Здравейте. Докато си стоя на компа изведнъж ми се показва син екран (за около секунда) и на него някви думи и компютъра се рестартирва.

Мбам нищо няма

Малко пред история Проблем с Уиндоуса

Ето лог на Мбам от 25 януари

DDS.txt

Attach.txt

mbam-log-2011-01-25 (21-27-01).txt

При следващото показване на син екран запиши кода 0x0.... и го напиши в следващия си коментар

Ето и пример :

Привет!Често причината за критичните грешки на Windows съпровождани с BSOD е драйвер..!Когато се определи кой е той се пристъпва към отстраняване на проблема ...!Определянето на проблемния драйвер става с анализ на дъмп-паметта..!

Първо е необходимо да проверите дали е включена опцията да се записва дъмпа..!

My Computer(десен бутон) ===> propertis ===> Advanced..:

Обърнете внимание къде се съхраняват дъмп-файловете след възникване на грешката...!

Архивирайте файловете и ги прикачете в следващия си пост за анализ ....!

Тези Dump File от втората снимка ако може да архивирате и ги прикачите в следващия си пост или ги качете някъде другаде и дай линк..!

Друг вариант който ви предлагам е да се възползвате от програмата BlueScreenView.

Много удобна и качествена програма с автор Nir Sofer....с нея лесно се анализира дъмп-паметта и се определя проблемния драйвер..!Успех..!

Такова нещо ми се показва - Кой код по точно? Дето е 0х0000008Е или След скобите дето са?

Освен това преди да пристъпите към каквито и да са действия, рестартирайте си компютъра и направете ново пълно сканиране с МБАМ..!

Пак ми се появи синия екран и запомнех номера 0х000000D1

Качвам маркираните по долу в розово от Bluecreen

halmacpi.txt

netio.txt

ntkrn.txt

qubvg.txt

Изтеглете ComboFix от тук, тук или тук и го запазете на десктопа си.

• Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.

Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs

• Стартирайте Combo-Fix.com и следвайте инструкциите.

Бележка: ComboFix ще се стартира без инсталирана Recovery Console.

• Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repair режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.

• Следвайте инструкциите, за да позволите на ComboFix да изтегли и инсталира Microsoft Windows Recovery Console. В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

Изберете Yes, за да продължи сканирането за зловреден софтуер.

Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:\ComboFix.txt в следващия Ви коментар в тази тема.

Бележка:

• Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа.
• ComboFix ще нулира всички настройки на Microsoft Internet Explorer, включително да направи IE браузър по подразбиране.
• ComboFix ще изключи autorun функцията на ВСИЧКИ CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и Ви защити от бъдещи вируси/заплахи, които поразяват чрез autorun. Ако това е проблем за вас - моля, уведомете ме.
• ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той ще прекрати интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си.
• В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:\BUG.txt в следващия Ви коментар в тази тема.

Работата на ComboFix, може да отнеме до 20-30 минути, за да завърши, моля имайте търпение.

Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.

Пълното сканиране на Мбам приключи (много рестартирвания на компа имаше) Сега ще почвам горното Комбофикс Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Версия на базата от данни: 5812 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 20.2.2011 г. 14:49:04 mbam-log-2011-02-20 (14-49-04).txt Тип сканиране: Пълно сканиране (C:\|D:\|E:\|F:\|) Сканирани обекти: 294638 Изминало време: 30 минута(и), 30 секунда(и) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 0 Заразени стойности в регистратурата: 0 Заразени информационни обекти в регистратурата: 0 Заразени папки: 0 Заразени файлове: 0 Заразени процеси в паметта: (Не бяха открити зловредни обекти) Заразени модули в паметта: (Не бяха открити зловредни обекти) Заразени ключове в регистратурата: (Не бяха открити зловредни обекти) Заразени стойности в регистратурата: (Не бяха открити зловредни обекти) Заразени информационни обекти в регистратурата: (Не бяха открити зловредни обекти) Заразени папки: (Не бяха открити зловредни обекти) Заразени файлове: (Не бяха открити зловредни обекти)

ComboFix 11-02-19.02 - PC 02.2011 г. 15:21:26.1.2 - x86 Microsoft Windows 7 Ultimate 6.1.7600.0.1251.359.1033.18.2047.1130 [GMT 2:00] Running from: c:\users\PC\Desktop\ComboFix.exe AV: avast! antivirus *Enabled/Outdated* {C37D8F93-0602-E43C-40AA-47DAD597F308} SP: avast! antivirus *Enabled/Outdated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5} SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\l.exe c:\programdata\Microsoft\Network\Downloader\qmgr0.dat c:\programdata\Microsoft\Network\Downloader\qmgr1.dat c:\users\PC\AppData\Roaming\Microsoft\Windows\Recent\eBay.url ----- BITS: Possible infected sites ----- hxxp://download.yandex.ru . ((((((((((((((((((((((((( Files Created from 2011-01-20 to 2011-02-20 ))))))))))))))))))))))))))))))) . 2011-02-20 13:26 . 2011-02-20 13:26 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-02-20 13:18 . 2011-02-20 13:19 -------- d-----w- C:\32788R22FWJFW 2011-02-20 13:16 . 2011-02-20 13:16 -------- d-----w- c:\program files\Registry Easy 2011-02-19 15:04 . 2011-02-19 15:04 -------- d-----w- c:\users\PC\AppData\Local\Bromium 2011-02-19 15:04 . 2011-02-19 15:04 -------- d-----w- c:\users\PC\AppData\Roaming\Yandex 2011-02-19 15:04 . 2011-02-19 15:04 -------- d-----w- c:\users\PC\AppData\Local\Yandex 2011-02-06 13:10 . 2011-02-07 10:59 -------- d-----w- c:\users\PC\AppData\Roaming\goalbit 2011-02-06 13:08 . 2011-02-06 13:08 -------- d-----w- c:\program files\InhatchTeam 2011-01-27 01:52 . 2011-01-27 01:52 -------- d-----w- c:\users\PC\AppData\Local\ESET 2011-01-27 01:34 . 2011-01-27 01:34 -------- d-----w- c:\program files\ESET 2011-01-25 19:20 . 2011-01-25 19:20 -------- d-----w- c:\users\PC\AppData\Roaming\Malwarebytes 2011-01-25 19:20 . 2011-01-25 19:20 -------- d-----w- c:\programdata\Malwarebytes 2011-01-25 19:20 . 2010-12-20 16:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-01-25 19:20 . 2011-01-25 19:20 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-01-25 19:20 . 2010-12-20 16:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-12-04 16:03 . 2010-11-27 03:30 138464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys 2010-12-04 16:02 . 2010-11-27 03:29 111928 ----a-w- c:\windows\system32\PnkBstrB.exe 2010-11-27 03:29 . 2010-11-27 03:29 66872 ----a-w- c:\windows\system32\PnkBstrA.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] 2010-09-28 19:44 1400712 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712] [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712] [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\NBHShellExt] @="{8D2223A2-B3C6-4e32-B096-CDD11F628C60}" [HKEY_CLASSES_ROOT\CLSID\{8D2223A2-B3C6-4e32-B096-CDD11F628C60}] 2009-05-08 14:14 97816 ----a-w- c:\program files\Nero\Nero 9\InCD\NBHshx.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504] "uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-11-06 328056] "Google Update"="c:\users\PC\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-09-09 136176] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-12-03 14944136] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-05-06 7440928] "RemoteControl10"="c:\program files\CyberLink\PowerDVD10\PDVD10Serv.exe" [2010-02-02 87336] "BDRegion"="c:\program files\Cyberlink\Shared files\brs.exe" [2010-03-13 75048] "avast!"="c:\program files\Alwil Software\Avast4\ashDisp.exe" [2009-11-24 81000] "InCD"="c:\program files\Nero\Nero 9\InCD\InCD.exe" [2009-05-08 1116696] "NBHGui"="c:\program files\Nero\Nero 9\InCD\NBHGui.exe" [2009-05-08 1593880] "VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160] "PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2006-11-03 319488] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2010-11-10 35736] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 0 (0x0) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv R2 gupdate;Услуга Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-09 136176] R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232] S1 aswSP;avast! Self Protection; [x] S2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2010/09/09 12:32];c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl [2010-03-13 09:58 87536] S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2009-11-24 20560] S2 aswMonFlt;aswMonFlt;c:\windows\system32\DRIVERS\aswMonFlt.sys [2009-11-24 53328] S2 NeroRegInCDSrv;Nero Registry InCD Service;c:\program files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe [2009-05-08 109080] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-07-09 248936] S3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\DRIVERS\l160x86.sys [2009-10-12 49152] --- Other Services/Drivers In Memory --- *Deregistered* - qubvg . Contents of the 'Scheduled Tasks' folder 2011-02-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-28 17:17] 2011-02-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-28 17:17] 2011-01-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3808203105-2623837121-2832479663-1000Core.job - c:\users\PC\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-09 17:17] 2011-02-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3808203105-2623837121-2832479663-1000UA.job - c:\users\PC\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-09 17:17] . . ------- Supplementary Scan ------- . uStart Page = about:blank uInternet Settings,ProxyOverride = *.local IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: {50827FAF-BBB3-4FBA-8176-BF21BED9B1AD} = 109.104.192.1,109.104.192.2 FF - ProfilePath - c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\djogpos4.default\ FF - prefs.js: browser.search.selectedEngine - Уикипедия (bg) FF - prefs.js: browser.startup.homepage - hxxp://vbox7.com/ FF - prefs.js: keyword.URL - hxxp://www.google.com/search?sourceid=navclient&hl=bg&q= FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Google Toolbar for Firefox: {3112ca9c-de6d-4884-a869-9855de68056c} - %profile%\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}] "ImagePath"="\??\c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl" [HKEY_LOCAL_MACHINE\system\ControlSet001\services\qubvg] . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2011-02-20 15:28:25 ComboFix-quarantined-files.txt 2011-02-20 13:28 Pre-Run: 12 813 787 136 bytes free Post-Run: 15 956 697 088 bytes free - - End Of File - - B19F4936A77E534E5B84FA2411CAC729

Деинсталирайте McAfee Security Scan по стандартния метод (Add/Remove Programs) и почистете като използвате следния инструмент FreeScan Cleaner

Копирайте текста в карето на notepad и го запазваш с име CFScript.txt на десктопа си:

KILLALL::

Driver::
qubvg

Folder::
c:\users\PC\AppData\Local\ESET
c:\program files\ESET

Registry::
[-HKEY_LOCAL_MACHINE\system\ControlSet001\services\qubvg]

DDS::
FF - prefs.js: browser.search.selectedEngine - Уикипедия (bg)

DirLook::
C:\32788R22FWJFW

FileLook::
c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl

След съхранението премести CFScript.txt на иконата на ComboFix.exe

Генерирания рапорт прикачете в следващия си пост..!

Здрасти имах проблеми към към 16 и 30 ми спря интернета ComboFix 11-02-19.02 - PC 02.2011 г. 16:20:47.2.2 - x86 Microsoft Windows 7 Ultimate 6.1.7600.0.1251.359.1033.18.2047.1226 [GMT 2:00] Running from: c:\users\PC\Desktop\ComboFix.exe Command switches used :: c:\users\PC\Desktop\CFScript.txt AV: avast! antivirus *Disabled/Outdated* {C37D8F93-0602-E43C-40AA-47DAD597F308} SP: avast! antivirus *Disabled/Outdated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5} SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\ESET c:\program files\ESET\ESET NOD32 Antivirus\Drivers\eamonm\eamonm.sys c:\program files\ESET\ESET NOD32 Antivirus\eeclnt.exe c:\program files\ESET\ESET NOD32 Antivirus\ekrnScan.dll c:\program files\ESET\ESET NOD32 Antivirus\em000_32.dat c:\program files\ESET\ESET NOD32 Antivirus\em001_32.dat c:\program files\ESET\ESET NOD32 Antivirus\em002_32.dat c:\program files\ESET\ESET NOD32 Antivirus\em003_32.dat c:\program files\ESET\ESET NOD32 Antivirus\em004_32.dat c:\program files\ESET\ESET NOD32 Antivirus\em005_32.dat c:\program files\ESET\ESET NOD32 Antivirus\em006_32.dat c:\program files\ESET\ESET NOD32 Antivirus\em009_32.dat c:\program files\ESET\ESET NOD32 Antivirus\em013_32.dat c:\program files\ESET\ESET NOD32 Antivirus\em015_32.dat c:\program files\ESET\ESET NOD32 Antivirus\eset.chm c:\program files\ESET\ESET NOD32 Antivirus\eula.rtf c:\program files\ESET\ESET NOD32 Antivirus\mfc80.dll c:\program files\ESET\ESET NOD32 Antivirus\mfc80u.dll c:\program files\ESET\ESET NOD32 Antivirus\Microsoft.VC80.CRT.manifest c:\program files\ESET\ESET NOD32 Antivirus\Microsoft.VC80.MFCLOC.manifest c:\program files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird\install.rdf c:\users\PC\AppData\Local\ESET . ((((((((((((((((((((((((( Files Created from 2011-01-20 to 2011-02-20 ))))))))))))))))))))))))))))))) . 2011-02-20 14:25 . 2011-02-20 14:25 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-02-20 14:19 . 2011-02-20 14:19 -------- d-----w- C:\32788R22FWJFW 2011-02-20 13:16 . 2011-02-20 13:16 -------- d-----w- c:\program files\Registry Easy 2011-02-19 15:04 . 2011-02-19 15:04 -------- d-----w- c:\users\PC\AppData\Local\Bromium 2011-02-19 15:04 . 2011-02-19 15:04 -------- d-----w- c:\users\PC\AppData\Roaming\Yandex 2011-02-19 15:04 . 2011-02-19 15:04 -------- d-----w- c:\users\PC\AppData\Local\Yandex 2011-02-06 13:10 . 2011-02-07 10:59 -------- d-----w- c:\users\PC\AppData\Roaming\goalbit 2011-02-06 13:08 . 2011-02-06 13:08 -------- d-----w- c:\program files\InhatchTeam 2011-01-25 19:20 . 2011-01-25 19:20 -------- d-----w- c:\users\PC\AppData\Roaming\Malwarebytes 2011-01-25 19:20 . 2011-01-25 19:20 -------- d-----w- c:\programdata\Malwarebytes 2011-01-25 19:20 . 2010-12-20 16:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-01-25 19:20 . 2011-01-25 19:20 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-01-25 19:20 . 2010-12-20 16:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-12-04 16:03 . 2010-11-27 03:30 138464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys 2010-12-04 16:02 . 2010-11-27 03:29 111928 ----a-w- c:\windows\system32\PnkBstrB.exe 2010-11-27 03:29 . 2010-11-27 03:29 66872 ----a-w- c:\windows\system32\PnkBstrA.exe . (((((((((((((((((((((((((((((((((((((((((((( Look ))))))))))))))))))))))))))))))))))))))))))))))))))))))))) . --- c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl --- Company: CyberLink Corp. File Description: File Version: 1.4.0.2126.20090511 Product Name: Copyright: Copyright © CyberLink Corp. 2009 Original Filename: File size: 87536 Created time: 2010-03-13 09:58 Modified time: 2010-03-13 09:58 MD5: 74EC37B9EAF9FCA015B933A526825C7A SHA1: A1A3F9067E7387C1C005AF19AA578D5699195D43 ---- Directory of C:\32788R22FWJFW ---- 2011-02-20 14:19 . 2009-07-14 02:09 126976 ----a-w- c:\32788r22fwjfw\EN-US\cmd.cfxxe.mui ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] 2010-09-28 19:44 1400712 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712] [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712] [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\NBHShellExt] @="{8D2223A2-B3C6-4e32-B096-CDD11F628C60}" [HKEY_CLASSES_ROOT\CLSID\{8D2223A2-B3C6-4e32-B096-CDD11F628C60}] 2009-05-08 14:14 97816 ----a-w- c:\program files\Nero\Nero 9\InCD\NBHshx.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504] "uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-11-06 328056] "Google Update"="c:\users\PC\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-09-09 136176] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-12-03 14944136] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-05-06 7440928] "RemoteControl10"="c:\program files\CyberLink\PowerDVD10\PDVD10Serv.exe" [2010-02-02 87336] "BDRegion"="c:\program files\Cyberlink\Shared files\brs.exe" [2010-03-13 75048] "avast!"="c:\program files\Alwil Software\Avast4\ashDisp.exe" [2009-11-24 81000] "InCD"="c:\program files\Nero\Nero 9\InCD\InCD.exe" [2009-05-08 1116696] "NBHGui"="c:\program files\Nero\Nero 9\InCD\NBHGui.exe" [2009-05-08 1593880] "VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160] "PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2006-11-03 319488] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2010-11-10 35736] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 0 (0x0) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv R2 gupdate;Услуга Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-09 136176] S1 aswSP;avast! Self Protection; [x] S2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2010/09/09 12:32];c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl [2010-03-13 09:58 87536] S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2009-11-24 20560] S2 aswMonFlt;aswMonFlt;c:\windows\system32\DRIVERS\aswMonFlt.sys [2009-11-24 53328] S2 NeroRegInCDSrv;Nero Registry InCD Service;c:\program files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe [2009-05-08 109080] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-07-09 248936] S3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\DRIVERS\l160x86.sys [2009-10-12 49152] --- Other Services/Drivers In Memory --- *Deregistered* - qubvg . Contents of the 'Scheduled Tasks' folder 2011-02-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-28 17:17] 2011-02-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-28 17:17] 2011-01-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3808203105-2623837121-2832479663-1000Core.job - c:\users\PC\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-09 17:17] 2011-02-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3808203105-2623837121-2832479663-1000UA.job - c:\users\PC\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-09 17:17] . . ------- Supplementary Scan ------- . uStart Page = about:blank uInternet Settings,ProxyOverride = *.local IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: {50827FAF-BBB3-4FBA-8176-BF21BED9B1AD} = 109.104.192.1,109.104.192.2 FF - ProfilePath - c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\djogpos4.default\ FF - prefs.js: browser.search.selectedEngine - Уикипедия (bg) FF - prefs.js: browser.startup.homepage - hxxp://vbox7.com/ FF - prefs.js: keyword.URL - hxxp://www.google.com/search?sourceid=navclient&hl=bg&q= FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Google Toolbar for Firefox: {3112ca9c-de6d-4884-a869-9855de68056c} - %profile%\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}] "ImagePath"="\??\c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl" [HKEY_LOCAL_MACHINE\system\ControlSet001\services\qubvg] . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'Explorer.exe'(4832) c:\program files\Nero\Nero 9\InCD\NBHshx.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\nvvsvc.exe c:\program files\Nero\Nero 9\InCD\InCDSrv.exe c:\windows\system32\nvvsvc.exe c:\program files\Alwil Software\Avast4\aswUpdSv.exe c:\program files\Alwil Software\Avast4\ashServ.exe c:\windows\system32\conhost.exe c:\windows\system32\taskhost.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe c:\windows\system32\PnkBstrA.exe c:\program files\Alwil Software\Avast4\ashMaiSv.exe c:\program files\Alwil Software\Avast4\ashWebSv.exe c:\windows\servicing\TrustedInstaller.exe . ************************************************************************** . Completion time: 2011-02-20 16:29:16 - machine was rebooted ComboFix-quarantined-files.txt 2011-02-20 14:29 ComboFix2.txt 2011-02-20 13:28 Pre-Run: 15 866 646 528 bytes free Post-Run: 16 458 457 088 bytes free - - End Of File - - 4F1972DCA7207065D0654BCD6AAC470F

Здрасти...!Случват се такива работи...!Няма проблем..!

Копирайте текста в карето на notepad и го запазваш с име CFScript.txt на десктопа си:

KILLALL::

Driver::
qubvg

Registry::
[-HKEY_LOCAL_MACHINE\system\ControlSet001\services\qubvg]

След съхранението премести CFScript.txt на иконата на ComboFix.exe

Генерирания рапорт прикачете в следващия си пост..!

ComboFix 11-02-19.02 - PC 02.2011 г. 10:58:18.4.2 - x86 Microsoft Windows 7 Ultimate 6.1.7600.0.1251.359.1033.18.2047.1403 [GMT 2:00] Running from: c:\users\PC\Desktop\ComboFix.exe Command switches used :: c:\users\PC\Desktop\CFScript.txt AV: avast! antivirus *Disabled/Outdated* {C37D8F93-0602-E43C-40AA-47DAD597F308} SP: avast! antivirus *Disabled/Outdated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5} SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_QUBVG -------\Service_qubvg ((((((((((((((((((((((((( Files Created from 2011-01-21 to 2011-02-21 ))))))))))))))))))))))))))))))) . 2011-02-21 09:03 . 2011-02-21 09:03 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-02-21 08:45 . 2011-02-21 08:45 -------- d-----w- c:\program files\Common Files\Skype 2011-02-20 13:16 . 2011-02-20 16:05 -------- d-----w- c:\program files\Registry Easy 2011-02-19 15:04 . 2011-02-19 15:04 -------- d-----w- c:\users\PC\AppData\Local\Bromium 2011-02-19 15:04 . 2011-02-19 15:04 -------- d-----w- c:\users\PC\AppData\Roaming\Yandex 2011-02-19 15:04 . 2011-02-19 15:04 -------- d-----w- c:\users\PC\AppData\Local\Yandex 2011-02-06 13:10 . 2011-02-07 10:59 -------- d-----w- c:\users\PC\AppData\Roaming\goalbit 2011-02-06 13:08 . 2011-02-06 13:08 -------- d-----w- c:\program files\InhatchTeam 2011-01-25 19:20 . 2011-01-25 19:20 -------- d-----w- c:\users\PC\AppData\Roaming\Malwarebytes 2011-01-25 19:20 . 2011-01-25 19:20 -------- d-----w- c:\programdata\Malwarebytes 2011-01-25 19:20 . 2010-12-20 16:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-01-25 19:20 . 2011-01-25 19:20 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-01-25 19:20 . 2010-12-20 16:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-01-25 13:59 . 2011-02-21 09:03 739840 ----a-w- c:\windows\system32\drivers\qubvg.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-12-04 16:03 . 2010-11-27 03:30 138464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys 2010-12-04 16:02 . 2010-11-27 03:29 111928 ----a-w- c:\windows\system32\PnkBstrB.exe 2010-11-27 03:29 . 2010-11-27 03:29 66872 ----a-w- c:\windows\system32\PnkBstrA.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] 2010-09-28 19:44 1400712 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712] [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712] [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\NBHShellExt] @="{8D2223A2-B3C6-4e32-B096-CDD11F628C60}" [HKEY_CLASSES_ROOT\CLSID\{8D2223A2-B3C6-4e32-B096-CDD11F628C60}] 2009-05-08 14:14 97816 ----a-w- c:\program files\Nero\Nero 9\InCD\NBHshx.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504] "uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-11-06 328056] "Google Update"="c:\users\PC\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-09-09 136176] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-01-26 15026056] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-05-06 7440928] "RemoteControl10"="c:\program files\CyberLink\PowerDVD10\PDVD10Serv.exe" [2010-02-02 87336] "BDRegion"="c:\program files\Cyberlink\Shared files\brs.exe" [2010-03-13 75048] "avast!"="c:\program files\Alwil Software\Avast4\ashDisp.exe" [2009-11-24 81000] "InCD"="c:\program files\Nero\Nero 9\InCD\InCD.exe" [2009-05-08 1116696] "NBHGui"="c:\program files\Nero\Nero 9\InCD\NBHGui.exe" [2009-05-08 1593880] "VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160] "PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2006-11-03 319488] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2010-11-10 35736] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 0 (0x0) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv R2 gupdate;Услуга Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-09 136176] S1 aswSP;avast! Self Protection; [x] S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2009-11-24 20560] S2 aswMonFlt;aswMonFlt;c:\windows\system32\DRIVERS\aswMonFlt.sys [2009-11-24 53328] S2 NeroRegInCDSrv;Nero Registry InCD Service;c:\program files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe [2009-05-08 109080] S3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\DRIVERS\l160x86.sys [2009-10-12 49152] . Contents of the 'Scheduled Tasks' folder 2011-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-28 17:17] 2011-02-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-28 17:17] 2011-01-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3808203105-2623837121-2832479663-1000Core.job - c:\users\PC\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-09 17:17] 2011-02-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3808203105-2623837121-2832479663-1000UA.job - c:\users\PC\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-09 17:17] . . ------- Supplementary Scan ------- . uStart Page = about:blank uInternet Settings,ProxyOverride = *.local IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: {50827FAF-BBB3-4FBA-8176-BF21BED9B1AD} = 109.104.192.1,109.104.192.2 FF - ProfilePath - c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\djogpos4.default\ FF - prefs.js: browser.search.selectedEngine - Уикипедия (bg) FF - prefs.js: browser.startup.homepage - hxxp://vbox7.com/ FF - prefs.js: keyword.URL - hxxp://www.google.com/search?sourceid=navclient&hl=bg&q= FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Google Toolbar for Firefox: {3112ca9c-de6d-4884-a869-9855de68056c} - %profile%\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}] "ImagePath"="\??\c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl" . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'Explorer.exe'(5892) c:\program files\Nero\Nero 9\InCD\NBHshx.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\nvvsvc.exe c:\program files\Nero\Nero 9\InCD\InCDSrv.exe c:\windows\system32\nvvsvc.exe c:\program files\Alwil Software\Avast4\aswUpdSv.exe c:\program files\Alwil Software\Avast4\ashServ.exe c:\windows\system32\conhost.exe c:\program files\Bonjour\mDNSResponder.exe c:\windows\system32\taskhost.exe c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe c:\windows\system32\PnkBstrA.exe c:\windows\System32\tcpsvcs.exe c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe c:\program files\Alwil Software\Avast4\ashWebSv.exe c:\program files\Alwil Software\Avast4\ashMaiSv.exe c:\windows\servicing\TrustedInstaller.exe . ************************************************************************** . Completion time: 2011-02-21 11:06:47 - machine was rebooted ComboFix-quarantined-files.txt 2011-02-21 09:06 ComboFix2.txt 2011-02-20 14:56 ComboFix3.txt 2011-02-20 14:29 ComboFix4.txt 2011-02-20 13:28 Pre-Run: 15 738 003 456 bytes free Post-Run: 15 528 321 024 bytes free - - End Of File - - B0D89408AD0858B920C354735095F277

Прекрасно..!Сега какво е състоянието на системата ви...!Предлагам да я наблюдавте известно време....Проблемът със синия екран още налице ли е...и пишете ако има и други нередности..!

Можете да деинсталирате ComboFix така:

Натиснете Start ==> Run ==> въведете командата Combofix /Uninstall ==> OK

Изтеглете OTCleanIt или от тук,стартирайте и натиснете Clean up

Към 11 часа за последно се показа синия екран. Махнах комбофикс. Ако се появи синия екран пак ще пиша. Благодаря за отделеното време дано проблема да е решен. Поздрави.

А между временно може да направим още една две проверки:

Следвайте инструкцията за работа с TDSSKiller (по-подробна инструкция на английски език: TDSSKiller):

• Изтеглете TDSSKiller и го разархивирайте на десктопa.
• Стартирайте TDSSKiller.exe, след това Start Scan.
• Ако бъде открит инфектиран (infected) файл, проверете дали е избрана опцията Cure (по подразбиране). Ако е избрана Cure - натиснете Continue, снимка:

  

• Ако бъде открит подозрителен (suspicious) файл, проверете дали е избрана опцията Skip (по подразбиране). Ако е избрана Skip - натиснете Continue.
• Възможно е програмата да изиска рестарт. Ако е така - потвърдете с Reboot Now.

  -Ако няма рестартиране, отидете на Report. Ще се появи лог файл. Копирайте и поставете съдържанието му в следващия си коментар.

  -Ако има рестартиране, отидете на в системната директория. Там трябва да има файл с формат: TDSSKiller.[Version]_[Date]_[Time]_log.txt. Отворете го, копирайте и поставете съдържанието му в следващия си коментар.

Забележка: За sptd.sys натиснете Skip.

Към 11 часа за последно се показа синия екран. Махнах комбофикс. Ако се появи синия екран пак ще пиша.

Благодаря за отделеното време дано проблема да е решен. Поздрави.

Това преди изпълнението на последния скрипт от пост 12 ли беше или след това ...?

2011/02/21 11:37:47.0998 3384 TDSS rootkit removing tool 2.4.18.0 Feb 21 2011 11:08:08 2011/02/21 11:37:48.0344 3384 ================================================================================ 2011/02/21 11:37:48.0345 3384 SystemInfo: 2011/02/21 11:37:48.0345 3384 2011/02/21 11:37:48.0345 3384 OS Version: 6.1.7600 ServicePack: 0.0 2011/02/21 11:37:48.0345 3384 Product type: Workstation 2011/02/21 11:37:48.0345 3384 ComputerName: PC-PC 2011/02/21 11:37:48.0345 3384 UserName: PC 2011/02/21 11:37:48.0345 3384 Windows directory: C:\Windows 2011/02/21 11:37:48.0345 3384 System windows directory: C:\Windows 2011/02/21 11:37:48.0345 3384 Processor architecture: Intel x86 2011/02/21 11:37:48.0345 3384 Number of processors: 2 2011/02/21 11:37:48.0345 3384 Page size: 0x1000 2011/02/21 11:37:48.0345 3384 Boot type: Normal boot 2011/02/21 11:37:48.0345 3384 ================================================================================ 2011/02/21 11:37:48.0653 3384 Initialize success 2011/02/21 11:38:15.0454 1024 ================================================================================ 2011/02/21 11:38:15.0454 1024 Scan started 2011/02/21 11:38:15.0454 1024 Mode: Manual; 2011/02/21 11:38:15.0454 1024 ================================================================================ 2011/02/21 11:38:15.0849 1024 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys 2011/02/21 11:38:15.0898 1024 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys 2011/02/21 11:38:15.0934 1024 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys 2011/02/21 11:38:15.0977 1024 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys 2011/02/21 11:38:16.0009 1024 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys 2011/02/21 11:38:16.0035 1024 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys 2011/02/21 11:38:16.0088 1024 AFD (ddc040fdb01ef1712a6b13e52afb104c) C:\Windows\system32\drivers\afd.sys 2011/02/21 11:38:16.0113 1024 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys 2011/02/21 11:38:16.0131 1024 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys 2011/02/21 11:38:16.0158 1024 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys 2011/02/21 11:38:16.0176 1024 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys 2011/02/21 11:38:16.0198 1024 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys 2011/02/21 11:38:16.0226 1024 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys 2011/02/21 11:38:16.0251 1024 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys 2011/02/21 11:38:16.0286 1024 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\Windows\system32\DRIVERS\amdsata.sys 2011/02/21 11:38:16.0317 1024 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys 2011/02/21 11:38:16.0337 1024 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\Windows\system32\DRIVERS\amdxata.sys 2011/02/21 11:38:16.0360 1024 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys 2011/02/21 11:38:16.0404 1024 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys 2011/02/21 11:38:16.0427 1024 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys 2011/02/21 11:38:16.0459 1024 aswFsBlk (b4079a98f294a3e262872cb76f4849f0) C:\Windows\system32\DRIVERS\aswFsBlk.sys 2011/02/21 11:38:16.0482 1024 aswMonFlt (e2851cb7dbb831888eaea46c55c05e44) C:\Windows\system32\DRIVERS\aswMonFlt.sys 2011/02/21 11:38:16.0500 1024 aswRdr (8080d683489c99cbace813f6fa4069cc) C:\Windows\system32\drivers\aswRdr.sys 2011/02/21 11:38:16.0532 1024 aswSP (2e5a2ad5004b55df39b7606130a88142) C:\Windows\system32\drivers\aswSP.sys 2011/02/21 11:38:16.0574 1024 aswTdi (d4c83a37efadfa2c398362e0776e3773) C:\Windows\system32\drivers\aswTdi.sys 2011/02/21 11:38:16.0607 1024 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys 2011/02/21 11:38:16.0628 1024 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys 2011/02/21 11:38:16.0653 1024 AtcL001 (20b956a7d7484915b647fa13569ab557) C:\Windows\system32\DRIVERS\l160x86.sys 2011/02/21 11:38:16.0732 1024 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys 2011/02/21 11:38:16.0766 1024 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys 2011/02/21 11:38:16.0802 1024 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys 2011/02/21 11:38:16.0840 1024 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys 2011/02/21 11:38:16.0867 1024 bowser (fcafaef6798d7b51ff029f99a9898961) C:\Windows\system32\DRIVERS\bowser.sys 2011/02/21 11:38:16.0890 1024 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys 2011/02/21 11:38:16.0910 1024 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys 2011/02/21 11:38:16.0945 1024 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys 2011/02/21 11:38:16.0975 1024 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys 2011/02/21 11:38:16.0998 1024 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys 2011/02/21 11:38:17.0022 1024 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys 2011/02/21 11:38:17.0040 1024 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys 2011/02/21 11:38:17.0088 1024 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys 2011/02/21 11:38:17.0123 1024 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys 2011/02/21 11:38:17.0150 1024 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys 2011/02/21 11:38:17.0177 1024 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys 2011/02/21 11:38:17.0217 1024 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys 2011/02/21 11:38:17.0233 1024 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys 2011/02/21 11:38:17.0254 1024 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys 2011/02/21 11:38:17.0281 1024 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys 2011/02/21 11:38:17.0306 1024 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys 2011/02/21 11:38:17.0335 1024 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys 2011/02/21 11:38:17.0381 1024 CSC (27c9490bdd0ae48911ab8cf1932591ed) C:\Windows\system32\drivers\csc.sys 2011/02/21 11:38:17.0428 1024 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) C:\Windows\system32\Drivers\dfsc.sys 2011/02/21 11:38:17.0451 1024 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys 2011/02/21 11:38:17.0488 1024 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys 2011/02/21 11:38:17.0545 1024 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys 2011/02/21 11:38:17.0593 1024 DXGKrnl (8b6c3464d7fac176500061dbfff42ad4) C:\Windows\System32\drivers\dxgkrnl.sys 2011/02/21 11:38:17.0768 1024 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys 2011/02/21 11:38:17.0887 1024 ElbyCDIO (44996a2addd2db7454f2ca40b67d8941) C:\Windows\system32\Drivers\ElbyCDIO.sys 2011/02/21 11:38:17.0920 1024 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys 2011/02/21 11:38:17.0953 1024 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys 2011/02/21 11:38:17.0993 1024 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys 2011/02/21 11:38:18.0015 1024 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys 2011/02/21 11:38:18.0049 1024 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys 2011/02/21 11:38:18.0084 1024 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys 2011/02/21 11:38:18.0104 1024 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys 2011/02/21 11:38:18.0126 1024 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys 2011/02/21 11:38:18.0155 1024 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys 2011/02/21 11:38:18.0185 1024 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys 2011/02/21 11:38:18.0203 1024 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys 2011/02/21 11:38:18.0240 1024 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\Windows\system32\DRIVERS\fvevol.sys 2011/02/21 11:38:18.0262 1024 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys 2011/02/21 11:38:18.0319 1024 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys 2011/02/21 11:38:18.0363 1024 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\Windows\system32\drivers\HdAudio.sys 2011/02/21 11:38:18.0391 1024 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys 2011/02/21 11:38:18.0420 1024 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys 2011/02/21 11:38:18.0446 1024 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys 2011/02/21 11:38:18.0480 1024 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys 2011/02/21 11:38:18.0510 1024 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys 2011/02/21 11:38:18.0547 1024 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys 2011/02/21 11:38:18.0587 1024 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys 2011/02/21 11:38:18.0611 1024 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys 2011/02/21 11:38:18.0627 1024 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys 2011/02/21 11:38:18.0658 1024 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\Windows\system32\DRIVERS\iaStorV.sys 2011/02/21 11:38:18.0690 1024 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys 2011/02/21 11:38:18.0727 1024 InCDFs (76abfdda65f55c748251113f0384f284) C:\Windows\system32\DRIVERS\InCDFs.sys 2011/02/21 11:38:18.0746 1024 InCDPass (57bb1728fa4c4d11e446c35c554a4f71) C:\Windows\system32\DRIVERS\InCDPass.sys 2011/02/21 11:38:18.0771 1024 InCDRec (d480fc3bd1ba022ad78f867f59464a4e) C:\Windows\system32\DRIVERS\InCDRec.sys 2011/02/21 11:38:18.0861 1024 IntcAzAudAddService (1dd40eb58f202880d24fc06a01cc729d) C:\Windows\system32\drivers\RTKVHDA.sys 2011/02/21 11:38:18.0918 1024 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys 2011/02/21 11:38:18.0946 1024 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys 2011/02/21 11:38:18.0983 1024 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys 2011/02/21 11:38:19.0009 1024 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys 2011/02/21 11:38:19.0033 1024 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys 2011/02/21 11:38:19.0066 1024 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys 2011/02/21 11:38:19.0086 1024 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys 2011/02/21 11:38:19.0110 1024 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys 2011/02/21 11:38:19.0147 1024 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys 2011/02/21 11:38:19.0167 1024 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys 2011/02/21 11:38:19.0193 1024 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys 2011/02/21 11:38:19.0234 1024 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\Windows\system32\Drivers\ksecpkg.sys 2011/02/21 11:38:19.0288 1024 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys 2011/02/21 11:38:19.0322 1024 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys 2011/02/21 11:38:19.0348 1024 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys 2011/02/21 11:38:19.0384 1024 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys 2011/02/21 11:38:19.0404 1024 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys 2011/02/21 11:38:19.0423 1024 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys 2011/02/21 11:38:19.0468 1024 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys 2011/02/21 11:38:19.0498 1024 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys 2011/02/21 11:38:19.0524 1024 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys 2011/02/21 11:38:19.0553 1024 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys 2011/02/21 11:38:19.0577 1024 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys 2011/02/21 11:38:19.0597 1024 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys 2011/02/21 11:38:19.0620 1024 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys 2011/02/21 11:38:19.0643 1024 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys 2011/02/21 11:38:19.0670 1024 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys 2011/02/21 11:38:19.0699 1024 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys 2011/02/21 11:38:19.0744 1024 mrxsmb (f1b6aa08497ea86ca6ef6f7a08b0bfb8) C:\Windows\system32\DRIVERS\mrxsmb.sys 2011/02/21 11:38:19.0774 1024 mrxsmb10 (5613358b4050f46f5a9832da8050d6e4) C:\Windows\system32\DRIVERS\mrxsmb10.sys 2011/02/21 11:38:19.0808 1024 mrxsmb20 (25c9792778d80feb4c8201e62281bfdf) C:\Windows\system32\DRIVERS\mrxsmb20.sys 2011/02/21 11:38:19.0833 1024 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys 2011/02/21 11:38:19.0856 1024 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys 2011/02/21 11:38:19.0888 1024 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys 2011/02/21 11:38:19.0909 1024 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys 2011/02/21 11:38:19.0934 1024 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys 2011/02/21 11:38:19.0986 1024 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys 2011/02/21 11:38:20.0006 1024 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys 2011/02/21 11:38:20.0023 1024 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys 2011/02/21 11:38:20.0055 1024 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys 2011/02/21 11:38:20.0085 1024 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys 2011/02/21 11:38:20.0106 1024 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys 2011/02/21 11:38:20.0124 1024 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys 2011/02/21 11:38:20.0158 1024 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) C:\Windows\system32\DRIVERS\ASACPI.sys 2011/02/21 11:38:20.0177 1024 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys 2011/02/21 11:38:20.0222 1024 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys 2011/02/21 11:38:20.0268 1024 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys 2011/02/21 11:38:20.0295 1024 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys 2011/02/21 11:38:20.0320 1024 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys 2011/02/21 11:38:20.0342 1024 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys 2011/02/21 11:38:20.0359 1024 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys 2011/02/21 11:38:20.0376 1024 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys 2011/02/21 11:38:20.0427 1024 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys 2011/02/21 11:38:20.0444 1024 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\Windows\system32\DRIVERS\netbt.sys 2011/02/21 11:38:20.0505 1024 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys 2011/02/21 11:38:20.0535 1024 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys 2011/02/21 11:38:20.0559 1024 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys 2011/02/21 11:38:20.0609 1024 Ntfs (3795dcd21f740ee799fb7223234215af) C:\Windows\system32\drivers\Ntfs.sys 2011/02/21 11:38:20.0656 1024 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys 2011/02/21 11:38:20.0883 1024 nvlddmkm (377140a534d013bd661c69f1741de43c) C:\Windows\system32\DRIVERS\nvlddmkm.sys 2011/02/21 11:38:21.0068 1024 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\Windows\system32\DRIVERS\nvraid.sys 2011/02/21 11:38:21.0098 1024 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\Windows\system32\DRIVERS\nvstor.sys 2011/02/21 11:38:21.0143 1024 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys 2011/02/21 11:38:21.0169 1024 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys 2011/02/21 11:38:21.0247 1024 PAC7302 (81a0921e2a3fdcf840e43af64bf96ea2) C:\Windows\system32\DRIVERS\PAC7302.SYS 2011/02/21 11:38:21.0278 1024 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys 2011/02/21 11:38:21.0299 1024 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys 2011/02/21 11:38:21.0324 1024 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys 2011/02/21 11:38:21.0352 1024 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys 2011/02/21 11:38:21.0377 1024 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys 2011/02/21 11:38:21.0400 1024 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys 2011/02/21 11:38:21.0425 1024 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys 2011/02/21 11:38:21.0459 1024 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys 2011/02/21 11:38:21.0583 1024 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys 2011/02/21 11:38:21.0608 1024 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys 2011/02/21 11:38:21.0656 1024 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys 2011/02/21 11:38:21.0692 1024 PxHelp20 (183ef96bcc2ec3d5294cb2c2c0ecbcd1) C:\Windows\system32\Drivers\PxHelp20.sys 2011/02/21 11:38:21.0738 1024 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys 2011/02/21 11:38:21.0787 1024 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys 2011/02/21 11:38:21.0810 1024 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys 2011/02/21 11:38:21.0837 1024 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys 2011/02/21 11:38:21.0862 1024 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys 2011/02/21 11:38:21.0892 1024 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys 2011/02/21 11:38:21.0931 1024 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys 2011/02/21 11:38:21.0953 1024 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys 2011/02/21 11:38:21.0981 1024 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys 2011/02/21 11:38:22.0006 1024 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys 2011/02/21 11:38:22.0037 1024 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys 2011/02/21 11:38:22.0081 1024 RDPDR (c5ff95883ffef704d50c40d21cfb3ab5) C:\Windows\system32\drivers\rdpdr.sys 2011/02/21 11:38:22.0125 1024 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys 2011/02/21 11:38:22.0155 1024 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys 2011/02/21 11:38:22.0185 1024 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys 2011/02/21 11:38:22.0213 1024 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys 2011/02/21 11:38:22.0273 1024 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys 2011/02/21 11:38:22.0299 1024 s3cap (5423d8437051e89dd34749f242c98648) C:\Windows\system32\DRIVERS\vms3cap.sys 2011/02/21 11:38:22.0334 1024 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys 2011/02/21 11:38:22.0361 1024 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys 2011/02/21 11:38:22.0408 1024 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 2011/02/21 11:38:22.0446 1024 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys 2011/02/21 11:38:22.0473 1024 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys 2011/02/21 11:38:22.0492 1024 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys 2011/02/21 11:38:22.0545 1024 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys 2011/02/21 11:38:22.0567 1024 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\DRIVERS\sffp_mmc.sys 2011/02/21 11:38:22.0587 1024 sffp_sd (a0708bbd07d245c06ff9de549ca47185) C:\Windows\system32\DRIVERS\sffp_sd.sys 2011/02/21 11:38:22.0609 1024 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys 2011/02/21 11:38:22.0663 1024 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys 2011/02/21 11:38:22.0696 1024 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys 2011/02/21 11:38:22.0716 1024 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys 2011/02/21 11:38:22.0746 1024 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys 2011/02/21 11:38:22.0787 1024 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys 2011/02/21 11:38:22.0849 1024 srv (dd0dd124d95390fdffa7fb6283923ed4) C:\Windows\system32\DRIVERS\srv.sys 2011/02/21 11:38:22.0886 1024 srv2 (59ef6d9c690e89d51b0692ccb13a06fc) C:\Windows\system32\DRIVERS\srv2.sys 2011/02/21 11:38:22.0915 1024 srvnet (08f28676802b58138e48a2b40caf6204) C:\Windows\system32\DRIVERS\srvnet.sys 2011/02/21 11:38:22.0958 1024 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys 2011/02/21 11:38:22.0999 1024 storflt (957e346ca948668f2496a6ccf6ff82cc) C:\Windows\system32\DRIVERS\vmstorfl.sys 2011/02/21 11:38:23.0021 1024 storvsc (d5751969dc3e4b88bf482ac8ec9fe019) C:\Windows\system32\DRIVERS\storvsc.sys 2011/02/21 11:38:23.0039 1024 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys 2011/02/21 11:38:23.0110 1024 Tcpip (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\drivers\tcpip.sys 2011/02/21 11:38:23.0181 1024 TCPIP6 (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\DRIVERS\tcpip.sys 2011/02/21 11:38:23.0212 1024 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys 2011/02/21 11:38:23.0242 1024 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys 2011/02/21 11:38:23.0265 1024 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys 2011/02/21 11:38:23.0291 1024 tdx (cb39e896a2a83702d1737bfd402b3542) C:\Windows\system32\DRIVERS\tdx.sys 2011/02/21 11:38:23.0313 1024 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys 2011/02/21 11:38:23.0369 1024 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys 2011/02/21 11:38:23.0401 1024 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys 2011/02/21 11:38:23.0419 1024 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys 2011/02/21 11:38:23.0449 1024 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\Windows\system32\DRIVERS\udfs.sys 2011/02/21 11:38:23.0497 1024 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys 2011/02/21 11:38:23.0528 1024 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys 2011/02/21 11:38:23.0557 1024 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys 2011/02/21 11:38:23.0593 1024 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\Windows\system32\DRIVERS\usbccgp.sys 2011/02/21 11:38:23.0613 1024 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys 2011/02/21 11:38:23.0642 1024 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\Windows\system32\DRIVERS\usbehci.sys 2011/02/21 11:38:23.0666 1024 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\Windows\system32\DRIVERS\usbhub.sys 2011/02/21 11:38:23.0686 1024 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\Windows\system32\DRIVERS\usbohci.sys 2011/02/21 11:38:23.0712 1024 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys 2011/02/21 11:38:23.0736 1024 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\Windows\system32\DRIVERS\USBSTOR.SYS 2011/02/21 11:38:23.0762 1024 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\Windows\system32\DRIVERS\usbuhci.sys 2011/02/21 11:38:23.0810 1024 VClone (94d73b62e458fb56c9ce60aa96d914f9) C:\Windows\system32\DRIVERS\VClone.sys 2011/02/21 11:38:23.0833 1024 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys 2011/02/21 11:38:23.0856 1024 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys 2011/02/21 11:38:23.0882 1024 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys 2011/02/21 11:38:23.0908 1024 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys 2011/02/21 11:38:23.0936 1024 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys 2011/02/21 11:38:23.0970 1024 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys 2011/02/21 11:38:23.0994 1024 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys 2011/02/21 11:38:24.0029 1024 vmbus (379b349f65f453d2a6e75ea6b7448e49) C:\Windows\system32\DRIVERS\vmbus.sys 2011/02/21 11:38:24.0058 1024 VMBusHID (ec2bbab4b84d0738c6c83d2234dc36fe) C:\Windows\system32\DRIVERS\VMBusHID.sys 2011/02/21 11:38:24.0085 1024 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys 2011/02/21 11:38:24.0120 1024 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys 2011/02/21 11:38:24.0268 1024 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys 2011/02/21 11:38:24.0303 1024 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys 2011/02/21 11:38:24.0333 1024 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys 2011/02/21 11:38:24.0369 1024 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys 2011/02/21 11:38:24.0398 1024 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys 2011/02/21 11:38:24.0412 1024 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys 2011/02/21 11:38:24.0452 1024 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys 2011/02/21 11:38:24.0488 1024 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys 2011/02/21 11:38:24.0553 1024 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys 2011/02/21 11:38:24.0569 1024 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys 2011/02/21 11:38:24.0645 1024 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys 2011/02/21 11:38:24.0690 1024 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys 2011/02/21 11:38:24.0737 1024 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys 2011/02/21 11:38:24.0808 1024 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC} (74ec37b9eaf9fca015b933a526825c7a) C:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl 2011/02/21 11:38:24.0836 1024 ================================================================================ 2011/02/21 11:38:24.0836 1024 Scan finished 2011/02/21 11:38:24.0836 1024 ================================================================================

Супер...всичко тук е наред...!Ще изчакаме да видим .....дали ще има отново син екран...!

Идеално!