darica

Благодаря много,още веднъж. Приятна вечер и на теб

За момента не.Благодаря много за оказаната помощ и отделеното вереме за моят проблем ,което не беше малко :wors: Искам да помпитам само да инсталирам ли и Realtek RTL8168C/8111C PCI-E Gigabit Ethernet Adapter (PHY: Realtek RTL8211/8212) -> изтегляне на драйвер -> тук. защото аз инсталирах само ralink по-рано

след изпълнението на cleanup 13Gb са свободни в момента

да,по този начин се ънисталираха успешно.

С програмката ,която ми даде не успявам дa разбера от къде мога да изтрия точно тези drivers които трябва ,ето варчнтите ,които ми излизат: инсталирах и ralink ,но в manager няма промяна

заповядай тук

Ето файла тук

Инсталирах dirvers ,но промяна в device m. няма

Да.VR 630 e modela

Ами точно тези drivers имат удивителни знаци ,пробвах да ги update дирекно от device manager ,но няма промяна.

След изпълнението на точка 1 излязоха тези грешки: А се опитах да поразчистя С: диск ,като изтрия някоя ненужна програма, успях да усвободя само до 11.9 Gb.тай като в него не съхранявам никакъв вид медия,в момента в Program file има 3gb и в Users горедолу толкова от една папка AppData ,която беше скрита незнам защо.Другите папки в С: са свързани с windowsa несмея да пипам там.Направих и дефрагментиране на системния дял .Startup Repair не съм ,защото windows диска не е в мен в момента,ще мога да го направя до няколко дни.

Ето и последия резултат : Attach.txt DDS.txt

Направих каквото беше описано ,но след рестарта не откривам нов log файл.

По време на работата на combofix ми излезе грешка при pev.exe след като windows спря ехе файла програмата продължи работата си : log.txt след това ми се наложи да рестартирам ,тай като не се отваряше браузера.

GMER 1.0.15.15530 - http://www.gmer.net Rootkit scan 2011-02-14 17:05:43 Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\00000062 WDC_WD32 rev.11.0 Running: g02sr9y6.exe; Driver: C:\Users\Dari\AppData\Local\Temp\pwdiapob.sys ---- Kernel code sections - GMER 1.0.15 ---- .text C:\Windows\system32\DRIVERS\nvlddmkm.sys section is writeable [0x8DA08340, 0x3EDF57, 0xE8000020] ---- User code sections - GMER 1.0.15 ---- .text C:\Program Files\Mozilla Firefox\plugin-container.exe[172] USER32.dll!TrackPopupMenu 771314F3 5 Bytes JMP 6A4F2342 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) .text C:\Program Files\Mozilla Firefox\firefox.exe[244] ntdll.dll!LdrLoadDll 76F793A8 5 Bytes JMP 00E113F0 C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation) ---- User IAT/EAT - GMER 1.0.15 ---- IAT C:\Windows\system32\services.exe[652] @ C:\Windows\system32\services.exe [ADVAPI32.dll!CreateProcessAsUserW] 00060002 IAT C:\Windows\system32\services.exe[652] @ C:\Windows\system32\services.exe [KERNEL32.dll!CreateProcessW] 00060000 IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [73297817] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [732EA86D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [7329BB22] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [7328F695] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [732975E9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [7328E7CA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM] [732C8395] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream] [7329DA60] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [7328FFFA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [7328FF61] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [732871CF] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM] [7331CAE2] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile] [732BC8D8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [7328D968] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [73286853] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [7328687E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1980] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [73292AD1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396ca17ae07\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) ---- Devices - GMER 1.0.15 ---- AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) AttachedDevice \Driver\tdx \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software) AttachedDevice \Driver\tdx \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software) ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 D:\Programs\instal program\DAEMON Tools Lite\ Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x5F 0x4F 0x58 0xFA ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x85 0x95 0x43 0x2F ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xE4 0x0D 0xF1 0x86 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0x29 0x8A 0x4E 0x05 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 D:\Programs\instal program\DAEMON Tools Lite\ Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x5F 0x4F 0x58 0xFA ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x85 0x95 0x43 0x2F ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xE4 0x0D 0xF1 0x86 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0x29 0x8A 0x4E 0x05 ... ---- EOF - GMER 1.0.15 ----

Изпълних първа стъпка ,но не мога да заредя страницата за изтеглянето на програмата за стъпка 2.

Благодаря за съветите ,аз в диск С опитвам да инасталирам единствено основните програми.Но наистина когато ми инсталираха windows не ми разпределиха добре паметта.След backup s OTL излязоха няколко грешки от този тип: а ето и резултата от Malwarebytes' Anti-Malware : mbam-log-2011-02-14 (12-44-27).txt

Ето резулта: TDSSKiller.2.4.17.0_13.02.2011_23.46.17_log.txt All processes killed ========== OTL ========== Error: No service named FirebirdServerMAGIXInstance was found to stop! Service\Driver key FirebirdServerMAGIXInstance not found. File File not found not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Low Rights\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0086b6d1-c62a-11de-bf27-0015589f849c}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0086b6d1-c62a-11de-bf27-0015589f849c}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0086b6d1-c62a-11de-bf27-0015589f849c}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0086b6d1-c62a-11de-bf27-0015589f849c}\ not found. File E:\Autorun.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a7242284-c639-11de-8507-0015589f849c}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a7242284-c639-11de-8507-0015589f849c}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a7242284-c639-11de-8507-0015589f849c}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a7242284-c639-11de-8507-0015589f849c}\ not found. File G:\autorun.exe not found. Unable to delete ADS C:\ProgramData\TEMP:BC359956 . Unable to delete ADS C:\ProgramData\TEMP:425D0709 . ========== FILES ========== autorun.inf not found in C:\ autorun.inf not found in D:\ recycler not found in C:\ recycler not found in D:\ [color=#A23BEC]< ipconfig /flushdns /c >[/color] Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Users\Dari\Desktop\cmd.bat deleted successfully. C:\Users\Dari\Desktop\cmd.txt deleted successfully. ========== REGISTRY ========== Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\\VistaSp1 scheduled to be deleted on reboot. Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\\VistaSp2 scheduled to be deleted on reboot. ========== COMMANDS ========== C:\Windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully [EMPTYTEMP] User: Administrator User: All Users User: Dari ->Temp folder emptied: 81496 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 4269942 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 434 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Guest ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 65536 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 4,00 mb [EMPTYFLASH] User: Administrator User: All Users User: Dari ->Flash cache emptied: 0 bytes User: Default User: Default User User: Guest User: Public Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.20.6 log created on 02132011_233455 Files\Folders moved on Reboot... File\Folder C:\Users\Dari\AppData\Local\Temp\~DFFDFD.tmp not found! File\Folder C:\Users\Dari\AppData\Local\Temp\~DFFE13.tmp not found! File\Folder C:\Users\Dari\AppData\Local\Temp\~DFFE24.tmp not found! File\Folder C:\Users\Dari\AppData\Local\Temp\~DFFE2E.tmp not found! File move failed. C:\Windows\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot. File\Folder C:\Windows\temp\hsperfdata_DARI-MSI$\2320 not found! Registry entries deleted on Reboot... Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\\VistaSp1 scheduled to be deleted on reboot. Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\\VistaSp2 scheduled to be deleted on reboot.

Благодаря Nologo, за бързият отговор и новите инструкции, ето и резулата: checkup.txt OTL.Txt Extras.Txt

Хард диска ми от много време се запълва ,без да инсталирам никакви програми в него.Редовно използвам disc cleanup,registry booster.Преди два дена успях да освободя 2Gb ,вече свободните са 900mb.Изпълних някои от инструкциите в една от темите за моят проблем ,ето резултата : mbam-log-2011-02-11 (22-50-05).txt Attach.txt DDS.txt