Lowyat.NET: Latest topics by sam5941

how to do celcom credit transfer?

sam5941 — Sat, 27 Aug 2011 10:17:16 +0800

hi everyone i have two celcom number and i want to do credit transfer.
is it possible? if yes, how? thx!
let me know if here is not the place to ask,thx.

Nikon Repair VS Canon Repair

sam5941 — Wed, 10 Aug 2011 15:24:39 +0800

many years pass by and i am sure many of you uses nikon brand and canon brand
with nikon,it is quite less repair cases if compare to canon

i am both nikon and canon user for many years
i find out a conclusion like this

btw i still have lense staying at canon service centre
nikon? nope. very rare.

how do you think

how do you guys put the thumnail picture

sam5941 — Sat, 25 Jun 2011 11:09:40 +0800

I want to ask something
since lowyat upgrade the system
now you can see the thumbnail picture on the main page
how do you guys put the thumnail picture in the sales thread?

i saw a"thunnail url" in the selection
but i wat can i do?

WOW! DAP COOL POSTER!

sam5941 — Sun, 19 Jun 2011 15:36:24 +0800

i edit it for quite some times.
need time for ratio and colour problem,and finally....

I miss my daddy

sam5941 — Sat, 18 Jun 2011 19:00:14 +0800

want go home immediately hug him

i want to change my avatar

sam5941 — Fri, 17 Jun 2011 19:02:44 +0800

why i cant upload my own?
must use the default ugly picture de meh?

Some question for iphone

sam5941 — Sat, 04 Jun 2011 17:52:30 +0800

i have a 2G iphone
ios 3.1.2
firmware 04.05.04_G
it is already jailbreak and unlocked

sometimes i doenload some app or games
after i install it,some games work at all like angry birds
some games doesnt work,just load into some intro advertisement and come back to home
some games doesnt even have any icon shows up

is there something i need to know?

p/s# i did try some tricks like reboot or reinstall

lowyat contest winner conspiracy!

sam5941 — Sat, 30 Oct 2010 15:24:06 +0800

if you guys did see the main page at the lowyat talking bout some contest winner

and i find out something strange

the 1st prize winner ling shih gang looks so familiar

then i go google search

another peoples that discuss about this "always winning guy"

http://www.acs-sitiawan.com/forum/showthread.php?t=4786

SUPER STAR Bridal Gallery has closed down !

sam5941 — Wed, 21 Oct 2009 01:48:06 +0800

SUPER STAR has closed down today[20-10-2009]!!!! The Boss Eric and Kelly and Raj dissapear !!!!

They gone without paying me what they owe me! They owe me RM4000,and other staffs total around RM50,000,and lots of amount from loan shark!!!

They take almost everything and dissapear. The door is closed, inside got nothing much left!!

PLEASE AWARE!!!

I TREAT THEM LIKE FRIENDS,THEY TREAt ME LIKE STUPID!! I HATE THEM!!

WHAT IS MY PROBLEM then?

sam5941 — Tue, 25 Aug 2009 12:04:14 +0800

WHAT IS MY PROBLEM then?

hi all,i am 4mb user.
since last friday my download speed slow down from normally 450-500kbps to around 120kbps.

what strange is,
first 2 minutes everytime i restart my internet connection
it download around 450 kbps
after 2 minutes,it slow down to 120kbps

1 more thing
everytime i start download with IDM,
my dsl and lan keep blinking.
when i stop,the light become stable.

i wonder is that my modem problem or tm streamyx problem.
call them and try everything,still same.

how to open speaker for phone samsung f 480

sam5941 — Wed, 12 Aug 2009 17:33:56 +0800

during a call
how can i switch to speaker fuction?

how to set IDM auto download

sam5941 — Sun, 24 May 2009 03:34:02 +0800

i dont get used to IDM download queue

is there any way to make it auto continue to download the next file when the files before finished downloaded?

mega manager can do auto download 。。

My streamyx bill RM268.73 per month?

sam5941 — Sat, 23 May 2009 12:53:53 +0800

yesterday get my streamyx bill

charges for this month is RM268.73??

i just switch to 4mb user for MAY 09

is there any thing wrong with them

internet Download manager

sam5941 — Mon, 18 May 2009 10:36:43 +0800

i am new to internet download manger (IDM)

i have few question about the downloading

First of all,my current version of IDM is 5.14

1.what is the maximum download link? Where to set this option?[actually i did find myself b4 but i still dun know]
--my main problem actually is i keep adding download links until it say something like connection overflow
--my current download status is 15 download files and max connection number is set to 16

2.some say i can copy link/links and right click to download with IDM but when i right click there is no such option,
--i can only see "download with bitcomet",i cant even see download with flashget(i installed few downloader already)

3.As mention above,when i copy few links and drag to the box,it shows only 1 link
--if i copy links,there is no option like "paste from clipboard" or something like that

4.How to use the download queue?No idea at all

5.is it neccesary to ask me where to download (or pop up many option for me to choose) every time i download a file?
--i thought it should ask me for only 1st time?

6. i am a 4mb user,what connection type/speed should i choose?
--T1 is it?

u mobile broadband

sam5941 — Sun, 26 Apr 2009 20:45:11 +0800

i sign for a 2 years u mobile and i didnt use it for long, i wish to terminate it
but i alredy sign for the 2 years contract.

there would be penalty i know,but i wish to terminate.

Dunno what problem,Pls help me

sam5941 — Thu, 29 Jan 2009 05:33:12 +0800

ComboFix[COLOR=blue] 09-01-21.04 - sam 2009-01-29 5:24:45.11 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.936.86.1033.18.3325.2696 [GMT 8:00]
执行位置: e:\documents and settings\sam.SAM-40368F334E5\Desktop\Combo-Fix.exe
.

((((((((((((((((((((((((((((((((((((((( 被删除的档案 )))))))))))))))))))))))))))))))))))))))))))))))))
.

E:\autorun.inf
e:\windows\AppPatch\Custom\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb
Z:\Autorun.inf

.
((((((((((((((((((((((((( 2008-12-28 至 2009-01-28 的新的档案 )))))))))))))))))))))))))))))))
.

2009-01-27 10:05 . 2009-01-27 10:05 <DIR> d--hs---- e:\windows\ftpcache
2009-01-21 02:23 . 2009-01-28 10:32 <DIR> d-------- e:\documents and settings\All Users.WINDOWS\Application Data\Google Updater
2009-01-19 03:53 . 2009-01-19 03:53 <DIR> d-------- e:\program files\Hasbro
2009-01-19 02:00 . 2009-01-19 02:00 <DIR> d-------- e:\program files\GameHouse
2009-01-19 02:00 . 2009-01-19 02:00 <DIR> d-------- e:\documents and settings\All Users.WINDOWS\Application Data\55-55-n4-26-23-56
2009-01-13 22:11 . 2009-01-13 22:11 <DIR> d-------- e:\program files\Recover Files
2009-01-13 21:50 . 2009-01-13 21:50 <DIR> d-------- e:\program files\TouchStoneSoftware
2009-01-08 00:44 . 2004-09-01 08:00 359,040 --a------ e:\windows\system32\drivers\tcpip.sys.old
2009-01-06 01:33 . 2009-01-06 01:34 <DIR> d-------- e:\documents and settings\sam.SAM-40368F334E5\Application Data\SPORE
2008-12-29 23:44 . 2008-12-30 22:33 <DIR> d-------- E:\RECYCLER(2)
2008-12-29 13:13 . 2008-12-30 22:33 <DIR> d-------- E:\Combo-Fix(2)

.
(((((((((((((((((((((((((((((((((((((((( 在三个月内被修改的档案 ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-28 21:21 --------- d-----w e:\program files\BitComet
2009-01-28 20:13 --------- d-----w e:\documents and settings\sam.SAM-40368F334E5\Application Data\Spyware Terminator
2009-01-27 06:02 4,224 ----a-w e:\windows\system32\drivers\Beep.sys
2009-01-27 06:02 23,552 --sh--w e:\windows\system32\Hook_nuton.dll
2009-01-27 03:07 --------- d--h--w e:\program files\InstallShield Installation Information
2009-01-27 03:05 --------- d-----w e:\program files\Activision
2009-01-26 08:47 --------- d-----w e:\program files\WinClamAVShield
2009-01-20 18:26 --------- d-----w e:\program files\Google
2009-01-18 16:23 --------- d---a-w e:\documents and settings\All Users.WINDOWS\Application Data\Temp
2009-01-15 16:23 163,644 ----a-w e:\windows\system32\drivers\secdrv.sys
2009-01-11 09:59 --------- d-----w e:\documents and settings\sam.SAM-40368F334E5\Application Data\Red Alert 3
2008-12-23 07:25 --------- d-----w e:\program files\Spyware Terminator
2008-12-19 18:00 --------- d-----w e:\program files\Rockstar Games
2008-12-19 17:01 --------- d-----w e:\documents and settings\All Users.WINDOWS\Application Data\Spyware Terminator
2008-12-13 15:56 --------- d-----w e:\program files\QvodPlayer
2008-12-13 15:53 --------- d-----w e:\program files\MSBuild
2008-12-13 15:51 --------- d-----w e:\program files\Common Files\Canopus Shared
2008-12-13 15:49 --------- d-----w e:\program files\MSBuild(2)
2008-12-13 08:12 --------- d-----w e:\program files\Microsoft Games for Windows - LIVE
2008-12-08 06:45 359,040 ----a-w e:\windows\system32\drivers\TCPIP.SYS.ORIGINAL
2008-12-07 19:41 --------- d-----w e:\program files\SystemRequirementsLab
2008-12-07 19:41 --------- d-----w e:\documents and settings\sam.SAM-40368F334E5\Application Data\SystemRequirementsLab
2008-12-02 16:05 107,888 ----a-w e:\windows\system32\CmdLineExt.dll
2008-12-01 22:13 3,452,928 ----a-w e:\windows\system32\drivers\ati2mtag.sys
2008-12-01 20:52 425,984 ----a-w e:\windows\system32\ATIDEMGX.dll
2008-12-01 20:51 318,464 ----a-w e:\windows\system32\ati2dvag.dll
2008-12-01 20:46 11,304,960 ----a-w e:\windows\system32\atioglxx.dll
2008-12-01 20:41 188,416 ----a-w e:\windows\system32\atipdlxx.dll
2008-12-01 20:40 43,520 ----a-w e:\windows\system32\ati2edxx.dll
2008-12-01 20:40 26,112 ----a-w e:\windows\system32\Ati2mdxx.exe
2008-12-01 20:40 147,456 ----a-w e:\windows\system32\Oemdspif.dll
2008-12-01 20:40 143,360 ----a-w e:\windows\system32\ati2evxx.dll
2008-12-01 20:38 598,016 ----a-w e:\windows\system32\ati2evxx.exe
2008-12-01 20:37 53,248 ----a-w e:\windows\system32\ATIDDC.DLL
2008-12-01 20:27 4,120,384 ----a-w e:\windows\system32\ati3duag.dll
2008-12-01 20:19 307,200 ----a-w e:\windows\system32\atiiiexx.dll
2008-12-01 20:11 2,495,360 ----a-w e:\windows\system32\ativvaxx.dll
2008-12-01 19:57 48,640 ----a-w e:\windows\system32\amdpcom32.dll
2008-12-01 19:53 45,056 ----a-w e:\windows\system32\amdcalrt.dll
2008-12-01 19:53 45,056 ----a-w e:\windows\system32\amdcalcl.dll
2008-12-01 19:53 401,408 ----a-w e:\windows\system32\atikvmag.dll
2008-12-01 19:52 86,016 ----a-w e:\windows\system32\atiadlxx.dll
2008-12-01 19:52 17,408 ----a-w e:\windows\system32\atitvo32.dll
2008-12-01 19:51 53,248 ----a-w e:\windows\system32\drivers\ati2erec.dll
2008-12-01 19:50 3,252,224 ----a-w e:\windows\system32\Amdcaldd.dll
2008-12-01 19:50 286,720 ----a-w e:\windows\system32\atiok3x2.dll
2008-12-01 19:45 577,536 ----a-w e:\windows\system32\ati2cqag.dll
2008-12-01 06:35 593,920 ------w e:\windows\system32\ati2sgag.exe
2008-12-01 05:28 --------- d-----w e:\program files\Real Alternative
2008-11-30 14:45 --------- d-----w e:\program files\Electronic Arts
2008-11-30 11:29 183,112 ----a-w e:\windows\system32\PnkBstrB.exe
2008-11-30 11:29 138,184 ----a-w e:\windows\system32\drivers\PnkBstrK.sys
2008-11-28 17:31 --------- d-----w e:\program files\K-Lite Codec Pack
2008-11-24 04:26 410,976 ----a-w e:\windows\system32\deploytk.dll
2008-11-23 17:01 66,872 ----a-w e:\windows\system32\PnkBstrA.exe
2008-11-20 16:58 118,784 ----a-w e:\windows\Web\Wallpaper\Dream big Wallpaper dir\uninstall.exe
2008-11-18 16:36 22,328 ----a-w e:\documents and settings\sam.SAM-40368F334E5\Application Data\PnkBstrK.sys
2008-11-18 16:35 2,250,024 ----a-w e:\windows\system32\pbsvc.exe
2008-10-28 22:36 823,296 ----a-w e:\windows\system32\divx_xx0c.dll
2008-10-28 22:36 823,296 ----a-w e:\windows\system32\divx_xx07.dll
2008-10-28 22:35 815,104 ----a-w e:\windows\system32\divx_xx0a.dll
2008-10-28 22:35 802,816 ----a-w e:\windows\system32\divx_xx11.dll
2008-10-28 22:35 684,032 ----a-w e:\windows\system32\DivX.dll
2008-05-31 18:26 43,489 --sh--w e:\windows\system32\nuton.exe
.

[addedon]January 29, 2009, 5:34 am[/addedon]------- Sigcheck -------

2004-09-01 08:00 359040 7399d854596bfefeed6b60879f28ce07 e:\windows\system32\drivers\tcpip.sys

2004-09-01 08:00 215552 a77219a971029dc2fb683e8513713803 e:\windows\system32\termsrv.dll
.
((((((((((((((((((((((((((((( snapshot_2009-01-01_ 3.16.50.43 )))))))))))))))))))))))))))))))))))))))))
.
+ 2003-06-13 09:23:18 81,408 ----a-w e:\windows\AppPatch\AlLayer.dll
+ 2003-06-10 02:43:42 380,928 ----a-w e:\windows\AppPatch\ALRes401.dll
+ 2003-06-10 02:43:42 380,928 ----a-w e:\windows\AppPatch\ALRes404.dll
+ 2003-06-10 02:43:42 380,928 ----a-w e:\windows\AppPatch\ALRes407.dll
+ 2003-06-13 09:23:20 340,992 ----a-w e:\windows\AppPatch\ALRes409.dll
+ 2003-06-11 05:19:58 380,928 ----a-w e:\windows\AppPatch\ALRes40D.dll
+ 2003-06-10 02:43:42 380,928 ----a-w e:\windows\AppPatch\ALRes411.dll
+ 2003-06-10 02:43:42 380,928 ----a-w e:\windows\AppPatch\ALRes412.dll
+ 2003-06-10 02:43:42 380,928 ----a-w e:\windows\AppPatch\ALRes804.dll
+ 2003-06-13 09:23:06 50,176 ----a-w e:\windows\AppPatch\AppLoc.exe
- 2008-11-30 15:09:46 53,248 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2009-01-27 04:18:40 53,248 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2008-11-30 15:09:46 12,800 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2009-01-27 04:18:40 12,800 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2008-11-30 15:09:46 473,600 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2009-01-27 04:18:40 473,600 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2008-11-30 15:09:42 2,676,224 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-01-27 04:18:36 2,676,224 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-11-30 15:09:43 2,846,720 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-01-27 04:18:37 2,846,720 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-11-30 15:09:44 563,712 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-01-27 04:18:37 563,712 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-11-30 15:09:44 567,296 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-01-27 04:18:37 567,296 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-11-30 15:09:44 576,000 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-01-27 04:18:38 576,000 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-11-30 15:09:44 577,024 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-01-27 04:18:38 577,024 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-11-30 15:09:45 577,536 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-01-27 04:18:38 577,536 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-11-30 15:09:45 577,536 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-01-27 04:18:39 577,536 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-11-30 15:09:45 578,560 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-01-27 04:18:39 578,560 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-11-30 15:09:46 578,560 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-01-27 04:18:40 578,560 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-11-30 15:09:47 145,920 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2009-01-27 04:18:41 145,920 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2008-11-30 15:09:47 159,232 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2009-01-27 04:18:41 159,232 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2008-11-30 15:09:47 364,544 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2009-01-27 04:18:41 364,544 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2008-11-30 15:09:47 178,176 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2009-01-27 04:18:41 178,176 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
- 2008-11-30 15:09:45 223,232 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2009-01-27 04:18:40 223,232 ----a-w e:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2009-01-20 18:26:14 26,694 ----a-r e:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ARPPRODUCTICON.exe
+ 2009-01-20 18:26:14 26,694 ----a-r e:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
+ 2009-01-20 18:26:14 26,694 ----a-r e:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\googleearth.exe1_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
+ 2009-01-20 18:26:14 26,694 ----a-r e:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ShortcutDX_EB071909B9884F8CBF3D6115D4ADEE5E.exe
+ 2009-01-20 18:26:14 26,694 ----a-r e:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ShortcutOGL_EB071909B9884F8CBF3D6115D4ADEE5E.exe
+ 2009-01-20 18:26:14 26,694 ----a-r e:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\UNINST_Uninstall_G_408FFBEED62349E08B232864A94D2864.exe
- 2000-08-31 00:00:00 28,672 ----a-w e:\windows\NIRCMD.exe
+ 2000-08-31 00:00:00 29,696 ----a-w e:\windows\NIRCMD.exe
- 2008-07-10 03:00:58 1,493,528 ----a-w e:\windows\system32\D3DCompiler_39.dll
+ 2008-07-12 00:18:52 1,493,528 ----a-w e:\windows\system32\D3DCompiler_39.dll
- 2008-07-10 03:01:00 467,984 ----a-w e:\windows\system32\d3dx10_39.dll
+ 2008-07-12 00:18:52 467,984 ----a-w e:\windows\system32\d3dx10_39.dll
- 2008-07-10 03:00:58 3,851,784 ----a-w e:\windows\system32\D3DX9_39.dll
+ 2008-07-12 00:18:52 3,851,784 ----a-w e:\windows\system32\D3DX9_39.dll
- 2008-12-31 17:52:08 4,224 -c--a-w e:\windows\system32\dllcache\beep.sys
+ 2009-01-27 06:02:19 4,224 -c--a-w e:\windows\system32\dllcache\beep.sys
- 2008-12-30 14:22:55 119,744 ----a-w e:\windows\system32\FNTCACHE.DAT
+ 2009-01-04 15:04:14 119,744 ----a-w e:\windows\system32\FNTCACHE.DAT
- 2008-12-29 05:08:22 7,556 ----a-w e:\windows\system32\info.dat
+ 2009-01-12 12:24:29 9,304 ----a-w e:\windows\system32\info.dat
- 2008-07-29 22:20:54 238,088 ----a-w e:\windows\system32\xactengine3_2.dll
+ 2008-07-31 02:41:54 238,088 ----a-w e:\windows\system32\xactengine3_2.dll
- 2008-07-29 22:20:56 68,616 ----a-w e:\windows\system32\XAPOFX1_1.dll
+ 2008-07-31 02:41:52 68,616 ----a-w e:\windows\system32\XAPOFX1_1.dll
- 2008-07-29 22:20:56 509,448 ----a-w e:\windows\system32\XAudio2_2.dll
+ 2008-07-31 02:40:32 509,448 ----a-w e:\windows\system32\XAudio2_2.dll
+ 2009-01-27 06:01:48 16,384 ----atw e:\windows\temp\Perflib_Perfdata_638.dat
.
-- 快照技术重新设置 --
.
((((((((((((((((((((((((((((((((((((( 重要登入点 ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*注意* 空白与合法缺省登录将不会被显示
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="e:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
"ctfmon.exe"="e:\windows\system32\ctfmon.exe" [2004-09-01 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="e:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-09-01 208952]
"MSPY2002"="e:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-09-01 59392]
"PHIME2002ASync"="e:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-09-01 455168]
"PHIME2002A"="e:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-09-01 455168]
"nuton"="e:\windows\system32\nuton.exe" [2008-06-01 43489]
"UpdatePDRShortCut"="e:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" [2007-03-29 185904]
"PinnacleDriverCheck"="e:\windows\system32\\PSDrvCheck.exe" [2004-03-11 406016]
"SunJavaUpdateSched"="e:\program files\Java\jre6\bin\jusched.exe" [2008-11-24 136600]
"Adobe Reader Speed Launcher"="e:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"NeroFilterCheck"="e:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"QuickTime Task"="e:\program files\QuickTime\qttask.exe" [2008-11-25 282624]
"SpywareTerminator"="e:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2008-11-17 1783808]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableWindowsUpdateAccess"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.CDV5"= cdv5codc.dll
"vidc.CLLC"= cllccodc.dll
"vidc.CUVC"= cuvccodc.dll
"vidc.CDVC"= cdvccodc.dll
"vidc.CDVH"= cdvhcodc.dll
"vidc.CMIC"= cmiccodc.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ADVXDWIN]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\alertsvc.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ALOGSERV]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\amon.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AMON9X]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\anti - trojan.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\antivir]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ANTS]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ATCON]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ATUPDATER]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ATWATCH]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AutoTrace]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AVGCC32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AvgServ]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AVGSERV9]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AVGW]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\avkpop]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AvkServ]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\avkservice]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\avkwctl9]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\avpmon.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\avpnt.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\Avrep32.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AVWINNT]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AVXMONITOR9X]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AVXMONITORNT]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AVXQUAR]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AVXW]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\BullGuard]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\cfgWiz]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\clrav.com]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\CMGRDIAN]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\CONNECTIONMONITOR]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\CPDClnt]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\CTRL]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\defalert]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\defscangui]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\DEFWATCH]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\DOORS]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\EFPEADM]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ETRUSTCIPE]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\EVPN]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\EXPERT]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\f - agnt95.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\f - prot.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\f - prot95.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\f - stopw.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\fameh32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\fch32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\fih32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\fnrb32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\fp - win.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\FPROT95.EXE]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\fsaa]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\fsav32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\fsgk32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\fsm32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\fsma32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\fsmb32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\gbmenu]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\GBPOLL]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\GENERICS]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\GUARD]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\IAMSTATS]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ISRV95]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\kpf.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\LDPROMENU]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\LDSCAN]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\lockdownadvanced.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\LUSPT]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\mcafee]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\MCAGENT]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\MCMNHDLR]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\MCTOOL]
"Debugger"=e:\windows\system32\nuton.exe

[addedon]January 29, 2009, 5:35 am[/addedon][HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\MCUPDATE]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\MCVSRTE]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\MCVSSHLD]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\MGHTML]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\MINILOG]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\Monitor.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\MPFSERVICE]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\MWATCH]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\n32scan.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\NAVENGNAVEX15]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ndd32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\NeoWatchLog]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\netutils]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\notstart.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\npscheck]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\npssvc]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\nsched32.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\Nspclean.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ntrtscan]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\NTVDM]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\NTXconfig]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\NVSVC32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\NWService]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\NWTOOL16]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\offguard.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\outpost.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\PADMIN]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\padmin.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pav.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pavmail.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pavproxy]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pcciomon.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pccmain.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pccwin97]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pcntmon]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pcscan]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\per.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\perd.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pertsk.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\perupd.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pervac.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pervacd.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pfwagent.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pfwcon.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\POP3TRAP]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\POPROXY]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\PORTMONITOR]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pqremove.com]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\PROCESSMONITOR]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\procexp]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\PROGRAMAUDITOR]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pview95]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\pview95.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\rapapp.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\REALMON]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\rescue.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\RKUnHooker.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\RTVSCN95]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\RULAUNCH]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\sbserv]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\sfc.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\SPYXX]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\SS3EDIT]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\SweepNet]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\SWNETSUP]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\SymProxySvc]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\SYMTRAY]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\TAUMON]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\TCM]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\TDS - 3]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\tds2 - 98.exe]
"Debugger"=e:\windows\system32\nuton.exe

[addedon]January 29, 2009, 5:36 am[/addedon]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\tds2 - nt.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\TFAK]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\th.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\th32.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\th32upd.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\thav.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\thd.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\thd32.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\thmail.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\vbcmserv]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\VbCons]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\VCONTROL.EXE]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\VET32.EXE]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\vet98.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\VIR - HELP]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\VPC32]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\VPTRAY]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\VSMAIN]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\vsmon]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\vsscan40.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\WATCHDOG]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\webscan.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\WEBTRAP]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\WGFE95]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\WIMMUN32]
"Debugger"=e:\windows\system32\nuton.exe

[addedon]January 29, 2009, 5:37 am[/addedon][HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\WrAdmin]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\WrCtrl]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ZAP.EXE]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ZAPD.EXE]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ZAPPRG.EXE]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\zapro.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ZAPS.EXE]
"Debugger"=e:\windows\system32\nuton.exe

[addedon]January 29, 2009, 5:39 am[/addedon][HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ZCAP.EXE]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\zlclient.exe]
"Debugger"=e:\windows\system32\nuton.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\修复工具.exe]
"Debugger"=e:\windows\system32\nuton.exe

[addedon]January 29, 2009, 5:43 am[/addedon]
R1 cdrblock;cdrblock;e:\windows\system32\drivers\cdrblock.sys [2008-11-23 20864]
R1 cdrport;cdrport;e:\windows\system32\drivers\cdrport.sys [2008-11-23 4608]

Lakeview Terrace

sam5941 — Tue, 02 Dec 2008 14:22:19 +0800

Anybody watch already?

my kigston 8G dt101n only have 4 G storage!

sam5941 — Thu, 27 Nov 2008 01:19:54 +0800

i didnt know b4
but ince i start using it
only i know i had been cheated

Combofix log with hijack this log

sam5941 — Fri, 21 Nov 2008 21:46:32 +0800

ComboFix 08-11-20.02 - sam 2008-11-21 21:35:08.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2870 [GMT 8:00]
Running from: e:\documents and settings\sam.SAM-40368F334E5\Desktop\Combo-Fix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

E:\autorun.inf
e:\windows\system32\Mlkf.dll
e:\windows\system32\systeminfo.dll
Z:\Autorun.inf

.
((((((((((((((((((((((((( Files Created from 2008-10-21 to 2008-11-21 )))))))))))))))))))))))))))))))
.

2008-11-21 02:00 . 2008-11-21 02:00 15 --a------ e:\windows\system32\mslck.dat
2008-11-21 00:00 . 2008-11-21 00:00 <DIR> d-------- e:\documents and settings\sam.SAM-40368F334E5\Application Data\Activision
2008-11-21 00:00 . 2008-11-21 00:00 <DIR> d-------- e:\documents and settings\All Users.WINDOWS\Application Data\Activision
2008-11-20 23:53 . 2008-11-20 23:53 <DIR> d-------- e:\program files\EA Games
2008-11-20 23:37 . 2008-11-20 23:37 <DIR> d-------- e:\program files\Activision
2008-11-20 23:20 . 2008-11-20 23:20 <DIR> d-------- e:\documents and settings\All Users.WINDOWS\Application Data\InstallShield
2008-11-20 23:06 . 2008-11-20 23:06 <DIR> d-------- e:\program files\Empire Interactive
2008-11-20 22:31 . 2008-11-21 01:59 <DIR> d-------- e:\program files\FolderAccess
2008-11-20 22:31 . 2002-12-20 22:32 1,077,336 --a------ e:\windows\system32\MSCOMCTL.OCX
2008-11-20 22:31 . 2002-04-01 13:39 546,524 --a------ e:\windows\system32\olelib.tlb
2008-11-20 22:31 . 2003-05-14 21:07 389,120 --a------ e:\windows\system32\actskn43.ocx
2008-11-20 22:31 . 1998-04-24 00:00 368,912 --a------ e:\windows\system32\vbar332.dll
2008-11-20 22:31 . 2002-07-26 17:02 153,088 --a------ e:\windows\system32\fldlckun.exe
2008-11-20 22:31 . 2001-03-13 14:49 140,288 --a------ e:\windows\system32\COMDLG32.OCX
2008-11-20 22:31 . 2004-01-11 16:03 36,864 --a------ e:\windows\system32\LckFldService.exe
2008-11-20 22:31 . 1997-05-21 09:51 34,304 --a------ e:\windows\system32\ntsvc.ocx
2008-11-20 02:03 . 2008-11-20 02:03 <DIR> d-------- e:\documents and settings\All Users.WINDOWS\Application Data\Temp
2008-11-20 01:51 . 2008-11-20 01:51 <DIR> d-------- e:\documents and settings\sam.SAM-40368F334E5\Application Data\Red Alert 3
2008-11-20 01:15 . 2008-11-21 11:13 <DIR> d-------- e:\documents and settings\sam.SAM-40368F334E5\Application Data\Spyware Terminator
2008-11-20 01:15 . 2008-11-21 11:18 <DIR> d-------- e:\documents and settings\All Users.WINDOWS\Application Data\Spyware Terminator
2008-11-20 01:15 . 2008-11-20 01:15 141,312 --a------ e:\windows\system32\drivers\sp_rsdrv2.sys
2008-11-19 03:20 . 2008-11-20 01:08 <DIR> d-------- e:\documents and settings\All Users.WINDOWS\Application Data\BlazeVideo
2008-11-19 02:22 . 2004-01-14 00:34 44,032 --a------ e:\windows\system32\openal32.dll
2008-11-19 01:50 . 2008-11-20 02:35 <DIR> d-------- e:\program files\Eidos
2008-11-19 01:23 . 2008-11-19 01:23 <DIR> d-------- e:\documents and settings\sam.SAM-40368F334E5\Application Data\Apple Computer
2008-11-19 01:21 . 2008-11-20 22:42 54,156 --ah----- e:\windows\QTFont.qfn
2008-11-19 01:21 . 2008-11-19 01:21 1,409 --a------ e:\windows\QTFont.for
2008-11-19 01:18 . 2008-11-19 01:19 <DIR> d-------- e:\program files\QuickTime
2008-11-19 01:18 . 2008-11-19 01:18 <DIR> d-------- e:\program files\Apple Software Update
2008-11-19 01:18 . 2008-11-19 01:18 <DIR> d-------- e:\documents and settings\All Users.WINDOWS\Application Data\Apple Computer
2008-11-19 01:18 . 2008-11-19 01:18 <DIR> d-------- e:\documents and settings\All Users.WINDOWS\Application Data\Apple
2008-11-19 01:18 . 2003-03-19 11:14 499,712 --a------ e:\windows\system32\msvcp71.dll
2008-11-19 01:10 . 2008-11-19 01:11 <DIR> d-------- e:\program files\Pyro Studios
2008-11-19 00:53 . 2008-11-19 00:53 <DIR> dr-h----- e:\documents and settings\sam.SAM-40368F334E5\Application Data\SecuROM
2008-11-19 00:53 . 2008-11-19 00:53 107,888 --a------ e:\windows\system32\CmdLineExt.dll
2008-11-19 00:49 . 2008-11-19 00:49 <DIR> d-------- e:\windows\system32\xlive
2008-11-19 00:48 . 2008-11-19 00:48 <DIR> d-------- e:\program files\MSBuild
2008-11-19 00:46 . 2008-11-19 00:46 <DIR> d-------- e:\windows\system32\XPSViewer
2008-11-19 00:46 . 2008-11-19 00:46 <DIR> d-------- e:\program files\Reference Assemblies
2008-11-19 00:46 . 2006-06-29 13:07 14,048 --------- e:\windows\system32\spmsg2.dll
2008-11-19 00:40 . 2008-11-19 00:40 <DIR> d-------- e:\program files\Bethesda Softworks
2008-11-19 00:36 . 2008-11-19 00:36 22,328 --a------ e:\windows\system32\drivers\PnkBstrK.sys
2008-11-19 00:36 . 2008-11-19 00:36 22,328 --a------ e:\documents and settings\sam.SAM-40368F334E5\Application Data\PnkBstrK.sys
2008-11-19 00:35 . 2008-11-19 00:35 2,250,024 --a------ e:\windows\system32\pbsvc.exe
2008-11-19 00:35 . 2008-11-19 00:35 107,832 --a------ e:\windows\system32\PnkBstrB.exe
2008-11-19 00:35 . 2008-11-19 00:35 66,872 --a------ e:\windows\system32\PnkBstrA.exe
2008-11-19 00:32 . 1999-01-21 17:31 2,259,070 -ra------ e:\windows\system32\drivers\eapci2m.ecw
2008-11-19 00:32 . 2000-11-25 02:10 522,268 -ra------ e:\windows\system32\drivers\ev19x8mp.sys
2008-11-19 00:32 . 2000-07-06 01:44 77,824 -ra------ e:\windows\system32\sbres32.dll
2008-11-19 00:32 . 2000-04-13 13:38 58,880 -ra------ e:\windows\system\a3d.dll
2008-11-19 00:32 . 2004-08-03 23:08 10,624 --a------ e:\windows\system32\drivers\gameenum.sys
2008-11-19 00:32 . 2004-08-03 23:08 10,624 --a--c--- e:\windows\system32\dllcache\gameenum.sys
2008-11-18 23:44 . 2007-06-13 14:49 16,377,344 -ra------ e:\windows\RTHDCPL.EXE
2008-11-18 23:44 . 2007-03-23 19:19 9,715,200 -ra------ e:\windows\RTLCPL.EXE
2008-11-18 23:44 . 2007-06-22 18:14 4,432,384 -ra------ e:\windows\system32\drivers\RtkHDAud.sys
2008-11-18 23:44 . 2006-05-04 16:26 2,808,832 -ra------ e:\windows\ALCWZRD.EXE
2008-11-18 23:44 . 2007-04-25 16:55 2,162,688 -ra------ e:\windows\MicCal.exe
2008-11-18 23:44 . 2007-06-15 16:45 1,826,816 -ra------ e:\windows\SkyTel.exe
2008-11-18 23:44 . 2007-01-16 10:39 1,191,936 -ra------ e:\windows\RtlUpd.exe
2008-11-18 23:44 . 2005-09-21 10:25 299,008 -ra------ e:\windows\system32\ALSNDMGR.CPL
2008-11-18 23:44 . 2006-08-18 06:58 282,624 -ra------ e:\windows\system32\RTSndMgr.CPL
2008-11-18 23:44 . 2006-07-21 16:14 86,016 -ra------ e:\windows\SOUNDMAN.EXE
2008-11-18 23:44 . 2005-05-03 18:43 69,632 -ra------ e:\windows\ALCMTR.EXE
2008-11-18 23:37 . 2008-11-18 23:37 <DIR> d-------- e:\documents and settings\SAM~1~SAM\LOCALS~1
2008-11-18 23:37 . 2008-11-18 23:37 <DIR> d-------- e:\documents and settings\SAM~1~SAM
2008-11-18 23:36 . 2004-08-03 23:08 26,496 --a--c--- e:\windows\system32\dllcache\usbstor.sys
2008-11-18 10:25 . 2004-08-04 08:56 21,504 --a------ e:\windows\system32\hidserv.dll
2008-11-18 10:25 . 2001-08-17 21:59 3,072 --a------ e:\windows\system32\drivers\audstub.sys
2008-11-18 10:24 . 2004-08-04 00:56 74,240 --a------ e:\windows\system32\usbui.dll
2008-11-18 10:24 . 2004-08-04 00:56 74,240 --a--c--- e:\windows\system32\dllcache\usbui.dll
2008-11-18 10:24 . 2004-08-04 06:59 57,472 --a------ e:\windows\system32\drivers\redbook.sys
2008-11-18 10:21 . 2008-11-21 21:33 <DIR> d--h----- e:\documents and settings\Default User.WINDOWS
2008-11-18 10:21 . 2008-11-20 02:11 <DIR> dr------- e:\documents and settings\All Users.WINDOWS\Documents
2008-11-18 10:19 . 2008-11-18 02:31 582 --a------ e:\windows\system32\$winnt$.inf
2008-11-18 03:54 . 2004-08-04 00:56 130,048 --a------ e:\windows\system32\ksproxy.ax
2008-11-18 03:54 . 2004-08-04 00:56 130,048 --a--c--- e:\windows\system32\dllcache\ksproxy.ax
2008-11-18 03:54 . 2004-08-03 23:08 60,288 --a------ e:\windows\system32\drivers\drmk.sys
2008-11-18 03:54 . 2004-08-03 23:08 60,288 --a--c--- e:\windows\system32\dllcache\drmk.sys
2008-11-18 03:54 . 2004-08-04 00:56 4,096 --a------ e:\windows\system32\ksuser.dll
2008-11-18 03:54 . 2004-08-04 00:56 4,096 --a--c--- e:\windows\system32\dllcache\ksuser.dll
2008-11-18 03:43 . 2008-06-01 02:26 43,489 ---hs---- e:\windows\system32\nuton.exe
2008-11-18 03:43 . 2008-11-21 21:17 23,552 ---hs---- e:\windows\system32\Hook_nuton.dll
2008-11-18 03:12 . 2006-10-16 16:10 23,856 --a------ e:\windows\system32\spupdsvc.exe
2008-11-18 03:08 . 2004-09-01 08:00 13,463,552 --a--c--- e:\windows\system32\dllcache\hwxjpn.dll
2008-11-18 03:07 . 2008-11-18 03:07 <DIR> d-------- e:\program files\NTI
2008-11-18 03:06 . 2008-11-18 03:06 <DIR> d-------- e:\program files\Common Files\LightScribe
2008-11-18 03:06 . 2008-11-18 03:06 1,024 -r-h----- e:\windows\system32\NTIOFM4.dll
2008-11-18 03:05 . 2008-11-18 03:05 <DIR> d-------- e:\windows\Downloaded Installations
2008-11-18 03:05 . 2008-11-20 01:08 <DIR> d-------- e:\program files\NewTech Infosystems
2008-11-18 03:05 . 2008-11-18 03:05 1,024 -r-h----- e:\windows\system32\NTIMMV8.dll
2008-11-18 03:05 . 2008-11-18 03:05 1,024 -r-h----- e:\windows\system32\NTIJCMK5.dll
2008-11-18 03:00 . 2008-11-18 03:00 <DIR> d-------- e:\documents and settings\sam.SAM-40368F334E5\Application Data\CyberLink
2008-11-18 03:00 . 2008-11-18 03:00 <DIR> d-------- e:\documents and settings\All Users.WINDOWS\CyberLink
2008-11-18 03:00 . 2008-11-18 03:00 <DIR> d-------- e:\documents and settings\All Users.WINDOWS\Application Data\CyberLink
2008-11-18 02:57 . 2008-11-18 02:58 <DIR> d-------- e:\program files\CyberLink
2008-11-18 02:55 . 2008-11-18 02:55 0 --a------ e:\windows\nsreg.dat
2008-11-18 02:45 . 2008-07-04 10:48 3,107,788 -ra------ e:\windows\system32\ativvaxx.dat
2008-11-18 02:45 . 2008-07-04 10:48 3,107,788 -ra------ e:\windows\system32\ativva5x.dat
2008-11-18 02:45 . 2008-07-04 10:48 887,724 -ra------ e:\windows\system32\ativva6x.dat
2008-11-18 02:45 . 2008-07-04 11:25 421,888 -ra------ e:\windows\system32\ATIDEMGX.dll
2008-11-18 02:45 . 2008-07-04 10:55 307,200 -ra------ e:\windows\system32\atiiiexx.dll
2008-11-18 02:45 . 2008-06-11 05:50 174,819 -ra------ e:\windows\system32\atiicdxx.dat
2008-11-18 02:45 . 2008-05-13 20:10 13,052 -ra------ e:\windows\atiogl.xml
2008-11-18 02:45 . 2007-08-31 21:20 7,167 -ra------ e:\windows\system32\atifglpf.xml
2008-11-18 02:45 . 2008-11-18 02:45 0 --a------ e:\windows\ativpsrm.bin
2008-11-18 02:43 . 2007-07-12 12:00 90,880 -ra------ e:\windows\system32\drivers\Rtenicxp.sys
2008-11-18 02:34 . 2008-11-18 02:34 <DIR> d-------- e:\program files\MSXML 4.0
2008-11-18 02:34 . 2008-11-20 02:10 <DIR> d-------- e:\documents and settings\sam.SAM-40368F334E5
2008-11-18 02:33 . 2008-11-18 02:33 <DIR> d--hs---- e:\documents and settings\NetworkService.NT AUTHORITY
2008-11-18 02:33 . 2008-11-18 02:33 <DIR> d--hs---- e:\documents and settings\LocalService.NT AUTHORITY
2008-11-18 02:33 . 2008-11-18 02:33 8,192 --a------ e:\windows\REGLOCS.OLD
2008-11-18 02:30 . 2004-09-01 08:00 2,134,528 --a--c--- e:\windows\system32\dllcache\smtpsnap.dll
2008-11-18 02:29 . 2008-11-18 02:29 <DIR> d--hs---- e:\documents and settings\All Users.WINDOWS\DRM
2008-11-18 02:29 . 2008-11-18 02:29 316,640 --a------ e:\windows\WMSysPr9.prx
2008-11-18 02:29 . 2008-11-18 02:29 23,392 --a------ e:\windows\system32\nscompat.tlb
2008-11-18 02:29 . 2008-11-18 02:29 16,832 --a------ e:\windows\system32\amcompat.tlb
2008-11-18 02:29 . 2008-11-18 02:29 488 -rah----- e:\windows\system32\WindowsLogon.manifest
2008-11-18 02:29 . 2008-11-18 02:29 488 -rah----- e:\windows\system32\logonui.exe.manifest
2008-11-18 02:29 . 2008-11-18 02:29 0 --a------ e:\windows\control.ini
2008-11-18 02:27 . 2004-09-01 08:00 678,400 --a------ e:\windows\system32\inetcomm.dll
2008-11-18 02:26 . 2004-09-01 08:00 1,352,192 --a--c--- e:\windows\system32\dllcache\cimwin32.dll
2008-11-18 01:25 . 2008-11-18 23:44 <DIR> d-------- e:\windows\system32\RTCOM
2008-11-18 01:13 . 2008-11-18 01:13 <DIR> d-------- e:\windows\system32\LogFiles
2008-11-18 00:19 . 2008-11-18 00:19 <DIR> d-------- E:\KB888111_Supported_OS_All_Languages
2008-11-18 00:16 . 2008-11-13 14:31 70,619,374 --a------ E:\KB888111_Supported_OS_All_Languages.zip

VIRUS OR WHAT THE ?

sam5941 — Fri, 21 Nov 2008 03:13:52 +0800

i cant boot into safe mode,

cant run regedit and some command

cant open task manager,

some time when looking for some antivirus webpage will auto close the browser

even my hijack this cant run(but i already rename the hijackthis.exe to scanner.exe,so it works)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:59:01 AM, on 11/21/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
E:\WINDOWS\system32\ctfmon.exe
E:\WINDOWS\system32\LckFldService.exe
E:\Program Files\Common Files\LightScribe\LSSrvc.exe
E:\WINDOWS\system32\PnkBstrA.exe
E:\WINDOWS\system32\PnkBstrB.exe
E:\Program Files\CyberLink\Shared files\RichVideo.exe
E:\Program Files\Spyware Terminator\sp_rsser.exe
E:\WINDOWS\system32\NOTEPAD.EXE
E:\WINDOWS\system32\wscntfy.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\wuauclt.exe
E:\Program Files\Spyware Terminator\SpywareTerminator.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\Documents and Settings\sam.SAM-40368F334E5\Desktop\sanner.exe

O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - E:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - E:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "E:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] E:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] E:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] E:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [UpdatePDRShortCut] "E:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "E:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\7.0"
O4 - HKLM\..\Run: [SpywareTerminator] "E:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{BA617BE2-5ADC-4A6D-9DE5-46796C21488E}: NameServer = 202.188.0.133 202.188.1.5
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - E:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: LckFldService - Unknown owner - E:\WINDOWS\system32\LckFldService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - E:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: PnkBstrA - Unknown owner - E:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - E:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - E:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - E:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 3672 bytes

ANY IDEA TO FIX MY PROBLEM?
THANKS VERY MUCH! thumbup2.gif