Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

Помощ при откриване и премахване на вируси, троянски коне и др., част 2

Последователи

Нова тема

5 април 200917 г.

Имам някакъв упорит бацил, който не ми позволява да си вляза в дисковете

(влизам с десен бутон > open, но е ужасно по 100 пъти на ден)

та лекувах го аз с Avast, не помогна... Предложете някаква алтернатива, ако може и рецепта :help wanted:

Редактирано 5 април 200917 г. от UserX (преглед на промените)

Отговори 981
Прегледи 140,2k
Създадено 21 г.21 г.
Последен отговор 16 г.16 г.

Потребители с най-много отговори

Maniac 174 поста
B-boy/StyLe/ 113 поста
XateR 34 поста
TNN 30 поста

Най-популярни публикации

Maniac

7 юли 200916 г.

Сега, изтеглете ATF Cleaner Запазете го на вашия десктоп. Кликнете два пъти върху ATF-Cleaner.exe , за да стартирате програмата. Кликнете на Select All, който се намира в най-долната част на спи
Maniac

7 юли 200916 г.

Моля, прикачете файла: c:\windows\system\msdct.exe в 4storing.com и пуснете линка за изтегляне в следващия си пост.
Maniac

30 юли 200916 г.

Браво! Обаче логовете са чисти. Все пак, нека продължим: Стъпка 1: Сега, изтеглете ATF Cleaner Запазете го на вашия десктоп. Кликнете два пъти върху ATF-Cleaner.exe , за да старти

Публикувани изображения

5 април 200917 г.

Автоматични действия:

1. Сканирай и поправи нещата с FlashDesinfector

2. Изтегли това инструментче, стартирай го. Посочи дял C:\ и избери Fix FixDrive.zip (при нужда повтори процедурата и с останалите дялове)

Ръчни действия:

1. Изпълни следните команди:

Start Menu => Run => CMD => напиши:


c:\> attrib -r -s -h autorun.inf 

c:\> del autorun.inf

или

Start Menu => Run => CMD => напиши:


del c:\autorun.* /f /s /q /a

Примера бе за дял C:\ (повтори процедурата и за останалите дялове, ако се наложи) За финал следвай препоръките от тази тема и пусни един лог от HijackThis в нея: HiJackThis/Log : Дискусия/анализ/ревю EDIT: Добре е да изключиш функциите: Autorun и Autoplay. Така ще се премахне познатото ти меню за избор на действие след поставяне на флашка или друго USB устройство, но ще се позатегне малко сигурността...

Това става по следния начин: AutoRun => Отвори Notepad и въведи:

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]

@="@SYS:DoesNotExist"

Запази файла с име fix.reg и го стартирай. Отвореи Notepad и въведи:

Windows Registry Editor Version 5.00


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoDriveTypeAutoRun"=dword:000000FF

Запази файла с име NoDriveTypeAutorun.reg и го стартирай.

Autoplay =>

Start => Run => напиши gpedit.msc => Enter => Administrative Templates => System => двукратен клик с мишката върху Turn Off Autoplay => Enabled

По-надолу ще видиш опцията Turn Off Autoplay on => от падащото меню избери => All drives => ОК (както е на снимката)

Редактирано 5 април 200917 г. от B-boy[StyLe] (преглед на промените)

5 април 200917 г.

1. Сканирай и поправи нещата с FlashDesinfector

Не ми го отваря, а не открих от къде да го сваля...

5 април 200917 г.

Не ми го отваря, а не открих от къде да го сваля...

А пробва ли и другите стъпки ?

Ето ти алтернативен линк за програмката...

5 април 200917 г.

А пробва ли и другите стъпки ?

Ето ти алтернативен линк за програмката...

Стана с това, благодаря!

6 април 200917 г.

Ето:

6 април 200917 г.

Отиди в най-горната част, избери Опции и избери Линеен + .

6 април 200917 г.

Ето:

Ето как се оправя:

http://www.kaldata.com/forums/index.php?s=...st&p=926271

Тъй като машината на потребителката е служебна информацията от логовете няма да се публикуват в темата по нейно желание.

Редактирано 6 април 200917 г. от B-boy[StyLe] (преглед на промените)

6 април 200917 г.

Ето го и моя лог от ComboFix

ComboFix 09-04-04.01 - I3RODA 2009-04-06 18:18:34.1 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.1023.633 [GMT 3:00]

Running from: c:\documents and settings\I3RODA\Desktop\ComboFix.exe

Command switches used :: c:\documents and settings\I3RODA\Desktop\CFScript.txt

AV: ESET Smart Security 4.0 *On-access scanning enabled* (Updated)

FW: Персональный файервол ESET *enabled*

* Created a new restore point

* Resident AV is active

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::

c:\windows\system32\ice_time.dll

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

c:\windows\system32\kbdbph.dll

c:\windows\system32\pthreadGC2.dll

((((((((((((((((((((((((( Files Created from 2009-03-06 to 2009-04-06 )))))))))))))))))))))))))))))))

2009-04-06 18:09 . 2009-04-06 18:09 <DIR> d--hs---- c:\documents and settings\Administrator\IETldCache

2009-04-06 18:08 . 2009-04-06 18:09 <DIR> d-------- c:\documents and settings\Administrator

2009-04-06 17:49 . 2009-04-06 17:49 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware

2009-04-06 17:49 . 2009-04-06 17:49 <DIR> d-------- c:\documents and settings\I3RODA\Application Data\Malwarebytes

2009-04-06 17:49 . 2009-04-06 17:49 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes

2009-04-06 17:49 . 2009-03-26 16:49 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys

2009-04-06 17:49 . 2009-03-26 16:49 15,504 --a------ c:\windows\system32\drivers\mbam.sys

2009-04-06 01:49 . 2009-04-06 01:49 <DIR> d-------- c:\documents and settings\I3RODA\dwhelper

2009-04-05 15:28 . 2009-04-05 15:28 <DIR> d-------- c:\documents and settings\I3RODA\Application Data\ESET

2009-04-05 15:27 . 2009-04-05 15:27 <DIR> d-------- c:\program files\ESET

2009-04-05 15:27 . 2009-04-05 15:27 <DIR> d-------- c:\documents and settings\All Users\Application Data\ESET

2009-04-05 14:29 . 2009-04-05 14:29 153 --a------ c:\windows\cavscan.INI

2009-04-05 11:51 . 2009-04-05 11:51 <DIR> d--hs---- c:\documents and settings\NetworkService\IETldCache

2009-04-04 12:39 . 2009-04-04 12:39 87 --a------ c:\windows\winDecrypt.INI

2009-04-04 12:38 . 2009-04-04 12:38 1,024 --a------ c:\windows\system32\pwdremover.dat

2009-04-04 12:38 . 2009-04-04 12:42 36 --a------ c:\windows\verypdf.ini

2009-04-03 12:15 . 2008-09-16 22:23 168,448 --a------ c:\windows\system32\unrar.dll

2009-04-03 12:14 . 2009-04-03 15:12 <DIR> d-------- c:\program files\K-Lite Codec Pack

2009-04-03 10:09 . 2009-04-03 10:09 28,087 --a------ c:\windows\system32\epfwdata.bin

2009-04-01 18:03 . 2009-04-01 18:03 <DIR> d--h----- c:\windows\PIF

2009-03-27 19:05 . 2009-04-03 10:59 <DIR> d-------- c:\program files\Total Video Converter

2009-03-26 16:34 . 2009-03-26 16:34 <DIR> d-------- c:\program files\CCleaner

2009-03-26 06:53 . 2009-04-06 18:17 <DIR> d-------- c:\windows\system32\CatRoot2

2009-03-25 23:46 . 2003-03-18 23:20 1,060,864 --a------ c:\windows\system32\MFC71.dll

2009-03-25 23:10 . 2009-03-10 23:26 1,403,264 --a------ c:\windows\system32\KB905474\wganotifypackageinner.exe

2009-03-25 23:10 . 2009-03-10 23:18 453,512 --a------ c:\windows\system32\KB905474\wgasetup.exe

2009-03-25 20:28 . 2009-03-25 23:10 <DIR> d-------- c:\windows\system32\KB905474

2009-03-25 20:28 . 2009-02-09 19:51 12,490 --a------ c:\windows\system32\KB905474\wga_eula.txt

2009-03-25 12:30 . 2009-03-25 12:31 12,126 --a------ c:\windows\system32\rundll32.rar

2009-03-25 09:37 . 2009-04-06 13:06 <DIR> d-------- c:\program files\Garena

2009-03-23 20:11 . 2009-03-23 20:11 384 --a------ c:\windows\system32\%LocalXml%

2009-03-23 18:02 . 2009-03-23 18:02 0 --a------ c:\windows\nsreg.dat

2009-03-23 05:22 . 2009-03-23 05:22 <DIR> d-------- c:\program files\Common Files\Blizzard Entertainment

2009-03-22 22:22 . 2009-03-22 22:22 <DIR> d-------- c:\documents and settings\All Users\Application Data\nView_Profiles

2009-03-22 05:00 . 2008-10-16 15:06 268,648 --a------ c:\windows\system32\mucltui.dll

2009-03-22 05:00 . 2008-10-16 15:06 27,496 --a------ c:\windows\system32\mucltui.dll.mui

2009-03-21 23:23 . 2009-03-21 23:23 <DIR> d--h----- c:\program files\Microsoft ActiveSync

2009-03-21 23:22 . 2009-03-21 23:23 <DIR> d-------- c:\windows\SHELLNEW

2009-03-21 23:18 . 2009-03-21 23:18 <DIR> dr-h----- C:\MSOCache

2009-03-21 16:25 . 2009-03-21 16:25 <DIR> d-------- c:\program files\uTorrent

2009-03-21 16:25 . 2009-04-06 17:23 <DIR> d-------- c:\documents and settings\I3RODA\Application Data\uTorrent

2009-03-21 15:28 . 2009-03-21 15:28 <DIR> d-------- c:\program files\IVT Corporation

2009-03-21 15:11 . 2005-11-16 11:08 78,976 -ra------ c:\windows\system32\drivers\Rtenicxp.sys

2009-03-21 15:09 . 2009-03-21 15:35 <DIR> d-------- c:\documents and settings\All Users\Application Data\Bluetooth

2009-03-21 15:09 . 2000-03-29 17:17 5,824 --a------ c:\windows\system32\drivers\ASUSHWIO.SYS

2009-03-21 15:09 . 2009-03-21 15:09 4,561 --a------ c:\windows\Ascd_tmp.ini

2009-03-21 15:00 . 2009-03-21 15:29 32 --a------ c:\windows\0

2009-03-21 15:00 . 2009-03-21 15:00 0 --a------ c:\windows\system32\0

2009-03-21 13:52 . 2006-09-22 09:58 5,552,104 --a------ c:\windows\system32\xdclock.scr

2009-03-20 19:41 . 2009-03-20 19:41 <DIR> d--hs---- c:\documents and settings\I3RODA\PrivacIE

2009-03-20 19:40 . 2009-03-20 19:40 <DIR> d--hs---- c:\documents and settings\I3RODA\IECompatCache

2009-03-20 19:38 . 2009-03-20 19:38 <DIR> d--hs---- c:\documents and settings\I3RODA\IETldCache

2009-03-20 19:37 . 2009-03-20 19:37 <DIR> d-------- c:\windows\ie8updates

2009-03-20 19:35 . 2009-03-27 20:01 <DIR> d--h-c--- c:\windows\ie8

2009-03-20 19:29 . 2009-04-06 12:41 116 --a------ c:\windows\NeroDigital.ini

2009-03-20 19:28 . 2009-03-20 19:29 <DIR> d-------- c:\documents and settings\I3RODA\Application Data\Media Player Classic

2009-03-20 18:13 . 2009-03-20 18:18 <DIR> d-------- c:\windows\SxsCaPendDel

2009-03-20 17:53 . 2009-03-20 18:10 <DIR> d-------- c:\windows\system32\XPSViewer

2009-03-20 17:53 . 2009-03-20 17:53 <DIR> d--h----- c:\program files\MSBuild

2009-03-20 17:52 . 2008-07-06 15:06 1,676,288 --------- c:\windows\system32\xpssvcs.dll

2009-03-20 17:52 . 2008-07-06 15:06 575,488 --------- c:\windows\system32\xpsshhdr.dll

2009-03-20 17:52 . 2008-07-06 15:06 117,760 --------- c:\windows\system32\prntvpt.dll

2009-03-20 17:49 . 2009-03-26 00:31 <DIR> d--h----- c:\windows\system32\GroupPolicy

2009-03-20 17:49 . 2009-03-20 17:49 <DIR> d-------- c:\program files\Windows Media Connect 2

2009-03-20 17:48 . 2009-03-20 18:30 <DIR> d-------- c:\windows\system32\LogFiles

2009-03-20 17:48 . 2009-03-20 17:48 <DIR> d-------- c:\windows\system32\drivers\UMDF

2009-03-20 17:47 . 2009-03-20 18:02 <DIR> d-------- c:\windows\system32\URTTemp

2009-03-20 17:05 . 2009-03-20 17:05 <DIR> d-------- c:\windows\system32\scripting

2009-03-20 17:05 . 2009-03-20 17:05 <DIR> d-------- c:\windows\system32\en

2009-03-20 17:05 . 2009-03-20 17:05 <DIR> d-------- c:\windows\system32\bits

2009-03-20 17:05 . 2009-03-20 17:05 <DIR> d-------- c:\windows\l2schemas

2009-03-20 17:04 . 2009-03-20 17:05 <DIR> d-------- c:\windows\ServicePackFiles

2009-03-20 16:37 . 2009-03-20 16:37 <DIR> d--hs---- c:\documents and settings\I3RODA\UserData

2009-03-20 16:19 . 2009-03-20 16:19 <DIR> d--h----- c:\program files\Common Files\DirectX

2009-03-20 15:57 . 2009-03-20 15:58 <DIR> d-------- c:\program files\Your Uninstaller 2008

2009-03-20 15:57 . 2009-03-20 15:57 <DIR> d-------- c:\documents and settings\I3RODA\Application Data\URSoft

2009-03-20 15:57 . 2009-04-05 15:25 <DIR> d-a------ c:\documents and settings\All Users\Application Data\TEMP

2009-03-20 15:50 . 2009-03-25 12:13 <DIR> d-------- c:\program files\Unlocker

2009-03-20 15:49 . 2009-03-20 15:49 <DIR> d-------- c:\documents and settings\All Users\Application Data\Martau

2009-03-20 15:48 . 2009-03-20 19:15 <DIR> d-------- c:\program files\Total Uninstall 5

2009-03-20 15:46 . 2009-03-20 15:46 <DIR> d-------- c:\program files\SA Dictionary T4

2009-03-20 15:40 . 2009-03-20 15:40 <DIR> d-------- c:\program files\Nero

2009-03-20 15:40 . 2009-03-20 15:40 <DIR> d--h----- c:\program files\Common Files\Ahead

2009-03-20 15:39 . 2009-03-20 19:14 <DIR> d-------- c:\program files\Video mp3 Extractor

2009-03-20 15:30 . 2009-03-22 16:14 <DIR> d-------- c:\program files\High Quality Photo Resizer

2009-03-20 15:30 . 2002-05-26 18:16 373,760 --a------ c:\windows\system32\xwpdlx20.ocx

2009-03-20 15:29 . 2009-04-04 14:13 <DIR> d-------- c:\program files\GOLD script

2009-03-20 15:22 . 2009-03-20 15:22 <DIR> d-------- c:\program files\Webteh

2009-03-20 15:21 . 2009-03-20 15:21 <DIR> d-------- c:\program files\Alcohol Soft

2009-03-20 15:19 . 2009-03-20 15:19 717,296 --a------ c:\windows\system32\drivers\sptd.sys

2009-03-20 15:14 . 2009-03-20 15:14 <DIR> d-------- c:\program files\IObit

2009-03-20 15:14 . 2009-03-20 15:14 <DIR> d-------- c:\documents and settings\I3RODA\Application Data\IObit

2009-03-20 15:02 . 2009-03-20 15:02 <DIR> d-------- c:\program files\Dfx

2009-03-20 15:02 . 2009-03-20 15:02 454,656 --a------ c:\windows\system32\dfxg11.dll

2009-03-20 14:54 . 2009-03-20 14:54 <DIR> d-------- c:\documents and settings\I3RODA\Application Data\Nitro PDF

2009-03-20 14:52 . 2009-03-20 14:52 <DIR> d-------- c:\windows\Downloaded Installations

2009-03-20 14:52 . 2009-03-20 14:52 <DIR> d-------- c:\program files\Nitro PDF

2009-03-20 14:52 . 2009-03-20 14:52 <DIR> d--h----- c:\program files\Common Files\Nitro PDF

2009-03-20 14:52 . 2009-03-20 14:52 <DIR> d--h----- c:\program files\Common Files\BCL Technologies

2009-03-20 14:52 . 2009-03-20 14:52 <DIR> d-------- c:\documents and settings\All Users\Application Data\Nitro PDF

2009-03-20 14:52 . 2008-04-14 03:11 2,843,136 --a------ c:\windows\system32\msi.dll

2009-03-20 14:52 . 2008-04-13 18:39 884,736 --a------ c:\windows\system32\msimsg.dll

2009-03-20 14:52 . 2008-04-14 03:11 271,360 --a------ c:\windows\system32\msihnd.dll

2009-03-20 14:52 . 2008-04-14 03:12 78,848 --a------ c:\windows\system32\msiexec.exe

2009-03-20 14:52 . 2008-04-14 03:11 15,360 --a------ c:\windows\system32\msisip.dll

2009-03-20 14:42 . 2009-03-21 23:24 376 --a------ c:\windows\ODBC.INI

2009-03-20 14:09 . 2009-03-20 15:02 <DIR> d-------- c:\program files\Winamp

2009-03-20 14:09 . 2009-03-20 15:04 <DIR> d-------- c:\documents and settings\I3RODA\Application Data\Winamp

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2009-04-06 15:21 --------- d-----w c:\documents and settings\I3RODA\Application Data\Skype

2009-03-20 10:13 --------- d--h--w c:\program files\Common Files\InstallShield

2009-03-20 10:13 --------- d-----w c:\program files\C-Media PCI Audio Device

2009-03-20 09:57 --------- d-----w c:\program files\NVIDIA

2009-03-20 09:24 --------- d-----w c:\program files\Skype

2009-03-20 09:24 --------- d-----w c:\documents and settings\All Users\Application Data\Skype

2009-03-20 09:14 --------- d-----w c:\documents and settings\All Users\Application Data\Office Genuine Advantage

2009-03-20 09:04 --------- d--h--w c:\program files\microsoft frontpage

2009-03-19 08:45 55,768 ----a-w c:\windows\system32\drivers\epfwtdi.sys

2009-03-19 08:45 33,096 ----a-w c:\windows\system32\drivers\epfwndis.sys

2009-03-19 08:45 131,976 ----a-w c:\windows\system32\drivers\epfw.sys

2009-03-19 08:44 107,256 ----a-w c:\windows\system32\drivers\ehdrv.sys

2009-03-19 08:41 113,960 ----a-w c:\windows\system32\drivers\eamon.sys

2009-03-08 02:34 914,944 ----a-w c:\windows\system32\wininet.dll

2009-03-08 02:34 43,008 ----a-w c:\windows\system32\licmgr10.dll

2009-03-08 02:33 420,352 ----a-w c:\windows\system32\vbscript.dll

2009-03-08 02:33 18,944 ----a-w c:\windows\system32\corpol.dll

2009-03-08 02:32 72,704 ----a-w c:\windows\system32\admparse.dll

2009-03-08 02:32 71,680 ----a-w c:\windows\system32\iesetup.dll

2009-03-08 02:31 48,128 ----a-w c:\windows\system32\mshtmler.dll

2009-03-08 02:31 45,568 ----a-w c:\windows\system32\mshta.exe

2009-03-08 02:31 34,816 ----a-w c:\windows\system32\imgutil.dll

2009-03-08 02:22 156,160 ----a-w c:\windows\system32\msls31.dll

2009-03-04 14:27 508,200 ----a-w c:\windows\system32\ICCProfiles.dll

2009-03-02 18:10 67,584 ----a-w c:\windows\system32\ff_vfw.dll

2009-02-26 20:47 2,255,360 ----a-w c:\windows\system32\x264vfw.dll

2009-02-16 21:17 453,152 ----a-w c:\windows\system32\NVUNINST.EXE

2009-02-09 11:13 1,846,784 ----a-w c:\windows\system32\win32k.sys

2009-01-07 16:21 26,144 ----a-w c:\windows\system32\spupdsvc.exe

2009-01-07 16:20 265,720 ----a-w c:\windows\system32\msdbg2.dll

2009-01-07 16:20 26,112 ----a-w c:\windows\system32\idndl.dll

2009-01-07 16:20 24,576 ----a-w c:\windows\system32\nlsdl.dll

2009-01-07 16:20 23,552 ----a-w c:\windows\system32\normaliz.dll

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-07 21633320]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-03-19 2029640]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"vidc.i263"= i263_32.drv

"msacm.l3fhg"= mp3fhg.acm

"msacm.divxa32"= divxa32.acm

"VIDC.X264"= x264vfw.dll

"VIDC.HFYU"= huffyuv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

"ekrn"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"d:\\Install\\DC++\\StrongDC++ 2.22\\StrongDC.exe"=

"d:\\Games\\CounterStrike 1.6\\cstrike.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\GOLD script\\mirc.exe"=

"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil_.exe"=

"c:\\Program Files\\uTorrent\\uTorrent.exe"=

"c:\\Program Files\\Garena\\Garena.exe"=

"d:\\Kartinki\\--\\GarenaJustGetFucking\\Garena.exe"=

"d:\\Install\\CCproxy\\CCProxy.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009-03-19 107256]

R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2009-03-19 731840]

S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\I3RODA\LOCALS~1\Temp\PHW2E.tmp --> c:\docume~1\I3RODA\LOCALS~1\Temp\PHW2E.tmp [?]

S3 s115bus;Sony Ericsson Device 115 driver (WDM);c:\windows\system32\drivers\s115bus.sys [2007-04-23 83208]

S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:\windows\system32\drivers\s115mdfl.sys [2007-04-23 15112]

S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:\windows\system32\drivers\s115mdm.sys [2007-04-23 108680]

S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s115mgmt.sys [2007-04-23 100488]

S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:\windows\system32\drivers\s115obex.sys [2007-04-23 98568]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]

"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\Nitro PDF Professional]

cscript //B "c:\program files\Nitro PDF\Professional\RemoveOldAddins.vbs"

Contents of the 'Scheduled Tasks' folder

2009-04-05 c:\windows\Tasks\User_Feed_Synchronization-{9A809845-33B4-41E0-B189-E9B1BB754358}.job

- c:\windows\system32\msfeedssync.exe [2009-03-08 05:31]

2009-03-25 c:\windows\Tasks\WGASetup.job

- c:\windows\system32\KB905474\wgasetup.exe [2009-03-10 23:18]

------- Supplementary Scan -------

uStart Page = hxxp://www.garena.com/portal/

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

FF - ProfilePath - c:\documents and settings\I3RODA\Application Data\Mozilla\Firefox\Profiles\zezhki29.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.bg/

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-04-06 18:20:56

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]

"ImagePath"="\??\c:\docume~1\I3RODA\LOCALS~1\Temp\PHW2E.tmp"

Completion time: 2009-04-06 18:22:19 - machine was rebooted

ComboFix-quarantined-files.txt 2009-04-06 15:22:16

Pre-Run: 14 784 442 368 bytes free

Post-Run: 14,715,899,904 bytes free

242 --- E O F --- 2009-03-27 13:57:37

6 април 200917 г.

Отворете Notepad и чрез copy/paste поставете следното:

KILLALL::


File::

c:\windows\system32\MFC71.dll

c:\docume~1\I3RODA\LOCALS~1\Temp\PHW2E.tmp


Folder::

c:\windows\0

c:\windows\system32\0


Registry::

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]

"ImagePath"=-

Запазете файла с името CFScript.txt и го поставете върху ComboFix.

След, като програмата приключи ще Ви изведе лог файла. Чрез Copy/Paste поставете информацията тук.

9 април 200917 г.

стана воина с нод 32ComboFix 09-04-04.01 - User 2008-04-09 21:22:15.1 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.2047.1558 [GMT 3:00]

Running from: c:\documents and settings\User\Desktop\ComboFix.exe

AV: ESET NOD32 Antivirus 3.0 *On-access scanning enabled* (Updated)

* Created a new restore point

* Resident AV is active

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

((((((((((((((((((((((((( Files Created from 2009-03-04 to 2009-04-04 )))))))))))))))))))))))))))))))

2009-03-31 22:28 . 2009-03-31 22:28 <DIR> d-------- c:\documents and settings\All Users\Application Data\TVU Networks

2009-03-31 21:19 . 2009-03-31 21:19 <DIR> d-------- c:\program files\DirectX

2009-03-30 21:37 . 2009-03-30 21:38 <DIR> d-------- c:\documents and settings\User\Application Data\Microsoft Games

2009-03-29 20:07 . 2009-03-29 20:07 29,360 --a------ c:\windows\_SETUPD_.EXE

2009-03-29 17:36 . 2009-01-04 12:35 31,232 --a------ c:\windows\system\vdremote.dll

2009-03-29 17:36 . 2009-01-04 12:35 25,088 --a------ c:\windows\system\vdsvrlnk.dll

2009-03-29 09:46 . 2009-03-29 09:46 <DIR> d-------- c:\documents and settings\User\LocalLow

2009-03-28 23:35 . 2002-01-05 05:37 344,064 --a------ c:\windows\system32\Msvcr70.dll

2009-03-26 00:37 . 2009-03-26 00:37 73 --a------ c:\windows\EurekaLog.ini

2009-03-25 23:58 . 2009-03-25 23:58 <DIR> d-------- c:\program files\OpenAL

2009-03-25 23:58 . 2008-04-08 21:00 418,480 --a------ c:\windows\system32\wrap_oal.dll

2009-03-25 23:58 . 2008-04-08 21:00 115,432 --a------ c:\windows\system32\OpenAL32.dll

2009-03-25 23:41 . 2009-03-27 19:59 <DIR> d-------- c:\documents and settings\User\Application Data\Godlike

2009-03-22 15:00 . 2009-03-22 15:01 <DIR> d-------- c:\documents and settings\User\Application Data\DC++

2009-03-20 19:43 . 2009-03-20 19:43 <DIR> d-------- c:\documents and settings\User\Application Data\Outerspace Software

2009-03-17 20:05 . 2009-03-17 20:05 <DIR> d-------- c:\documents and settings\User\Application Data\FastStone

2009-03-12 21:04 . 2009-03-12 21:06 <DIR> d-------- c:\documents and settings\User\Application Data\Marine Aquarium 3

2009-03-12 21:04 . 2009-03-03 16:14 6,545,408 --a------ c:\windows\system32\MarineAquarium3.scr

2009-03-12 20:07 . 2009-03-30 22:13 <DIR> d-------- c:\documents and settings\User\Application Data\Babylon

2009-03-12 20:07 . 2009-03-30 22:13 <DIR> d-------- c:\documents and settings\All Users\Application Data\Babylon

2009-03-10 21:04 . 2008-04-05 19:20 22,328 --a------ c:\windows\system32\drivers\PnkBstrK.sys

2009-03-10 21:03 . 2008-04-05 19:20 103,736 --a------ c:\windows\system32\PnkBstrB.exe

2009-03-10 20:50 . 2009-03-10 20:50 <DIR> dr-h----- c:\documents and settings\User\Application Data\SecuROM

2009-03-10 20:42 . 2009-03-10 21:10 107,888 --a------ c:\windows\system32\CmdLineExt.dll

2009-03-10 20:38 . 2008-04-05 19:05 22,328 --a------ c:\documents and settings\User\Application Data\PnkBstrK.sys

2009-03-10 20:37 . 2009-03-10 20:37 <DIR> d-------- c:\windows\system32\LogFiles

2009-03-10 20:37 . 2008-04-05 19:16 66,872 --a------ c:\windows\system32\PnkBstrA.exe

2009-03-10 19:13 . 2009-03-10 19:15 873,472 --a------ c:\windows\WATERYDS.SCR

2009-03-10 19:13 . 2008-12-08 04:02 69,120 --a------ c:\windows\WateryDesktop_vista.dll

2009-03-10 19:13 . 2008-12-08 04:02 53,248 --a------ c:\windows\WateryDesktop_xp.dll

2009-03-09 22:48 . 2009-03-09 22:48 <DIR> d-------- c:\documents and settings\User\Application Data\COWON

2009-03-09 22:47 . 2009-03-29 20:13 <DIR> d-------- c:\program files\JetAudio

2009-03-09 22:47 . 2009-03-09 22:47 <DIR> d-------- c:\program files\Common Files\COWON

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2009-04-06 12:32 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys

2009-04-06 12:32 15,504 ----a-w c:\windows\system32\drivers\mbam.sys

2009-03-24 19:03 --------- d-----w c:\documents and settings\User\Application Data\Dark Sector

2009-03-16 11:18 69,448 ----a-w c:\windows\system32\XAPOFX1_3.dll

2009-03-16 11:18 517,448 ----a-w c:\windows\system32\XAudio2_4.dll

2009-03-16 11:18 235,352 ----a-w c:\windows\system32\xactengine3_4.dll

2009-03-16 11:18 22,360 ----a-w c:\windows\system32\X3DAudio1_6.dll

2009-03-09 12:27 453,456 ----a-w c:\windows\system32\d3dx10_41.dll

2009-03-09 12:27 4,178,264 ----a-w c:\windows\system32\D3DX9_41.dll

2009-03-09 12:27 1,846,632 ----a-w c:\windows\system32\D3DCompiler_41.dll

2009-03-06 14:01 --------- d-----w c:\documents and settings\User\Application Data\CyberLink

2009-03-03 19:05 --------- d-----w c:\program files\CyberLink

2009-03-03 18:41 --------- d-----w c:\documents and settings\All Users\Application Data\CyberLink

2009-03-03 18:09 --------- d-----w c:\program files\Common Files\CyberLink

2009-03-03 03:08 --------- d-----w c:\program files\TeamViewer

2009-03-03 02:58 --------- d-----w c:\documents and settings\User\Application Data\TeamViewer

2009-03-02 20:28 --------- d-----w c:\program files\AGEIA Technologies

2009-03-02 20:03 --------- d-----w c:\documents and settings\User\Application Data\DAEMON Tools Lite

2009-03-02 19:00 --------- d-----w c:\documents and settings\User\Application Data\URSoft

2009-03-02 18:20 --------- d-----w c:\program files\Common Files\Adobe

2009-03-02 14:46 --------- d-----w c:\program files\Common Files\InstallShield

2009-03-02 13:58 --------- d-----w c:\documents and settings\User\Application Data\Media Player Classic

2009-02-25 20:10 --------- d-----w c:\program files\Common Files\Adobe AIR

2009-02-25 20:07 --------- d-----w c:\program files\NOS

2009-02-25 20:07 --------- d-----w c:\documents and settings\All Users\Application Data\NOS

2009-02-25 20:01 --------- d-----w c:\documents and settings\User\Application Data\AdobeUM

2009-02-22 19:41 --------- d-----w c:\program files\Common Files\TechSmith Shared

2009-02-22 19:41 --------- d-----w c:\documents and settings\All Users\Application Data\TechSmith

2009-02-12 18:48 --------- d-----w c:\program files\uTorrent

2009-02-12 18:42 --------- d-----w c:\documents and settings\User\Application Data\DAEMON Tools Pro

2009-02-12 18:42 --------- d-----w c:\documents and settings\User\Application Data\DAEMON Tools

2009-02-12 18:41 --------- d-----w c:\program files\DAEMON Tools Lite

2009-02-12 18:41 --------- d-----w c:\documents and settings\All Users\Application Data\DAEMON Tools Lite

2009-02-12 18:38 717,296 ----a-w c:\windows\system32\drivers\sptd.sys

2009-02-12 17:29 --------- d-----w c:\program files\Intel

2009-02-12 17:24 --------- d-----w c:\program files\microsoft frontpage

2009-02-12 17:20 --------- d-----w c:\program files\Windows Media Connect 2

2009-02-12 15:53 --------- d-----w c:\program files\Winamp

2009-02-12 15:51 --------- d-----w c:\program files\Nero

2009-02-12 15:51 --------- d-----w c:\program files\Common Files\Ahead

2009-02-12 15:49 --------- d-----w c:\program files\SA Dictionary 2004 Datacenter

2009-02-12 15:47 --------- d-----w c:\program files\Microsoft ActiveSync

2009-02-12 15:47 --------- d-----w c:\program files\Datecs

2009-02-12 15:44 --------- d-----w c:\program files\ESET

2009-02-12 15:44 --------- d-----w c:\documents and settings\All Users\Application Data\ESET

2009-02-12 15:40 --------- d-----w c:\program files\Skype

2009-02-12 15:40 --------- d-----w c:\program files\Common Files\Skype

2009-02-12 15:39 --------- d-----w c:\documents and settings\All Users\Application Data\Skype

2009-02-12 15:38 --------- d-----w c:\program files\Webteh

2009-02-12 15:37 --------- d-----w c:\program files\K-Lite Codec Pack

2009-02-12 15:33 --------- d-----w c:\program files\Realtek

2009-02-12 15:25 --------- d-----w c:\program files\Vimicro

2009-02-12 15:25 --------- d-----w c:\documents and settings\User\Application Data\InstallShield

2009-02-12 15:21 --------- d-----w c:\program files\Attansic

2009-02-12 15:18 315,392 ----a-w c:\windows\HideWin.exe

2006-06-23 06:48 32,768 ----a-r c:\windows\inf\UpdateUSB.exe

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560]

"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-07 21633320]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"BigDogPath323Domino"="c:\windows\Domino.exe" [2007-01-09 49152]

"BigDogPath323VMSnap"="c:\windows\VMSnap23.exe" [2007-01-09 212992]

"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2007-12-21 1443072]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016]

"RemoteControl9"="c:\program files\CyberLink\PowerDVD9\PDVD9Serv.exe" [2009-02-16 87336]

"PDVD9LanguageShortcut"="c:\program files\CyberLink\PowerDVD9\Language\Language.exe" [2008-10-13 50472]

"nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe]

"RTHDCPL"="RTHDCPL.EXE" [2007-03-21 c:\windows\RTHDCPL.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"nltide_2"="shell32" [X]

c:\documents and settings\All Users\Start Menu\Programs\Startup\

Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 29696]

FlexType 2K.lnk - c:\program files\Datecs\FlexType 2K\FType2K.exe [2009-02-12 95232]

Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoStartMenuSubFolders"= 0 (0x0)

"NoCommonGroups"= 0 (0x0)

"NoPrinters"= 0 (0x0)

"NoRecentDocsNetHood"= 0 (0x0)

"NoChangeAnimation"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]

--------- 2008-04-14 06:42 1695232 c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

--a------ 2001-07-09 10:20 155648 c:\windows\system32\NeroCheck.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\uTorrent\\uTorrent.exe"=

"c:\\Program Files\\TeamViewer\\Version4\\TeamViewer.exe"=

"f:\\Dark Sector\\DS.exe"=

"c:\\WINDOWS\\system32\\PnkBstrA.exe"=

"c:\\WINDOWS\\system32\\PnkBstrB.exe"=

"f:\\Far Cry 2\\bin\\farcry2.exe"=

"f:\\New Folder\\GoW\\Binaries\\WarGame-G4WLive.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2007-12-21 33800]

R2 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2007-12-21 468224]

R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\atl01_xp.sys [2009-02-12 38656]

R3 MaplomL;MaplomL;c:\windows\system32\drivers\maploml.sys [2009-03-02 38336]

R3 vmfilter323;323 filter service, Normal;c:\windows\system32\drivers\vmfilter323.sys [2009-02-12 476672]

R3 ZSMC326;Vimicro USB2.0 PC Camera(VC0323);c:\windows\system32\drivers\usbvm323.sys [2009-02-12 260224]

S3 getPlus® Helper;getPlus® Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2009-02-25 33752]

S3 PPDrv;Protector Plus Driver (UnRegistered);\??\c:\protector plus\PPDrv.sys --> c:\protector plus\PPDrv.sys [?]

S3 PPEMSCAN;Protector Plus Email Scan Driver;\??\c:\protector plus\PPEMSCAN.sys --> c:\protector plus\PPEMSCAN.sys [?]

- - - - ORPHANS REMOVED - - - -

HKCU-Run-PUSH Wallpaper - f:\installirani\Watery Desktop 3D\Watery Desktop 3D.exe

HKLM-Run-Babylon Client - f:\installirani\Babylon\Babylon.exe

HKLM-Run-TrojanScanner - f:\installirani\Your Uninstaller 2008\Trojan Remover\Trjscan.exe

------- Supplementary Scan -------

uStart Page = about:blank

uInternet Connection Wizard,ShellNext = hxxp://www.codecguide.com/

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000

IE: Translate with &Babylon - f:\babylon\Utils\BabylonIEPI.dll/Translate.htm

TCP: {069BED30-8EF9-4115-81EE-C8EF31C1EE66} = 83.143.183.7 83.143.183.2

FF - ProfilePath -

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-04-04 21:23:16

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-790525478-1214440339-1801674531-1003\Software\SecuROM\License information*]

"datasecu"=hex:22,4d,4b,83,c4,e7,54,60,7a,8c,fd,83,48,df,52,d1,c6,26,04,be,de,

51,ad,a0,da,0f,3c,bb,a2,3b,d6,4d,59,5d,f7,97,7f,82,ef,a7,dc,31,0f,06,7b,32,\

"rkeysecu"=hex:9e,ce,99,94,3d,64,be,af,91,ba,01,59,7d,7c,6d,3e

Completion time: 2009-04-04 21:23:54

ComboFix-quarantined-files.txt 2009-04-04 18:23:52

Pre-Run: 35 859 423 232 bytes free

Post-Run: 35,964,002,304 bytes free

197

9 април 200917 г.

Всичко е наред! Сканирал си с MBAM на време и това е попречило на бъдещи по-сериозни проблеми.

Благодаря ти! :lol6:

9 април 200917 г.

аз ти благодаря,но Windows Security Center ми изключи нод 32 Virus Protection OFF :wors:

9 април 200917 г.

Цъкни с десен бутон върху иконата на NOD32 в системния трей и включи Real-Time защитата или пък включи NOD32 и в Protection Status ще ти пише защо защитата не работи.

9 април 200917 г.

Здравейте, преди известно време имах проблем с разни вируси : Trojanci , Adwere (някакъв) , бръмбъри и прочие, симптомите бяха : можех да влизам само веднъж в интернет и след това не ми зареждаха страниците, отделно мишката ми постоянно беше с пясъчен часовник а нищо не зареждаше.След това си занесохPCто на ремонт с цел да ми изчистят вирусите без формат и преинсталиране на windowsa.И така минаха се 3-4 месеца и ето пак проблем: като пусна инетернет browser (какъвто и да е) страницата зарежда до 1 степен и не иска повече.Аз съответно си помислих , че вина има интернет доставчика ми но skype си работеше без проблем, странното също беше , че и Counter-Strike можех да играя, но интернет страници и приложения като Garena не можеха да заредят.Опитах всичко сменях от ръчни на автоматични IP адреси , направих пълен scan на компютъра със SuperAntiSpuwear и Eset Smart Security, изтрих всички намерени вируси но проблема си остава.Тази тема я пиша на Safe mode with networing , което ме убеждава , че проблема е от компютъра не от нета.Надявам се някой да може да ми помогне с предложения за програми , който могат да ми изчистят spywear-а ,който пребивава съвсем спокойно .Благодаря ви предварително!

9 април 200917 г.

http://www.malwarebytes.org/mbam-download.php

Редактирано 9 април 200917 г. от kaldata.com (преглед на промените)

10 април 200917 г.

Е изтеглих си тази програма за чиестене на вируси , която вие ми препоръчахте , изчистих 9 вируса , които преди не ги откривах но проблема си остава моля ако някой знае друго решение на проблема да пише.

10 април 200917 г.

To може и всички вируси и malware да изчистиш, но проблемът пак да си остава, ако въпросните гадинки са изтрили важни файлове. Затова обикновено най-добрият вариант е просто преинсталация на ОС-а.

10 април 200917 г.

Пробвай с Vir.IT eXplorer

10 април 200917 г.

Последни новини за сагата с моя компютър.

Вече е чист!

Постигнах го благодарение на B-boy[styLe] , браво на него :clap:

Много благодаря!!!

:wors:

10 април 200917 г.

darkman93, публикувай лог файл от HiJackTHis:

http://www.kaldata.com/forums/index.php?sh...t=0&start=0

Инструкциите са в първия коментар.

10 април 200917 г.

Пробвай с Vir.IT eXplorer

Хм, това пък какво е сега.Щях да го разгледам на служебния, но добре че реших първо да направя това

Обаче според WOT няма сериозна опасност цък

10 април 200917 г.

Здравейте, преди известно време имах проблем с вируси и си заведох PC-то на сервиз с цел да ми изчистят вирусите без форматиране.Минаха се 3-4 месеца и сега имам пак някакъв проблем с вируси, malwere , adwere , spywere , trojanci , бръмбъри и прочие.Проблема се изразява в това , че като пусна някакъв интернет browser (какъвто и да е ) страницата зарежда до 1 място и спри.Съответно аз си помислих , че интернет доставчика ми има вина за това но след това стана ясно , че няма такъв проблем.Интересното също беше , че skype-а си бачкаше и можех да влизам в Counter-Strike сервери но интернет страници и приложения като Garena не можеха да заредят.В първия момент аз реших да се боря с инфекциите и сканирах със SuperAntiSpyWere , Eset Smart Secutity (моментната ми антивирусна програма) откриха какви ли не паразити изчистиха се но проблема си остава.След това се поразрових малко и открих , че имам System Mechanic Professional 6. Със тази програма падна бая сканиране. Сканирах буквално всичко : регистри,дискове,системни файлове,junk files и броя на намерените и на изтритите паразити беше огромен.Но уви след всичките тези мъки проблема си остава . Това съобщение го пиша от Safe mode with networing , което ме навежда на мисълта , че щом мога да вляза от тука в интернет мога да реша и проблема. Надявам се някой да може да ми помогне.Благодаря предварително.