не мога да изтегля и да инсталирам нито една антивирусна [РЕШЕН]

20 юли 201016 г.

А ние ще пием по една ... Maniaс по силно не може ли !!!

Ако отвориш кръчмата ... тъкмо ще има какво да коментираме :rolleyes:

Редактирано 20 юли 201016 г. от mmk1980 (преглед на промените)

20 юли 201016 г.

Remington, нищо лично ... ама не вярвам да и пратиш банички по скайпа ... или имаш друго предложение ! Я сподели с нас неуките !

Порaди неадекватната намеса на модератор,прекратявам участието си в тази тема за което съжалявам!

Редактирано 26 юли 201016 г. от Remington (преглед на промените)

20 юли 201016 г.

Да, направо съм шокиран, що за модераторски контрол е това, аз - наливам разни хора ; nologo - се опитва да налива мен ; icotonev - е в Русия ; B-Boy - е в САЩ ; Остана само mihnev_sz, обаче неговата е трудна, не стига че трябва да следи за нарушения, но трябва и с мен да се разправя. Все едно са го заточили в Сибир. Веднага ще му пиша! Благодаря за сигнала!

1

20 юли 201016 г.

Към автора на темата: some_of_it. Моля да изпълните указанията от този коментар.

Към другите: моля да се въздържате от излишни коментари, не можем да сме 24 часа онлайн. Темата се размива без никакъв ефект за автора, както забелязвате.

1

20 юли 201016 г.

Автор

Към автора на темата: some_of_it. Моля да изпълните указанията от този коментар.

Към другите: моля да се въздържате от излишни коментари, не можем да сме 24 часа онлайн. Темата се размива без никакъв ефект за автора, както забелязвате.

ей сега ще изпълня това пък да видим.

20 юли 201016 г.

Автор

Изтеглете DDS от:

http://rapidshare.com/files/408049800/dds.pif

и го запазете го на вашия десктоп.

Стартирайте инструмента.

Когато DDS приключи успешно анализа на системата Ви ще отвори два лог файла.

DDS.txt

Attach.txt
Запазете ги на вашия десктоп и след това ги прикачете към следващия си пост.

ето ги.

DDS.txt

Attach.txt

20 юли 201016 г.

Изтеглете ComboFix от някой от следните линкове:

Линк 1

* ВАЖНО !!! Запазете ComboFix.exe на вашия десктоп

Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.

Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs

Стартирайте Combo-Fix.com и следвайте инструкциите.

Бележка: ComboFix ще се стартира без инсталирана Recovery Console.

Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repair режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.

Следвайте инструкциите, за да позволите на ComboFix да изтегли и инсталира Microsoft Windows Recovery Console. В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.

Публикувано изображение

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

Публикувано изображение

Изберете Yes, за да продължи сканирането за зловреден софтуер.

Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:\ComboFix.txt в следващия Ви коментар в тази тема.

Бележка:

Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа.
ComboFix ще нулира всички настройки на Microsoft Internet Explorer, включително да направи IE браузър по подразбиране.
ComboFix ще изключи autorun функцията на ВСИЧКИ CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и Ви защити от бъдещи вируси/заплахи, които поразяват чрез autorun. Ако това е проблем за вас - моля, уведомете ме.
ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той ще прекрати интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си.
В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:\BUG.txt в следващия Ви коментар в тази тема.

Работата на ComboFix, може да отнеме до 20-30 минути, за да завърши, моля имайте търпение.

Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.

2

21 юли 201016 г.

Автор

ComboFix 10-07-20.01 - Administrator 07.2010 г. 1:41.1.2 - x86

Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.3037.2629 [GMT 3:00]

Running from: c:\documents and settings\Administrator\Desktop\Combo-Fix.com

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\autorun.inf

C:\autorun.inf.vir

c:\docume~1\ADMINI~1\LOCALS~1\Temp\bstmkfzthdsqgqykzqrki.exe

c:\docume~1\ADMINI~1\LOCALS~1\Temp\ykgundshqhavunmz.exe

c:\docume~1\ADMINI~1\LOCALS~1\Temp\ykgundshqhrkvadk.exe

c:\docume~1\ADMINI~1\LOCALS~1\Temp\zoneatldpjfdfbdtnjb.exe

C:\fkzgsbjrt.bat

C:\osgmxfmt.bat

C:\pyrcsfrdjxbzj.bat

C:\pyrcsfrdjxeuc.bat

C:\qyqapbmxcpev.bat

C:\TARAOZJTXJL.BAT

C:\taraozjtxjo.bat

C:\tezmethvdtcueik.bat

c:\windows.0\bstmkfzthdbbfdhzvtnez.exe

c:\windows.0\bstmkfzthdsqgqykzqrki.exe

c:\windows.0\fspeypfvfxicouygr.exe

c:\windows.0\fspeypfvfxrnnhhvn.exe

c:\windows.0\mccurlexkfcbebevqngw.exe

c:\windows.0\mccurlexkftqfovgukkc.exe

c:\windows.0\ocaqldulwpbwjqveqe.exe

c:\windows.0\ocaqldulwpkhidetmh.exe

c:\windows.0\skmgfbwrgdcdihmfcbwokg.exe

c:\windows.0\skmgfbwrgdtsjudqgyautp.exe

c:\windows.0\system\WINSPOOL.DRV

c:\windows.0\system32\bstmkfzthdbbfdhzvtnez.exe

c:\windows.0\system32\bstmkfzthdsqgqykzqrki.exe

c:\windows.0\system32\comsa32.sys

c:\windows.0\system32\fspeypfvfxicouygr.exe

c:\windows.0\system32\fspeypfvfxrnnhhvn.exe

c:\windows.0\system32\mccurlexkfcbebevqngw.exe

c:\windows.0\system32\mccurlexkftqfovgukkc.exe

c:\windows.0\system32\ocaqldulwpbwjqveqe.exe

c:\windows.0\system32\ocaqldulwpkhidetmh.exe

c:\windows.0\system32\skmgfbwrgdcdihmfcbwokg.exe

c:\windows.0\system32\skmgfbwrgdtsjudqgyautp.exe

c:\windows.0\system32\ykgundshqhavunmz.exe

c:\windows.0\system32\ykgundshqhrkvadk.exe

c:\windows.0\system32\zoneatldpjfdfbdtnjb.exe

c:\windows.0\system32\zoneatldpjwsgouergf.exe

c:\windows.0\ykgundshqhavunmz.exe

c:\windows.0\ykgundshqhrkvadk.exe

c:\windows.0\zoneatldpjfdfbdtnjb.exe

c:\windows.0\zoneatldpjwsgouergf.exe

C:\yeucpziruf.bat

D:\autorun.inf

D:\Autorun.inf.vir

D:\fkzgsbjrt.bat

D:\osgmxfmt.bat

D:\pyrcsfrdjxbzj.bat

D:\pyrcsfrdjxeuc.bat

D:\qyqapbmxcpev.bat

D:\taraozjtxjo.bat

D:\tezmethvdtcueik.bat

D:\yeucpziruf.bat

----- File Replicators -----

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000947.exe

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000948.exe

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000949.exe

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000950.exe

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000951.exe

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000952.exe

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000953.exe

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000954.exe

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000955.exe

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000956.exe

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000957.exe

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000958.exe

c:\system volume information\_restore{90FE9904-5C5E-47BA-A983-0EE6F126D0B7}\RP5\A0000959.exe

c:\windows.0\bstmkfzthdbbfdhzvtnez.exe

c:\windows.0\bstmkfzthdsqgqykzqrki.exe

c:\windows.0\fspeypfvfxicouygr.exe

c:\windows.0\fspeypfvfxrnnhhvn.exe

c:\windows.0\mccurlexkfcbebevqngw.exe

c:\windows.0\mccurlexkftqfovgukkc.exe

c:\windows.0\ocaqldulwpbwjqveqe.exe

c:\windows.0\ocaqldulwpkhidetmh.exe

c:\windows.0\skmgfbwrgdcdihmfcbwokg.exe

c:\windows.0\skmgfbwrgdtsjudqgyautp.exe

c:\windows.0\system32\bstmkfzthdbbfdhzvtnez.exe

c:\windows.0\system32\bstmkfzthdsqgqykzqrki.exe

c:\windows.0\system32\fspeypfvfxicouygr.exe

c:\windows.0\system32\fspeypfvfxrnnhhvn.exe

c:\windows.0\system32\mccurlexkfcbebevqngw.exe

c:\windows.0\system32\mccurlexkftqfovgukkc.exe

c:\windows.0\system32\ocaqldulwpbwjqveqe.exe

c:\windows.0\system32\ocaqldulwpkhidetmh.exe

c:\windows.0\system32\skmgfbwrgdcdihmfcbwokg.exe

c:\windows.0\system32\skmgfbwrgdtsjudqgyautp.exe

c:\windows.0\system32\ykgundshqhavunmz.exe

c:\windows.0\system32\ykgundshqhrkvadk.exe

c:\windows.0\system32\zoneatldpjfdfbdtnjb.exe

c:\windows.0\system32\zoneatldpjwsgouergf.exe

c:\windows.0\ykgundshqhavunmz.exe

c:\windows.0\ykgundshqhrkvadk.exe

c:\windows.0\zoneatldpjfdfbdtnjb.exe

c:\windows.0\zoneatldpjwsgouergf.exe

.

c:\windows.0\system32\msgsvc.dll . . . is infected!!

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

-------\Legacy_PERFMONS

-------\Service_perfmons

((((((((((((((((((((((((( Files Created from 2010-06-20 to 2010-07-20 )))))))))))))))))))))))))))))))

.

2010-07-20 20:49 . 2010-07-20 20:49 -------- d--h--w- c:\windows.0\PIF

2010-07-20 14:50 . 2001-08-17 19:36 5632 ----a-w- c:\windows.0\system32\ptpusb.dll

2010-07-20 14:50 . 2008-04-14 02:42 159232 ----a-w- c:\windows.0\system32\ptpusd.dll

2010-07-20 14:50 . 2008-04-13 21:15 15104 ----a-w- c:\windows.0\system32\drivers\usbscan.sys

2010-07-18 15:51 . 2009-01-21 18:32 2600960 ----a-w- c:\windows.0\system32\ig4dev32.dll

2010-07-18 15:51 . 2009-01-21 18:20 645632 ----a-w- c:\windows.0\system32\igfxcfg.exe

2010-07-18 15:51 . 2009-01-21 18:52 155648 ----a-w- c:\windows.0\system32\igfxCoIn_v5029.dll

2010-07-18 15:51 . 2010-07-18 15:51 -------- d-----w- c:\windows.0\system32\Lang

2010-07-18 15:51 . 2009-01-29 17:12 993816 ----a-w- c:\windows.0\system32\igxpun.exe

2010-07-18 14:26 . 2010-07-18 14:26 -------- d-----w- c:\program files\Ask.com

2010-07-18 10:21 . 2010-06-02 01:55 74072 ----a-w- c:\windows.0\system32\XAPOFX1_5.dll

2010-07-18 10:21 . 2010-06-02 01:55 527192 ----a-w- c:\windows.0\system32\XAudio2_7.dll

2010-07-18 10:21 . 2010-06-02 01:55 239960 ----a-w- c:\windows.0\system32\xactengine3_7.dll

2010-07-18 10:21 . 2010-05-26 08:41 470880 ----a-w- c:\windows.0\system32\d3dx10_43.dll

2010-07-18 10:21 . 2010-05-26 08:41 248672 ----a-w- c:\windows.0\system32\d3dx11_43.dll

2010-07-18 10:21 . 2010-05-26 08:41 2106216 ----a-w- c:\windows.0\system32\D3DCompiler_43.dll

2010-07-18 10:21 . 2010-05-26 08:41 1868128 ----a-w- c:\windows.0\system32\d3dcsx_43.dll

2010-07-18 10:21 . 2010-05-26 08:41 1998168 ----a-w- c:\windows.0\system32\D3DX9_43.dll

2010-07-18 10:21 . 2010-02-04 07:01 74072 ----a-w- c:\windows.0\system32\XAPOFX1_4.dll

2010-07-18 10:21 . 2010-02-04 07:01 528216 ----a-w- c:\windows.0\system32\XAudio2_6.dll

2010-07-18 10:21 . 2010-02-04 07:01 238936 ----a-w- c:\windows.0\system32\xactengine3_6.dll

2010-07-18 10:21 . 2010-02-04 07:01 22360 ----a-w- c:\windows.0\system32\X3DAudio1_7.dll

2010-07-18 10:20 . 2010-07-18 10:20 -------- d-----w- c:\windows.0\Logs

2010-07-17 20:31 . 2009-08-21 10:17 485920 ----a-w- c:\windows.0\system32\NVUNINST.EXE

2010-07-17 18:34 . 2002-12-31 12:00 26624 ----a-w- c:\documents and settings\LocalService.NT AUTHORITY\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll

2010-07-15 21:20 . 2002-12-31 12:00 5632 ----a-r- c:\windows.0\system32\kbdheb.dll

2010-07-15 21:20 . 2002-12-31 12:00 6144 ----a-w- c:\windows.0\system32\ftlx041e.dll

2010-07-15 21:20 . 2002-12-31 12:00 6144 ----a-r- c:\windows.0\system32\kbdth3.dll

2010-07-15 21:20 . 2002-12-31 12:00 6144 ----a-r- c:\windows.0\system32\kbdth2.dll

2010-07-15 21:20 . 2002-12-31 12:00 5632 ----a-r- c:\windows.0\system32\kbdth1.dll

2010-07-15 21:20 . 2002-12-31 12:00 5632 ----a-r- c:\windows.0\system32\kbdth0.dll

2010-07-15 20:01 . 2008-12-19 00:34 1502528 ----a-w- c:\windows.0\system32\drivers\athw.sys

2010-07-15 20:01 . 2008-12-19 00:34 1502528 ----a-w- c:\windows.0\system32\athw.sys

2010-07-15 19:41 . 2010-07-15 19:41 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\Atheros

2010-07-15 19:41 . 2010-07-15 19:41 -------- d-----w- c:\documents and settings\Administrator\Application Data\InstallShield

2010-07-15 19:07 . 2010-07-18 12:13 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\Electronic Arts

2010-07-15 18:34 . 2008-07-16 23:05 53248 ----a-w- c:\windows.0\system32\CSVer.dll

2010-07-15 18:10 . 2007-08-24 18:46 5760 ----a-w- c:\windows.0\system32\drivers\ATKACPI.sys

2010-07-15 18:01 . 2008-03-21 20:57 14640 ------w- c:\windows.0\system32\spmsgXP_2k3.dll

2010-07-15 18:01 . 2009-05-01 17:01 209456 ----a-w- c:\windows.0\system32\drivers\SynTP.sys

2010-07-15 18:01 . 2009-05-01 17:00 161064 ----a-w- c:\windows.0\system32\SynTPAPI.dll

2010-07-15 18:01 . 2009-05-01 17:00 120104 ----a-w- c:\windows.0\system32\SynTPCo4.dll

2010-07-15 18:01 . 2009-05-01 17:00 206120 ----a-w- c:\windows.0\system32\SynCtrl.dll

2010-07-15 18:01 . 2009-05-01 17:00 169256 ----a-w- c:\windows.0\system32\SynCOM.dll

2010-07-15 18:01 . 2008-07-08 17:55 1112288 ----a-w- c:\windows.0\system32\WdfCoInstaller01007.dll

2010-07-15 17:09 . 2010-07-15 17:09 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Identities

2010-07-15 15:39 . 2010-07-18 15:52 -------- dc----w- c:\windows.0\system32\DRVSTORE

2010-07-15 15:39 . 2006-11-10 15:25 319456 ----a-w- c:\windows.0\system32\difxapi.dll

2010-07-15 15:32 . 2008-09-26 17:13 55816 ------w- c:\windows.0\system32\agrsmdel.exe

2010-07-15 15:32 . 2010-07-15 15:32 -------- d-----w- c:\windows.0\Options

2010-07-15 15:32 . 2008-11-21 23:53 1204128 ----a-w- c:\windows.0\system32\drivers\AGRSM.sys

2010-07-15 15:32 . 2008-09-26 17:13 55816 ----a-w- c:\windows.0\agrsmdel.exe

2010-07-15 15:32 . 2008-08-26 16:32 13824 ------w- c:\windows.0\system32\agrscoin.dll

2010-07-15 15:30 . 2008-12-16 22:00 6963200 ----a-w- c:\windows.0\system32\RTSUCRicon.dll

2010-07-15 12:19 . 2010-07-15 12:19 -------- d-----w- c:\windows.0\SHELLNEW

2010-07-15 12:02 . 2010-07-15 12:24 -------- d-----w- c:\documents and settings\Administrator\Application Data\DAEMON Tools

2010-07-15 12:01 . 2010-07-15 12:27 -------- d-----w- c:\documents and settings\Administrator\Application Data\Winamp

2010-07-15 11:59 . 2010-07-15 11:59 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Temp

2010-07-15 11:58 . 2010-07-15 11:58 -------- d-----w- c:\documents and settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Google

2010-07-15 11:56 . 2010-07-15 11:56 715248 ----a-w- c:\windows.0\system32\drivers\sptd.sys

2010-07-15 11:55 . 2010-07-20 14:07 -------- d-----w- c:\documents and settings\Administrator\Application Data\skypePM

2010-07-15 11:55 . 2010-07-15 11:55 56 ---ha-w- c:\windows.0\system32\ezsidmv.dat

2010-07-15 11:54 . 2010-07-15 11:54 -------- d-----w- c:\documents and settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Google

2010-07-15 11:54 . 2010-07-15 14:07 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Google

2010-07-15 11:54 . 2010-07-20 22:33 -------- d-----w- c:\documents and settings\Administrator\Application Data\Skype

2010-07-15 11:54 . 2010-07-15 11:54 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\Skype

2010-07-15 11:20 . 2002-09-30 18:15 77184 ----a-w- c:\windows.0\system32\drivers\HiSerial.sys

2010-07-15 11:20 . 2010-07-15 11:20 -------- d-----w- c:\program files\HiSerial

2010-07-15 11:11 . 2010-07-15 11:11 -------- d-----w- c:\program files\SmartTweak Software

2010-07-15 11:10 . 2010-07-15 11:10 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\PackageAware

2010-07-15 10:51 . 2010-07-15 10:51 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\Driver Whiz

2010-07-15 10:45 . 2008-04-14 07:15 6272 ----a-w- c:\windows.0\system32\drivers\splitter.sys

2010-07-15 10:45 . 2008-04-14 07:47 83072 ----a-w- c:\windows.0\system32\drivers\wdmaud.sys

2010-07-15 10:45 . 2008-04-14 07:15 52864 ----a-w- c:\windows.0\system32\drivers\DMusic.sys

2010-07-15 10:45 . 2008-04-14 07:15 56576 ----a-w- c:\windows.0\system32\drivers\swmidi.sys

2010-07-15 10:45 . 2008-04-14 05:09 142592 ----a-w- c:\windows.0\system32\drivers\aec.sys

2010-07-15 10:45 . 2008-04-14 07:15 172416 ----a-w- c:\windows.0\system32\drivers\kmixer.sys

2010-07-15 10:45 . 2008-04-14 07:15 2944 ----a-w- c:\windows.0\system32\drivers\drmkaud.sys

2010-07-15 10:45 . 2008-04-14 07:45 60800 ----a-w- c:\windows.0\system32\drivers\sysaudio.sys

2010-07-15 10:45 . 2010-07-15 10:45 -------- d-----w- c:\windows.0\system32\RTCOM

2010-07-15 10:45 . 2008-04-13 21:49 146048 ----a-w- c:\windows.0\system32\drivers\portcls.sys

2010-07-15 10:45 . 2008-04-13 21:15 60160 ----a-w- c:\windows.0\system32\drivers\drmk.sys

2010-07-15 10:14 . 2010-07-16 09:01 58008 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2010-07-15 10:14 . 2010-07-15 10:14 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\PC Drivers HeadQuarters

2010-07-15 10:04 . 2010-07-15 10:04 -------- d-----w- c:\windows.0\system32\LogFiles

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-07-20 22:41 . 2010-07-15 10:05 2396 ---h--w- c:\program files\qyqapbmxcpvkrsruaiakzlwhmzfubcbeks.ujv

2010-07-20 22:41 . 2010-07-15 10:05 280 ---h--w- c:\program files\gemmrtuvqtpurixqmkssxzab.zva

2010-07-20 22:36 . 2010-07-15 10:05 482 ---h--w- c:\program files\tezmethvdtcueikqzkfskznbjziakoqwfqlyq.thp

2010-07-20 22:33 . 2010-07-15 13:15 -------- d-----w- c:\documents and settings\Administrator\Application Data\uTorrent

2010-07-20 17:25 . 2010-06-19 13:45 -------- d-----w- c:\program files\MSXML 4.0

2010-07-20 11:35 . 2010-07-13 19:25 2402 ---h--w- c:\program files\qyqapbmxcpspydbpncpzovwvyemeodpalq.gdm

2010-07-20 11:35 . 2010-07-11 21:09 280 ---h--w- c:\program files\gemmrtuvqtmzythlzehhmjap.eck

2010-07-20 11:34 . 2010-07-13 20:34 316 ---h--w- c:\program files\tezmethvdtzzltulmeuhzjnpvepkxpesgoekk.efw

2010-07-18 16:10 . 2009-10-13 07:55 -------- d-----w- c:\program files\Electronic Arts

2010-07-16 09:07 . 2009-10-13 02:09 -------- d--h--w- c:\program files\InstallShield Installation Information

2010-07-15 18:02 . 2010-07-15 18:02 0 ---ha-w- c:\windows.0\system32\drivers\Msft_Kernel_SynTP_01007.Wdf

2010-07-15 18:02 . 2010-07-15 18:02 0 ---ha-w- c:\windows.0\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf

2010-07-15 15:32 . 2009-10-13 02:13 -------- d-----w- c:\program files\LSI SoftModem

2010-07-15 14:07 . 2009-10-13 03:43 -------- d-----w- c:\program files\Google

2010-07-15 14:06 . 2010-07-15 12:54 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\EPS

2010-07-15 13:58 . 2010-07-15 13:58 0 ----a-w- c:\windows.0\nsreg.dat

2010-07-15 13:52 . 2010-07-15 12:53 664 ----a-w- c:\windows.0\system32\d3d9caps.dat

2010-07-15 13:32 . 2010-07-15 13:32 -------- d-----w- c:\documents and settings\Administrator\Application Data\Uniblue

2010-07-15 13:25 . 2010-07-15 08:03 86339 ----a-w- c:\windows.0\pchealth\helpctr\OfflineCache\index.dat

2010-07-15 13:16 . 2010-07-08 19:41 -------- d-----w- c:\program files\uTorrent

2010-07-15 13:11 . 2010-07-15 13:11 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\FileCure

2010-07-15 12:58 . 2010-07-15 12:58 10134 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe

2010-07-15 12:01 . 2009-10-13 06:10 -------- d-----w- c:\program files\Winamp

2010-07-15 12:00 . 2009-10-13 03:43 -------- d-----w- c:\program files\UltraISO

2010-07-15 12:00 . 2009-10-13 03:43 -------- d-----w- c:\program files\Common Files\EZB Systems

2010-07-15 11:54 . 2009-10-13 07:19 -------- d-----r- c:\program files\Skype

2010-07-15 10:05 . 2010-07-15 10:05 73 ---h--w- c:\program files\ykgundshqhrkvadkugcqjzodmdngrwzgqcymfv.ziz

2010-07-15 10:05 . 2010-07-15 10:05 4248 ---h--w- c:\program files\pyrcsfrdjxeuceeipyrcsfrdjxeuceeipyr.sfr

2010-07-15 10:04 . 2010-07-15 10:03 38 ---h--w- c:\program files\fkzgsbjrtdpdvhzfpbjoxgpvzwbqxjs.iku

2010-07-15 10:04 . 2010-07-15 08:37 280 ---h--w- c:\program files\dydacbzxpprvdfnjjljed.bxr

2010-07-15 08:38 . 2010-07-15 07:59 -------- d-----w- c:\program files\Unlocker

2010-07-15 08:37 . 2010-07-15 08:37 4248 ---h--w- c:\program files\yeucpzirufshangnyluakuelqouksfpy.kvi

2010-07-15 08:04 . 2010-07-15 08:04 -------- d-----w- c:\program files\hkSFV

2010-07-15 08:02 . 2010-07-15 08:02 -------- d-----w- c:\program files\Windows Media Connect 2

2010-07-15 08:00 . 2010-07-15 08:00 21640 ----a-w- c:\windows.0\system32\emptyregdb.dat

2010-07-15 07:59 . 2010-07-15 07:59 -------- d-----w- c:\program files\Utilities

2010-07-15 07:59 . 2010-07-15 07:59 -------- d-----w- c:\program files\Desktop

2010-07-14 20:38 . 2010-07-14 20:38 -------- d-----w- c:\program files\Ashampoo

2010-07-13 22:32 . 2009-10-13 03:44 -------- d-----w- c:\program files\BitComet

2010-07-13 22:14 . 2010-07-13 20:34 -------- d-----w- c:\program files\Trojan Remover

2010-07-13 20:34 . 2010-07-13 20:34 73 ---h--w- c:\program files\ykgundshqhopclnfharfyjoryiuqexncraryzm.xpr

2010-07-13 19:23 . 2010-07-13 19:23 -------- d-----w- c:\program files\Atheros

2010-07-13 18:57 . 2010-07-13 18:57 -------- d-----w- c:\program files\CPUID

2010-07-11 21:09 . 2010-07-11 21:09 4248 ---h--w- c:\program files\pyrcsfrdjxbzjpodcsgrhprrvclepfseqwk.mwc

2010-07-11 15:59 . 2010-01-22 21:29 -------- d-----w- c:\program files\Euro Truck Simulator

2010-07-10 14:11 . 2010-07-10 14:11 -------- d-----w- c:\program files\ESET

2010-07-07 01:27 . 2010-07-15 10:44 84584 ----a-w- c:\windows.0\SOUNDMAN.EXE

2010-07-07 01:27 . 2010-07-15 10:44 359016 ----a-w- c:\windows.0\vncutil.exe

2010-07-07 01:27 . 2010-07-15 10:44 1833576 ----a-w- c:\windows.0\SkyTel.exe

2010-07-07 01:27 . 2010-07-15 10:44 1489512 ----a-w- c:\windows.0\RtlUpd.exe

2010-07-07 01:26 . 2010-07-15 10:44 9721960 ----a-w- c:\windows.0\RTLCPL.EXE

2010-07-07 01:26 . 2010-07-15 10:44 6088296 ----a-w- c:\windows.0\system32\drivers\RtkHDAud.sys

2010-07-07 01:26 . 2010-07-15 10:44 53864 ----a-w- c:\windows.0\system32\RtkCoInstXP.dll

2010-07-07 01:26 . 2010-07-15 10:44 129640 ----a-w- c:\windows.0\RtkAudioService.exe

2010-07-07 01:26 . 2010-07-15 10:44 19556968 ----a-w- c:\windows.0\RTHDCPL.EXE

2010-07-07 01:26 . 2010-07-15 10:44 2815592 ----a-w- c:\windows.0\ALCWZRD.EXE

2010-07-07 01:26 . 2010-07-15 10:44 2180712 ----a-w- c:\windows.0\MicCal.exe

2010-07-07 01:26 . 2010-07-15 10:44 64104 ----a-w- c:\windows.0\ALCMTR.EXE

2010-06-26 12:20 . 2010-06-26 12:20 -------- d-----w- c:\program files\MSECache

2010-06-24 18:13 . 2010-07-15 10:44 1251944 ----a-r- c:\windows.0\RtlExUpd.dll

2010-06-19 16:43 . 2009-10-13 06:58 -------- d-----w- c:\program files\advantage

2010-06-09 13:22 . 2010-02-17 21:52 -------- d-----w- c:\program files\The KMPlayer

2010-05-14 03:35 . 2010-07-18 14:16 81920 ----a-w- c:\windows.0\system32\igfxCoIn_v5268.dll

2010-05-14 03:05 . 2010-07-18 14:16 3139584 ----a-w- c:\windows.0\system32\GfxUI.exe

2010-05-14 03:05 . 2010-07-18 14:16 121344 ----a-w- c:\windows.0\system32\gfxSrvc.dll

2010-05-14 03:05 . 2010-07-18 14:16 4096 ----a-w- c:\windows.0\system32\IGFXDEVLib.dll

.

------- Sigcheck -------

[-] 2002-12-31 . EAEC6EA32BDABD7622371C10B8D68A17 . 361344 . . [5.1.2600.5512] . . c:\windows.0\system32\drivers\tcpip.sys

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

2010-02-08 14:40 1362320 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-08 1362320]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]

[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]

[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]

[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2009-10-26 15872]

"RTHDCPL"="RTHDCPL.EXE" [2010-07-07 19556968]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-05-01 1529128]

"Wireless Console 2"="c:\program files\Wireless Console 2\wcourier.exe" [2007-07-05 1040384]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]

"IgfxTray"="c:\windows.0\system32\igfxtray.exe" [2009-01-21 134656]

"HotKeysCmds"="c:\windows.0\system32\hkcmd.exe" [2009-01-21 166912]

"Persistence"="c:\windows.0\system32\igfxpers.exe" [2009-01-21 134656]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 0 (0x0)

"EnableInstallerDetection"= 0 (0x0)

"EnableSecureUIAPaths"= 0 (0x0)

"EnableVirtualization"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

R3 IntcHdmiAddService;Intel® High Definition Audio HDMI Service;c:\windows.0\system32\drivers\IntcHdmi.sys [7/18/2010 5:16 PM 109568]

S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7/15/2010 2:54 PM 135664]

S3 Ambfilt;Ambfilt;c:\windows.0\system32\drivers\Ambfilt.sys [7/15/2010 1:44 PM 1691480]

S3 RSUSBSTOR;RTS5121.Sys Realtek USB Card Reader;c:\windows.0\system32\Drivers\RTS5121.sys --> c:\windows.0\system32\Drivers\RTS5121.sys [?]

S3 Rts516xIR;Realtek IR Driver;c:\windows.0\system32\DRIVERS\Rts516xIR.sys --> c:\windows.0\system32\DRIVERS\Rts516xIR.sys [?]

S4 sptd;sptd;c:\windows.0\system32\drivers\sptd.sys [7/15/2010 2:56 PM 715248]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - ASPI32

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{FC88681F-4735-4f2f-9514-C21BAC737CF8}]

2002-12-31 12:00 128512 ----a-w- c:\windows.0\system32\advpack.dll

.

Contents of the 'Scheduled Tasks' folder

2010-07-20 c:\windows.0\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-15 11:54]

2010-07-20 c:\windows.0\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-15 11:54]

2010-07-20 c:\windows.0\Tasks\Scheduled Update for Ask Toolbar.job

- c:\program files\Ask.com\UpdateTask.exe [2010-02-08 14:40]

.

------- Supplementary Scan -------

.

uStart Page = hxxp://www.google.com/

uInternet Settings,ProxyServer = 193.68.132.102:8080

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html

FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\7urw1k6c.default\

FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll

FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows.0\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----

c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);

c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");

c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);

c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);

.

- - - - ORPHANS REMOVED - - - -

HKCU-Run-pyrcsfrdjxnfb - mccurlexkfcbebevqngw.exe

HKCU-Run-taraozjtxjo - mccurlexkftqfovgukkc.exe

HKCU-Run-UpdateMyDrivers - c:\program files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe

HKLM-Run-yeucpziruf - mccurlexkfcbebevqngw.exe

HKLM-Run-osgmxfmt - mccurlexkftqfovgukkc.exe

HKLM-Explorer_Run-qyqapbmxcpev - ykgundshqhavunmz.exe

HKLM-Explorer_Run-yeucpziruf - mccurlexkftqfovgukkc.exe

AddRemove-Agere Systems Soft Modem - c:\windows.0\agrsmdel

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2010-07-21 01:56

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

.

--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-515967899-2111687655-1801674531-500\Software\Microsoft\Internet Explorer\User Preferences]

@Denied: (2) (Administrator)

"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,99,fe,89,69,db,6a,96,40,87,ad,d0,\

"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,99,fe,89,69,db,6a,96,40,87,ad,d0,\

.

--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(2972)

c:\windows.0\system32\WININET.dll

c:\program files\Unlocker\UnlockerHook.dll

c:\windows.0\system32\msi.dll

c:\windows.0\system32\ieframe.dll

c:\windows.0\system32\webcheck.dll

c:\windows.0\system32\WPDShServiceObj.dll

c:\windows.0\system32\PortableDeviceTypes.dll

c:\windows.0\system32\PortableDeviceApi.dll

.

------------------------ Other Running Processes ------------------------

.

c:\program files\LSI SoftModem\agrsmsvc.exe

c:\windows.0\RTHDCPL.EXE

c:\windows.0\system32\igfxsrvc.exe

c:\windows.0\system32\wscntfy.exe

.

**************************************************************************

.

Completion time: 2010-07-21 01:57:23 - machine was rebooted

ComboFix-quarantined-files.txt 2010-07-20 22:57

Pre-Run: 97 551 249 408 bytes free

Post-Run: 98 057 216 000 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS.0="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 6106AF79C9EBEB44784B6EF26C9BA005

и сега като си стартирам компа имам recovery console и отдолу ми изписва windows-a,но ако не побързам да натисна нещо ми изписва че не мое се стартира щото нямало някъв файл от windows-a(system32-май беше файла) ??? а като вляза в конзолата и ми иска някви команди да пиша кой windows да инсталирам или нещо такова ..????

а междудругото докато си бачкаше тоя combofix по едно време ми поиска да сложа диска с windows-a обаче докато го намеря и то си направи нещо там и не съм го слагала ..какви са тея филми??

Редактирано 21 юли 201016 г. от icotonev
Не цитирайте предния пост..! (преглед на промените)

21 юли 201016 г.

неспазване на правилата на раздела - точка 2

Редактирано 21 юли 201016 г. от icotonev
неспазване на правилата на раздела (преглед на промените)

21 юли 201016 г.

some_of_it - за вас..:

Премахване на Recovery Console

Премахването на Recovery Console е ръчно и се извършва на няколко стъпки.

1. Влезте в My Computer и устройството, където е инсталиран Recovery Console. Изберете от меню Tools > Folder Options > View. Сложете отметка на Show hidden files and folders и махнете отметката от Hide protected operating system files. По този начин ще виждате всички файлове, дори и системните.

2. От системния дял изтрийте директорията cmdcons и файл cmldr.sys.

3. От същия дял отворете с Notepad файл boot.ini и премахнете този ред:

C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

и запазете промените. Тук трябва да внимавате да не изтриете някои данни, свързани със зареждането на операционната система!

След всички тези операции е препоръчително да разрешите скриването на защитените системни файлове, за да не изтриете по погрешка някой от тях.

Аз пък казвам, че е по-добре засега да не премахвате Recovery Console. Тя не случайно е създадена по-време на сканирането с Combofix, за да може да се възстанови системата при нужда по време на почистващия процес. Самата RC може да се премахне и с команда за Combofix и след самото деинсталиране на Combofix.

А ви е поискан инсталационен диск на Windows по време на сканирането, защото имате модифициран системен файл.

Съвет: Изчакайте колегата Maniac да се освободи и да продължите с него. Не можем да сме нон-стоп онлайн и освен това момчето днес е рожденник.

Поздрави !

21 юли 201016 г.

Автор

some_of_it - за вас..:

Премахване на Recovery Console

Премахването на Recovery Console е ръчно и се извършва на няколко стъпки.

1. Влезте в My Computer и устройството, където е инсталиран Recovery Console. Изберете от меню Tools > Folder Options > View. Сложете отметка на Show hidden files and folders и махнете отметката от Hide protected operating system files. По този начин ще виждате всички файлове, дори и системните.

2. От системния дял изтрийте директорията cmdcons и файл cmldr.sys.

3. От същия дял отворете с Notepad файл boot.ini и премахнете този ред:

C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

и запазете промените. Тук трябва да внимавате да не изтриете някои данни, свързани със зареждането на операционната система!

След всички тези операции е препоръчително да разрешите скриването на защитените системни файлове, за да не изтриете по погрешка някой от тях.

обаче не мога да намеря тая конзола къде се е инсталирала...давам search и пак не я намира???

Аз пък казвам, че е по-добре засега да не премахвате Recovery Console. Тя не случайно е създадена по-време на сканирането с Combofix, за да може да се възстанови системата при нужда по време на почистващия процес. Самата RC може да се премахне и с команда за Combofix и след самото деинсталиране на Combofix.

А ви е поискан инсталационен диск на Windows по време на сканирането, защото имате модифициран системен файл.

Съвет: Изчакайте колегата Maniac да се освободи и да продължите с него. Не можем да сме нон-стоп онлайн и освен това момчето днес е рожденник.

Поздрави !

ще го изчакам а относно инсталационния диск....мисълта ми беше след като не успях да го сложа дали не се е провалило всичко????

21 юли 201016 г.

Не, не е провалено...Combofix се е справил добре. Относно другия проблем колегата Maniac ще ви даде съвет как да го решите и него. (дори без наличието на инсталационен диск).

Просто го изчакайте (не е задължително да рефрешвате темата през 5 минути), вършете си вашата работа, но хвърляйте по едно око и на темата чат-пат. :whist:

Поздрави !

22 юли 201016 г.

Извинявам се за закъснението! Изготвям скрипта и малко по-късно ще го пусна. Благодаря за търпението!

22 юли 201016 г.

Имай предвид, че аз се отнасям напълно сериозно към ситуацията, така че те съветвам да се отнасяш и ти!! Глупости от сорта на: Нещо си там и т.н., не ми ги пробутвай. Искам точно и ясно да се обяснява както аз на теб, така и на мен. Ясно?

Отворете Notepad и чрез комбинацията copy/paste поставете следния текст:

Killall::

File::
c:\program files\qyqapbmxcpvkrsruaiakzlwhmzfubcbeks.ujv
c:\program files\gemmrtuvqtpurixqmkssxzab.zva
c:\program files\tezmethvdtcueikqzkfskznbjziakoqwfqlyq.thp
c:\program files\qyqapbmxcpspydbpncpzovwvyemeodpalq.gdm
c:\program files\gemmrtuvqtmzythlzehhmjap.eck
c:\program files\tezmethvdtzzltulmeuhzjnpvepkxpesgoekk.efw
c:\program files\ykgundshqhrkvadkugcqjzodmdngrwzgqcymfv.ziz
c:\program files\pyrcsfrdjxeuceeipyrcsfrdjxeuceeipyr.sfr
c:\program files\fkzgsbjrtdpdvhzfpbjoxgpvzwbqxjs.iku
c:\program files\dydacbzxpprvdfnjjljed.bxr
c:\program files\yeucpzirufshangnyluakuelqouksfpy.kvi
c:\program files\ykgundshqhopclnfharfyjoryiuqexncraryzm.xpr
c:\program files\pyrcsfrdjxbzjpodcsgrhprrvclepfseqwk.mwc

Запазете файла с името CFScript.txt и го поставете върху ComboFix.

Публикувано изображение

След като, програмата приключи ще Ви изведе лог файла. Отново чрез комбинацията от Copy/Paste поставете информацията тук.

22 юли 201016 г.

Автор

ComboFix 10-07-20.01 - Administrator 07.2010 г. 17:24:21.2.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.3037.2730 [GMT 3:00] Running from: c:\documents and settings\Administrator\Desktop\Combo-Fix.com Command switches used :: c:\docume~1\ADMINI~1\Desktop\CFScript.txt FILE :: "c:\program files\dydacbzxpprvdfnjjljed.bxr" "c:\program files\fkzgsbjrtdpdvhzfpbjoxgpvzwbqxjs.iku" "c:\program files\gemmrtuvqtmzythlzehhmjap.eck" "c:\program files\gemmrtuvqtpurixqmkssxzab.zva" "c:\program files\pyrcsfrdjxbzjpodcsgrhprrvclepfseqwk.mwc" "c:\program files\pyrcsfrdjxeuceeipyrcsfrdjxeuceeipyr.sfr" "c:\program files\qyqapbmxcpspydbpncpzovwvyemeodpalq.gdm" "c:\program files\qyqapbmxcpvkrsruaiakzlwhmzfubcbeks.ujv" "c:\program files\tezmethvdtcueikqzkfskznbjziakoqwfqlyq.thp" "c:\program files\tezmethvdtzzltulmeuhzjnpvepkxpesgoekk.efw" "c:\program files\yeucpzirufshangnyluakuelqouksfpy.kvi" "c:\program files\ykgundshqhopclnfharfyjoryiuqexncraryzm.xpr" "c:\program files\ykgundshqhrkvadkugcqjzodmdngrwzgqcymfv.ziz" . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\autorun.inf c:\docume~1\ADMINI~1\LOCALS~1\Temp\bstmkfzthdsqgqykzqrki.exe c:\docume~1\ADMINI~1\LOCALS~1\Temp\ykgundshqhrkvadk.exe c:\program files\dydacbzxpprvdfnjjljed.bxr c:\program files\fkzgsbjrtdpdvhzfpbjoxgpvzwbqxjs.iku c:\program files\gemmrtuvqtmzythlzehhmjap.eck c:\program files\gemmrtuvqtpurixqmkssxzab.zva c:\program files\pyrcsfrdjxbzjpodcsgrhprrvclepfseqwk.mwc c:\program files\pyrcsfrdjxeuceeipyrcsfrdjxeuceeipyr.sfr c:\program files\qyqapbmxcpspydbpncpzovwvyemeodpalq.gdm c:\program files\qyqapbmxcpvkrsruaiakzlwhmzfubcbeks.ujv c:\program files\tezmethvdtcueikqzkfskznbjziakoqwfqlyq.thp c:\program files\tezmethvdtzzltulmeuhzjnpvepkxpesgoekk.efw c:\program files\yeucpzirufshangnyluakuelqouksfpy.kvi c:\program files\ykgundshqhopclnfharfyjoryiuqexncraryzm.xpr c:\program files\ykgundshqhrkvadkugcqjzodmdngrwzgqcymfv.ziz C:\pyrcsfrdjxeuc.bat C:\taraozjtxjo.bat C:\tezmethvdtcueik.bat c:\windows.0\bstmkfzthdsqgqykzqrki.exe c:\windows.0\fspeypfvfxicouygr.exe c:\windows.0\mccurlexkftqfovgukkc.exe c:\windows.0\ocaqldulwpbwjqveqe.exe c:\windows.0\skmgfbwrgdtsjudqgyautp.exe c:\windows.0\system32\bstmkfzthdsqgqykzqrki.exe c:\windows.0\system32\fspeypfvfxicouygr.exe c:\windows.0\system32\mccurlexkftqfovgukkc.exe c:\windows.0\system32\ocaqldulwpbwjqveqe.exe c:\windows.0\system32\skmgfbwrgdtsjudqgyautp.exe c:\windows.0\system32\ykgundshqhrkvadk.exe c:\windows.0\system32\zoneatldpjwsgouergf.exe c:\windows.0\ykgundshqhrkvadk.exe c:\windows.0\zoneatldpjwsgouergf.exe D:\autorun.inf D:\pyrcsfrdjxeuc.bat D:\taraozjtxjo.bat D:\tezmethvdtcueik.bat Infected copy of c:\windows.0\system32\msgsvc.dll was found and disinfected Restored copy from - c:\windows.0\ERDNT\cache\msgsvc.dll . ((((((((((((((((((((((((( Files Created from 2010-06-22 to 2010-07-22 ))))))))))))))))))))))))))))))) . 2010-07-20 20:49 . 2010-07-20 20:49 -------- d--h--w- c:\windows.0\PIF 2010-07-20 14:50 . 2001-08-17 19:36 5632 ----a-w- c:\windows.0\system32\ptpusb.dll 2010-07-20 14:50 . 2008-04-14 02:42 159232 ----a-w- c:\windows.0\system32\ptpusd.dll 2010-07-20 14:50 . 2008-04-13 21:15 15104 ----a-w- c:\windows.0\system32\drivers\usbscan.sys 2010-07-18 15:51 . 2009-01-21 18:32 2600960 ----a-w- c:\windows.0\system32\ig4dev32.dll 2010-07-18 15:51 . 2009-01-21 18:20 645632 ----a-w- c:\windows.0\system32\igfxcfg.exe 2010-07-18 15:51 . 2009-01-21 18:52 155648 ----a-w- c:\windows.0\system32\igfxCoIn_v5029.dll 2010-07-18 15:51 . 2010-07-18 15:51 -------- d-----w- c:\windows.0\system32\Lang 2010-07-18 15:51 . 2009-01-29 17:12 993816 ----a-w- c:\windows.0\system32\igxpun.exe 2010-07-18 14:26 . 2010-07-18 14:26 -------- d-----w- c:\program files\Ask.com 2010-07-18 10:21 . 2010-06-02 01:55 74072 ----a-w- c:\windows.0\system32\XAPOFX1_5.dll 2010-07-18 10:21 . 2010-06-02 01:55 527192 ----a-w- c:\windows.0\system32\XAudio2_7.dll 2010-07-18 10:21 . 2010-06-02 01:55 239960 ----a-w- c:\windows.0\system32\xactengine3_7.dll 2010-07-18 10:21 . 2010-05-26 08:41 470880 ----a-w- c:\windows.0\system32\d3dx10_43.dll 2010-07-18 10:21 . 2010-05-26 08:41 248672 ----a-w- c:\windows.0\system32\d3dx11_43.dll 2010-07-18 10:21 . 2010-05-26 08:41 2106216 ----a-w- c:\windows.0\system32\D3DCompiler_43.dll 2010-07-18 10:21 . 2010-05-26 08:41 1868128 ----a-w- c:\windows.0\system32\d3dcsx_43.dll 2010-07-18 10:21 . 2010-05-26 08:41 1998168 ----a-w- c:\windows.0\system32\D3DX9_43.dll 2010-07-18 10:21 . 2010-02-04 07:01 74072 ----a-w- c:\windows.0\system32\XAPOFX1_4.dll 2010-07-18 10:21 . 2010-02-04 07:01 528216 ----a-w- c:\windows.0\system32\XAudio2_6.dll 2010-07-18 10:21 . 2010-02-04 07:01 238936 ----a-w- c:\windows.0\system32\xactengine3_6.dll 2010-07-18 10:21 . 2010-02-04 07:01 22360 ----a-w- c:\windows.0\system32\X3DAudio1_7.dll 2010-07-18 10:20 . 2010-07-18 10:20 -------- d-----w- c:\windows.0\Logs 2010-07-17 20:31 . 2009-08-21 10:17 485920 ----a-w- c:\windows.0\system32\NVUNINST.EXE 2010-07-17 18:34 . 2002-12-31 12:00 26624 ----a-w- c:\documents and settings\LocalService.NT AUTHORITY\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll 2010-07-15 21:20 . 2002-12-31 12:00 5632 ----a-r- c:\windows.0\system32\kbdheb.dll 2010-07-15 21:20 . 2002-12-31 12:00 6144 ----a-w- c:\windows.0\system32\ftlx041e.dll 2010-07-15 21:20 . 2002-12-31 12:00 6144 ----a-r- c:\windows.0\system32\kbdth3.dll 2010-07-15 21:20 . 2002-12-31 12:00 6144 ----a-r- c:\windows.0\system32\kbdth2.dll 2010-07-15 21:20 . 2002-12-31 12:00 5632 ----a-r- c:\windows.0\system32\kbdth1.dll 2010-07-15 21:20 . 2002-12-31 12:00 5632 ----a-r- c:\windows.0\system32\kbdth0.dll 2010-07-15 20:01 . 2008-12-19 00:34 1502528 ----a-w- c:\windows.0\system32\drivers\athw.sys 2010-07-15 20:01 . 2008-12-19 00:34 1502528 ----a-w- c:\windows.0\system32\athw.sys 2010-07-15 19:41 . 2010-07-15 19:41 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\Atheros 2010-07-15 19:41 . 2010-07-15 19:41 -------- d-----w- c:\documents and settings\Administrator\Application Data\InstallShield 2010-07-15 19:07 . 2010-07-18 12:13 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\Electronic Arts 2010-07-15 18:34 . 2008-07-16 23:05 53248 ----a-w- c:\windows.0\system32\CSVer.dll 2010-07-15 18:10 . 2007-08-24 18:46 5760 ----a-w- c:\windows.0\system32\drivers\ATKACPI.sys 2010-07-15 18:01 . 2008-03-21 20:57 14640 ------w- c:\windows.0\system32\spmsgXP_2k3.dll 2010-07-15 18:01 . 2009-05-01 17:01 209456 ----a-w- c:\windows.0\system32\drivers\SynTP.sys 2010-07-15 18:01 . 2009-05-01 17:00 161064 ----a-w- c:\windows.0\system32\SynTPAPI.dll 2010-07-15 18:01 . 2009-05-01 17:00 120104 ----a-w- c:\windows.0\system32\SynTPCo4.dll 2010-07-15 18:01 . 2009-05-01 17:00 206120 ----a-w- c:\windows.0\system32\SynCtrl.dll 2010-07-15 18:01 . 2009-05-01 17:00 169256 ----a-w- c:\windows.0\system32\SynCOM.dll 2010-07-15 18:01 . 2008-07-08 17:55 1112288 ----a-w- c:\windows.0\system32\WdfCoInstaller01007.dll 2010-07-15 17:09 . 2010-07-15 17:09 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Identities 2010-07-15 15:39 . 2010-07-18 15:52 -------- dc----w- c:\windows.0\system32\DRVSTORE 2010-07-15 15:39 . 2006-11-10 15:25 319456 ----a-w- c:\windows.0\system32\difxapi.dll 2010-07-15 15:32 . 2008-09-26 17:13 55816 ------w- c:\windows.0\system32\agrsmdel.exe 2010-07-15 15:32 . 2010-07-15 15:32 -------- d-----w- c:\windows.0\Options 2010-07-15 15:32 . 2008-11-21 23:53 1204128 ----a-w- c:\windows.0\system32\drivers\AGRSM.sys 2010-07-15 15:32 . 2008-09-26 17:13 55816 ----a-w- c:\windows.0\agrsmdel.exe 2010-07-15 15:32 . 2008-08-26 16:32 13824 ------w- c:\windows.0\system32\agrscoin.dll 2010-07-15 15:30 . 2008-12-16 22:00 6963200 ----a-w- c:\windows.0\system32\RTSUCRicon.dll 2010-07-15 12:19 . 2010-07-15 12:19 -------- d-----w- c:\windows.0\SHELLNEW 2010-07-15 12:02 . 2010-07-15 12:24 -------- d-----w- c:\documents and settings\Administrator\Application Data\DAEMON Tools 2010-07-15 12:01 . 2010-07-15 12:27 -------- d-----w- c:\documents and settings\Administrator\Application Data\Winamp 2010-07-15 11:59 . 2010-07-15 11:59 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Temp 2010-07-15 11:58 . 2010-07-15 11:58 -------- d-----w- c:\documents and settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Google 2010-07-15 11:56 . 2010-07-15 11:56 715248 ----a-w- c:\windows.0\system32\drivers\sptd.sys 2010-07-15 11:55 . 2010-07-22 10:31 -------- d-----w- c:\documents and settings\Administrator\Application Data\skypePM 2010-07-15 11:55 . 2010-07-15 11:55 56 ---ha-w- c:\windows.0\system32\ezsidmv.dat 2010-07-15 11:54 . 2010-07-15 11:54 -------- d-----w- c:\documents and settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Google 2010-07-15 11:54 . 2010-07-15 14:07 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Google 2010-07-15 11:54 . 2010-07-22 14:22 -------- d-----w- c:\documents and settings\Administrator\Application Data\Skype 2010-07-15 11:54 . 2010-07-15 11:54 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\Skype 2010-07-15 11:20 . 2002-09-30 18:15 77184 ----a-w- c:\windows.0\system32\drivers\HiSerial.sys 2010-07-15 11:20 . 2010-07-15 11:20 -------- d-----w- c:\program files\HiSerial 2010-07-15 11:11 . 2010-07-15 11:11 -------- d-----w- c:\program files\SmartTweak Software 2010-07-15 11:10 . 2010-07-15 11:10 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\PackageAware 2010-07-15 10:51 . 2010-07-15 10:51 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\Driver Whiz 2010-07-15 10:45 . 2008-04-14 07:15 6272 ----a-w- c:\windows.0\system32\drivers\splitter.sys 2010-07-15 10:45 . 2008-04-14 07:47 83072 ----a-w- c:\windows.0\system32\drivers\wdmaud.sys 2010-07-15 10:45 . 2008-04-14 07:15 52864 ----a-w- c:\windows.0\system32\drivers\DMusic.sys 2010-07-15 10:45 . 2008-04-14 07:15 56576 ----a-w- c:\windows.0\system32\drivers\swmidi.sys 2010-07-15 10:45 . 2008-04-14 05:09 142592 ----a-w- c:\windows.0\system32\drivers\aec.sys 2010-07-15 10:45 . 2008-04-14 07:15 172416 ----a-w- c:\windows.0\system32\drivers\kmixer.sys 2010-07-15 10:45 . 2008-04-14 07:15 2944 ----a-w- c:\windows.0\system32\drivers\drmkaud.sys 2010-07-15 10:45 . 2008-04-14 07:45 60800 ----a-w- c:\windows.0\system32\drivers\sysaudio.sys 2010-07-15 10:45 . 2010-07-15 10:45 -------- d-----w- c:\windows.0\system32\RTCOM 2010-07-15 10:45 . 2008-04-13 21:49 146048 ----a-w- c:\windows.0\system32\drivers\portcls.sys 2010-07-15 10:45 . 2008-04-13 21:15 60160 ----a-w- c:\windows.0\system32\drivers\drmk.sys 2010-07-15 10:14 . 2010-07-16 09:01 58008 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2010-07-15 10:14 . 2010-07-15 10:14 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\PC Drivers HeadQuarters 2010-07-15 10:04 . 2010-07-15 10:04 -------- d-----w- c:\windows.0\system32\LogFiles . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-07-21 23:20 . 2010-07-15 13:15 -------- d-----w- c:\documents and settings\Administrator\Application Data\uTorrent 2010-07-20 17:25 . 2010-06-19 13:45 -------- d-----w- c:\program files\MSXML 4.0 2010-07-18 16:10 . 2009-10-13 07:55 -------- d-----w- c:\program files\Electronic Arts 2010-07-16 09:07 . 2009-10-13 02:09 -------- d--h--w- c:\program files\InstallShield Installation Information 2010-07-15 18:02 . 2010-07-15 18:02 0 ---ha-w- c:\windows.0\system32\drivers\Msft_Kernel_SynTP_01007.Wdf 2010-07-15 18:02 . 2010-07-15 18:02 0 ---ha-w- c:\windows.0\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf 2010-07-15 15:32 . 2009-10-13 02:13 -------- d-----w- c:\program files\LSI SoftModem 2010-07-15 14:07 . 2009-10-13 03:43 -------- d-----w- c:\program files\Google 2010-07-15 14:06 . 2010-07-15 12:54 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\EPS 2010-07-15 13:58 . 2010-07-15 13:58 0 ----a-w- c:\windows.0\nsreg.dat 2010-07-15 13:52 . 2010-07-15 12:53 664 ----a-w- c:\windows.0\system32\d3d9caps.dat 2010-07-15 13:32 . 2010-07-15 13:32 -------- d-----w- c:\documents and settings\Administrator\Application Data\Uniblue 2010-07-15 13:25 . 2010-07-15 08:03 86339 ----a-w- c:\windows.0\pchealth\helpctr\OfflineCache\index.dat 2010-07-15 13:16 . 2010-07-08 19:41 -------- d-----w- c:\program files\uTorrent 2010-07-15 13:11 . 2010-07-15 13:11 -------- d-----w- c:\documents and settings\All Users.WINDOWS.0\Application Data\FileCure 2010-07-15 12:58 . 2010-07-15 12:58 10134 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe 2010-07-15 12:01 . 2009-10-13 06:10 -------- d-----w- c:\program files\Winamp 2010-07-15 12:00 . 2009-10-13 03:43 -------- d-----w- c:\program files\UltraISO 2010-07-15 12:00 . 2009-10-13 03:43 -------- d-----w- c:\program files\Common Files\EZB Systems 2010-07-15 11:54 . 2009-10-13 07:19 -------- d-----r- c:\program files\Skype 2010-07-15 08:38 . 2010-07-15 07:59 -------- d-----w- c:\program files\Unlocker 2010-07-15 08:04 . 2010-07-15 08:04 -------- d-----w- c:\program files\hkSFV 2010-07-15 08:02 . 2010-07-15 08:02 -------- d-----w- c:\program files\Windows Media Connect 2 2010-07-15 08:00 . 2010-07-15 08:00 21640 ----a-w- c:\windows.0\system32\emptyregdb.dat 2010-07-15 07:59 . 2010-07-15 07:59 -------- d-----w- c:\program files\Utilities 2010-07-15 07:59 . 2010-07-15 07:59 -------- d-----w- c:\program files\Desktop 2010-07-14 20:38 . 2010-07-14 20:38 -------- d-----w- c:\program files\Ashampoo 2010-07-13 22:32 . 2009-10-13 03:44 -------- d-----w- c:\program files\BitComet 2010-07-13 22:14 . 2010-07-13 20:34 -------- d-----w- c:\program files\Trojan Remover 2010-07-13 19:23 . 2010-07-13 19:23 -------- d-----w- c:\program files\Atheros 2010-07-13 18:57 . 2010-07-13 18:57 -------- d-----w- c:\program files\CPUID 2010-07-11 15:59 . 2010-01-22 21:29 -------- d-----w- c:\program files\Euro Truck Simulator 2010-07-10 14:11 . 2010-07-10 14:11 -------- d-----w- c:\program files\ESET 2010-07-07 01:27 . 2010-07-15 10:44 84584 ----a-w- c:\windows.0\SOUNDMAN.EXE 2010-07-07 01:27 . 2010-07-15 10:44 359016 ----a-w- c:\windows.0\vncutil.exe 2010-07-07 01:27 . 2010-07-15 10:44 1833576 ----a-w- c:\windows.0\SkyTel.exe 2010-07-07 01:27 . 2010-07-15 10:44 1489512 ----a-w- c:\windows.0\RtlUpd.exe 2010-07-07 01:26 . 2010-07-15 10:44 9721960 ----a-w- c:\windows.0\RTLCPL.EXE 2010-07-07 01:26 . 2010-07-15 10:44 6088296 ----a-w- c:\windows.0\system32\drivers\RtkHDAud.sys 2010-07-07 01:26 . 2010-07-15 10:44 53864 ----a-w- c:\windows.0\system32\RtkCoInstXP.dll 2010-07-07 01:26 . 2010-07-15 10:44 129640 ----a-w- c:\windows.0\RtkAudioService.exe 2010-07-07 01:26 . 2010-07-15 10:44 19556968 ----a-w- c:\windows.0\RTHDCPL.EXE 2010-07-07 01:26 . 2010-07-15 10:44 2815592 ----a-w- c:\windows.0\ALCWZRD.EXE 2010-07-07 01:26 . 2010-07-15 10:44 2180712 ----a-w- c:\windows.0\MicCal.exe 2010-07-07 01:26 . 2010-07-15 10:44 64104 ----a-w- c:\windows.0\ALCMTR.EXE 2010-06-26 12:20 . 2010-06-26 12:20 -------- d-----w- c:\program files\MSECache 2010-06-24 18:13 . 2010-07-15 10:44 1251944 ----a-r- c:\windows.0\RtlExUpd.dll 2010-06-19 16:43 . 2009-10-13 06:58 -------- d-----w- c:\program files\advantage 2010-06-09 13:22 . 2010-02-17 21:52 -------- d-----w- c:\program files\The KMPlayer 2010-05-14 03:35 . 2010-07-18 14:16 81920 ----a-w- c:\windows.0\system32\igfxCoIn_v5268.dll 2010-05-14 03:05 . 2010-07-18 14:16 3139584 ----a-w- c:\windows.0\system32\GfxUI.exe 2010-05-14 03:05 . 2010-07-18 14:16 121344 ----a-w- c:\windows.0\system32\gfxSrvc.dll 2010-05-14 03:05 . 2010-07-18 14:16 4096 ----a-w- c:\windows.0\system32\IGFXDEVLib.dll . ------- Sigcheck ------- [-] 2002-12-31 . EAEC6EA32BDABD7622371C10B8D68A17 . 361344 . . [5.1.2600.5512] . . c:\windows.0\system32\drivers\tcpip.sys . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] 2010-02-08 14:40 1362320 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-08 1362320] [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "taraozjtxjo"="mccurlexkftqfovgukkc.exe" [bU] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2009-10-26 15872] "RTHDCPL"="RTHDCPL.EXE" [2010-07-07 19556968] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-05-01 1529128] "Wireless Console 2"="c:\program files\Wireless Console 2\wcourier.exe" [2007-07-05 1040384] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832] "IgfxTray"="c:\windows.0\system32\igfxtray.exe" [2009-01-21 134656] "HotKeysCmds"="c:\windows.0\system32\hkcmd.exe" [2009-01-21 166912] "Persistence"="c:\windows.0\system32\igfxpers.exe" [2009-01-21 134656] "osgmxfmt"="mccurlexkftqfovgukkc.exe" [bU] [HKEY_LOCAL_MACHINE\software\microsoft\windows\Currentversion\policies\explorer\Run] "yeucpziruf"="ykgundshqhrkvadk.exe" [bU] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 0 (0x0) "EnableInstallerDetection"= 0 (0x0) "EnableSecureUIAPaths"= 0 (0x0) "EnableVirtualization"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= R3 IntcHdmiAddService;Intel® High Definition Audio HDMI Service;c:\windows.0\system32\drivers\IntcHdmi.sys [7/18/2010 5:16 PM 109568] S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7/15/2010 2:54 PM 135664] S3 Ambfilt;Ambfilt;c:\windows.0\system32\drivers\Ambfilt.sys [7/15/2010 1:44 PM 1691480] S3 RSUSBSTOR;RTS5121.Sys Realtek USB Card Reader;c:\windows.0\system32\Drivers\RTS5121.sys --> c:\windows.0\system32\Drivers\RTS5121.sys [?] S3 Rts516xIR;Realtek IR Driver;c:\windows.0\system32\DRIVERS\Rts516xIR.sys --> c:\windows.0\system32\DRIVERS\Rts516xIR.sys [?] S4 sptd;sptd;c:\windows.0\system32\drivers\sptd.sys [7/15/2010 2:56 PM 715248] --- Other Services/Drivers In Memory --- *NewlyCreated* - ASPI32 [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{FC88681F-4735-4f2f-9514-C21BAC737CF8}] 2002-12-31 12:00 128512 ----a-w- c:\windows.0\system32\advpack.dll . Contents of the 'Scheduled Tasks' folder 2010-07-22 c:\windows.0\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-07-15 11:54] 2010-07-22 c:\windows.0\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-07-15 11:54] 2010-07-22 c:\windows.0\Tasks\Scheduled Update for Ask Toolbar.job - c:\program files\Ask.com\UpdateTask.exe [2010-02-08 14:40] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.com/ uInternet Settings,ProxyServer = 193.68.132.102:8080 IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\7urw1k6c.default\ FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows.0\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true); c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true); c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", ""); c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false); c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false); . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-07-22 17:29 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\S-1-5-21-515967899-2111687655-1801674531-500\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (Administrator) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,99,fe,89,69,db,6a,96,40,87,ad,d0,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,99,fe,89,69,db,6a,96,40,87,ad,d0,\ . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'explorer.exe'(3380) c:\windows.0\system32\WININET.dll c:\program files\Unlocker\UnlockerHook.dll c:\windows.0\system32\msi.dll c:\windows.0\system32\ieframe.dll c:\windows.0\system32\webcheck.dll c:\windows.0\system32\WPDShServiceObj.dll c:\windows.0\system32\PortableDeviceTypes.dll c:\windows.0\system32\PortableDeviceApi.dll . ------------------------ Other Running Processes ------------------------ . c:\program files\LSI SoftModem\agrsmsvc.exe c:\windows.0\RTHDCPL.EXE c:\windows.0\system32\igfxsrvc.exe c:\windows.0\system32\wscntfy.exe . ************************************************************************** . Completion time: 2010-07-22 17:30:58 - machine was rebooted ComboFix-quarantined-files.txt 2010-07-22 14:30 ComboFix2.txt 2010-07-20 22:57 Pre-Run: 93 634 916 352 bytes free Post-Run: 93 622 022 144 bytes free - - End Of File - - 113B5ADA3D4564DB156B510C85D1BCFD незнам какво те кара да мислиш че не се отнасям сериозно към проблема,имайки в предвид че се разправяме от 2 дни и не смятам нищо да ти "пробутвам" ,а само да следвам указанията ти.

22 юли 201016 г.

1) Изтеглете: ESET Online Scanner

2) Стартирайте esetsmartinstaller_enu.exe

3) Сложете отметка на YES, I accept the Terms of Use и изберете Start

4) Скенерът ще започне да изтегля компонентите, които са му необходими.

5) Уверете се, че има отметки на следните редове, включително и тези от менюто Advanced Settings:

Remove found threats

Scan archivesScan for potentially unwanted applicationsScan for potentially unsafe applicationsEnable Anti-Stealth technology

И накрая изберете Start

6) Скенерът ще започне да изтегля последните дефиниции.

7) След, като сканирането завърши изберете Finish.

8) Отидете в:

C:\Program Files\ESET\ESET Online Scanner

Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си пост тук.

22 юли 201016 г.

Пускай наново и докато трае процедурата не пипай нищо, не работи с компютъра.

22 юли 201016 г.

Автор

ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6211 # api_version=3.0.2 # EOSSerial=b450b018b7799e4db8fdde6e9ef1e988 # end=stopped # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2010-07-22 05:51:23 # local_time=2010-07-22 08:51:23 (+0200, FLE Daylight Time) # country="Bulgaria" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=8192 67108863 100 0 206 206 0 0 # scanned=1512 # found=0 # cleaned=0 # scan_time=1940 esets_scanner_update returned -1 esets_gle=53251 # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6211 # api_version=3.0.2 # EOSSerial=b450b018b7799e4db8fdde6e9ef1e988 # end=stopped # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2010-07-22 05:57:25 # local_time=2010-07-22 08:57:25 (+0200, FLE Daylight Time) # country="Bulgaria" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=8192 67108863 100 0 2220 2220 0 0 # scanned=1508 # found=0 # cleaned=0 # scan_time=289 esets_scanner_update returned -1 esets_gle=53251 # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6211 # api_version=3.0.2 # EOSSerial=b450b018b7799e4db8fdde6e9ef1e988 # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2010-07-22 07:42:17 # local_time=2010-07-22 10:42:17 (+0200, FLE Daylight Time) # country="Bulgaria" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=8192 67108863 100 0 2529 2529 0 0 # scanned=41112 # found=46 # cleaned=46 # scan_time=6272 C:\Documents and Settings\Administrator\My Documents\Downloads\The.Sims.3-Razor1911\rzr-sim3.iso probably a variant of Win32/Hupigon trojan (deleted - quarantined) 00000000000000000000000000000000 C C:\Program Files\ESET\ESET NOD32 Antivirus\nodlogin.exe Win32/HackAV.BL application (deleted - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\autorun.inf.vir INF/Autorun.Gen virus (deleted - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\autorun.inf.vir.vir INF/Autorun.Gen virus (deleted - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\fkzgsbjrt.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\osgmxfmt.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\pyrcsfrdjxbzj.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\pyrcsfrdjxeuc.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\qyqapbmxcpev.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\TARAOZJTXJL.BAT.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\taraozjtxjo.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\tezmethvdtcueik.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\yeucpziruf.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\bstmkfzthdsqgqykzqrki.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\fspeypfvfxicouygr.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\mccurlexkftqfovgukkc.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\ocaqldulwpbwjqveqe.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\skmgfbwrgdtsjudqgyautp.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\ykgundshqhrkvadk.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\zoneatldpjwsgouergf.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\system32\bstmkfzthdsqgqykzqrki.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\system32\fspeypfvfxicouygr.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\system32\mccurlexkftqfovgukkc.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\system32\ocaqldulwpbwjqveqe.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\system32\skmgfbwrgdtsjudqgyautp.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\system32\ykgundshqhrkvadk.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\C\WINDOWS.0\system32\zoneatldpjwsgouergf.exe.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\D\autorun.inf.vir INF/Autorun.Gen virus (deleted - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\D\autorun.inf.vir.vir INF/Autorun.Gen virus (deleted - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\D\av1.zip multiple threats (deleted - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\D\fkzgsbjrt.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\D\osgmxfmt.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\D\pyrcsfrdjxbzj.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\D\pyrcsfrdjxeuc.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\D\qyqapbmxcpev.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\D\taraozjtxjo.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\D\tezmethvdtcueik.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\D\yeucpziruf.bat.vir Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Qoobox\Quarantine\Replicators\8B5E6EBB5422DCEE286F345793D2B12D Win32/AutoRun.Agent.UD worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C D:\Downloads\Microsoft® Windows XP SP3 Pro. x86 Corp. Unattended April 2010\Windows.XP.SP3.2010-04-01.CD.iso a variant of Win32/PSWTool.RAS.A application (deleted - quarantined) 00000000000000000000000000000000 C D:\Downloads\Warcraft 3 + TFT\WARCRAFT 3 THE FROZEN THRONE.ISO probably a variant of Win32/TrojanDropper.Agent trojan (deleted - quarantined) 00000000000000000000000000000000 C D:\Downloads\Warcraft 3 + TFT\WC3Banlist_2.72.exe probably a variant of Win32/Spy.Delf.OJS trojan (deleted - quarantined) 00000000000000000000000000000000 C D:\installs\ESET NOD32 Antivirus 3.0.669 Home Edition + NodLogIn 9.5\eav_nt32_enu.exe probably a variant of Win32/TrojanDownloader.Delf trojan (deleted - quarantined) 00000000000000000000000000000000 C D:\installs\ESET NOD32 Antivirus 3.0.669 Home Edition + NodLogIn 9.5\setup.exe Win32/HackAV.BL application (deleted - quarantined) 00000000000000000000000000000000 C D:\installs\OFFICE_2003_ALL_IN_ONE\OFFICE_2003_ALL_IN_ONE.iso probably a variant of Win32/Agent trojan (deleted - quarantined) 00000000000000000000000000000000 C D:\installs\OFFICE_2003_ALL_IN_ONE\OFFICE_2003_ALL_IN_ONE\Extras\MathType 5.1\mtype_v5_1_keygen.exe probably a variant of Win32/Agent trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

22 юли 201016 г.

Значи сме се погрижили за активните проблеми.

Публикувано изображение

Изтеглете DDS от тук или тук. Запазете го на вашия десктоп.

Изключете Real-Time защитата на вашия антивирусен софтуер и всякакви скриптови блокери. Накрая, стартирайте инструмента.

Когато DDS приключи успешно анализа на системата Ви ще отвори два лог файла.

DDS.txt

Attach.txt

Запазете ги на вашия десктоп и след това ги прикачете към следващия си пост.

23 юли 201016 г.

Автор

ето ги,но като се опитах да изключа windows firewall ми изписа "Due to an unidentified,Windows cannot display windows firewall settings" и съответно не можах да го изключа.

Attach.txt

DDS.txt

23 юли 201016 г.

Следващият път пак си сложиш NOD32 и си е кракни да си чукаш главата в стената.

Стъпка 1:

Изтегли и инсталирай антивирусен софтуер. Направи пълно сканиране на системата. Можеш да си избереш от нашия богат каталог:

http://www.kaldata.com/modules.php?modid=1&action=cat&id=41

В следващият коментар по възможност публикувай лог файл, ако не ми разкажи за резултатите от сканирането.

Стъпка 2:

Изтеглете OTL (от OldTimer) и го запазете на вашия десктоп.

Кликнете два пъти върху OTL.exe, за да стартирате програмата.

Сложете отметки преди следните неща:

Scan all users

Lop checkPurity check

Под секцията Extra Registry, изберете Use SafeList

Кликнете на Run Scan и изчакайте да завърши сканирането. (може да отнеме 10-15 минути)

Когато завърши, публикувайте следните два лог файла:

OTL.txt (намира се на вашия десктоп)
Extras.txt (ще Ви се отвори автоматично)

П.П.: Ето решение за проблема със защитна стена, но нека се разправяме с него, когато приключим с наболелия в момента проблем.

http://windowsxp.mvps.org/sharedaccess.htm

Редактирано 23 юли 201016 г. от Maniac
П.П (преглед на промените)

23 юли 201016 г.

Автор

почна да се сканира обаче още в началото изкочи Trojan Ender--Error log(прозорец) и в него пише "2010. 7.23 16:57[File Scan] access file C:\pagefile.sys refused" и продължава да се сканира и изписа че има trojan virus и за да го убия трябва да се регистрирам ... и пак се появи "2010. 7.23 16:57[File Scan] access file C:\pagefile.sys refused"

Редактирано 23 юли 201016 г. от some_of_it (преглед на промените)

23 юли 201016 г.

Кой антивирусен продукт избра? Специално за този файл е нормално, защото той е защитен от четене от Windows OS.

23 юли 201016 г.

Автор

Кой антивирусен продукт избра?

Специално за този файл е нормално, защото той е защитен от четене от Windows OS.

ANti trojan Elite

да пробвам с друг а

Редактирано 23 юли 201016 г. от some_of_it (преглед на промените)

23 юли 201016 г.

Невероятно е как, като дадеш възможност на потребителя от да избере сам от 20 възможни продукта, той избира ама най-лошият. Не просто сега, а веднага ще го разкараш. Гледам, че се ориентираш към безплатните варианти затова ти препоръчвам: Avast, AVG, Avira AntiVir Personal или Microsoft Security Essentials.

Добре дошли!

не мога да изтегля и да инсталирам нито една антивирусна [РЕШЕН]

Featured Replies

Потребители с най-много отговори

Популярни дни

Най-популярни публикации

Maniac

Maniac

Hanibal_Lektar

Регистрирайте се или влезете в профила си за да коментирате

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)