ciudatenie Ad-Aware vs Corel

- formatare pc+instalare xp+sp2
- instalare Corel
- instalare ad-aware
- instalare kaspersky 6

- diverse actiuni + instalari diverse

- oprire/repornire pc
- rezultat : corel nu mai functioneaza normal
- scanare ad-aware + stergere obiecte (MRU list + cookie)
- restart pc- corel tot nu functioneaza
- scanare ad-aware + stergere obiecte
- oprire PC ,cateva minute
- pc porneste , taskbar-ul nu mai este recunoscut de win. desi am clasi theme , am taskbar de xp theme
- corel functioneaza normal
- restartare pc - corel nu mai functioneaza

programe : corel 12 , dupa formatare corel trial luat de pe site de la ei
ad-aware update la zi , spybot search & distroy - gaseste aceleasi chestii ca si ad-aware
kaspersky 6 + scanare online

aceasta anomalie se intampla de 1-2 luni . folosesc aceleasi programe ca si inainte

ce pot face?

hijackthis log



Logfile of HiJackThis v1.99.1
Scan saved at 8:50:33 AM, on 7/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\hjt\HijackThis.exe

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] D:\instalari\corica\Languages\EN\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O8 - Extra context menu item: Add to Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O8 - Extra context menu item: E&xport în Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F57CBD7D-5D95-48F2-A915-67B4BE65E96B}: NameServer = 193.19.192.2,193.19.192.3
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe

cosminlive, on Jul 24 2006, 20:51, said:

mai precizez : XP update , Ad-aware update , Spybot search&d update , kaspersky 6.0 update

Edited by SE7EN, 24 July 2006 - 20:08.

ce zice ad-aaware





Ad-Aware SE Build 1.06r1
Logfile Created on:Monday, July 24, 2006 9:02:40 AM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R116 24.07.2006


References detected during the scan:

MRU List(TAC index:0):9 total references
Tracking Cookie(TAC index:3):5 total references


Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects


7-24-2006 9:02:40 AM - Scan started. (Smart mode)

Listing running processes


#:1 [smss.exe]
    FilePath           : \SystemRoot\System32\
    ProcessID          : 600
    ThreadCreationTime : 7-24-2006 3:38:44 PM
    BasePriority       : Normal


#:2 [csrss.exe]
    FilePath           : \??\C:\WINDOWS\system32\
    ProcessID          : 660
    ThreadCreationTime : 7-24-2006 3:38:45 PM
    BasePriority       : Normal


#:3 [winlogon.exe]
    FilePath           : \??\C:\WINDOWS\system32\
    ProcessID          : 684
    ThreadCreationTime : 7-24-2006 3:38:50 PM
    BasePriority       : High


#:4 [services.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 732
    ThreadCreationTime : 7-24-2006 3:38:51 PM
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Services and Controller app
    InternalName       : services.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : services.exe

#:5 [lsass.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 744
    ThreadCreationTime : 7-24-2006 3:38:51 PM
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : LSA Shell (Export Version)
    InternalName       : lsass.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : lsass.exe

#:6 [ati2evxx.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 892
    ThreadCreationTime : 7-24-2006 3:38:53 PM
    BasePriority       : Normal
    FileVersion        : 6.14.10.4116
    ProductVersion     : 6.14.10.4116
    ProductName        : ATI External Event Utility for WindowsNT and Windows9X
    CompanyName        : ATI Technologies Inc.
    FileDescription    : ATI External Event Utility EXE Module
    InternalName       : ATI2EVXX.EXE
    LegalCopyright     : Copyright © 1999-2004 ATI Technologies Inc.
    OriginalFilename   : ATI2EVXX.EXE

#:7 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 932
    ThreadCreationTime : 7-24-2006 3:38:53 PM
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:8 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 992
    ThreadCreationTime : 7-24-2006 3:38:54 PM
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:9 [svchost.exe]
    FilePath           : C:\WINDOWS\System32\
    ProcessID          : 1068
    ThreadCreationTime : 7-24-2006 3:38:54 PM
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:10 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1148
    ThreadCreationTime : 7-24-2006 3:38:55 PM
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:11 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1232
    ThreadCreationTime : 7-24-2006 3:38:55 PM
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:12 [spoolsv.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1392
    ThreadCreationTime : 7-24-2006 3:38:57 PM
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)
    ProductVersion     : 5.1.2600.2696
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Spooler SubSystem App
    InternalName       : spoolsv.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : spoolsv.exe

#:13 [ati2evxx.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1524
    ThreadCreationTime : 7-24-2006 3:38:57 PM
    BasePriority       : Normal
    FileVersion        : 6.14.10.4116
    ProductVersion     : 6.14.10.4116
    ProductName        : ATI External Event Utility for WindowsNT and Windows9X
    CompanyName        : ATI Technologies Inc.
    FileDescription    : ATI External Event Utility EXE Module
    InternalName       : ATI2EVXX.EXE
    LegalCopyright     : Copyright © 1999-2004 ATI Technologies Inc.
    OriginalFilename   : ATI2EVXX.EXE

#:14 [explorer.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 1592
    ThreadCreationTime : 7-24-2006 3:38:57 PM
    BasePriority       : Normal
    FileVersion        : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 6.00.2900.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Windows Explorer
    InternalName       : explorer
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : EXPLORER.EXE

#:15 [soundman.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 1664
    ThreadCreationTime : 7-24-2006 3:38:59 PM
    BasePriority       : Normal
    FileVersion        : 1, 0, 0, 17
    ProductVersion     : 1, 0, 0, 17
    ProductName        : Realtek HD Sound Manager
    CompanyName        : Realtek Semiconductor Corp.
    FileDescription    : Realtek Sound Manager
    InternalName       : ALSMTray
    LegalCopyright     : Copyright © 2004 Realtek Semiconductor Corp.
    OriginalFilename   : ALSMTray.exe
    Comments           : Realtek HD Audio Sound Manager

#:16 [alcwzrd.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 1672
    ThreadCreationTime : 7-24-2006 3:38:59 PM
    BasePriority       : Normal
    FileVersion        : 1.1.0.23
    ProductVersion     : 1.1.0.23
    ProductName        : ALCWZRD
    CompanyName        : RealTek Semicoductor Corp.
    FileDescription    : RealTek AlcWzrd Application
    InternalName       : ALCWZRD.EXE
    LegalCopyright     : Copyright © 2003-2004 Realtek Semiconductor Corp.
    OriginalFilename   : ALCWZRD.EXE
    Comments           : 2005/07/14

#:17 [datalayer.exe]
    FilePath           : C:\Program Files\Common Files\PCSuite\DataLayer\
    ProcessID          : 1768
    ThreadCreationTime : 7-24-2006 3:39:00 PM
    BasePriority       : Normal
    FileVersion        : 6, 60, 109, 2
    ProductVersion     : 6, 0
    ProductName        : Nokia PC Suite
    CompanyName        : Nokia Mobile Phones Ltd.
    FileDescription    : DataLayer 2.0 Module
    InternalName       : DataLayer 2.0
    LegalCopyright     : Copyright © 2005. Nokia. All rights reserved.
    OriginalFilename   : DataLayer.exe

#:18 [launchapplication.exe]
    FilePath           : C:\Program Files\Nokia\Nokia PC Suite 6\
    ProcessID          : 1788
    ThreadCreationTime : 7-24-2006 3:39:00 PM
    BasePriority       : Normal


#:19 [avp.exe]
    FilePath           : C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\
    ProcessID          : 1812
    ThreadCreationTime : 7-24-2006 3:39:00 PM
    BasePriority       : Normal
    FileVersion        : 6.0.0.290
    ProductVersion     : 6.0.0.290
    ProductName        : Kaspersky Anti-Virus
    CompanyName        : Kaspersky Lab
    FileDescription    : Kaspersky Anti-Virus
    InternalName       : AVP
    LegalCopyright     : Copyright © Kaspersky Lab 1996-2006.
    LegalTrademarks    : Kaspersky™ Anti-Virus ®  is registered trademark of Kaspersky Lab.
    OriginalFilename   : AVP.EXE

#:20 [atkkbservice.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 2016
    ThreadCreationTime : 7-24-2006 3:39:04 PM
    BasePriority       : Normal
    FileVersion        : 1, 0, 0, 0
    ProductVersion     : 1, 0, 0, 0
    ProductName        : ASUS Keyboard Service
    CompanyName        : ASUSTeK COMPUTER INC.
    FileDescription    : ASUS Keyboard Service
    InternalName       : ATKKBService
    LegalCopyright     : Copyright © 2004 @ASUSTeK COMPUTER INC.
    OriginalFilename   : ATKKBService.exe

#:21 [avp.exe]
    FilePath           : C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\
    ProcessID          : 2040
    ThreadCreationTime : 7-24-2006 3:39:05 PM
    BasePriority       : Normal
    FileVersion        : 6.0.0.290
    ProductVersion     : 6.0.0.290
    ProductName        : Kaspersky Anti-Virus
    CompanyName        : Kaspersky Lab
    FileDescription    : Kaspersky Anti-Virus
    InternalName       : AVP
    LegalCopyright     : Copyright © Kaspersky Lab 1996-2006.
    LegalTrademarks    : Kaspersky™ Anti-Virus ®  is registered trademark of Kaspersky Lab.
    OriginalFilename   : AVP.EXE

#:22 [sagent2.exe]
    FilePath           : C:\Program Files\Common Files\EPSON\EBAPI\
    ProcessID          : 252
    ThreadCreationTime : 7-24-2006 3:39:05 PM
    BasePriority       : Normal
    FileVersion        : 1, 2, 0, 0
    ProductVersion     : 1, 0, 0, 0
    ProductName        : EPSON Bidirectional Printer
    CompanyName        : SEIKO EPSON CORPORATION
    FileDescription    : EPSON Printer Status Agent
    InternalName       : SAgent2
    LegalCopyright     : Copyright © SEIKO EPSON CORP. 2000
    OriginalFilename   : SAgent2.exe

#:23 [mdm.exe]
    FilePath           : C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\
    ProcessID          : 296
    ThreadCreationTime : 7-24-2006 3:39:06 PM
    BasePriority       : Normal
    FileVersion        : 7.00.9466
    ProductVersion     : 7.00.9466
    ProductName        : Microsoft® Visual Studio .NET
    CompanyName        : Microsoft Corporation
    FileDescription    : Machine Debug Manager
    InternalName       : mdm.exe
    LegalCopyright     : © Microsoft Corporation.  All rights reserved.
    OriginalFilename   : mdm.exe

#:24 [wdfmgr.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 472
    ThreadCreationTime : 7-24-2006 3:39:07 PM
    BasePriority       : Normal
    FileVersion        : 5.2.3790.1230 built by: dnsrv(bld4act)
    ProductVersion     : 5.2.3790.1230
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Windows User Mode Driver Manager
    InternalName       : WdfMgr
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : WdfMgr.exe

#:25 [e_s10ic2.exe]
    FilePath           : C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\
    ProcessID          : 468
    ThreadCreationTime : 7-24-2006 3:39:07 PM
    BasePriority       : Normal
    FileVersion        : 3.00
    ProductVersion     : 3.00
    ProductName        : EPSON Status Monitor 3
    CompanyName        : SEIKO EPSON CORPORATION
    FileDescription    : EPSON Status Monitor 3
    InternalName       : E_S10IC2
    LegalCopyright     : Copyright © SEIKO EPSON CORP. 2001
    OriginalFilename   : E_S10IC2.EXE

#:26 [servic~1.exe]
    FilePath           : C:\PROGRA~1\COMMON~1\PCSuite\Services\
    ProcessID          : 748
    ThreadCreationTime : 7-24-2006 3:39:09 PM
    BasePriority       : Normal
    FileVersion        : 6, 60, 33, 1
    ProductVersion     : 6.0
    ProductName        : Nokia Connectivity Library
    CompanyName        : Nokia.
    FileDescription    : ServiceLayer Module
    InternalName       : ServiceLayer
    LegalCopyright     : Copyright © 2002-2005 Nokia. All Rights Reserved.
    OriginalFilename   : ServiceLayer.exe

#:27 [alg.exe]
    FilePath           : C:\WINDOWS\System32\
    ProcessID          : 2404
    ThreadCreationTime : 7-24-2006 3:39:24 PM
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Application Layer Gateway Service
    InternalName       : ALG.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : ALG.exe

#:28 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1176
    ThreadCreationTime : 7-24-2006 3:39:49 PM
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:29 [ad-aware.exe]
    FilePath           : C:\Program Files\Lavasoft\Ad-Aware SE Personal\
    ProcessID          : 2928
    ThreadCreationTime : 7-24-2006 4:02:32 PM
    BasePriority       : Normal
    FileVersion        : 6.2.0.236
    ProductVersion     : SE 106
    ProductName        : Lavasoft Ad-Aware SE
    CompanyName        : Lavasoft Sweden
    FileDescription    : Ad-Aware SE Core application
    InternalName       : Ad-Aware.exe
    LegalCopyright     : Copyright © Lavasoft AB Sweden
    OriginalFilename   : Ad-Aware.exe
    Comments           : All Rights Reserved

Memory scan result:

New critical objects: 0
Objects found so far: 0


Started registry scan


Registry Scan result:

New critical objects: 0
Objects found so far: 0


Started deep registry scan


Deep registry scan result:

New critical objects: 0
Objects found so far: 0


Started Tracking Cookie scan



Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : administrator@tribalfusion[1].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:4
    Value              : Cookie:[email protected]/
    Expires            : 12-31-2037 5:00:00 PM
    LastSync           : Hits:4
    UseCount           : 0
    Hits               : 4

Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : [email protected][1].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:43
    Value              : Cookie:[email protected]/
    Expires            : 7-24-2007 9:03:44 AM
    LastSync           : Hits:43
    UseCount           : 0
    Hits               : 43

Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : [email protected][1].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:1
    Value              : Cookie:[email protected]/
    Expires            : 7-25-2006 11:02:16 AM
    LastSync           : Hits:1
    UseCount           : 0
    Hits               : 1

Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : administrator@please[2].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:6
    Value              : Cookie:[email protected]/please/
    Expires            : 6-22-2007 8:40:02 AM
    LastSync           : Hits:6
    UseCount           : 0
    Hits               : 6

Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : administrator@casalemedia[2].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:30
    Value              : Cookie:[email protected]/
    Expires            : 7-15-2007 6:53:08 AM
    LastSync           : Hits:30
    UseCount           : 0
    Hits               : 30

Tracking cookie scan result:

New critical objects: 5
Objects found so far: 5



Deep scanning and examining files...


Disk Scan Result for C:\WINDOWS

New critical objects: 0
Objects found so far: 5

Disk Scan Result for C:\WINDOWS\system32

New critical objects: 0
Objects found so far: 5

Disk Scan Result for C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\

New critical objects: 0
Objects found so far: 5


Scanning Hosts file......
Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".


Hosts file scan result:

1 entries scanned.
New critical objects:0
Objects found so far: 5



MRU List Object Recognized!
    Location:          : C:\Documents and Settings\Administrator\Application Data\microsoft\office\recent
    Description        : list of recently opened documents using microsoft office


MRU List Object Recognized!
    Location:          : C:\Documents and Settings\Administrator\recent
    Description        : list of recently opened documents


MRU List Object Recognized!
    Location:          : software\microsoft\directdraw\mostrecentapplication
    Description        : most recent application to use microsoft directdraw


MRU List Object Recognized!
    Location:          : S-1-5-21-343818398-2139871995-682003330-500\software\microsoft\internet explorer
    Description        : last download directory used in microsoft internet explorer


MRU List Object Recognized!
    Location:          : S-1-5-21-343818398-2139871995-682003330-500\software\microsoft\internet explorer\typedurls
    Description        : list of recently entered addresses in microsoft internet explorer


MRU List Object Recognized!
    Location:          : S-1-5-21-343818398-2139871995-682003330-500\software\microsoft\search assistant\acmru
    Description        : list of recent search terms used with the search assistant


MRU List Object Recognized!
    Location:          : S-1-5-21-343818398-2139871995-682003330-500\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
    Description        : list of recent programs opened


MRU List Object Recognized!
    Location:          : S-1-5-21-343818398-2139871995-682003330-500\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
    Description        : list of recently saved files, stored according to file extension


MRU List Object Recognized!
    Location:          : S-1-5-21-343818398-2139871995-682003330-500\software\microsoft\windows\currentversion\explorer\recentdocs
    Description        : list of recent documents opened



Performing conditional scans...


Conditional scan result:

New critical objects: 0
Objects found so far: 14

9:04:23 AM Scan Complete

Summary Of This Scan

Total scanning time:00:01:42.265
Objects scanned:95073
Objects identified:5
Objects ignored:0
New critical objects:5

Edited by Daisuke, 24 July 2006 - 20:27.

Nu ai nimic suspect in loguri.

Daisuke, on Jul 24 2006, 21:28, said:

si ce-mi recomandatzi ?  

cosminlive, on Jul 24 2006, 21:34, said:

daca formatez mi-e teama ca se intampla la fel , am formatat acum cateva saptamani.
e ciudat pt ca a aparut din senin. poate fi ceva si ,,din partea Corel ,, ?

ce-mi apare

noutati : nici Photoshop nu mai merge

Intre timp mi-a venit o idee. sa schimb tema de WinXp , am pus Win XP Theme.... dau 1 restart , intru pe siteuri ce sigur contin,,impuritati,, mai dau inca un restart, opresc , repornesc. etc
concluzie : programele revin la normal...si Corel si photoshop

Deci...m-am chinuit 2 luni cu n-antivirusi , scanari , cred ca 3 formaturi , disperare, telefoane, postari pe forumuri din afara , si toate astea pt o TEMA de WIN????  

altadata sa stitzi .... cand nu e virus e tema de xp de vina...desi nu inteleg ce legatura este....