като за начало преакалено забавяне на машината , прекасване на интернета , бъгване на страници най-вече в сайтове за споделяне на видеоклипове .Ето и резултатите от ДДС ATT: . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 7/10/2011 3:59:44 AM System Uptime: 1/9/2012 1:58:45 PM (1 hours ago) . Motherboard: ECS | | GeForce6100PM-M2 Processor: AMD Sempron Processor LE-1150 | Socket AM2 | 2008/201mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 32 GiB total, 20.232 GiB free. D: is FIXED (NTFS) - 201 GiB total, 32.884 GiB free. E: is CDROM () F: is CDROM (CDFS) G: is CDROM (CDFS) . ==== Disabled Device Manager Items ============= . Class GUID: {50127DC3-0F36-415E-A6CC-4CB3BE910B65} Description: AMD K8 Processor Device ID: ACPI\AUTHENTICAMD_-_X86_FAMILY_15_MODEL_127\_0 Manufacturer: Advanced Micro Devices Name: AMD Sempron Processor LE-1150 PNP Device ID: ACPI\AUTHENTICAMD_-_X86_FAMILY_15_MODEL_127\_0 Service: AmdK8 . Class GUID: Description: SM Bus Controller Device ID: PCI\VEN_10DE&DEV_03EB&SUBSYS_26091019&REV_A2\3&2411E6FE&0&09 Manufacturer: Name: SM Bus Controller PNP Device ID: PCI\VEN_10DE&DEV_03EB&SUBSYS_26091019&REV_A2\3&2411E6FE&0&09 Service: . ==== System Restore Points =================== . RP148: 12/17/2011 6:43:13 AM - System Checkpoint RP149: 12/18/2011 12:40:07 PM - System Checkpoint RP150: 12/19/2011 4:13:48 PM - System Checkpoint RP151: 12/20/2011 5:13:49 PM - System Checkpoint RP152: 12/21/2011 6:50:53 PM - System Checkpoint RP153: 12/22/2011 9:17:04 PM - System Checkpoint RP154: 12/23/2011 9:28:33 PM - System Checkpoint RP155: 12/25/2011 1:36:56 PM - System Checkpoint RP156: 12/26/2011 2:10:01 PM - System Checkpoint RP157: 12/28/2011 3:09:28 PM - System Checkpoint RP158: 12/29/2011 5:09:08 PM - System Checkpoint RP159: 12/30/2011 8:02:39 PM - System Checkpoint RP160: 12/31/2011 8:04:46 PM - System Checkpoint RP161: 1/2/2012 2:42:26 PM - System Checkpoint RP162: 1/3/2012 9:04:29 PM - System Checkpoint RP163: 1/4/2012 2:40:04 PM - Configured ArcSoft TotalMedia Theatre 3 RP164: 1/4/2012 3:00:47 PM - Installed Java 6 Update 30 RP165: 1/4/2012 5:16:51 PM - Removed Realtek High Definition Audio Driver RP166: 1/4/2012 5:18:04 PM - Installed Realtek High Definition Audio Driver RP167: 1/5/2012 5:27:18 PM - avast! Free Antivirus Setup RP168: 1/7/2012 8:44:11 PM - System Checkpoint . ==== Installed Programs ====================== . Adobe AIR Adobe Flash Player 11 Plugin Adobe Reader X (10.1.1) DAEMON Tools Lite FlexType 2K Heroes of Might and Magic® III Complete Java 6 Update 30 Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 MSVCRT Redists MSXML 6.0 Parser (KB925673) Nero Multimedia Suite NVIDIA Control Panel 275.33 NVIDIA Drivers NVIDIA Graphics Driver 275.33 NVIDIA Install Application NVIDIA nView 135.85 NVIDIA nView Desktop Manager NVIDIA Update 1.3.5 NVIDIA Update Components Opera 11.60 OSCAR Editor Panda Antivirus Pro 2012 Panda Secure Vault 5 Realtek High Definition Audio Driver Security Update for Windows Internet Explorer 7 (KB938127-v2) Security Update for Windows Internet Explorer 7 (KB958215) Security Update for Windows Internet Explorer 7 (KB960714) Skype Click to Call Skype™ 5.5 SopCast 3.4.7 The KMPlayer (remove only) Vegas Pro 10.0 WebFldrs XP Winamp Winamp Detector Plug-in Windows Communication Foundation Windows Media Player Firefox Plugin Windows Presentation Foundation Windows Workflow Foundation WinRAR 4.01 (32-bit) Xilisoft Video Converter Ultimate XML Paper Specification Shared Components Pack 1.0 µTorrent . ==== Event Viewer Messages From Past Week ======== . 1/4/2012 3:02:30 PM, error: System Error [1003] - Error code 1000008e, parameter1 c0000005, parameter2 bd2760db, parameter3 f676486c, parameter4 00000000. 1/4/2012 2:55:10 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AmdK8 archlp 1/4/2012 12:09:54 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AmdK8 . ==== End Of File =========================== DDS: R2 PAVSRV;Panda On-Access Anti-Malware Service;c:\program files\panda security\panda antivirus pro 2012\pavsrvx86.exe [2012-1-5 314176] R2 PskSvcRetail;Panda PSK service;c:\program files\panda security\panda antivirus pro 2012\psksvc.exe [2012-1-5 28992] R3 PavTPK.sys;PavTPK.sys;\??\c:\windows\system32\pavtpk.sys --> c:\windows\system32\PavTPK.sys [?] S1 archlp;archlp;c:\windows\system32\drivers\archlp.sys --> c:\windows\system32\drivers\archlp.sys [?] S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2012-1-4 1691480] . =============== File Associations =============== . JSEFile=c:\progra~1\pandas~1\pandaa~1\PavScrip.exe "%1" %* VBEFile=c:\progra~1\pandas~1\pandaa~1\PavScrip.exe "%1" %* VBSFile=c:\progra~1\pandas~1\pandaa~1\PavScrip.exe "%1" %* . =============== Created Last 30 ================ . 2012-01-05 15:29:58 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\local settings\application data\Panda Security 2012-01-05 15:26:26 -------- d-----w- c:\program files\common files\Panda Security 2012-01-05 13:50:33 -------- d-----w- c:\program files\ESET 2012-01-05 13:49:30 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\application data\QuickScan 2012-01-04 15:20:36 -------- d-----w- c:\windows\system32\RTCOM 2012-01-04 13:01:12 73728 ----a-w- c:\windows\system32\javacpl.cpl 2012-01-04 13:01:12 472808 ----a-w- c:\windows\system32\deployJava1.dll 2012-01-04 12:51:57 877376 ----a-w- c:\windows\system32\nvgenco32.dll 2012-01-04 12:51:56 919872 ----a-w- c:\windows\system32\nvdispco32.dll 2011-12-10 18:09:14 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\local settings\application data\Sony 2011-12-10 17:55:50 -------- d-----w- c:\program files\Sony 2011-12-10 17:50:19 -------- d-----w- c:\windows\system32\XPSViewer 2011-12-10 17:49:20 27648 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll 2011-12-10 17:49:05 14048 ------w- c:\windows\system32\spmsg2.dll 2011-12-10 17:49:02 22752 ----a-w- c:\windows\system32\spupdsvc.exe 2011-12-10 16:39:11 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\application data\Xilisoft 2011-12-10 16:36:45 -------- d-----w- c:\program files\Xilisoft 2011-12-10 16:36:45 -------- d-----w- c:\documents and settings\all users\application data\Xilisoft 2011-12-10 14:21:51 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\application data\Any Video Converter Professional 2011-12-10 14:21:46 -------- d-----w- c:\program files\Any Video Converter Professional 2011-12-10 14:13:26 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\application data\avidemux 2011-12-10 14:04:13 -------- d-----w- C:\movies 2011-12-10 13:46:45 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\local settings\application data\WMTools Downloaded Files . ==================== Find3M ==================== . 2012-01-04 13:22:19 273344 ----a-w- c:\windows\system32\nvdrsdb1.bin 2012-01-04 13:22:19 273344 ----a-w- c:\windows\system32\nvdrsdb0.bin 2012-01-04 13:22:19 1 ----a-w- c:\windows\system32\nvdrssel.bin 2011-12-13 16:27:30 7069288 ----a-w- c:\windows\system32\drivers\RtkHDAud.sys 2011-12-13 09:01:00 1698408 ----a-w- c:\windows\RtlExUpd.dll 2011-12-12 15:20:18 64616 ----a-w- c:\windows\system32\RtkCoInstIIXP.dll 2011-12-05 13:49:12 20065384 ----a-w- c:\windows\RTHDCPL.EXE 2011-11-22 14:28:58 11368 ----a-w- c:\windows\system32\RtkCoLDRXP.dll 2011-11-18 12:21:59 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-10-18 16:10:30 64616 ----a-w- c:\windows\system32\RtkCoInstXP.dll . ============= FINISH: 14:39:13.82 ===============

Здравейте..!Единия лог е непълен ..предполагам при копирането се е случило нещо...!Повторете сканирането и публикувайте пълни логове..!

att: . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 7/10/2011 3:59:44 AM System Uptime: 1/9/2012 1:58:45 PM (6 hours ago) . Motherboard: ECS | | GeForce6100PM-M2 Processor: AMD Sempron Processor LE-1150 | Socket AM2 | 2008/201mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 32 GiB total, 20.216 GiB free. D: is FIXED (NTFS) - 201 GiB total, 32.884 GiB free. E: is CDROM () F: is CDROM (CDFS) G: is CDROM (CDFS) . ==== Disabled Device Manager Items ============= . Class GUID: {50127DC3-0F36-415E-A6CC-4CB3BE910B65} Description: AMD K8 Processor Device ID: ACPI\AUTHENTICAMD_-_X86_FAMILY_15_MODEL_127\_0 Manufacturer: Advanced Micro Devices Name: AMD Sempron Processor LE-1150 PNP Device ID: ACPI\AUTHENTICAMD_-_X86_FAMILY_15_MODEL_127\_0 Service: AmdK8 . Class GUID: Description: SM Bus Controller Device ID: PCI\VEN_10DE&DEV_03EB&SUBSYS_26091019&REV_A2\3&2411E6FE&0&09 Manufacturer: Name: SM Bus Controller PNP Device ID: PCI\VEN_10DE&DEV_03EB&SUBSYS_26091019&REV_A2\3&2411E6FE&0&09 Service: . ==== System Restore Points =================== . RP148: 12/17/2011 6:43:13 AM - System Checkpoint RP149: 12/18/2011 12:40:07 PM - System Checkpoint RP150: 12/19/2011 4:13:48 PM - System Checkpoint RP151: 12/20/2011 5:13:49 PM - System Checkpoint RP152: 12/21/2011 6:50:53 PM - System Checkpoint RP153: 12/22/2011 9:17:04 PM - System Checkpoint RP154: 12/23/2011 9:28:33 PM - System Checkpoint RP155: 12/25/2011 1:36:56 PM - System Checkpoint RP156: 12/26/2011 2:10:01 PM - System Checkpoint RP157: 12/28/2011 3:09:28 PM - System Checkpoint RP158: 12/29/2011 5:09:08 PM - System Checkpoint RP159: 12/30/2011 8:02:39 PM - System Checkpoint RP160: 12/31/2011 8:04:46 PM - System Checkpoint RP161: 1/2/2012 2:42:26 PM - System Checkpoint RP162: 1/3/2012 9:04:29 PM - System Checkpoint RP163: 1/4/2012 2:40:04 PM - Configured ArcSoft TotalMedia Theatre 3 RP164: 1/4/2012 3:00:47 PM - Installed Java 6 Update 30 RP165: 1/4/2012 5:16:51 PM - Removed Realtek High Definition Audio Driver RP166: 1/4/2012 5:18:04 PM - Installed Realtek High Definition Audio Driver RP167: 1/5/2012 5:27:18 PM - avast! Free Antivirus Setup RP168: 1/7/2012 8:44:11 PM - System Checkpoint RP169: 1/9/2012 3:36:57 PM - System Checkpoint . ==== Installed Programs ====================== . Adobe AIR Adobe Flash Player 11 Plugin Adobe Reader X (10.1.1) DAEMON Tools Lite FlexType 2K Heroes of Might and Magic® III Complete Java 6 Update 30 Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 MSVCRT Redists MSXML 6.0 Parser (KB925673) Nero Multimedia Suite NVIDIA Control Panel 275.33 NVIDIA Drivers NVIDIA Graphics Driver 275.33 NVIDIA Install Application NVIDIA nView 135.85 NVIDIA nView Desktop Manager NVIDIA Update 1.3.5 NVIDIA Update Components Opera 11.60 OSCAR Editor Panda Antivirus Pro 2012 Panda Secure Vault 5 Realtek High Definition Audio Driver Security Update for Windows Internet Explorer 7 (KB938127-v2) Security Update for Windows Internet Explorer 7 (KB958215) Security Update for Windows Internet Explorer 7 (KB960714) Skype Click to Call Skype™ 5.5 SopCast 3.4.7 The KMPlayer (remove only) Vegas Pro 10.0 WebFldrs XP Winamp Winamp Detector Plug-in Windows Communication Foundation Windows Media Player Firefox Plugin Windows Presentation Foundation Windows Workflow Foundation WinRAR 4.01 (32-bit) Xilisoft Video Converter Ultimate XML Paper Specification Shared Components Pack 1.0 µTorrent . ==== Event Viewer Messages From Past Week ======== . 1/4/2012 3:02:30 PM, error: System Error [1003] - Error code 1000008e, parameter1 c0000005, parameter2 bd2760db, parameter3 f676486c, parameter4 00000000. 1/4/2012 2:55:10 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AmdK8 archlp 1/4/2012 12:09:54 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AmdK8 . ==== End Of File =========================== DDS: . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 7.0.5730.13 Run by cxcxcxcxcxcx at 18:52:49 on 2012-01-09 Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.894.114 [GMT 2:00] . AV: Panda Antivirus Pro 2012 *Enabled/Updated* {EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A} . ============== Running Processes =============== . C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs C:\Program Files\Panda Security\Panda Antivirus Pro 2012\TPSrv.exe C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2012\WebProxy.exe svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\inetsrv\inetinfo.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsCtrls.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PavFnSvr.exe C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsImSvc.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PskSvc.exe C:\WINDOWS\System32\snmp.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2012\pavsrvx86.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2012\AVENGINE.EXE C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Panda Security\Panda Antivirus Pro 2012\ApVxdWin.exe C:\Program Files\Winamp\winampa.exe C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\OSCAR Editor\OscarEditor.exe C:\Program Files\DAEMON Tools Lite\DTLite.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Datecs\FlexType 2K\FType2K.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\inetsrv\DavCData.exe C:\Program Files\Opera\opera.exe . ============== Pseudo HJT Report =============== . mWinlogon: SfcDisable=-99 (0xffffff9d) BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [OscarEditor] "c:\program files\oscar editor\OscarEditor.exe" Minimum uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun uRun: [skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized mRun: [WinampAgent] "c:\program files\winamp\winampa.exe" mRun: [avast5] "c:\program files\alwil software\avast5\avastUI.exe" /nogui mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login mRun: [nwiz] c:\program files\nvidia corporation\nview\nwiz.exe /installquiet mRun: [RTHDCPL] RTHDCPL.EXE mRun: [APVXDWIN] "c:\program files\panda security\panda antivirus pro 2012\APVXDWIN.EXE" /s mRun: [sCANINICIO] "c:\program files\panda security\panda antivirus pro 2012\Inicio.exe" dRunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\flexty~1.lnk - c:\program files\datecs\flextype 2k\FType2K.exe IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} - hxxp://quickscan.bitdefender.com/qsax/qsax.cab TCP: Interfaces\{2EE8E965-AEF6-4A99-877A-66851EA1B8A2} : NameServer = 10.20.1.1 Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll Notify: avldr - avldr.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\wpdshserviceobj.dll . ============= SERVICES / DRIVERS =============== . R0 pavboot;Panda boot driver;c:\windows\system32\drivers\pavboot.sys [2012-1-5 26696] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-8-19 232512] R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShlDrv51.sys [2012-1-5 37448] R2 AmFSM;AmFSM;c:\windows\system32\drivers\amm8651.sys [2012-1-5 59080] R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia updatus\daemonu.exe [2012-1-4 2214504] R2 Panda Software Controller;Panda Software Controller;c:\program files\panda security\panda antivirus pro 2012\PsCtrlS.exe [2012-1-5 173312] R2 PAVFNSVR;Panda Function Service;c:\program files\panda security\panda antivirus pro 2012\PavFnSvr.exe [2012-1-5 202048] R2 PavProc;Panda Process Protection Driver;c:\windows\system32\drivers\PavProc.sys [2012-1-5 163848] R2 PavPrSrv;Panda Process Protection Service;c:\program files\common files\panda security\pavshld\PavPrSrv.exe [2012-1-5 62768] R2 PAVSRV;Panda On-Access Anti-Malware Service;c:\program files\panda security\panda antivirus pro 2012\pavsrvx86.exe [2012-1-5 314176] R2 PskSvcRetail;Panda PSK service;c:\program files\panda security\panda antivirus pro 2012\psksvc.exe [2012-1-5 28992] R3 PavTPK.sys;PavTPK.sys;\??\c:\windows\system32\pavtpk.sys --> c:\windows\system32\PavTPK.sys [?] S1 archlp;archlp;c:\windows\system32\drivers\archlp.sys --> c:\windows\system32\drivers\archlp.sys [?] S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2012-1-4 1691480] . =============== File Associations =============== . JSEFile=c:\progra~1\pandas~1\pandaa~1\PavScrip.exe "%1" %* VBEFile=c:\progra~1\pandas~1\pandaa~1\PavScrip.exe "%1" %* VBSFile=c:\progra~1\pandas~1\pandaa~1\PavScrip.exe "%1" %* . =============== Created Last 30 ================ . 2012-01-05 15:29:58 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\local settings\application data\Panda Security 2012-01-05 15:26:26 -------- d-----w- c:\program files\common files\Panda Security 2012-01-05 13:50:33 -------- d-----w- c:\program files\ESET 2012-01-05 13:49:30 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\application data\QuickScan 2012-01-04 15:20:36 -------- d-----w- c:\windows\system32\RTCOM 2012-01-04 13:01:12 73728 ----a-w- c:\windows\system32\javacpl.cpl 2012-01-04 13:01:12 472808 ----a-w- c:\windows\system32\deployJava1.dll 2012-01-04 12:51:57 877376 ----a-w- c:\windows\system32\nvgenco32.dll 2012-01-04 12:51:56 919872 ----a-w- c:\windows\system32\nvdispco32.dll 2011-12-10 18:09:14 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\local settings\application data\Sony 2011-12-10 17:55:50 -------- d-----w- c:\program files\Sony 2011-12-10 17:50:19 -------- d-----w- c:\windows\system32\XPSViewer 2011-12-10 17:49:20 27648 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll 2011-12-10 17:49:05 14048 ------w- c:\windows\system32\spmsg2.dll 2011-12-10 17:49:02 22752 ----a-w- c:\windows\system32\spupdsvc.exe . ==================== Find3M ==================== . 2012-01-04 13:22:19 273344 ----a-w- c:\windows\system32\nvdrsdb1.bin 2012-01-04 13:22:19 273344 ----a-w- c:\windows\system32\nvdrsdb0.bin 2012-01-04 13:22:19 1 ----a-w- c:\windows\system32\nvdrssel.bin 2011-12-13 16:27:30 7069288 ----a-w- c:\windows\system32\drivers\RtkHDAud.sys 2011-12-13 09:01:00 1698408 ----a-w- c:\windows\RtlExUpd.dll 2011-12-12 15:20:18 64616 ----a-w- c:\windows\system32\RtkCoInstIIXP.dll 2011-12-05 13:49:12 20065384 ----a-w- c:\windows\RTHDCPL.EXE 2011-11-22 14:28:58 11368 ----a-w- c:\windows\system32\RtkCoLDRXP.dll 2011-11-18 12:21:59 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-10-18 16:10:30 64616 ----a-w- c:\windows\system32\RtkCoInstXP.dll . ============= FINISH: 19:08:58.50 ===============

Как искате да върви нормално компютъра ви при положение че имате две антивирусни програми Panda и Аvast5 или остатъци ,както виждам от Аvast...!

Премахнете остатъците от Аvast по тази инструкция http://www.avast.com/uninstall-utility

Проблемите започнаха преди инсталирването на панда , просто исках да сканирам пц-то и с нея откри 2 трояна които аваста не засичаше но и след истриването им нямаше голям ефект затова се обарнах към вас .... сега ще премахна аваста .... но проблемите който споменах в началото ще си останат avast е отстранен но дори сега да ми зареди Opera бяха необходими 1-2 мин ,,,,

Споко ...не сме започнали още.....!

Изтеглете ComboFix от тук или тук и го запазете на десктопа си.

• Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.

Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs

• Стартирайте Combo-Fix.com и следвайте инструкциите.

Бележка: ComboFix ще се стартира без инсталирана Recovery Console.

• Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repair режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.

• Следвайте инструкциите, за да позволите на ComboFix да изтегли и инсталира Microsoft Windows Recovery Console. В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

Изберете Yes, за да продължи сканирането за зловреден софтуер.

Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:\ComboFix.txt в следващия Ви коментар в тази тема.

Бележка:

• Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа.
• ComboFix ще нулира всички настройки на Microsoft Internet Explorer, включително да направи IE браузър по подразбиране.
• ComboFix ще изключи autorun функцията на ВСИЧКИ CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и Ви защити от бъдещи вируси/заплахи, които поразяват чрез autorun. Ако това е проблем за вас - моля, уведомете ме.
• ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той ще прекрати интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си.
• В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:\BUG.txt в следващия Ви коментар в тази тема.

Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.

ComboFix 12-01-09.07 - cxcxcxcxcxcx 01/10/2012 14:32:03.1.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.894.186 [GMT 2:00] Running from: c:\documents and settings\cxcxcxcxcxcx\Desktop\ComboFix.exe AV: Panda Antivirus Pro 2012 *Disabled/Updated* {EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\system32\Cache . . ((((((((((((((((((((((((( Files Created from 2011-12-10 to 2012-01-10 ))))))))))))))))))))))))))))))) . . 2012-01-05 15:34 . 2012-01-05 15:34 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Opera 2012-01-05 15:29 . 2012-01-05 15:29 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\Local Settings\Application Data\Panda Security 2012-01-05 15:26 . 2012-01-05 15:26 -------- d-----w- c:\program files\Common Files\Panda Security 2012-01-05 13:50 . 2012-01-05 13:50 -------- d-----w- c:\program files\ESET 2012-01-05 13:49 . 2012-01-05 13:49 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\Application Data\QuickScan 2012-01-04 15:20 . 2012-01-04 15:20 -------- d-----w- c:\windows\system32\RTCOM 2012-01-04 13:01 . 2012-01-04 13:00 73728 ----a-w- c:\windows\system32\javacpl.cpl 2012-01-04 13:01 . 2012-01-04 13:00 472808 ----a-w- c:\windows\system32\deployJava1.dll 2012-01-04 13:00 . 2012-01-04 13:00 -------- d-----w- c:\program files\Java 2012-01-04 12:53 . 2012-01-04 12:53 -------- d-----w- c:\documents and settings\UpdatusUser 2012-01-04 12:51 . 2011-10-08 04:50 877376 ----a-w- c:\windows\system32\nvgenco32.dll 2012-01-04 12:51 . 2011-10-08 04:50 919872 ----a-w- c:\windows\system32\nvdispco32.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-11-18 12:21 . 2011-07-10 23:51 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-10-18 16:10 . 2011-07-10 20:40 64616 ----a-w- c:\windows\system32\RtkCoInstXP.dll . . ------- Sigcheck ------- Note: Unsigned files aren't necessarily malware. . [-] 2009-01-08 . 5AE1C2695F6523AD98B948F2887D8C5E . 361600 . . [5.1.2600.5649] . . c:\windows\system32\drivers\tcpip.sys . [-] 2009-01-08 . 362BC5AF8EAF712832C58CC13AE05750 . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OscarEditor"="c:\program files\OSCAR Editor\OscarEditor.exe" [2009-11-24 2642432] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-08-02 4910912] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2011-07-11 74752] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-05-25 13895272] "NvMediaCenter"="NvMCTray.dll" [2011-05-25 111208] "nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-05-04 1632360] "RTHDCPL"="RTHDCPL.EXE" [2011-12-05 20065384] "APVXDWIN"="c:\program files\Panda Security\Panda Antivirus Pro 2012\APVXDWIN.EXE" [2011-04-13 1000768] "SCANINICIO"="c:\program files\Panda Security\Panda Antivirus Pro 2012\Inicio.exe" [2011-02-02 70464] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "_nltide_2"="shell32" [X] . c:\documents and settings\All Users\Start Menu\Programs\Startup\ FlexType 2K.lnk - c:\program files\Datecs\FlexType 2K\FType2K.exe [2011-7-25 95232] . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avldr] 2010-03-24 10:55 55552 ----a-w- c:\windows\system32\avldr.dll . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PskSvcRetail] @="Service" . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"= "c:\\WINDOWS\\system32\\sessmgr.exe"= "c:\\Program Files\\Opera\\opera.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 . R0 pavboot;Panda boot driver;c:\windows\system32\drivers\pavboot.sys [1/5/2012 5:28 PM 26696] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [8/19/2011 1:55 PM 232512] R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShlDrv51.sys [1/5/2012 5:28 PM 37448] R2 AmFSM;AmFSM;c:\windows\system32\drivers\amm8651.sys [1/5/2012 5:28 PM 59080] R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [1/4/2012 2:53 PM 2214504] R2 PavProc;Panda Process Protection Driver;c:\windows\system32\drivers\PavProc.sys [1/5/2012 5:28 PM 163848] R2 PskSvcRetail;Panda PSK service;c:\program files\Panda Security\Panda Antivirus Pro 2012\psksvc.exe [1/5/2012 5:28 PM 28992] R3 PavTPK.sys;PavTPK.sys;\??\c:\windows\system32\PavTPK.sys --> c:\windows\system32\PavTPK.sys [?] S1 archlp;archlp;c:\windows\system32\drivers\archlp.sys --> c:\windows\system32\drivers\archlp.sys [?] S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [1/4/2012 5:18 PM 1691480] . . ------- Supplementary Scan ------- . TCP: Interfaces\{2EE8E965-AEF6-4A99-877A-66851EA1B8A2}: NameServer = 10.20.1.1 . - - - - ORPHANS REMOVED - - - - . WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) AddRemove-Heroes of Might and Magic® III - d:\games\Heroes of Might and Magic® III.isu . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-01-10 14:37 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'winlogon.exe'(732) c:\windows\system32\avldr.dll . - - - - - - - > 'explorer.exe'(2976) c:\windows\system32\msi.dll c:\windows\system32\wpdshserviceobj.dll c:\windows\system32\portabledevicetypes.dll c:\windows\system32\portabledeviceapi.dll . Completion time: 2012-01-10 14:39:27 ComboFix-quarantined-files.txt 2012-01-10 12:39 . Pre-Run: 21,649,883,136 bytes free Post-Run: 21,955,530,752 bytes free . WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect . - - End Of File - - 236FB0C77620EF2EB6F26A043ADB9FDC

Копирайте текста в карето на notepad и го запазвате с име CFScript.txt на десктопа си:

KILLALL::

ClearJavaCache::

Folder::
c:\program files\ESET

След съхранението преместете CFScript.txt на иконата на ComboFix.exe

Генерирания рапорт прикачете в следващия си пост..!

ComboFix 12-01-09.07 - cxcxcxcxcxcx 01/11/2012 14:11:05.2.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.894.183 [GMT 2:00] Running from: c:\documents and settings\cxcxcxcxcxcx\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\cxcxcxcxcxcx\Desktop\CFScript.txt.txt AV: Panda Antivirus Pro 2012 *Enabled/Updated* {EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A} * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files\ESET . . ((((((((((((((((((((((((( Files Created from 2011-12-11 to 2012-01-11 ))))))))))))))))))))))))))))))) . . 2012-01-11 01:27 . 2012-01-11 01:27 -------- d-----w- c:\windows\system32\xircom 2012-01-11 01:27 . 2012-01-11 01:27 -------- d-----w- c:\program files\microsoft frontpage 2012-01-05 15:34 . 2012-01-05 15:34 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Opera 2012-01-05 15:29 . 2012-01-05 15:29 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\Local Settings\Application Data\Panda Security 2012-01-05 15:26 . 2012-01-05 15:26 -------- d-----w- c:\program files\Common Files\Panda Security 2012-01-05 13:49 . 2012-01-05 13:49 -------- d-----w- c:\documents and settings\cxcxcxcxcxcx\Application Data\QuickScan 2012-01-04 15:20 . 2012-01-04 15:20 -------- d-----w- c:\windows\system32\RTCOM 2012-01-04 13:01 . 2012-01-04 13:00 73728 ----a-w- c:\windows\system32\javacpl.cpl 2012-01-04 13:01 . 2012-01-04 13:00 472808 ----a-w- c:\windows\system32\deployJava1.dll 2012-01-04 13:00 . 2012-01-04 13:00 -------- d-----w- c:\program files\Java 2012-01-04 12:53 . 2012-01-04 12:53 -------- d-----w- c:\documents and settings\UpdatusUser 2012-01-04 12:51 . 2011-10-08 04:50 877376 ----a-w- c:\windows\system32\nvgenco32.dll 2012-01-04 12:51 . 2011-10-08 04:50 919872 ----a-w- c:\windows\system32\nvdispco32.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-11-18 12:21 . 2011-07-10 23:51 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-10-18 16:10 . 2011-07-10 20:40 64616 ----a-w- c:\windows\system32\RtkCoInstXP.dll . . ------- Sigcheck ------- Note: Unsigned files aren't necessarily malware. . [-] 2009-01-08 . 5AE1C2695F6523AD98B948F2887D8C5E . 361600 . . [5.1.2600.5649] . . c:\windows\system32\drivers\tcpip.sys . [-] 2009-01-08 . 362BC5AF8EAF712832C58CC13AE05750 . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll . ((((((((((((((((((((((((((((( SnapShot@2012-01-10_12.37.44 ))))))))))))))))))))))))))))))))))))))))) . + 2012-01-11 12:16 . 2012-01-11 12:16 16384 c:\windows\Temp\Perflib_Perfdata_770.dat + 2012-01-11 12:16 . 2012-01-11 12:16 16384 c:\windows\Temp\Perflib_Perfdata_33c.dat + 2001-08-23 11:00 . 2012-01-11 12:06 83202 c:\windows\system32\perfc009.dat - 2001-08-23 11:00 . 2012-01-10 12:17 83202 c:\windows\system32\perfc009.dat + 2001-08-23 11:00 . 2012-01-11 12:06 476308 c:\windows\system32\perfh009.dat - 2001-08-23 11:00 . 2012-01-10 12:17 476308 c:\windows\system32\perfh009.dat + 2011-07-10 04:11 . 2012-01-11 12:16 223835 c:\windows\system32\inetsrv\MetaBase.bin . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OscarEditor"="c:\program files\OSCAR Editor\OscarEditor.exe" [2009-11-24 2642432] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-08-02 4910912] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2011-07-11 74752] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-05-25 13895272] "NvMediaCenter"="NvMCTray.dll" [2011-05-25 111208] "nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-05-04 1632360] "RTHDCPL"="RTHDCPL.EXE" [2011-12-05 20065384] "APVXDWIN"="c:\program files\Panda Security\Panda Antivirus Pro 2012\APVXDWIN.EXE" [2011-04-13 1000768] "SCANINICIO"="c:\program files\Panda Security\Panda Antivirus Pro 2012\Inicio.exe" [2011-02-02 70464] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "_nltide_2"="shell32" [X] . c:\documents and settings\All Users\Start Menu\Programs\Startup\ FlexType 2K.lnk - c:\program files\Datecs\FlexType 2K\FType2K.exe [2011-7-25 95232] . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avldr] 2010-03-24 10:55 55552 ----a-w- c:\windows\system32\avldr.dll . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PskSvcRetail] @="Service" . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"= "c:\\WINDOWS\\system32\\sessmgr.exe"= "c:\\Program Files\\Opera\\opera.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 . R0 pavboot;Panda boot driver;c:\windows\system32\drivers\pavboot.sys [1/5/2012 5:28 PM 26696] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [8/19/2011 1:55 PM 232512] R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShlDrv51.sys [1/5/2012 5:28 PM 37448] R2 AmFSM;AmFSM;c:\windows\system32\drivers\amm8651.sys [1/5/2012 5:28 PM 59080] R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [1/4/2012 2:53 PM 2214504] R2 PavProc;Panda Process Protection Driver;c:\windows\system32\drivers\PavProc.sys [1/5/2012 5:28 PM 163848] R2 PskSvcRetail;Panda PSK service;c:\program files\Panda Security\Panda Antivirus Pro 2012\psksvc.exe [1/5/2012 5:28 PM 28992] R3 PavTPK.sys;PavTPK.sys;\??\c:\windows\system32\PavTPK.sys --> c:\windows\system32\PavTPK.sys [?] S1 archlp;archlp;c:\windows\system32\drivers\archlp.sys --> c:\windows\system32\drivers\archlp.sys [?] S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [1/4/2012 5:18 PM 1691480] . . ------- Supplementary Scan ------- . TCP: Interfaces\{2EE8E965-AEF6-4A99-877A-66851EA1B8A2}: NameServer = 10.20.1.1 . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-01-11 14:17 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'winlogon.exe'(520) c:\windows\system32\avldr.dll . - - - - - - - > 'explorer.exe'(3640) c:\windows\system32\newdll.dll c:\windows\system32\msi.dll c:\program files\OSCAR Editor\Win32Share.dll c:\windows\system32\wpdshserviceobj.dll c:\windows\system32\portabledevicetypes.dll c:\windows\system32\portabledeviceapi.dll . ------------------------ Other Running Processes ------------------------ . c:\program files\Panda Security\Panda Antivirus Pro 2012\TPSrv.exe c:\program files\PANDA SECURITY\PANDA ANTIVIRUS PRO 2012\WebProxy.exe c:\windows\system32\inetsrv\inetinfo.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\nvsvc32.exe c:\program files\Panda Security\Panda Antivirus Pro 2012\PsCtrls.exe c:\program files\Panda Security\Panda Antivirus Pro 2012\PavFnSvr.exe c:\program files\Common Files\Panda Security\PavShld\pavprsrv.exe c:\program files\Panda Security\Panda Antivirus Pro 2012\PsImSvc.exe c:\windows\System32\snmp.exe c:\program files\Panda Security\Panda Antivirus Pro 2012\pavsrvx86.exe c:\program files\Panda Security\Panda Antivirus Pro 2012\AVENGINE.EXE c:\windows\system32\wscntfy.exe c:\windows\system32\RunDLL32.exe c:\windows\RTHDCPL.EXE . ************************************************************************** . Completion time: 2012-01-11 14:19:29 - machine was rebooted ComboFix-quarantined-files.txt 2012-01-11 12:19 ComboFix2.txt 2012-01-10 12:39 . Pre-Run: 21,928,128,512 bytes free Post-Run: 21,921,775,616 bytes free . - - End Of File - - FDBF78E3F412F2A3620C5EF64AB4520D

Наблюдавате ли още проблеми по системата си..!Някъкви промени..?

Наблюдавате ли още проблеми по системата си..!Някъкви промени..?

проблемите с интернет страниците и прекасващия за секунда интернет (когато съм в някои онлине игра направо ме побарква) остават ,но определено не е толкова натоварена машината

Разбирам..!Да продължим така..:

Моля, изтеглете aswMBR и го запазете на вашия десктоп.

• Кликнете с двоен клин на мишката върху файла aswMBR.exe за да го стартирате.
• Изчакайте да изтегли дефинициите на avast!
• От падащото меню посочете дял C:\ както е на снимката:

• Изберете Scan бутона, за да започне проверката.
• Когато проверката завърши, натиснете бутона save log, запазете съдържанието на лог файла на десктопа и публикувайте съдържанието му в следващия си коментар.

Моля, изтеглете последната версия на TDSSKiller - оттук и я запазете на вашия декстоп.

• Стартирайте TDSSKiller.exe за да стартирате приложението. След това кликнете върху бутона Change parameters.

  

• Сложете отметки пред Verify Driver Digital Signature и Detect TDLFS file system и натиснете ОК.

  

• Натиснете бутона Start Scan.

  

• Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.

  

• Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.

  Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue > Рестартирайте за да бъде завършена поправката.

  

  Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова.

• Лог файл ще бъде създаден в свободната директория на дял C:\ . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.

това е от играта Counter strike на която най-добре се вижда прекасването поради наличието на netgraphika

Редактирано 11 януари 201214 г. от Dopeass (преглед на промените)

aswMBR version 0.9.9.1297 Copyright© 2011 AVAST Software Run date: 2012-01-11 15:04:58 ----------------------------- 15:04:58.515 OS Version: Windows 5.1.2600 Service Pack 3 15:04:58.515 Number of processors: 1 586 0x7F01 15:04:58.515 ComputerName: SVETLIO UserName: 15:05:00.343 Initialize success 15:14:57.578 AVAST engine defs: 12011100 15:15:34.640 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Scsi\nvgts1Port2Path0Target0Lun0 15:15:34.640 Disk 0 Vendor: ExcelSto GM2O Size: 238475MB BusType: 3 15:15:34.640 Device \Driver\nvgts -> DriverStartIo SCSIPORT.SYS f72aa40e 15:15:34.656 Disk 0 MBR read successfully 15:15:34.656 Disk 0 MBR scan 15:15:34.687 Disk 0 Windows XP default MBR code 15:15:34.687 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 32553 MB offset 63 15:15:34.687 Disk 0 Partition - 00 0F Extended LBA 205911 MB offset 66669750 15:15:34.703 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 205911 MB offset 66669813 15:15:34.703 Disk 0 scanning sectors +488376000 15:15:34.796 Disk 0 scanning C:\WINDOWS\system32\drivers 15:15:42.265 Service scanning 15:15:42.843 Service ShldDrv C:\WINDOWS\C:\WINDOWS\system32\Drivers\ShlDrv51.sys **LOCKED** 123 15:15:43.765 Modules scanning 15:15:51.703 Disk 0 trace - called modules: 15:15:51.718 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll SCSIPORT.SYS nvgts.sys 15:15:51.718 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x84a9cab8] 15:15:51.734 3 CLASSPNP.SYS[f74d7fd7] -> nt!IofCallDriver -> \Device\00000064[0x84a9c920] 15:15:51.734 5 ACPI.sys[f735e620] -> nt!IofCallDriver -> \Device\Scsi\nvgts1Port2Path0Target0Lun0[0x84a37a38] 15:15:52.000 AVAST engine scan C:\ 15:33:23.343 File: C:\System Volume Information\_restore{F5FEFC08-07BD-4F94-A742-492ABF16436C}\RP169\A0030763.exe **INFECTED** Win32:Rootkit-gen [Rtk] 15:33:24.359 File: C:\System Volume Information\_restore{F5FEFC08-07BD-4F94-A742-492ABF16436C}\RP169\A0030774.exe **INFECTED** Win32:Rootkit-gen [Rtk] 15:33:31.218 File: C:\System Volume Information\_restore{F5FEFC08-07BD-4F94-A742-492ABF16436C}\RP170\A0030855.exe **INFECTED** Win32:Rootkit-gen [Rtk] 15:40:02.421 File: C:\WINDOWS\PEV.exe **INFECTED** Win32:Rootkit-gen [Rtk] 15:48:58.187 Scan finished successfully 15:49:06.515 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\cxcxcxcxcxcx\Desktop\MBR.dat" 15:49:06.515 The log file has been saved successfully to "C:\Documents and Settings\cxcxcxcxcxcx\Desktop\aswMBR.txt" 15:49:34.0328 2988 TDSS rootkit removing tool 2.7.0.0 Jan 10 2012 09:14:26 15:49:34.0875 2988 ============================================================ 15:49:34.0875 2988 Current date / time: 2012/01/11 15:49:34.0875 15:49:34.0875 2988 SystemInfo: 15:49:34.0875 2988 15:49:34.0875 2988 OS Version: 5.1.2600 ServicePack: 3.0 15:49:34.0875 2988 Product type: Workstation 15:49:34.0875 2988 ComputerName: SVETLIO 15:49:34.0875 2988 UserName: cxcxcxcxcxcx 15:49:34.0875 2988 Windows directory: C:\WINDOWS 15:49:34.0875 2988 System windows directory: C:\WINDOWS 15:49:34.0875 2988 Processor architecture: Intel x86 15:49:34.0875 2988 Number of processors: 1 15:49:34.0875 2988 Page size: 0x1000 15:49:34.0875 2988 Boot type: Normal boot 15:49:34.0875 2988 ============================================================ 15:49:37.0734 2988 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000, SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K', Flags 0x00000058 15:49:38.0046 2988 Initialize success 15:49:46.0703 2912 ============================================================ 15:49:46.0703 2912 Scan started 15:49:46.0703 2912 Mode: Manual; SigCheck; TDLFS; 15:49:46.0703 2912 ============================================================ 15:49:47.0078 2912 Abiosdsk - ok 15:49:47.0093 2912 abp480n5 - ok 15:49:47.0125 2912 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 15:49:47.0812 2912 ACPI - ok 15:49:47.0890 2912 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 15:49:48.0046 2912 ACPIEC - ok 15:49:48.0062 2912 adpu160m - ok 15:49:48.0109 2912 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 15:49:48.0375 2912 aec - ok 15:49:48.0468 2912 AFD (38d7b715504da4741df35e3594fe2099) C:\WINDOWS\System32\drivers\afd.sys 15:49:48.0484 2912 AFD - ok 15:49:48.0500 2912 Aha154x - ok 15:49:48.0500 2912 aic78u2 - ok 15:49:48.0515 2912 aic78xx - ok 15:49:48.0546 2912 AliIde - ok 15:49:48.0625 2912 Ambfilt (267fc636801edc5ab28e14036349e3be) C:\WINDOWS\system32\drivers\Ambfilt.sys 15:49:49.0640 2912 Ambfilt - ok 15:49:49.0718 2912 AmdK8 - ok 15:49:49.0750 2912 AmFSM (ef9dd27aa5a3baaf2fd2b44c08a3e622) C:\WINDOWS\system32\DRIVERS\amm8651.sys 15:49:49.0765 2912 AmFSM - ok 15:49:49.0781 2912 amsint - ok 15:49:49.0796 2912 archlp - ok 15:49:49.0812 2912 asc - ok 15:49:49.0828 2912 asc3350p - ok 15:49:49.0843 2912 asc3550 - ok 15:49:49.0906 2912 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 15:49:50.0078 2912 AsyncMac - ok 15:49:50.0093 2912 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 15:49:50.0281 2912 atapi - ok 15:49:50.0343 2912 Atdisk - ok 15:49:50.0359 2912 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 15:49:50.0531 2912 Atmarpc - ok 15:49:50.0578 2912 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 15:49:50.0828 2912 audstub - ok 15:49:50.0859 2912 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 15:49:51.0109 2912 Beep - ok 15:49:51.0125 2912 catchme - ok 15:49:51.0234 2912 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 15:49:51.0437 2912 cbidf2k - ok 15:49:51.0453 2912 cd20xrnt - ok 15:49:51.0468 2912 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 15:49:51.0656 2912 Cdaudio - ok 15:49:51.0703 2912 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 15:49:51.0906 2912 Cdfs - ok 15:49:51.0984 2912 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys 15:49:52.0015 2912 Cdrom - ok 15:49:52.0031 2912 Changer - ok 15:49:52.0062 2912 CmdIde - ok 15:49:52.0078 2912 Cpqarray - ok 15:49:52.0109 2912 dac2w2k - ok 15:49:52.0125 2912 dac960nt - ok 15:49:52.0187 2912 Disk (47b6aaec570f2c11d8bad80a064d8ed1) C:\WINDOWS\system32\DRIVERS\disk.sys 15:49:52.0203 2912 Disk - ok 15:49:52.0265 2912 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 15:49:52.0468 2912 dmboot - ok 15:49:52.0515 2912 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 15:49:52.0703 2912 dmio - ok 15:49:52.0750 2912 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 15:49:52.0937 2912 dmload - ok 15:49:53.0000 2912 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 15:49:53.0203 2912 DMusic - ok 15:49:53.0234 2912 dpti2o - ok 15:49:53.0250 2912 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 15:49:53.0437 2912 drmkaud - ok 15:49:53.0484 2912 dtsoftbus01 (c0c7ceccb6c85994c2bc92d58e52d3f2) C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys 15:49:53.0500 2912 dtsoftbus01 - ok 15:49:53.0578 2912 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 15:49:53.0750 2912 Fastfat - ok 15:49:53.0796 2912 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 15:49:54.0000 2912 Fdc - ok 15:49:54.0031 2912 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 15:49:54.0234 2912 Fips - ok 15:49:54.0265 2912 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys 15:49:54.0484 2912 Flpydisk - ok 15:49:54.0546 2912 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys 15:49:54.0718 2912 FltMgr - ok 15:49:54.0750 2912 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 15:49:54.0953 2912 Fs_Rec - ok 15:49:54.0984 2912 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 15:49:55.0187 2912 Ftdisk - ok 15:49:55.0218 2912 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 15:49:55.0406 2912 Gpc - ok 15:49:55.0453 2912 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 15:49:55.0625 2912 HDAudBus - ok 15:49:55.0687 2912 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 15:49:55.0875 2912 hidusb - ok 15:49:55.0890 2912 hpn - ok 15:49:55.0921 2912 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:\WINDOWS\system32\Drivers\HTTP.sys 15:49:56.0125 2912 HTTP - ok 15:49:56.0156 2912 i2omgmt - ok 15:49:56.0171 2912 i2omp - ok 15:49:56.0203 2912 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 15:49:56.0406 2912 i8042prt - ok 15:49:56.0453 2912 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 15:49:56.0656 2912 Imapi - ok 15:49:56.0703 2912 ini910u - ok 15:49:56.0890 2912 IntcAzAudAddService (5d138adc44c43bf37634c8e528d75b1f) C:\WINDOWS\system32\drivers\RtkHDAud.sys 15:49:57.0234 2912 IntcAzAudAddService - ok 15:49:57.0296 2912 IntelIde - ok 15:49:57.0328 2912 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys 15:49:57.0546 2912 Ip6Fw - ok 15:49:57.0578 2912 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 15:49:57.0781 2912 IpFilterDriver - ok 15:49:57.0875 2912 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 15:49:58.0109 2912 IpInIp - ok 15:49:58.0156 2912 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 15:49:58.0328 2912 IpNat - ok 15:49:58.0359 2912 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 15:49:58.0546 2912 IPSec - ok 15:49:58.0593 2912 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 15:49:58.0656 2912 IRENUM - ok 15:49:58.0734 2912 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 15:49:58.0968 2912 isapnp - ok 15:49:59.0000 2912 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 15:49:59.0218 2912 Kbdclass - ok 15:49:59.0234 2912 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 15:49:59.0421 2912 kbdhid - ok 15:49:59.0468 2912 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 15:49:59.0656 2912 kmixer - ok 15:49:59.0765 2912 KSecDD (1705745d900dabf2d89f90ebaddc7517) C:\WINDOWS\system32\drivers\KSecDD.sys 15:49:59.0968 2912 KSecDD - ok 15:49:59.0984 2912 lbrtfdc - ok 15:50:00.0046 2912 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 15:50:00.0218 2912 mnmdd - ok 15:50:00.0328 2912 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 15:50:00.0500 2912 Modem - ok 15:50:00.0578 2912 Monfilt (c7d9f9717916b34c1b00dd4834af485c) C:\WINDOWS\system32\drivers\Monfilt.sys 15:50:00.0640 2912 Monfilt - ok 15:50:00.0718 2912 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 15:50:00.0921 2912 Mouclass - ok 15:50:00.0953 2912 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 15:50:01.0218 2912 mouhid - ok 15:50:01.0312 2912 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 15:50:01.0500 2912 MountMgr - ok 15:50:01.0515 2912 mraid35x - ok 15:50:01.0531 2912 MRxDAV (0a25b866933d126d1e831fd025a278c2) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 15:50:01.0546 2912 MRxDAV - ok 15:50:01.0593 2912 MRxSmb (7170ab42b51954def2781a4d1cce65f4) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 15:50:01.0625 2912 MRxSmb - ok 15:50:01.0640 2912 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 15:50:01.0828 2912 Msfs - ok 15:50:01.0875 2912 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 15:50:02.0046 2912 MSKSSRV - ok 15:50:02.0109 2912 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 15:50:02.0312 2912 MSPCLOCK - ok 15:50:02.0328 2912 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 15:50:02.0546 2912 MSPQM - ok 15:50:02.0578 2912 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 15:50:02.0781 2912 mssmbios - ok 15:50:02.0828 2912 Mup (6546fe6639499fa4bef180bdf08266a1) C:\WINDOWS\system32\drivers\Mup.sys 15:50:02.0843 2912 Mup - ok 15:50:02.0875 2912 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 15:50:03.0046 2912 NDIS - ok 15:50:03.0093 2912 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 15:50:03.0296 2912 NdisTapi - ok 15:50:03.0343 2912 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 15:50:03.0562 2912 Ndisuio - ok 15:50:03.0625 2912 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 15:50:03.0953 2912 NdisWan - ok 15:50:03.0984 2912 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys 15:50:04.0265 2912 NDProxy - ok 15:50:04.0296 2912 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 15:50:04.0500 2912 NetBIOS - ok 15:50:04.0562 2912 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 15:50:04.0765 2912 NetBT - ok 15:50:04.0812 2912 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 15:50:05.0015 2912 Npfs - ok 15:50:05.0078 2912 Ntfs (4c51d5275ae8a16999edfe7e647d00de) C:\WINDOWS\system32\drivers\Ntfs.sys 15:50:05.0093 2912 Ntfs - ok 15:50:05.0187 2912 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 15:50:05.0359 2912 Null - ok 15:50:05.0687 2912 nv (8b2c874897ea498da012284e12f9db2b) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 15:50:06.0218 2912 nv - ok 15:50:06.0312 2912 NVENETFD (a12ec731bb00adad2d016d41c1f18fa4) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys 15:50:06.0328 2912 NVENETFD - ok 15:50:06.0375 2912 nvgts (619d8943725402d1179941fd58574cc8) C:\WINDOWS\system32\DRIVERS\nvgts.sys 15:50:06.0390 2912 nvgts - ok 15:50:06.0406 2912 nvnetbus (5dc6a149897820de315916b6ec984ec9) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys 15:50:06.0421 2912 nvnetbus - ok 15:50:06.0593 2912 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 15:50:06.0859 2912 NwlnkFlt - ok 15:50:06.0890 2912 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 15:50:07.0187 2912 NwlnkFwd - ok 15:50:07.0250 2912 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 15:50:07.0546 2912 Parport - ok 15:50:07.0640 2912 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 15:50:07.0953 2912 PartMgr - ok 15:50:08.0000 2912 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 15:50:08.0171 2912 ParVdm - ok 15:50:08.0203 2912 pavboot (55d654258a9c509b671310c314bd30b4) C:\WINDOWS\system32\Drivers\pavboot.sys 15:50:08.0218 2912 pavboot - ok 15:50:08.0265 2912 PavProc (a110035fdc4b8f8f0cd5e71d031274e1) C:\WINDOWS\system32\DRIVERS\PavProc.sys 15:50:08.0281 2912 PavProc - ok 15:50:08.0343 2912 PavTPK.sys - ok 15:50:08.0375 2912 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 15:50:08.0593 2912 PCI - ok 15:50:08.0609 2912 PCIDump - ok 15:50:08.0625 2912 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 15:50:08.0859 2912 PCIIde - ok 15:50:08.0953 2912 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 15:50:09.0140 2912 Pcmcia - ok 15:50:09.0156 2912 PDCOMP - ok 15:50:09.0171 2912 PDFRAME - ok 15:50:09.0187 2912 PDRELI - ok 15:50:09.0203 2912 PDRFRAME - ok 15:50:09.0218 2912 perc2 - ok 15:50:09.0234 2912 perc2hib - ok 15:50:09.0296 2912 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 15:50:09.0468 2912 PptpMiniport - ok 15:50:09.0500 2912 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys 15:50:09.0687 2912 Processor - ok 15:50:09.0703 2912 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 15:50:09.0890 2912 PSched - ok 15:50:09.0937 2912 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 15:50:10.0109 2912 Ptilink - ok 15:50:10.0156 2912 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys 15:50:10.0171 2912 PxHelp20 - ok 15:50:10.0203 2912 ql1080 - ok 15:50:10.0218 2912 Ql10wnt - ok 15:50:10.0234 2912 ql12160 - ok 15:50:10.0250 2912 ql1240 - ok 15:50:10.0265 2912 ql1280 - ok 15:50:10.0281 2912 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 15:50:10.0484 2912 RasAcd - ok 15:50:10.0531 2912 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 15:50:10.0718 2912 Rasl2tp - ok 15:50:10.0750 2912 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 15:50:10.0968 2912 RasPppoe - ok 15:50:11.0000 2912 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 15:50:11.0171 2912 Raspti - ok 15:50:11.0250 2912 Rdbss (77050c6615f6eb5402f832b27fd695e0) C:\WINDOWS\system32\DRIVERS\rdbss.sys 15:50:11.0281 2912 Rdbss - ok 15:50:11.0343 2912 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 15:50:11.0593 2912 RDPCDD - ok 15:50:11.0640 2912 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 15:50:11.0843 2912 rdpdr - ok 15:50:11.0953 2912 RDPWD (e8e3107243b16a549b88d145ec051b06) C:\WINDOWS\system32\drivers\RDPWD.sys 15:50:11.0968 2912 RDPWD - ok 15:50:12.0015 2912 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 15:50:12.0187 2912 redbook - ok 15:50:12.0296 2912 rspndr (743d7d59767073a617b1dcc6c546f234) C:\WINDOWS\system32\DRIVERS\rspndr.sys 15:50:12.0312 2912 rspndr - ok 15:50:12.0375 2912 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 15:50:12.0437 2912 Secdrv - ok 15:50:12.0468 2912 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 15:50:12.0656 2912 serenum - ok 15:50:12.0703 2912 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 15:50:12.0875 2912 Serial - ok 15:50:12.0921 2912 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 15:50:13.0109 2912 Sfloppy - ok 15:50:13.0156 2912 ShldDrv (32d6f7632234f0354c79e915ca4613d4) C:\WINDOWS\system32\Drivers\ShlDrv51.sys 15:50:13.0171 2912 ShldDrv - ok 15:50:13.0171 2912 Simbad - ok 15:50:13.0218 2912 Sparrow - ok 15:50:13.0250 2912 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 15:50:13.0437 2912 splitter - ok 15:50:13.0546 2912 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 15:50:13.0609 2912 sr - ok 15:50:13.0656 2912 Srv (ae4d13b572399b206b43d65da4d9983d) C:\WINDOWS\system32\DRIVERS\srv.sys 15:50:13.0687 2912 Srv - ok 15:50:13.0734 2912 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 15:50:13.0906 2912 swenum - ok 15:50:14.0000 2912 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 15:50:14.0187 2912 swmidi - ok 15:50:14.0203 2912 symc810 - ok 15:50:14.0218 2912 symc8xx - ok 15:50:14.0234 2912 sym_hi - ok 15:50:14.0250 2912 sym_u3 - ok 15:50:14.0265 2912 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 15:50:14.0453 2912 sysaudio - ok 15:50:14.0500 2912 Tcpip (5ae1c2695f6523ad98b948f2887d8c5e) C:\WINDOWS\system32\DRIVERS\tcpip.sys 15:50:14.0546 2912 Tcpip ( UnsignedFile.Multi.Generic ) - warning 15:50:14.0546 2912 Tcpip - detected UnsignedFile.Multi.Generic (1) 15:50:14.0625 2912 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 15:50:14.0859 2912 TDPIPE - ok 15:50:14.0890 2912 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 15:50:15.0078 2912 TDTCP - ok 15:50:15.0109 2912 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 15:50:15.0281 2912 TermDD - ok 15:50:15.0296 2912 TosIde - ok 15:50:15.0328 2912 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 15:50:15.0500 2912 Udfs - ok 15:50:15.0515 2912 ultra - ok 15:50:15.0562 2912 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 15:50:15.0843 2912 Update - ok 15:50:15.0906 2912 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 15:50:16.0093 2912 usbccgp - ok 15:50:16.0140 2912 usbehci (152ee0baa614388273a0b9ae9c9fd5a0) C:\WINDOWS\system32\DRIVERS\usbehci.sys 15:50:16.0156 2912 usbehci - ok 15:50:16.0187 2912 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 15:50:16.0343 2912 usbhub - ok 15:50:16.0375 2912 usbohci (c5e11cd822adf0019a5a862d9c4e2222) C:\WINDOWS\system32\DRIVERS\usbohci.sys 15:50:16.0390 2912 usbohci - ok 15:50:16.0468 2912 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 15:50:16.0703 2912 USBSTOR - ok 15:50:16.0781 2912 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 15:50:16.0953 2912 VgaSave - ok 15:50:16.0968 2912 ViaIde - ok 15:50:17.0000 2912 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 15:50:17.0156 2912 VolSnap - ok 15:50:17.0203 2912 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 15:50:17.0390 2912 Wanarp - ok 15:50:17.0437 2912 WDICA - ok 15:50:17.0484 2912 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 15:50:17.0671 2912 wdmaud - ok 15:50:17.0765 2912 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 15:50:17.0781 2912 WpdUsb - ok 15:50:17.0843 2912 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 15:50:18.0000 2912 WS2IFSL - ok 15:50:18.0031 2912 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 15:50:18.0062 2912 WudfPf - ok 15:50:18.0109 2912 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 15:50:18.0125 2912 WudfRd - ok 15:50:18.0171 2912 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0 15:50:18.0406 2912 \Device\Harddisk0\DR0 - ok 15:50:18.0406 2912 Boot (0x1200) (7724ff2b77411404b92fb4d9ae2bd8fb) \Device\Harddisk0\DR0\Partition0 15:50:18.0421 2912 \Device\Harddisk0\DR0\Partition0 - ok 15:50:18.0421 2912 Boot (0x1200) (6c8181126918a39ea55692d305a26c19) \Device\Harddisk0\DR0\Partition1 15:50:18.0421 2912 \Device\Harddisk0\DR0\Partition1 - ok 15:50:18.0421 2912 ============================================================ 15:50:18.0421 2912 Scan finished 15:50:18.0421 2912 ============================================================ 15:50:18.0546 2156 Detected object count: 1 15:50:18.0546 2156 Actual detected object count: 1 15:50:28.0984 2156 Tcpip ( UnsignedFile.Multi.Generic ) - skipped by user 15:50:28.0984 2156 Tcpip ( UnsignedFile.Multi.Generic ) - User select action: Skip 15:50:55.0281 3292 ============================================================ 15:50:55.0281 3292 Scan started 15:50:55.0281 3292 Mode: Manual; SigCheck; TDLFS; 15:50:55.0281 3292 ============================================================ 15:50:55.0640 3292 Abiosdsk - ok 15:50:55.0656 3292 abp480n5 - ok 15:50:55.0671 3292 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 15:50:55.0890 3292 ACPI - ok 15:50:55.0937 3292 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 15:50:56.0203 3292 ACPIEC - ok 15:50:56.0296 3292 adpu160m - ok 15:50:56.0359 3292 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 15:50:56.0500 3292 aec - ok 15:50:56.0562 3292 AFD (38d7b715504da4741df35e3594fe2099) C:\WINDOWS\System32\drivers\afd.sys 15:50:56.0609 3292 AFD - ok 15:50:56.0687 3292 Aha154x - ok 15:50:56.0765 3292 aic78u2 - ok 15:50:56.0796 3292 aic78xx - ok 15:50:56.0828 3292 AliIde - ok 15:50:56.0906 3292 Ambfilt (267fc636801edc5ab28e14036349e3be) C:\WINDOWS\system32\drivers\Ambfilt.sys 15:50:57.0015 3292 Ambfilt - ok 15:50:57.0031 3292 AmdK8 - ok 15:50:57.0078 3292 AmFSM (ef9dd27aa5a3baaf2fd2b44c08a3e622) C:\WINDOWS\system32\DRIVERS\amm8651.sys 15:50:57.0078 3292 AmFSM - ok 15:50:57.0140 3292 amsint - ok 15:50:57.0156 3292 archlp - ok 15:50:57.0171 3292 asc - ok 15:50:57.0187 3292 asc3350p - ok 15:50:57.0203 3292 asc3550 - ok 15:50:57.0250 3292 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 15:50:57.0468 3292 AsyncMac - ok 15:50:57.0484 3292 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 15:50:57.0640 3292 atapi - ok 15:50:57.0656 3292 Atdisk - ok 15:50:57.0671 3292 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 15:50:57.0828 3292 Atmarpc - ok 15:50:57.0859 3292 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 15:50:58.0031 3292 audstub - ok 15:50:58.0125 3292 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 15:50:58.0296 3292 Beep - ok 15:50:58.0312 3292 catchme - ok 15:50:58.0343 3292 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 15:50:58.0515 3292 cbidf2k - ok 15:50:58.0531 3292 cd20xrnt - ok 15:50:58.0546 3292 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 15:50:58.0703 3292 Cdaudio - ok 15:50:58.0750 3292 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 15:50:58.0906 3292 Cdfs - ok 15:50:58.0984 3292 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys 15:50:59.0015 3292 Cdrom - ok 15:50:59.0031 3292 Changer - ok 15:50:59.0046 3292 CmdIde - ok 15:50:59.0078 3292 Cpqarray - ok 15:50:59.0093 3292 dac2w2k - ok 15:50:59.0093 3292 dac960nt - ok 15:50:59.0125 3292 Disk (47b6aaec570f2c11d8bad80a064d8ed1) C:\WINDOWS\system32\DRIVERS\disk.sys 15:50:59.0140 3292 Disk - ok 15:50:59.0203 3292 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 15:50:59.0375 3292 dmboot - ok 15:50:59.0453 3292 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 15:50:59.0640 3292 dmio - ok 15:50:59.0671 3292 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 15:50:59.0812 3292 dmload - ok 15:50:59.0859 3292 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 15:51:00.0015 3292 DMusic - ok 15:51:00.0093 3292 dpti2o - ok 15:51:00.0093 3292 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 15:51:00.0250 3292 drmkaud - ok 15:51:00.0281 3292 dtsoftbus01 (c0c7ceccb6c85994c2bc92d58e52d3f2) C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys 15:51:00.0296 3292 dtsoftbus01 - ok 15:51:00.0359 3292 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 15:51:00.0531 3292 Fastfat - ok 15:51:00.0609 3292 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 15:51:00.0765 3292 Fdc - ok 15:51:00.0812 3292 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 15:51:00.0968 3292 Fips - ok 15:51:01.0015 3292 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys 15:51:01.0187 3292 Flpydisk - ok 15:51:01.0250 3292 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys 15:51:01.0406 3292 FltMgr - ok 15:51:01.0437 3292 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 15:51:01.0578 3292 Fs_Rec - ok 15:51:01.0609 3292 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 15:51:01.0875 3292 Ftdisk - ok 15:51:01.0921 3292 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 15:51:02.0109 3292 Gpc - ok 15:51:02.0171 3292 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 15:51:02.0312 3292 HDAudBus - ok 15:51:02.0359 3292 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 15:51:02.0515 3292 hidusb - ok 15:51:02.0562 3292 hpn - ok 15:51:02.0578 3292 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:\WINDOWS\system32\Drivers\HTTP.sys 15:51:02.0750 3292 HTTP - ok 15:51:02.0765 3292 i2omgmt - ok 15:51:02.0765 3292 i2omp - ok 15:51:02.0781 3292 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 15:51:03.0031 3292 i8042prt - ok 15:51:03.0062 3292 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 15:51:03.0234 3292 Imapi - ok 15:51:03.0312 3292 ini910u - ok 15:51:03.0546 3292 IntcAzAudAddService (5d138adc44c43bf37634c8e528d75b1f) C:\WINDOWS\system32\drivers\RtkHDAud.sys 15:51:03.0953 3292 IntcAzAudAddService - ok 15:51:04.0046 3292 IntelIde - ok 15:51:04.0078 3292 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys 15:51:04.0250 3292 Ip6Fw - ok 15:51:04.0281 3292 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 15:51:04.0546 3292 IpFilterDriver - ok 15:51:04.0640 3292 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 15:51:04.0765 3292 IpInIp - ok 15:51:04.0796 3292 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 15:51:04.0937 3292 IpNat - ok 15:51:04.0968 3292 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 15:51:05.0109 3292 IPSec - ok 15:51:05.0140 3292 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 15:51:05.0218 3292 IRENUM - ok 15:51:05.0296 3292 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 15:51:05.0437 3292 isapnp - ok 15:51:05.0468 3292 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 15:51:05.0609 3292 Kbdclass - ok 15:51:05.0625 3292 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 15:51:05.0765 3292 kbdhid - ok 15:51:05.0796 3292 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 15:51:05.0953 3292 kmixer - ok 15:51:05.0984 3292 KSecDD (1705745d900dabf2d89f90ebaddc7517) C:\WINDOWS\system32\drivers\KSecDD.sys 15:51:06.0140 3292 KSecDD - ok 15:51:06.0171 3292 lbrtfdc - ok 15:51:06.0234 3292 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 15:51:06.0406 3292 mnmdd - ok 15:51:06.0515 3292 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 15:51:06.0734 3292 Modem - ok 15:51:06.0796 3292 Monfilt (c7d9f9717916b34c1b00dd4834af485c) C:\WINDOWS\system32\drivers\Monfilt.sys 15:51:06.0859 3292 Monfilt - ok 15:51:06.0937 3292 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 15:51:07.0109 3292 Mouclass - ok 15:51:07.0140 3292 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 15:51:07.0296 3292 mouhid - ok 15:51:07.0390 3292 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 15:51:07.0546 3292 MountMgr - ok 15:51:07.0562 3292 mraid35x - ok 15:51:07.0578 3292 MRxDAV (0a25b866933d126d1e831fd025a278c2) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 15:51:07.0593 3292 MRxDAV - ok 15:51:07.0640 3292 MRxSmb (7170ab42b51954def2781a4d1cce65f4) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 15:51:07.0671 3292 MRxSmb - ok 15:51:07.0687 3292 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 15:51:07.0812 3292 Msfs - ok 15:51:07.0859 3292 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 15:51:08.0015 3292 MSKSSRV - ok 15:51:08.0046 3292 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 15:51:08.0203 3292 MSPCLOCK - ok 15:51:08.0218 3292 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 15:51:08.0375 3292 MSPQM - ok 15:51:08.0421 3292 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 15:51:08.0546 3292 mssmbios - ok 15:51:08.0562 3292 Mup (6546fe6639499fa4bef180bdf08266a1) C:\WINDOWS\system32\drivers\Mup.sys 15:51:08.0578 3292 Mup - ok 15:51:08.0609 3292 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 15:51:08.0750 3292 NDIS - ok 15:51:08.0828 3292 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 15:51:08.0984 3292 NdisTapi - ok 15:51:09.0031 3292 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 15:51:09.0171 3292 Ndisuio - ok 15:51:09.0187 3292 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 15:51:09.0328 3292 NdisWan - ok 15:51:09.0359 3292 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys 15:51:09.0500 3292 NDProxy - ok 15:51:09.0578 3292 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 15:51:09.0734 3292 NetBIOS - ok 15:51:09.0765 3292 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 15:51:09.0953 3292 NetBT - ok 15:51:10.0000 3292 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 15:51:10.0140 3292 Npfs - ok 15:51:10.0234 3292 Ntfs (4c51d5275ae8a16999edfe7e647d00de) C:\WINDOWS\system32\drivers\Ntfs.sys 15:51:10.0250 3292 Ntfs - ok 15:51:10.0296 3292 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 15:51:10.0453 3292 Null - ok 15:51:10.0796 3292 nv (8b2c874897ea498da012284e12f9db2b) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 15:51:11.0250 3292 nv - ok 15:51:11.0390 3292 NVENETFD (a12ec731bb00adad2d016d41c1f18fa4) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys 15:51:11.0500 3292 NVENETFD - ok 15:51:11.0531 3292 nvgts (619d8943725402d1179941fd58574cc8) C:\WINDOWS\system32\DRIVERS\nvgts.sys 15:51:11.0546 3292 nvgts - ok 15:51:11.0562 3292 nvnetbus (5dc6a149897820de315916b6ec984ec9) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys 15:51:11.0593 3292 nvnetbus - ok 15:51:11.0671 3292 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 15:51:11.0875 3292 NwlnkFlt - ok 15:51:11.0875 3292 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 15:51:12.0031 3292 NwlnkFwd - ok 15:51:12.0078 3292 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 15:51:12.0250 3292 Parport - ok 15:51:12.0296 3292 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 15:51:12.0453 3292 PartMgr - ok 15:51:12.0500 3292 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 15:51:12.0656 3292 ParVdm - ok 15:51:12.0687 3292 pavboot (55d654258a9c509b671310c314bd30b4) C:\WINDOWS\system32\Drivers\pavboot.sys 15:51:12.0703 3292 pavboot - ok 15:51:12.0734 3292 PavProc (a110035fdc4b8f8f0cd5e71d031274e1) C:\WINDOWS\system32\DRIVERS\PavProc.sys 15:51:12.0750 3292 PavProc - ok 15:51:12.0843 3292 PavTPK.sys - ok 15:51:12.0859 3292 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 15:51:13.0015 3292 PCI - ok 15:51:13.0031 3292 PCIDump - ok 15:51:13.0125 3292 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 15:51:13.0359 3292 PCIIde - ok 15:51:13.0390 3292 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 15:51:13.0562 3292 Pcmcia - ok 15:51:13.0640 3292 PDCOMP - ok 15:51:13.0656 3292 PDFRAME - ok 15:51:13.0671 3292 PDRELI - ok 15:51:13.0687 3292 PDRFRAME - ok 15:51:13.0703 3292 perc2 - ok 15:51:13.0703 3292 perc2hib - ok 15:51:13.0750 3292 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 15:51:13.0937 3292 PptpMiniport - ok 15:51:13.0984 3292 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys 15:51:14.0156 3292 Processor - ok 15:51:14.0203 3292 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 15:51:14.0359 3292 PSched - ok 15:51:14.0390 3292 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 15:51:14.0531 3292 Ptilink - ok 15:51:14.0625 3292 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys 15:51:14.0640 3292 PxHelp20 - ok 15:51:14.0640 3292 ql1080 - ok 15:51:14.0656 3292 Ql10wnt - ok 15:51:14.0671 3292 ql12160 - ok 15:51:14.0687 3292 ql1240 - ok 15:51:14.0703 3292 ql1280 - ok 15:51:14.0718 3292 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 15:51:14.0875 3292 RasAcd - ok 15:51:14.0921 3292 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 15:51:15.0125 3292 Rasl2tp - ok 15:51:15.0218 3292 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 15:51:15.0375 3292 RasPppoe - ok 15:51:15.0390 3292 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 15:51:15.0546 3292 Raspti - ok 15:51:15.0578 3292 Rdbss (77050c6615f6eb5402f832b27fd695e0) C:\WINDOWS\system32\DRIVERS\rdbss.sys 15:51:15.0609 3292 Rdbss - ok 15:51:15.0718 3292 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 15:51:15.0843 3292 RDPCDD - ok 15:51:15.0890 3292 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 15:51:16.0031 3292 rdpdr - ok 15:51:16.0109 3292 RDPWD (e8e3107243b16a549b88d145ec051b06) C:\WINDOWS\system32\drivers\RDPWD.sys 15:51:16.0125 3292 RDPWD - ok 15:51:16.0187 3292 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 15:51:16.0343 3292 redbook - ok 15:51:16.0406 3292 rspndr (743d7d59767073a617b1dcc6c546f234) C:\WINDOWS\system32\DRIVERS\rspndr.sys 15:51:16.0421 3292 rspndr - ok 15:51:16.0500 3292 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 15:51:16.0578 3292 Secdrv - ok 15:51:16.0609 3292 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 15:51:16.0781 3292 serenum - ok 15:51:16.0812 3292 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 15:51:16.0953 3292 Serial - ok 15:51:16.0984 3292 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 15:51:17.0125 3292 Sfloppy - ok 15:51:17.0187 3292 ShldDrv (32d6f7632234f0354c79e915ca4613d4) C:\WINDOWS\system32\Drivers\ShlDrv51.sys 15:51:17.0203 3292 ShldDrv - ok 15:51:17.0203 3292 Simbad - ok 15:51:17.0250 3292 Sparrow - ok 15:51:17.0296 3292 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 15:51:17.0437 3292 splitter - ok 15:51:17.0500 3292 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 15:51:17.0578 3292 sr - ok 15:51:17.0625 3292 Srv (ae4d13b572399b206b43d65da4d9983d) C:\WINDOWS\system32\DRIVERS\srv.sys 15:51:17.0671 3292 Srv - ok 15:51:17.0687 3292 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 15:51:17.0843 3292 swenum - ok 15:51:17.0906 3292 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 15:51:18.0046 3292 swmidi - ok 15:51:18.0078 3292 symc810 - ok 15:51:18.0093 3292 symc8xx - ok 15:51:18.0109 3292 sym_hi - ok 15:51:18.0125 3292 sym_u3 - ok 15:51:18.0140 3292 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 15:51:18.0296 3292 sysaudio - ok 15:51:18.0359 3292 Tcpip (5ae1c2695f6523ad98b948f2887d8c5e) C:\WINDOWS\system32\DRIVERS\tcpip.sys 15:51:18.0390 3292 Tcpip ( UnsignedFile.Multi.Generic ) - warning 15:51:18.0390 3292 Tcpip - detected UnsignedFile.Multi.Generic (1) 15:51:18.0437 3292 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 15:51:18.0578 3292 TDPIPE - ok 15:51:18.0593 3292 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 15:51:18.0718 3292 TDTCP - ok 15:51:18.0765 3292 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 15:51:18.0890 3292 TermDD - ok 15:51:18.0937 3292 TosIde - ok 15:51:18.0968 3292 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 15:51:19.0125 3292 Udfs - ok 15:51:19.0125 3292 ultra - ok 15:51:19.0171 3292 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 15:51:19.0312 3292 Update - ok 15:51:19.0406 3292 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 15:51:19.0562 3292 usbccgp - ok 15:51:19.0593 3292 usbehci (152ee0baa614388273a0b9ae9c9fd5a0) C:\WINDOWS\system32\DRIVERS\usbehci.sys 15:51:19.0609 3292 usbehci - ok 15:51:19.0625 3292 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 15:51:19.0765 3292 usbhub - ok 15:51:19.0781 3292 usbohci (c5e11cd822adf0019a5a862d9c4e2222) C:\WINDOWS\system32\DRIVERS\usbohci.sys 15:51:19.0796 3292 usbohci - ok 15:51:19.0859 3292 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 15:51:20.0000 3292 USBSTOR - ok 15:51:20.0046 3292 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 15:51:20.0187 3292 VgaSave - ok 15:51:20.0203 3292 ViaIde - ok 15:51:20.0234 3292 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 15:51:20.0375 3292 VolSnap - ok 15:51:20.0437 3292 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 15:51:20.0578 3292 Wanarp - ok 15:51:20.0609 3292 WDICA - ok 15:51:20.0640 3292 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 15:51:20.0781 3292 wdmaud - ok 15:51:20.0890 3292 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 15:51:20.0921 3292 WpdUsb - ok 15:51:21.0015 3292 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 15:51:21.0203 3292 WS2IFSL - ok 15:51:21.0234 3292 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 15:51:21.0281 3292 WudfPf - ok 15:51:21.0328 3292 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 15:51:21.0343 3292 WudfRd - ok 15:51:21.0375 3292 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0 15:51:21.0640 3292 \Device\Harddisk0\DR0 - ok 15:51:21.0656 3292 Boot (0x1200) (7724ff2b77411404b92fb4d9ae2bd8fb) \Device\Harddisk0\DR0\Partition0 15:51:21.0656 3292 \Device\Harddisk0\DR0\Partition0 - ok 15:51:21.0687 3292 Boot (0x1200) (6c8181126918a39ea55692d305a26c19) \Device\Harddisk0\DR0\Partition1 15:51:21.0687 3292 \Device\Harddisk0\DR0\Partition1 - ok 15:51:21.0687 3292 ============================================================ 15:51:21.0687 3292 Scan finished 15:51:21.0687 3292 ============================================================ 15:51:21.0703 3936 Detected object count: 1 15:51:21.0703 3936 Actual detected object count: 1 15:51:40.0109 3936 Tcpip ( UnsignedFile.Multi.Generic ) - skipped by user 15:51:40.0109 3936 Tcpip ( UnsignedFile.Multi.Generic ) - User select action: Skip 15:51:48.0109 3904 Deinitialize success TDSSKiller oktri zaraza no nqmashe Cure ....

Сега задължително следват:

Изтеглете Malwarebytes' Anti-Malware или от тук

* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.

* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.

* Ако има намерени обновявания, тя ще ги изтегли и инсталира.

* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.

* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.

* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.

* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.

* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. Копирайте този лог и го публикувайте в следващия си коментар по темата.

Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

Изтеглете програмата: ESET Online Scanner

• Стартирайте esetsmartinstaller_enu.exe
• Сложете отметка на YES, I accept the Terms of Use и изберете Start:

  

• Скенерът ще започне да изтегля компонентите, които са му необходими:

  

• Уверете се, че има отметки на следните редове:

  

  Накрая изберете Start

• Скенерът ще започне да изтегля последните дефиниции.
• След, като сканирането завърши изберете Finish.
• Отидете в: C:\Program Files\ESET\ESET Online Scanner
• Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си коментар.

Malwarebytes Anti-Malware (Trial) 1.60.0.1800 www.malwarebytes.org Database version: v2012.01.11.05 Windows XP Service Pack 3 x86 NTFS Internet Explorer 7.0.5730.13 cxcxcxcxcxcx :: SVETLIO [administrator] Protection: Enabled 1/11/2012 4:33:29 PM mbam-log-2012-01-11 (16-33-29).txt Scan type: Full scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 222378 Time elapsed: 25 minute(s), 33 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 5 C:\Program Files\Datecs\FlexType 2K\Remove.exe (Trojan.FakeAlert.SecGen) -> Quarantined and deleted successfully. D:\instal\RemoveWGA.exe (PUP.RemoveWGA) -> Quarantined and deleted successfully. D:\instal\VideoConverterSetup.exe (Adware.Agent) -> Quarantined and deleted successfully. D:\instal\Winamp 5.62 PRO\Winamp.5.50_KEYGEN-FFF.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{F5FEFC08-07BD-4F94-A742-492ABF16436C}\RP166\A0029191.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully. (end) ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6583 # api_version=3.0.2 # EOSSerial=fbfdcf2c02d4c046a054fa3dcfe91203 # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2012-01-11 03:52:55 # local_time=2012-01-11 05:52:55 (+0200, FLE Standard Time) # country="Bulgaria" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=768 16777215 100 0 0 0 0 0 # compatibility_mode=1536 16777175 100 0 520944 520944 0 0 # compatibility_mode=8192 67108863 100 0 4047 4047 0 0 # scanned=38419 # found=1 # cleaned=1 # scan_time=2522 D:\instal\SoftonicDownloader_for_directx.exe a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

Изтеглете SystemLook и запазете програмата на десктопа.

• Кликнете два пъти върху SystemLook.exe, за да стартирате програмата.
• Копирайте съдържанието на кода по-долу в текстовото поле на програмата:

:filefind

tcpip.sys

• Кликнете на бутона Look, за да започне сканирането.
• Когато сканирането завърши ще се отвори Notepad с резултата от сканирането. После публикувайте лог файла в следващия си коментар.

SystemLook 30.07.11 by jpshortstuff Log created at 19:17 on 11/01/2012 by cxcxcxcxcxcx Administrator - Elevation successful No Context: :filefind No Context: tcpip.sys -= EOF =-

Eeee много кофти....трябва да заменим системния файл tcpip.sys с читаво копие....ще ни е необходим инсталационен диск..Имате ли такъв...?

в момента не разполагам , но ако е наложително бих потарсил от някой приятел ... толкова ли е зле положението ?

Не не.....просто търся начин да заменя този файл с което предполагам ще се оправи връзката (прекъсванията) към интернет..!

Добре ...!

Стартирайте отново програмата aswMBR и изтеглете най-новите вирусни дефиниции.

Натиснете (Scan)

След завършване на сканирането натиснете (Fix)

Натиснете (Save log),и го запишете на вашия декстоп,след това го публикувайте в следващия си пост

Рестартирайте компютъра си..!

Не не.....просто търся начин да заменя този файл с което предполагам ще се оправи връзката (прекъсванията) към интернет..!

Добре ...!

Стартирайте отново програмата aswMBR и изтеглете най-новите вирусни дефиниции.

Натиснете (Scan)

След завършване на сканирането натиснете (Fix)

Натиснете (Save log),и го запишете на вашия декстоп,след това го публикувайте в следващия си пост

Рестартирайте компютъра си..!

fix nemoje da se natisne da ne stava vapros za fixMBR ??

Може ли да видя лога....! Не предприемай нищо..!

aswMBR version 0.9.9.1297 Copyright© 2011 AVAST Software Run date: 2012-01-11 15:04:58 ----------------------------- 15:04:58.515 OS Version: Windows 5.1.2600 Service Pack 3 15:04:58.515 Number of processors: 1 586 0x7F01 15:04:58.515 ComputerName: SVETLIO UserName: 15:05:00.343 Initialize success 15:14:57.578 AVAST engine defs: 12011100 15:15:34.640 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Scsi\nvgts1Port2Path0Target0Lun0 15:15:34.640 Disk 0 Vendor: ExcelSto GM2O Size: 238475MB BusType: 3 15:15:34.640 Device \Driver\nvgts -> DriverStartIo SCSIPORT.SYS f72aa40e 15:15:34.656 Disk 0 MBR read successfully 15:15:34.656 Disk 0 MBR scan 15:15:34.687 Disk 0 Windows XP default MBR code 15:15:34.687 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 32553 MB offset 63 15:15:34.687 Disk 0 Partition - 00 0F Extended LBA 205911 MB offset 66669750 15:15:34.703 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 205911 MB offset 66669813 15:15:34.703 Disk 0 scanning sectors +488376000 15:15:34.796 Disk 0 scanning C:\WINDOWS\system32\drivers 15:15:42.265 Service scanning 15:15:42.843 Service ShldDrv C:\WINDOWS\C:\WINDOWS\system32\Drivers\ShlDrv51.sys **LOCKED** 123 15:15:43.765 Modules scanning 15:15:51.703 Disk 0 trace - called modules: 15:15:51.718 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll SCSIPORT.SYS nvgts.sys 15:15:51.718 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x84a9cab8] 15:15:51.734 3 CLASSPNP.SYS[f74d7fd7] -> nt!IofCallDriver -> \Device\00000064[0x84a9c920] 15:15:51.734 5 ACPI.sys[f735e620] -> nt!IofCallDriver -> \Device\Scsi\nvgts1Port2Path0Target0Lun0[0x84a37a38] 15:15:52.000 AVAST engine scan C:\ 15:33:23.343 File: C:\System Volume Information\_restore{F5FEFC08-07BD-4F94-A742-492ABF16436C}\RP169\A0030763.exe **INFECTED** Win32:Rootkit-gen [Rtk] 15:33:24.359 File: C:\System Volume Information\_restore{F5FEFC08-07BD-4F94-A742-492ABF16436C}\RP169\A0030774.exe **INFECTED** Win32:Rootkit-gen [Rtk] 15:33:31.218 File: C:\System Volume Information\_restore{F5FEFC08-07BD-4F94-A742-492ABF16436C}\RP170\A0030855.exe **INFECTED** Win32:Rootkit-gen [Rtk] 15:40:02.421 File: C:\WINDOWS\PEV.exe **INFECTED** Win32:Rootkit-gen [Rtk] 15:48:58.187 Scan finished successfully 15:49:06.515 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\cxcxcxcxcxcx\Desktop\MBR.dat" 15:49:06.515 The log file has been saved successfully to "C:\Documents and Settings\cxcxcxcxcxcx\Desktop\aswMBR.txt" aswMBR version 0.9.9.1297 Copyright© 2011 AVAST Software Run date: 2012-01-11 20:00:36 ----------------------------- 20:00:36.500 OS Version: Windows 5.1.2600 Service Pack 3 20:00:36.500 Number of processors: 1 586 0x7F01 20:00:36.500 ComputerName: SVETLIO UserName: 20:00:37.109 Initialize success 20:00:52.343 AVAST engine defs: 12011100 20:01:08.562 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Scsi\nvgts1Port2Path0Target0Lun0 20:01:08.562 Disk 0 Vendor: ExcelSto GM2O Size: 238475MB BusType: 3 20:01:08.562 Device \Driver\nvgts -> DriverStartIo SCSIPORT.SYS f72aa40e 20:01:08.578 Disk 0 MBR read successfully 20:01:08.578 Disk 0 MBR scan 20:01:08.656 Disk 0 Windows XP default MBR code 20:01:08.656 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 32553 MB offset 63 20:01:08.656 Disk 0 Partition - 00 0F Extended LBA 205911 MB offset 66669750 20:01:08.671 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 205911 MB offset 66669813 20:01:08.671 Disk 0 scanning sectors +488376000 20:01:08.812 Disk 0 scanning C:\WINDOWS\system32\drivers 20:01:15.218 Service scanning 20:01:15.671 Service ShldDrv C:\WINDOWS\C:\WINDOWS\system32\Drivers\ShlDrv51.sys **LOCKED** 123 20:01:16.218 Modules scanning 20:01:23.484 Disk 0 trace - called modules: 20:01:23.500 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll SCSIPORT.SYS nvgts.sys 20:01:23.500 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x84a1bab8] 20:01:23.500 3 CLASSPNP.SYS[f74d7fd7] -> nt!IofCallDriver -> \Device\00000065[0x84a1b920] 20:01:23.500 5 ACPI.sys[f735e620] -> nt!IofCallDriver -> \Device\Scsi\nvgts1Port2Path0Target0Lun0[0x84a0fa38] 20:01:23.718 AVAST engine scan C:\ 20:01:32.578 File: C:\ComboFix\pev.3XE **INFECTED** Win32:Rootkit-gen [Rtk] 20:01:32.765 File: C:\ComboFix\PEV.exe **INFECTED** Win32:Rootkit-gen [Rtk] 20:23:01.250 File: C:\System Volume Information\_restore{F5FEFC08-07BD-4F94-A742-492ABF16436C}\RP169\A0030763.exe **INFECTED** Win32:Rootkit-gen [Rtk] 20:23:02.515 File: C:\System Volume Information\_restore{F5FEFC08-07BD-4F94-A742-492ABF16436C}\RP169\A0030774.exe **INFECTED** Win32:Rootkit-gen [Rtk] 20:23:10.156 File: C:\System Volume Information\_restore{F5FEFC08-07BD-4F94-A742-492ABF16436C}\RP170\A0030855.exe **INFECTED** Win32:Rootkit-gen [Rtk] 20:31:43.781 File: C:\WINDOWS\PEV.exe **INFECTED** Win32:Rootkit-gen [Rtk] 20:44:15.156 Scan finished successfully 20:51:30.062 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\cxcxcxcxcxcx\Desktop\MBR.dat" 20:51:30.078 The log file has been saved successfully to "C:\Documents and Settings\cxcxcxcxcxcx\Desktop\aswMBR.txt"

Изтеглете OTL.exe и го запазете на десктопа.

• Стартирайте OTL (ако е необходимо, потвърдете през UAC).
• Направете следните настройки:
• Сложете отметка пред Scan All Users
• Под менюто File Age => изберете 90 days
• Под менюто Standard Registry => променете на ALL
• Сложете отметки пред LOP и Purity Check

Под с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

:Services

:files

autorun.inf /alldrives

autorun.exe /alldrives

recycler /alldrives

ipconfig /flushdns /c

:Commands

[purity]

[emptytemp]

[resethosts]

[clearallrestorepoints]

[emptyflash]

[Reboot]

• Натиснете маркираният в синьо бутон: Run Scan.
• Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt. Прикачете тези два файла в следващия си коментар (погледнете опцията "прикачени файлове", когато публикувате мнение).