Dangerline

мерси отново

сичко е перфектно ГОЛЯМО БЛАГОДАРЯимаш почерпка ако те видя някаде

след като копирам скрипта в ОТЛ ми дава следната грешка

All processes killed ========== FILES ========== C:\Documents and Settings\delta\Application Data\Sun\Java\Deployment\cache\6.0\18\7b2f75d2-13500347 moved successfully. C:\Program Files\Trend Micro\HiJackThis\backups folder moved successfully. C:\Program Files\Trend Micro\HiJackThis folder moved successfully. C:\Program Files\Trend Micro folder moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 41620 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 41620 bytes User: delta ->Temp folder emptied: 352517491 bytes ->Temporary Internet Files folder emptied: 7178987 bytes ->Java cache emptied: 340690 bytes ->FireFox cache emptied: 78947879 bytes ->Flash cache emptied: 3152757 bytes User: delta1 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 70225 bytes ->Flash cache emptied: 41620 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 917957 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2402044 bytes %systemroot%\System32 .tmp files removed: 784913 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 3622634 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 78112414 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 4222709611 bytes Total Files Cleaned = 4 531,00 mb OTL by OldTimer - Version 3.2.22.3 log created on 04192011_162907 Files\Folders moved on Reboot... File\Folder C:\WINDOWS\temp\Perflib_Perfdata_6a0.dat not found! Registry entries deleted on Reboot... само да допълня че не излезе такав филе Extras.txt след скана при стъпка 2 OTL.Txt

ESETSmartInstaller@High as downloader log: Can not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6427 # api_version=3.0.2 # EOSSerial=a910a01b0eca3e498bba17dfab3fa168 # end=finished # remove_checked=false # archives_checked=false # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2011-04-19 11:44:56 # local_time=2011-04-19 02:44:56 (+0200, FLE Daylight Time) # country="Bulgaria" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=512 16777215 100 0 41476 41476 0 0 # compatibility_mode=8192 67108863 100 0 2189 2189 0 0 # scanned=107333 # found=13 # cleaned=0 # scan_time=2410 C:\Documents and Settings\delta\Application Data\Sun\Java\Deployment\cache\6.0\18\7b2f75d2-13500347 a variant of Win32/Mebroot.FO trojan (unable to clean) 00000000000000000000000000000000 I C:\Documents and Settings\delta\My Documents\Downloads\Sro-DB 1.3a\crackloader.exe a variant of Win32/HackTool.Patcher.N application (unable to clean) 00000000000000000000000000000000 I C:\Documents and Settings\delta\My Documents\Downloads\ZSZC Private server - Full Client 1.689\crackloader.exe a variant of Win32/HackTool.Patcher.N application (unable to clean) 00000000000000000000000000000000 I C:\Program Files\R.G. Mechanics\Splinter Cell - Conviction\src\system\ubiorbitapi_r2.dll a variant of Win32/Packed.VMProtect.AAA trojan (unable to clean) 00000000000000000000000000000000 I C:\Program Files\Trend Micro\HiJackThis\backups\backup-20110419-023539-143.dll Win32/Spy.PerfKey trojan (unable to clean) 00000000000000000000000000000000 I C:\_OTL\MovedFiles\04192011_035347\C_WINDOWS\svchostt.exe a variant of MSIL/Autorun.Spy.KeyLogger.AE worm (unable to clean) 00000000000000000000000000000000 I C:\_OTL\MovedFiles\04192011_035347\C_WINDOWS\system32\bpk.exe Win32/Spy.PerfKey trojan (unable to clean) 00000000000000000000000000000000 I C:\_OTL\MovedFiles\04192011_035347\C_WINDOWS\system32\bpkhk.dll Win32/Spy.PerfKey trojan (unable to clean) 00000000000000000000000000000000 I C:\_OTL\MovedFiles\04192011_035347\C_WINDOWS\system32\bpkr.exe Win32/Spy.PerfKey.NAA trojan (unable to clean) 00000000000000000000000000000000 I C:\_OTL\MovedFiles\04192011_035347\C_WINDOWS\system32\bpkwb.dll Win32/Spy.PerfKey trojan (unable to clean) 00000000000000000000000000000000 I C:\_OTL\MovedFiles\04192011_035347\C_WINDOWS\system32\rinst.exe Win32/Spy.PerfKey.NAA trojan (unable to clean) 00000000000000000000000000000000 I

Просто не ми дава да го качи този филе и по погрешка одеве съм качил стария ето сичко което е вътре не не ви взимам за мезе и съм много благодарен , че по това време ми помагате ========== PROCESSES ========== All processes killed ========== OTL ========== Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Prefs.js: [email protected]:3.2.5.2 removed from extensions.enabledItems Folder C:\Documents and Settings\delta\Application Data\Mozilla\Firefox\Profiles\nq8jw5co.default\extensions\[email protected]\ not found. File C:\Documents and Settings\delta\Application Data\Mozilla\Firefox\Profiles\nq8jw5co.default\searchplugins\conduit.xml not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4971EE7-DAA0-4053-9964-665D8EE6A077}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93}\ not found. Registry value HKEY_USERS\S-1-5-21-2500237001-2802344029-3522878484-1008\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck not found. Registry value HKEY_USERS\S-1-5-21-2500237001-2802344029-3522878484-1008\Software\Microsoft\Windows\CurrentVersion\Run\\ not found. File C:\WINDOWS\svchostt.exe not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\bpk not found. File C:\WINDOWS\system32\bpk.exe not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\DOCUME~1\delta\MYDOCU~1\DOWNLO~1\EDXDET~1\detour.dll deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\DOCUME~1\delta\MYDOCU~1\DOWNLO~1\EDXDET~1\detour.dll deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\DOCUME~1\delta\MYDOCU~1\DOWNLO~1\EDXDET~1\detour.dll deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{454f3f90-7d88-11df-9d35-0025d3df3708}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{454f3f90-7d88-11df-9d35-0025d3df3708}\ not found. File G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\stcvhost.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{454f3f90-7d88-11df-9d35-0025d3df3708}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{454f3f90-7d88-11df-9d35-0025d3df3708}\ not found. File G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\stcvhost.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4b67595a-834e-11df-9d4b-0025d3df3708}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4b67595a-834e-11df-9d4b-0025d3df3708}\ not found. File G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\stcvhost.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4b67595a-834e-11df-9d4b-0025d3df3708}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4b67595a-834e-11df-9d4b-0025d3df3708}\ not found. File G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\stcvhost.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4b675961-834e-11df-9d4b-0025d3df3708}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4b675961-834e-11df-9d4b-0025d3df3708}\ not found. File G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\stcvhost.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4b675961-834e-11df-9d4b-0025d3df3708}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4b675961-834e-11df-9d4b-0025d3df3708}\ not found. File G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\stcvhost.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{839de14c-1c9e-11e0-9e32-0025d3df3708}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{839de14c-1c9e-11e0-9e32-0025d3df3708}\ not found. File G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\stcvhost.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{839de14c-1c9e-11e0-9e32-0025d3df3708}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{839de14c-1c9e-11e0-9e32-0025d3df3708}\ not found. File G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\stcvhost.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d4b18db3-9498-11df-9d5f-0025d3df3708}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d4b18db3-9498-11df-9d5f-0025d3df3708}\ not found. File G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\stcvhost.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d4b18db3-9498-11df-9d5f-0025d3df3708}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d4b18db3-9498-11df-9d5f-0025d3df3708}\ not found. File G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\stcvhost.exe not found. ========== FILES ========== File\Folder C:\WINDOWS\system32\bpk.exe not found. File\Folder C:\WINDOWS\System32\bpkr.exe not found. File\Folder C:\WINDOWS\System32\bpkhk.dll not found. File\Folder C:\WINDOWS\System32\bpkwb.dll not found. File\Folder C:\WINDOWS\System32\bpk.dat not found. File\Folder C:\WINDOWS\System32\web.dat not found. File\Folder C:\WINDOWS\System32\pk.bin not found. File\Folder C:\WINDOWS\System32\rinst.exe not found. File\Folder C:\WINDOWS\System32\inst.dat not found. C:\Documents and Settings\delta\Application Data\private_server_loader.ini moved successfully. File\Folder C:\Documents and Settings\All Users\Start Menu\Programs\Startup\$McInstBootA5E6DEAA56$.lnk not found. File\Folder C:\Documents and Settings\All Users\Application Data\mtbjfghn.xbe not found. File\Folder C:\WINDOWS\System32\klipxm32.dll not found. ========== COMMANDS ========== OTL by OldTimer - Version 3.2.22.3 log created on 04192011_045210 Files\Folders moved on Reboot... Registry entries deleted on Reboot...

Само не съм сигорен за purfectoptimazer защото тази програма я ползвах при краш на регистрите ако сичко е наред искам да попитам има ли начин да се изчисти заразено ехе и .dll от вирусите в него и да си работи както трябва ако е възможно това ето какви вируси има вътре http://www.virustotal.com/file-scan/report.html?id=9078ab36d82291af28150cf1ace74d92a8a98e27d0724fcb913253a0d1635208-1303176477 http://www.virustotal.com/file-scan/report.html?id=883c13ebc0c9e3f3e966b63dd6fceb29b0d66ca35d6e0242d8e5388fc7364d55-1303176561 OTL.Txt mbam-log-2011-04-19 (04-18-34).txt

Extras.TxtOTL.Txt

Здравейте търсих на всякаде никаде неможах да намеря решение на проблема си .Значи проблема е следния имам лаптоп assuss със видео карта Mobile intel®4 не е нищо особенно до тука , но проблема ми е , че монитора ми е счупен и ползвам друг монитор чрез кабел до тук пак никав проблем ... имам проблем със вирусчета (много) до сега винаги съм се пазил от тях без антивирусна програма но фчера свалих едно ехе филче което ми трябваше от анонимен источник и сега пц-то ми гумжи , лесно е да го преинсталирам но как да го направя без монитор защото по времето на рестарта алтернативния монитор който ползвам (излиза в почивка) докато не се покаже windows screen ако имате някакво решение как мога да го преинсталирам ще ви бъда благодарен Пробвах да инсталирам антивирусна но без успех вируса я истрива още при свалянето ... немога да вляза през саве мод защото нищо не виждам когато пц-то ми се рестартира екарана ми е начупен от една пиянска вечер някакви идеи ? ето снимчици от hijack какво работи в момента и моля да буде преместена тема не видях в кой раздел я качвам съжалявам :С