TpuHuTu

Аз изобщо не мога да се свържа през него, камо ли да тегля. Просто си знае, че "Internet Explorer cannot display the webpage" и това е. Skype и той - "Cannot load the DLL (POWRPROF.dll)!" Други програми дали са се прецакали, не знам, или поне не съм видял все още. Firewall изчезна и той някъде - не се пуска с РС-то.

След извършеното действие, нямаше рестарт, затова рестартирах ръчно. Отново прикачвам лог-а, тъй като коментара ми става прекалено голям! l2og.txt

System Tools->System Restore! Ето тук ми се появява ето тази грешка: Рестартирах, но се появи същото. Не знам дали това има връзка с действието, което ме карате да извърша, но трябва да вметна, че докато се пуска РС-то имам избор от Windows Xp и Windows Recovery Console, или нещо от сорта. За секунда имам избор да цъкна нещо или РС-то просто си продължава и се включва.

При опит да сваля Servise Pack 3 от линка, който сте дал, малко след започването спира да се сваля. Опитах с Мозила и с Опера, но и с двата браузъра се прекратява. Като разгледам свалянията от Опера, за грешка на свалянето ми изписва "Неуспех при пускане на приложение"

При опит да извърша това действие ми излиза ето това :

Незнам каква сага се получава, но аз имам чувството, че се въртим в някакъв омагьосън кръг, само дето половината ми програми ги няма, а останалата част от тях не се стартират, или заработват след настройки....както и да е. След като стартирах ComboFix-a рестартирах и на десктопа незнайно защо ми се появи иконата на IE, но уви като я стартирах пак не се свърза.. Ето и лога от програмата, само че прикачен, тъй като не ми дава да публикувам отговора си, защото е прекалено голям! log.txt

IE все още не работи, а skype ми дава същата грешка като преди.

Мисля, че тук се справих. MBRCheck, version 1.2.3 (c) 2010, AD Command-line: Windows Version: Windows XP Professional Windows Information: Service Pack 3 (build 2600) Logical Drives Mask: 0x0000010d Kernel Drivers (total 126): 0x804D7000 \WINDOWS\system32\ntkrnlpa.exe 0x806E4000 \WINDOWS\system32\hal.dll 0xF7987000 \WINDOWS\system32\KDCOM.DLL 0xF7897000 \WINDOWS\system32\BOOTVID.dll 0xF7358000 ACPI.sys 0xF7989000 \WINDOWS\system32\DRIVERS\WMILIB.SYS 0xF7347000 pci.sys 0xF7487000 isapnp.sys 0xF7A4F000 pciide.sys 0xF7707000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS 0xF7497000 MountMgr.sys 0xF7328000 ftdisk.sys 0xF798B000 dmload.sys 0xF7302000 dmio.sys 0xF770F000 PartMgr.sys 0xF74A7000 sfsync02.sys 0xF74B7000 VolSnap.sys 0xF72EA000 atapi.sys 0xF74C7000 disk.sys 0xF74D7000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS 0xF72CA000 fltMgr.sys 0xF72B8000 sr.sys 0xF74E7000 PxHelp20.sys 0xF72A1000 KSecDD.sys 0xF7214000 Ntfs.sys 0xF71E7000 NDIS.sys 0xF71D3000 sfvfs02.sys 0xF7717000 sfhlp02.sys 0xF71C1000 sfdrv01.sys 0xF71A7000 Mup.sys 0xF771F000 BTHidMgr.sys 0xF7657000 \SystemRoot\system32\DRIVERS\processr.sys 0xF7667000 \SystemRoot\system32\DRIVERS\serial.sys 0xF794F000 \SystemRoot\system32\DRIVERS\serenum.sys 0xF781F000 \SystemRoot\system32\DRIVERS\fdc.sys 0xF6966000 \SystemRoot\system32\DRIVERS\parport.sys 0xF7677000 \SystemRoot\system32\DRIVERS\i8042prt.sys 0xF7827000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0xF782F000 \SystemRoot\system32\DRIVERS\mouclass.sys 0xF7837000 \SystemRoot\system32\DRIVERS\usbohci.sys 0xF6942000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0xF783F000 \SystemRoot\system32\DRIVERS\usbehci.sys 0xF691A000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0xF7687000 \SystemRoot\system32\DRIVERS\imapi.sys 0xF7697000 \SystemRoot\system32\DRIVERS\cdrom.sys 0xF76A7000 \SystemRoot\system32\DRIVERS\redbook.sys 0xF68F7000 \SystemRoot\system32\DRIVERS\ks.sys 0xF68DF000 \SystemRoot\system32\DRIVERS\Rtenicxp.sys 0xF6529000 \SystemRoot\system32\DRIVERS\ati2mtag.sys 0xF6515000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS 0xF76B7000 \SystemRoot\System32\Drivers\VcommMgr.sys 0xF7957000 \SystemRoot\system32\drivers\Dyncal.sys 0xF7847000 \SystemRoot\system32\drivers\HIDPARSE.SYS 0xF795B000 \SystemRoot\system32\DRIVERS\vbtenum.sys 0xF784F000 \SystemRoot\system32\DRIVERS\blueletaudio.sys 0xF64F1000 \SystemRoot\system32\DRIVERS\portcls.sys 0xF76C7000 \SystemRoot\system32\DRIVERS\drmk.sys 0xF7B18000 \SystemRoot\system32\DRIVERS\audstub.sys 0xF76D7000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0xF795F000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0xF64DA000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0xF76E7000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0xF76F7000 \SystemRoot\system32\DRIVERS\raspptp.sys 0xF7857000 \SystemRoot\system32\DRIVERS\TDI.SYS 0xF64C9000 \SystemRoot\system32\DRIVERS\psched.sys 0xF7517000 \SystemRoot\system32\DRIVERS\msgpc.sys 0xF785F000 \SystemRoot\system32\DRIVERS\ptilink.sys 0xF7867000 \SystemRoot\system32\DRIVERS\raspti.sys 0xF63F9000 \SystemRoot\system32\DRIVERS\rdpdr.sys 0xF7527000 \SystemRoot\system32\DRIVERS\termdd.sys 0xF79A9000 \SystemRoot\system32\DRIVERS\swenum.sys 0xF639B000 \SystemRoot\system32\DRIVERS\update.sys 0xF797B000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0xF7537000 \SystemRoot\system32\DRIVERS\AmdLLD.sys 0xF7547000 \SystemRoot\System32\Drivers\NDProxy.SYS 0xF7557000 \SystemRoot\system32\DRIVERS\usbhub.sys 0xF79AF000 \SystemRoot\system32\DRIVERS\USBD.SYS 0xEDE61000 \SystemRoot\system32\drivers\RtkHDAud.sys 0xF786F000 \SystemRoot\system32\DRIVERS\flpydisk.sys 0xF7923000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0xF7A65000 \SystemRoot\System32\Drivers\Null.SYS 0xF79B3000 \SystemRoot\System32\Drivers\Beep.SYS 0xF787F000 \SystemRoot\System32\drivers\vga.sys 0xF79B5000 \SystemRoot\System32\Drivers\mnmdd.SYS 0xF79B7000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0xF7887000 \SystemRoot\System32\Drivers\Msfs.SYS 0xF788F000 \SystemRoot\System32\Drivers\Npfs.SYS 0xF7927000 \SystemRoot\system32\DRIVERS\rasacd.sys 0xEDDDE000 \SystemRoot\system32\DRIVERS\ipsec.sys 0xEDD85000 \SystemRoot\system32\DRIVERS\tcpip.sys 0xEDD5D000 \SystemRoot\system32\DRIVERS\netbt.sys 0xEDD37000 \SystemRoot\system32\DRIVERS\ipnat.sys 0xF75A7000 \SystemRoot\system32\DRIVERS\wanarp.sys 0xF7933000 \SystemRoot\System32\drivers\ws2ifsl.sys 0xEDD15000 \SystemRoot\System32\drivers\afd.sys 0xF75B7000 \SystemRoot\system32\DRIVERS\netbios.sys 0xEDCEA000 \SystemRoot\system32\DRIVERS\rdbss.sys 0xEDC7A000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0xF75C7000 \SystemRoot\System32\Drivers\Fips.SYS 0xF75E7000 \SystemRoot\System32\Drivers\Cdfs.SYS 0xEDBC2000 \SystemRoot\System32\Drivers\dump_atapi.sys 0xF79B9000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS 0xBF800000 \SystemRoot\System32\win32k.sys 0xF6383000 \SystemRoot\System32\drivers\Dxapi.sys 0xF7767000 \SystemRoot\System32\watchdog.sys 0xBF000000 \SystemRoot\System32\drivers\dxg.sys 0xF7AE6000 \SystemRoot\System32\drivers\dxgthk.sys 0xBF012000 \SystemRoot\System32\ati2dvag.dll 0xBF065000 \SystemRoot\System32\ati2cqag.dll 0xBF0FE000 \SystemRoot\System32\atikvmag.dll 0xBF182000 \SystemRoot\System32\atiok3x2.dll 0xBF1CD000 \SystemRoot\System32\ati3duag.dll 0xBF572000 \SystemRoot\System32\ativvaxx.dll 0xBFFA0000 \SystemRoot\System32\ATMFD.DLL 0xEB8AA000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0xEDC2A000 \SystemRoot\system32\DRIVERS\rspndr.sys 0xEB615000 \SystemRoot\system32\drivers\wdmaud.sys 0xEB78A000 \SystemRoot\system32\drivers\sysaudio.sys 0xEB1B1000 \SystemRoot\system32\DRIVERS\mrxdav.sys 0xF79CF000 \SystemRoot\System32\Drivers\ParVdm.SYS 0xEB16E000 \SystemRoot\system32\DRIVERS\atksgt.sys 0xF775F000 \SystemRoot\system32\DRIVERS\lirsgt.sys 0xEB0A4000 \SystemRoot\system32\DRIVERS\srv.sys 0xF707A000 \SystemRoot\System32\Drivers\HTTP.sys 0xBA7D5000 \SystemRoot\system32\drivers\kmixer.sys 0x7C900000 \WINDOWS\system32\ntdll.dll Processes (total 29): 0 System Idle Process 4 System 416 C:\WINDOWS\system32\smss.exe 464 csrss.exe 496 C:\WINDOWS\system32\winlogon.exe 540 C:\WINDOWS\system32\services.exe 552 C:\WINDOWS\system32\lsass.exe 728 C:\WINDOWS\system32\svchost.exe 776 svchost.exe 844 C:\WINDOWS\system32\svchost.exe 956 svchost.exe 1004 svchost.exe 1216 C:\WINDOWS\system32\spoolsv.exe 1468 C:\WINDOWS\explorer.exe 1664 C:\WINDOWS\RTHDCPL.exe 1680 C:\Program Files\Winamp\winampa.exe 1688 C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe 1704 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe 1712 C:\Program Files\Common Files\Java\Java Update\jusched.exe 1748 C:\WINDOWS\Datecs\Flex2K.exe 1804 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe 1284 svchost.exe 1340 C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe 1436 C:\Program Files\Java\jre6\bin\jqs.exe 1580 C:\WINDOWS\system32\svchost.exe 820 wmiprvse.exe 1912 alg.exe 2728 C:\Program Files\Opera\opera.exe 2976 C:\Documents and Settings\Puhi\Desktop\MBRCheck.exe \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS) \\.\D: --> \\.\PhysicalDrive0 at offset 0x00000013`4ed9c400 (NTFS) PhysicalDrive0 Model Number: WDCWD3200AAJS-00L7A0, Rev: 01.03E01 Size Device Name MBR Status -------------------------------------------- 298 GB \\.\PhysicalDrive0 Windows XP MBR code detected SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A Done!

Тъй като записващото устройство е старо и записва само CD, не бях записвал досега и нямам Nero. Направих няколко опита да го инсталирам, но или отказва да се самоизтегли (като EOS) или, като го изтеглих от замунда, ми дава грешка всеки път "An error occurred during the copy process (file name). Error 183. Cannot create a file when that file already exists. Please reboot your computer and retry." Трих папката, рестартирах, но ефект няма. Все същото съобщение излиза. Ако предложите друга програма за записване, ще опитам с нея, тъй като не съм запознат.

Не.

Отново намира нещо. MBRCheck, version 1.2.3 (c) 2010, AD Command-line: Windows Version: Windows XP Professional Windows Information: Service Pack 3 (build 2600) Logical Drives Mask: 0x0000010d Kernel Drivers (total 126): 0x804D7000 \WINDOWS\system32\ntkrnlpa.exe 0x806E4000 \WINDOWS\system32\hal.dll 0xF7987000 \WINDOWS\system32\KDCOM.DLL 0xF7897000 \WINDOWS\system32\BOOTVID.dll 0xF7358000 ACPI.sys 0xF7989000 \WINDOWS\system32\DRIVERS\WMILIB.SYS 0xF7347000 pci.sys 0xF7487000 isapnp.sys 0xF7A4F000 pciide.sys 0xF7707000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS 0xF7497000 MountMgr.sys 0xF7328000 ftdisk.sys 0xF798B000 dmload.sys 0xF7302000 dmio.sys 0xF770F000 PartMgr.sys 0xF74A7000 sfsync02.sys 0xF74B7000 VolSnap.sys 0xF72EA000 atapi.sys 0xF74C7000 disk.sys 0xF74D7000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS 0xF72CA000 fltMgr.sys 0xF72B8000 sr.sys 0xF74E7000 PxHelp20.sys 0xF72A1000 KSecDD.sys 0xF7214000 Ntfs.sys 0xF71E7000 NDIS.sys 0xF71D3000 sfvfs02.sys 0xF7717000 sfhlp02.sys 0xF71C1000 sfdrv01.sys 0xF71A7000 Mup.sys 0xF771F000 BTHidMgr.sys 0xF7667000 \SystemRoot\system32\DRIVERS\processr.sys 0xF7677000 \SystemRoot\system32\DRIVERS\serial.sys 0xF7953000 \SystemRoot\system32\DRIVERS\serenum.sys 0xF780F000 \SystemRoot\system32\DRIVERS\fdc.sys 0xF6927000 \SystemRoot\system32\DRIVERS\parport.sys 0xF7687000 \SystemRoot\system32\DRIVERS\i8042prt.sys 0xF7817000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0xF781F000 \SystemRoot\system32\DRIVERS\mouclass.sys 0xF7827000 \SystemRoot\system32\DRIVERS\usbohci.sys 0xF6903000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0xF782F000 \SystemRoot\system32\DRIVERS\usbehci.sys 0xF68DB000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0xF7697000 \SystemRoot\system32\DRIVERS\imapi.sys 0xF76A7000 \SystemRoot\system32\DRIVERS\cdrom.sys 0xF76B7000 \SystemRoot\system32\DRIVERS\redbook.sys 0xF68B8000 \SystemRoot\system32\DRIVERS\ks.sys 0xF68A0000 \SystemRoot\system32\DRIVERS\Rtenicxp.sys 0xF64EA000 \SystemRoot\system32\DRIVERS\ati2mtag.sys 0xF64D6000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS 0xF76C7000 \SystemRoot\System32\Drivers\VcommMgr.sys 0xF795B000 \SystemRoot\system32\drivers\Dyncal.sys 0xF7837000 \SystemRoot\system32\drivers\HIDPARSE.SYS 0xF795F000 \SystemRoot\system32\DRIVERS\vbtenum.sys 0xF783F000 \SystemRoot\system32\DRIVERS\blueletaudio.sys 0xF64B2000 \SystemRoot\system32\DRIVERS\portcls.sys 0xF76D7000 \SystemRoot\system32\DRIVERS\drmk.sys 0xF7B17000 \SystemRoot\system32\DRIVERS\audstub.sys 0xF76E7000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0xF7963000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0xF649B000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0xF76F7000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0xF69F3000 \SystemRoot\system32\DRIVERS\raspptp.sys 0xF7847000 \SystemRoot\system32\DRIVERS\TDI.SYS 0xF648A000 \SystemRoot\system32\DRIVERS\psched.sys 0xF69E3000 \SystemRoot\system32\DRIVERS\msgpc.sys 0xF784F000 \SystemRoot\system32\DRIVERS\ptilink.sys 0xF7857000 \SystemRoot\system32\DRIVERS\raspti.sys 0xF645A000 \SystemRoot\system32\DRIVERS\rdpdr.sys 0xF69D3000 \SystemRoot\system32\DRIVERS\termdd.sys 0xF79A9000 \SystemRoot\system32\DRIVERS\swenum.sys 0xF63FC000 \SystemRoot\system32\DRIVERS\update.sys 0xF7983000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0xF69C3000 \SystemRoot\system32\DRIVERS\AmdLLD.sys 0xF69B3000 \SystemRoot\System32\Drivers\NDProxy.SYS 0xF69A3000 \SystemRoot\system32\DRIVERS\usbhub.sys 0xF79AF000 \SystemRoot\system32\DRIVERS\USBD.SYS 0xEDEC2000 \SystemRoot\system32\drivers\RtkHDAud.sys 0xF785F000 \SystemRoot\system32\DRIVERS\flpydisk.sys 0xF792F000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0xF7A7F000 \SystemRoot\System32\Drivers\Null.SYS 0xF79BD000 \SystemRoot\System32\Drivers\Beep.SYS 0xF787F000 \SystemRoot\System32\drivers\vga.sys 0xF79C1000 \SystemRoot\System32\Drivers\mnmdd.SYS 0xF79C3000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0xF7887000 \SystemRoot\System32\Drivers\Msfs.SYS 0xF788F000 \SystemRoot\System32\Drivers\Npfs.SYS 0xF7933000 \SystemRoot\system32\DRIVERS\rasacd.sys 0xEDE3F000 \SystemRoot\system32\DRIVERS\ipsec.sys 0xEDDE6000 \SystemRoot\system32\DRIVERS\tcpip.sys 0xEDDBE000 \SystemRoot\system32\DRIVERS\netbt.sys 0xEDD98000 \SystemRoot\system32\DRIVERS\ipnat.sys 0xF7557000 \SystemRoot\system32\DRIVERS\wanarp.sys 0xF793F000 \SystemRoot\System32\drivers\ws2ifsl.sys 0xEDD76000 \SystemRoot\System32\drivers\afd.sys 0xF7567000 \SystemRoot\system32\DRIVERS\netbios.sys 0xEDD4B000 \SystemRoot\system32\DRIVERS\rdbss.sys 0xEDCDB000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0xF7577000 \SystemRoot\System32\Drivers\Fips.SYS 0xF75B7000 \SystemRoot\System32\Drivers\Cdfs.SYS 0xEDBFB000 \SystemRoot\System32\Drivers\dump_atapi.sys 0xF79D7000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS 0xBF800000 \SystemRoot\System32\win32k.sys 0xEDEAE000 \SystemRoot\System32\drivers\Dxapi.sys 0xF772F000 \SystemRoot\System32\watchdog.sys 0xBF000000 \SystemRoot\System32\drivers\dxg.sys 0xF7B1B000 \SystemRoot\System32\drivers\dxgthk.sys 0xBF012000 \SystemRoot\System32\ati2dvag.dll 0xBF065000 \SystemRoot\System32\ati2cqag.dll 0xBF0FE000 \SystemRoot\System32\atikvmag.dll 0xBF182000 \SystemRoot\System32\atiok3x2.dll 0xBF1CD000 \SystemRoot\System32\ati3duag.dll 0xBF572000 \SystemRoot\System32\ativvaxx.dll 0xBFFA0000 \SystemRoot\System32\ATMFD.DLL 0xEDC1F000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0xF75E7000 \SystemRoot\system32\DRIVERS\rspndr.sys 0xEB676000 \SystemRoot\system32\drivers\wdmaud.sys 0xEB80B000 \SystemRoot\system32\drivers\sysaudio.sys 0xEB212000 \SystemRoot\system32\DRIVERS\mrxdav.sys 0xF7A4D000 \SystemRoot\System32\Drivers\ParVdm.SYS 0xEB1CF000 \SystemRoot\system32\DRIVERS\atksgt.sys 0xF77A7000 \SystemRoot\system32\DRIVERS\lirsgt.sys 0xEB105000 \SystemRoot\system32\DRIVERS\srv.sys 0xEB50B000 \SystemRoot\System32\Drivers\HTTP.sys 0xBA7D5000 \SystemRoot\system32\drivers\kmixer.sys 0x7C900000 \WINDOWS\system32\ntdll.dll Processes (total 29): 0 System Idle Process 4 System 416 C:\WINDOWS\system32\smss.exe 464 csrss.exe 496 C:\WINDOWS\system32\winlogon.exe 540 C:\WINDOWS\system32\services.exe 552 C:\WINDOWS\system32\lsass.exe 732 C:\WINDOWS\system32\svchost.exe 776 svchost.exe 844 C:\WINDOWS\system32\svchost.exe 964 svchost.exe 1004 svchost.exe 1196 C:\WINDOWS\system32\spoolsv.exe 1472 C:\WINDOWS\explorer.exe 1668 C:\WINDOWS\RTHDCPL.exe 1684 C:\Program Files\Winamp\winampa.exe 1692 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe 1732 C:\Program Files\Common Files\Java\Java Update\jusched.exe 1752 C:\WINDOWS\Datecs\Flex2K.exe 1808 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe 1292 svchost.exe 1372 C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe 1348 C:\Program Files\Java\jre6\bin\jqs.exe 1580 C:\WINDOWS\system32\svchost.exe 1420 alg.exe 2760 C:\Program Files\Opera\opera.exe 2916 C:\Program Files\Winamp\winamp.exe 3012 C:\WINDOWS\system32\CTPdeSrv.exe 204 C:\Documents and Settings\Puhi\Desktop\MBRCheck.exe \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS) \\.\D: --> \\.\PhysicalDrive0 at offset 0x00000013`4ed9c400 (NTFS) PhysicalDrive0 Model Number: WDCWD3200AAJS-00L7A0, Rev: 01.03E01 Size Device Name MBR Status -------------------------------------------- 298 GB \\.\PhysicalDrive0 Unknown MBR code SHA1: 6C7C25672E81AF972795B06F11E2842DECE070E7 Found non-standard or infected MBR. Enter 'Y' and hit ENTER for more options, or 'N' to exit: Done!

Command-line: Windows Version: Windows XP Professional Windows Information: Service Pack 3 (build 2600) Logical Drives Mask: 0x0000010d \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS) \\.\D: --> \\.\PhysicalDrive0 at offset 0x00000013`4ed9c400 (NTFS) Size Device Name MBR Status -------------------------------------------- 298 GB \\.\PhysicalDrive0 Unknown MBR code SHA1: 6C7C25672E81AF972795B06F11E2842DECE070E7 Found non-standard or infected MBR. Enter 'Y' and hit ENTER for more options, or 'N' to exit: y Options: [1] Dump the MBR of a physical disk to file. [2] Restore the MBR of a physical disk with a standard boot code. [3] Exit. Enter your choice: 2 Enter the physical disk number to fix (0-99, -1 to cancel): 0 Available MBR codes: [ 0] Default (Windows XP) [ 1] Windows XP [ 2] Windows Server 2003 [ 3] Windows Vista [ 4] Windows 2008 [ 5] Windows 7 [-1] Cancel Please select the MBR code to write to this drive: 1 Do you want to fix the MBR code? Type 'YES' and hit ENTER to continue: yes Successfully wrote new MBR code! Please reboot your computer to complete the fix. Done! Press ENTER to exit... MBRCheck results.txt

Програмата намери накакъв файл. MBRCheck, version 1.2.3 (c) 2010, AD Command-line: Windows Version: Windows XP Professional Windows Information: Service Pack 3 (build 2600) Logical Drives Mask: 0x0000010d Kernel Drivers (total 126): 0x804D7000 \WINDOWS\system32\ntkrnlpa.exe 0x806E4000 \WINDOWS\system32\hal.dll 0xF7987000 \WINDOWS\system32\KDCOM.DLL 0xF7897000 \WINDOWS\system32\BOOTVID.dll 0xF7358000 ACPI.sys 0xF7989000 \WINDOWS\system32\DRIVERS\WMILIB.SYS 0xF7347000 pci.sys 0xF7487000 isapnp.sys 0xF7A4F000 pciide.sys 0xF7707000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS 0xF7497000 MountMgr.sys 0xF7328000 ftdisk.sys 0xF798B000 dmload.sys 0xF7302000 dmio.sys 0xF770F000 PartMgr.sys 0xF74A7000 sfsync02.sys 0xF74B7000 VolSnap.sys 0xF72EA000 atapi.sys 0xF74C7000 disk.sys 0xF74D7000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS 0xF72CA000 fltMgr.sys 0xF72B8000 sr.sys 0xF74E7000 PxHelp20.sys 0xF72A1000 KSecDD.sys 0xF7214000 Ntfs.sys 0xF71E7000 NDIS.sys 0xF71D3000 sfvfs02.sys 0xF7717000 sfhlp02.sys 0xF71C1000 sfdrv01.sys 0xF71A7000 Mup.sys 0xF771F000 BTHidMgr.sys 0xF7667000 \SystemRoot\system32\DRIVERS\processr.sys 0xF7677000 \SystemRoot\system32\DRIVERS\serial.sys 0xF7953000 \SystemRoot\system32\DRIVERS\serenum.sys 0xF77EF000 \SystemRoot\system32\DRIVERS\fdc.sys 0xF692A000 \SystemRoot\system32\DRIVERS\parport.sys 0xF7687000 \SystemRoot\system32\DRIVERS\i8042prt.sys 0xF77F7000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0xF77FF000 \SystemRoot\system32\DRIVERS\mouclass.sys 0xF7807000 \SystemRoot\system32\DRIVERS\usbohci.sys 0xF6906000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0xF780F000 \SystemRoot\system32\DRIVERS\usbehci.sys 0xF68DE000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0xF7697000 \SystemRoot\system32\DRIVERS\imapi.sys 0xF76A7000 \SystemRoot\system32\DRIVERS\cdrom.sys 0xF76B7000 \SystemRoot\system32\DRIVERS\redbook.sys 0xF68BB000 \SystemRoot\system32\DRIVERS\ks.sys 0xF68A3000 \SystemRoot\system32\DRIVERS\Rtenicxp.sys 0xF64ED000 \SystemRoot\system32\DRIVERS\ati2mtag.sys 0xF64D9000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS 0xF76C7000 \SystemRoot\System32\Drivers\VcommMgr.sys 0xF795B000 \SystemRoot\system32\drivers\Dyncal.sys 0xF7817000 \SystemRoot\system32\drivers\HIDPARSE.SYS 0xF795F000 \SystemRoot\system32\DRIVERS\vbtenum.sys 0xF781F000 \SystemRoot\system32\DRIVERS\blueletaudio.sys 0xF64B5000 \SystemRoot\system32\DRIVERS\portcls.sys 0xF76D7000 \SystemRoot\system32\DRIVERS\drmk.sys 0xF7B12000 \SystemRoot\system32\DRIVERS\audstub.sys 0xF76E7000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0xF7963000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0xF649E000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0xF76F7000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0xF7517000 \SystemRoot\system32\DRIVERS\raspptp.sys 0xF7827000 \SystemRoot\system32\DRIVERS\TDI.SYS 0xF648D000 \SystemRoot\system32\DRIVERS\psched.sys 0xF7527000 \SystemRoot\system32\DRIVERS\msgpc.sys 0xF782F000 \SystemRoot\system32\DRIVERS\ptilink.sys 0xF7837000 \SystemRoot\system32\DRIVERS\raspti.sys 0xF63BD000 \SystemRoot\system32\DRIVERS\rdpdr.sys 0xF7537000 \SystemRoot\system32\DRIVERS\termdd.sys 0xF79A9000 \SystemRoot\system32\DRIVERS\swenum.sys 0xF635F000 \SystemRoot\system32\DRIVERS\update.sys 0xF717F000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0xF7547000 \SystemRoot\system32\DRIVERS\AmdLLD.sys 0xF7557000 \SystemRoot\System32\Drivers\NDProxy.SYS 0xF7567000 \SystemRoot\system32\DRIVERS\usbhub.sys 0xF79AF000 \SystemRoot\system32\DRIVERS\USBD.SYS 0xEDE25000 \SystemRoot\system32\drivers\RtkHDAud.sys 0xF783F000 \SystemRoot\system32\DRIVERS\flpydisk.sys 0xF792F000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0xF7A7A000 \SystemRoot\System32\Drivers\Null.SYS 0xF79BD000 \SystemRoot\System32\Drivers\Beep.SYS 0xF785F000 \SystemRoot\System32\drivers\vga.sys 0xF79BF000 \SystemRoot\System32\Drivers\mnmdd.SYS 0xF79C1000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0xF7867000 \SystemRoot\System32\Drivers\Msfs.SYS 0xF786F000 \SystemRoot\System32\Drivers\Npfs.SYS 0xF7933000 \SystemRoot\system32\DRIVERS\rasacd.sys 0xEDDA2000 \SystemRoot\system32\DRIVERS\ipsec.sys 0xEDD49000 \SystemRoot\system32\DRIVERS\tcpip.sys 0xEDD21000 \SystemRoot\system32\DRIVERS\netbt.sys 0xEDCFB000 \SystemRoot\system32\DRIVERS\ipnat.sys 0xF75F7000 \SystemRoot\system32\DRIVERS\wanarp.sys 0xF793F000 \SystemRoot\System32\drivers\ws2ifsl.sys 0xEDCD9000 \SystemRoot\System32\drivers\afd.sys 0xF7607000 \SystemRoot\system32\DRIVERS\netbios.sys 0xEDCAE000 \SystemRoot\system32\DRIVERS\rdbss.sys 0xEDC3E000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0xF7617000 \SystemRoot\System32\Drivers\Fips.SYS 0xF7657000 \SystemRoot\System32\Drivers\Cdfs.SYS 0xEDB5E000 \SystemRoot\System32\Drivers\dump_atapi.sys 0xF79D9000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS 0xBF800000 \SystemRoot\System32\win32k.sys 0xEDE15000 \SystemRoot\System32\drivers\Dxapi.sys 0xF787F000 \SystemRoot\System32\watchdog.sys 0xBF000000 \SystemRoot\System32\drivers\dxg.sys 0xF7B25000 \SystemRoot\System32\drivers\dxgthk.sys 0xBF012000 \SystemRoot\System32\ati2dvag.dll 0xBF065000 \SystemRoot\System32\ati2cqag.dll 0xBF0FE000 \SystemRoot\System32\atikvmag.dll 0xBF182000 \SystemRoot\System32\atiok3x2.dll 0xBF1CD000 \SystemRoot\System32\ati3duag.dll 0xBF572000 \SystemRoot\System32\ativvaxx.dll 0xBFFA0000 \SystemRoot\System32\ATMFD.DLL 0xEB866000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0xF646D000 \SystemRoot\system32\DRIVERS\rspndr.sys 0xEB5D9000 \SystemRoot\system32\drivers\wdmaud.sys 0xEB736000 \SystemRoot\system32\drivers\sysaudio.sys 0xEB175000 \SystemRoot\system32\DRIVERS\mrxdav.sys 0xF7A29000 \SystemRoot\System32\Drivers\ParVdm.SYS 0xEB132000 \SystemRoot\system32\DRIVERS\atksgt.sys 0xF779F000 \SystemRoot\system32\DRIVERS\lirsgt.sys 0xEB068000 \SystemRoot\system32\DRIVERS\srv.sys 0xEB3F2000 \SystemRoot\System32\Drivers\HTTP.sys 0xBA6DB000 \SystemRoot\system32\drivers\kmixer.sys 0x7C900000 \WINDOWS\system32\ntdll.dll Processes (total 29): 0 System Idle Process 4 System 416 C:\WINDOWS\system32\smss.exe 464 csrss.exe 496 C:\WINDOWS\system32\winlogon.exe 540 C:\WINDOWS\system32\services.exe 552 C:\WINDOWS\system32\lsass.exe 736 C:\WINDOWS\system32\svchost.exe 780 svchost.exe 848 C:\WINDOWS\system32\svchost.exe 964 svchost.exe 1008 svchost.exe 1196 C:\WINDOWS\system32\spoolsv.exe 1488 C:\WINDOWS\explorer.exe 1668 C:\WINDOWS\RTHDCPL.exe 1684 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe 1692 C:\Program Files\Winamp\winampa.exe 1732 C:\Program Files\Common Files\Java\Java Update\jusched.exe 1748 C:\WINDOWS\Datecs\Flex2K.exe 1812 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe 1296 svchost.exe 1372 C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe 1368 C:\Program Files\Java\jre6\bin\jqs.exe 1044 C:\WINDOWS\system32\svchost.exe 1264 alg.exe 2916 C:\Program Files\Opera\opera.exe 3528 C:\Program Files\Winamp\winamp.exe 3576 C:\WINDOWS\system32\CTPdeSrv.exe 2776 C:\Documents and Settings\Puhi\Desktop\MBRCheck.exe \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS) \\.\D: --> \\.\PhysicalDrive0 at offset 0x00000013`4ed9c400 (NTFS) PhysicalDrive0 Model Number: WDCWD3200AAJS-00L7A0, Rev: 01.03E01 Size Device Name MBR Status -------------------------------------------- 298 GB \\.\PhysicalDrive0 Unknown MBR code SHA1: 6C7C25672E81AF972795B06F11E2842DECE070E7 Found non-standard or infected MBR. Enter 'Y' and hit ENTER for more options, or 'N' to exit: Done!

След Стъпка 3 отново не се ъпдейтва.

След СТЪПКА 1 и последвалия рестарт, ми направи впечатление, че не ми зареди Firewall (за момента нямам антивирусна, само него), а след това при опит да заредя skype ми даде следната грешка: По време на изпълнението на СТЪПКА 2 изтеглих Eset online Scenner, но като го стартирах не искаше да се обнови: Опитах да задам custom proxy settings (отдолу) с данните от тази снимка: която е от преди да сменя настройките на браузърите, като съответно въведох и username and password за интернета ми, сложих отметка и отново не искаше да изтегли файловете. Тук СПРЯХ с изпълнението на поставените от вас задачи.

Не. Директно с лан-кабел.

ИЕ не работи, но в крайна сметка досега никога не съм го използвал. Имам го като резервен вариант, ако нещо се прецака с останалите, основно работя с Опера. Заеби го и се съсредоточи върху останалата част от задачите.

All processes killed ========== OTL ========== Error: No service named gupdate) ?????? Google Update (gupdate was found to stop! Service\Driver key gupdate) ?????? Google Update (gupdate not found. File File not found not found. HKU\S-1-5-21-1214440339-515967899-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\S-1-5-21-1214440339-515967899-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully! Prefs.js: "127.0.0.1" removed from network.proxy.http Prefs.js: 63636 removed from network.proxy.http_port Prefs.js: 4 removed from network.proxy.type C:\Documents and Settings\Puhi\Application Data\Mozilla\Firefox\Profiles\6fajuafp.default\searchplugins\conduit.xml moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{E0E899AB-F487-11D5-8D29-0050BA6940E3} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0E899AB-F487-11D5-8D29-0050BA6940E3}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:A26AC9FC deleted successfully. ========== FILES ========== recycler not found in C:\ D:\RECYCLER\S-1-5-21-1214440339-515967899-682003330-1004 folder moved successfully. D:\RECYCLER folder moved successfully. [color=#A23BEC]< ipconfig /flushdns /c >[/color] Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Documents and Settings\Puhi\Desktop\cmd.bat deleted successfully. C:\Documents and Settings\Puhi\Desktop\cmd.txt deleted successfully. ========== COMMANDS ========== C:\WINDOWS\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully Restore points cleared and new OTL Restore Point set! [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService ->Temporary Internet Files folder emptied: 32902 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Puhi ->Temp folder emptied: 632426 bytes ->Temporary Internet Files folder emptied: 434601 bytes ->Java cache emptied: 2978187 bytes ->FireFox cache emptied: 34762753 bytes ->Opera cache emptied: 31396844 bytes ->Flash cache emptied: 63935 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 200704 bytes %systemroot%\System32 .tmp files removed: 2428680 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 16867 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 70,00 mb [EMPTYFLASH] User: Administrator User: All Users User: Default User User: LocalService User: NetworkService User: Puhi ->Flash cache emptied: 0 bytes Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.22.2 log created on 03052011_225630 Files\Folders moved on Reboot... Registry entries deleted on Reboot...

Логове OTL.Txt Extras.Txt

Стартирах програмата, дадох Fix и след мъничко последва рестарт на РС-то. ИЕ все още не се свързва, Опера и Мозила бачкат.

Като извървих процедурата, РС-то не се рестартира, а браузърите пак спряха да се свързват. Рестартирах го ръчно и се оправиха(с настройките, които ти ми даде са си). Мозила и Опера работят, ИЕ - не. Не запазих лог-а веднага като го изкара от програмата, но този е от ":C", предполагам, че трябва да е той : ComboFix 11-03-04.04 - Puhi 03.2011 г. 19:14:25.3.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.1023.678 [GMT 2:00] Running from: c:\documents and settings\Puhi\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\Puhi\Desktop\CFScript.txt . . ((((((((((((((((((((((((( Files Created from 2011-02-05 to 2011-03-05 ))))))))))))))))))))))))))))))) . . 2011-03-04 15:15 . 2010-12-20 16:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-03-04 15:14 . 2010-12-20 16:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-03-04 15:14 . 2011-03-04 15:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-03-03 08:07 . 2011-03-03 08:07 -------- d-----w- c:\program files\Common Files\Java 2011-03-03 08:07 . 2011-02-02 19:40 472808 ----a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll 2011-03-03 08:07 . 2011-02-02 19:40 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-03-03 08:06 . 2011-03-03 08:06 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee 2011-02-26 19:27 . 2011-02-26 19:27 -------- d-----w- c:\program files\VideoLAN 2011-02-23 21:59 . 2011-03-05 08:11 -------- d-----w- c:\documents and settings\Puhi\Application Data\goalbit 2011-02-23 21:58 . 2011-02-23 21:58 -------- d-----w- c:\program files\InhatchTeam 2011-02-05 13:25 . 2011-02-05 13:25 -------- d-----w- c:\program files\BACL . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-02-02 17:19 . 2009-05-27 09:53 73728 ----a-w- c:\windows\system32\javacpl.cpl . . ------- Sigcheck ------- . [-] 2009-04-18 . 25A740D70E8007814A48D3FA1B34FA34 . 361600 . . [5.1.2600.5649] . . c:\windows\system32\drivers\tcpip.sys . [-] 2009-04-18 . C951DB3D9B6EF3CF4B82454D30A8BF59 . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll . ((((((((((((((((((((((((((((( SnapShot@2011-03-04_21.55.54 ))))))))))))))))))))))))))))))))))))))))) . + 2011-03-05 07:07 . 2011-03-05 07:07 16384 c:\windows\Temp\Perflib_Perfdata_748.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDCPL"="RTHDCPL.EXE" [2007-05-10 16342528] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-25 61440] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2009-04-10 37888] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] . c:\documents and settings\All Users\Start Menu\Programs\Startup\ FlexType 2K.lnk - c:\windows\Datecs\Flex2K.exe [2009-7-12 151552] . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "WRP"= 0 (0x0) . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-27 304128] . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^BlueSoleil.lnk] path=c:\documents and settings\All Users\Start Menu\Programs\Startup\BlueSoleil.lnk backup=c:\windows\pss\BlueSoleil.lnkCommon Startup . [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Windows Search.lnk] path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Windows Search.lnk backup=c:\windows\pss\Windows Search.lnkCommon Startup . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] 2010-09-20 21:07 932288 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2011-01-31 08:44 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\amd_dc_opt] 2008-07-22 11:53 77824 ----a-w- c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033] 2004-08-22 14:05 81920 ----a-w- c:\program files\D-Tools\daemon.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] 2008-04-14 02:42 1695232 ------w- c:\program files\Messenger\msmsgs.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2010-10-29 12:49 249064 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe . [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"= "c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"= "d:\\Games\\Heroes III all versions full\\Heroes 3\\h3wog.exe"= "c:\\WINDOWS\\system32\\dplaysvr.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= "c:\\Program Files\\Mozilla Firefox\\firefox.exe"= "c:\\Program Files\\Opera\\opera.exe"= "c:\\Program Files\\Dream Match Tennis Pro Online\\FA.exe"= "d:\\INSTALL\\malki\\GAMES\\volley\\volley.exe"= "c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"= "c:\\Program Files\\SopCast\\adv\\SopAdver.exe"= "c:\\Program Files\\SopCast\\SopCast.exe"= "c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"= "c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "2706:TCP"= 2706:TCP:Inhatch P2P Streaming "2707:TCP"= 2707:TCP:Inhatch P2P Streaming "2708:TCP"= 2708:TCP:Inhatch P2P Streaming "2709:TCP"= 2709:TCP:Inhatch P2P Streaming . R3 DynCal;Dynamic Calibration Service;c:\windows\system32\drivers\DynCal.sys [12.9.2004 і. 09:45 8320] S2 gupdate;Ус»уі° Google Update (gupdate);"c:\program files\Google\Update\GoogleUpdate.exe" /svc --> c:\program files\Google\Update\GoogleUpdate.exe [?] S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [06.4.2009 і. 08:13 13224] S3 SE1008mdm;Sony Ericsson SE1008 Mobile Device Full USB Driver;c:\windows\system32\drivers\SE1008mdm.sys [02.11.2010 і. 23:19 58536] S4 d347bus;d347bus;c:\windows\system32\drivers\d347bus.sys [01.6.2009 і. 22:36 155136] S4 d347prt;d347prt;c:\windows\system32\drivers\d347prt.sys [01.6.2009 і. 22:36 5248] . . ------- Supplementary Scan ------- . uInternet Connection Wizard,ShellNext = iexplore FF - ProfilePath - c:\documents and settings\Puhi\Application Data\Mozilla\Firefox\Profiles\6fajuafp.default\ FF - prefs.js: browser.search.selectedEngine - ZiggyTV FF - prefs.js: browser.startup.homepage - hxxp://www.google.bg/ FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} FF - Ext: Java Quick Starter: [email protected] - c:\program files\Java\jre6\lib\deploy\jqs\ff FF - Ext: Winamp Toolbar: {0b38152b-1b20-484d-a11f-5e04a9b0661f} - %profile%\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} FF - Ext: vShare: vshare@toolbar - %profile%\extensions\vshare@toolbar FF - Ext: TVU Web Player: [email protected] - %profile%\extensions\[email protected] . - - - - ORPHANS REMOVED - - - - . Toolbar-Locked - (no file) . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2011-03-05 19:17 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'winlogon.exe'(696) c:\windows\system32\Ati2evxx.dll . - - - - - - - > 'explorer.exe'(2936) c:\windows\system32\WININET.dll c:\windows\system32\ieframe.dll c:\program files\Creative\Creative Zen Micro\Zen Micro Media Explorer\CTJBNS2.dll c:\program files\Creative\Creative Zen Micro\Zen Micro Media Explorer\CTIntrfc.dll c:\program files\Creative\Creative Zen Micro\Zen Micro Media Explorer\CTConfig.DLL c:\program files\Creative\Creative Zen Micro\Zen Micro Media Explorer\JBNSRES.DLL c:\windows\system32\msi.dll c:\windows\system32\webcheck.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . Completion time: 2011-03-05 19:18:47 ComboFix-quarantined-files.txt 2011-03-05 17:18 ComboFix2.txt 2011-03-04 22:44 ComboFix3.txt 2011-03-04 21:57 . Pre-Run: 56 139 800 576 bytes free Post-Run: 56 134 397 952 bytes free . - - End Of File - - 9DD7A70ADDB7137B66519F2E9D0B9F65

IE отново не се свързва. Излезе ето този log. reset SYSTEM\CurrentControlSet\Services\Dhcp\Parameters\Options\15\RegLocation old REG_MULTI_SZ = SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\?\DhcpDomain SYSTEM\CurrentControlSet\Services\TcpIp\Parameters\DhcpDomain reset SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{0CF875B8-F761-4EBB-A9E0-A02372AB26A6}\NameServerList old REG_MULTI_SZ = <empty> reset SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{0CF875B8-F761-4EBB-A9E0-A02372AB26A6}\NetbiosOptions old REG_DWORD = 2 added SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{563FD3D8-548D-468E-AF58-AF39A9FB77DD}\NetbiosOptions reset SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{7D31D7D9-C142-4564-87ED-8C035D0F8524}\NetbiosOptions old REG_DWORD = 1 added SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{8CFD1800-EC01-4CDB-9E07-ED4D266C3C49}\NetbiosOptions reset SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{9E79284E-81B7-4EEB-A99A-D46C6E7FB0C0}\NameServerList old REG_MULTI_SZ = <empty> added SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{9E79284E-81B7-4EEB-A99A-D46C6E7FB0C0}\NetbiosOptions deleted SYSTEM\CurrentControlSet\Services\Netbt\Parameters\EnableLmhosts deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{0CF875B8-F761-4EBB-A9E0-A02372AB26A6}\NameServer reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7D31D7D9-C142-4564-87ED-8C035D0F8524}\AddressType old REG_DWORD = 1 added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7D31D7D9-C142-4564-87ED-8C035D0F8524}\DisableDynamicUpdate deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7D31D7D9-C142-4564-87ED-8C035D0F8524}\IpAutoconfigurationAddress deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7D31D7D9-C142-4564-87ED-8C035D0F8524}\IpAutoconfigurationMask deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7D31D7D9-C142-4564-87ED-8C035D0F8524}\IpAutoconfigurationSeed reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7D31D7D9-C142-4564-87ED-8C035D0F8524}\RawIpAllowedProtocols old REG_MULTI_SZ = 0 reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7D31D7D9-C142-4564-87ED-8C035D0F8524}\TcpAllowedPorts old REG_MULTI_SZ = 0 reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7D31D7D9-C142-4564-87ED-8C035D0F8524}\UdpAllowedPorts old REG_MULTI_SZ = 0 added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{87A59EBB-E4AB-4D67-8CEA-8C5A36659EA5}\AddressType added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{87A59EBB-E4AB-4D67-8CEA-8C5A36659EA5}\DisableDynamicUpdate reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{87A59EBB-E4AB-4D67-8CEA-8C5A36659EA5}\RawIpAllowedProtocols old REG_MULTI_SZ = 0 reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{87A59EBB-E4AB-4D67-8CEA-8C5A36659EA5}\TcpAllowedPorts old REG_MULTI_SZ = 0 reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{87A59EBB-E4AB-4D67-8CEA-8C5A36659EA5}\UdpAllowedPorts old REG_MULTI_SZ = 0 deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{9E79284E-81B7-4EEB-A99A-D46C6E7FB0C0}\NameServer added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{E4644836-F2C8-4B3A-8C93-A5D0ADB2BD66}\DisableDynamicUpdate deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{E4644836-F2C8-4B3A-8C93-A5D0ADB2BD66}\IpAutoconfigurationAddress deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{E4644836-F2C8-4B3A-8C93-A5D0ADB2BD66}\IpAutoconfigurationMask deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{E4644836-F2C8-4B3A-8C93-A5D0ADB2BD66}\IpAutoconfigurationSeed reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{E4644836-F2C8-4B3A-8C93-A5D0ADB2BD66}\RawIpAllowedProtocols old REG_MULTI_SZ = 0 reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{E4644836-F2C8-4B3A-8C93-A5D0ADB2BD66}\TcpAllowedPorts old REG_MULTI_SZ = 0 reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{E4644836-F2C8-4B3A-8C93-A5D0ADB2BD66}\UdpAllowedPorts old REG_MULTI_SZ = 0 deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DontAddDefaultGatewayDefault added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\SearchList deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\UseDomainNameDevolution reset Linkage\UpperBind for ROOT\NET\0001. bad value was: REG_MULTI_SZ = PSched reset Linkage\UpperBind for PCI\VEN_10EC&DEV_8168&SUBSYS_369C1462&REV_01\4&2235783C&0&0060. bad value was: REG_MULTI_SZ = PSched reset Linkage\UpperBind for ROOT\MS_NDISWANIP\0000. bad value was: REG_MULTI_SZ = PSched <completed>

Направих настройките както ми каза, но отново не иска да заработи. http://prikachi.com/images/936/3057936w.jpg

Добро утро, вече пиша от собственият си компютър и ще те зарина с малко въпроси от моя страна Настройките за Мозила проработиха, а на Опера премахнах отметката от "Прокси сървъри" и също тръгна. Не съм много запознат с тези неща и искам да попитам защо преди с тези настройки браузърите работеха, след това спряха да се свързват , и сега като ги uncheck-нахме пак работят? В общи линии какво променихме. Също така не мога да накарам ИЕ да заработи. Опитах да го настроя, reset-нах ги и пак не иска да се свърже. Един съвет за него? Относно вируса(ите), премахнахме ли ги и какви бяха? Ако сме приключили, кажете кои от програмите, които използвахме да деинсталирам. Също така ако са изтривани някакви мои програми и др. неща също можеш да вметнеш, за да си знам какво е станало. Последно, но не и по важност - в момента нямам антивирусна програма и ще се радвам, ако ми препоръчаш работещ безплатен вариант на добра такава, тъй като снощи не можах да изключа моята и я деинсталирах, защото пречеше на ComboFix-a, а и без това беше доста стар вариант NOD32 2.5, който е за смяна.

Като гледам, май успяхме да се справим с инфектираните файлове, може и да не сме все още, но проблема, който се появи след първото сканиране с Malware все още го има. Имам интернет, пиша по скайп, но като се опитам да вляза в интернет през браузъра - не става. Нито през Опера, нито Мозила, нито ИЕ. Ще се радвам, ако дадеш съвет и за този проблем. Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 5951 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 05.3.2011 г. 01:49:04 mbam-log-2011-03-05 (01-49-04).txt Scan type: Quick scan Objects scanned: 148452 Time elapsed: 1 minute(s), 54 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)