Анинфид

Честито!Трябва да се сложи правило което не позволява да се правят конфигурацийте от други магазини !

Тогава защо може да се маха???

Окей, аз казвам това което знам.То може и да е остаряло...ще се поправя.

Ако е развалена няма да я познае лаптопа ,ще държи много малко или ще я разпознава, но няма да работи с нея.

Да...по-добре е да я слагаш само като ще я ползваш.

Колкото си искаш.Веднъж я извадих за 2 седмици и си беше на 100% след това.Когато си на батерия по-добре я ползвай докато се разреди до под 10%, а после я зареди на 100%.

Когато е включен в захранването лаптопа разпределя тока за батерията и за себе си.И когато е на 100% по-добре да я изваждаш и да си оставаш на захранването само.

RELOC.BIN няма нищо NTHEADER.BIN също, а DOSHEADER.BIN е отново същия...

ComboFix 10-04-20.02 - FodoR 04.2010 г. 14:22:59.1.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.1978.1408 [GMT 1:00] Running from: d:\documents and settings\FodoR\My Documents\Downloads\ComboFix.exe AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . f:\recycler\S-1-5-18\Df1\amd64\filterpipelineprintproc.dll f:\recycler\S-1-5-18\Df1\amd64\mxdwdrv.dll f:\recycler\S-1-5-18\Df1\amd64\xpssvcs.dll f:\recycler\S-1-5-18\Df1\i386\filterpipelineprintproc.dll f:\recycler\S-1-5-18\Df1\i386\mxdwdrv.dll f:\recycler\S-1-5-18\Df1\i386\xpssvcs.dll . ((((((((((((((((((((((((( Files Created from 2010-03-21 to 2010-04-21 ))))))))))))))))))))))))))))))) . 2010-04-19 19:37 . 2010-04-19 19:37 -------- d-----w- d:\program files\Trend Micro 2010-04-17 20:43 . 2010-04-17 20:43 -------- d-----w- d:\documents and settings\FodoR\Application Data\Malwarebytes 2010-04-17 20:43 . 2010-03-29 23:46 38224 ----a-w- d:\windows\system32\drivers\mbamswissarmy.sys 2010-04-17 20:43 . 2010-04-17 20:43 -------- d-----w- d:\documents and settings\All Users\Application Data\Malwarebytes 2010-04-17 20:43 . 2010-03-29 23:45 20824 ----a-w- d:\windows\system32\drivers\mbam.sys 2010-04-17 20:43 . 2010-04-17 20:43 -------- d-----w- d:\program files\Malwarebytes' Anti-Malware 2010-04-17 19:34 . 2010-04-17 19:41 -------- d-----w- d:\documents and settings\NetworkService\Application Data\XYplorer 2010-04-17 16:57 . 2010-04-17 16:57 -------- d-----w- d:\program files\Atheros 2010-04-17 16:57 . 2008-06-27 15:40 1315776 ----a-w- d:\windows\system32\drivers\athw.sys 2010-04-17 16:57 . 2008-06-27 15:40 1315776 ----a-w- d:\windows\system32\athw.sys 2010-04-17 16:57 . 2010-04-17 16:57 -------- d-----w- D:\temp 2010-04-17 16:57 . 2007-12-13 16:19 55808 ----a-w- d:\temp\devcon.exe 2010-04-17 16:57 . 2010-04-17 16:57 -------- d-----w- d:\documents and settings\FodoR\Application Data\InstallShield 2010-04-17 15:50 . 2010-04-17 15:50 -------- d-----w- d:\program files\Intel 2010-04-17 15:50 . 2008-02-22 12:06 53248 ----a-w- d:\windows\system32\CSVer.dll 2010-04-17 15:22 . 2010-04-17 15:22 -------- d-----w- d:\windows\system32\LogFiles 2010-04-17 15:20 . 2010-04-17 15:20 -------- d-----w- d:\documents and settings\FodoR\Local Settings\Application Data\Opera 2010-04-17 15:20 . 2010-04-17 15:20 -------- d-----w- d:\program files\Opera 2010-04-17 15:18 . 2008-04-14 09:00 26624 ----a-w- d:\documents and settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll 2010-04-17 15:03 . 2010-04-17 15:25 -------- d-----w- d:\documents and settings\FodoR\Local Settings\Application Data\Google 2010-04-16 21:58 . 2010-04-16 21:58 -------- d-----w- D:\Metallic 2010-04-16 21:58 . 2010-04-16 21:58 -------- d-----w- D:\Homestead 2010-04-16 21:58 . 2010-04-16 21:58 -------- d-----w- D:\Blue 2010-04-16 21:58 . 2010-04-15 19:00 4096 ----a-w- D:\RELOC.BIN 2010-04-16 21:58 . 2010-04-15 19:00 3904 ----a-w- D:\NTHEADER.BIN 2010-04-16 21:58 . 2010-04-15 19:00 192 ----a-w- D:\DOSHEADER.BIN 2010-04-16 19:26 . 2010-04-20 21:29 -------- d-----w- d:\documents and settings\FodoR\Application Data\XYplorer 2010-04-16 19:26 . 2010-04-16 19:26 -------- d-----w- d:\program files\XYplorer 2010-04-16 17:14 . 2010-04-17 09:22 -------- d-----w- d:\documents and settings\FodoR\Application Data\TeamViewer 2010-04-16 17:13 . 2010-04-16 17:13 -------- d-----w- d:\program files\TeamViewer 2010-04-15 18:59 . 2010-04-15 19:00 -------- d-----w- d:\program files\TGTSoft 2010-04-14 20:54 . 2010-04-14 20:54 2328832 ----a-w- d:\windows\system32\TUKernel.exe 2010-04-14 15:49 . 2010-04-14 15:50 -------- d-----w- d:\documents and settings\FodoR\Application Data\Autodesk 2010-04-14 15:47 . 2010-04-14 15:47 -------- d-----w- d:\documents and settings\FodoR\Local Settings\Application Data\Autodesk 2010-04-14 15:39 . 2010-04-14 15:41 -------- d-----w- d:\program files\Common Files\Autodesk Shared 2010-04-14 15:39 . 2010-04-14 15:39 -------- d-----w- d:\documents and settings\All Users\Application Data\Autodesk 2010-04-14 15:39 . 2010-04-14 15:41 -------- d-----w- d:\program files\Autodesk 2010-04-14 15:38 . 2007-05-16 15:45 443752 ----a-w- d:\windows\system32\d3dx10_34.dll 2010-04-14 15:38 . 2007-05-16 15:45 1124720 ----a-w- d:\windows\system32\D3DCompiler_34.dll 2010-04-14 15:38 . 2007-05-16 15:45 3497832 ----a-w- d:\windows\system32\d3dx9_34.dll 2010-04-14 15:38 . 2006-11-29 12:06 3426072 ----a-w- d:\windows\system32\d3dx9_32.dll 2010-04-14 15:38 . 2006-09-28 15:05 2414360 ----a-w- d:\windows\system32\d3dx9_31.dll 2010-04-14 15:28 . 2010-04-14 15:28 -------- d-----w- D:\Autodesk 2010-04-13 18:30 . 2010-04-13 18:30 -------- d-----w- d:\documents and settings\LocalService\Local Settings\Application Data\ESET 2010-04-12 22:38 . 2010-04-12 22:38 -------- d-----w- d:\windows\system32\XPSViewer 2010-04-12 22:38 . 2010-04-12 22:38 -------- d-----w- d:\program files\MSBuild 2010-04-12 22:38 . 2010-04-12 22:38 -------- d-----w- d:\program files\Reference Assemblies 2010-04-12 22:38 . 2008-07-06 12:06 89088 ----a-w- d:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll 2010-04-12 22:38 . 2008-07-06 12:06 89088 -c----w- d:\windows\system32\dllcache\filterpipelineprintproc.dll 2010-04-12 22:38 . 2008-07-06 12:06 575488 -c----w- d:\windows\system32\dllcache\xpsshhdr.dll 2010-04-12 22:38 . 2008-07-06 12:06 575488 ------w- d:\windows\system32\xpsshhdr.dll 2010-04-12 22:38 . 2008-07-06 12:06 1676288 -c----w- d:\windows\system32\dllcache\xpssvcs.dll 2010-04-12 22:38 . 2008-07-06 12:06 1676288 ------w- d:\windows\system32\xpssvcs.dll 2010-04-12 22:38 . 2008-07-06 12:06 117760 ------w- d:\windows\system32\prntvpt.dll 2010-04-12 22:38 . 2008-07-06 10:50 597504 -c----w- d:\windows\system32\dllcache\printfilterpipelinesvc.exe 2010-04-12 22:38 . 2008-07-06 10:50 597504 ------w- d:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe 2010-04-12 17:58 . 2010-04-12 17:58 6144 ----a-w- d:\windows\system32\fonFodor.dll 2010-04-12 17:07 . 2010-04-12 17:07 6144 ----a-w- d:\windows\system32\FodoRlay.dll 2010-04-11 22:36 . 2010-04-11 22:36 -------- d-----w- d:\documents and settings\FodoR\Local Settings\Application Data\Stardock 2010-04-11 22:34 . 2004-06-18 12:07 656542 ----a-w- D:\271_icol.dll 2010-04-11 22:15 . 2010-04-11 22:15 -------- d-----w- d:\windows\system32\wbem\Repository 2010-04-11 16:53 . 2010-04-11 16:58 7915 ----a-w- d:\windows\BricoPackFoldersDelete.cmd 2010-04-11 16:52 . 2010-04-11 16:52 -------- d-----w- d:\windows\BricoPacks 2010-04-11 16:21 . 2010-04-11 16:21 -------- d-----w- D:\Уолпейпъри 2010-04-11 16:16 . 2010-02-25 10:22 30536 ----a-w- d:\windows\system32\TURegOpt.exe 2010-04-11 16:16 . 2010-02-25 10:15 30024 ----a-w- d:\windows\system32\uxtuneup.dll 2010-04-11 16:16 . 2010-04-11 16:16 -------- d-----w- d:\documents and settings\FodoR\Application Data\TuneUp Software 2010-04-11 16:15 . 2010-04-11 16:16 -------- d-----w- d:\program files\TuneUp Utilities 2010 2010-04-11 16:15 . 2010-04-11 16:15 -------- d-----w- d:\documents and settings\All Users\Application Data\TuneUp Software 2010-04-11 16:15 . 2010-04-11 16:15 -------- d-sh--w- d:\documents and settings\All Users\Application Data\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} 2010-04-11 14:49 . 2010-04-21 13:01 -------- d-----w- d:\documents and settings\FodoR\Application Data\skypePM 2010-04-11 14:49 . 2010-04-11 14:49 56 ---ha-w- d:\windows\system32\ezsidmv.dat 2010-04-11 13:44 . 2010-04-16 23:02 -------- d-----w- d:\documents and settings\FodoR\Application Data\BitTorrent 2010-04-11 13:44 . 2010-04-11 13:44 -------- d-----w- d:\program files\BitTorrent 2010-04-11 12:32 . 2001-08-17 09:48 12160 -c--a-w- d:\windows\system32\dllcache\mouhid.sys 2010-04-11 12:32 . 2001-08-17 09:48 12160 ----a-w- d:\windows\system32\drivers\mouhid.sys 2010-04-11 12:31 . 2008-04-13 20:15 10368 -c--a-w- d:\windows\system32\dllcache\hidusb.sys 2010-04-11 12:31 . 2008-04-13 20:15 10368 ----a-w- d:\windows\system32\drivers\hidusb.sys 2010-04-11 11:45 . 2010-04-15 06:41 -------- d-----w- d:\windows\ie8updates 2010-04-11 11:44 . 2010-04-11 11:44 -------- d-----w- d:\documents and settings\FodoR\Application Data\Media Player Classic 2010-04-11 11:40 . 2010-04-21 13:21 -------- d-----w- d:\documents and settings\FodoR\Application Data\Skype 2010-04-11 11:38 . 2010-04-11 11:38 99776 ----a-w- d:\windows\system32\drivers\snapman.sys 2010-04-11 11:38 . 2010-04-11 11:38 -------- d-----w- d:\program files\Acronis 2010-04-11 11:38 . 2010-04-11 11:38 -------- d-----w- d:\program files\Common Files\Acronis 2010-04-11 11:30 . 2009-12-12 14:15 178176 ----a-w- d:\windows\system32\unrar.dll 2010-04-11 11:30 . 2004-01-25 16:18 217088 ----a-w- d:\windows\system32\yv12vfw.dll 2010-04-11 11:30 . 2009-05-29 21:37 205824 ----a-w- d:\windows\system32\xvidvfw.dll 2010-04-11 11:30 . 2009-05-29 21:31 881664 ----a-w- d:\windows\system32\xvidcore.dll 2010-04-11 11:30 . 2010-01-05 18:00 85504 ----a-w- d:\windows\system32\ff_vfw.dll 2010-04-11 11:30 . 2010-04-11 11:30 -------- d-----w- d:\program files\K-Lite Codec Pack 2010-04-11 11:18 . 2010-04-11 11:18 -------- d-----w- d:\program files\ESET 2010-04-11 11:18 . 2010-04-11 11:18 -------- d-----w- d:\documents and settings\All Users\Application Data\ESET 2010-04-11 11:17 . 2010-04-11 11:17 -------- d-----w- d:\program files\Common Files\Skype 2010-04-11 11:17 . 2010-04-11 11:17 -------- d-----r- d:\program files\Skype 2010-04-11 11:17 . 2010-04-11 11:17 -------- d-----w- d:\documents and settings\All Users\Application Data\Skype 2010-04-11 11:03 . 2010-04-11 11:03 -------- d-----w- d:\program files\Lavalys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-04-21 13:21 . 2010-04-11 10:33 -------- d-----w- d:\documents and settings\FodoR\Application Data\uTorrent 2010-04-17 16:57 . 2010-04-11 09:44 -------- d--h--w- d:\program files\InstallShield Installation Information 2010-04-16 13:49 . 2010-04-11 10:51 14456 ----a-w- d:\documents and settings\FodoR\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2010-04-11 22:34 . 2010-04-11 22:14 -------- d-----w- d:\program files\CursorXP 2010-04-11 22:14 . 2010-04-11 16:56 -------- d-----w- d:\program files\iColorFolder 2010-04-11 20:02 . 2010-04-11 20:02 6140928 ----a-w- d:\documents and settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe 2010-04-11 19:51 . 2010-04-11 19:51 6140928 ----a-w- d:\windows\system32\logonuix.exe 2010-04-11 19:50 . 2010-04-11 19:50 -------- d-----w- d:\documents and settings\All Users\Application Data\Stardock 2010-04-11 19:50 . 2010-04-11 19:50 -------- d-----w- d:\program files\Stardock 2010-04-11 17:04 . 2010-04-11 17:04 -------- d-----w- d:\documents and settings\FodoR\Application Data\FindeXer 2010-04-11 16:58 . 2010-04-11 16:58 151277 ----a-w- d:\windows\BricoPackUninst.cmd 2010-04-11 16:58 . 2008-04-14 09:00 218624 ----a-w- d:\windows\system32\uxtheme.dll 2010-04-11 16:57 . 2010-04-11 16:57 -------- d-----w- d:\program files\RK Launcher 2010-04-11 10:50 . 2010-04-11 10:50 -------- d-----w- d:\program files\Microsoft Keyboard Layout Creator 1.4 2010-04-11 10:34 . 2010-04-11 10:34 -------- d-----w- d:\program files\uTorrent 2010-04-11 10:32 . 2010-04-11 10:32 -------- d-----w- d:\program files\Common Files\Adobe 2010-04-11 09:56 . 2010-04-11 09:56 0 ----a-w- d:\windows\nsreg.dat 2010-04-11 09:44 . 2010-04-11 09:44 -------- d-----w- d:\documents and settings\All Users\Application Data\Atheros 2010-04-11 09:35 . 2010-04-11 09:23 86327 ----a-w- d:\windows\pchealth\helpctr\OfflineCache\index.dat 2010-04-11 09:26 . 2010-04-11 09:26 -------- d-----w- d:\program files\microsoft frontpage 2010-04-11 09:21 . 2010-04-11 09:21 21640 ----a-w- d:\windows\system32\emptyregdb.dat 2010-04-11 09:20 . 2010-04-11 09:20 -------- d-----w- d:\program files\Windows Media Connect 2 2010-03-10 06:15 . 2009-09-09 11:13 420352 ----a-w- d:\windows\system32\vbscript.dll 2010-02-25 06:24 . 2009-09-09 11:13 916480 ----a-w- d:\windows\system32\Wininet.dll 2010-02-24 13:11 . 2009-09-09 11:13 455680 ----a-w- d:\windows\system32\drivers\mrxsmb.sys 2010-02-17 08:10 . 2009-09-09 11:13 2189952 ----a-w- d:\windows\system32\ntoskrnl.exe 2010-02-16 13:25 . 2009-02-07 19:02 2066816 ----a-w- d:\windows\system32\ntkrnlpa.exe 2010-02-12 10:03 . 2010-04-11 22:11 293376 ------w- d:\windows\system32\browserchoice.exe 2010-02-12 04:33 . 2008-04-14 09:00 100864 ----a-w- d:\windows\system32\6to4svc.dll 2010-02-11 12:02 . 2009-09-09 11:13 226880 ----a-w- d:\windows\system32\drivers\tcpip6.sys . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "uTorrent"="d:\program files\uTorrent\uTorrent.exe" [2010-04-11 319792] "Skype"="d:\program files\Skype\Phone\Skype.exe" [2009-01-29 23975720] "CursorXP"="c:\program files\CursorXP\CursorXP.exe" [2005-01-19 128000] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDCPL"="RTHDCPL.EXE" [2010-04-11 16872448] "AzMixerSel"="d:\program files\Realtek\Audio\InstallShield\AzMixerSel.exe" [2010-04-11 53248] "IgfxTray"="d:\windows\system32\igfxtray.exe" [2008-07-01 150040] "HotKeysCmds"="d:\windows\system32\hkcmd.exe" [2008-07-01 170520] "Persistence"="d:\windows\system32\igfxpers.exe" [2008-07-01 141848] "egui"="d:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360] "OSSelectorReinstall"="d:\program files\Common Files\Acronis\Acronis Disk Director\oss_reinstall.exe" [2006-04-12 1261475] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="d:\windows\system32\CTFMON.EXE" [2008-04-14 15360] d:\documents and settings\All Users\Start Menu\Programs\Startup\ Adobe Gamma Loader.lnk - d:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2010-4-11 113664] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "d:\\Program Files\\uTorrent\\uTorrent.exe"= "d:\\Program Files\\BitTorrent\\bittorrent.exe"= "d:\\Program Files\\Autodesk\\Backburner\\monitor.exe"= "d:\\Program Files\\Autodesk\\Backburner\\manager.exe"= "d:\\Program Files\\Autodesk\\Backburner\\server.exe"= "d:\\Program Files\\Autodesk\\3ds Max 2009\\3dsmax.exe"= "d:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"= "d:\\Program Files\\Opera\\opera.exe"= "d:\\WINDOWS\\system32\\mmc.exe"= "d:\\Program Files\\Skype\\Phone\\Skype.exe"= R0 iastor86;iastor86;d:\windows\system32\drivers\iastor86.sys [13.9.2009 г. 13:25 327192] R1 ehdrv;ehdrv;d:\windows\system32\drivers\ehdrv.sys [16.11.2009 г. 09:03 108792] R1 epfwtdir;epfwtdir;d:\windows\system32\drivers\epfwtdir.sys [16.11.2009 г. 09:06 96408] R2 ekrn;ESET Service;d:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [16.11.2009 г. 09:04 735960] R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;d:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [25.2.2010 г. 11:19 1047880] R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;d:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [25.2.2010 г. 10:18 10064] S2 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;d:\program files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [10.3.2008 г. 00:04 65536] S3 EverestDriver;Lavalys EVEREST Kernel Driver;d:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [11.4.2010 г. 12:03 22640] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . . ------- Supplementary Scan ------- . FF - ProfilePath - d:\documents and settings\FodoR\Application Data\Mozilla\Firefox\Profiles\e2nt5apy.default\ FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - d:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- FF - user.js: network.http.max-persistent-connections-per-server - 4 FF - user.js: nglayout.initialpaint.delay - 600 FF - user.js: content.notify.interval - 600000 FF - user.js: content.max.tokenizing.time - 1800000 FF - user.js: content.switch.threshold - 600000 d:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true); d:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false); d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true); d:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true); d:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32); d:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600); d:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false); d:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false); d:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1); d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false); d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2); d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1); d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25); d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800); d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25); d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5); d:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false); d:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true); d:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", ""); d:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false); d:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false); d:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600); d:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com"); d:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff"); d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties"); d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties"); d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org"); d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com"); d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true); d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false); d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false); d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false); d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false); d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false); d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20); d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20); . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-04-21 14:25 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver] "ImagePath"="\??\d:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt" . Completion time: 2010-04-21 14:26:23 ComboFix-quarantined-files.txt 2010-04-21 13:26 Pre-Run: 38 647 971 840 bytes free Post-Run: 39 175 581 696 bytes free WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional (TuneUp Backup) (bootscreen)" /noexecute=optin /fastdetect /TUTag=WHZPAH-BAK /KERNEL=kernel1.exe multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /TUTag=WHZPAH /Kernel=TUKernel.exe multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional (TuneUp Backup)" /noexecute=optin /fastdetect /TUTag=WHZPAH-BAK - - End Of File - - FB46B2FB78412DBD96861D1E5FF84311 Ето го и комбото...

Ето го, ивинявай, ама нямах възможност. MBAM: Malwarebytes' Anti-Malware 1.45 www.malwarebytes.org Версия на базата от данни: 4012 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 20.4.2010 г. 17:41:39 mbam-log-2010-04-20 (17-41-39).txt Тип сканиране: Бързо сканиране Сканирани обекти: 104660 Изминало време: 4 минута(и), 21 секунда(и) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 0 Заразени стойности в регистратурата: 0 Заразени информационни обекти в регистратурата: 0 Заразени папки: 0 Заразени файлове: 0 Заразени процеси в паметта: (Не бяха открити зловредни обекти) Заразени модули в паметта: (Не бяха открити зловредни обекти) Заразени ключове в регистратурата: (Не бяха открити зловредни обекти) Заразени стойности в регистратурата: (Не бяха открити зловредни обекти) Заразени информационни обекти в регистратурата: (Не бяха открити зловредни обекти) Заразени папки: (Не бяха открити зловредни обекти) Заразени файлове: (Не бяха открити зловредни обекти) DDS.txt: DDS (Ver_10-03-17.01) - NTFSx86 Run by FodoR at 17:43:13,98 on 20.04.2010 Ј. Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.1978.1373 [GMT 1:00] AV: ESET NOD32 Antivirus 4.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} ============== Running Processes =============== D:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe D:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\RTHDCPL.EXE D:\WINDOWS\system32\igfxtray.exe D:\WINDOWS\system32\igfxpers.exe D:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe D:\WINDOWS\system32\ctfmon.exe D:\Program Files\uTorrent\uTorrent.exe D:\Program Files\Skype\Phone\Skype.exe D:\WINDOWS\system32\igfxsrvc.exe D:\Program Files\Skype\Plugin Manager\skypePM.exe D:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe D:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe D:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe D:\WINDOWS\system32\svchost.exe -k imgsvc D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe D:\WINDOWS\System32\svchost.exe -k HTTPFilter D:\Program Files\Mozilla Firefox\firefox.exe D:\Program Files\XYplorer\XYplorer.exe D:\WINDOWS\system32\NOTEPAD.EXE D:\Documents and Settings\FodoR\My Documents\Downloads\dds.scr ============== Pseudo HJT Report =============== BHO: {f880a4a8-c436-4ac4-afd1-aa0bdc9552dd} - Loader Class TB: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File TB: {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No File uRun: [CTFMON.EXE] d:\windows\system32\ctfmon.exe uRun: [uTorrent] "d:\program files\utorrent\uTorrent.exe" uRun: [Skype] "d:\program files\skype\phone\Skype.exe" /nosplash /minimized uRun: [CursorXP] "c:\program files\cursorxp\CursorXP.exe" -s mRun: [RTHDCPL] RTHDCPL.EXE mRun: [Alcmtr] ALCMTR.EXE mRun: [AzMixerSel] d:\program files\realtek\audio\installshield\AzMixerSel.exe mRun: [IgfxTray] d:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] d:\windows\system32\hkcmd.exe mRun: [Persistence] d:\windows\system32\igfxpers.exe mRun: [egui] "d:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice mRun: [OSSelectorReinstall] d:\program files\common files\acronis\acronis disk director\oss_reinstall.exe dRun: [CTFMON.EXE] d:\windows\system32\CTFMON.EXE StartupFolder: d:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - d:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - d:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: igfxcui - igfxdev.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - d:\windows\system32\wpdshserviceobj.dll ================= FIREFOX =================== FF - ProfilePath - d:\docume~1\fodor\applic~1\mozilla\firefox\profiles\e2nt5apy.default\ FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - d:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\ ---- FIREFOX POLICIES ---- FF - user.js: network.http.max-persistent-connections-per-server - 4 FF - user.js: nglayout.initialpaint.delay - 600 FF - user.js: content.notify.interval - 600000 FF - user.js: content.max.tokenizing.time - 1800000 FF - user.js: content.switch.threshold - 600000 d:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true); d:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true); d:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true); d:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32); d:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600); d:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false); d:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false); d:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5); d:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false); d:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true); d:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", ""); d:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false); d:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false); d:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true); d:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600); d:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com"); d:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff"); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties"); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties"); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org"); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com"); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20); ============= SERVICES / DRIVERS =============== R0 iastor86;iastor86;d:\windows\system32\drivers\iastor86.sys [2009-9-13 327192] R1 ehdrv;ehdrv;d:\windows\system32\drivers\ehdrv.sys [2009-11-16 108792] R1 epfwtdir;epfwtdir;d:\windows\system32\drivers\epfwtdir.sys [2009-11-16 96408] R2 ekrn;ESET Service;d:\program files\eset\eset nod32 antivirus\ekrn.exe [2009-11-16 735960] R2 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;d:\program files\autodesk\3ds max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [2008-3-10 65536] R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;d:\program files\tuneup utilities 2010\TuneUpUtilitiesService32.exe [2010-2-25 1047880] R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;d:\program files\tuneup utilities 2010\TuneUpUtilitiesDriver32.sys [2010-2-25 10064] S3 EverestDriver;Lavalys EVEREST Kernel Driver;d:\program files\lavalys\everest ultimate edition\kerneld.wnt [2010-4-11 22640] =============== Created Last 30 ================ 2010-04-19 19:37:30 0 d-----w- d:\program files\Trend Micro 2010-04-17 20:43:59 0 d-----w- d:\docume~1\fodor\applic~1\Malwarebytes 2010-04-17 20:43:51 38224 ----a-w- d:\windows\system32\drivers\mbamswissarmy.sys 2010-04-17 20:43:46 20824 ----a-w- d:\windows\system32\drivers\mbam.sys 2010-04-17 20:43:46 0 d-----w- d:\docume~1\alluse~1\applic~1\Malwarebytes 2010-04-17 20:43:43 0 d-----w- d:\program files\Malwarebytes' Anti-Malware 2010-04-17 16:57:49 34415 ----a-w- d:\windows\system32\netathw.cat 2010-04-17 16:57:49 155408 ----a-w- d:\windows\system32\netathw.inf 2010-04-17 16:57:49 1315776 ----a-w- d:\windows\system32\drivers\athw.sys 2010-04-17 16:57:49 1315776 ----a-w- d:\windows\system32\athw.sys 2010-04-17 16:57:49 0 d-----w- d:\program files\Atheros 2010-04-17 16:57:28 55808 ----a-w- d:\temp\devcon.exe 2010-04-17 16:57:28 0 d-----w- D:\temp 2010-04-17 15:50:15 0 d-----w- d:\windows\system32\ReinstallBackups 2010-04-17 15:50:13 53248 ----a-w- d:\windows\system32\CSVer.dll 2010-04-17 15:22:22 0 d-----w- d:\windows\system32\LogFiles 2010-04-16 19:26:47 0 d-----w- d:\docume~1\fodor\applic~1\XYplorer 2010-04-16 19:26:38 0 d-----w- d:\program files\XYplorer 2010-04-16 17:14:01 0 d-----w- d:\docume~1\fodor\applic~1\TeamViewer 2010-04-16 17:13:52 0 d-----w- d:\program files\TeamViewer 2010-04-15 19:00:33 88 ----a-w- d:\windows\StyleBuilder.INI 2010-04-15 18:59:51 0 d-----w- d:\program files\TGTSoft 2010-04-14 20:54:46 2328832 ----a-w- d:\windows\system32\TUKernel.exe 2010-04-14 15:49:52 0 d-----w- d:\docume~1\fodor\applic~1\Autodesk 2010-04-14 15:39:40 0 d-----w- d:\program files\common files\Autodesk Shared 2010-04-14 15:39:09 0 d-----w- d:\program files\Autodesk 2010-04-14 15:38:59 443752 ----a-w- d:\windows\system32\d3dx10_34.dll 2010-04-14 15:38:59 1124720 ----a-w- d:\windows\system32\D3DCompiler_34.dll 2010-04-14 15:38:58 3497832 ----a-w- d:\windows\system32\d3dx9_34.dll 2010-04-14 15:38:57 3426072 ----a-w- d:\windows\system32\d3dx9_32.dll 2010-04-14 15:38:55 2414360 ----a-w- d:\windows\system32\d3dx9_31.dll 2010-04-14 15:28:19 0 d-----w- D:\Autodesk 2010-04-12 22:38:53 0 d-----w- d:\windows\system32\XPSViewer 2010-04-12 22:38:30 89088 -c----w- d:\windows\system32\dllcache\filterpipelineprintproc.dll 2010-04-12 22:38:30 597504 -c----w- d:\windows\system32\dllcache\printfilterpipelinesvc.exe 2010-04-12 22:38:30 575488 -c----w- d:\windows\system32\dllcache\xpsshhdr.dll 2010-04-12 22:38:30 575488 ------w- d:\windows\system32\xpsshhdr.dll 2010-04-12 22:38:30 1676288 -c----w- d:\windows\system32\dllcache\xpssvcs.dll 2010-04-12 22:38:30 1676288 ------w- d:\windows\system32\xpssvcs.dll 2010-04-12 22:38:30 117760 ------w- d:\windows\system32\prntvpt.dll 2010-04-12 17:58:08 6144 ----a-w- d:\windows\system32\fonFodor.dll 2010-04-12 17:07:07 6144 ----a-w- d:\windows\system32\FodoRlay.dll 2010-04-11 22:34:56 656542 ----a-w- D:\271_icol.dll 2010-04-11 22:15:05 0 d-----w- d:\windows\system32\wbem\Repository 2010-04-11 22:14:49 0 d-----w- d:\program files\CursorXP 2010-04-11 22:11:41 293376 ------w- d:\windows\system32\browserchoice.exe 2010-04-11 19:51:12 488 ---ha-r- d:\windows\system32\logonuix.exe.manifest 2010-04-11 19:51:11 6140928 ----a-w- d:\windows\system32\logonuix.exe 2010-04-11 19:50:13 0 d-----w- d:\docume~1\alluse~1\applic~1\Stardock 2010-04-11 19:50:04 0 d-----w- d:\program files\Stardock 2010-04-11 17:04:27 0 d-----w- d:\docume~1\fodor\applic~1\FindeXer 2010-04-11 16:58:08 151277 ----a-w- d:\windows\BricoPackUninst.cmd 2010-04-11 16:57:08 0 d-----w- d:\program files\RK Launcher 2010-04-11 16:56:12 0 d-----w- d:\program files\iColorFolder 2010-04-11 16:55:31 3936310 ----a-w- d:\windows\BricoPack Wallpaper.bmp 2010-04-11 16:53:03 7915 ----a-w- d:\windows\BricoPackFoldersDelete.cmd 2010-04-11 16:52:36 0 d-----w- d:\windows\BricoPacks 2010-04-11 16:21:28 0 d-----w- D:\Уолпейпъри 2010-04-11 16:16:21 30536 ----a-w- d:\windows\system32\TURegOpt.exe 2010-04-11 16:16:21 30024 ----a-w- d:\windows\system32\uxtuneup.dll 2010-04-11 16:16:13 0 d-----w- d:\docume~1\fodor\applic~1\TuneUp Software 2010-04-11 16:15:57 0 d-----w- d:\program files\TuneUp Utilities 2010 2010-04-11 16:15:36 0 d-----w- d:\docume~1\alluse~1\applic~1\TuneUp Software 2010-04-11 16:15:28 0 d-sh--w- d:\docume~1\alluse~1\applic~1\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} 2010-04-11 14:49:51 56 ---ha-w- d:\windows\system32\ezsidmv.dat 2010-04-11 13:44:50 0 d-----w- d:\docume~1\fodor\applic~1\BitTorrent 2010-04-11 13:44:39 0 d-----w- d:\program files\BitTorrent 2010-04-11 12:32:51 12160 -c--a-w- d:\windows\system32\dllcache\mouhid.sys 2010-04-11 12:32:51 12160 ----a-w- d:\windows\system32\drivers\mouhid.sys 2010-04-11 12:31:22 10368 -c--a-w- d:\windows\system32\dllcache\hidusb.sys 2010-04-11 12:31:22 10368 ----a-w- d:\windows\system32\drivers\hidusb.sys 2010-04-11 11:45:56 0 d-----w- d:\windows\ie8updates 2010-04-11 11:38:45 99776 ----a-w- d:\windows\system32\drivers\snapman.sys 2010-04-11 11:30:55 178176 ----a-w- d:\windows\system32\unrar.dll 2010-04-11 11:30:53 38 ----a-w- d:\windows\avisplitter.ini 2010-04-11 11:30:44 839680 ----a-w- d:\windows\system32\lameACM.acm 2010-04-11 11:30:44 414 ----a-w- d:\windows\system32\lame_acm.xml 2010-04-11 11:30:44 217088 ----a-w- d:\windows\system32\yv12vfw.dll 2010-04-11 11:30:44 118784 ----a-w- d:\windows\system32\ac3acm.acm 2010-04-11 11:30:43 881664 ----a-w- d:\windows\system32\xvidcore.dll 2010-04-11 11:30:43 205824 ----a-w- d:\windows\system32\xvidvfw.dll 2010-04-11 11:30:36 547 ----a-w- d:\windows\system32\ff_vfw.dll.manifest 2010-04-11 11:30:35 85504 ----a-w- d:\windows\system32\ff_vfw.dll 2010-04-11 11:30:32 0 d-----w- d:\program files\K-Lite Codec Pack 2010-04-11 11:18:28 0 d-----w- d:\program files\ESET 2010-04-11 11:17:20 0 d-----r- d:\program files\Skype 2010-04-11 11:03:08 0 d-----w- d:\program files\Lavalys 2010-04-11 10:50:49 0 d-----w- d:\program files\Microsoft Keyboard Layout Creator 1.4 2010-04-11 10:34:14 0 d-----w- d:\program files\uTorrent 2010-04-11 10:33:47 0 d-----w- d:\docume~1\fodor\applic~1\uTorrent 2010-04-11 10:15:19 0 d-----w- d:\program files\Realtek 2010-04-11 10:12:33 0 d-----w- d:\program files\common files\ODBC 2010-04-11 10:12:30 0 d-----w- d:\program files\common files\SpeechEngines 2010-04-11 10:11:42 0 d-----r- d:\documents and settings\all users\Documents 2010-04-11 09:44:06 0 d-----w- d:\docume~1\alluse~1\applic~1\Atheros 2010-04-11 09:23:19 0 d-sh--w- d:\documents and settings\all users\DRM 2010-04-11 09:23:04 0 d--h--w- d:\program files\WindowsUpdate 2010-04-11 09:22:19 0 d-----w- d:\program files\common files\MSSoap 2010-04-11 09:21:02 0 d-----w- d:\program files\Online Services 2010-04-11 09:20:58 0 d-----w- d:\program files\Windows Media Connect 2 2010-04-11 09:20:52 0 d-----w- d:\program files\MSN Gaming Zone 2010-04-11 09:20:05 0 d-----w- d:\program files\Windows NT ==================== Find3M ==================== 2010-04-15 19:00:33 4096 ----a-w- D:\RELOC.BIN 2010-04-15 19:00:33 3904 ----a-w- D:\NTHEADER.BIN 2010-04-15 19:00:33 192 ----a-w- D:\DOSHEADER.BIN 2010-04-11 16:58:08 218624 ----a-w- d:\windows\system32\uxtheme.dll 2010-04-11 10:15:15 315392 ----a-w- d:\windows\HideWin.exe 2010-04-11 10:15:05 9715200 ----a-w- d:\windows\RTLCPL.exe 2010-04-11 10:15:05 77824 ----a-w- d:\windows\SoundMan.exe 2010-04-11 10:15:05 1826816 ----a-w- d:\windows\SkyTel.exe 2010-04-11 10:15:05 1196032 ----a-w- d:\windows\RtlUpd.exe 2010-04-11 10:15:04 4741120 ----a-w- d:\windows\system32\drivers\RtkHDAud.sys 2010-04-11 10:15:04 16872448 ----a-w- d:\windows\RTHDCPL.exe 2010-04-11 10:15:03 2165760 ----a-w- d:\windows\MicCal.exe 2010-04-11 10:15:02 57344 ----a-w- d:\windows\Alcmtr.exe 2010-04-11 10:15:02 2808832 ----a-w- d:\windows\alcwzrd.exe 2010-04-11 10:14:59 8 ----a-w- d:\windows\system32\drivers\rtkhdaud.dat 2010-04-11 10:14:59 520192 ----a-w- d:\windows\RtlExUpd.dll 2010-04-11 10:14:59 520 ----a-w- d:\windows\system32\drivers\RTEQEX1.dat 2010-04-11 10:14:59 520 ----a-w- d:\windows\system32\drivers\RTEQEX0.dat 2010-04-11 10:14:59 49152 ----a-w- d:\windows\system32\ChCfg.exe 2010-04-11 09:21:08 21640 ----a-w- d:\windows\system32\emptyregdb.dat 2010-03-10 06:15:52 420352 ----a-w- d:\windows\system32\vbscript.dll 2010-02-25 06:24:37 916480 ----a-w- d:\windows\system32\Wininet.dll 2010-02-24 13:11:07 455680 ----a-w- d:\windows\system32\drivers\mrxsmb.sys 2010-02-17 08:10:28 2189952 ----a-w- d:\windows\system32\ntoskrnl.exe 2010-02-16 13:25:04 2066816 ----a-w- d:\windows\system32\ntkrnlpa.exe 2010-02-12 04:33:11 100864 ----a-w- d:\windows\system32\6to4svc.dll ============= FINISH: 17:43:27,12 =============== Attach.txt:

Здрасти, имах проблем със MalwareAnti... нещо си там.Ето го:MBAM_ERROr_UPDATING(12002, 0, WinHttpReciaeveResponse).Заради него ъпдейта не стана. Относно ДДС-то ето го ДДС.тхт: DDS (Ver_10-03-17.01) - NTFSx86 Run by FodoR at 22:06:28,46 on 19.04.2010 Ј. Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.1978.1314 [GMT 1:00] AV: ESET NOD32 Antivirus 4.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} ============== Running Processes =============== D:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe D:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\RTHDCPL.EXE D:\WINDOWS\system32\igfxtray.exe D:\WINDOWS\system32\igfxpers.exe D:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe D:\WINDOWS\system32\ctfmon.exe D:\WINDOWS\system32\igfxsrvc.exe D:\Program Files\uTorrent\uTorrent.exe D:\Program Files\Skype\Phone\Skype.exe D:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe D:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe D:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe D:\WINDOWS\system32\svchost.exe -k imgsvc D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe D:\Program Files\Skype\Plugin Manager\skypePM.exe D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe D:\WINDOWS\System32\svchost.exe -k HTTPFilter D:\WINDOWS\system32\mmc.exe D:\Program Files\XYplorer\XYplorer.exe D:\Program Files\Mozilla Firefox\firefox.exe D:\Program Files\Trend Micro\HijackThis\HijackThis.exe D:\WINDOWS\system32\NOTEPAD.EXE D:\Program Files\Windows NT\Pinball\PINBALL.EXE D:\Program Files\Malwarebytes' Anti-Malware\mbam.exe D:\WINDOWS\system32\notepad.exe D:\WINDOWS\system32\mspaint.exe D:\Documents and Settings\FodoR\My Documents\Downloads\dds.scr ============== Pseudo HJT Report =============== BHO: {f880a4a8-c436-4ac4-afd1-aa0bdc9552dd} - Loader Class TB: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File TB: {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No File uRun: [CTFMON.EXE] d:\windows\system32\ctfmon.exe uRun: [uTorrent] "d:\program files\utorrent\uTorrent.exe" uRun: [skype] "d:\program files\skype\phone\Skype.exe" /nosplash /minimized uRun: [CursorXP] "c:\program files\cursorxp\CursorXP.exe" -s mRun: [RTHDCPL] RTHDCPL.EXE mRun: [Alcmtr] ALCMTR.EXE mRun: [AzMixerSel] d:\program files\realtek\audio\installshield\AzMixerSel.exe mRun: [igfxTray] d:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] d:\windows\system32\hkcmd.exe mRun: [Persistence] d:\windows\system32\igfxpers.exe mRun: [egui] "d:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice mRun: [OSSelectorReinstall] d:\program files\common files\acronis\acronis disk director\oss_reinstall.exe dRun: [CTFMON.EXE] d:\windows\system32\CTFMON.EXE StartupFolder: d:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - d:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - d:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: igfxcui - igfxdev.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - d:\windows\system32\wpdshserviceobj.dll ================= FIREFOX =================== FF - ProfilePath - d:\docume~1\fodor\applic~1\mozilla\firefox\profiles\e2nt5apy.default\ FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - d:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\ ---- FIREFOX POLICIES ---- FF - user.js: network.http.max-persistent-connections-per-server - 4 FF - user.js: nglayout.initialpaint.delay - 600 FF - user.js: content.notify.interval - 600000 FF - user.js: content.max.tokenizing.time - 1800000 FF - user.js: content.switch.threshold - 600000 d:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true); d:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true); d:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true); d:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32); d:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600); d:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false); d:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false); d:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25); d:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5); d:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false); d:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true); d:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", ""); d:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false); d:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false); d:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true); d:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600); d:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com"); d:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff"); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties"); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties"); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org"); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com"); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20); d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20); ============= SERVICES / DRIVERS =============== R0 iastor86;iastor86;d:\windows\system32\drivers\iastor86.sys [2009-9-13 327192] R1 ehdrv;ehdrv;d:\windows\system32\drivers\ehdrv.sys [2009-11-16 108792] R1 epfwtdir;epfwtdir;d:\windows\system32\drivers\epfwtdir.sys [2009-11-16 96408] R2 ekrn;ESET Service;d:\program files\eset\eset nod32 antivirus\ekrn.exe [2009-11-16 735960] R2 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;d:\program files\autodesk\3ds max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [2008-3-10 65536] R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;d:\program files\tuneup utilities 2010\TuneUpUtilitiesService32.exe [2010-2-25 1047880] R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;d:\program files\tuneup utilities 2010\TuneUpUtilitiesDriver32.sys [2010-2-25 10064] S3 EverestDriver;Lavalys EVEREST Kernel Driver;d:\program files\lavalys\everest ultimate edition\kerneld.wnt [2010-4-11 22640] =============== Created Last 30 ================ 2010-04-19 19:37:30 0 d-----w- d:\program files\Trend Micro 2010-04-17 20:43:59 0 d-----w- d:\docume~1\fodor\applic~1\Malwarebytes 2010-04-17 20:43:51 38224 ----a-w- d:\windows\system32\drivers\mbamswissarmy.sys 2010-04-17 20:43:46 20824 ----a-w- d:\windows\system32\drivers\mbam.sys 2010-04-17 20:43:46 0 d-----w- d:\docume~1\alluse~1\applic~1\Malwarebytes 2010-04-17 20:43:43 0 d-----w- d:\program files\Malwarebytes' Anti-Malware 2010-04-17 16:57:49 34415 ----a-w- d:\windows\system32\netathw.cat 2010-04-17 16:57:49 155408 ----a-w- d:\windows\system32\netathw.inf 2010-04-17 16:57:49 1315776 ----a-w- d:\windows\system32\drivers\athw.sys 2010-04-17 16:57:49 1315776 ----a-w- d:\windows\system32\athw.sys 2010-04-17 16:57:49 0 d-----w- d:\program files\Atheros 2010-04-17 16:57:28 55808 ----a-w- d:\temp\devcon.exe 2010-04-17 16:57:28 0 d-----w- D:\temp 2010-04-17 15:50:15 0 d-----w- d:\windows\system32\ReinstallBackups 2010-04-17 15:50:13 53248 ----a-w- d:\windows\system32\CSVer.dll 2010-04-17 15:22:22 0 d-----w- d:\windows\system32\LogFiles 2010-04-16 19:26:47 0 d-----w- d:\docume~1\fodor\applic~1\XYplorer 2010-04-16 19:26:38 0 d-----w- d:\program files\XYplorer 2010-04-16 17:14:01 0 d-----w- d:\docume~1\fodor\applic~1\TeamViewer 2010-04-16 17:13:52 0 d-----w- d:\program files\TeamViewer 2010-04-15 19:00:33 88 ----a-w- d:\windows\StyleBuilder.INI 2010-04-15 18:59:51 0 d-----w- d:\program files\TGTSoft 2010-04-14 20:54:46 2328832 ----a-w- d:\windows\system32\TUKernel.exe 2010-04-14 15:49:52 0 d-----w- d:\docume~1\fodor\applic~1\Autodesk 2010-04-14 15:39:40 0 d-----w- d:\program files\common files\Autodesk Shared 2010-04-14 15:39:09 0 d-----w- d:\program files\Autodesk 2010-04-14 15:38:59 443752 ----a-w- d:\windows\system32\d3dx10_34.dll 2010-04-14 15:38:59 1124720 ----a-w- d:\windows\system32\D3DCompiler_34.dll 2010-04-14 15:38:58 3497832 ----a-w- d:\windows\system32\d3dx9_34.dll 2010-04-14 15:38:57 3426072 ----a-w- d:\windows\system32\d3dx9_32.dll 2010-04-14 15:38:55 2414360 ----a-w- d:\windows\system32\d3dx9_31.dll 2010-04-14 15:28:19 0 d-----w- D:\Autodesk 2010-04-12 22:38:53 0 d-----w- d:\windows\system32\XPSViewer 2010-04-12 22:38:30 89088 -c----w- d:\windows\system32\dllcache\filterpipelineprintproc.dll 2010-04-12 22:38:30 597504 -c----w- d:\windows\system32\dllcache\printfilterpipelinesvc.exe 2010-04-12 22:38:30 575488 -c----w- d:\windows\system32\dllcache\xpsshhdr.dll 2010-04-12 22:38:30 575488 ------w- d:\windows\system32\xpsshhdr.dll 2010-04-12 22:38:30 1676288 -c----w- d:\windows\system32\dllcache\xpssvcs.dll 2010-04-12 22:38:30 1676288 ------w- d:\windows\system32\xpssvcs.dll 2010-04-12 22:38:30 117760 ------w- d:\windows\system32\prntvpt.dll 2010-04-12 17:58:08 6144 ----a-w- d:\windows\system32\fonFodor.dll 2010-04-12 17:07:07 6144 ----a-w- d:\windows\system32\FodoRlay.dll 2010-04-11 22:34:56 656542 ----a-w- D:\271_icol.dll 2010-04-11 22:15:05 0 d-----w- d:\windows\system32\wbem\Repository 2010-04-11 22:14:49 0 d-----w- d:\program files\CursorXP 2010-04-11 22:11:41 293376 ------w- d:\windows\system32\browserchoice.exe 2010-04-11 19:51:12 488 ---ha-r- d:\windows\system32\logonuix.exe.manifest 2010-04-11 19:51:11 6140928 ----a-w- d:\windows\system32\logonuix.exe 2010-04-11 19:50:13 0 d-----w- d:\docume~1\alluse~1\applic~1\Stardock 2010-04-11 19:50:04 0 d-----w- d:\program files\Stardock 2010-04-11 17:04:27 0 d-----w- d:\docume~1\fodor\applic~1\FindeXer 2010-04-11 16:58:08 151277 ----a-w- d:\windows\BricoPackUninst.cmd 2010-04-11 16:57:08 0 d-----w- d:\program files\RK Launcher 2010-04-11 16:56:12 0 d-----w- d:\program files\iColorFolder 2010-04-11 16:55:31 3936310 ----a-w- d:\windows\BricoPack Wallpaper.bmp 2010-04-11 16:53:03 7915 ----a-w- d:\windows\BricoPackFoldersDelete.cmd 2010-04-11 16:52:36 0 d-----w- d:\windows\BricoPacks 2010-04-11 16:21:28 0 d-----w- D:\Уолпейпъри 2010-04-11 16:16:21 30536 ----a-w- d:\windows\system32\TURegOpt.exe 2010-04-11 16:16:21 30024 ----a-w- d:\windows\system32\uxtuneup.dll 2010-04-11 16:16:13 0 d-----w- d:\docume~1\fodor\applic~1\TuneUp Software 2010-04-11 16:15:57 0 d-----w- d:\program files\TuneUp Utilities 2010 2010-04-11 16:15:36 0 d-----w- d:\docume~1\alluse~1\applic~1\TuneUp Software 2010-04-11 16:15:28 0 d-sh--w- d:\docume~1\alluse~1\applic~1\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} 2010-04-11 14:49:51 56 ---ha-w- d:\windows\system32\ezsidmv.dat 2010-04-11 13:44:50 0 d-----w- d:\docume~1\fodor\applic~1\BitTorrent 2010-04-11 13:44:39 0 d-----w- d:\program files\BitTorrent 2010-04-11 12:32:51 12160 -c--a-w- d:\windows\system32\dllcache\mouhid.sys 2010-04-11 12:32:51 12160 ----a-w- d:\windows\system32\drivers\mouhid.sys 2010-04-11 12:31:22 10368 -c--a-w- d:\windows\system32\dllcache\hidusb.sys 2010-04-11 12:31:22 10368 ----a-w- d:\windows\system32\drivers\hidusb.sys 2010-04-11 11:45:56 0 d-----w- d:\windows\ie8updates 2010-04-11 11:38:45 99776 ----a-w- d:\windows\system32\drivers\snapman.sys 2010-04-11 11:30:55 178176 ----a-w- d:\windows\system32\unrar.dll 2010-04-11 11:30:53 38 ----a-w- d:\windows\avisplitter.ini 2010-04-11 11:30:44 839680 ----a-w- d:\windows\system32\lameACM.acm 2010-04-11 11:30:44 414 ----a-w- d:\windows\system32\lame_acm.xml 2010-04-11 11:30:44 217088 ----a-w- d:\windows\system32\yv12vfw.dll 2010-04-11 11:30:44 118784 ----a-w- d:\windows\system32\ac3acm.acm 2010-04-11 11:30:43 881664 ----a-w- d:\windows\system32\xvidcore.dll 2010-04-11 11:30:43 205824 ----a-w- d:\windows\system32\xvidvfw.dll 2010-04-11 11:30:36 547 ----a-w- d:\windows\system32\ff_vfw.dll.manifest 2010-04-11 11:30:35 85504 ----a-w- d:\windows\system32\ff_vfw.dll 2010-04-11 11:30:32 0 d-----w- d:\program files\K-Lite Codec Pack 2010-04-11 11:18:28 0 d-----w- d:\program files\ESET 2010-04-11 11:17:20 0 d-----r- d:\program files\Skype 2010-04-11 11:03:08 0 d-----w- d:\program files\Lavalys 2010-04-11 10:50:49 0 d-----w- d:\program files\Microsoft Keyboard Layout Creator 1.4 2010-04-11 10:34:14 0 d-----w- d:\program files\uTorrent 2010-04-11 10:33:47 0 d-----w- d:\docume~1\fodor\applic~1\uTorrent 2010-04-11 10:15:19 0 d-----w- d:\program files\Realtek 2010-04-11 10:12:33 0 d-----w- d:\program files\common files\ODBC 2010-04-11 10:12:30 0 d-----w- d:\program files\common files\SpeechEngines 2010-04-11 10:11:42 0 d-----r- d:\documents and settings\all users\Documents 2010-04-11 09:44:06 0 d-----w- d:\docume~1\alluse~1\applic~1\Atheros 2010-04-11 09:23:19 0 d-sh--w- d:\documents and settings\all users\DRM 2010-04-11 09:23:04 0 d--h--w- d:\program files\WindowsUpdate 2010-04-11 09:22:19 0 d-----w- d:\program files\common files\MSSoap 2010-04-11 09:21:02 0 d-----w- d:\program files\Online Services 2010-04-11 09:20:58 0 d-----w- d:\program files\Windows Media Connect 2 2010-04-11 09:20:52 0 d-----w- d:\program files\MSN Gaming Zone 2010-04-11 09:20:05 0 d-----w- d:\program files\Windows NT ==================== Find3M ==================== 2010-04-15 19:00:33 4096 ----a-w- D:\RELOC.BIN 2010-04-15 19:00:33 3904 ----a-w- D:\NTHEADER.BIN 2010-04-15 19:00:33 192 ----a-w- D:\DOSHEADER.BIN 2010-04-11 16:58:08 218624 ----a-w- d:\windows\system32\uxtheme.dll 2010-04-11 10:15:15 315392 ----a-w- d:\windows\HideWin.exe 2010-04-11 10:15:05 9715200 ----a-w- d:\windows\RTLCPL.exe 2010-04-11 10:15:05 77824 ----a-w- d:\windows\SoundMan.exe 2010-04-11 10:15:05 1826816 ----a-w- d:\windows\SkyTel.exe 2010-04-11 10:15:05 1196032 ----a-w- d:\windows\RtlUpd.exe 2010-04-11 10:15:04 4741120 ----a-w- d:\windows\system32\drivers\RtkHDAud.sys 2010-04-11 10:15:04 16872448 ----a-w- d:\windows\RTHDCPL.exe 2010-04-11 10:15:03 2165760 ----a-w- d:\windows\MicCal.exe 2010-04-11 10:15:02 57344 ----a-w- d:\windows\Alcmtr.exe 2010-04-11 10:15:02 2808832 ----a-w- d:\windows\alcwzrd.exe 2010-04-11 10:14:59 8 ----a-w- d:\windows\system32\drivers\rtkhdaud.dat 2010-04-11 10:14:59 520192 ----a-w- d:\windows\RtlExUpd.dll 2010-04-11 10:14:59 520 ----a-w- d:\windows\system32\drivers\RTEQEX1.dat 2010-04-11 10:14:59 520 ----a-w- d:\windows\system32\drivers\RTEQEX0.dat 2010-04-11 10:14:59 49152 ----a-w- d:\windows\system32\ChCfg.exe 2010-04-11 09:21:08 21640 ----a-w- d:\windows\system32\emptyregdb.dat 2010-03-10 06:15:52 420352 ----a-w- d:\windows\system32\vbscript.dll 2010-02-25 06:24:37 916480 ----a-w- d:\windows\system32\Wininet.dll 2010-02-24 13:11:07 455680 ----a-w- d:\windows\system32\drivers\mrxsmb.sys 2010-02-17 08:10:28 2189952 ----a-w- d:\windows\system32\ntoskrnl.exe 2010-02-16 13:25:04 2066816 ----a-w- d:\windows\system32\ntkrnlpa.exe 2010-02-12 04:33:11 100864 ----a-w- d:\windows\system32\6to4svc.dll ============= FINISH: 22:06:41,87 =============== А атач-ът е прикачен. P.S.Винаги ли пишеш целите обяснения, 'щото ако е да може да ми спестиш половината 'щото не съм чак толкова...ъъъ...неразбиращ.

Здравейте(добър вечер), от 1 седмица имам хр, до 3/4 ден си работеше (повече от) убер перфектно.Обаче нещо стана ,предполагам след като използвах КейГен-а за ТюнУп Утайлитис(доколкото разбирам от тези логове).Значи нета си работеше и нещо стана...Реших да се доверя на Гошо врачката, защото нета се оправи за два часа горе долу. Е ето ги логовете: mbam: Malwarebytes' Anti-Malware 1.45 www.malwarebytes.org Версия на базата от данни: 3930 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 17.4.2010 г. 22:13:57 mbam-log-2010-04-17 (22-13-57).txt Тип сканиране: Пълно сканиране (C:\|D:\|F:\|Z:\|) Сканирани обекти: 143841 Изминало време: 26 минута(и), 41 секунда(и) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 0 Заразени стойности в регистратурата: 0 Заразени информационни обекти в регистратурата: 0 Заразени папки: 0 Заразени файлове: 1 Заразени процеси в паметта: (Не бяха открити зловредни обекти) Заразени модули в паметта: (Не бяха открити зловредни обекти) Заразени ключове в регистратурата: (Не бяха открити зловредни обекти) Заразени стойности в регистратурата: (Не бяха открити зловредни обекти) Заразени информационни обекти в регистратурата: (Не бяха открити зловредни обекти) Заразени папки: (Не бяха открити зловредни обекти) Заразени файлове: D:\Програми за инсталиране\TuneUp Utilities 2010 9.0.4020.35\Keygen.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully. hijack Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\RTHDCPL.EXE D:\WINDOWS\system32\igfxtray.exe D:\WINDOWS\system32\hkcmd.exe D:\WINDOWS\system32\igfxpers.exe D:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe D:\WINDOWS\system32\ctfmon.exe D:\WINDOWS\system32\igfxsrvc.exe D:\Program Files\uTorrent\uTorrent.exe D:\Program Files\Skype\Phone\Skype.exe D:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe D:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe D:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe D:\WINDOWS\system32\svchost.exe D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe D:\Program Files\Skype\Plugin Manager\skypePM.exe D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\rundll32.exe D:\WINDOWS\system32\mmc.exe D:\Program Files\XYplorer\XYplorer.exe D:\Program Files\Mozilla Firefox\firefox.exe D:\WINDOWS\system32\wuauclt.exe D:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: Loader Class - {F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD} - (no file) O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [AzMixerSel] D:\Program Files\Realtek\Audio\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [igfxTray] D:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] D:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] D:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [egui] "D:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [OSSelectorReinstall] D:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall.exe O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [uTorrent] "D:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [skype] "D:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [CursorXP] "C:\Program Files\CursorXP\CursorXP.exe" -s O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Autodesk Licensing Service - Autodesk - D:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - D:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: ESET Service (ekrn) - ESET - D:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit (mi-raysat_3dsMax2009_32) - Unknown owner - D:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - D:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe O24 - Desktop Component 0: (no name) - http://www.google.com/ig?hl=bg&source=iglk O24 - Desktop Component 1: (no name) - http://google.bg/ -- End of file - 5002 bytes ____________Край на логове______________ Ъъъъъ, да.Значи сигурен съм, че няма нищо останало от миналата инсталация 'щото изтрих всички дялове, форматирах ги и инсталирах.

Когато котката я няма, мишките танцуват - написаха вандали върху статуята на Христос Спасител, която се извисява над Рио де Жанейро. Надписът трябвало да насочи вниманието на властите към стотиците обикновени хора - убити или изчезнали при престъпления. 38-метровата каменна фугура, която е едно от новите 7 чудеса на света, е в скеле за реставрация. Него са ползвали хулиганите, за да орисуват символа на Бразилия с графити. Вандалите са изписали със спрей надписи по главата, ръцете и гърдите на статуята на Спасителя. Кметът на Рио, цитиран от NYDailynews, нарече графитите „престъпление срещу нацията". "Тези престъпници ще платят за това, което са направили, Те ще отидат в затвора. Рио де Жанейро и Бразилия не заслужават това престъпление", казва Едуардо Пас. Реставрацията започна в началото на февруари и ще струва на градския бюджет 4 милиона долара. Очакваше се да завърши до два месеца. Идеята на Бразилия е заедно със символа на Христос, разперил ръце над Рио, идиличните плажове и страховитите планини, да насочи вниманието на света към две големи спортни събития, на които ще е домакин - Световно първенство по футбол през 2014-а и Олимпийски игри през 2016 година. За благоустрояване и инфраструктура за тези две мащабни мероприятия властите в Бразилия предвиждат да вложат 890 милиарда долара. Преди седмица обаче природно бедствие разруши почти всичко, направено досега. Порои наводниха Рио, причиниха кални свлачища - под вода остана дори култовият стадион Маракана, а разрушителната стихия откъсна достъпа до паметника на Христос Спасител - за пръв път в 80-годишната му история. Бедствието отне живота на 250 бразилци от населените скалисти хълмове над града, където живее една пета от населението на Рио де Жанейро. 4000 семейства останаха без дом, повредени бяха 10 000 къщи. 150 екипа все още работят по отстраняването на щетите от наводнението. Само за ремонтите на сгради и пътища ще отидат 113 милиона долара. Прочутата по цял свят статуя се издига на хълм в националния парк на планината Корковадо, на 709 метра надморското равнище. Автор на идейния проект, в стил Art Deco, е Хейтор да Силва Коста, а паметникът е дело на френския скулптор Пол Ландовски. Изграждането на монумента започва през 1921 година и продължава 10 години, открит е на 12 октомври 1931 г. Пиедесталът на статуята събира над 150 поклонници. Два милиона туристи посещават годишно свещеното място. Взето от otkacheno.info //Лично мнение - браво на тези дето са го написали по две причини: 1.-Не съм вярващ и се опитвам да направя така, че да не се вярва. 2.-Наистина има много престъпност в Бразилия.

Чудно ми е какви устройства им слагат и от къде се пълнят с вода...

'Що не си купиш нова?Сигурно на тази и идва времето...

Торент!?Знаеш ли какво ти е нужно?Ето: ПХП подръжка; MySQL; място. Това е, а хит.бг има (ако се нелъжа) само 10мб и подръжка само на ХТМЛ...

Какво стана, не знам...Значи в последни мъки, прейнсталирах драйвъра 3(точно драйвъра ,ако има значение) и...проработи!!!

go6o_kara, не стана.Нито едното, със времето положението се влошава.В момента освен уаирлес-ът и чрез ЛАН имам нет.Не че има някаква разлика...

Как се прави това?Не съм много запознат с тези настройки точно...

Ок, направих го.Ама дали ще има напредък ще видя по-късно 'щото преди малко си го оправих... Добавено:Не, не става от 5 минути ми зарежда страницата.Същото е навсякъде...

Това лаунчи и аз не го разбрах, а обджект док-ът не върши работа.

Драйвъра си е последна версия и свален от сайта на производителя на лаптопа,за точната версия УИН.Рутера от къде се връща по дефаулт?

Кабела на харда?

Мисля че е от компа 'щото другия комп не го прави този проблем.А рутера е THOMSON TG712.

Преди около седмица инсталирах ХР sp3 x86.Всичко ок в първите 2-3 дни - драйверите за всичко си ги инсталирах, обаче нещо му става на нета от 3 дни.При пускане на кои то и да е браузър инсталиран на компа(лисица/експлорер 8) страницата се зарежда за 10 минути!?!?Причината не я знам...Wireless карата е atheros AR5007EG.Не се сещам каква друга информация да дам, освен това че като му цъкна да оправи мрежата си оправя за около 20 мин... Добавка:След като зареди за 10мин се оправя със времето - всяка страница се зарежда по-бързо.