Нормално, след стартиране на fix.bat има лог, който след стартирането генерира файл -> all

Ще може ли да пуснеш една програмка, за да видя дали не е останала една гадина:

Следвайте следната инструкция за работа със SystemLook:

Изтеглете SystemLook и запазете програмата на десктопа.

• Кликнете два пъти върху SystemLook.exe, за да стартирате програмата.
• Копирайте съдържанието от цитата по-долу в текстовото поле на програмата:

  :filefind

  mff7sr48fe218.avi.ddr

  mff7sr48fe218.avi.ddp

  _mff7sr48fe218.avi_.ddp.zip

• Кликнете на бутона Look, за да започне сканирането.
• Когато сканирането завърши ще се отвори Notepad с резултата от сканирането. После публикувайте съдържанието на лог файла в следващия си коментар.

Да пуснах я и ето лога SystemLook 04.09.10 by jpshortstuff Log created at 22:29 on 10/01/2011 by Gangosan Administrator - Elevation successful ========== filefind ========== Searching for "mff7sr48fe218.avi.ddr" No files found. Searching for "mff7sr48fe218.avi.ddp" No files found. Searching for "_mff7sr48fe218.avi_.ddp.zip" No files found. -= EOF =-

Независимо от това, че ComboFix махна рууткит с тези имена на файлове, следва:

Следвайте следната инструкция за работа с TDSSKiller (по-подробна инструкция на английски език: TDSSKiller):

• Изтеглете TDSSKiller и го разархивирайте на десктопa.
• Стартирайте TDSSKiller.exe, след това Start Scan.
• Ако бъде открит инфектиран (infected) файл, проверете дали е избрана опцията Cure (по подразбиране). Ако е избрана Cure - натиснете Continue, снимка:

  

• Ако бъде открит подозрителен (suspicious) файл, проверете дали е избрана опцията Skip (по подразбиране). Ако е избрана Skip - натиснете Continue.
• Възможно е програмата да изиска рестарт. Ако е така - потвърдете с Reboot Now.

  -Ако няма рестартиране, отидете на Report. Ще се появи лог файл. Копирайте и поставете съдържанието му в следващия си коментар.

  -Ако има рестартиране, отидете на в системната директория. Там трябва да има файл с формат: TDSSKiller.[Version]_[Date]_[Time]_log.txt. Отворете го, копирайте и поставете съдържанието му в следващия си коментар.

Забележка: За sptd.sys натиснете Skip.

Това е 2011/01/10 22:37:15.0968 TDSS rootkit removing tool 2.4.12.0 Dec 16 2010 09:46:46 2011/01/10 22:37:15.0968 ================================================================================ 2011/01/10 22:37:15.0968 SystemInfo: 2011/01/10 22:37:15.0968 2011/01/10 22:37:15.0968 OS Version: 5.1.2600 ServicePack: 3.0 2011/01/10 22:37:15.0968 Product type: Workstation 2011/01/10 22:37:15.0968 ComputerName: GANGO-FC197B987 2011/01/10 22:37:15.0968 UserName: Gangosan 2011/01/10 22:37:15.0968 Windows directory: C:\WINDOWS 2011/01/10 22:37:15.0968 System windows directory: C:\WINDOWS 2011/01/10 22:37:15.0968 Processor architecture: Intel x86 2011/01/10 22:37:15.0968 Number of processors: 2 2011/01/10 22:37:15.0968 Page size: 0x1000 2011/01/10 22:37:15.0968 Boot type: Normal boot 2011/01/10 22:37:15.0968 ================================================================================ 2011/01/10 22:37:16.0359 Initialize success 2011/01/10 22:37:25.0390 ================================================================================ 2011/01/10 22:37:25.0390 Scan started 2011/01/10 22:37:25.0390 Mode: Manual; 2011/01/10 22:37:25.0390 ================================================================================ 2011/01/10 22:37:25.0796 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 2011/01/10 22:37:25.0828 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 2011/01/10 22:37:25.0875 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 2011/01/10 22:37:25.0953 AFD (7e775010ef291da96ad17ca4b17137d7) C:\WINDOWS\System32\drivers\afd.sys 2011/01/10 22:37:26.0078 Ambfilt (f6af59d6eee5e1c304f7f73706ad11d8) C:\WINDOWS\system32\drivers\Ambfilt.sys 2011/01/10 22:37:26.0250 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 2011/01/10 22:37:26.0265 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 2011/01/10 22:37:26.0312 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 2011/01/10 22:37:26.0390 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 2011/01/10 22:37:26.0437 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 2011/01/10 22:37:26.0468 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 2011/01/10 22:37:26.0546 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 2011/01/10 22:37:26.0593 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 2011/01/10 22:37:26.0625 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 2011/01/10 22:37:26.0718 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 2011/01/10 22:37:26.0859 DeskLock (432b960b2efb636d93a82b86a20fdc08) C:\WINDOWS\system32\drivers\DeskLock.sys 2011/01/10 22:37:26.0921 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 2011/01/10 22:37:26.0984 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 2011/01/10 22:37:27.0062 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 2011/01/10 22:37:27.0109 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 2011/01/10 22:37:27.0156 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 2011/01/10 22:37:27.0187 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 2011/01/10 22:37:27.0218 eamon (94ae478d85a45ed5beb930eb9d439e2b) C:\WINDOWS\system32\DRIVERS\eamon.sys 2011/01/10 22:37:27.0296 ehdrv (132537f85fcd8aaab097bfb9525ef175) C:\WINDOWS\system32\DRIVERS\ehdrv.sys 2011/01/10 22:37:27.0328 epfwtdir (1a83c5b34abb598395a9505c64d36e37) C:\WINDOWS\system32\DRIVERS\epfwtdir.sys 2011/01/10 22:37:27.0359 ExterminateIt (8ef8166e412988f210186e2fae88d083) C:\WINDOWS\system32\drivers\extit.sys 2011/01/10 22:37:27.0406 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 2011/01/10 22:37:27.0484 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys 2011/01/10 22:37:27.0515 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 2011/01/10 22:37:27.0531 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys 2011/01/10 22:37:27.0562 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys 2011/01/10 22:37:27.0640 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 2011/01/10 22:37:27.0656 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 2011/01/10 22:37:27.0703 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 2011/01/10 22:37:27.0718 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 2011/01/10 22:37:27.0781 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 2011/01/10 22:37:27.0875 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 2011/01/10 22:37:27.0953 ialm (c5db546f9028cd00e64335091860d8f3) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys 2011/01/10 22:37:28.0062 IDMTDI (b55716085e4c3945030593e851c531f7) C:\WINDOWS\system32\DRIVERS\idmtdi.sys 2011/01/10 22:37:28.0125 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 2011/01/10 22:37:28.0359 IntcAzAudAddService (c89535b2d7b42fe402ac4b20d9908249) C:\WINDOWS\system32\drivers\RtkHDAud.sys 2011/01/10 22:37:28.0578 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 2011/01/10 22:37:28.0593 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys 2011/01/10 22:37:28.0625 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 2011/01/10 22:37:28.0640 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 2011/01/10 22:37:28.0734 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 2011/01/10 22:37:28.0765 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 2011/01/10 22:37:28.0796 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 2011/01/10 22:37:28.0828 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 2011/01/10 22:37:28.0906 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 2011/01/10 22:37:28.0937 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 2011/01/10 22:37:29.0015 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 2011/01/10 22:37:29.0125 m4301a (a0911a1867a3d132a744c08b5b1ece61) C:\WINDOWS\system32\DRIVERS\m4301A.sys 2011/01/10 22:37:29.0203 MBAMProtector (836e0e09ca9869be7eb39ef2cf3602c7) C:\WINDOWS\system32\drivers\mbam.sys 2011/01/10 22:37:29.0265 mcdbus (8fd868e32459ece2a1bb0169f513d31e) C:\WINDOWS\system32\DRIVERS\mcdbus.sys 2011/01/10 22:37:29.0296 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 2011/01/10 22:37:29.0343 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 2011/01/10 22:37:29.0453 Monfilt (9fa7207d1b1adead88ae8eed9cdbbaa5) C:\WINDOWS\system32\drivers\Monfilt.sys 2011/01/10 22:37:29.0515 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 2011/01/10 22:37:29.0578 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 2011/01/10 22:37:29.0625 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 2011/01/10 22:37:29.0687 MRxSmb (f3aefb11abc521122b67095044169e98) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 2011/01/10 22:37:29.0750 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 2011/01/10 22:37:29.0781 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 2011/01/10 22:37:29.0812 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2011/01/10 22:37:29.0859 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 2011/01/10 22:37:29.0906 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 2011/01/10 22:37:29.0921 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys 2011/01/10 22:37:30.0000 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys 2011/01/10 22:37:30.0031 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 2011/01/10 22:37:30.0062 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 2011/01/10 22:37:30.0093 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 2011/01/10 22:37:30.0171 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 2011/01/10 22:37:30.0203 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 2011/01/10 22:37:30.0218 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 2011/01/10 22:37:30.0250 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 2011/01/10 22:37:30.0265 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 2011/01/10 22:37:30.0328 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 2011/01/10 22:37:30.0375 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 2011/01/10 22:37:30.0406 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 2011/01/10 22:37:30.0500 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 2011/01/10 22:37:30.0531 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 2011/01/10 22:37:30.0546 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 2011/01/10 22:37:30.0593 PAC207 (4a410c7aea51123519c20d43a20bce96) C:\WINDOWS\system32\DRIVERS\PFC027.SYS 2011/01/10 22:37:30.0687 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\drivers\Parport.sys 2011/01/10 22:37:30.0703 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 2011/01/10 22:37:30.0734 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 2011/01/10 22:37:30.0781 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 2011/01/10 22:37:30.0859 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 2011/01/10 22:37:30.0890 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 2011/01/10 22:37:31.0031 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 2011/01/10 22:37:31.0093 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 2011/01/10 22:37:31.0171 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 2011/01/10 22:37:31.0203 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys 2011/01/10 22:37:31.0296 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 2011/01/10 22:37:31.0328 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 2011/01/10 22:37:31.0390 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 2011/01/10 22:37:31.0406 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 2011/01/10 22:37:31.0437 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 2011/01/10 22:37:31.0453 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 2011/01/10 22:37:31.0484 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 2011/01/10 22:37:31.0562 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys 2011/01/10 22:37:31.0609 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 2011/01/10 22:37:31.0640 Revoflt (8b5b8a11306190c6963d3473f052d3c8) C:\WINDOWS\system32\DRIVERS\revoflt.sys 2011/01/10 22:37:31.0718 RTLE8023xp (c6d34a1874cd2b212dc3e788091c64b4) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys 2011/01/10 22:37:31.0750 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 2011/01/10 22:37:31.0781 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 2011/01/10 22:37:31.0875 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 2011/01/10 22:37:31.0906 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 2011/01/10 22:37:31.0953 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys 2011/01/10 22:37:32.0000 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 2011/01/10 22:37:32.0078 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 2011/01/10 22:37:32.0109 Srv (0f6aefad3641a657e18081f52d0c15af) C:\WINDOWS\system32\DRIVERS\srv.sys 2011/01/10 22:37:32.0156 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 2011/01/10 22:37:32.0203 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 2011/01/10 22:37:32.0281 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 2011/01/10 22:37:32.0359 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 2011/01/10 22:37:32.0390 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 2011/01/10 22:37:32.0484 Tcpip6 (4e53bbcc4be37d7a4bd6ef1098c89ff7) C:\WINDOWS\system32\DRIVERS\tcpip6.sys 2011/01/10 22:37:32.0515 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 2011/01/10 22:37:32.0531 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 2011/01/10 22:37:32.0546 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 2011/01/10 22:37:32.0687 TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys 2011/01/10 22:37:32.0765 tunmp (8f861eda21c05857eb8197300a92501c) C:\WINDOWS\system32\DRIVERS\tunmp.sys 2011/01/10 22:37:32.0781 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 2011/01/10 22:37:32.0859 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 2011/01/10 22:37:32.0937 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 2011/01/10 22:37:32.0953 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 2011/01/10 22:37:32.0984 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 2011/01/10 22:37:33.0015 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 2011/01/10 22:37:33.0125 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 2011/01/10 22:37:33.0187 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 2011/01/10 22:37:33.0218 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 2011/01/10 22:37:33.0265 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 2011/01/10 22:37:33.0390 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 2011/01/10 22:37:33.0437 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 2011/01/10 22:37:33.0453 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 2011/01/10 22:37:33.0562 ================================================================================ 2011/01/10 22:37:33.0562 Scan finished 2011/01/10 22:37:33.0562 ================================================================================

Хм, TDSSKiller не откри нищо. Според мен има някакви остатъци, пак ще погледна логовете... Дотогава може да пуснеш още един фикс за нулиране на TCP/IP, който закачам към коментара.

След испълнение на фикса се генерира този лог reset SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{00FB0237-29A9-4946-A377-84193CF1CDFE}\NameServerList old REG_MULTI_SZ = <empty> reset SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{00FB0237-29A9-4946-A377-84193CF1CDFE}\NetbiosOptions old REG_DWORD = 2 deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{00FB0237-29A9-4946-A377-84193CF1CDFE}\NameServer deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{BA9E67F8-C03B-41FA-8FC3-D5F2BB80E1A4}\IpAutoconfigurationAddress deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{BA9E67F8-C03B-41FA-8FC3-D5F2BB80E1A4}\IpAutoconfigurationMask deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{BA9E67F8-C03B-41FA-8FC3-D5F2BB80E1A4}\IpAutoconfigurationSeed <completed>

Брей, ще взема да проверя за какво става дума. Следва:

• Start -> Run напиши cmd, след това Enter.
• Въведи с Copy/ Paste следната команда и натисни Enter:

  ipconfig /all > c:\log.txt

Ще се генерира лог файл - c:\log.txt. Пусни ми го на лично съобщение, за да не няма съмнения за публикуване на лични IP данни.

P.S. Благодаря за ЛС, но ще ми трябва време. Защото трябва да проверя доста неща.

Редактирано 10 януари 201115 г. от nologo (преглед на промените)

Съжалявам за закъснението, бях доста зает. Проблемът със спама и бан в IRC може би е предизвикан от остатъците на рууткита. Положението е сложно, затова:

Стъпка 1

• Изтеглете: MBRCheck.exe на вашия десктоп.
• Спрете временно антивирусната си програма
• Стартирайте MBRCheck.exe (за Vista и Windows 7 ще трябва да потвърдите през UAC)
• След това на десктопа ще се появи черен прозорец
• Ако има намерен непознат бууткод (bootcode), ще се появят няколко опции. Не ги използвайте! Само натиснете N, след това ENTER два пъти.
• Ако няма проблеми, само натиснете ENTER
• Ще се генерира текстов файл - MBRCheck_mm.dd.yy_hh.mm.ss на вашия десктоп (тук mm е месец, dd - ден, yyyy - година, hh - час, mm - минута и ss - секунда). Oтворете този файл, маркирайте и копирайте с десен клик Copy (Копирай или Ctrl+С) изцяло текста, който се съдържа в него. Публикувайте копирания текст с Paste (Постави) в следващия си коментар.

Стъпка 2

Следвайте следната инструкция за работа с GMER:

• Изтеглете GMER от тази страница (виж download EXE) и го запазете на десктопа.
• Временно спрете Интернет и всички работещи програми, както и антивирусната си програма (ако има такава).
• Стартирайте EXE файла на GMER (обикновено е с хаотично разположени букви в името).

  Забележки:

  1. Сканирането може да доведе до грешки, затова не предприемайте никакви действия върху редовете маркирани с "<--- ROOKIT" без да имате инструкция за това.

  2. Ако GMER не се стартира или не работи коректно, не предприемайте повторен опит за стартиране. Moже да пробвате и в Safe Mode, но само веднъж.

• Ако бъде открит Rootkit, ще последва въпрос дали желаете пълно сканиране на системата. Изберете NO.
• В десния панел на програмата ще видите какво е проверено, но не променяйте нищо. Убедете се, че на Show All няма отметка.
• Маркирайте всички устройства: C:, D: и пр.
• Натиснете бутона Scan и изчакайте програмата да завърши сканирането.
• Когато завърши сканирането, натиснете бутона Save и запишете (save as) резултатите на десктопа с име: Results.log
• Вече можете да включите Интернет.
• Публикувайте съдържанието на Results.log с Copy/ Paste в следващия си коментар.

MBRCheck, version 1.2.3

© 2010, AD

Command-line:

Windows Version: Windows XP Professional

Windows Information: Service Pack 3 (build 2600)

Logical Drives Mask: 0x0000003c

Kernel Drivers (total 118):

0x804D7000 \WINDOWS\system32\TUKERNEL.EXE

0x80721000 \WINDOWS\system32\hal.dll

0xF7B0C000 \WINDOWS\system32\KDCOM.DLL

0xF7A1C000 \WINDOWS\system32\BOOTVID.dll

0xF75BD000 ACPI.sys

0xF7B0E000 \WINDOWS\system32\DRIVERS\WMILIB.SYS

0xF75AC000 pci.sys

0xF760C000 isapnp.sys

0xF7BD4000 pciide.sys

0xF788C000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS

0xF761C000 MountMgr.sys

0xF758D000 ftdisk.sys

0xF7B10000 dmload.sys

0xF7567000 dmio.sys

0xF7894000 PartMgr.sys

0xF762C000 VolSnap.sys

0xF754F000 atapi.sys

0xF763C000 disk.sys

0xF764C000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS

0xF752F000 fltMgr.sys

0xF751D000 sr.sys

0xF765C000 PxHelp20.sys

0xF7506000 KSecDD.sys

0xF7479000 Ntfs.sys

0xF744C000 NDIS.sys

0xF7432000 Mup.sys

0xF7ADC000 \SystemRoot\system32\DRIVERS\tunmp.sys

0xF6F65000 \SystemRoot\system32\DRIVERS\intelppm.sys

0xF6D2E000 \SystemRoot\system32\DRIVERS\igxpmp32.sys

0xF6D1A000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS

0xF6CF2000 \SystemRoot\system32\DRIVERS\HDAudBus.sys

0xF6CBB000 \SystemRoot\system32\DRIVERS\Rtenicxp.sys

0xF795C000 \SystemRoot\system32\DRIVERS\usbuhci.sys

0xF6C97000 \SystemRoot\system32\DRIVERS\USBPORT.SYS

0xF7964000 \SystemRoot\system32\DRIVERS\usbehci.sys

0xF6F55000 \SystemRoot\system32\DRIVERS\i8042prt.sys

0xF796C000 \SystemRoot\system32\DRIVERS\kbdclass.sys

0xF7974000 \SystemRoot\system32\DRIVERS\mouclass.sys

0xF6F45000 \SystemRoot\system32\DRIVERS\serial.sys

0xF7AF0000 \SystemRoot\system32\DRIVERS\serenum.sys

0xF6F35000 \SystemRoot\system32\DRIVERS\imapi.sys

0xF6F25000 \SystemRoot\system32\DRIVERS\cdrom.sys

0xF6F15000 \SystemRoot\system32\DRIVERS\redbook.sys

0xF6C74000 \SystemRoot\system32\DRIVERS\ks.sys

0xF7CF9000 \SystemRoot\system32\DRIVERS\audstub.sys

0xF6F05000 \SystemRoot\system32\DRIVERS\rasl2tp.sys

0xF7AF8000 \SystemRoot\system32\DRIVERS\ndistapi.sys

0xF6C5D000 \SystemRoot\system32\DRIVERS\ndiswan.sys

0xF6EF5000 \SystemRoot\system32\DRIVERS\raspppoe.sys

0xF6EE5000 \SystemRoot\system32\DRIVERS\raspptp.sys

0xF797C000 \SystemRoot\system32\DRIVERS\TDI.SYS

0xF6C4C000 \SystemRoot\system32\DRIVERS\psched.sys

0xF6ED5000 \SystemRoot\system32\DRIVERS\msgpc.sys

0xF7984000 \SystemRoot\system32\DRIVERS\ptilink.sys

0xF798C000 \SystemRoot\system32\DRIVERS\raspti.sys

0xF6C1C000 \SystemRoot\system32\DRIVERS\rdpdr.sys

0xF76BC000 \SystemRoot\system32\DRIVERS\termdd.sys

0xF6BD7000 \SystemRoot\system32\DRIVERS\mcdbus.sys

0xF6BBF000 \SystemRoot\system32\DRIVERS\SCSIPORT.SYS

0xF7B44000 \SystemRoot\system32\DRIVERS\swenum.sys

0xF6B61000 \SystemRoot\system32\DRIVERS\update.sys

0xF7402000 \SystemRoot\system32\DRIVERS\mssmbios.sys

0xF76CC000 \SystemRoot\System32\Drivers\NDProxy.SYS

0xAA1B8000 \SystemRoot\system32\drivers\RtkHDAud.sys

0xAA194000 \SystemRoot\system32\drivers\portcls.sys

0xF76FC000 \SystemRoot\system32\drivers\drmk.sys

0xF770C000 \SystemRoot\system32\DRIVERS\usbhub.sys

0xF7B48000 \SystemRoot\system32\DRIVERS\USBD.SYS

0xF7B4A000 \SystemRoot\System32\Drivers\Fs_Rec.SYS

0xF7C51000 \SystemRoot\System32\Drivers\Null.SYS

0xF7B4C000 \SystemRoot\System32\Drivers\Beep.SYS

0xAA14D000 \SystemRoot\system32\DRIVERS\ehdrv.sys

0xF79AC000 \SystemRoot\System32\drivers\vga.sys

0xF7B4E000 \SystemRoot\System32\Drivers\mnmdd.SYS

0xF7B50000 \SystemRoot\System32\DRIVERS\RDPCDD.sys

0xF79B4000 \SystemRoot\System32\Drivers\Msfs.SYS

0xF79BC000 \SystemRoot\System32\Drivers\Npfs.SYS

0xF6C14000 \SystemRoot\system32\DRIVERS\rasacd.sys

0xAA11A000 \SystemRoot\system32\DRIVERS\ipsec.sys

0xAA0C1000 \SystemRoot\system32\DRIVERS\tcpip.sys

0xAA099000 \SystemRoot\system32\DRIVERS\netbt.sys

0xF771C000 \SystemRoot\system32\DRIVERS\wanarp.sys

0xAA073000 \SystemRoot\system32\DRIVERS\ipnat.sys

0xAA05B000 \SystemRoot\system32\DRIVERS\epfwtdir.sys

0xA9FFB000 \SystemRoot\system32\DRIVERS\tcpip6.sys

0xA9FD9000 \SystemRoot\System32\drivers\afd.sys

0xF772C000 \SystemRoot\system32\DRIVERS\Ip6Fw.sys

0xF773C000 \SystemRoot\system32\DRIVERS\netbios.sys

0xA9FAE000 \SystemRoot\system32\DRIVERS\rdbss.sys

0xA9F3E000 \SystemRoot\system32\DRIVERS\mrxsmb.sys

0xA9F2C000 \SystemRoot\system32\DRIVERS\idmtdi.sys

0xF774C000 \SystemRoot\System32\Drivers\Fips.SYS

0xA9E95000 \SystemRoot\system32\DRIVERS\PFC027.SYS

0xF775C000 \SystemRoot\system32\DRIVERS\STREAM.SYS

0xF79CC000 \SystemRoot\system32\drivers\DeskLock.sys

0xF77CC000 \SystemRoot\System32\Drivers\Cdfs.SYS

0xA9DDD000 \SystemRoot\System32\Drivers\dump_atapi.sys

0xF7B74000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS

0xBF800000 \SystemRoot\System32\win32k.sys

0xAA188000 \SystemRoot\System32\drivers\Dxapi.sys

0xF79F4000 \SystemRoot\System32\watchdog.sys

0xBF000000 \SystemRoot\System32\drivers\dxg.sys

0xF7C9D000 \SystemRoot\System32\drivers\dxgthk.sys

0xBF024000 \SystemRoot\System32\igxpgd32.dll

0xBF012000 \SystemRoot\System32\igxprd32.dll

0xBF059000 \SystemRoot\System32\igxpdv32.DLL

0xBF2E9000 \SystemRoot\System32\igxpdx32.DLL

0xBFFA0000 \SystemRoot\System32\ATMFD.DLL

0xA9BDB000 \SystemRoot\system32\DRIVERS\eamon.sys

0xA9DA5000 \??\C:\WINDOWS\system32\drivers\mbam.sys

0xA9CC9000 \SystemRoot\system32\DRIVERS\ndisuio.sys

0xA996E000 \SystemRoot\system32\drivers\wdmaud.sys

0xA9AF3000 \SystemRoot\system32\drivers\sysaudio.sys

0xA9466000 \SystemRoot\system32\DRIVERS\srv.sys

0xF7BF1000 \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys

0xA9015000 \SystemRoot\System32\Drivers\HTTP.sys

0xA8DE2000 \SystemRoot\system32\drivers\kmixer.sys

0x7C900000 \WINDOWS\system32\ntdll.dll

Processes (total 41):

0 System Idle Process

4 System

504 C:\WINDOWS\system32\smss.exe

556 csrss.exe

584 C:\WINDOWS\system32\winlogon.exe

628 C:\WINDOWS\system32\services.exe

640 C:\WINDOWS\system32\lsass.exe

808 C:\WINDOWS\system32\svchost.exe

856 svchost.exe

924 C:\WINDOWS\system32\svchost.exe

1000 svchost.exe

1072 svchost.exe

1256 C:\WINDOWS\system32\spoolsv.exe

1528 C:\WINDOWS\explorer.exe

1660 C:\WINDOWS\system32\igfxtray.exe

1672 C:\WINDOWS\system32\hkcmd.exe

1680 C:\WINDOWS\system32\igfxpers.exe

1688 C:\Program Files\USBScan\USBScan.exe

1696 C:\WINDOWS\PixArt\PAC207\Monitor.exe

1740 C:\WINDOWS\system32\igfxsrvc.exe

1792 C:\WINDOWS\RTHDCPL.EXE

1800 C:\Program Files\DivX\DivX Update\DivXUpdate.exe

1808 C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe

1816 C:\PROGRA~1\DESKTO~1\TLDL.EXE

1888 C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

1904 C:\Program Files\Internet Download Manager\IDMan.exe

1924 C:\WINDOWS\system32\ctfmon.exe

1944 C:\WINDOWS\Datecs\Flex2K.exe

440 C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

300 C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

892 C:\WINDOWS\system32\svchost.exe

980 C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

2380 C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe

2840 alg.exe

2720 C:\Program Files\Internet Download Manager\IEMonitor.exe

992 C:\Documents and Settings\Gangosan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

124 C:\Documents and Settings\Gangosan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

1964 C:\Documents and Settings\Gangosan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

2616 C:\Documents and Settings\Gangosan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

3240 C:\WINDOWS\system32\wscntfy.exe

1840 C:\Documents and Settings\Gangosan\desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)

\\.\D: --> \\.\PhysicalDrive0 at offset 0x0000000d`60fe1200 (NTFS)

\\.\E: --> \\.\PhysicalDrive0 at offset 0x0000001b`3c0f1800 (NTFS)

PhysicalDrive0 Model Number: HDT722516DLAT80, Rev: V43OA70A

Size Device Name MBR Status

--------------------------------------------

153 GB \\.\PhysicalDrive0 Windows XP MBR code detected

SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A

Done!

Ето лога от Гмер GMER 1.0.15.15530 - http://www.gmer.net Rootkit scan 2011-01-13 13:14:33 Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-4 HDT722516DLAT80 rev.V43OA70A Running: c46vt7k9.exe; Driver: C:\DOCUME~1\Gangosan\LOCALS~1\Temp\fwdorkoc.sys ---- System - GMER 1.0.15 ---- SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwAssignProcessToJobObject [0xAA14E610] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwDebugActiveProcess [0xAA14EC10] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwDuplicateObject [0xAA14E730] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwOpenProcess [0xAA14E4B0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwOpenThread [0xAA14E570] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwProtectVirtualMemory [0xAA14E6D0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwQueueApcThread [0xAA14E790] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwSetContextThread [0xAA14E690] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwSetInformationThread [0xAA14E650] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwSetSecurityObject [0xAA14E7D0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwSuspendProcess [0xAA14E510] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwSuspendThread [0xAA14E590] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwTerminateProcess [0xAA14E4D0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwTerminateThread [0xAA14E5D0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwWriteVirtualMemory [0xAA14E750] ---- User code sections - GMER 1.0.15 ---- .text C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe[440] kernel32.dll!SetUnhandledExceptionFilter 7C84495D 4 Bytes [C2, 04, 00, 00] ---- Devices - GMER 1.0.15 ---- AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET) AttachedDevice \Driver\Tcpip \Device\Tcp epfwtdir.sys (ESET Antivirus Network Redirector/ESET) AttachedDevice \Driver\Tcpip \Device\Tcp idmtdi.sys (Internet Download Manager TDI Driver/Tonec Inc.) ---- Registry - GMER 1.0.15 ---- Reg HKLM\SOFTWARE\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}@scansk 0x04 0x51 0xEF 0x61 ... Reg HKLM\SOFTWARE\Classes\CLSID\{ff53fae6-e85b-44fa-894a-342dfab0df0f}@Model 7 Reg HKLM\SOFTWARE\Classes\CLSID\{ff53fae6-e85b-44fa-894a-342dfab0df0f}@Therad 7 Reg HKLM\SOFTWARE\Classes\CLSID\{ff53fae6-e85b-44fa-894a-342dfab0df0f}@MData 0x73 0xD5 0xCF 0xB8 ... ---- EOF - GMER 1.0.15 ----

Благодаря ти, няма проблем с MBR. По-късно тази вечер ще опитам нещо с регистрите. Просто ми трябва малко време.

и аз благодаря за всичко направено до сега

Понеже има грешка за MIRC:

Error - 30.12.2010 ? 14:24:12 | Computer Name = GANGO-FC197B987 | Source = Application Error | ID = 1000

Description = Faulting application mirc.exe, version 7.1.0.0, faulting module motfv3.dll,

version 0.0.0.0, fault address 0x00001741.

При теб MIRC е на дял D, а системният е C. Ще може ли да пробваш деинсталиране на MIRC и инсталация наново?

Имаш някакви отворени портове (GloballyOpenPorts), които мога да оправя, справка:

"2706:TCP" = 2706:TCP:*:Enabled:Inhatch P2P Streaming

"2707:TCP" = 2707:TCP:*:Enabled:Inhatch P2P Streaming

"2708:TCP" = 2708:TCP:*:Enabled:Inhatch P2P Streaming

"2709:TCP" = 2709:TCP:*:Enabled:Inhatch P2P Streaming

Но за това по-късно.

Добре тогава ще преместя инсталацията на мирката в С казвам преместя защото нямам деинсталация понеже аз си правих скрипта

Сега е добре нямам бан влязох добре е тези портове ги знам като се опитах да гледам онлайн телевизия не стана защото телевизията се споделя на принципа на торентите и плеяра на които се гледа телевизията искаше да истегля Инхач плугин ето Тук

Понеже има грешка за MIRC:

Цитат

Error - 30.12.2010 ? 14:24:12 | Computer Name = GANGO-FC197B987 | Source = Application Error | ID = 1000

Description = Faulting application mirc.exe, version 7.1.0.0, faulting module motfv3.dll,

version 0.0.0.0, fault address 0x00001741.

Тази версия на мирката 7.1.0.0 я инсталирах за 5 минути на компа и после я изтрих защото ми даде грешка

Това, че нямаш вече бан е добре. При теб имаше рууткит, нещо подобно на Win32/Rustock:

Ако имаш някакви проблеми със спам по мейла или нещо друго, пиши.

Следва:

Изтеглете OTС.exe от тук и го стартирайте. Така ще бъдат почистени инструменти и файлове, които използвахме в темата. Когато OTС.exe завърши почистването, натиснете Yes за рестарт на Windows. Ако има останали инструменти и логове, почистете и тях.

Благодаря много жив и здрав