-08-20 02:48:08 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-08-20 02:48:05 ----D---- C:\Program Files\Movie Maker
2009-08-20 02:48:01 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-08-20 02:48:01 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-08-20 02:48:01 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-08-20 02:48:01 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-08-20 02:47:58 ----A---- C:\WINDOWS\system32\fltmc.exe
2009-08-20 02:47:58 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-08-20 02:47:57 ----D---- C:\WINDOWS\system32\Restore
2009-08-20 02:47:57 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-08-20 02:47:57 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-08-20 02:47:57 ----A---- C:\WINDOWS\system32\srclient.dll
2009-08-20 02:47:56 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-08-20 02:47:56 ----A---- C:\WINDOWS\system32\msconf.dll
2009-08-20 02:47:56 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-08-20 02:47:56 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-08-20 02:47:56 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-08-20 02:47:56 ----A---- C:\WINDOWS\system32\ils.dll
2009-08-20 02:47:51 ----D---- C:\Program Files\NetMeeting
2009-08-20 02:47:51 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-08-20 02:47:51 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-08-20 02:47:50 ----A---- C:\WINDOWS\system32\inetres.dll
2009-08-20 02:47:50 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-08-20 02:47:48 ----D---- C:\Program Files\Outlook Express
2009-08-20 02:47:48 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-08-20 02:47:48 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-08-20 02:47:48 ----A---- C:\WINDOWS\system32\mstask.dll
2009-08-20 02:47:47 ----A---- C:\WINDOWS\system32\isign32.dll
2009-08-20 02:47:47 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-08-20 02:47:47 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-08-20 02:47:47 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-08-20 02:47:41 ----D---- C:\Program Files\Common Files\System
2009-08-20 02:47:35 ----D---- C:\Program Files\Internet Explorer
2009-08-20 02:47:25 ----D---- C:\Program Files\ComPlus Applications
2009-08-20 02:47:23 ----A---- C:\WINDOWS\vbaddin.ini
2009-08-20 02:47:23 ----A---- C:\WINDOWS\vb.ini
2009-08-20 02:47:19 ----D---- C:\WINDOWS\Registration
2009-08-20 02:46:54 ----D---- C:\Program Files\Windows Media Player
2009-08-20 02:46:49 ----D---- C:\Program Files\Messenger
2009-08-20 02:46:45 ----D---- C:\Program Files\MSN Gaming Zone
2009-08-20 02:46:45 ----A---- C:\WINDOWS\system32\write.exe
2009-08-20 02:46:36 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-08-20 02:46:36 ----A---- C:\WINDOWS\system32\hticons.dll
2009-08-20 02:46:36 ----A---- C:\WINDOWS\system32\avwav.dll
2009-08-20 02:46:36 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-08-20 02:46:36 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-08-20 02:46:35 ----A---- C:\WINDOWS\system32\winchat.exe
2009-08-20 02:46:28 ----A---- C:\WINDOWS\system32\getuname.dll
2009-08-20 02:46:28 ----A---- C:\WINDOWS\system32\charmap.exe
2009-08-20 02:46:28 ----A---- C:\WINDOWS\system32\calc.exe
2009-08-20 02:46:27 ----A---- C:\WINDOWS\system32\winmine.exe
2009-08-20 02:46:27 ----A---- C:\WINDOWS\system32\sol.exe
2009-08-20 02:46:27 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-08-20 02:46:27 ----A---- C:\WINDOWS\system32\freecell.exe
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\tskill.exe
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\tscon.exe
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\shadow.exe
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\reset.exe
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\regini.exe
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-08-20 02:46:26 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-08-20 02:46:25 ----A---- C:\WINDOWS\system32\msg.exe
2009-08-20 02:46:25 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-08-20 02:46:25 ----A---- C:\WINDOWS\system32\logoff.exe
2009-08-20 02:46:25 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-08-20 02:46:24 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-08-20 02:46:24 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-08-20 02:46:24 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-08-20 02:46:24 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-08-20 02:46:23 ----A---- C:\WINDOWS\system32\stclient.dll
2009-08-20 02:46:23 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-08-20 02:46:23 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-08-20 02:46:22 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-08-20 02:46:15 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-08-20 02:46:14 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-08-20 02:46:13 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-08-20 02:46:13 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-08-20 02:46:12 ----D---- C:\Program Files\Windows NT
2009-08-20 02:46:12 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-08-20 02:46:11 ----A---- C:\WINDOWS\system32\spider.exe
2009-08-20 02:46:11 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-08-20 02:46:11 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-08-20 02:46:09 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-08-20 02:46:08 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-08-20 02:46:08 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-08-20 02:46:08 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-08-20 02:46:08 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-08-20 02:46:08 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-08-20 02:46:08 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-08-20 02:46:08 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-08-20 02:46:07 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2009-08-20 02:46:07 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-08-20 02:46:07 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-08-20 02:46:07 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-08-20 02:46:07 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-08-20 02:46:06 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-08-20 02:46:06 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-08-20 02:46:06 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-08-20 02:46:05 ----D---- C:\WINDOWS\system32\MsDtc
2009-08-20 02:46:05 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-08-20 02:46:05 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-08-20 02:46:05 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-08-20 02:46:05 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-08-20 02:46:04 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-08-20 02:46:04 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-08-20 02:46:04 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-08-20 02:46:03 ----D---- C:\WINDOWS\system32\Com
2009-08-20 02:46:03 ----A---- C:\WINDOWS\system32\colbact.dll
2009-08-20 02:46:03 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-08-20 02:46:03 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-08-20 02:46:03 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-08-20 02:46:03 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-08-20 02:46:02 ----A---- C:\WINDOWS\system32\comuid.dll
2009-08-20 02:46:02 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-08-20 02:46:01 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-08-20 02:45:55 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-08-20 02:45:55 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-08-20 02:45:54 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-08-20 02:45:54 ----A---- C:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 1 months======

2009-08-20 04:39:00 ----A---- C:\WINDOWS\system.ini
2009-08-20 02:50:22 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-08-26 335240]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-08-26 27784]
R1 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-08-26 108552]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 39936]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-02-16 353672]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2005-09-01 176640]
R3 HDAudBus;אװ װךח ׀הח UAA י Microsoft גׁױט High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-09-23 3966976]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-18 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2005-04-22 3095680]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2009-08-26 908056]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-08-26 297752]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-04-22 127043]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-02-16 2402184]

-----------------EOF-----------------


info.txt logfile of random's system information tool 1.06 2009-09-07 00:22:57

======Uninstall list======

-->C:\WINDOWS\system32\msiuins.exe
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
AVG Free 8.5-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
Crazy Browser version 3.0.0 RC2-->"C:\Program Files\Crazy Browser\unins000.exe"
ERUNT 1.1j-->"C:\Program Files\ERUNT\unins000.exe"
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Intel(R) PRO Network Connections Drivers-->Prounstl.exe
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
Panda USB Vaccine 1.0.0.50a-->"C:\Program Files\Panda USB Vaccine\unins000.exe"
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x9 -removeonly
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
VC 9.0 Runtime-->MsiExec.exe /I{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
ZoneAlarm-->C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe
עדכון אבטחה עבור Windows Media Player‏ (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows Media Player‏ (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB923561)‎-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB938464-v2)‎-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB946648)‎-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB950762)‎-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB950974)‎-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB951066)‎-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB951376-v2)‎-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB951748)‎-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB952004)‎-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB952954)‎-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB954459)‎-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB954600)‎-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB955069)‎-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB956572)‎-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB956744)‎-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB956802)‎-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB956803)‎-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB957097)‎-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB958644)‎-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB958687)‎-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB959426)‎-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB960225)‎-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB960803)‎-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB960859)‎-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB961371-v2)‎-->"C:\WINDOWS\$NtUninstallKB961371-v2$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB961501)‎-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB968537)‎-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB970238)‎-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB971557)‎-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB971633)‎-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB971657)‎-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB972260)‎-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB973346)‎-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB973354)‎-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB973507)‎-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
עדכון אבטחה עבור Windows XP (KB973869)‎-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
עדכון עבור Windows XP (KB951978)‎-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
עדכון עבור Windows XP (KB967715)‎-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
עדכון עבור Windows XP (KB968389)‎-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
עדכון עבור Windows XP (KB973815)‎-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
תיקון חם עבור Windows XP (KB952287)‎-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
תיקון חם עבור Windows XP (KB970653-v3)‎-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"

======Security center information======

AV: AVG Anti-Virus Free
FW: ZoneAlarm Firewall

======System event log======

Computer Name: DORON
Event Code: 7000
Message: The MSICPL service failed to start due to the following error:
‏‏למערכת אין אפשרות לאתר את הקובץ שצוין.


Record Number: 211
Source Name: Service Control Manager
Time Written: 20090826203407.000000+180
Event Type: error
User:

Computer Name: DORON
Event Code: 7000
Message: The MSICPL service failed to start due to the following error:
‏‏למערכת אין אפשרות לאתר את הקובץ שצוין.


Record Number: 210
Source Name: Service Control Manager
Time Written: 20090826203407.000000+180
Event Type: error
User:

Computer Name: DORON
Event Code: 7000
Message: The MSICPL service failed to start due to the following error:
‏‏למערכת אין אפשרות לאתר את הקובץ שצוין.


Record Number: 83
Source Name: Service Control Manager
Time Written: 20090823171227.000000+180
Event Type: error
User:

Computer Name: DORON
Event Code: 7000
Message: The MSICPL service failed to start due to the following error:
‏‏למערכת אין אפשרות לאתר את הקובץ שצוין.


Record Number: 82
Source Name: Service Control Manager
Time Written: 20090823171227.000000+180
Event Type: error
User:

Computer Name: DORON
Event Code: 16
Message: ‏‏לא ניתן להתחבר: ל- Windows אין אפשרות להתחבר לשירות העדכונים האוטומטיים ולכן אין אפשרות להוריד ולהתקין עדכונים בהתאם ללוח הזמנים שנקבע. Windows ימשיך לבצע נסיונות ליצור חיבור.

Record Number: 69
Source Name: Windows Update Agent
Time Written: 20090823162641.000000+180
Event Type: error
User:

=====Application event log=====

Computer Name: DORON
Event Code: 1005
Message: ‏‏המוצר של Windows עדיין לא הופעל עם Microsoft. השתמש באשף הפעלת המוצר תוך 27 ימים.


Record Number: 42
Source Name: Windows Product Activation
Time Written: 20090823162551.000000+180
Event Type: warning
User:

Computer Name: DORON
Event Code: 60
Message: ‏‏ל- WMI ADAP לא היתה אפשרות לעבד את ספריות הביצועים: 0x80041001

Record Number: 36
Source Name: WinMgmt
Time Written: 20090820141441.000000+180
Event Type: warning
User:

Computer Name: DORON
Event Code: 60
Message: ‏‏ל- WMI ADAP לא היתה אפשרות לעבד את ספריות הביצועים: 0x80041001

Record Number: 28
Source Name: WinMgmt
Time Written: 20090820025733.000000+180
Event Type: warning
User:

Computer Name: DORON
Event Code: 1005
Message: ‏‏המוצר של Windows עדיין לא הופעל עם Microsoft. השתמש באשף הפעלת המוצר תוך 30 ימים.


Record Number: 24
Source Name: Windows Product Activation
Time Written: 20090820025458.000000+180
Event Type: warning
User:

Computer Name: DORON
Event Code: 63
Message: ‏‏ספק, HiPerfCooker_v1, נרשם בטווח השמות WMI‏, Root\WMI, לשימוש בחשבון LocalSystem. חשבון זה הוא מורשה והספק עשוי לגרום להפרת אבטחה אם הוא לא יתחזה כהלכה לבקשות משתמשים.

Record Number: 11
Source Name: WinMgmt
Time Written: 20090820024707.000000+180
Event Type: warning
User: NT AUTHORITY\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0404
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"tvdumpflags"=8

-----------------EOF-----------------


Thnx,

Grassman22
 
Create A Batch File
Please copy (Ctrl+C) and paste (Ctrl+V) the following text in the quote to Notepad.
Save it as "All Files" and name it look.bat Please save it on your desktop.

@echo off
if exist "%Temp%\RegLook*.txt" del /q "%Temp%\RegLook*.txt"
if exist "%Temp%\RegResults.txt" del /q "%Temp%\RegResults.txt"
regedit /a "%Temp%\RegLook1.txt" "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"
regedit /a "%Temp%\RegLook2.txt" "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer"
type "%Temp%\RegLook*.txt" >> "%Temp%\RegResults.txt"
start notepad "%Temp%\RegResults.txt"
del /q "%Temp%\RegLook*.txt"
del /q %0
exit
Click to expand...
Double click on look.bat
Notepad will open, please copy/paste the results here.
 
Hi,

Here are the results:

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:000041ff

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"HonorAutoRunSetting"=dword:00000001

Thnx,

Grassman22
 
Please try the following ...

Create A Registry File
Please copy (Ctrl+C) and paste (Ctrl+V) the following text in the quote to Notepad.
Save it as "All Files" and name it Regfix.reg Please save it on your desktop.

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:00000143
"NoDrives"=dword:00000000
"NoDriveAutoRun"=dword:03ffffff

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDrives"=dword:00000000
"NoDriveAutoRun"=dword:03ffffff
"NoDriveTypeAutoRun"=dword:00000143
Click to expand...
Make sure there are NO blank lines before REGEDIT4 and ONE blank line at the end/bottom
Double click on Regfix.reg and click Yes at the prompt

Now reboot the machine, and let me know if it helps the problem ...
 
Hi,

Before we continue I would like to know what this process will do to my system. Will it bring back the autorun.inf or will it continue to be blocked?

Thnx,

Grassman22
 
grassman22 said:
Will it bring back the autorun.inf
Click to expand...

No. Autorun.inf is a file that contains information about what program to run automatically.

These instructions alter the registry to allow the machine to "See" certain types of removable media.
 
Hi,

No. It didn't help the problem. But I must note that all other removable media seems to be recognizable immediatly. So maybe the problem is in the disk on key...

I have anotehr question: What does it mean if my computer sttuter? seems to be stuck for a moment for no reason and then goes on. Also when I go to start-turn off computer, it becomes stuck and then dissapear and I'm back in desktop again. When I try once more I succeed. How can I make the problem go away?

I recently reinstalled Windows and the problem surfaced immediatly, so I don't think it's a virus but maybe you know better.

Thnx,

Grassman22
 
grassman22 said:
I have anotehr question: What does it mean if my computer sttuter? seems to be stuck for a moment for no reason and then goes on. Also when I go to start-turn off computer, it becomes stuck and then dissapear and I'm back in desktop again. When I try once more I succeed. How can I make the problem go away?
~
I recently reinstalled Windows and the problem surfaced immediatly,
Click to expand...

It sounds like there may have been some OS corruption,

Unfortunately you are now outside my area of knowledge, so I'm going to have to recommend that you visit one of the tech forums for assistance.

http://www.techsupportforum.com/
http://www.bleepingcomputer.com/forums/
http://forums.whatthetech.com/forums.html
 
You must log in or register to reply here.
Back
Top