Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Версия на базата от данни: 6319 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 9.4.2011 г. 18:15:38 mbam-log-2011-04-09 (18-15-38).txt Тип сканиране: Пълно сканиране (C:\|D:\|E:\|) Сканирани обекти: 263661 Изминало време: 34 минута(и), 41 секунда(и) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 0 Заразени стойности в регистратурата: 0 Заразени информационни обекти в регистратурата: 0 Заразени папки: 0 Заразени файлове: 1 Заразени процеси в паметта: (Не бяха открити зловредни обекти) Заразени модули в паметта: (Не бяха открити зловредни обекти) Заразени ключове в регистратурата: (Не бяха открити зловредни обекти) Заразени стойности в регистратурата: (Не бяха открити зловредни обекти) Заразени информационни обекти в регистратурата: (Не бяха открити зловредни обекти) Заразени папки: (Не бяха открити зловредни обекти) Заразени файлове: c:\Users\Martin\AppData\Roaming\WINLOGON.EXE (Malware.Generic) -> Quarantined and deleted successfully. Заради това нещо, като пуснах windows 7,вместо декстопа се появяваше един черен екран и автоматично се отваряше Мy Computer.Благодарение на Malwarebytes' Anti-Malware го сложи в карантина този файл и сега чакам второто сканиране да се уверя,че повече няма такива неща.Да попитам дали е добре вече и дали може да го делна този файл ?Също да попитам дали е добре да имам Malwarebytes' Anti-Malware и АVG Anti-virus 2011 ?

Редактирано 10 април 201115 г. от nologo (преглед на промените)

Преди да те поеме някой от HJT екипа, те съветвам да изпълниш всичко от тази тема - http://www.kaldata.com/forums/index.php?showtopic=132819 съответно да сканираш с DDS

От файла Attach . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_11-03-05.01) . Microsoft Windows 7 Ultimate Boot Device: \Device\HarddiskVolume1 Install Date: 27.7.2010 г. 12:57:32 System Uptime: 9.4.2011 г. 18:38:16 (1 hours ago) . Motherboard: ASRock | | G31M-VS Processor: Intel® Celeron® CPU E3200 @ 2.40GHz | CPUSocket | 2393/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 58 GiB total, 37,349 GiB free. D: is FIXED (NTFS) - 195 GiB total, 36,304 GiB free. E: is FIXED (NTFS) - 212 GiB total, 4,452 GiB free. F: is CDROM () G: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP258: 24.3.2011 г. 07:51:59 - Windows Update . ==== Installed Programs ====================== . 2007 Microsoft Office Suite Service Pack 2 (SP2) Adobe Download Manager Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader 9.4.3 Advertising Center AVG 2011 BS.Player FREE BS_Player Toolbar CCleaner ConvertHelper 2.2 DAEMON Tools Toolbar DolbyFiles Easy CD-DA Extractor 12 FlexType 2K Futuremark SystemInfo GameSpy Arcade Google Chrome Google Update Helper Google чµјя ImagXpress Intel® Graphics Media Accelerator Driver Intel® TV Wizard Java Auto Updater Java 6 Update 24 K-Lite Mega Codec Pack 6.2.0 Malwarebytes' Anti-Malware McAfee Security Scan Plus Medieval II Total War Menu Templates - Starter Kit Microsoft .NET Framework 1.1 Microsoft .NET Framework 4 Client Profile Microsoft Games for Windows - LIVE Microsoft Games for Windows - LIVE Redistributable Microsoft Office 2007 Primary Interop Assemblies Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Speech 5.1 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual J# .NET Redistributable Package 1.1 Movie Templates - Starter Kit Mozilla Firefox 4.0 (x86 bg) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) MSXML 4.0 SP2 Parser and SDK Nero 9 Trial Nero BurnRights Nero ControlCenter Nero CoverDesigner Nero Disc Copy Gadget Nero DiscSpeed Nero DriveSpeed Nero InfoTool Nero Installer Nero PhotoSnap Nero Recode Nero Rescue Agent Nero ShowTime Nero StartSmart Nero Vision Nero WaveEditor NeroBurningROM NeroExpress neroxml NVIDIA PhysX v8.05.26 OLYMPUS Master 2 OutlookAddInNet3Setup SA Dictionary 2005 T2 Samsung Kies SAMSUNG USB Driver for Mobile Phones Skype Toolbars SkypeTrance 1.0 (ґµёЅст°»ёр°Ѕµ) Skype™ 5.1 SoundTrax System Requirements Lab System Requirements Lab CYRI The KMPlayer (remove only) TreeSize Professional 5.3.4 Visual Studio Tools for the Office system 3.0 Runtime Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) Westwood Shared Internet Components Winamp Winamp Detector Plug-in Windows Media Player Firefox Plugin WinRAR archiver µTorrent . ==== Event Viewer Messages From Past Week ======== . 9.4.2011 і. 18:38:42, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 9.4.2011 і. 18:38:42, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 9.4.2011 і. 18:38:29, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 9.4.2011 і. 18:17:15, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 9.4.2011 і. 18:17:15, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 9.4.2011 і. 18:17:00, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 9.4.2011 і. 17:03:09, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 9.4.2011 і. 17:03:09, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 9.4.2011 і. 17:02:56, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 9.4.2011 і. 15:54:06, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 9.4.2011 і. 15:54:06, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 9.4.2011 і. 15:53:51, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 9.4.2011 і. 15:49:19, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004 9.4.2011 і. 15:28:13, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004 9.4.2011 і. 15:07:33, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 9.4.2011 і. 15:07:33, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 9.4.2011 і. 15:07:21, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 9.4.2011 і. 09:29:47, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 9.4.2011 і. 09:29:47, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 9.4.2011 і. 09:29:38, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 9.4.2011 і. 09:27:04, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD Avgldx86 Avgmfx86 Avgtdix CSC DfsC discache NetBIOS NetBT nsiproxy Psched rdbss spldr sptd tdx Wanarpv6 WfpLwf 9.4.2011 і. 09:27:04, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start. 9.4.2011 і. 09:27:04, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning. 9.4.2011 і. 09:27:04, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning. 9.4.2011 і. 09:27:04, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start. 9.4.2011 і. 09:27:04, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start. 9.4.2011 і. 09:27:04, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning. 9.4.2011 і. 09:27:04, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start. 9.4.2011 і. 09:27:04, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start. 9.4.2011 і. 09:27:04, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning. 9.4.2011 і. 09:27:04, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning. 9.4.2011 і. 09:26:44, Error: sptd [4] - Driver detected an internal error in its data structures for . 9.4.2011 і. 09:22:46, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 9.4.2011 і. 09:22:46, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 9.4.2011 і. 09:22:38, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 9.4.2011 і. 09:11:14, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD Avgldx86 Avgmfx86 Avgtdix CSC DfsC discache NetBIOS NetBT nsiproxy Psched rdbss spldr sptd tdx Wanarpv6 WfpLwf 9.4.2011 і. 09:11:14, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start. 9.4.2011 і. 09:11:14, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning. 9.4.2011 і. 09:11:14, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning. 9.4.2011 і. 09:11:14, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start. 9.4.2011 і. 09:11:14, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start. 9.4.2011 і. 09:11:14, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning. 9.4.2011 і. 09:11:14, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start. 9.4.2011 і. 09:11:14, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start. 9.4.2011 і. 09:11:14, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning. 9.4.2011 і. 09:11:14, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning. 9.4.2011 і. 09:10:54, Error: sptd [4] - Driver detected an internal error in its data structures for . 9.4.2011 і. 09:09:41, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 9.4.2011 і. 09:09:41, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 9.4.2011 і. 09:09:33, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 9.4.2011 і. 09:03:22, Error: VDS Basic Provider [1] - Unexpected failure. Error code: D@01010004 9.4.2011 і. 08:35:09, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 9.4.2011 і. 08:35:09, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 9.4.2011 і. 08:34:59, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 9.4.2011 і. 08:26:03, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004 9.4.2011 і. 08:24:55, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 9.4.2011 і. 08:24:55, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 9.4.2011 і. 08:24:35, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 9.4.2011 і. 08:21:51, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 9.4.2011 і. 08:21:51, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 9.4.2011 і. 08:21:31, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 9.4.2011 і. 08:12:44, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 9.4.2011 і. 08:12:44, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 9.4.2011 і. 08:12:25, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 8.4.2011 і. 13:44:34, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 8.4.2011 і. 13:44:34, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 8.4.2011 і. 13:44:23, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 8.4.2011 і. 11:27:38, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 8.4.2011 і. 11:27:38, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 8.4.2011 і. 11:27:21, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 8.4.2011 і. 08:22:18, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 8.4.2011 і. 08:22:18, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 8.4.2011 і. 08:22:02, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 7.4.2011 і. 16:17:40, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service. 7.4.2011 і. 15:55:24, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 7.4.2011 і. 15:55:24, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 7.4.2011 і. 15:55:06, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 7.4.2011 і. 11:53:31, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 7.4.2011 і. 11:53:31, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 7.4.2011 і. 11:53:12, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 7.4.2011 і. 07:51:34, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 7.4.2011 і. 07:51:34, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 7.4.2011 і. 07:51:17, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 6.4.2011 і. 13:59:21, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 6.4.2011 і. 13:59:21, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 6.4.2011 і. 13:59:04, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 6.4.2011 і. 08:51:35, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 6.4.2011 і. 08:51:35, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 6.4.2011 і. 08:51:21, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 6.4.2011 і. 00:19:49, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 6.4.2011 і. 00:19:49, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 6.4.2011 і. 00:19:40, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 5.4.2011 і. 15:45:20, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 5.4.2011 і. 15:45:20, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 5.4.2011 і. 15:45:12, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 5.4.2011 і. 13:54:42, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 5.4.2011 і. 13:54:42, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 5.4.2011 і. 13:54:33, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 5.4.2011 і. 12:29:40, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 5.4.2011 і. 12:29:40, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 5.4.2011 і. 12:29:31, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 5.4.2011 і. 07:42:00, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 5.4.2011 і. 07:42:00, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 5.4.2011 і. 07:41:48, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 4.4.2011 і. 13:37:10, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 4.4.2011 і. 13:37:10, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 4.4.2011 і. 13:37:01, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 4.4.2011 і. 10:55:12, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 4.4.2011 і. 10:55:12, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 4.4.2011 і. 10:54:55, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 4.4.2011 і. 07:57:11, Error: Service Control Manager [7000] - The atksgt service failed to start due to the following error: This driver has been blocked from loading 4.4.2011 і. 07:57:11, Error: Application Popup [875] - Driver atksgt.sys has been blocked from loading. 4.4.2011 і. 07:56:55, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 3.4.2011 і. 11:02:31, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service. . ==== End Of File =========================== От файла DDS . DDS (Ver_11-03-05.01) - NTFSx86 Run by Martin at 19:07:06,65 on ±єЎ 09.04.2011 Ј. Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_24 Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.2038.402 [GMT 3:00] . AV: AVG Anti-Virus 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0} SP: AVG Anti-Virus 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\PROGRA~1\AVG\AVG10\avgchsvx.exe C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\AVG\AVG10\avgwdsvc.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\FsUsbExService.Exe C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe C:\Program Files\AVG\AVG10\avgam.exe C:\Program Files\AVG\AVG10\avgnsx.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskhost.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\igfxpers.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Samsung\Kies\KiesTrayAgent.exe C:\Program Files\AVG\AVG10\avgtray.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\DAEMON Tools Lite\DTLite.exe C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe C:\Program Files\Datecs\FlexType 2K\FType2K.exe C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe C:\Windows\system32\conhost.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files\AVG\AVG10\avgcsrvx.exe C:\Program Files\Skype\Phone\Skype.exe C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\PROGRA~1\AVG\AVG10\avgrsx.exe C:\Program Files\AVG\AVG10\avgcsrvx.exe C:\Program Files\uTorrent\uTorrent.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Users\Martin\Desktop\dds.scr C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1750559 uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll uURLSearchHooks: BS Player Toolbar: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - c:\program files\bs_player\tbBS_P.dll mURLSearchHooks: BS Player Toolbar: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - c:\program files\bs_player\tbBS_P.dll mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: BS Player Toolbar: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - c:\program files\bs_player\tbBS_P.dll TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg10\toolbar\IEToolbar.dll TB: BS Player Toolbar: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - c:\program files\bs_player\tbBS_P.dll uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun uRun: [OM2_Monitor] "c:\program files\olympus\olympus master 2\MMonitor.exe" uRun: [KiesHelper] c:\program files\samsung\kies\KiesHelper.exe /s uRun: [KiesTrayAgent] c:\program files\samsung\kies\KiesTrayAgent.exe mRun: [WinampAgent] "c:\program files\winamp\winampa.exe" mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe" mRun: [igfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [OM2_Monitor] "c:\program files\olympus\olympus master 2\FirstStart.exe" /OM mRun: [KiesTrayAgent] c:\program files\samsung\kies\KiesTrayAgent.exe mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [Malwarebytes' Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\flexty~1.lnk - c:\program files\datecs\flextype 2k\FType2K.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg10\toolbar\IEToolbar.dll Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: igfxcui - igfxdev.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll . ================= FIREFOX =================== . FF - ProfilePath - c:\users\martin\appdata\roaming\mozilla\firefox\profiles\nozwtki4.default\ FF - prefs.js: browser.search.selectedEngine - AVG Secure Search FF - prefs.js: browser.startup.homepage - www.google.bg FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=4c8874e9&v=6.011.025.001&i=23&tp=ab&iy=&ychte=us&lng=bg&q= FF - component: c:\program files\avg\avg10\firefox\components\avgssff.dll FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\xpavgtbapi.dll FF - component: c:\users\martin\appdata\roaming\mozilla\firefox\profiles\nozwtki4.default\extensions\[email protected]\components\DTToolbarFF.dll FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll . ============= SERVICES / DRIVERS =============== . R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2010-9-13 25680] R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 26064] R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-12-8 251728] R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 34384] R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-11-12 299984] R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2011-1-6 6128720] R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2010-10-22 265400] R2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2010-8-22 217088] R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2010-8-19 123472] R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2010-8-19 30288] R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2010-8-19 21072] R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2010-8-22 36640] R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-3-2 139776] R4 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-4-9 38224] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 gupdate;Ус»уі° Google Update (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-7-27 136176] S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg10\toolbar\ToolbarBroker.exe [2010-11-25 517448] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888] S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files\common files\futuremark shared\futuremark systeminfo\FMSISvc.exe [2011-3-23 129440] S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2011-3-9 15872] S3 sscebus;SAMSUNG USB Composite Device V2 driver (WDM);c:\windows\system32\drivers\sscebus.sys [2010-9-15 98560] S3 sscemdfl;SAMSUNG Mobile Modem V2 Filter;c:\windows\system32\drivers\sscemdfl.sys [2010-9-15 14848] S3 sscemdm;SAMSUNG Mobile Modem V2 Drivers;c:\windows\system32\drivers\sscemdm.sys [2010-9-15 123648] S3 ssceserd;SAMSUNG Mobile Modem Diagnostic Serial Port V2 (WDM);c:\windows\system32\drivers\ssceserd.sys [2010-9-15 100352] S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-3-9 52224] S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-7-27 1343400] . =============== Created Last 30 ================ . 2011-04-09 14:40:07 -------- d-----w- c:\users\martin\appdata\roaming\Malwarebytes 2011-04-09 14:39:51 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-04-09 14:39:50 -------- d-----w- c:\progra~2\Malwarebytes 2011-04-09 14:39:48 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-04-09 14:39:48 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-04-08 11:35:51 6 ----a-w- c:\users\martin\appdata\roaming\CF.DLL 2011-03-23 16:57:23 -------- d-----w- c:\users\martin\appdata\roaming\Thinstall 2011-03-23 16:19:22 -------- d-----w- c:\program files\common files\Futuremark Shared 2011-03-23 11:59:35 781272 ----a-w- c:\program files\mozilla firefox\mozsqlite3.dll 2011-03-23 11:59:35 728024 ----a-w- c:\program files\mozilla firefox\libGLESv2.dll 2011-03-23 11:59:35 1874904 ----a-w- c:\program files\mozilla firefox\mozjs.dll 2011-03-23 11:59:35 15832 ----a-w- c:\program files\mozilla firefox\mozalloc.dll 2011-03-23 11:59:35 142296 ----a-w- c:\program files\mozilla firefox\libEGL.dll 2011-03-23 11:59:34 1975768 ----a-w- c:\program files\mozilla firefox\D3DCompiler_42.dll 2011-03-23 11:59:34 1893336 ----a-w- c:\program files\mozilla firefox\d3dx9_42.dll 2011-03-23 11:59:34 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll 2011-03-18 18:01:01 -------- d-----w- c:\users\martin\appdata\local\Samsung 2011-03-18 17:59:18 4659712 ----a-w- c:\windows\system32\Redemption.dll 2011-03-18 17:59:08 821824 ----a-w- c:\windows\system32\dgderapi.dll 2011-03-18 17:57:08 87340080 ----a-w- c:\users\martin\appdata\roaming\microsoft\windows\templates\SamsungKiesSetup.exe 2011-03-12 10:28:40 103864 ----a-w- c:\program files\mozilla firefox\plugins\nppdf32.dll . ==================== Find3M ==================== . 2011-03-09 17:51:25 152576 ----a-w- c:\windows\system32\msclmd.dll 2011-02-19 06:30:54 805376 ----a-w- c:\windows\system32\FntCache.dll 2011-02-19 06:30:51 1076736 ----a-w- c:\windows\system32\DWrite.dll 2011-02-19 06:30:50 739840 ----a-w- c:\windows\system32\d2d1.dll 2011-02-02 19:40:23 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-01-29 21:16:28 177496 ----a-w- c:\windows\system32\muzapp.exe 2011-01-29 21:16:26 30056 ----a-w- c:\windows\system32\MASetupCleaner.exe 2011-01-17 05:47:13 161792 ----a-w- c:\windows\system32\d3d10_1.dll . ============= FINISH: 19:08:39,12 ===============

Привет, следвайте инструкцията за работа с OTL:

• Изтеглете OTL.exe или OTL.scr го запазете на десктопа.
• Стартирайте файла с двукратен клик на мишката.
• Направете следните настройки:

• Под с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

netsvcs
drivers32 /all
%SYSTEMDRIVE%\*.*
%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\*.scr
%systemroot%\*._sy
%systemroot%\REPAIR\*.bak1
%systemroot%\REPAIR\*.ini
%systemroot%\system32\*.wt
%systemroot%\system32\*.ruy
%systemroot%\system32\*.jpg
%systemroot%\system32\spool\prtprocs\w32x86\*.*
%APPDATA%\Update\*.*
%APPDATA%\Microsoft\*.*
%APPDATA%\Adobe\Update\*.*
%ALLUSERSPROFILE%\Favorites\*.*
%PROGRAMFILES%\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\user32.dll /md5
%systemroot%\system32\ws2_32.dll /md5
%systemroot%\system32\ws2help.dll /md5
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

• Натиснете маркираният в синьо бутон: .
• Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt. Прикачете тези два файла в следващия си коментар (погледнете опцията "прикачени файлове", когато публикувате мнение).

Благодаря ,че ми помагате.Искам да попитам дали е добре да имам Malwarebytes' Anti-Malware и АVG Anti-virus 2011 .Също трябвали да изтрия файла,който е в карантината на Мalwarebytes

Extras.Txt

OTL.Txt

Редактирано 10 април 201115 г. от behw (преглед на промените)

Привет отново. Ето какво следва:

1. Може да изтриете файла от карантината на MBAM.

2. Деинсталирайте McAfee Security Scan Plus, ето справка за това как става.

3. Стартирайте OTL още веднъж и натиснете бутона CleanUp.

При дeинсталацията на OTL ще бъдат почистени инструменти и файлове, които използвахме в темата (може да оставите Malwarebytes' Anti-Malware Free за периодично сканиране). Програмата не пречи на другите приложения за сигурност. Ще последва рестарт на Windows.

4. Обновете (update) и направете бързо сканиране (Quick Scan) с Malwarebytes' Anti-Malware. Пуснете лога от сканирането в следващия си коментар.

1.Готово 2.Готово 3.Готово 4.Лог:

mbam-log-2011-04-10 (17-58-14).txt

Добре, сега изтрийте всички точки за възстановяване: справка (виж Изтриване на всички точки на възстановяване).

Има ли някакви други проблеми с Windows?

Всичко е на 6 .

Редактирано 10 април 201115 г. от behw (преглед на промените)

Супер, тогава маркирам проблема като решен. Приятна вечер и успех!