Красимир Василев

еееее ще пробвам

Уиндоус XP SP3 ...a къде е папката в Program files ???

Имам един проблем с Chrome последна версия,искам да ми се върне в първоначално състояние,но не знам как .Пробвах с преинстал пак същата работа...моля за помощ!!!!

мерси много за изчерпателният отговор !!!!

от няколко дни ми се вижда този процес !!!!дали е вирус как мислите моля за помощ!!!

и аз имам същите съмнения за аваст ....windows xp sp3 ,2 gb ram това са ми параметрите сега ще дам и скрийн шот един да видите дали е нормално!!!!?????сканирах с МБАМ нищо не открива !!!а сега видях ,че има още един процес който не се вижда!!!!

и сега какво да ползваме ????аз си качих emergensy kit ама като сканирам нищо не открива !!!дайте идея какво да правя ..др.скенер или какво?

OTL Extras logfile created on: 02.6.2010 г. 11:47:45 - Run 3 OTL by OldTimer - Version 3.2.5.2 Folder = D:\Documents and Settings\Krasko\Desktop Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000402 | Country: Bulgaria | Language: BGR | Date Format: dd.M.yyyy 'г.' 2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 78,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 90,00% Paging File free Paging file location(s): D:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files Drive C: | 32,55 Gb Total Space | 24,12 Gb Free Space | 74,10% Space Free | Partition Type: NTFS Drive D: | 44,01 Gb Total Space | 34,76 Gb Free Space | 78,99% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: KRAMANY-AB84636 Current User Name: Krasko Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: On File Age = 30 Days Output = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusOverride" = 0 "FirewallOverride" = 0 "AntiVirusDisableNotify" = 1 "FirewallDisableNotify" = 1 "UpdatesDisableNotify" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "4899:TCP" = 4899:TCP:*:Enabled:re ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "D:\Program Files\uTorrent\uTorrent.exe" = D:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java 6 Update 20 "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.5 "{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Graphics Media Accelerator Driver "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9E1BAB75-EB78-440D-94C0-A3857BE2E733}" = System Requirements Lab "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager "{E590A51C-4303-4A28-99DB-799FE1E25E0D}" = Xmarks for IE "{E63E34A7-E552-412B-9E40-FD6FC5227ABA}_is1" = Uniblue RegistryBooster "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "AntiVir PersonalEdition Classic" = Avira AntiVir Personal - Free Antivirus "CCleaner" = CCleaner "Chicken Invaders 3_is1" = Chicken Invaders 3 "Driver Cleaner Pro" = DH Driver Cleaner Professional Edition "FileHippo.com" = FileHippo.com Update Checker "FlexType 2K" = FlexType 2K "Foxit Reader" = Foxit Reader "ie8" = Windows Internet Explorer 8 "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3) "NVIDIA Drivers" = NVIDIA Drivers "Plants vs. Zombies" = Plants vs. Zombies "Security Task Manager" = Security Task Manager 1.7h "The KMPlayer" = The KMPlayer (remove only) "uTorrent" = µTorrent "WinRAR archiver" = WinRAR archiver "X-Lite 1.5_is1" = X-Lite 3.0 ========== Last 10 Event Log Errors ========== Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report > OTL.Txt Extras.Txt

GMER 1.0.15.15281 - http://www.gmer.net Rootkit scan 2010-06-01 20:47:51 Windows 5.1.2600 Service Pack 3 Running: gmer.exe; Driver: D:\DOCUME~1\Krasko\LOCALS~1\Temp\kgxiqpow.sys ---- System - GMER 1.0.15 ---- SSDT BAE7B684 ZwCreateThread SSDT BAE7B670 ZwOpenProcess SSDT BAE7B675 ZwOpenThread SSDT BAE7B67F ZwTerminateProcess SSDT BAE7B67A ZwWriteVirtualMemory ---- Kernel code sections - GMER 1.0.15 ---- .text D:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xBA060360, 0x240F7E, 0xE8000020] ---- User code sections - GMER 1.0.15 ---- .text D:\Program Files\Internet Explorer\iexplore.exe[3648] USER32.dll!DialogBoxParamW 7E4247AB 5 Bytes JMP 01179315 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3648] USER32.dll!CreateWindowExW 7E42D0A3 5 Bytes JMP 01254832 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3648] USER32.dll!DialogBoxIndirectParamW 7E432072 5 Bytes JMP 0136E021 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3648] USER32.dll!MessageBoxIndirectA 7E43A082 5 Bytes JMP 0136DF51 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3648] USER32.dll!DialogBoxParamA 7E43B144 5 Bytes JMP 0136DFBE D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3648] USER32.dll!MessageBoxExW 7E450838 5 Bytes JMP 0136DE22 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3648] USER32.dll!MessageBoxExA 7E45085C 5 Bytes JMP 0136DE84 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3648] USER32.dll!DialogBoxIndirectParamA 7E456D7D 5 Bytes JMP 0136E084 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3648] USER32.dll!MessageBoxIndirectW 7E4664D5 5 Bytes JMP 0136DEE6 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] USER32.dll!DialogBoxParamW 7E4247AB 5 Bytes JMP 01179315 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] USER32.dll!SetWindowsHookExW 7E42820F 5 Bytes JMP 0124DBCB D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] USER32.dll!CallNextHookEx 7E42B3C6 5 Bytes JMP 0124DD81 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] USER32.dll!CreateWindowExW 7E42D0A3 5 Bytes JMP 01254832 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] USER32.dll!UnhookWindowsHookEx 7E42D5F3 5 Bytes JMP 011B1CA2 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] USER32.dll!DialogBoxIndirectParamW 7E432072 5 Bytes JMP 0136E021 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] USER32.dll!MessageBoxIndirectA 7E43A082 5 Bytes JMP 0136DF51 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] USER32.dll!DialogBoxParamA 7E43B144 5 Bytes JMP 0136DFBE D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] USER32.dll!MessageBoxExW 7E450838 5 Bytes JMP 0136DE22 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] USER32.dll!MessageBoxExA 7E45085C 5 Bytes JMP 0136DE84 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] USER32.dll!DialogBoxIndirectParamA 7E456D7D 5 Bytes JMP 0136E084 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] USER32.dll!MessageBoxIndirectW 7E4664D5 5 Bytes JMP 0136DEE6 D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Program Files\Internet Explorer\iexplore.exe[3832] ole32.dll!CoCreateInstance 7750057E 5 Bytes JMP 0125488E D:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) ---- User IAT/EAT - GMER 1.0.15 ---- IAT D:\Program Files\Internet Explorer\iexplore.exe[3832] @ D:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [009618FD] D:\Program Files\Internet Explorer\xpshims.dll (Internet Explorer Compatibility Shims for XP/Microsoft Corporation) ---- Devices - GMER 1.0.15 ---- AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) ---- EOF - GMER 1.0.15 ----

ето ги резултатите !!!! Results of screen317's Security Check version 0.99.4 Windows XP Service Pack 3 Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: Avira AntiVir Personal - Free Antivirus DefenseWall (remove only) Antivirus up to date! ``````````````````````````````` Anti-malware/Other Utilities Check: Malwarebytes' Anti-Malware CCleaner DH Driver Cleaner Professional Edition Java 6 Update 20 Adobe Flash Player 10.0.45.2 Mozilla Firefox (3.6.3) ```````````````````````````````` Process Check: objlist.exe by Laurent Malwarebytes' Anti-Malware mbamservice.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe ```````````````````````````````` DNS Vulnerability Check: nslookup.exe missing! GREAT! (Not vulnerable to DNS cache poisoning) ``````````End of Log```````````` OTL.Txt Extras.Txt

ето пълно сканиране !!!! mbam-log-2010-05-31 (19-04-22).txt

дава че няма инфекция всичко е чисто....а от какво може да е този рестарт на компа тогава ??? не знам дали споменах че ползвах defensewall personal firewall 3.01 дали може да е от това ???

Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:12:52, on 31.5.2010 г. Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe D:\Program Files\Java\jre6\bin\jqs.exe C:\SOwtware\Malwarebytes' Anti-Malware\mbamservice.exe D:\WINDOWS\system32\nvsvc32.exe D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe D:\WINDOWS\RTHDCPL.EXE D:\WINDOWS\system32\RunDLL32.exe D:\Program Files\Common Files\Java\Java Update\jusched.exe D:\WINDOWS\system32\ctfmon.exe D:\Program Files\Datecs\FlexType 2K\FType2K.exe D:\Program Files\Internet Explorer\iexplore.exe D:\Program Files\Internet Explorer\iexplore.exe D:\WINDOWS\system32\igfxsrvc.exe D:\Program Files\Internet Explorer\iexplore.exe D:\chlt\kaldata.exe.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dir.bg/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - D:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [avgnt] "D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [igfxtray] D:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] D:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] D:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [sunJavaUpdateSched] "D:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\SOwtware\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: FlexType 2K.lnk = D:\Program Files\Datecs\FlexType 2K\FType2K.exe O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - D:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra button: (no name) - {638F11AA-DF27-433b-BA2E-7281CE561D71} - D:\Program Files\Xmarks\IE Extension\xmarkssync.exe (HKCU) O9 - Extra 'Tools' menuitem: Xmarks for IE... - {638F11AA-DF27-433b-BA2E-7281CE561D71} - D:\Program Files\Xmarks\IE Extension\xmarkssync.exe (HKCU) O16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{C108CF2E-A5DB-4890-8135-DDF6CD713CCF}: NameServer = 85.11.144.72,85.11.144.32 O17 - HKLM\System\CCS\Services\Tcpip\..\{CBC5EB06-867A-4570-B678-46061502FDE0}: NameServer = 85.11.144.72 85.11.144.72 O20 - Winlogon Notify: !SASWinLogon - D:\Program Files\SUPERAntiSpyware\SASWINLO.DLL O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\SOwtware\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe O23 - Service: Remote Administrator Service (r_server) - Unknown owner - D:\WINDOWS\system32\r_server.exe (file missing) -- End of file - 6166 bytes ето и др. шот от МБам mbam-log-2010-05-31 (18-03-43).txt

немога да кача лог файла от Hi lack ,значи записвам го в някоя папка например:в C ПЕшо ,преименувам exe на kaldata.exe ...пускам го излиза лог файла и не ми дава да го кача на сайта на калдата .да не би да трябва да променя името на текстовият файл

Значи при мене проблема ми е следният :компа ми е преинсталиран преди 10 дена , а от два дена компа започна да се преинсталира без причина .А преди да го преинаталирам имах тоя вирус където не ти дава да си пуснещ антивирусна ,защитна стена абе с две думи вие знаете за какво става въпрос!!Какво да правя ето шот от МБАм от преди 10 минути. mbam-log-2010-05-31 (17-07-12).txt