Много бавни браузъри

17 май 201115 г.

От два дена Mozilla,Google Chrome и Internet Explorer зареждат много бавно.Сканирах с Malwarebytes' Anti-Malware и NOD32-чисто.Нета ми е с рутер,вързани са две РС,на другия няма проблеми.Сменях кабелите,но без ефект.ОS-Windows XP SP3.Благодаря предварително за вниманието! DDS (Ver_11-03-05.01) - NTFSx86 Run by KOKO at 19:50:53.93 on Tue 05/17/2011 Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_25 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.1534.839 [GMT 3:00] . AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} . ============== Running Processes =============== . C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe C:\Program Files\Panda USB Vaccine\USBVaccine.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\PROGRA~1\LAUNCH~1\LManager.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\DAEMON Tools Lite\DTLite.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\Rainlendar2\Rainlendar2.exe C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Translate Client\translateclient.exe C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Mozilla Firefox\firefox.exe D:\New Folder\CR2.exe C:\WINDOWS\System32\svchost.exe -k HTTPFilter C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Documents and Settings\KOKO\Desktop\dds.scr . ============== Pseudo HJT Report =============== . uStart Page = my.daemon-search.com uInternet Connection Wizard,ShellNext = hxxp://www.iobit.com/systemcareupdate.html BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" uRun: [Rainlendar2] c:\program files\rainlendar2\Rainlendar2.exe uRun: [Advanced SystemCare 4] c:\program files\iobit\advanced systemcare 4\ASCTray.exe mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay mRun: [LManager] c:\progra~1\launch~1\LManager.exe mRun: [RTHDCPL] RTHDCPL.EXE mRun: [skyTel] SkyTel.EXE mRun: [Alcmtr] ALCMTR.EXE mRun: [AzMixerSel] c:\program files\realtek\installshield\AzMixerSel.exe mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe" mRun: [unlockerAssistant] "c:\program files\unlocker\UnlockerAssistant.exe" mRun: [TrueImageMonitor.exe] c:\program files\acronis\trueimagehome\TrueImageMonitor.exe mRun: [Acronis Scheduler2 Service] "c:\program files\common files\acronis\schedule2\schedhlp.exe" mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\blueto~2.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\transl~1.lnk - c:\program files\translate client\translateclient.exe uPolicies-explorer: NoInstrumentation = 1 (0x1) IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: Send to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Notify: AtiExtEvent - Ati2evxx.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL . ================= FIREFOX =================== . FF - ProfilePath - c:\docume~1\koko\applic~1\mozilla\firefox\profiles\aqrf0j2c.default\ FF - prefs.js: browser.startup.homepage - www.google.bg FF - plugin: c:\program files\foxit software\foxit reader\plugins\npFoxitReaderPlugin.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\microsoft silverlight\3.0.40818.0\npctrlui.dll . ============= SERVICES / DRIVERS =============== . R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-4-14 13496] R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\drivers\tdrpm258.sys [2011-4-11 911680] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-4-11 218688] R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2010-12-21 115008] R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2010-12-21 94872] R2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\iobit\advanced systemcare 4\ASCService.exe [2011-4-28 352656] R2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\common files\acronis\cdp\afcdpsrv.exe [2011-4-11 2480048] R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2011-1-12 810144] R3 afcdp;afcdp;c:\windows\system32\drivers\afcdp.sys [2011-4-11 160288] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] . =============== Created Last 30 ================ . 2011-05-16 11:23:58 -------- d-----w- c:\windows\system32\wbem\repository\FS 2011-05-16 11:23:58 -------- d-----w- c:\windows\system32\wbem\Repository 2011-05-16 10:26:53 -------- d-----w- c:\program files\XP TCPIP Repair 2011-05-16 08:08:30 2469728 ----a-w- c:\windows\system32\AutoPartNt.exe 2011-05-13 17:01:31 -------- d-----w- c:\docume~1\koko\locals~1\applic~1\Google 2011-04-24 19:06:13 -------- d-----w- c:\docume~1\koko\applic~1\Foxit Software 2011-04-21 14:17:42 32128 -c--a-w- c:\windows\system32\dllcache\usbccgp.sys 2011-04-21 14:17:42 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2011-04-20 15:14:13 -------- d-----w- c:\windows\system32\XPSViewer 2011-04-20 15:13:47 89088 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll 2011-04-20 15:13:29 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll 2011-04-20 15:13:29 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe 2011-04-20 15:13:29 597504 ------w- c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe 2011-04-20 15:13:29 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll 2011-04-20 15:13:29 575488 ------w- c:\windows\system32\xpsshhdr.dll 2011-04-20 15:13:29 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll 2011-04-20 15:13:29 1676288 ------w- c:\windows\system32\xpssvcs.dll 2011-04-20 15:13:29 117760 ------w- c:\windows\system32\prntvpt.dll 2011-04-20 15:13:29 -------- d-----w- C:\9c18f3b8ca89e319b4de301879 2011-04-20 01:52:29 52224 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll 2011-04-20 01:52:29 468480 -c----w- c:\windows\system32\dllcache\msfeeds.dll 2011-04-20 01:52:29 268288 -c----w- c:\windows\system32\dllcache\iertutil.dll 2011-04-20 01:52:29 13824 -c----w- c:\windows\system32\dllcache\ieudinit.exe 2011-04-20 01:52:28 63488 -c----w- c:\windows\system32\dllcache\icardie.dll 2011-04-20 01:52:28 6080000 -c----w- c:\windows\system32\dllcache\ieframe.dll 2011-04-20 01:52:28 380928 -c----w- c:\windows\system32\dllcache\ieapfltr.dll 2011-04-20 01:52:28 2452872 -c----w- c:\windows\system32\dllcache\ieapfltr.dat . ==================== Find3M ==================== . 2011-04-14 02:07:59 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-04-13 23:40:22 73728 ----a-w- c:\windows\system32\javacpl.cpl 2011-04-11 09:53:14 22328 ----a-w- c:\docume~1\koko\applic~1\PnkBstrK.sys 2011-04-11 09:52:55 103736 ----a-w- c:\windows\system32\PnkBstrB.exe 2011-04-11 09:52:48 66872 ----a-w- c:\windows\system32\PnkBstrA.exe 2011-03-07 05:31:47 692736 ----a-w- c:\windows\system32\inetcomm.dll 2011-03-04 06:42:30 434176 ----a-w- c:\windows\system32\vbscript.dll 2011-03-03 13:27:43 1866880 ----a-w- c:\windows\system32\win32k.sys 2011-02-28 08:00:00 80896 ----a-w- c:\windows\system32\ff_vfw.dll 2011-02-23 13:54:12 29520 ----a-w- c:\windows\system32\SmartDefragBootTime.exe 2011-02-17 18:59:59 841216 ----a-w- c:\windows\system32\wininet.dll 2011-02-17 18:59:59 1830912 ------w- c:\windows\system32\inetcpl.cpl 2011-02-17 18:59:58 78336 ----a-w- c:\windows\system32\ieencode.dll 2011-02-17 18:59:58 17408 ----a-w- c:\windows\system32\corpol.dll 2011-02-17 12:32:12 5120 ----a-w- c:\windows\system32\xpsp4res.dll 2011-02-17 11:43:49 389120 ----a-w- c:\windows\system32\html.iec . ============= FINISH: 19:51:19.14 =============== UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_11-03-05.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 4/11/2011 11:15:00 System Uptime: 5/17/2011 19:04:36 (0 hours ago) . Motherboard: Acer | | Navarro Processor: AMD Turion 64 Mobile Technology MK-36 | Socket M2/S1G1 | 1994/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 63 GiB total, 37.33 GiB free. D: is FIXED (NTFS) - 86 GiB total, 3.507 GiB free. E: is CDROM () F: is FIXED (NTFS) - 466 GiB total, 2.414 GiB free. G: is FIXED (NTFS) - 112 GiB total, 10.653 GiB free. H: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: Modem Device on High Definition Audio Bus Device ID: HDAUDIO\FUNC_02&VEN_14F1&DEV_2BFA&SUBSYS_1025009F&REV_0900\4&D5BB25&0&0102 Manufacturer: Name: Modem Device on High Definition Audio Bus PNP Device ID: HDAUDIO\FUNC_02&VEN_14F1&DEV_2BFA&SUBSYS_1025009F&REV_0900\4&D5BB25&0&0102 Service: . Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318} Description: Atheros AR5005G Wireless Network Adapter Device ID: PCI\VEN_168C&DEV_001A&SUBSYS_04181468&REV_01\4&FCF0450&0&10A4 Manufacturer: Atheros Name: Atheros AR5005G Wireless Network Adapter PNP Device ID: PCI\VEN_168C&DEV_001A&SUBSYS_04181468&REV_01\4&FCF0450&0&10A4 Service: AR5211 . ==== System Restore Points =================== . RP1: 4/11/2011 11:17:52 - System Checkpoint RP2: 4/11/2011 11:26:12 - Installed ATI Catalyst Control Center RP3: 4/11/2011 11:27:08 - Installed ATI Parental Control & Encoder RP4: 4/11/2011 11:27:52 - Инсталиран REALTEK GbE & FE Ethernet PCI NIC Driver RP5: 4/11/2011 11:29:39 - Installed Bluetooth Software RP6: 4/11/2011 11:31:31 - Unsigned driver install RP7: 4/11/2011 11:34:30 - Installed Atheros for Acer Driver 5.3.0.67_Foxconn Installation RP8: 4/11/2011 11:35:19 - Installed Realtek High Definition Audio Driver RP9: 4/11/2011 11:47:22 - Installed ESET NOD32 Antivirus RP10: 4/11/2011 11:53:51 - Bulgarian (Old Phonetic) е инсталиран RP11: 4/11/2011 11:58:21 - Installed DirectX RP12: 4/11/2011 12:01:16 - Installed Microsoft Office Enterprise 2007 RP13: 4/11/2011 12:06:18 - Printer Driver Send To Microsoft OneNote Driver Installed RP14: 4/11/2011 12:12:17 - Installed Microsoft Office Language Pack 2007 - Bulgarian/български RP15: 4/11/2011 12:20:42 - Revo Uninstaller's restore point - Ask Toolbar RP16: 4/11/2011 12:21:00 - Removed Ask Toolbar. RP17: 4/11/2011 12:26:55 - Advanced SystemCare RestorePoint RP18: 4/11/2011 12:39:53 - Installed Call of Duty® 4 - Modern Warfare RP19: 4/11/2011 12:41:49 - Installed Call of Duty® 4 - Modern Warfare RP20: 4/11/2011 12:58:03 - Installed Call of Duty® 4 - Modern Warfare 1.5 Multiplayer RP21: 4/11/2011 12:59:06 - Installed Call of Duty® 4 - Modern Warfare 1.4 Patch RP22: 4/11/2011 13:00:27 - Installed Call of Duty® 4 - Modern Warfare 1.7 Patch RP23: 4/11/2011 13:02:07 - Installed Call of Duty® 4 - Modern Warfare 1.6 Patch RP24: 4/11/2011 13:03:48 - Installed Call of Duty® 4 - Modern Warfare 1.5 Multiplayer RP25: 4/11/2011 13:04:43 - Installed Call of Duty® 4 - Modern Warfare 1.7 Patch RP26: 4/11/2011 13:05:58 - Installed Call of Duty® 4 - Modern Warfare 1.2 Patch RP27: 4/11/2011 13:06:55 - Installed Call of Duty® 4 - Modern Warfare 1.3 Patch RP28: 4/11/2011 16:02:48 - Installed Acronis True Image Home RP29: 4/13/2011 23:13:09 - Software Distribution Service 3.0 RP30: 4/14/2011 8:33:26 - Software Distribution Service 3.0 RP31: 4/14/2011 18:28:15 - Revo Uninstaller's restore point - Bing Bar RP32: 4/14/2011 18:29:20 - Revo Uninstaller's restore point - DAEMON Tools Toolbar RP33: 4/14/2011 18:30:44 - Revo Uninstaller's restore point - Skype Toolbars RP34: 4/15/2011 22:00:48 - Software Distribution Service 3.0 RP35: 4/16/2011 4:32:41 - Software Distribution Service 3.0 RP36: 4/16/2011 5:50:48 - Installed Java 6 Update 24 RP37: 4/17/2011 0:23:51 - Software Distribution Service 3.0 RP38: 4/17/2011 21:29:39 - Software Distribution Service 3.0 RP39: 4/18/2011 1:39:10 - Installed Windows XP WgaNotify. RP40: 4/19/2011 8:12:15 - System Checkpoint RP41: 4/19/2011 8:45:15 - Software Distribution Service 3.0 RP42: 4/20/2011 4:46:12 - Software Distribution Service 3.0 RP43: 4/20/2011 7:59:45 - Software Distribution Service 3.0 RP44: 4/20/2011 18:09:23 - Software Distribution Service 3.0 RP45: 4/21/2011 19:14:29 - System Checkpoint RP46: 4/23/2011 7:37:01 - System Checkpoint RP47: 4/24/2011 19:10:01 - System Checkpoint RP48: 4/26/2011 7:16:06 - System Checkpoint RP49: 4/27/2011 14:31:16 - System Checkpoint RP50: 4/29/2011 7:49:10 - System Checkpoint RP51: 4/30/2011 18:42:58 - System Checkpoint RP52: 5/1/2011 20:41:04 - System Checkpoint RP53: 5/2/2011 17:31:24 - Installed Java 6 Update 25 RP54: 5/2/2011 19:23:37 - Software Distribution Service 3.0 RP55: 5/3/2011 23:07:15 - System Checkpoint RP56: 5/5/2011 8:07:12 - System Checkpoint RP57: 5/6/2011 23:18:16 - System Checkpoint RP58: 5/8/2011 7:29:41 - System Checkpoint RP59: 5/9/2011 9:34:38 - System Checkpoint RP60: 5/10/2011 23:51:20 - System Checkpoint RP61: 5/11/2011 17:50:47 - Software Distribution Service 3.0 RP62: 5/12/2011 22:58:35 - System Checkpoint RP63: 5/14/2011 8:00:41 - System Checkpoint RP64: 5/15/2011 19:21:32 - System Checkpoint RP65: 5/16/2011 9:21:59 - Revo Uninstaller's restore point - Mozilla Firefox 4.0 (x86 bg) RP66: 5/16/2011 11:42:26 - Software Distribution Service 3.0 RP67: 5/16/2011 14:23:09 - Restore Operation . ==== Installed Programs ====================== . µTorrent Acronis True Image Home Adobe Flash Player 10 Plugin Advanced SystemCare 4 Atheros for Acer Driver 5.3.0.67_Foxconn Installation Program ATI - Software Uninstall Utility ATI Catalyst Control Center ATI Display Driver ATI Parental Control & Encoder Bulgarian (Old Phonetic) Call of Duty® 4 - Modern Warfare Call of Duty® 4 - Modern Warfare 1.4 Patch Call of Duty® 4 - Modern Warfare 1.6 Patch Call of Duty® 4 - Modern Warfare 1.7 Patch Client for Google Translate DAEMON Tools Lite ESET NOD32 Antivirus Foxit Reader Game Booster GOM Player Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Windows XP (KB2443685) Hotfix for Windows XP (KB942288-v3) Hotfix for Windows XP (KB954550-v5) Hotfix for Windows XP (KB961118) Hotfix for Windows XP (KB970653-v3) Hotfix for Windows XP (KB976002-v5) Java Auto Updater Java 6 Update 25 K-Lite Codec Pack 7.0.0 (Full) Launch Manager Malwarebytes' Anti-Malware Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office Access MUI (Bulgarian) 2007 Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (Bulgarian) 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (Bulgarian) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (Bulgarian) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office Language Pack 2007 - Bulgarian/български Microsoft Office O MUI (Bulgarian) 2007 Microsoft Office OneNote MUI (Bulgarian) 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (Bulgarian) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (Bulgarian) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (Bulgarian) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (German) 2007 Microsoft Office Proof (Russian) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (Bulgarian) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Publisher MUI (Bulgarian) 2007 Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (Bulgarian) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (Bulgarian) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Office X MUI (Bulgarian) 2007 Microsoft Silverlight Microsoft Software Update for Web Folders (Bulgarian) 12 Microsoft Software Update for Web Folders (English) 12 Mozilla Firefox 4.0 (x86 bg) Panda USB Vaccine 1.0.1.4 Rainlendar2 (remove only) REALTEK GbE & FE Ethernet PCI NIC Driver Realtek High Definition Audio Driver Revo Uninstaller 1.92 Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Extended (KB2416472) Security Update for Windows Internet Explorer 7 (KB2482017) Security Update for Windows Internet Explorer 7 (KB2497640) Security Update for Windows Internet Explorer 7 (KB938127-v2) Security Update for Windows Internet Explorer 7 (KB982381) Security Update for Windows Media Player (KB2378111) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player (KB975558) Security Update for Windows Media Player (KB978695) Security Update for Windows XP (KB2079403) Security Update for Windows XP (KB2115168) Security Update for Windows XP (KB2121546) Security Update for Windows XP (KB2229593) Security Update for Windows XP (KB2296011) Security Update for Windows XP (KB2347290) Security Update for Windows XP (KB2360937) Security Update for Windows XP (KB2387149) Security Update for Windows XP (KB2393802) Security Update for Windows XP (KB2412687) Security Update for Windows XP (KB2419632) Security Update for Windows XP (KB2423089) Security Update for Windows XP (KB2440591) Security Update for Windows XP (KB2443105) Security Update for Windows XP (KB2476687) Security Update for Windows XP (KB2478960) Security Update for Windows XP (KB2478971) Security Update for Windows XP (KB2479943) Security Update for Windows XP (KB2483185) Security Update for Windows XP (KB2485663) Security Update for Windows XP (KB2497640) Security Update for Windows XP (KB2503658) Security Update for Windows XP (KB2506212) Security Update for Windows XP (KB2506223) Security Update for Windows XP (KB2507618) Security Update for Windows XP (KB2508272) Security Update for Windows XP (KB2508429) Security Update for Windows XP (KB2509553) Security Update for Windows XP (KB2510581) Security Update for Windows XP (KB2511455) Security Update for Windows XP (KB2524375) Security Update for Windows XP (KB923789) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB960715) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB969898) Security Update for Windows XP (KB970430) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973346) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975562) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977816) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978338) Security Update for Windows XP (KB978542) Security Update for Windows XP (KB978601) Security Update for Windows XP (KB978706) Security Update for Windows XP (KB979309) Security Update for Windows XP (KB979482) Security Update for Windows XP (KB979687) Security Update for Windows XP (KB980436) Security Update for Windows XP (KB981322) Security Update for Windows XP (KB981997) Security Update for Windows XP (KB982132) Security Update for Windows XP (KB982665) Skype™ 5.3 Smart Defrag 2 SpeedFan (remove only) Synaptics Pointing Device Driver Unlocker 1.9.0 Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) Update for Windows XP (KB2345886) Update for Windows XP (KB2467659) Update for Windows XP (KB898461) Update for Windows XP (KB943729) Update for Windows XP (KB955759) Update for Windows XP (KB971029) Update for Windows XP (KB971737) Update for Windows XP (KB973687) WebFldrs XP WIDCOMM Bluetooth Software Windows Genuine Advantage Notifications (KB905474) Windows Internet Explorer 7 Windows Live ID Sign-in Assistant WinRAR 4.00 (32-bit) . ==== Event Viewer Messages From Past Week ======== . 5/16/2011 10:48:39, information: Windows File Protection [64001] - File replacement was attempted on the protected system file c:\windows\system32\drivers\tcpip.sys. This file was restored to the original version to maintain system stability. The file version of the bad file is 5.1.2600.5625, the version of the system file is 5.1.2600.5625. 5/16/2011 10:44:09, error: SideBySide [36] - The assembly x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13 has missing or invalid files; recovery of this assembly failed. 5/10/2011 5:37:48, error: Service Control Manager [7024] - The Background Intelligent Transfer Service service terminated with service-specific error 2147500037 (0x80004005). . ==== End Of File ===========================

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

18 май 201115 г.

Здравейте...!

Следвайте следната инструкция за работа с OTL:

Изтеглете OTL.exe и го запазете на десктопа.
Стартирайте файла с двукратен клик на мишката.
Сложете отметка пред Scan All Users
Под менюто File Age => изберете 90 days
Под менюто Standard Registry => променете на ALL
Сложете отметки пред LOP и Purity Check
Под с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

netsvcs
msconfig
%SYSTEMDRIVE%\*.*
%USERPROFILE%\*.*
%USERPROFILE%\Application Data\*.*
%USERPROFILE%\Local Settings\Application Data\*.*
%AllUsersProfile%\*.*
%AllUsersProfile%\Application Data\*.*
%USERPROFILE%\AppData\*.*
%USERPROFILE%\My Documents\*.*
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /90
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\system32\Spool\prtprocs\w32x86\*.dll
/md5start
hlp.dat
winlogon.exe
wininit.exe
userinit.exe
explorer.exe
volsnap.sys
/md5stop

Натиснете маркираният в синьо бутон: .
Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt. Прикачете тези два файла в следващия си коментар (погледнете опцията "прикачени файлове", когато публикувате мнение).

18 май 201115 г.

Автор

Съжалявам за закъснението,сега се прибрах от работа.За прикачените файлове-в инструкциите към раздела се препоръчваше да не ги прикачвам,а да използвам Copy/ Paste.

Extras.Txt

OTL.Txt

Редактирано 18 май 201115 г. от kostadin_p1 (преглед на промените)

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

18 май 201115 г.

Стартирайте пак OTL и с Copy/ Paste под колонката Custom Scans/Fixes въведете скриптовия текст от текстовото поле по-долу, като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта!

:OTL
SRV - File not found [Disabled | Stopped] --  -- (HidServ)
IE - HKU\S-1-5-21-1275210071-562591055-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -  File not found
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} -  File not found
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\msdaipp - No CLSID value found
[2011/04/20 18:13:29 | 000,000,000 | ---D | C] -- C:\9c18f3b8ca89e319b4de301879

:Reg

:files


autorun.inf /alldrives
recycler /alldrives
ipconfig /flushdns /c

:Commands
[purity]
[emptytemp]
[resethosts]
[CreateRestorePoint]
[emptyflash]
[Reboot]

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix

Ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

18 май 201115 г.

Автор

Голяма мъка,чакам 10 мин.да се зареди!Не ми излиза функцията да прикача файла!

All processes killed

========== OTL ==========

Service HidServ stopped successfully!

Service HidServ deleted successfully!

HKU\S-1-5-21-1275210071-562591055-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\grooveLocalGWS\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{88FED34C-F0CA-4636-A375-3CB6248B04CD}\ deleted successfully.

File {88FED34C-F0CA-4636-A375-3CB6248B04CD} - File not found not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.

File Protocol\Handler\ipp - No CLSID value found not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\ deleted successfully.

File Protocol\Handler\msdaipp - No CLSID value found not found.

C:\9c18f3b8ca89e319b4de301879\i386 folder moved successfully.

C:\9c18f3b8ca89e319b4de301879\amd64 folder moved successfully.

C:\9c18f3b8ca89e319b4de301879 folder moved successfully.

========== REGISTRY ==========

========== FILES ==========

autorun.inf not found in C:\

autorun.inf not found in D:\

autorun.inf not found in F:\

autorun.inf not found in G:\

C:\RECYCLER\S-1-5-21-1275210071-562591055-1417001333-1003 folder moved successfully.

C:\RECYCLER folder moved successfully.

D:\RECYCLER\S-1-5-21-329068152-746137067-1417001333-1003 folder moved successfully.

D:\RECYCLER\S-1-5-21-1659004503-1935655697-1801674531-1003 folder moved successfully.

D:\RECYCLER\S-1-5-21-1275210071-562591055-1417001333-1003 folder moved successfully.

D:\RECYCLER folder moved successfully.

F:\RECYCLER\S-1-5-21-602162358-1532298954-1644491937-1003 folder moved successfully.

F:\RECYCLER\S-1-5-21-329068152-746137067-1417001333-1003 folder moved successfully.

F:\RECYCLER\S-1-5-21-1659004503-1935655697-1801674531-1003 folder moved successfully.

F:\RECYCLER\S-1-5-21-1292428093-1580818891-682003330-1003 folder moved successfully.

F:\RECYCLER\S-1-5-21-1275210071-562591055-1417001333-1003 folder moved successfully.

F:\RECYCLER folder moved successfully.

G:\RECYCLER\S-1-5-21-725345543-1202660629-1606980848-1003 folder moved successfully.

G:\RECYCLER\S-1-5-21-602162358-1532298954-1644491937-1003 folder moved successfully.

G:\RECYCLER\S-1-5-21-602162358-1202660629-1417001333-500 folder moved successfully.

G:\RECYCLER\S-1-5-21-329068152-746137067-1417001333-1003 folder moved successfully.

G:\RECYCLER\S-1-5-21-220523388-1844823847-1801674531-1003 folder moved successfully.

G:\RECYCLER\S-1-5-21-1801674531-1757981266-2147225017-1003 folder moved successfully.

G:\RECYCLER\S-1-5-21-1659004503-1935655697-1801674531-1003 folder moved successfully.

G:\RECYCLER\S-1-5-21-1292428093-1580818891-682003330-1003 folder moved successfully.

G:\RECYCLER\S-1-5-21-1275210071-562591055-1417001333-1003 folder moved successfully.

G:\RECYCLER\S-1-5-21-1214440339-616249376-839522115-500 folder moved successfully.

G:\RECYCLER\S-1-5-21-1214440339-1292428093-682003330-1004 folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd7 folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd6 folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd5 folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd4 folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd3\q4base folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd3 folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd2\QuickMediaConverter\Profil folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd2\QuickMediaConverter\CamStudio\controller folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd2\QuickMediaConverter\CamStudio folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd2\QuickMediaConverter folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd2\CoolReader\skins folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd2\CoolReader\lang folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd2\CoolReader\dict folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd2\CoolReader folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd2\Central Brain Identifier folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd2 folder moved successfully.

G:\RECYCLER\S-1-5-18\Dd1 folder moved successfully.

G:\RECYCLER\S-1-5-18 folder moved successfully.

G:\RECYCLER folder moved successfully.

< ipconfig /flushdns /c >

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Documents and Settings\KOKO\Desktop\cmd.bat deleted successfully.

C:\Documents and Settings\KOKO\Desktop\cmd.txt deleted successfully.

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

User: KOKO

->Temp folder emptied: 1215811 bytes

->Temporary Internet Files folder emptied: 180358 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 122871056 bytes

->Google Chrome cache emptied: 0 bytes

->Flash cache emptied: 657 bytes

User: LocalService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 32902 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 2402044 bytes

%systemroot%\System32 .tmp files removed: 2577 bytes

%systemroot%\System32\dllcache .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 511 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 7849250 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33293 bytes

RecycleBin emptied: 0 bytes

Total Files Cleaned = 128.00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.

HOSTS file reset successfully

Restore point Set: OTL Restore Point (0)

[EMPTYFLASH]

User: All Users

User: Default User

User: KOKO

->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0.00 mb

OTL by OldTimer - Version 3.2.22.3 log created on 05182011_204232

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

Уффф!Ето го!

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

18 май 201115 г.

След изпълнението на скрипта какво е положението с браузерите...?

18 май 201115 г.

Автор

Няма промяна.Speedtest-a е добре,но браузърите зареждат изключително бавно.

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

18 май 201115 г.

Изтеглете ComboFix от тук или тук и го запазете на десктопа си.

Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.

Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs

Стартирайте Combo-Fix.com и следвайте инструкциите.

Бележка: ComboFix ще се стартира без инсталирана Recovery Console.

Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repair режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.

Следвайте инструкциите, за да позволите на ComboFix да изтегли и инсталира Microsoft Windows Recovery Console. В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.

Публикувано изображение

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

Публикувано изображение

Изберете Yes, за да продължи сканирането за зловреден софтуер.

Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:\ComboFix.txt в следващия Ви коментар в тази тема.

Бележка:

Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа.
ComboFix ще нулира всички настройки на Microsoft Internet Explorer, включително да направи IE браузър по подразбиране.
ComboFix ще изключи autorun функцията на ВСИЧКИ CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и Ви защити от бъдещи вируси/заплахи, които поразяват чрез autorun. Ако това е проблем за вас - моля, уведомете ме.
ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той ще прекрати интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си.
В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:\BUG.txt в следващия Ви коментар в тази тема.

Работата на ComboFix, може да отнеме до 20-30 минути, за да завърши, моля имайте търпение.

Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.

18 май 201115 г.

Автор

ComboFix 11-05-17.03 - KOKO 05/18/2011 22:23:11.1.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.1534.1105 [GMT 3:00] Running from: c:\documents and settings\KOKO\Desktop\ComboFix.exe AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} * Resident AV is active . . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\OPTIONS\CABS\_desktop.ini c:\windows\system32\Desktop_.ini f:\drivers for acer\lan_realtek_V5.649.0615.2006\_desktop.ini f:\drivers for acer\lan_realtek_V5.649.0615.2006\WIN2000\_desktop.ini f:\drivers for acer\lan_realtek_V5.649.0615.2006\WIN98SE\_desktop.ini f:\drivers for acer\lan_realtek_V5.649.0615.2006\WINME\_desktop.ini f:\drivers for acer\lan_realtek_V5.649.0615.2006\WINXP\_desktop.ini g:\drivers for acer\lan_realtek_V5.649.0615.2006\_desktop.ini g:\drivers for acer\lan_realtek_V5.649.0615.2006\WIN2000\_desktop.ini g:\drivers for acer\lan_realtek_V5.649.0615.2006\WIN98SE\_desktop.ini g:\drivers for acer\lan_realtek_V5.649.0615.2006\WINME\_desktop.ini g:\drivers for acer\lan_realtek_V5.649.0615.2006\WINXP\_desktop.ini . . ((((((((((((((((((((((((( Files Created from 2011-04-18 to 2011-05-18 ))))))))))))))))))))))))))))))) . . 2011-05-18 19:23 . 2011-05-18 19:23 -------- d-----w- c:\documents and settings\KOKO\Local Settings\Application Data\ESET 2011-05-18 17:42 . 2011-05-18 17:42 -------- d-----w- C:\_OTL 2011-05-16 11:23 . 2011-05-16 11:23 -------- d-----w- c:\windows\system32\wbem\Repository 2011-05-16 10:26 . 2011-05-16 10:26 -------- d-----w- c:\program files\XP TCPIP Repair 2011-05-16 08:08 . 2011-05-16 08:08 2469728 ----a-w- c:\windows\system32\AutoPartNt.exe 2011-05-13 17:01 . 2011-05-13 17:02 -------- d-----w- c:\documents and settings\KOKO\Local Settings\Application Data\Google 2011-05-02 14:34 . 2011-05-02 14:34 -------- d-----w- c:\windows\Sun 2011-05-02 14:31 . 2011-05-02 14:31 -------- d-----w- c:\program files\Common Files\Java 2011-04-24 19:06 . 2011-04-24 19:06 -------- d-----w- c:\documents and settings\KOKO\Application Data\Foxit Software 2011-04-21 14:17 . 2008-04-13 19:15 32128 -c--a-w- c:\windows\system32\dllcache\usbccgp.sys 2011-04-21 14:17 . 2008-04-13 19:15 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2011-04-20 15:14 . 2011-04-20 15:14 -------- d-----w- c:\windows\system32\XPSViewer 2011-04-20 15:14 . 2011-04-20 15:14 -------- d-----w- c:\program files\Reference Assemblies 2011-04-20 15:13 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll 2011-04-20 15:13 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll 2011-04-20 15:13 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll 2011-04-20 15:13 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll 2011-04-20 15:13 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll 2011-04-20 15:13 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll 2011-04-20 15:13 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll 2011-04-20 15:13 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe 2011-04-20 15:13 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe 2011-04-20 01:52 . 2011-02-17 18:59 52224 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll 2011-04-20 01:52 . 2011-02-17 18:59 468480 -c----w- c:\windows\system32\dllcache\msfeeds.dll 2011-04-20 01:52 . 2011-02-17 18:59 268288 -c----w- c:\windows\system32\dllcache\iertutil.dll 2011-04-20 01:52 . 2011-02-17 11:43 13824 -c----w- c:\windows\system32\dllcache\ieudinit.exe 2011-04-20 01:52 . 2011-02-17 18:59 63488 -c----w- c:\windows\system32\dllcache\icardie.dll 2011-04-20 01:52 . 2011-02-17 18:59 6080000 -c----w- c:\windows\system32\dllcache\ieframe.dll 2011-04-20 01:52 . 2011-02-17 18:59 380928 -c----w- c:\windows\system32\dllcache\ieapfltr.dll 2011-04-20 01:52 . 2010-02-22 22:04 2452872 -c----w- c:\windows\system32\dllcache\ieapfltr.dat . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-04-14 02:07 . 2011-04-16 02:51 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-04-13 23:40 . 2011-04-16 02:51 73728 ----a-w- c:\windows\system32\javacpl.cpl 2011-04-11 13:03 . 2011-04-11 13:03 160288 ----a-w- c:\windows\system32\drivers\afcdp.sys 2011-04-11 13:03 . 2011-04-11 13:03 911680 ----a-w- c:\windows\system32\drivers\tdrpm258.sys 2011-04-11 13:03 . 2011-04-11 13:03 581984 ----a-w- c:\windows\system32\drivers\timntr.sys 2011-04-11 13:03 . 2011-04-11 13:03 158272 ----a-w- c:\windows\system32\drivers\snapman.sys 2011-04-11 09:53 . 2011-04-11 09:53 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys 2011-04-11 09:53 . 2011-04-11 09:53 22328 ----a-w- c:\documents and settings\KOKO\Application Data\PnkBstrK.sys 2011-04-11 09:52 . 2011-04-11 09:52 103736 ----a-w- c:\windows\system32\PnkBstrB.exe 2011-04-11 09:52 . 2011-04-11 09:52 66872 ----a-w- c:\windows\system32\PnkBstrA.exe 2011-04-11 08:43 . 2011-04-11 08:43 218688 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2011-03-07 05:31 . 2011-04-11 08:09 692736 ----a-w- c:\windows\system32\inetcomm.dll 2011-03-04 06:42 . 2009-11-08 09:33 434176 ----a-w- c:\windows\system32\vbscript.dll 2011-03-03 13:27 . 2009-11-08 09:36 1866880 ----a-w- c:\windows\system32\win32k.sys 2011-02-28 08:00 . 2011-04-11 09:16 80896 ----a-w- c:\windows\system32\ff_vfw.dll 2011-02-23 14:04 . 2011-04-14 16:34 13496 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys 2011-02-23 13:54 . 2011-04-14 16:34 29520 ----a-w- c:\windows\system32\SmartDefragBootTime.exe 2011-05-18 17:50 . 2011-05-16 06:27 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408] "uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-04-11 399736] "Rainlendar2"="c:\program files\Rainlendar2\Rainlendar2.exe" [2009-08-22 5148672] "Advanced SystemCare 4"="c:\program files\IObit\Advanced SystemCare 4\ASCTray.exe" [2011-04-21 402832] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 45056] "LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2006-06-23 602112] "RTHDCPL"="RTHDCPL.EXE" [2006-06-28 16248320] "SkyTel"="SkyTel.EXE" [2006-05-16 2879488] "AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2006-04-15 53248] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-03 761946] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2219184] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016] "UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2010-07-04 17408] "TrueImageMonitor.exe"="c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe" [2009-11-12 5106904] "Acronis Scheduler2 Service"="c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe" [2009-11-12 361632] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] . c:\documents and settings\All Users\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-1-17 618557] Translate Client.lnk - c:\program files\Translate Client\translateclient.exe [2011-5-17 1658880] . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"= "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "c:\\WINDOWS\\system32\\PnkBstrA.exe"= "c:\\WINDOWS\\system32\\PnkBstrB.exe"= "c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= . R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [4/14/2011 19:34 13496] R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\drivers\tdrpm258.sys [4/11/2011 16:03 911680] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [4/11/2011 11:43 218688] R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [12/21/2010 15:04 115008] R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [12/21/2010 13:47 94872] R2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\IObit\Advanced SystemCare 4\ASCService.exe [4/28/2011 8:20 352656] R2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [4/11/2011 16:03 2480048] R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [1/12/2011 16:41 810144] R3 afcdp;afcdp;c:\windows\system32\drivers\afcdp.sys [4/11/2011 16:03 160288] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 13:16 130384] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 13:16 753504] . Contents of the 'Scheduled Tasks' folder . 2011-04-28 c:\windows\Tasks\ASC4_AutoCare.job - c:\program files\IObit\Advanced SystemCare 4\AutoCare.exe [2011-04-28 13:54] . 2011-05-18 c:\windows\Tasks\ASC4_AutoSweep.job - c:\program files\IObit\Advanced SystemCare 4\AutoSweep.exe [2011-04-28 13:54] . 2011-05-16 c:\windows\Tasks\ASC4_AutoUpdate.job - c:\program files\IObit\Advanced SystemCare 4\AutoUpdate.exe [2011-04-28 13:54] . 2011-05-18 c:\windows\Tasks\ASC4_PerformanceMonitor.job - c:\program files\IObit\Advanced SystemCare 4\PMonitor.exe [2011-04-28 13:54] . 2011-05-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-562591055-1417001333-1003Core.job - c:\documents and settings\KOKO\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-05-13 17:01] . 2011-05-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-562591055-1417001333-1003UA.job - c:\documents and settings\KOKO\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-05-13 17:01] . 2011-05-18 c:\windows\Tasks\PandaUSBVaccine.job - c:\program files\Panda USB Vaccine\RunInteractiveWin.exe [2011-04-11 13:45] . 2011-05-18 c:\windows\Tasks\SmartDefrag_Startup.job - c:\program files\IObit\Smart Defrag 2\SmartDefrag.exe [2011-04-11 14:29] . . ------- Supplementary Scan ------- . uStart Page = my.daemon-search.com uLocal Page = uInternet Connection Wizard,ShellNext = hxxp://www.iobit.com/systemcareupdate.html IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm FF - ProfilePath - c:\documents and settings\KOKO\Application Data\Mozilla\Firefox\Profiles\aqrf0j2c.default\ FF - prefs.js: browser.startup.homepage - www.google.bg . - - - - ORPHANS REMOVED - - - - . WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2011-05-18 22:44 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'winlogon.exe'(1008) c:\windows\system32\Ati2evxx.dll . Completion time: 2011-05-18 22:46:24 ComboFix-quarantined-files.txt 2011-05-18 19:46 . Pre-Run: 37,211,070,464 bytes free Post-Run: 37,165,228,032 bytes free . WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect . - - End Of File - - 3B5FB401D845D5F88143715E7DB36782

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

18 май 201115 г.

Отново питам - някъкви промени по проблема ви..?Казвате от два -три дни се появило забавянето на браузерите...имате ли спомен да сте инсталирали някъкъв софтуер през това време..? :rolleyes:

18 май 201115 г.

Автор

След сканирането с ComboFix всичко беше добре-браузърите летяха,но след известно време пак започна да бави доста.Не съм инсталирал нищо,поне нямам спомен.Чакам 5 мин.да публикува мнението.

Редактирано 18 май 201115 г. от kostadin_p1 (преглед на промените)

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

18 май 201115 г.

Хм...разбирам....стана късно, утре сме на работа...предлагам да продължим утре...! :rolleyes:

18 май 201115 г.

Автор

OK.И аз също съм на работа.

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

18 май 201115 г.

Уморих се приятелю...!Може да пропускам нещо дребно....!Дано ме разбираш...Лека вечер..! :rolleyes:

18 май 201115 г.

Автор

Разбирам,лека вечер и на теб.

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

19 май 201115 г.

Изтеглете програмата: ESET Online Scanner
Стартирайте esetsmartinstaller_enu.exe
Сложете отметка на YES, I accept the Terms of Use и изберете Start:
Скенерът ще започне да изтегля компонентите, които са му необходими:
Уверете се, че има отметки на следните редове:

Накрая изберете Start
Скенерът ще започне да изтегля последните дефиниции.
След, като сканирането завърши изберете Finish.
Отидете в: C:\Program Files\ESET\ESET Online Scanner
Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си коментар.

=======>>>>>> Освен това:

Следвайте следната инструкция за проверка с GooredFix:

Изтеглете GooredFix, миръри: тук и тук. Запазете го на десктопа.
Затворете всички браузъри и стартирайте GooredFix.exe (десен клик Run As Administrator). Потвърдете с Yes, за да започне сканирането.
GooredFix ще провери за инфекции и след това ще се появи лог (GooredFix.txt). Копирайте (Copy) и поставете (Paste) резултатите от сканирането в следващия си коментар.

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

19 май 201115 г.

Има още нещо...използвали сте програмата - XP TCP/IP Repair....?

....но мисля че, това съобщение дава отговор на проблема ви:

5/16/2011 10:48:39, information: Windows File Protection [64001] - File replacement was attempted on the protected system file c:\windows\system32\drivers\tcpip.sys. This file was restored to the original version to maintain system stability. The file version of the bad file is 5.1.2600.5625, the version of the system file is 5.1.2600.5625.

Имате ли инсталационен диск с Windows XP..?

19 май 201115 г.

Автор

Когато търсих решение на проблема я използвах,но без резултат.Да,имам диск.В момета сканирам с ESET Online Scanner.За 1час 15 мин.е едва на 25%.

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

19 май 201115 г.

След като завърши сканирането с ESET Online Scanner + GooredFix да направим така:

Поставяш инсталационния диск и изпълняваш командата:

start => run => cmd => sfc /scannow

19 май 201115 г.

Автор

ОК,но дали ще е тази вечер-28%-1:44 часа!Досега откри 13 заплахи.

Редактирано 19 май 201115 г. от kostadin_p1 (преглед на промените)

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

19 май 201115 г.

Да, става бавно....и утре е ден ....!!! :speak:

20 май 201115 г.

Автор

Всичко вече работи нормално,няма забавяне!Изпълних всичко с инсталационния диск.Ето и логовете: ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6427 # api_version=3.0.2 # EOSSerial=d76525bf931f0f47a526e4b4cc0918df # end=stopped # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2011-05-19 08:48:19 # local_time=2011-05-19 11:48:19 (+0200, FLE Daylight Time) # country="United States" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=8199 39157077 100 100 333 12890598 0 0 # scanned=75475 # found=13 # cleaned=13 # scan_time=18057 # nod_component=V3 Build:0x30000000 C:\Documents and Settings\KOKO\Application Data\Microsoft\Internet Explorer\Quick Launch\eBay.lnk Win32/Adware.ADON application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\KOKO\My Documents\Downloads\Unlocker 1.9.0 (kaldata.com).exe Win32/Adware.ADON application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\KOKO\My Documents\Downloads\xptcprep.exe Win32/Toolbar.Zugo application (deleted - quarantined) 00000000000000000000000000000000 C C:\Documents and Settings\KOKO\Start Menu\eBay.lnk Win32/Adware.ADON application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Program Files\IObit\Game Booster\iobit.game.booster.v2.3.0.113-patch.exe probably a variant of Win32/HackTool.Patcher.A application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\System Volume Information\_restore{0F348434-CB22-4A8C-8DBC-1316D0778465}\RP16\A0001034.lnk Win32/Adware.ADON application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\System Volume Information\_restore{0F348434-CB22-4A8C-8DBC-1316D0778465}\RP49\A0004142.lnk Win32/Adware.ADON application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\System Volume Information\_restore{0F348434-CB22-4A8C-8DBC-1316D0778465}\RP65\A0019527.lnk Win32/Adware.ADON application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\System Volume Information\_restore{0F348434-CB22-4A8C-8DBC-1316D0778465}\RP69\A0021383.lnk Win32/Adware.ADON application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\System Volume Information\_restore{0F348434-CB22-4A8C-8DBC-1316D0778465}\RP69\A0021384.lnk Win32/Adware.ADON application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\System Volume Information\_restore{0F348434-CB22-4A8C-8DBC-1316D0778465}\RP69\A0021385.exe probably a variant of Win32/HackTool.Patcher.A application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C D:\BOOT CD_DDD 10.09.09.iso multiple threats (deleted - quarantined) 00000000000000000000000000000000 C D:\LEX-XPE-2009.iso multiple threats (deleted - quarantined) 00000000000000000000000000000000 C ESETSmartInstaller@High as downloader log: all ok GooredFix by jpshortstuff (03.07.10.1) Log created at 23:57 on 19/05/2011 (KOKO) Firefox version 4.0.1 (bg) ========== GooredScan ========== ========== GooredLog ========== C:\Program Files\Mozilla Firefox\extensions\ {972ce4c6-7e08-4474-a285-3208198ce6fd} [08:42 11/04/2011] {AB2CE124-6272-4b12-94A9-7303C7397BD1} [11:04 11/04/2011] [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{20a82645-c095-46ed-80e3-08825760534b}"="c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\" [15:14 20/04/2011] "[email protected]"="C:\Program Files\Java\jre6\lib\deploy\jqs\ff" [02:50 16/04/2011] -=E.O.F=-

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

20 май 201115 г.

Радвам се...! :whist: Сега следва малко довършителни действия и приключваме..:

==>> Деинсталирайте Комбофикс така:

1.Натиснете Start ==> Run ==> въведете командата Combofix /Uninstall ==> OK

Публикувано изображение

2.Изтеглете OTCleanIt или от тук,стартирайте и натиснете Clean up

==>> Изрийте и ESET Online Scanner по стандартния начин..!

==>> За контрол - последно сканиране по следната инструкция:

Изтеглете DDS: от BleepingComputer.
След изтегляне на файла го запишете (бутон Save => Save as) DDS на вашия десктоп, снимка:
След като изтеглите DDS на десктопа, иконката на програмата би трябвало да изглежда така:
Прекратете временно работата на всички скрипт блокиращи приложения, ако има такива или разрешете изпълнението на dds.scr. След това стартирайте DDS с двоен клик на иконката, като потвърдите с Run.
След приключване на работата на DDS копирайте с Copy текста от двата файлови лога, които ще се появят в Notepad: DDS.txt и Attach.txt и ги запазете (бутон Save => Save as) на десктопа.
Копирайте и поставете съдържанието на DDS.txt и Attach.txt във вашата тема. Моля, не ги прикачвайте!

20 май 201115 г.

Автор

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_11-05-19.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 4/11/2011 11:15:00 System Uptime: 5/20/2011 17:47:55 (0 hours ago) . Motherboard: Acer | | Navarro Processor: AMD Turion 64 Mobile Technology MK-36 | Socket M2/S1G1 | 1994/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 63 GiB total, 39.928 GiB free. D: is FIXED (NTFS) - 86 GiB total, 3.552 GiB free. E: is CDROM () F: is FIXED (NTFS) - 466 GiB total, 2.525 GiB free. G: is FIXED (NTFS) - 112 GiB total, 13.221 GiB free. H: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: Modem Device on High Definition Audio Bus Device ID: HDAUDIO\FUNC_02&VEN_14F1&DEV_2BFA&SUBSYS_1025009F&REV_0900\4&D5BB25&0&0102 Manufacturer: Name: Modem Device on High Definition Audio Bus PNP Device ID: HDAUDIO\FUNC_02&VEN_14F1&DEV_2BFA&SUBSYS_1025009F&REV_0900\4&D5BB25&0&0102 Service: . Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318} Description: Atheros AR5005G Wireless Network Adapter Device ID: PCI\VEN_168C&DEV_001A&SUBSYS_04181468&REV_01\4&FCF0450&0&10A4 Manufacturer: Atheros Name: Atheros AR5005G Wireless Network Adapter PNP Device ID: PCI\VEN_168C&DEV_001A&SUBSYS_04181468&REV_01\4&FCF0450&0&10A4 Service: AR5211 . ==== System Restore Points =================== . No restore point in system. . ==== Installed Programs ====================== . µTorrent Acronis True Image Home Adobe Flash Player 10 Plugin Advanced SystemCare 4 Atheros for Acer Driver 5.3.0.67_Foxconn Installation Program ATI - Software Uninstall Utility ATI Catalyst Control Center ATI Display Driver ATI Parental Control & Encoder Bulgarian (Old Phonetic) Call of Duty® 4 - Modern Warfare Call of Duty® 4 - Modern Warfare 1.4 Patch Call of Duty® 4 - Modern Warfare 1.6 Patch Call of Duty® 4 - Modern Warfare 1.7 Patch Client for Google Translate DAEMON Tools Lite ESET NOD32 Antivirus ESET Online Scanner v3 Foxit Reader Game Booster GOM Player Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Windows XP (KB2443685) Hotfix for Windows XP (KB942288-v3) Hotfix for Windows XP (KB954550-v5) Hotfix for Windows XP (KB961118) Hotfix for Windows XP (KB970653-v3) Hotfix for Windows XP (KB976002-v5) Java Auto Updater Java 6 Update 25 K-Lite Codec Pack 7.0.0 (Full) Launch Manager Malwarebytes' Anti-Malware Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office Access MUI (Bulgarian) 2007 Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (Bulgarian) 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (Bulgarian) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (Bulgarian) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office Language Pack 2007 - Bulgarian/български Microsoft Office O MUI (Bulgarian) 2007 Microsoft Office OneNote MUI (Bulgarian) 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (Bulgarian) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (Bulgarian) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (Bulgarian) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (German) 2007 Microsoft Office Proof (Russian) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (Bulgarian) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Publisher MUI (Bulgarian) 2007 Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (Bulgarian) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (Bulgarian) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Office X MUI (Bulgarian) 2007 Microsoft Silverlight Microsoft Software Update for Web Folders (Bulgarian) 12 Microsoft Software Update for Web Folders (English) 12 Mozilla Firefox 4.0.1 (x86 bg) Panda USB Vaccine 1.0.1.4 Rainlendar2 (remove only) REALTEK GbE & FE Ethernet PCI NIC Driver Realtek High Definition Audio Driver Revo Uninstaller 1.92 Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Extended (KB2416472) Security Update for Windows Internet Explorer 7 (KB2482017) Security Update for Windows Internet Explorer 7 (KB2497640) Security Update for Windows Internet Explorer 7 (KB938127-v2) Security Update for Windows Internet Explorer 7 (KB982381) Security Update for Windows Media Player (KB2378111) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player (KB975558) Security Update for Windows Media Player (KB978695) Security Update for Windows XP (KB2079403) Security Update for Windows XP (KB2115168) Security Update for Windows XP (KB2121546) Security Update for Windows XP (KB2229593) Security Update for Windows XP (KB2296011) Security Update for Windows XP (KB2347290) Security Update for Windows XP (KB2360937) Security Update for Windows XP (KB2387149) Security Update for Windows XP (KB2393802) Security Update for Windows XP (KB2412687) Security Update for Windows XP (KB2419632) Security Update for Windows XP (KB2423089) Security Update for Windows XP (KB2440591) Security Update for Windows XP (KB2443105) Security Update for Windows XP (KB2476687) Security Update for Windows XP (KB2478960) Security Update for Windows XP (KB2478971) Security Update for Windows XP (KB2479943) Security Update for Windows XP (KB2483185) Security Update for Windows XP (KB2485663) Security Update for Windows XP (KB2497640) Security Update for Windows XP (KB2503658) Security Update for Windows XP (KB2506212) Security Update for Windows XP (KB2506223) Security Update for Windows XP (KB2507618) Security Update for Windows XP (KB2508272) Security Update for Windows XP (KB2508429) Security Update for Windows XP (KB2509553) Security Update for Windows XP (KB2510581) Security Update for Windows XP (KB2511455) Security Update for Windows XP (KB2524375) Security Update for Windows XP (KB923789) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB960715) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB969898) Security Update for Windows XP (KB970430) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973346) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975562) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977816) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978338) Security Update for Windows XP (KB978542) Security Update for Windows XP (KB978601) Security Update for Windows XP (KB978706) Security Update for Windows XP (KB979309) Security Update for Windows XP (KB979482) Security Update for Windows XP (KB979687) Security Update for Windows XP (KB980436) Security Update for Windows XP (KB981322) Security Update for Windows XP (KB981997) Security Update for Windows XP (KB982132) Security Update for Windows XP (KB982665) Skype™ 5.3 Smart Defrag 2 SpeedFan (remove only) Synaptics Pointing Device Driver Unlocker 1.9.0 Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) Update for Windows XP (KB2345886) Update for Windows XP (KB2467659) Update for Windows XP (KB898461) Update for Windows XP (KB943729) Update for Windows XP (KB955759) Update for Windows XP (KB971029) Update for Windows XP (KB971737) Update for Windows XP (KB973687) WebFldrs XP WIDCOMM Bluetooth Software Windows Genuine Advantage Notifications (KB905474) Windows Internet Explorer 7 Windows Live ID Sign-in Assistant WinRAR 4.00 (32-bit) . ==== Event Viewer Messages From Past Week ======== . 5/20/2011 5:36:52, error: Service Control Manager [7038] - The ALG service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: Access is denied. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 5/20/2011 5:36:52, error: Service Control Manager [7000] - The Application Layer Gateway Service service failed to start due to the following error: The service did not start due to a logon failure. 5/20/2011 17:55:27, error: HTTP [15005] - Unable to bind to the underlying transport for 0.0.0.0:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine. The data field contains the error number. 5/18/2011 22:44:28, error: PlugPlayManager [11] - The device Root\LEGACY_UNLOCKERDRIVER5\0000 disappeared from the system without first being prepared for removal. 5/18/2011 20:42:34, error: Service Control Manager [7034] - The PnkBstrB service terminated unexpectedly. It has done this 1 time(s). 5/18/2011 20:42:34, error: Service Control Manager [7034] - The PnkBstrA service terminated unexpectedly. It has done this 1 time(s). 5/18/2011 20:42:34, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s). 5/18/2011 20:42:34, error: Service Control Manager [7034] - The Acronis Nonstop Backup service service terminated unexpectedly. It has done this 1 time(s). 5/18/2011 20:42:34, error: Service Control Manager [7031] - The Bluetooth Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. 5/18/2011 20:42:33, error: Service Control Manager [7034] - The Advanced SystemCare Service service terminated unexpectedly. It has done this 1 time(s). 5/18/2011 20:42:33, error: Service Control Manager [7034] - The Acronis Scheduler2 Service service terminated unexpectedly. It has done this 1 time(s). 5/18/2011 20:42:32, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s). 5/16/2011 10:44:09, error: SideBySide [36] - The assembly x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13 has missing or invalid files; recovery of this assembly failed. 5/15/2011 18:11:52, error: Service Control Manager [7024] - The Background Intelligent Transfer Service service terminated with service-specific error 2147500037 (0x80004005). . ==== End Of File =========================== DDS (Ver_11-05-19.01) - NTFSx86 Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_25 Run by KOKO at 17:56:32 on 2011-05-20 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.1534.862 [GMT 3:00] . AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} . ============== Running Processes =============== . C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe C:\Program Files\Panda USB Vaccine\USBVaccine.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\DAEMON Tools Lite\DTLite.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\Rainlendar2\Rainlendar2.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Translate Client\translateclient.exe C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\WINDOWS\System32\svchost.exe -k HTTPFilter C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Documents and Settings\KOKO\Desktop\dds.scr C:\WINDOWS\system32\WSCRIPT.exe . ============== Pseudo HJT Report =============== . uStart Page = my.daemon-search.com uLocal Page = uInternet Connection Wizard,ShellNext = hxxp://www.iobit.com/systemcareupdate.html BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" uRun: [Rainlendar2] c:\program files\rainlendar2\Rainlendar2.exe uRun: [Advanced SystemCare 4] c:\program files\iobit\advanced systemcare 4\ASCTray.exe uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay mRun: [LManager] c:\progra~1\launch~1\LManager.exe mRun: [RTHDCPL] RTHDCPL.EXE mRun: [skyTel] SkyTel.EXE mRun: [AzMixerSel] c:\program files\realtek\installshield\AzMixerSel.exe mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe" mRun: [unlockerAssistant] "c:\program files\unlocker\UnlockerAssistant.exe" mRun: [TrueImageMonitor.exe] c:\program files\acronis\trueimagehome\TrueImageMonitor.exe mRun: [Acronis Scheduler2 Service] "c:\program files\common files\acronis\schedule2\schedhlp.exe" mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\blueto~2.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\transl~1.lnk - c:\program files\translate client\translateclient.exe uPolicies-explorer: NoInstrumentation = 1 (0x1) IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: Send to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Notify: AtiExtEvent - Ati2evxx.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\koko\application data\mozilla\firefox\profiles\aqrf0j2c.default\ FF - prefs.js: browser.startup.homepage - www.google.bg FF - plugin: c:\program files\foxit software\foxit reader\plugins\npFoxitReaderPlugin.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\microsoft silverlight\3.0.40818.0\npctrlui.dll . ============= SERVICES / DRIVERS =============== . R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-4-14 13496] R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\drivers\tdrpm258.sys [2011-4-11 911680] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-4-11 218688] R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2010-12-21 115008] R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2010-12-21 94872] R2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\iobit\advanced systemcare 4\ASCService.exe [2011-4-28 352656] R2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\common files\acronis\cdp\afcdpsrv.exe [2011-4-11 2480048] R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2011-1-12 810144] R3 afcdp;afcdp;c:\windows\system32\drivers\afcdp.sys [2011-4-11 160288] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] . =============== Created Last 30 ================ . 2011-05-19 21:18:59 16925 -c--a-w- c:\windows\system32\dllcache\w940nd.sys 2011-05-19 21:17:58 24660 -c--a-w- c:\windows\system32\dllcache\spxupchk.dll 2011-05-19 21:16:59 9216 -c--a-w- c:\windows\system32\dllcache\rsmgrstr.dll 2011-05-19 21:15:59 54186 -c--a-w- c:\windows\system32\dllcache\otcsercb.sys 2011-05-19 21:14:57 17280 -c--a-w- c:\windows\system32\dllcache\mraid35x.sys 2011-05-19 21:13:56 28160 -c--a-w- c:\windows\system32\dllcache\irmon.dll 2011-05-19 21:12:59 32768 -c--a-w- c:\windows\system32\dllcache\hpgtmcro.dll 2011-05-19 21:11:59 70174 -c--a-w- c:\windows\system32\dllcache\el98xn5.sys 2011-05-19 21:10:59 60970 -c--a-w- c:\windows\system32\dllcache\cpqtrnd5.sys 2011-05-19 21:09:59 9728 -c--a-w- c:\windows\system32\dllcache\brserif.dll 2011-05-19 21:08:59 7424 -c--a-w- c:\windows\system32\dllcache\adicvls.sys 2011-05-18 19:23:11 -------- d-----w- c:\documents and settings\koko\local settings\application data\ESET 2011-05-18 19:16:04 -------- d-sha-r- C:\cmdcons 2011-05-16 11:23:58 -------- d-----w- c:\windows\system32\wbem\repository\FS 2011-05-16 11:23:58 -------- d-----w- c:\windows\system32\wbem\Repository 2011-05-16 08:08:30 2469728 ----a-w- c:\windows\system32\AutoPartNt.exe 2011-05-13 17:01:31 -------- d-----w- c:\documents and settings\koko\local settings\application data\Google 2011-04-24 19:06:13 -------- d-----w- c:\documents and settings\koko\application data\Foxit Software 2011-04-21 14:17:42 32128 -c--a-w- c:\windows\system32\dllcache\usbccgp.sys 2011-04-21 14:17:42 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2011-04-20 15:14:13 -------- d-----w- c:\windows\system32\XPSViewer 2011-04-20 15:13:47 89088 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll 2011-04-20 15:13:29 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll 2011-04-20 15:13:29 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe 2011-04-20 15:13:29 597504 ------w- c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe 2011-04-20 15:13:29 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll 2011-04-20 15:13:29 575488 ------w- c:\windows\system32\xpsshhdr.dll 2011-04-20 15:13:29 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll 2011-04-20 15:13:29 1676288 ------w- c:\windows\system32\xpssvcs.dll 2011-04-20 15:13:29 117760 ------w- c:\windows\system32\prntvpt.dll . ==================== Find3M ==================== . 2011-05-19 21:22:42 361600 ----a-w- c:\windows\system32\drivers\tcpip.sys 2011-04-14 02:07:59 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-04-13 23:40:22 73728 ----a-w- c:\windows\system32\javacpl.cpl 2011-04-11 13:03:18 160288 ----a-w- c:\windows\system32\drivers\afcdp.sys 2011-04-11 13:03:16 911680 ----a-w- c:\windows\system32\drivers\tdrpm258.sys 2011-04-11 13:03:15 581984 ----a-w- c:\windows\system32\drivers\timntr.sys 2011-04-11 13:03:09 158272 ----a-w- c:\windows\system32\drivers\snapman.sys 2011-04-11 09:53:14 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys 2011-04-11 09:53:14 22328 ----a-w- c:\documents and settings\koko\application data\PnkBstrK.sys 2011-04-11 09:52:55 103736 ----a-w- c:\windows\system32\PnkBstrB.exe 2011-04-11 09:52:48 66872 ----a-w- c:\windows\system32\PnkBstrA.exe 2011-04-11 08:43:57 218688 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2011-03-07 05:31:47 692736 ----a-w- c:\windows\system32\inetcomm.dll 2011-03-04 06:42:30 434176 ----a-w- c:\windows\system32\vbscript.dll 2011-03-03 13:27:43 1866880 ----a-w- c:\windows\system32\win32k.sys 2011-02-28 08:00:00 80896 ----a-w- c:\windows\system32\ff_vfw.dll 2011-02-23 14:04:32 13496 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys 2011-02-23 13:54:12 29520 ----a-w- c:\windows\system32\SmartDefragBootTime.exe . ============= FINISH: 17:57:13.56 ===============

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

20 май 201115 г.

Благодаря..!Нещата изглеждат много по- добре..! Ако нямате други проблеми ..предлагам да се ориантираме към приключване..!

Добре дошли!

Много бавни браузъри

Featured Replies

Архивирана тема

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)