Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Skype вирусът Win32.Chydo [РЕШЕН]

leotrop
в Премахване на зловреден софтуер

Featured Replies

здравейте,

прочетох тази тема -> http://www.kaldata.com/forums/index.php?showtopic=144902

но вирусът не ми дава да отварям повечето от файловете и не мога да го премахна

някой да има идеи :rolleyes:

Изтеглете OTL.exe и го запазете на десктопа.

Стартирайте файла otlDesktopIcon.png с двукратен клик на мишката.

Направете следните настройки:

f1a78i.jpg

Натиснете Run Scan.

Като приключи проверката публикувайте двата лог файла - OTL.Txt и Extras.Txt.

Стартирайте OTL.exe и copy/paste под колонката "Custom Scans/Fixes" въведете това:

:OTL

PRC - C:\WINDOWS\system32\xlexhyqgrjxhfnfc.exe ()

PRC - C:\Documents and Settings\leotrop\Local Settings\Temp\adlts.exe ()

O4 - HKLM..\Run: [lpyhho] C:\WINDOWS\System32\etnhskdugzozyhayc.exe ()

O4 - HKLM..\Run: [pzodjwkwdrbh] C:\Documents and Settings\leotrop\Local Settings\Temp\xlexhyqgrjxhfnfc.exe ()

O4 - HKU\S-1-5-21-1085031214-776561741-1417001333-1003..\Run: [] File not found

O4 - HKU\S-1-5-21-1085031214-776561741-1417001333-1003..\Run: [elxjmwhqu] C:\WINDOWS\System32\atrpeaxsifynqdackmcjc.exe ()

O4 - HKU\S-1-5-21-1085031214-776561741-1417001333-1003..\Run: [lpyhho] C:\Documents and Settings\leotrop\Local Settings\Temp\yplhuojcqlcpqbwwccq.exe ()

O4 - HKLM..\RunOnce: [sbpdiuhsylu] C:\Documents and Settings\leotrop\Local Settings\Temp\ldaxlgcwlhznpbxyfgvb.exe ()

O4 - HKLM..\RunOnce: [ydnxygp] C:\WINDOWS\System32\yplhuojcqlcpqbwwccq.exe ()

O4 - HKU\.DEFAULT..\RunOnce: [showDeskFix] File not found

O4 - HKU\S-1-5-18..\RunOnce: [showDeskFix] File not found

O4 - HKU\S-1-5-19..\RunOnce: [showDeskFix] File not found

O4 - HKU\S-1-5-20..\RunOnce: [showDeskFix] File not found

O4 - HKU\S-1-5-21-1085031214-776561741-1417001333-1003..\RunOnce: [xfsfjugqvh] C:\WINDOWS\System32\ndytfyskxrhttdxwba.exe ()

O4 - HKU\S-1-5-21-1085031214-776561741-1417001333-1003..\RunOnce: [ydnxygp] C:\Documents and Settings\leotrop\Local Settings\Temp\ndytfyskxrhttdxwba.exe ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: ntepraks = ldaxlgcwlhznpbxyfgvb.exe ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: adlts = C:\DOCUME~1\leotrop\LOCALS~1\Temp\etnhskdugzozyhayc.exe ()

O32 - AutoRun File - [2009/12/21 23:17:27 | 00,000,843 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2009/12/21 23:17:28 | 00,000,805 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2009/12/21 23:17:29 | 00,000,830 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2009/12/21 23:17:29 | 00,000,819 | RHS- | M] () - M:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2009/12/21 23:17:29 | 00,000,824 | RHS- | M] () - W:\autorun.inf -- [ NTFS ]

O33 - MountPoints2\{a2ef45a9-b650-4d1a-b54e-4d78150ad56d}\Shell\AutoRun\command - "" = W:\elxjmwhqu.bat -- [2009/05/11 10:12:55 | 00,569,344 | RHS- | M] ()

O33 - MountPoints2\{a2ef45a9-b650-4d1a-b54e-4d78150ad56d}\Shell\explore\Command - "" = W:\ozpfmapckzkrm.bat -- [2009/04/19 10:17:35 | 00,569,344 | RHS- | M] ()

O33 - MountPoints2\{a2ef45a9-b650-4d1a-b54e-4d78150ad56d}\Shell\open\Command - "" = W:\sbpdiuhsylu.bat -- [2009/05/04 06:08:30 | 00,569,344 | RHS- | M] ()

O33 - MountPoints2\{e4194656-ee7f-11de-a665-806d6172696f}\Shell\AutoRun\command - "" = D:\elxjmwhqu.bat -- [2009/07/14 07:09:25 | 00,569,344 | RHS- | M] ()

O33 - MountPoints2\{e4194656-ee7f-11de-a665-806d6172696f}\Shell\explore\Command - "" = D:\ozpfmapckzkrm.bat -- [2009/06/10 11:19:30 | 00,569,344 | RHS- | M] ()

O33 - MountPoints2\{e4194656-ee7f-11de-a665-806d6172696f}\Shell\open\Command - "" = D:\sbpdiuhsylu.bat -- [2009/06/07 03:23:55 | 00,569,344 | RHS- | M] ()

[2009/12/22 01:18:29 | 00,002,408 | -H-- | M] () -- C:\Program Files\elxjmwhqufmpghsieuytamyblwfjube.whx

[2009/12/22 00:18:10 | 00,002,408 | -H-- | M] () -- C:\WINDOWS\elxjmwhqufmpghsieuytamyblwfjube.whx

[2009/12/22 00:18:10 | 00,002,408 | -H-- | M] () -- C:\Documents and Settings\leotrop\Local Settings\Application Data\elxjmwhqufmpghsieuytamyblwfjube.whx

[2009/12/22 00:18:10 | 00,000,280 | -H-- | M] () -- C:\WINDOWS\czbdwwxwqrohofgmyeyjg.kdd

[2009/12/22 00:18:10 | 00,000,280 | -H-- | M] () -- C:\Program Files\czbdwwxwqrohofgmyeyjg.kdd

[2009/12/22 00:18:10 | 00,000,280 | -H-- | M] () -- C:\Documents and Settings\leotrop\Local Settings\Application Data\czbdwwxwqrohofgmyeyjg.kdd

[2009/12/22 00:17:48 | 00,002,408 | -H-- | M] () -- C:\WINDOWS\System32\elxjmwhqufmpghsieuytamyblwfjube.whx

[2009/12/22 00:17:48 | 00,000,280 | -H-- | M] () -- C:\WINDOWS\System32\czbdwwxwqrohofgmyeyjg.kdd

[2009/12/22 00:17:44 | 00,000,316 | -H-- | M] () -- C:\WINDOWS\System32\pzodjwkwdrbhbftmleljtixdqeqxlvbvzn.fyf

[2009/12/22 00:17:44 | 00,000,316 | -H-- | M] () -- C:\WINDOWS\pzodjwkwdrbhbftmleljtixdqeqxlvbvzn.fyf

[2009/12/22 00:17:44 | 00,000,316 | -H-- | M] () -- C:\Program Files\pzodjwkwdrbhbftmleljtixdqeqxlvbvzn.fyf

[2009/12/22 00:17:44 | 00,000,316 | -H-- | M] () -- C:\Documents and Settings\leotrop\Local Settings\Application Data\pzodjwkwdrbhbftmleljtixdqeqxlvbvzn.fyf

[2009/12/22 00:17:23 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\yplhuojcqlcpqbwwccq.exe

[2009/12/22 00:17:23 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\xlexhyqgrjxhfnfc.exe

[2009/12/22 00:17:23 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\rlkjzwuqhfzpthfirultnm.exe

[2009/12/22 00:17:23 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\ndytfyskxrhttdxwba.exe

[2009/12/22 00:17:23 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\ldaxlgcwlhznpbxyfgvb.exe

[2009/12/22 00:17:23 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\etnhskdugzozyhayc.exe

[2009/12/22 00:17:23 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\atrpeaxsifynqdackmcjc.exe

[2009/12/21 23:30:02 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\System32\ndytfyskxrhttdxwba.exe

[2009/12/21 23:26:54 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\System32\atrpeaxsifynqdackmcjc.exe

[2009/12/21 23:26:53 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\System32\xlexhyqgrjxhfnfc.exe

[2009/12/21 23:17:23 | 00,000,073 | -H-- | M] () -- C:\WINDOWS\System32\ozpfmapckzkrmrgaaucbmcszncpxmxezetn.hpo

[2009/12/21 23:17:23 | 00,000,073 | -H-- | M] () -- C:\WINDOWS\ozpfmapckzkrmrgaaucbmcszncpxmxezetn.hpo

[2009/12/21 23:17:23 | 00,000,073 | -H-- | M] () -- C:\Program Files\ozpfmapckzkrmrgaaucbmcszncpxmxezetn.hpo

[2009/12/21 23:17:23 | 00,000,073 | -H-- | M] () -- C:\Documents and Settings\leotrop\Local Settings\Application Data\ozpfmapckzkrmrgaaucbmcszncpxmxezetn.hpo

[2009/12/21 23:16:46 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\System32\yplhuojcqlcpqbwwccq.exe

[2009/12/21 23:16:46 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\System32\rlkjzwuqhfzpthfirultnm.exe

[2009/12/21 23:16:46 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\System32\ldaxlgcwlhznpbxyfgvb.exe

[2009/12/21 23:16:46 | 00,569,344 | RHS- | M] () -- C:\WINDOWS\System32\etnhskdugzozyhayc.exe

[2009/12/21 22:49:51 | 00,004,248 | -H-- | M] () -- C:\WINDOWS\xfsfjugqvhptlnzqnejfnanrcoydpxbt.hyv

[2009/12/21 22:49:51 | 00,004,248 | -H-- | M] () -- C:\WINDOWS\System32\xfsfjugqvhptlnzqnejfnanrcoydpxbt.hyv

[2009/12/21 22:49:51 | 00,004,248 | -H-- | M] () -- C:\Program Files\xfsfjugqvhptlnzqnejfnanrcoydpxbt.hyv

[2009/12/21 22:49:51 | 00,004,248 | -H-- | M] () -- C:\Documents and Settings\leotrop\Local Settings\Application Data\xfsfjugqvhptlnzqnejfnanrcoydpxbt.hyv

:files

C:\WINDOWS\system32\xlexhyqgrjxhfnfc.exe

C:\Documents and Settings\leotrop\Local Settings\Temp\adlts.exe

:Commands

[purity]

[emptytemp]

[resethosts]

[Reboot]

Натиснете бутона Run Fix

Ще се създаде лог файл. Копирайте го в следващия си пост.

  • Автор

All processes killed

========== OTL ==========

No active process named xlexhyqgrjxhfnfc.exe was found!

No active process named adlts.exe was found!

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\lpyhho deleted successfully.

C:\WINDOWS\system32\etnhskdugzozyhayc.exe moved successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\pzodjwkwdrbh deleted successfully.

C:\Documents and Settings\leotrop\Local Settings\Temp\xlexhyqgrjxhfnfc.exe moved successfully.

Registry value HKEY_USERS\S-1-5-21-1085031214-776561741-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.

Registry value HKEY_USERS\S-1-5-21-1085031214-776561741-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Run\\elxjmwhqu deleted successfully.

C:\WINDOWS\system32\atrpeaxsifynqdackmcjc.exe moved successfully.

Registry value HKEY_USERS\S-1-5-21-1085031214-776561741-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Run\\lpyhho deleted successfully.

C:\Documents and Settings\leotrop\Local Settings\Temp\yplhuojcqlcpqbwwccq.exe moved successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\sbpdiuhsylu deleted successfully.

C:\Documents and Settings\leotrop\Local Settings\Temp\ldaxlgcwlhznpbxyfgvb.exe moved successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ydnxygp deleted successfully.

C:\WINDOWS\system32\yplhuojcqlcpqbwwccq.exe moved successfully.

Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ShowDeskFix deleted successfully.

Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ShowDeskFix not found.

Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ShowDeskFix deleted successfully.

Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ShowDeskFix deleted successfully.

Registry value HKEY_USERS\S-1-5-21-1085031214-776561741-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\RunOnce\\xfsfjugqvh deleted successfully.

C:\WINDOWS\system32\ndytfyskxrhttdxwba.exe moved successfully.

Registry value HKEY_USERS\S-1-5-21-1085031214-776561741-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ydnxygp deleted successfully.

C:\Documents and Settings\leotrop\Local Settings\Temp\ndytfyskxrhttdxwba.exe moved successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\ntepraks deleted successfully.

C:\WINDOWS\System32\ldaxlgcwlhznpbxyfgvb.exe moved successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\adlts deleted successfully.

C:\Documents and Settings\leotrop\Local Settings\Temp\etnhskdugzozyhayc.exe moved successfully.

C:\autorun.inf moved successfully.

D:\autorun.inf moved successfully.

E:\autorun.inf moved successfully.

M:\autorun.inf moved successfully.

W:\autorun.inf moved successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a2ef45a9-b650-4d1a-b54e-4d78150ad56d}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2ef45a9-b650-4d1a-b54e-4d78150ad56d}\ not found.

W:\elxjmwhqu.bat moved successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a2ef45a9-b650-4d1a-b54e-4d78150ad56d}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2ef45a9-b650-4d1a-b54e-4d78150ad56d}\ not found.

W:\ozpfmapckzkrm.bat moved successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a2ef45a9-b650-4d1a-b54e-4d78150ad56d}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2ef45a9-b650-4d1a-b54e-4d78150ad56d}\ not found.

W:\sbpdiuhsylu.bat moved successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e4194656-ee7f-11de-a665-806d6172696f}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4194656-ee7f-11de-a665-806d6172696f}\ not found.

D:\elxjmwhqu.bat moved successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e4194656-ee7f-11de-a665-806d6172696f}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4194656-ee7f-11de-a665-806d6172696f}\ not found.

D:\ozpfmapckzkrm.bat moved successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e4194656-ee7f-11de-a665-806d6172696f}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4194656-ee7f-11de-a665-806d6172696f}\ not found.

D:\sbpdiuhsylu.bat moved successfully.

C:\Program Files\elxjmwhqufmpghsieuytamyblwfjube.whx moved successfully.

C:\WINDOWS\elxjmwhqufmpghsieuytamyblwfjube.whx moved successfully.

C:\Documents and Settings\leotrop\Local Settings\Application Data\elxjmwhqufmpghsieuytamyblwfjube.whx moved successfully.

C:\WINDOWS\czbdwwxwqrohofgmyeyjg.kdd moved successfully.

C:\Program Files\czbdwwxwqrohofgmyeyjg.kdd moved successfully.

C:\Documents and Settings\leotrop\Local Settings\Application Data\czbdwwxwqrohofgmyeyjg.kdd moved successfully.

C:\WINDOWS\system32\elxjmwhqufmpghsieuytamyblwfjube.whx moved successfully.

C:\WINDOWS\system32\czbdwwxwqrohofgmyeyjg.kdd moved successfully.

C:\WINDOWS\system32\pzodjwkwdrbhbftmleljtixdqeqxlvbvzn.fyf moved successfully.

C:\WINDOWS\pzodjwkwdrbhbftmleljtixdqeqxlvbvzn.fyf moved successfully.

C:\Program Files\pzodjwkwdrbhbftmleljtixdqeqxlvbvzn.fyf moved successfully.

C:\Documents and Settings\leotrop\Local Settings\Application Data\pzodjwkwdrbhbftmleljtixdqeqxlvbvzn.fyf moved successfully.

C:\WINDOWS\yplhuojcqlcpqbwwccq.exe moved successfully.

C:\WINDOWS\xlexhyqgrjxhfnfc.exe moved successfully.

C:\WINDOWS\rlkjzwuqhfzpthfirultnm.exe moved successfully.

C:\WINDOWS\ndytfyskxrhttdxwba.exe moved successfully.

C:\WINDOWS\ldaxlgcwlhznpbxyfgvb.exe moved successfully.

C:\WINDOWS\etnhskdugzozyhayc.exe moved successfully.

C:\WINDOWS\atrpeaxsifynqdackmcjc.exe moved successfully.

File C:\WINDOWS\System32\ndytfyskxrhttdxwba.exe not found.

File C:\WINDOWS\System32\atrpeaxsifynqdackmcjc.exe not found.

C:\WINDOWS\system32\xlexhyqgrjxhfnfc.exe moved successfully.

C:\WINDOWS\system32\ozpfmapckzkrmrgaaucbmcszncpxmxezetn.hpo moved successfully.

C:\WINDOWS\ozpfmapckzkrmrgaaucbmcszncpxmxezetn.hpo moved successfully.

C:\Program Files\ozpfmapckzkrmrgaaucbmcszncpxmxezetn.hpo moved successfully.

C:\Documents and Settings\leotrop\Local Settings\Application Data\ozpfmapckzkrmrgaaucbmcszncpxmxezetn.hpo moved successfully.

File C:\WINDOWS\System32\yplhuojcqlcpqbwwccq.exe not found.

C:\WINDOWS\system32\rlkjzwuqhfzpthfirultnm.exe moved successfully.

File C:\WINDOWS\System32\ldaxlgcwlhznpbxyfgvb.exe not found.

File C:\WINDOWS\System32\etnhskdugzozyhayc.exe not found.

C:\WINDOWS\xfsfjugqvhptlnzqnejfnanrcoydpxbt.hyv moved successfully.

C:\WINDOWS\system32\xfsfjugqvhptlnzqnejfnanrcoydpxbt.hyv moved successfully.

C:\Program Files\xfsfjugqvhptlnzqnejfnanrcoydpxbt.hyv moved successfully.

C:\Documents and Settings\leotrop\Local Settings\Application Data\xfsfjugqvhptlnzqnejfnanrcoydpxbt.hyv moved successfully.

========== FILES ==========

File\Folder C:\WINDOWS\system32\xlexhyqgrjxhfnfc.exe not found.

C:\Documents and Settings\leotrop\Local Settings\Temp\adlts.exe moved successfully.

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

User: leotrop

->Temp folder emptied: 181381048 bytes

->Temporary Internet Files folder emptied: 114822 bytes

->FireFox cache emptied: 75191863 bytes

User: LocalService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 32835 bytes

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 2402044 bytes

%systemroot%\System32 .tmp files removed: 2577 bytes

Windows Temp folder emptied: 0 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes

RecycleBin emptied: 0 bytes

Total Files Cleaned = 247.00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.

HOSTS file reset successfully

OTL by OldTimer - Version 3.1.19.0 log created on 12222009_013642

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

СТЪПКА 1

Изтеглете => FixPolicies

Запазете го някъде на декстопа.Кликнете два пъти върху файла и изберете Install.Ще се създаде папка с името FixPolicies на десктопа.Отворете я и стартирайте файла Fix_policies.cmd.

СТЪПКА 2

Изтеглете SafeBootKeyRepair.exe и го стартирайте.

Следвайте инструкциите.

Публикувайте лог файла.

СТЪПКА 3

Изтеглете програмата => Dr.Web CureIt

Алтернативен линк => http://www.freedrweb.com/download+cureit/gr/

*Стартирайте я.

*Натиснете клавиш F9 и направете следните настройки:

-В категория проверка се придвижете до списък с изключени файлове.

-Маркирайте всичките и изберете Изтрий. Потвърдете с Apply.

-Придвижете се до категория действия.

Приложете настройките от снимката и натиснете Apply.

2009-11-18_02_35_34.jpg

-Пуснете пълна проверка на системата.

-Публикувайте лог файла (DrWeb.csv) от проверката в следващия си пост или го качете на адрес http://rapidshare.de/ и публикувайте линка за да го изтеглим.

предварително C:\_OTL

http://rapidshare.de/files/48875209/_OTL.rar.html

Да, благодарим за папката. Да не забравите да я изтриете. :rolleyes:

След това продължете със стъпките от предишния ми коментар.

Ако проверката с Dr.Web се забави не се притеснявайте да публикувате резултатите утре или когато ви остане време. ;)

  • Автор

Reg export of SafeBoot key after repair:

========================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot]

"AlternateShell"="cmd.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\AppMgmt]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Base]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Boot Bus Extender]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Boot file system]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\CryptSvc]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\DcomLaunch]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmadmin]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmboot.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmio.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmload.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmserver]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\EventLog]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\File system]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Filter]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\HelpSvc]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Netlogon]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PCI Configuration]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PlugPlay]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PNP Filter]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Primary disk]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\RpcSs]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\SCSI Class]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\sermouse.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\sr.sys]

@="FSFilter System Recovery"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\SRService]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\System Bus Extender]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\vga.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\vgasave.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\WinMgmt]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

@="Universal Serial Bus controllers"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

@="CD-ROM Drive"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

@="DiskDrive"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

@="Standard floppy disk controller"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

@="Hdc"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

@="Keyboard"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

@="Mouse"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

@="PCMCIA Adapters"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

@="SCSIAdapter"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

@="System"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

@="Floppy disk drive"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

@="Volume"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

@="Human Interface Devices"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\AFD]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\AppMgmt]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Base]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Boot Bus Extender]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Boot file system]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Browser]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\CryptSvc]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\DcomLaunch]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Dhcp]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmadmin]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmboot.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmio.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmload.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmserver]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\DnsCache]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\EventLog]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\File system]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Filter]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\HelpSvc]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\ip6fw.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\ipnat.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\LanmanServer]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\LanmanWorkstation]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\LmHosts]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Messenger]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NDIS]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NDIS Wrapper]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Ndisuio]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetBIOS]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetBIOSGroup]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetBT]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetDDEGroup]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Netlogon]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetMan]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Network]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetworkProvider]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NtLmSsp]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PCI Configuration]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PlugPlay]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PNP Filter]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PNP_TDI]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Primary disk]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\rdpcdd.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\rdpdd.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\rdpwd.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\rdsessmgr]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\RpcSs]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\SCSI Class]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\sermouse.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\SharedAccess]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\sr.sys]

@="FSFilter System Recovery"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\SRService]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Streams Drivers]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\System Bus Extender]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Tcpip]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\TDI]

@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\tdpipe.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\tdtcp.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\termservice]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\vga.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\vgasave.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\WinMgmt]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\WZCSVC]

@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{36FC9E60-C465-11CF-8056-444553540000}]

@="Universal Serial Bus controllers"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

@="CD-ROM Drive"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

@="DiskDrive"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

@="Standard floppy disk controller"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

@="Hdc"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

@="Keyboard"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

@="Mouse"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

@="Net"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

@="NetClient"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

@="NetService"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

@="NetTrans"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

@="PCMCIA Adapters"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

@="SCSIAdapter"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

@="System"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

@="Floppy disk drive"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

@="Volume"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

@="Human Interface Devices"

========================

а Dr.Web CureIt не ми дава да я инсталирам изобщо :rolleyes:

Редактирано от leotrop (преглед на промените)

Логовете изглеждат чисти. Все пак:

Стартирайте OTL.exe и copy/paste под колонката "Custom Scans/Fixes" въведете това:

:OTL

PRC - C:\Documents and Settings\leotrop\Desktop\cureit(2).exe (Doctor Web, Ltd.)

PRC - C:\Documents and Settings\leotrop\Desktop\cureit.exe (Doctor Web, Ltd.)

PRC - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe (Threat Expert Ltd.)

PRC - C:\Documents and Settings\leotrop\Local Settings\Temp\RarSFX7\lkn88a.exe (Doctor Web, Ltd.)

PRC - C:\Documents and Settings\leotrop\Local Settings\Temp\RarSFX6\lkn88a.exe (Doctor Web, Ltd.)

PRC - C:\Documents and Settings\leotrop\Local Settings\Temp\RarSFX5\lkn88a.exe (Doctor Web, Ltd.)

PRC - C:\Documents and Settings\leotrop\Local Settings\Temp\RarSFX4\lkn88a.exe (Doctor Web, Ltd.)

PRC - C:\Documents and Settings\leotrop\Local Settings\Temp\RarSFX3\lkn88a.exe (Doctor Web, Ltd.)

PRC - C:\Documents and Settings\leotrop\Local Settings\Temp\RarSFX2\lkn88a.exe (Doctor Web, Ltd.)

PRC - C:\Documents and Settings\leotrop\Local Settings\Temp\RarSFX1\lkn88a.exe (Doctor Web, Ltd.)

PRC - C:\Documents and Settings\leotrop\Local Settings\Temp\RarSFX0\lkn88a.exe (Doctor Web, Ltd.)

PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)

[2009/12/22 01:48:59 | 25,914,896 | ---- | C] (Doctor Web, Ltd.) -- C:\Documents and Settings\leotrop\Desktop\cureit(2).exe

[2009/12/22 01:46:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\leotrop\Desktop\FixPolicies

[2009/12/22 01:36:42 | 00,000,000 | ---D | C] -- C:\_OTL

[2009/12/21 23:53:23 | 25,914,896 | ---- | C] (Doctor Web, Ltd.) -- C:\Documents and Settings\leotrop\Desktop\cureit.exe

[2009/12/21 23:13:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files

:Commands

[purity]

[emptytemp]

Натиснете бутона Run Fix

Ще се създаде лог файл. Копирайте го в следващия си пост.

След това пробвайте да изтеглите наново и стартирате Dr.Web.

  • Автор

All processes killed

========== OTL ==========

No active process named cureit was found!

No active process named cureit.exe was found!

No active process named BDTUpdateService.exe was found!

No active process named lkn88a.exe was found!

No active process named lkn88a.exe was found!

No active process named lkn88a.exe was found!

No active process named lkn88a.exe was found!

No active process named lkn88a.exe was found!

No active process named lkn88a.exe was found!

No active process named lkn88a.exe was found!

No active process named lkn88a.exe was found!

No active process named TeaTimer.exe was found!

File C:\Documents and Settings\leotrop\Desktop\cureit(2).exe not found.

C:\Documents and Settings\leotrop\Desktop\FixPolicies folder moved successfully.

C:\_OTL\MovedFiles\12222009_021847\C_Documents and Settings\leotrop\Desktop\FixPolicies folder moved successfully.

C:\_OTL\MovedFiles\12222009_021847\C_Documents and Settings\leotrop\Desktop folder moved successfully.

C:\_OTL\MovedFiles\12222009_021847\C_Documents and Settings\leotrop folder moved successfully.

C:\_OTL\MovedFiles\12222009_021847\C_Documents and Settings folder moved successfully.

C:\_OTL\MovedFiles\12222009_021847 folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\W_ folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\M_ folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\E_ folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\D_ folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\C_WINDOWS\system32\drivers\etc folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\C_WINDOWS\system32\drivers folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\C_WINDOWS\system32 folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\C_WINDOWS folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\C_Program Files folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\C_Documents and Settings\leotrop\Local Settings\Temp folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\C_Documents and Settings\leotrop\Local Settings\Application Data folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\C_Documents and Settings\leotrop\Local Settings folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\C_Documents and Settings\leotrop folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\C_Documents and Settings folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642\C_ folder moved successfully.

C:\_OTL\MovedFiles\12222009_013642 folder moved successfully.

C:\_OTL\MovedFiles folder moved successfully.

C:\_OTL folder moved successfully.

File C:\Documents and Settings\leotrop\Desktop\cureit.exe not found.

C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 7.0.0.125\English folder moved successfully.

C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 7.0.0.125 folder moved successfully.

C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files folder moved successfully.

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

User: leotrop

->Temp folder emptied: 244794540 bytes

->Temporary Internet Files folder emptied: 33170 bytes

->FireFox cache emptied: 37362080 bytes

User: LocalService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

Windows Temp folder emptied: 255 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes

RecycleBin emptied: 0 bytes

Total Files Cleaned = 269.00 mb

OTL by OldTimer - Version 3.1.19.0 log created on 12222009_021847

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

  • Автор

да, в момента проверява

най-вероятно ще постна резултатите на сутринта, че трябва да лягам

мерси дотук за помоща :P

да, в момента проверява

най-вероятно ще постна резултатите на сутринта, че трябва да лягам

мерси дотук за помоща :P

Няма проблеми. За момента вашите "проби" не се засичат от Malwarebytes, но вече са изпратени за анализ.

Утре преди да публикувате лог файла от Dr.Web, ще ви помоля да изтеглите, ъпдейтнете и сканирате с Malwarebytes и да публикувате и двата лог файла. (нейния + този на Dr.Web).

Кратки инструкции за нея:

Изтеглете Malwarebytes' Anti-Malware от тук

Кликнете два пъти върху mbam-setup.exe за да инсталирате програмата.

  • * Уверете се, че има отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware, след това кликнете на Finish.
    * Ако има намерени по-нови обновления, тя ще ги изтегли и инсталира.
    * Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.
    * Сканирането ще отнеме малко време, затова моля бъдете търпеливи.
    * Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.
    * Уверете се, че на всички редове има отметки, и кликнете Remove Selected.
    * Когато всичко бъде премахнато, логът ще бъде отворен в Notepad. Копирайте лога и го публикувайте в следващия си коментар в темата.

Бележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

Лека нощ. :)

Да почистим изтритите гадини:

1. Стартирайт програмата OTL.exe => и натиснете бутона вдясно => CleanUp.

2. От Start => Run => въведете => %userprofile% => натиснете Enter => и изтрийте папката на Dr.Web.

3. Временно спрете System Restore => Десен бутон на My Computer => Properties => System Restore => сложете отметка пред => Turn Off System Restore on all drives.

4. Изтеглете ATF Cleaner

Запазете го на вашия десктоп.

  • Кликнете два пъти върху ATF-Cleaner.exe , за да стартирате програмата.
  • Кликнете на Select All, който се намира в най-долната част на списъка.
  • Кликнете на бутона Empty Selected.

Ако използвате браузъра Mozilla Firefox, направете следното:

  • Кликнете върху Firefox, който се намира в началото и изберете Select All от списъка.
  • Кликнете на бутона Empty Selected.
  • Бележка: Ако искате да съхраните запазените пароли, моля кликнете на No от новопоявилия се прозорец.

Ако използвате браузъра Opera, направете следното:

  • Кликнете върху Opera който се намира в началото и изберете Select All от списъка.
  • Кликнете на бутона Empty Selected.
  • Бележка: Ако искате да съхраните запазените пароли, моля кликнете на No от новопоявилия се прозорец.

Кликнете на бутона Exit, който се намира в главното меню, за да затворите програмата.

5. Направете нова проверка с OTL.exe с тези настройки:

f1a78i.jpg

Натиснете Run Scan и публикувайте резултатите.

  • Автор

http://rapidshare.de/files/48877786/OTL.Txt.html

имам чувството, че ATF cleaner-a ми прееба нещо firefox-a

някой сайтове ми излизат така:

http://www.imagebam.com/image/fd985b60803044

http://www.imagebam.com/image/4ae36a60803046

OTL.Txt

http://rapidshare.de/files/48877786/OTL.Txt.html

имам чувството, че ATF cleaner-a ми прееба нещо firefox-a

някой сайтове ми излизат така:

http://www.imagebam.com/image/fd985b60803044

http://www.imagebam.com/image/4ae36a60803046

Затворете браузърите.

Изтеглете и почистете временните файлове с CCleaner:

Рестартирайте машината и вижте дали проблема се оправя.

За другите неща ще пиша след 24.00, че в момента съм на работа.

  • Автор

да, сега се оправи :rolleyes:

да, сега се оправи ;)

Лог файловете са чисти.

Можете да деинсталирате DAEMON Tools Toolbar от ADD\Remove Programs в Control Panel-a.

Как се държи сега машината ?

ВЕСЕЛИ ПРАЗНИЦИ !

Време е и аз да запразня... :)

  • Автор

много стабилен е в момента

мерси отново за помоща и за бързите отговори :cool:

Весели Празници :wors:

Редактирано от leotrop (преглед на промените)

    • Харесване 1
    Гост
    Тази тема е заключена за нови отговори.
    Назад

    Разглеждащи това в момента 0

    • Няма регистрирани потребители разглеждащи тази страница.

    Дарение

    • Подкрепи съществуването на форума - направи дарение
      32%
      Дарени 315 € от нужните 1 000 €

    Бюлетин

    Получавайте известие, когато има важна промяна или новина свързана с форума.
    Абонирайте се

    Профил

    Навигация

    Търсене

    Търсене

    Конфигуриране на push известия в браузъра
    Chrome (Android)
    1. Докоснете иконата на катинар до адресната лента.
    2. Докоснете Разрешения → Известия.
    3. Променете предпочитанията си.
    Chrome (Desktop)
    1. Кликнете върху иконата на катинар в адресната лента.
    2. Изберете Настройки на сайта.
    3. Намерете Известия и коригирайте предпочитанията си.