Dark^Goddess

Прикачвам log файловете, няма други проблеми с windows-a, всичко се оправи, благодаря ! logs.zip

Сложих си AVG, в момента сканира, оправих проблема с Removable Disk-а точно през Disk Management. Възможно е тези дни да отворя нова тема за другия лаптоп. Благодаря МНОГО за помощта и най-вече бързата реакция !

Results of screen317's Security Check version 0.99.8 Windows 7 (UAC is disabled!) Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: Windows Firewall Enabled! WMI entry may not exist for antivirus; attempting automatic update. ``````````````````````````````` Anti-malware/Other Utilities Check: Malwarebytes' Anti-Malware Java DB 10.5.3.0 Java 6 Update 23 Java SE Development Kit 6 Update 23 ```````````````````````````````` Process Check: objlist.exe by Laurent ``````````End of Log```````````` Ам.. имаме още един компютър със същия проблем, всъщност от него -> флашка -> този. Та, за него същото ли да направя..? И не, засега няма други проблеми с Windows-a. Относно Everest... мога и с него да опитам, за какво точно да гледам? Мерси още веднъж.

Ето го: All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{21ebf2b6-1dee-11e0-b8b2-806e6f6e6963}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21ebf2b6-1dee-11e0-b8b2-806e6f6e6963}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{21ebf2b6-1dee-11e0-b8b2-806e6f6e6963}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21ebf2b6-1dee-11e0-b8b2-806e6f6e6963}\ not found. File move failed. F:\setup.exe scheduled to be moved on reboot. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{67f64348-1dc2-11e0-8178-f04da2a5f13c}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{67f64348-1dc2-11e0-8178-f04da2a5f13c}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{67f64348-1dc2-11e0-8178-f04da2a5f13c}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{67f64348-1dc2-11e0-8178-f04da2a5f13c}\ not found. File D:\SETUP.EXE not found. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:autocheck autochk * deleted successfully. ========== FILES ========== autorun.inf not found in C:\ autorun.inf not found in E:\ File move failed. F:\autorun.inf scheduled to be moved on reboot. autorun.inf not found in H:\ recycler not found in C:\ recycler not found in E:\ recycler not found in F:\ recycler not found in H:\ < ipconfig /flushdns /c > Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Users\Goddess\Desktop\cmd.bat deleted successfully. C:\Users\Goddess\Desktop\cmd.txt deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Goddess ->Temp folder emptied: 313104042 bytes ->Temporary Internet Files folder emptied: 14081661 bytes ->Java cache emptied: 0 bytes ->Google Chrome cache emptied: 252659344 bytes ->Flash cache emptied: 9856 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 6107973 bytes RecycleBin emptied: 997204129 bytes Total Files Cleaned = 1,510.00 mb [EMPTYFLASH] User: All Users User: Default User: Default User User: Goddess ->Flash cache emptied: 0 bytes User: Public Total Flash Files Cleaned = 0.00 mb OTL by OldTimer - Version 3.2.20.6 log created on 01302011_010545 Files\Folders moved on Reboot... File move failed. F:\setup.exe scheduled to be moved on reboot. File move failed. F:\autorun.inf scheduled to be moved on reboot. Registry entries deleted on Reboot... Да кажа че не знам кое и как подейства, но лаптопа спря да заразява флашки. Остана само проблема със странния Removable Disk, който всъщност не съществува

Иии ето новите логове Мерси за бързата реакция, между другото. Extras.Txt OTL.Txt

Ето лог от Malwarebytes : Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 5635 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 1/30/2011 12:06:11 AM mbam-log-2011-01-30 (00-06-11).txt Scan type: Full scan (C:\|D:\|E:\|F:\|H:\|I:\|) Objects scanned: 263508 Time elapsed: 49 minute(s), 16 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) Прикачвам и двата лог файла от работата на DDS. Благодаря предварително ! Attach.txt DDS.txt

Здравейте! Имам странен проблем с някакъв вирус, а именно: на всяка флашка която сложа в лаптопа се създават 1 файл и 1 скрита папка с име "zaboravi", в която има 1 файл - "smesta.exe". С много опити успях да изчистя флашката, но два основни проблема остават - компютъра заразява всяко USB устройство, включено в него и през цялото време компютъра казва че има включен Removable Disk въпреки че няма такъв. Когато опитам да отворя въпросния Removable Disk ми дава грешка "Please insert a disk into drive G:". Ако някой има идея как да се справя с проблема, бих била много благодарна !