Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.

Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

HiJackThis/Log :Оптимизация/Анализ/Ревю

Featured Replies

http://www.laptops-drivers.com/asus/fixing...sus-eee-pc.html
  • Отговори 577
  • Прегледи 89k
  • Създадено
  • Последен отговор

Потребители с най-много отговори

Най-популярни публикации

  • Ще помоля,ако имате проблем,забиване влачене, изскачащи прозорци,тогава да се предоставят логове.

  • Няма за какво,приятел,маркирай това и дай Fix Checked ,не си виждал много процеси,затова O8 - Extra context menu item: Добави в Анти-Банер - C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet

  • spote прочети внимателно инструкциите ,НО преди това изпълни "Препоръчителните действия",след което дай лог от HiJackThis executable,дал съм подробна информация,не бързай! Този от Trend Micro System

Публикувани изображения

Моля кажи какво да направя не ми давай линкове.Извинявай..

качвам ти тук един файл, dsound.dll: [ download ]

просто го копирай в C:\WINDOWS\system32 и C:\WINDOWS\system32\dllcache, рестартирай системата и пиши какъв е резултатът.

качвам ти тук един файл, dsound.dll: [ download ]

просто го копирай в C:\WINDOWS\system32 и C:\WINDOWS\system32\dllcache, рестартирай системата и пиши какъв е резултатът.

Резултатът е почти същия но има и друга честитка ... The application or DLL C:/WINDOWS/system32/DSOUND.dll is not a valid Windows image.Please check this against your installation diskette.

И после пак излиза, че неможе да отвори DSound

хм, ами аз съм с 64-битов уиндоус, вероятно има разлика във файловете (това е моят файл). кажи с каква операционна система си?

ми според колегата nologo имаш вирус и трябва да отидеш тук да свалиш HijackThis и да постнеш логовете в темата, посочена от него. според мен, обаче, трябва просто да си кажеш точното име на операционната система и с кой сървис пак си, за да намерим човек със същия СП и той да ти даде файла, който липсва.

е, не е лошо профилактично да пуснеш един mbam за всеки случай

Представа нямам колегите как ти пращат някакви файлове, като представа нямат от ОС, версия на скайп и пр.

Какво точно прави преди да се случи.

Необичайни сайтове, инсталация на нещо, някакви настройки ?!!

Във форумите на скайп е коментиран този проблем:

rocketman

Advanced Member

Posts: 15,829

Group Icon

Download/Installation problems

Please reboot and purge the following folders

C:\Temp or

C:\Tmp if available

C:\Windows\Temp

C:\Windows\Prefetch delete SKYPE.EXE-XXXXXXXX.pf file only. The XXXXXXXXX would actually be various numbers and letters

Your Download Folder (desktop?)

at least delete manually downloaded Skype-setup-file

Recycle bin

reboot

download latest Skype setup file again

but now download to a different location than last time. Do not use default location

Install Skype to a different location than last time with a different name

Do NOT use default name, use "Skype2" for example.

Do NOT RUN from the web site always download the file to your PC then install it from there.

Also look here and run these checks.

Цялата информация: ЛИНК

Предлагам ти да направиш посоченото, като предварително можеш да сложиш и последната версия аудио драйвери.

Редактирано от Phonomania (преглед на промените)

Представа нямам колегите как ти пращат някакви файлове, като представа нямат от ОС, версия на скайп и пр.

да забелязваш някъде авторат да е бил любезен да сподели?

Представа нямам колегите как ти пращат някакви файлове, като представа нямат от ОС, версия на скайп и пр.

Какво точно прави преди да се случи.

Необичайни сайтове, инсталация на нещо, някакви настройки ?!!

Във форумите на скайп е коментиран този проблем:

Цялата информация: ЛИНК

Предлагам ти да направиш посоченото, като предварително можеш да сложиш и последната версия аудио драйвери.

Не знам дали обърна внимание на следното от първия коментар в темата:

Cannot load the DLL (DSound.dll) това се появява когато искам да пусна било то Скайп, игра или нещо подобно

Даже в линка, който си предоставил има препратка към: http://www.mvps.org/winhelp2002/unwanted.htm. Цитирам:

Also look here and run these checks.

След като има проблем със препратката към сайта mvps.org, ето линк от кеша на Google: Dealing with Unwanted Spyware and Parasites.

P.S. В лога на HijackThis излиза доста информация за операционната система и приложенията. Затова препоръчах да се пусне лог където трябва. Е, нека да сложи все пак последната версия на аудиодрайверите, няма лошо - съгласен съм. Какво пречи да пусне лог на HijackThis все пак?

Редактирано от nologo (преглед на промените)

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 21:17:24, on 19.7.2009 г.

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\PROGRA~1\AVG\AVG8\avgrsx.exe

C:\PROGRA~1\AVG\AVG8\avgemc.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\AVG\AVG8\avgtray.exe

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll

R3 - URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_1.dll

R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL

R3 - URLSearchHook: 4shared.com Toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - C:\Program Files\4shared.com\tb4sh1.dll

O2 - BHO: 4shared.com Toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - C:\Program Files\4shared.com\tb4sh1.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll

O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll

O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll

O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL

O2 - BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_1.dll

O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_1.dll

O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL

O3 - Toolbar: 4shared.com Toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - C:\Program Files\4shared.com\tb4sh1.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe"

O4 - HKCU\..\Run: [uniblue RegistryBooster 2009] C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe /S

O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')

O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

O8 - Extra context menu item: &С&валяне &с BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm

O8 - Extra context menu item: &С&валяне на всички с BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm

O8 - Extra context menu item: &С&валяне на всичкото видео с BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll/206 (file missing)

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O17 - HKLM\System\CCS\Services\Tcpip\..\{271C54B9-2727-458F-973C-C2F8BFF80930}: NameServer = 95.169.200.3 95.169.200.4

O17 - HKLM\System\CCS\Services\Tcpip\..\{F22ABF64-D59A-458C-8F17-2E4C3BEB0E1C}: NameServer = 87.227.200.2,87.227.200.3

O17 - HKLM\System\CS3\Services\Tcpip\..\{271C54B9-2727-458F-973C-C2F8BFF80930}: NameServer = 95.169.200.3 95.169.200.4

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll

O20 - AppInit_DLLs: avgrsstx.dll

O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe

O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Услуга Google Update (gupdate1c9c9388f66516e) (gupdate1c9c9388f66516e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

--

End of file - 8736 bytes

Още малко инфо :

System:

Microsoft Windows XP

Professional

Version 2002

Service Pack 3

Registred to:

user

Computer:

Pentium® Dual-Core CPU

E5200 @ 2.50GhZ

2.52GhZ, 3 GB of RAM

Редактирано от kobo1 (преглед на промените)

Здравейте! От известно време компютърът ми се рестартира сам, или пък показва куп грешки, докато не ме изхвърли от всякъде и се принудя да го рестартирам. Ето лога от HiJackThis:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 21:32:04, on 7/16/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16850)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir Desktop\sched.exe

C:\WINDOWS\system32\hkcmd.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files\FlashGet\FlashGet.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\FinePixViewer\QuickDCF2.exe

C:\Program Files\Avira\AntiVir Desktop\avguard.exe

C:\WINDOWS\system32\bgsvcgen.exe

C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Program Files\HijackThis\post.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL

O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL

O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" -H

O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [Flashget] "C:\Program Files\FlashGet\FlashGet.exe" /min

O4 - HKLM\..\Run: [userFaultCheck] %systemroot%\system32\dumprep 0 -u

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

O4 - Global Startup: Exif Launcher 2.lnk = ?

O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Е&кспортирай в Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O17 - HKLM\System\CCS\Services\Tcpip\..\{D78461F6-FFAF-48CC-9D02-D113A5D102DE}: NameServer = 212.95.162.2 195.24.54.2

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe

--

End of file - 5939 bytes

Здравейте!

Сега, изтеглете ATF Cleaner

Запазете го на вашия десктоп.

  • Кликнете два пъти върху ATF-Cleaner.exe , за да стартирате програмата.
  • Кликнете на Select All, който се намира в най-долната част на списъка.
  • Кликнете на бутона Empty Selected.

Ако използвате браузъра Mozilla Firefox, направете следното:

  • Кликнете върху Firefox, който се намира в началото и изберете Select All от списъка.
  • Кликнете на бутона Empty Selected.
  • Бележка: Ако искате да съхраните запазените пароли, моля кликнете на No от новопоявилия се прозорец.

Ако използвате браузъра Opera, направете следното:

  • Кликнете върху Opera който се намира в началото и изберете Select All от списъка.
  • Кликнете на бутона Empty Selected.
  • Бележка: Ако искате да съхраните запазените пароли, моля кликнете на No от новопоявилия се прозорец.

Кликнете на бутона Exit, който се намира в главното меню, за да затворите програмата.

Изтеглете Malwarebytes' Anti-Malware от тук

Кликнете два пъти върху mbam-setup.exe за да инсталирате програмата.

  • * Уверете се, че има отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware, след това кликнете на Finish.
    * Ако има намерени по-нови обновления, тя ще ги изтегли и инсталира.
    * Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.
    * Сканирането ще отнеме малко време, затова моля бъдете търпеливи.
    * Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.
    * Уверете се, че на всички редове има отметки, и кликнете Remove Selected.
    * Когато всичко бъде премахнато, логът ще бъде отворен в Notepad. Копирайте лога и го публикувайте в следващия си коментар в темата.

Бележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

Здравейте,

Колегата Fixer ми каза да направя това, ама не съм сигурен дали точно съм го направил.

Това ли трябва да поставя?

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 2:32:41 PM, on 7/20/2009

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\WINDOWS\system32\RunDll32.exe

C:\Program Files\D-Tools\daemon.exe

C:\WINDOWS\Datecs\Flex2K.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\SYSCO\My Documents\Downloads\HiJackThis.exe

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [CmPCIaudio] RunDll32 CMICNFG3.cpl,CMICtrlWnd

O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - Global Startup: FlexType 2K.lnk = ?

O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm

O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm

O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll/206 (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Power Manager (PowerManager) - Unknown owner - C:\WINDOWS\svchost.exe

--

End of file - 2567 bytes

Точно това е! Благодаря ти! Необходим ще е още един лог файл:

1) Изтеглете: ESET Online Scanner

2) Стартирайте esetsmartinstaller_enu.exe

3) Сложете отметка на YES, I accept the Terms of Use и изберете Start

4) Скенерът ще започне да изтегля компонентите, които са му необходими.

5) Уверете се, че има отметки на следните редове, включително и тези от менюто Advanced Settings:


  • Scan archives
  • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth technology

И накрая изберете Start

6) Скенерът ще започне да изтегля последните дефиниции.

7) След, като сканирането завърши изберете Finish.

8) Отидете в:

C:\Program Files\ESET\ESET Online Scanner

Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си пост тук.

Ето това ли?

ESETSmartInstaller@High as downloader log:

all ok

# version=6

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.5886

# api_version=3.0.2

# EOSSerial=9850acde95080f48be76d9674483a7fa

# end=finished

# remove_checked=true

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2009-07-20 12:00:51

# local_time=2009-07-20 03:00:51 (+0200, FLE Standard Time)

# country="Bulgaria"

# lang=1033

# osver=5.1.2600 NT Service Pack 2

# scanned=20570

# found=221

# cleaned=216

# scan_time=691

C:\Documents and Settings\SYSCO\Desktop\CS 1.5\hltv.exe Win32/Parite.B virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\Desktop\CS 1.5\hlupdate.exe Win32/Jeefo.A virus (unable to clean) 00000000000000000000000000000000 I

C:\Documents and Settings\SYSCO\Desktop\CS 1.5\podbot2.exe Win32/Parite.B virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\Desktop\CS 1.5\SierraUp.exe Win32/Parite.B virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\Desktop\CS 1.5\upd.exe Win32/Parite.B virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\Desktop\CS 1.5\voice_tweak.exe Win32/Parite.B virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\Local Settings\Temp\bsc8F.tmp Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\Local Settings\Temp\csc8E.tmp Win32/Parite.B.packed virus (deleted - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\Local Settings\Temp\dna12.tmp Win32/Parite.B.packed virus (deleted - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\Local Settings\Temp\ntc92.tmp Win32/Parite.B.packed virus (deleted - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\Local Settings\Temp\pvdAC.tmp Win32/Parite.B.packed virus (deleted - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\Local Settings\Temp\rvdAD.tmp Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\Local Settings\Temp\ytc93.tmp Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\Local Settings\Temp\pft3~tmp\Setup.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\My Documents\Downloads\flextype2k + keygen.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\My Documents\Downloads\mtinst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\My Documents\Downloads\SpeedFan 4.38.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\SYSCO\My Documents\Downloads\flextype2k + keygen\PZ_FT2K.EXE Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ahead\CoverDesigner\CoverDes.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ahead\Nero\Uninstall\UNNero.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ahead\Nero SoundTrax\SoundTrax.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ahead\Nero Toolkit\CDSpeed.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ahead\Nero Toolkit\DriveSpeed.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ahead\Nero Wave Editor\DXEnum.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ahead\Nero Wave Editor\WaveEdit.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ahead\WMPBurn\WMPBurn.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\BitComet\BitComet.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\BitComet\CrashReport.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\BitComet\tools\UPNP.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\BitComet\tools\VideoSnapshot.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\C-Media PCI Audio Device\CmiInstallAudio.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\C-Media PCI Audio Device\Advance\DLL\CmRmDrv3.EXE Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\Microsoft Shared\dasetup\dasetup.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\InstallShield Installation Information\{10E33F6D-16E6-400E-BA1E-DF9F1BCD1B30}\setup.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\InstallShield Installation Information\{7C21EEE0-E6FD-11D4-BD19-00D0B702AEC0}\Setup.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Messenger\msmsgs.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Mozilla Firefox\crashreporter.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Mozilla Firefox\updater.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Mozilla Firefox\uninstall\helper.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\ParadisePoker\UNWISE.EXE Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\SpeedFan\speedfan.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\CmiPCIUninstall.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\svchost.exe Win32/Jeefo.A virus (unable to clean) 00000000000000000000000000000000 I

C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\$hf_mig$\KB898461\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\LastGood\system32\dllcache\cfgwiz.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\LastGood\system32\dllcache\cintsetp.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\LastGood\system32\dllcache\fp98swin.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\LastGood\system32\dllcache\fxsclnt.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\LastGood\system32\dllcache\fxscover.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\LastGood\system32\dllcache\imepadsv.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\LastGood\system32\dllcache\imjpdct.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\LastGood\system32\dllcache\imjpdsvr.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\LastGood\system32\dllcache\imjpinst.exe Win32/Jeefo.A virus (unable to clean) 00000000000000000000000000000000 I

C:\WINDOWS\LastGood\system32\dllcache\imjpmig.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\LastGood\system32\dllcache\imjprw.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\LastGood\system32\dllcache\imjputy.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\LastGood\system32\dllcache\tintsetp.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\022593ca08eb4cd8e9681a7116f902d9\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\022593ca08eb4cd8e9681a7116f902d9\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\1ece269e23f4ef02dbea7dfa6a74a7d0\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\1ece269e23f4ef02dbea7dfa6a74a7d0\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\3361704fe1a0367fcfe17758efab6972\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\3361704fe1a0367fcfe17758efab6972\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\40fc5c00ee89ac515590995374843d78\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\40fc5c00ee89ac515590995374843d78\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\491a2c8e1582f5cdd01f8b3da4b8ef7d\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\491a2c8e1582f5cdd01f8b3da4b8ef7d\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\4b975c8f39482ac4287e885ca058f798\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\4b975c8f39482ac4287e885ca058f798\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\wmiprvse.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\wmiprvse.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\wmiprvse.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\wmiprvse.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\5599132effaee562760dce29f8ca8491\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\5599132effaee562760dce29f8ca8491\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\55ae228715888b68a08f491655790fa6\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\55ae228715888b68a08f491655790fa6\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\569d9f4ac4075c88e15e54f5d0847e2b\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\569d9f4ac4075c88e15e54f5d0847e2b\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP2GDR\wordpad.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP2QFE\wordpad.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP3GDR\wordpad.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP3QFE\wordpad.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\64cc77a1a7652da2d7ace79940460770\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\64cc77a1a7652da2d7ace79940460770\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\66004d0acd607f44c08ee787c065c450\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\66004d0acd607f44c08ee787c065c450\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\7468a12466bf1d654d6ea07899fe1523\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\7468a12466bf1d654d6ea07899fe1523\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\7468a12466bf1d654d6ea07899fe1523\wm9\logagent.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\7468a12466bf1d654d6ea07899fe1523\wm9l\logagent.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\8a43415b80a3070aa22efa6c72b3f657\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\8a43415b80a3070aa22efa6c72b3f657\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\8cac00e8efc87d728c0261686f85c975\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\8cac00e8efc87d728c0261686f85c975\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\963193362d99ddbedffb21408a40248b\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\963193362d99ddbedffb21408a40248b\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\97f18c7ac91916468f96bb79c87bff6c\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\97f18c7ac91916468f96bb79c87bff6c\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\accwiz.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\agentsvr.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cfgwiz.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\clipbrd.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\conf.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dfrgntfs.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dialer.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\digcore.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dlimport.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dwwin.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\eudcedit.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\explorer.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\fp98swin.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\fsquirt.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\fxsclnt.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\fxscover.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\helpctr.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\icwconn1.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\iexpress.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\irftp.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lhmstsc.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\logagent.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\logonui.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\migload.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\migrate.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\migwiz.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\migwiza.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mmc.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mobsync.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\moviemk.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mplay32.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msconfig.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msmsgs.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mspaint.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\napstat.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\netsetup.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntbackup.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\osk.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\pinball.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\progman.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\regedit.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\rsnotify.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\rstrui.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\setup_wm.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sndrec32.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\spider.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sysocmgr.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\taskmgr.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\tourstrt.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\unregmp2.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wbemtest.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wiaacmgr.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\winhlp32.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wmiadap.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wmiprvse.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wordpad.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wscript.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wuauclt.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wuauclt1.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\xpnetdg.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\cintsetp.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\imjpdct.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\imjpdsvr.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\imjpinst.exe Win32/Jeefo.A virus (unable to clean) 00000000000000000000000000000000 I

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\imjpmig.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\imjprw.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\imjputy.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\tintsetp.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\a94a6432dbac6901fc5bf15157f718f8\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\a94a6432dbac6901fc5bf15157f718f8\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\a9c8e00397fe4457a25305c397dc3358\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\a9c8e00397fe4457a25305c397dc3358\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\aa0fb978e2349db3550eea285e93f7f0\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\aa0fb978e2349db3550eea285e93f7f0\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\ab02de9444a68e46b9d94dbc7903bc14\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\ab02de9444a68e46b9d94dbc7903bc14\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\ad744bdeedce85bf37a096f34577ff3a\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\ad744bdeedce85bf37a096f34577ff3a\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\ad9c4c2a779933f83b51a49a2c88838d\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\ad9c4c2a779933f83b51a49a2c88838d\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\b86b6a4fb33f1418ba334c3807fa2a23\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\b86b6a4fb33f1418ba334c3807fa2a23\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\cfb5c33fcc73ed7dcd60250b085691a5\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\cfb5c33fcc73ed7dcd60250b085691a5\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\cfbc39150cce12d1357ba324d4d0c40c\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\cfbc39150cce12d1357ba324d4d0c40c\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\d194d4b245b41b1828615f889a43f7e0\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\d194d4b245b41b1828615f889a43f7e0\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\d492dac6f594bf63184cb839b64eb87d\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\d492dac6f594bf63184cb839b64eb87d\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\d74289c815a4c14cbe709a0654bda77e\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\d74289c815a4c14cbe709a0654bda77e\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\dd6c2e7701be1a2e63281605463e5e51\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\dd6c2e7701be1a2e63281605463e5e51\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\e0c0da396303f1dd2c82cd2ccc07020d\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\e0c0da396303f1dd2c82cd2ccc07020d\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\e1b768948601bcabeb1406e8eeccf365\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\e1b768948601bcabeb1406e8eeccf365\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\f6ae6c01481096f08117233982ca37f9\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\f6ae6c01481096f08117233982ca37f9\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\spuninst.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\update\update.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\system32\CMRMDRV3.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\system32\keystone.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\system32\NeroCheck.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\system32\nvappbar.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\system32\nvdspsch.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\system32\nvudisp.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\system32\nwiz.exe Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINDOWS\system32\PreInstall\WinSE\wxp_x86_0409_v1\spuninst.exe.ref Win32/Jeefo.A virus (cleaned - quarantined) 00000000000000000000000000000000 C

${Memory} Win32/Jeefo.A virus 00000000000000000000000000000000 I

Трябва да почерпиш B-Boy[styLe] :)

За съжаление, твоята система е инфектирана с два файлови инфектори. Препоръчително е да преинсталираш Windows, но преди това: направите бакъп на цялата Ви информация - документи, снимки, филми, песни и други. Необходимо е да се отървете от всички файлове с разширения: .exe/.scr/.htm/.html/.xml/.zip/.rar . Това е така, защото тези файлове най-вероятно са инфектирани. Ако ги съхраните и след преинсталацията ги възстановите, те отново ще инфектират системата Ви, както са направили вече няколко пъти. След, като преинсталирате обновете вашия Windows до SP3 и се уверете, че имате всички обновления, това ще повиши нивото на защита на вашата система.

Трябва да почерпиш B-Boy[styLe] :)

За съжаление, твоята система е инфектирана с два файлови инфектори. Препоръчително е да преинсталираш Windows, но преди това: направите бакъп на цялата Ви информация - документи, снимки, филми, песни и други. Необходимо е да се отървете от всички файлове с разширения: .exe/.scr/.htm/.html/.xml/.zip/.rar . Това е така, защото тези файлове най-вероятно са инфектирани. Ако ги съхраните и след преинсталацията ги възстановите, те отново ще инфектират системата Ви, както са направили вече няколко пъти. След, като преинсталирате обновете вашия Windows до SP3 и се уверете, че имате всички обновления, това ще повиши нивото на защита на вашата система.

Извинявай ама какво означава бакъп. Аз при последната инсталация форматирах C и D дискове.

Значи да съхраниш информация, като - документи, снимки, филми, песни и други на преносима памет - CD/DVD диск, USB Flash памет и т.н. Явно се появяват от някъде. Затова ти препоръчвам, след като преинсталираш Windows, веднага инсталирай някаква антивирусна програма по твой избор (това да ти бъде първата грижа), за да следи за зловреден софтуер, така че да те предпази.

Значи да съхраниш информация, като - документи, снимки, филми, песни и други на преносима памет - CD/DVD диск, USB Flash памет и т.н. Явно се появяват от някъде. Затова ти препоръчвам, след като преинсталираш Windows, веднага инсталирай някаква антивирусна програма по твой избор (това да ти бъде първата грижа), за да следи за зловреден софтуер, така че да те предпази.

Много ти благодаря за отделеното време, веднага ще пробвам.

Здравейте,

Има ли нещо нередно в този лог, на един познат компютъра му доста често почна да му прави проблеми

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 00:15:16, on 22.7.2009 г.

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 SP3 (7.00.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Microsoft IntelliPoint\point32.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\Skype\Plugin Manager\skypePM.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice

O4 - HKCU\..\Run: [steam] "c:\program files\steam\steam.exe" -silent

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O17 - HKLM\System\CCS\Services\Tcpip\..\{CE33CC02-D025-4D8F-B3FB-12FA69C7883E}: NameServer = 194.150.119.4 194.150.119.3

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--

End of file - 3071 bytes

Fixer, много ти благодаря за помоща ;)

Добре че има хора като теб да помагат.

Гост
Тази тема е заключена за нови отговори.

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.