Препикану мушкату

Изпълних скрипта,но гледам F-Secure си стои.А АВЗ какво ще я правим?И аз исках да сканираме ,но не да се подкара combofix Ще търся другаде причината за прекъсването на нета.

Извинявам се в бързината съм кликнал ....Изтрих combofix по указания начин. virusinfo_syscheck.zip virusinfo_syscure.zip

Докато сканира АВЗ ми спря тока http://www.kaldata.com/forums/public/style_emoticons/<#EMO_DIR#>/sad.gif Дано не е фатално....ще повторя пак сканирането. virusinfo_syscheck.htm virusinfo_syscure.htm

Изписва ми: Error You appear to have a corrupt download.Please download a fresh copi of combofix.exe.

Пуснах си антивирусната и тя го изтри Да мисля че ще се оправя с AVZ

Още си седи http://www.kaldata.com/forums/public/style_emoticons/<#EMO_DIR#>/sad.gif

Windows cannont access the specified device,path,or file.You may not have the appropriate permissions to acces the item.

Изписва ми това... untitled uuu.bmp

combo-fix.exe си седи на декстопа.

Неще да се маха ....а 2 стъпка също не иска да се изпълни http://www.kaldata.com/forums/public/style_emoticons/<#EMO_DIR#>/sad.gif

Имам вече 2 иконки на декстопа а и някаква трета Но ми изписва грешка като го стартирам нещо от рода че не е читав файла...

Нета постоянно ми прекъсва и уж го изтеглих,а не иска да се стартира....постоянно някакви грешки изписва...и не зная как да продължа

Използвам безжичен нет,който от 3-4 дена постоянно прекъсва.През 2-3 минути за по няколко секунди.Оператора ми казва,че няма прекъсване към устроството,което е на покрива,където е антената и рутера. Malwarebytes' Anti-Malware 1.50 www.malwarebytes.org Версия на базата от данни: 5224 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 01.12.2010 14:41:20 mbam-log-2010-12-01 (14-41-20).txt Тип сканиране: Бързо сканиране Сканирани обекти: 138465 Изминало време: 5 минута(и), 6 секунда(и) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 0 Заразени стойности в регистратурата: 0 Заразени информационни обекти в регистратурата: 0 Заразени папки: 0 Заразени файлове: 0 Заразени процеси в паметта: (Не бяха открити зловредни обекти) Заразени модули в паметта: (Не бяха открити зловредни обекти) Заразени ключове в регистратурата: (Не бяха открити зловредни обекти) Заразени стойности в регистратурата: (Не бяха открити зловредни обекти) Заразени информационни обекти в регистратурата: (Не бяха открити зловредни обекти) Заразени папки: (Не бяха открити зловредни обекти) Заразени файлове: (Не бяха открити зловредни обекти) P.S.Докато писах и сканирах нета ми прекъсна поне 10 пъти DDS.txt Attach.txt

Като млад шофьор имах глупоста да дръпна ръчната спирачка при -20градуса.Свалих лоста без проблем,но ръчната не се освободи....Пробвах с лашкане ама пак геле.С малко повече газ колата тръгнаСлед 10 километра се освободи и всичко си беше ОК.След тази случка си карах колата без проблем,така че няма никакви проблеми да се кара и на ръчна,не се плаши Не,че препоръчвам карането на ръчна не ме разбирай погрешно

Благодаря за отделеното време. Паролата ми наистина е много трудна за разгадаване.....Мисля си че явно има намеса на модератор ,но няма проблеми....има и други сайтове за игри на покер.Благодаря още веднъж,за търпението Ви и за готовноста да помагате.Ще ви препоръчвам на всички мои познати

Сканира доста повече от час KASPERSKY ONLINE SCANNER 7.0: scan report Monday, November 8, 2010 Operating system: Microsoft Windows XP Professional Service Pack 3 (build 2600) Kaspersky Online Scanner version: 7.0.26.13 Last database update: Monday, November 08, 2010 10:36:14 Records in database: 4235256 -------------------------------------------------------------------------------- Scan settings: scan using the following database: extended Scan archives: yes Scan e-mail databases: yes Scan area - My Computer: C:\ D:\ E:\ F:\ Scan statistics: Objects scanned: 48482 Threats found: 0 Infected objects found: 0 Suspicious objects found: 0 Scan duration: 01:47:20 No threats found. Scanned area is clean. Selected area has been scanned. Трих наред Дано не съм забравил нещо.....

ROOTREPEAL © AD, 2007-2009 ================================================== Scan Start Time: 2010/11/08 15:26 Program Version: Version 1.3.5.0 Windows Version: Windows XP SP3 ================================================== Drivers ------------------- Name: PCI_PNP2078 Image Path: \Driver\PCI_PNP2078 Address: 0x00000000 Size: 0 File Visible: No Signed: - Status: - Name: rootrepeal.sys Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys Address: 0xA9210000 Size: 49152 File Visible: No Signed: - Status: - Name: sptd Image Path: \Driver\sptd Address: 0x00000000 Size: 0 File Visible: No Signed: - Status: - Name: spzn.sys Image Path: spzn.sys Address: 0xF75F6000 Size: 1048576 File Visible: No Signed: - Status: - SSDT ------------------- #: 011 Function Name: NtAdjustPrivilegesToken Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f17b6 #: 031 Function Name: NtConnectPort Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f0d66 #: 037 Function Name: NtCreateFile Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f141c #: 041 Function Name: NtCreateKey Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f202a #: 046 Function Name: NtCreatePort Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f0c42 #: 050 Function Name: NtCreateSection Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f40e8 #: 052 Function Name: NtCreateSymbolicLinkObject Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f446e #: 053 Function Name: NtCreateThread Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f062e #: 063 Function Name: NtDeleteKey Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f19a2 #: 065 Function Name: NtDeleteValueKey Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f1ba2 #: 068 Function Name: NtDuplicateObject Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f0434 #: 071 Function Name: NtEnumerateKey Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f2768 #: 073 Function Name: NtEnumerateValueKey Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f29be #: 097 Function Name: NtLoadDriver Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f3af8 #: 105 Function Name: NtMakeTemporaryObject Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f0ffe #: 116 Function Name: NtOpenFile Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f15f8 #: 119 Function Name: NtOpenKey Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f201a #: 122 Function Name: NtOpenProcess Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f0062 #: 125 Function Name: NtOpenSection Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f12a2 #: 128 Function Name: NtOpenThread Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f0266 #: 160 Function Name: NtQueryKey Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f2bcc #: 161 Function Name: NtQueryMultipleValueKey Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f3020 #: 177 Function Name: NtQueryValueKey Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f2dde #: 192 Function Name: NtRenameKey Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f2580 #: 200 Function Name: NtRequestWaitReplyPort Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f3590 #: 210 Function Name: NtSecureConnectPort Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f3844 #: 237 Function Name: NtSetSecurityObject Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f1df2 #: 240 Function Name: NtSetSystemInformation Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f3df0 #: 247 Function Name: NtSetValueKey Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f22f8 #: 249 Function Name: NtShutdownSystem Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f0f98 #: 255 Function Name: NtSystemDebugControl Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f118e #: 257 Function Name: NtTerminateProcess Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f0a44 #: 258 Function Name: NtTerminateThread Status: Hooked by "C:\WINDOWS\System32\DRIVERS\cmdguard.sys" at address 0xaa2f0832 ==EOF==

Изписва ми,че не може да се изпълни http://www.kaldata.com/forums/public/style_emoticons/<#EMO_DIR#>/sad.gif

All processes killed ========== OTL ========== Service VcommMgr stopped successfully! Service VcommMgr deleted successfully! File C:\WINDOWS\System32\Drivers\VcommMgr.sys File not found not found. Service VComm stopped successfully! Service VComm deleted successfully! File C:\WINDOWS\System32\DRIVERS\VComm.sys File not found not found. Service USBModem stopped successfully! Service USBModem deleted successfully! File C:\WINDOWS\System32\DRIVERS\lgusbmodem.sys File not found not found. Service usbbus stopped successfully! Service usbbus deleted successfully! File C:\WINDOWS\System32\DRIVERS\lgusbbus.sys File not found not found. Service Btcsrusb stopped successfully! Service Btcsrusb deleted successfully! File C:\WINDOWS\System32\Drivers\btcusb.sys File not found not found. Service BT stopped successfully! Service BT deleted successfully! File C:\WINDOWS\System32\DRIVERS\btnetdrv.sys File not found not found. Prefs.js: "Ask.com" removed from browser.search.defaultengine Prefs.js: "Ask.com" removed from browser.search.order.1 Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected] deleted successfully. File C:\Program Files\MyWebSearch\bar\firefox not found. C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\rrofjmug.default\searchplugins\mywebsearch.xml moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found. Registry value HKEY_USERS\S-1-5-21-1220945662-884357618-1801674531-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ not found. Registry value HKEY_USERS\S-1-5-21-1220945662-884357618-1801674531-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found. Registry value HKEY_USERS\S-1-5-21-1220945662-884357618-1801674531-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found. Registry value HKEY_USERS\S-1-5-21-1220945662-884357618-1801674531-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully. Registry key HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions\ not found. Registry key HKEY_USERS\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions\ not found. Registry key HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions\ not found. Registry key HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions\ not found. Registry key HKEY_USERS\S-1-5-21-1220945662-884357618-1801674531-1003\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully. Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} C:\WINDOWS\Downloaded Program Files\erma.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7} C:\WINDOWS\Downloaded Program Files\gp.inf not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:autocheck autochk * deleted successfully. ========== FILES ========== C:\RECYCLER\S-1-5-21-1220945662-884357618-1801674531-1003 folder moved successfully. C:\RECYCLER folder moved successfully. D:\RECYCLER\S-1-5-21-1220945662-884357618-1801674531-1003 folder moved successfully. D:\RECYCLER folder moved successfully. < ipconfig /flushdns /c > Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Documents and Settings\USER\Desktop\cmd.bat deleted successfully. C:\Documents and Settings\USER\Desktop\cmd.txt deleted successfully. ========== REGISTRY ========== Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Gizmo5\Gizmo5.exe deleted successfully. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Messenger\msmsgs.exe deleted successfully. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Opera 11.00 internal\opera.exe deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 56502 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: USER ->Temp folder emptied: 1640208 bytes ->Temporary Internet Files folder emptied: 37254215 bytes ->Java cache emptied: 29626 bytes ->FireFox cache emptied: 35414354 bytes ->Google Chrome cache emptied: 40459557 bytes ->Apple Safari cache emptied: 0 bytes ->Opera cache emptied: 0 bytes ->Flash cache emptied: 65067 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 21325899 bytes %systemroot%\System32\dllcache .tmp files removed: 11063808 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 255 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 141.00 mb [EMPTYFLASH] User: Administrator User: All Users User: Default User ->Flash cache emptied: 0 bytes User: LocalService User: NetworkService User: USER ->Flash cache emptied: 0 bytes Total Flash Files Cleaned = 0.00 mb OTL by OldTimer - Version 3.2.17.3 log created on 11082010_143054 Files\Folders moved on Reboot... C:\Documents and Settings\USER\Local Settings\Temporary Internet Files\Content.IE5\VIJ323IM\xd_proxy[1].htm moved successfully. C:\Documents and Settings\USER\Local Settings\Temporary Internet Files\Content.IE5\ME38F57E\adsCADAVHRD.htm moved successfully. C:\Documents and Settings\USER\Local Settings\Temporary Internet Files\Content.IE5\LXVPZHGV\adsCA0TFU4K.htm moved successfully. C:\Documents and Settings\USER\Local Settings\Temporary Internet Files\Content.IE5\F4OUNAPM\google_bg[1].htm moved successfully. C:\Documents and Settings\USER\Local Settings\Temporary Internet Files\Content.IE5\F4OUNAPM\like[2].htm moved successfully. C:\Documents and Settings\USER\Local Settings\Temporary Internet Files\Content.IE5\690ZD5Q0\adsCAYNSJ9M.htm moved successfully. C:\Documents and Settings\USER\Local Settings\Temporary Internet Files\Content.IE5\690ZD5Q0\afr[1].htm moved successfully. C:\Documents and Settings\USER\Local Settings\Temporary Internet Files\Content.IE5\690ZD5Q0\index[1].php moved successfully. C:\Documents and Settings\USER\Local Settings\Temporary Internet Files\Content.IE5\0LLEFPH9\adsCA4WTVU8.htm moved successfully. Registry entries deleted on Reboot... Стъпка 2 нещо не става...Не иска да се тегли файла

Трябва ли да правя някакви настройки на OTL?

OTL.Txt Extras.Txt

GMER нещо не тръгва.преименувах го ,но не иска .....изписва ми че не може,а и не ми дава да го изтрия http://www.kaldata.com/forums/public/style_emoticons/<#EMO_DIR#>/sad.gif Да продължа ли със стъпка 2?

Здравейте Играя покер в един сайт и някой ми е влязал в акаунта и ми е източил точките.Не се притеснявам от загубата,защото играя с в иртуални пари,но ме притеснява ,че може да е използван зловреден софтуер.Паролата ми е комбинация от цифри и букви,които зная само аз. Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Версия на базата от данни: 5072 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 08.11.2010 12:14:59 mbam-log-2010-11-08 (12-14-59).txt Тип сканиране: Бързо сканиране Сканирани обекти: 144047 Изминало време: 8 минута(и), 29 секунда(и) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 0 Заразени стойности в регистратурата: 0 Заразени информационни обекти в регистратурата: 0 Заразени папки: 0 Заразени файлове: 0 Заразени процеси в паметта: (Не бяха открити зловредни обекти) Заразени модули в паметта: (Не бяха открити зловредни обекти) Заразени ключове в регистратурата: (Не бяха открити зловредни обекти) Заразени стойности в регистратурата: (Не бяха открити зловредни обекти) Заразени информационни обекти в регистратурата: (Не бяха открити зловредни обекти) Заразени папки: (Не бяха открити зловредни обекти) Заразени файлове: (Не бяха открити зловредни обекти) Attach.txt DDS.txt

Благодаря за помоща

Прочети внимателно това: http://www.kaldata.com/forums/index.php?app=forums&module=forums&section=rules&f=137 Не знаеш ли български?