Katrin4i

Вече нямам проблеми със влизането в сайтове а стана и по-бърза връзката ми. Освен това спря да ми забива нета :lol6: Много благодаря, без вас никога нямаше да се справя И последно, какво да направя с ESET Online Scanner? И да, темата е решена

ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6419 # api_version=3.0.2 # EOSSerial=ce4ac2acc19fe441a3f2539d9e0a5b9e # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2011-01-21 07:46:45 # local_time=2011-01-21 09:46:45 (+0200, FLE Standard Time) # country="Bulgaria" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=768 16777215 100 0 348942 348942 0 0 # compatibility_mode=8192 67108863 100 0 427 427 0 0 # scanned=83973 # found=4 # cleaned=4 # scan_time=5269 C:\_OTL.rar a variant of Win32/Conficker.X worm (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ElitumElitebarPokapoka.zip Win32/Bagle.gen.zip worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C D:\torrent\Nokia N-series\Apps\FullScreen Caller\keygen.exe probably a variant of Win32/Agent.LHTRYYZ trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C D:\torrent\Nokia N-series\Apps\ProfiMail 2.40.0\Keygen.exe probably a variant of Win32/Agent.LSGQLDX trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

Да, няма проблеми с английския, а сега всъщност трябва да влизам в интернет чрез ИЕ а не Мозила, така ли

Като инсталирам IE8 ми пише; това инсталиране не поддържа текущия език на операционната ви система

Имам два: Защо кафе като сега е време за водка И какво да направя с тези програмки които съм запаметявала на десктопа си SecurityCheck и Malwarebytes' Anti-Malware

Ако няма да има подобни проблеми не ме притеснява, по-точно май е по-добре вие да ме посъветвате дали да инсталирам

Ще го направя, но в момента съм на работа. Трябва ли да си включа автоматичните ъпдейти на компютъра?

Добро утро Днес ще продължим ли или е готово?

Изпращам рапорта, и след малко ще изпратя линк за архивирания файл Тъй като папката съдържа и лични документи махам линка. от B-boy[styLe] log.txt

В момента архивирам, а може ли вече да си включа антивирусната и каква антивирусна програма бихте ми препоръчали да използвам ?

Добре, до утре и благодаря за търпението

ComboFix 11-01-19.04 - Stanchevi 01.2011 г. 23:24:26.1.1 - x86 Microsoft Windows XP Professional 5.1.2600.2.1251.359.1033.18.1024.526 [GMT 2:00] Running from: c:\documents and settings\Stanchevi\Desktop\ComboFix.exe AV: avast! Internet Security *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D} FW: avast! Internet Security *Disabled* {7591DB91-41F0-48A3-B128-1A293FD8233D} . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\Stanchevi\AppData\LocalLow\Microсoft\reDIr.dll c:\documents and settings\Stanchevi\Application Data\inst.exe c:\windows\system32\detoured.dll c:\windows\system32\Thumbs.db . ((((((((((((((((((((((((( Files Created from 2010-12-20 to 2011-01-20 ))))))))))))))))))))))))))))))) . 2011-01-20 19:54 . 2011-01-20 19:54 -------- d-----w- C:\_OTL 2011-01-20 17:20 . 2010-12-20 16:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-01-20 17:20 . 2011-01-20 17:20 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-01-20 17:20 . 2010-12-20 16:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-01-20 15:48 . 2011-01-20 15:48 -------- d-----w- c:\documents and settings\All Users\Application Data\MFAData 2011-01-20 15:30 . 2011-01-20 15:31 -------- d-----w- c:\documents and settings\Stanchevi\Local Settings\Application Data\Temp 2011-01-17 20:02 . 2011-01-13 08:37 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2011-01-17 20:02 . 2011-01-13 08:41 357968 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2011-01-17 20:02 . 2011-01-13 08:41 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys 2011-01-17 20:02 . 2011-01-13 08:42 99792 ----a-w- c:\windows\system32\drivers\aswFW.sys 2011-01-17 20:00 . 2011-01-13 08:41 189904 ----a-w- c:\windows\system32\drivers\aswNdis2.sys 2011-01-17 20:00 . 2011-01-13 08:37 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2011-01-17 20:00 . 2011-01-13 08:40 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2011-01-17 20:00 . 2011-01-13 08:40 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys 2011-01-17 20:00 . 2011-01-13 08:39 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys 2011-01-17 20:00 . 2011-01-13 08:37 29392 ----a-w- c:\windows\system32\drivers\aavmker4.sys 2011-01-17 20:00 . 2010-09-07 15:24 12112 ----a-w- c:\windows\system32\drivers\aswNdis.sys 2011-01-17 20:00 . 2011-01-13 08:47 38848 ----a-w- c:\windows\avastSS.scr 2011-01-17 20:00 . 2011-01-13 08:47 188216 ----a-w- c:\windows\system32\aswBoot.exe 2011-01-17 18:18 . 2011-01-17 18:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Alwil Software 2011-01-17 14:11 . 2011-01-17 14:11 -------- d-----w- C:\temp 2011-01-17 14:10 . 2011-01-17 14:10 16856 ----a-w- c:\program files\Mozilla Firefox\plugin-container.exe 2011-01-17 14:10 . 2011-01-17 14:10 719832 ----a-w- c:\program files\Mozilla Firefox\mozcpp19.dll 2011-01-14 17:17 . 2011-01-14 17:17 -------- d-----w- c:\windows\system32\wbem\Repository 2011-01-09 14:18 . 2011-01-09 14:18 -------- d-----w- c:\program files\Wizard101(UK) 2010-12-25 12:28 . 2010-12-25 12:30 -------- d-----w- c:\program files\Clarus . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2004-03-17 11:23 . 2009-01-18 19:58 1811584 -c--a-w- c:\program files\NAVSetup.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2011-01-13 08:47 120712 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 6\PCSuite.exe" [2007-12-10 695808] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088] "Google Update"="c:\documents and settings\Stanchevi\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2011-01-20 136176] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768] "AudioDeck"="c:\program files\VIA\VIAudioi\SBADeck\ADeck.exe" [2007-08-09 528384] "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-03 110592] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-14 39792] "DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2006-06-13 127036] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552] "avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-01-13 3396624] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-11-07 1294336] c:\documents and settings\Stanchevi\Start Menu\Programs\Startup\ Picture Motion Browser Media Check Tool.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2010-6-5 385024] Samsung Auto Backup Guage.lnk - c:\program files\Clarus\Samsung Auto Backup\ISFGuage.exe [2010-12-25 823296] Samsung Auto Backup Real-Time Daemon.lnk - c:\program files\Clarus\Samsung Auto Backup\ISFRealTimeD.exe [2010-12-25 65536] Samsung Auto Backup Scheduler.lnk - c:\program files\Clarus\Samsung Auto Backup\ISFTimerD.exe [2010-12-25 102400] c:\documents and settings\All Users\Start Menu\Programs\Startup\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-11-4 113664] Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ \0 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Anno 1701\\Anno1701.exe"= "c:\\Documents and Settings\\Stanchevi\\Desktop\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "40720:UDP"= 40720:UDP:GooglePatch SecurityL2S "35654:TCP"= 35654:TCP:GooglePatch HelpUS "26524:TCP"= 26524:TCP:GooglePatch VideoLive "17499:UDP"= 17499:UDP:GooglePatch PublishOffline "61680:UDP"= 61680:UDP:GooglePatch MailMaker "42531:TCP"= 42531:TCP:GooglePatch JavaGames "47567:TCP"= 47567:TCP:GooglePatch ComponentsPerformance "10299:UDP"= 10299:UDP:GooglePatch VideoAgent R0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\drivers\aswNdis.sys [17.1.2011 г. 22:00 12112] R0 aswNdis2;avast! Firewall Core Firewall Service;c:\windows\system32\drivers\aswNdis2.sys [17.1.2011 г. 22:00 189904] R0 fsbts;fsbts;c:\windows\system32\drivers\fsbts.sys [18.1.2009 г. 14:09 26112] R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [03.8.2008 г. 21:16 717296] R1 aswFW;avast! TDI Firewall driver;c:\windows\system32\drivers\aswFW.sys [17.1.2011 г. 22:02 99792] R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [17.1.2011 г. 22:02 357968] R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [17.1.2011 г. 22:02 294608] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [17.1.2011 г. 22:02 17744] S2 avast! Firewall;avast! Firewall;c:\program files\Alwil Software\Avast5\afwServ.exe [17.1.2011 г. 22:00 119200] S3 mdf15;mdf15;\??\c:\program files\Clarus\Samsung SecretZone\mdf15.sys --> c:\program files\Clarus\Samsung SecretZone\mdf15.sys [?] S3 mvd21;mvd21;\??\c:\program files\Clarus\Samsung SecretZone\mvd21.sys --> c:\program files\Clarus\Samsung SecretZone\mvd21.sys [?] S3 xpzruc;xpzruc;\??\c:\windows\system32\02.tmp --> c:\windows\system32\02.tmp [?] . Contents of the 'Scheduled Tasks' folder 2011-01-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-682003330-884357618-725345543-1003Core.job - c:\documents and settings\Stanchevi\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-01-20 15:30] 2011-01-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-682003330-884357618-725345543-1003UA.job - c:\documents and settings\Stanchevi\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-01-20 15:30] . . ------- Supplementary Scan ------- . uStart Page = IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000 FF - ProfilePath - c:\documents and settings\Stanchevi\Application Data\Mozilla\Firefox\Profiles\atdm8z6v.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2524319&SearchSource=3&q={searchTerms} FF - prefs.js: browser.search.selectedEngine - Feboz Customized Web Search FF - prefs.js: browser.startup.homepage - hxxp://www.google.bg/firefox?client=firefox-a&rls=org.mozilla:bg:official FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} FF - Ext: Get Styles: {6236BA26-C117-4007-928C-DE0716C7FA80} - %profile%\extensions\{6236BA26-C117-4007-928C-DE0716C7FA80} FF - Ext: Usage Stat: {6236BA26-C117-4007-928C-DE0716C7FA96} - %profile%\extensions\{6236BA26-C117-4007-928C-DE0716C7FA96} FF - Ext: FBFan: {6236BA26-C117-4007-928C-DE0716C7FA99} - %profile%\extensions\{6236BA26-C117-4007-928C-DE0716C7FA99} FF - Ext: QAssistant: {63414328-3ab4-2c84-6c41-5a473c4b2ff7} - %profile%\extensions\{63414328-3ab4-2c84-6c41-5a473c4b2ff7} FF - Ext: QAssistant: {63414328-3ab4-2c84-6c41-5a473c4b2ff7} - %profile%\extensions\{63414328-3ab4-2c84-6c41-5a473c4b2ff7} FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} FF - Ext: Java Quick Starter: [email protected] - c:\program files\Java\jre6\lib\deploy\jqs\ff . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2011-01-20 23:30 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run AudioDeck = c:\program files\VIA\VIAudioi\SBADeck\ADeck.exe 1???????????????????????????????????????????????? scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\xpzruc] "ImagePath"="\??\c:\windows\system32\02.tmp" . Completion time: 2011-01-20 23:37:31 ComboFix-quarantined-files.txt 2011-01-20 21:37 Pre-Run: 2 887 974 912 bytes free Post-Run: 2 784 960 512 bytes free WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect - - End Of File - - B7C8818300DE7B3CD2D286C05D798098

Ами, нета ми спря да забива (ако това изобщо има някаква връзка)и освен това влязох в сайта на Аваст Сега да направя ли и другите неща??

All processes killed ========== OTL ========== wscaccess removed from NetSvcs value successfully! Service wscaccess stopped successfully! Service wscaccess deleted successfully! File move failed. C:\WINDOWS\system32\ydeio.dll scheduled to be moved on reboot. ADS C:\Documents and Settings\All Users\Application Data\TEMP:0A8E2C33 deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:89CC7FD8 deleted successfully. ========== COMMANDS ========== C:\WINDOWS\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService ->Temp folder emptied: 65716 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->FireFox cache emptied: 0 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Stanchevi ->Temp folder emptied: 403 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 28522894 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 806 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 27,00 mb [EMPTYFLASH] User: Administrator User: All Users User: Default User User: LocalService User: NetworkService User: Stanchevi ->Flash cache emptied: 0 bytes Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.20.3 log created on 01202011_225916 Files\Folders moved on Reboot... C:\WINDOWS\system32\ydeio.dll moved successfully. Registry entries deleted on Reboot... Извинявам се ако се бавя, но нета ми забиваше...

Сървърът не е намерен Firefox не може да намери сървъра www.avast.com. Пак не мога да вляза, но мисля че Аваста ми се ъпдейтна Опитах да вляза и в сайта на Касперски, Майкрософт.....но не става, явно точно в тези сайтове нещо ми пречи да влизам...

All processes killed ========== OTL ========== Process naPrdMgr.exe killed successfully! No active process named FrameworkService.exe was found! Service SZASSIST stopped successfully! Service SZASSIST deleted successfully! File File not found not found. Service aspnet_state stopped successfully! Service aspnet_state deleted successfully! File File not found not found. Error: No service named McAfeeFramework was found to stop! Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McAfeeFramework deleted successfully. C:\Program Files\McAfee\Common Framework\FrameworkService.exe moved successfully. HKU\S-1-5-21-682003330-884357618-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Registry value HKEY_USERS\S-1-5-21-682003330-884357618-725345543-1003\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found. Registry value HKEY_USERS\S-1-5-21-682003330-884357618-725345543-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found. Registry value HKEY_USERS\S-1-5-21-682003330-884357618-725345543-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully. Registry value HKEY_USERS\S-1-5-21-682003330-884357618-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Run\\0fc310bc1eb5c2cacc16acf946756318 deleted successfully. Registry value HKEY_USERS\S-1-5-21-682003330-884357618-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Run\\DriverUpdaterPro deleted successfully. Registry value HKEY_USERS\S-1-5-21-682003330-884357618-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Run\\EA Core deleted successfully. Registry value HKEY_USERS\S-1-5-21-682003330-884357618-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Run\\Photozig Albums Media Detector deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{14CD42DD-ABCD-3586-DCAB-40E3693E3737}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{14CD42DD-ABCD-3586-DCAB-40E3693E3737}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{14CD42DD-ABCD-3586-DCAB-40E3693E3737}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{14CD42DD-ABCD-3586-DCAB-40E3693E3737}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{575255b6-1021-11e0-b79e-00e04c670f3e}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{575255b6-1021-11e0-b79e-00e04c670f3e}\ not found. File J:\APPInst.exe not found. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:autocheck autochk * deleted successfully. ========== FILES ========== C:\Program Files\McAfee\Common Framework\naPrdMgr.exe moved successfully. File\Folder C:\Program Files\McAfee\Common Framework\FrameworkService.exe not found. File\Folder C:\WINDOWS\system32\ydeio.dl not found. C:\RECYCLER\S-1-5-21-682003330-884357618-725345543-500 folder moved successfully. C:\RECYCLER\S-1-5-21-682003330-884357618-725345543-1003\Dc25 folder moved successfully. C:\RECYCLER\S-1-5-21-682003330-884357618-725345543-1003 folder moved successfully. C:\RECYCLER folder moved successfully. recycler not found in D:\ < ipconfig /flushdns /c > Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Documents and Settings\Stanchevi\Desktop\cmd.bat deleted successfully. C:\Documents and Settings\Stanchevi\Desktop\cmd.txt deleted successfully. ========== COMMANDS ========== C:\WINDOWS\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 65716 bytes ->Temporary Internet Files folder emptied: 32902 bytes ->FireFox cache emptied: 3383905 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 49554 bytes User: Stanchevi ->Temp folder emptied: 25120406 bytes ->Temporary Internet Files folder emptied: 1596914 bytes ->Java cache emptied: 3136860 bytes ->FireFox cache emptied: 301510783 bytes ->Google Chrome cache emptied: 14639485 bytes ->Flash cache emptied: 15783 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2142714 bytes %systemroot%\System32 .tmp files removed: 3005953 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 426432 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 3663555126 bytes Total Files Cleaned = 3 833,00 mb [EMPTYFLASH] User: Administrator User: All Users User: Default User User: LocalService User: NetworkService User: Stanchevi ->Flash cache emptied: 0 bytes Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.20.3 log created on 01202011_215424 Files\Folders moved on Reboot... Registry entries deleted on Reboot...

Май по-добре да я включите в скрипта защото не я намирам в Control Panel за да я деинсталирам Имам файл с тази програма но мисля че в момента не е инсталирана....

Results of screen317's Security Check version 0.99.7 Windows XP Service Pack 2 Out of date service pack!! Internet Explorer 6 Out of date! `````````````````````````````` Antivirus/Firewall Check: Windows Security Center service is not running! This report may not be accurate! Windows Firewall Enabled! avast! Internet Security Antivirus up to date! (On Access scanning disabled!) ``````````````````````````````` Anti-malware/Other Utilities Check: Malwarebytes' Anti-Malware CCleaner Java 6 Update 22 Java 6 Update 7 Out of date Java installed! Adobe Flash Player 10.1.82.76 Adobe Reader 8.1.4 Out of date Adobe Reader installed! Mozilla Firefox (3.6.13) ```````````````````````````````` Process Check: objlist.exe by Laurent Malwarebytes' Anti-Malware mbam.exe Alwil Software Avast5 afwServ.exe Alwil Software Avast5 AvastSvc.exe Alwil Software Avast5 avastUI.exe ``````````End of Log```````````` Готово Extras.Txt OTL.Txt

Сканирах и трябваше да рестартирам, сега откъде да изкарам информацията която трябва да копирам тук? Открих това: Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Версия на базата от данни: 5560 Windows 5.1.2600 Service Pack 2 Internet Explorer 6.0.2900.2180 20.1.2011 г. 20:04:03 mbam-log-2011-01-20 (20-04-03).txt Тип сканиране: Пълно сканиране (A:\|C:\|D:\|E:\|F:\|G:\|H:\|I:\|) Сканирани обекти: 217727 Изминало време: 40 минута(и), 9 секунда(и) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 22 Заразени стойности в регистратурата: 1 Заразени информационни обекти в регистратурата: 0 Заразени папки: 8 Заразени файлове: 34 Заразени процеси в паметта: (Не бяха открити зловредни обекти) Заразени модули в паметта: (Не бяха открити зловредни обекти) Заразени ключове в регистратурата: HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{1D4DB7D0-6EC9-47a3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{1D4DB7D1-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProductsInstaller.Start.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProductsInstaller.Start (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{D518921A-4A03-425E-9873-B9A71756821E} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully. Заразени стойности в регистратурата: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SMS by Jeko Ianev (Worm.P2P) -> Value: SMS by Jeko Ianev -> Quarantined and deleted successfully. Заразени информационни обекти в регистратурата: (Не бяха открити зловредни обекти) Заразени папки: c:\program files\funwebproducts (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\funwebproducts\Installr (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\funwebproducts\Installr\2.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\funwebproducts\screensaver (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\funwebproducts\screensaver\Images (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully. Заразени файлове: c:\program files\funwebproducts\Installr\2.bin\F3EZSETP.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\91BCMEFG\djpagrml[1].gif (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\91BCMEFG\djpagrml[2].gif (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\91BCMEFG\ifonxkv[1].gif (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\91BCMEFG\ixvq[1].bmp (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\91BCMEFG\jaifmanw[1].jpg (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\91BCMEFG\nehfbxbc[1].bmp (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\91BCMEFG\nehfbxbc[1].png (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\91BCMEFG\ymzb[1].png (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\M6LKKLOS\btvil[1].jpg (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\M6LKKLOS\epmtr[1].png (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\M6LKKLOS\pymj[1].bmp (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\M6LKKLOS\zulehp[1].jpg (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\M6LKKLOS\zulehp[2].jpg (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\PZ9OHAE9\adttatz[1].bmp (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\PZ9OHAE9\fyna[1].bmp (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\PZ9OHAE9\ifonxkv[1].bmp (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\PZ9OHAE9\ifonxkv[1].jpg (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\PZ9OHAE9\isbc[1].png (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\PZ9OHAE9\tilct[1].jpg (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\PZ9OHAE9\xwmngl[1].gif (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\PZ9OHAE9\ymzb[1].png (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\PZ9OHAE9\zhabvnei[1].bmp (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\QRJTCDN6\cgrwqfcn[1].gif (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\QRJTCDN6\nehfbxbc[1].bmp (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\QRJTCDN6\xwmngl[1].jpg (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\QRJTCDN6\xwmngl[2].jpg (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\QRJTCDN6\xxrzvoyi[1].jpg (Extension.Mismatch) -> Quarantined and deleted successfully. c:\documents and settings\networkservice\local settings\temporary internet files\Content.IE5\QRJTCDN6\zhabvnei[1].jpg (Extension.Mismatch) -> Quarantined and deleted successfully. c:\program files\Webteh\bsplayerpro\bsplayer.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully. d:\instalacionni programi\winamp 5.51 build 1741 beta pro\Keygen\big and sure keygenerator.exe (Trojan.Downloader) -> Quarantined and deleted successfully. d:\Glory\guitar\guitarpro 5.1 keygen.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully. c:\program files\funwebproducts\Installr\2.bin\F3PLUGIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully. Ето и прикачените файлове Това са прикачените файлове DDS.txt Attach.txt

Здравейте, Имам проблем от известно време, който се състои в това че не мога да влизам в сайтове на антивирусни програми а моят Аваст спря да се ъпдейтва. Явно е някакъв вирус.