Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

Много бавни браузъри

20 май 201115 г.

Автор

Да се надяваме че всичко ще е наред!Благодаря за помоща и отделеното време!Лека вечер и дано не се налага повече да ви безпокоя!

3 години по-късно...

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

26 септември 201411 г.

Здравейте, имам същия проблем с всички браузъри можете ли да ми кажете само от вирус ли е или от нещо което трябва да исталирам защото на скоро си преинсталирах компера ...

Правила на форум: Премахване на зловреден софтуер - HiJackThis логове

9 месеца по-късно...

30 юни 201511 г.

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=42491c9daae6534a99bc73bcb868a8e8

# end=init

# utc_time=2015-06-29 07:19:19

# local_time=2015-06-29 10:19:19 )

# country="Bulgaria"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 24548

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=42491c9daae6534a99bc73bcb868a8e8

# end=updated

# utc_time=2015-06-29 07:22:22

# local_time=2015-06-29 10:22:22 )

# country="Bulgaria"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=42491c9daae6534a99bc73bcb868a8e8

# engine=24548

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-06-29 08:26:58

# local_time=2015-06-29 11:26:58 )

# country="Bulgaria"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Microsoft Security Essentials'

# compatibility_mode=5895 16777213 100 100 3376511 102015306 0 0

# scanned=171102

# found=53

# cleaned=51

# scan_time=3876

sh=566D7633907629212EB457A1DE45040881D91DD8 ft=1 fh=c71c0011eb8f3f3b vn="a variant of Win32/Adware.MultiPlug.JY application" ac=I fn="C:\Users\All Users\FineDealSoft\ZjAaaofwRQMcGj.exe"

sh=C106E458753B44D18F15321A89BD5848A22788B7 ft=1 fh=c71c0011d9e6202d vn="a variant of Win32/AdWare.MultiPlug.BN application" ac=I fn="C:\Users\All Users\saveitkeep\YmTbDOAb1vSuFn.exe"

sh=57F3815D0942E3B0A9BEF621A7B4971F55FC74D7 ft=1 fh=c71c0011d20a434c vn="Win32/Adware.MultiPlug.KG application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files\ddeal4REal\jJcSvAoIJ13KWo.exe"

sh=6577C895CB5F434F9D64C4FC4858DA7BF0824805 ft=1 fh=96624ceb45d4cfcc vn="a variant of Win64/Adware.MultiPlug.H application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files\ddeal4REal\jJcSvAoIJ13KWo.x64.dll"

sh=FC25ADFCD3C490C80BC6A1F7BFDBF823FE38F8B7 ft=1 fh=96624ceb86cbe914 vn="a variant of Win64/Adware.MultiPlug.H application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files\SmartaCoMpauRe\XnzvSILcoz5e7p.x64.dll"

sh=D2471077BC81606742D8D9FF0BF793654597B1BE ft=1 fh=921d89eb2974b2ee vn="a variant of Win64/Adware.MultiPlug.G application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files (x86)\easytoshoap\bxb9kK3kxjSq0i.x64.dll"

sh=397481BD8145A3E6FE8368F5365EFB3CEB40097C ft=1 fh=468636d72249f836 vn="a variant of Win64/Adware.MultiPlug.H application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files (x86)\rEaldeeal\FH5VZZrox1bmYl.x64.dll"

sh=566D7633907629212EB457A1DE45040881D91DD8 ft=1 fh=c71c0011eb8f3f3b vn="a variant of Win32/Adware.MultiPlug.JY application (cleaned by deleting - quarantined)" ac=C fn="C:\ProgramData\FineDealSoft\ZjAaaofwRQMcGj.exe"

sh=C106E458753B44D18F15321A89BD5848A22788B7 ft=1 fh=c71c0011d9e6202d vn="a variant of Win32/AdWare.MultiPlug.BN application (cleaned by deleting - quarantined)" ac=C fn="C:\ProgramData\saveitkeep\YmTbDOAb1vSuFn.exe"

sh=BCA587FF66FD8DD52F0CF166C4C7D09FC65857B7 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\Torch\User Data\Default\Extensions\agfjdflmdlnffhlfmjdpbcoccaeamikk\217\jcu3U8N.js.vir"

sh=5CFC616278B80A3250864BF37E3D520F93E113DA ft=0 fh=0000000000000000 vn="JS/Adware.MultiPlug.B application (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\Torch\User Data\Default\Extensions\agfjdflmdlnffhlfmjdpbcoccaeamikk\217\lsdb.js.vir"

sh=A812A2143E429DB9B06823C9017E6128B4BD6A3F ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\Torch\User Data\Default\Extensions\gpgficlpgfomicakhjkinbngidnclfli\6.2\content.js.vir"

sh=3D769A170F0600F2984C37B4D6BF0D72266B3270 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\Torch\User Data\Default\Extensions\gpgficlpgfomicakhjkinbngidnclfli\6.2\eh1IIxR.js.vir"

sh=A812A2143E429DB9B06823C9017E6128B4BD6A3F ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\Torch\User Data\Default\Extensions\klaecimjlbpfompicealiiifcdjnkbpn\219\content.js.vir"

sh=B32AF8E931CBC1E0795407F857CC06D588CD9F9F ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\Torch\User Data\Default\Extensions\klaecimjlbpfompicealiiifcdjnkbpn\219\pQ5.js.vir"

sh=A812A2143E429DB9B06823C9017E6128B4BD6A3F ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\Torch\User Data\Default\Extensions\mmdhcggjebefhdlpdjggelhnelnjefip\141\content.js.vir"

sh=60FB38A575D2D3AFEC41353CE235440D500A2B84 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\Torch\User Data\Default\Extensions\mmdhcggjebefhdlpdjggelhnelnjefip\141\DJZhqs.js.vir"

sh=6ACDFE30F6488C45D8307EE2289CB44C4E9E7D53 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\Torch\User Data\Default\Extensions\plpdjbappofmfbgdmhoaabefbobddchk\143\content.js.vir"

sh=1EBF650F783A6B71F0CC941B23148A463246BA17 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\Torch\User Data\Default\Extensions\plpdjbappofmfbgdmhoaabefbobddchk\143\llzkqFCW.js.vir"

sh=2CBFD4E9FEC45F4DFA6FF73DE565A530E62214F4 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\Torch\User Data\Default\Extensions\ppmjceoiaemcohnikoniifdmoemkegej\234\tAhzU4VKu.js.vir"

sh=4D313FEC05E229F05E7E6456F8E83E12E5AE7C15 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\[email protected]\content\bg.js.vir"

sh=D76DBBF21BA73EECF4F3D9C2FA189456FF7EE1E5 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\[email protected]\content\bg.js.vir"

sh=472E60BAC1FC6BE0DF79F147ACD08DCE82D1EA00 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\[email protected]\content\bg.js.vir"

sh=E2A310045560F4B26B0CD68B5E5D90F403937A19 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\[email protected]\content\bg.js.vir"

sh=8AD560A25831F659340CEC9853D2E73A07A0DCCE ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\[email protected]\content\bg.js.vir"

sh=E78AE202C45F0888D5BB8755A440275C5A415009 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Crossbrowse\Crossbrowse\User Data\Profile 1\Extensions\jhjjaieabcmmdcjkiohhcigkhcgjmdep\1.0_0\bg.js"

sh=BCA587FF66FD8DD52F0CF166C4C7D09FC65857B7 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\agfjdflmdlnffhlfmjdpbcoccaeamikk\217\jcu3U8N.js"

sh=5CFC616278B80A3250864BF37E3D520F93E113DA ft=0 fh=0000000000000000 vn="JS/Adware.MultiPlug.B application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\agfjdflmdlnffhlfmjdpbcoccaeamikk\217\lsdb.js"

sh=A812A2143E429DB9B06823C9017E6128B4BD6A3F ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gpgficlpgfomicakhjkinbngidnclfli\6.2\content.js"

sh=3D769A170F0600F2984C37B4D6BF0D72266B3270 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gpgficlpgfomicakhjkinbngidnclfli\6.2\eh1IIxR.js"

sh=B32AF8E931CBC1E0795407F857CC06D588CD9F9F ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\klaecimjlbpfompicealiiifcdjnkbpn\219\pQ5.js"

sh=60FB38A575D2D3AFEC41353CE235440D500A2B84 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mmdhcggjebefhdlpdjggelhnelnjefip\141\DJZhqs.js"

sh=6ACDFE30F6488C45D8307EE2289CB44C4E9E7D53 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\plpdjbappofmfbgdmhoaabefbobddchk\143\content.js"

sh=1EBF650F783A6B71F0CC941B23148A463246BA17 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\plpdjbappofmfbgdmhoaabefbobddchk\143\llzkqFCW.js"

sh=2CBFD4E9FEC45F4DFA6FF73DE565A530E62214F4 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ppmjceoiaemcohnikoniifdmoemkegej\234\tAhzU4VKu.js"

sh=E78AE202C45F0888D5BB8755A440275C5A415009 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\jhjjaieabcmmdcjkiohhcigkhcgjmdep\1.0_0\bg.js"

sh=BB5260311D84A367FE98DD13F29C43205FAA58CF ft=1 fh=a6caf9f7a027628c vn="a variant of Win32/RiskWare.Astori.C application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Roaming\InetStat\inetstat.exe"

sh=FE25AC76655BF8E5298D36EC5FC57A62BEA16ED0 ft=0 fh=0000000000000000 vn="VBS/Kryptik.DY trojan (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Roaming\WSE_Astromenda\UpdateProc\bkup.dat"

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=42491c9daae6534a99bc73bcb868a8e8

# end=init

# utc_time=2015-06-30 06:28:19

# local_time=2015-06-30 09:28:19 )

# country="Bulgaria"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 24566

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=42491c9daae6534a99bc73bcb868a8e8

# end=updated

# utc_time=2015-06-30 06:29:55

# local_time=2015-06-30 09:29:55 )

# country="Bulgaria"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=42491c9daae6534a99bc73bcb868a8e8

# engine=24566

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-06-30 07:30:54

# local_time=2015-06-30 10:30:54 )

# country="Bulgaria"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Microsoft Security Essentials'

# compatibility_mode=5895 16777213 100 100 3459547 102098342 0 0

# scanned=170723

# found=26

# cleaned=24

# scan_time=3658

sh=1E246B8649EB422FE678A107667DC1C6932EC2A9 ft=1 fh=b9875c38bf01df1c vn="Win32/GenUpdater potentially unwanted application" ac=I fn="C:\Users\All Users\CoolYou\CoolYou.exe"

sh=5F83EC091F2E56C574A626FFEF768EFB632D7EDE ft=1 fh=4031d79ff4418eb0 vn="Win32/GenUpdater potentially unwanted application" ac=I fn="C:\Users\All Users\CoolYou\runtime.dll"

sh=3B3B1284D3B2542D5E7D2356BFAD5CA8AA0D9D34 ft=1 fh=beec2f5e25bb87ce vn="a variant of Win32/SpeedBit.F potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files\Common Files\System\SysMenu.dll"

sh=AB42DE98705B4C0F271EA7F4B36FF986553F4476 ft=1 fh=3a39edda83cdf686 vn="a variant of Win32/KoyoteLab.A potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files (x86)\Free Easy CD DVD Burner\Uninstall.exe"

sh=D2408C8A09A2BD9704AF39F818EC7AC9E9CCA46E ft=1 fh=08d2b982dc66508e vn="a variant of Win32/AdkDLLWrapper.A potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files (x86)\uTorrent\uTorrent.exe"

sh=1E246B8649EB422FE678A107667DC1C6932EC2A9 ft=1 fh=b9875c38bf01df1c vn="Win32/GenUpdater potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\ProgramData\CoolYou\CoolYou.exe"

sh=5F83EC091F2E56C574A626FFEF768EFB632D7EDE ft=1 fh=4031d79ff4418eb0 vn="Win32/GenUpdater potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\ProgramData\CoolYou\runtime.dll"

sh=D307BE2E9FB1259B72C3DD6A11FE08303A2134C0 ft=1 fh=eeeb5e3f86c68fc6 vn="Win32/AnyProtect.G potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\nsaAEC8.tmp.vir"

sh=117B708AA171989B1C23FF89FD01EE49CA792876 ft=1 fh=c71c00112ad6fd0f vn="Win32/VOPackage.BS potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\nsoFE30.tmp.vir"

sh=845375153EF1C20A95F57281BCA4784F65F4191A ft=1 fh=c71c0011062ea763 vn="Win32/Techsnab.H potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Roaming\9685.tmp.exe.vir"

sh=C0794B81D4232F94E3E59917E6EFE025A5AC72D4 ft=1 fh=793aa3eeb17df0ba vn="a variant of Win32/Toolbar.Conduit.Y potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Conduit\Community Alerts\Aler0.dll"

sh=93292B6DBC58611C49FA64A41C6C42ECD4F64A5F ft=1 fh=4b88797ea918e26b vn="a variant of Win32/Toolbar.Conduit.Y potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Conduit\Community Alerts\Alert.dll"

sh=2B9A1340BEC2FE2694C333ACD77F0E12EF9550D1 ft=1 fh=fcbeb3ad261a92d1 vn="a variant of Win32/Conduit.SearchProtect.P potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\APISupport\APISupport.dll"

sh=675526C1B3CB27C6635233B62EDB8ECEEBFE1556 ft=1 fh=8382eeac10eb278f vn="a variant of Win32/Toolbar.Conduit.AH potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\nativeMessaging\TBMessagingHost.exe"

sh=C0114483C9E2C1271B0D594AB6A6BF1E4F383D63 ft=1 fh=e2607344a0894545 vn="a variant of Win32/Conduit.SearchProtect.N potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\plugins\ChromeApiPlugin.dll"

sh=8BCB68B7790325A2C90D0FCB4BD01895C753485B ft=1 fh=e9ef22c53a4c5acf vn="a variant of Win32/Techsnab.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\mlwps.exe"

sh=B895750CD8DA172165AEC7583FB543AF2C7E80B7 ft=1 fh=97245685ee9ce563 vn="a variant of Win64/Systweak.A potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\System32\roboot64.exe"

sh=24016DEC443904E847F3A1AD39B6D5C657AB36CD ft=1 fh=d5a2e8ceee190a09 vn="a variant of Win32/Toolbar.DefaultTab.B potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabBHO.dll"

sh=7F664E4CA2AEDD2CD54ABC2951DD1A174F818A34 ft=1 fh=5397d6de87619a09 vn="a variant of Win32/Toolbar.DefaultTab.B potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabStart.exe"

sh=807BB8FB1B51C7937E7F21886D61BD27EFEB06D8 ft=1 fh=57e5261fee1062cf vn="Win64/Toolbar.DefaultTab.B potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabStart64.exe"

sh=A66441EA33B541895F23B3A4F8EB408B616A94BA ft=1 fh=02e58446c958c5ff vn="Win32/Toolbar.DefaultTab.E potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabUninstaller.exe"

sh=32B7634720114676AD29802481EB87824BD095B6 ft=1 fh=2516e6583af14921 vn="a variant of Win32/Toolbar.DefaultTab.B potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabWrap.dll"

sh=23528D4027F8F3AA10A6E2006D6CDD532750FEDF ft=1 fh=added2cc9fdb45e9 vn="Win64/Toolbar.DefaultTab.B potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabWrap64.dll"

sh=8E5D59287565FD653B41EC28BECF86CE814037C9 ft=1 fh=ad4dd2d4fc824dd5 vn="a variant of Win32/Toolbar.DefaultTab.F potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DTChk.exe"

sh=5F639E24E51288B4EE731ABFE2192FA1CEDC78F6 ft=1 fh=a5b0072336e5654c vn="a variant of Win32/Toolbar.DefaultTab.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DTReg.exe"

sh=8DED5FC8FF56BDD3FCA1FB2970C5E296BCCF989A ft=1 fh=9067f97ee6fa45c2 vn="Win32/Toolbar.DefaultTab.E potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\uninstalldt.exe"

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=42491c9daae6534a99bc73bcb868a8e8

# end=init

# utc_time=2015-06-30 08:09:04

# local_time=2015-06-30 11:09:04 )

# country="Bulgaria"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

esets_scanner_update returned -1 esets_gle=53251

Update Finalize

Updated modules version: 24566

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=42491c9daae6534a99bc73bcb868a8e8

# end=updated

# utc_time=2015-06-30 08:09:38

# local_time=2015-06-30 11:09:38 )

# country="Bulgaria"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=42491c9daae6534a99bc73bcb868a8e8

# engine=24566

# end=stopped

# remove_checked=false

# archives_checked=false

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-06-30 08:48:32

# local_time=2015-06-30 11:48:32 )

# country="Bulgaria"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Microsoft Security Essentials'

# compatibility_mode=5895 16777213 100 100 3464205 102103000 0 0

# scanned=92304

# found=0

# cleaned=0

# scan_time=2332

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=42491c9daae6534a99bc73bcb868a8e8

# end=init

# utc_time=2015-06-30 10:43:55

# local_time=2015-06-30 01:43:55 )

# country="Bulgaria"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 24569

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=42491c9daae6534a99bc73bcb868a8e8

# end=updated

# utc_time=2015-06-30 10:45:05

# local_time=2015-06-30 01:45:05 )

# country="Bulgaria"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=42491c9daae6534a99bc73bcb868a8e8

# engine=24569

# end=finished

# remove_checked=true

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2015-06-30 11:58:46

# local_time=2015-06-30 02:58:46 )

# country="Bulgaria"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Microsoft Security Essentials'

# compatibility_mode=5895 16777213 100 100 3475619 102114414 0 0

# scanned=170900

# found=17

# cleaned=16

# scan_time=4421

sh=F3A9A6DD7B2C665AF8B943ABF203EA084A6D2BCC ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\Users\All Users\CoolYou\jhjjaieabcmmdcjkiohhcigkhcgjmdep.crx"

sh=8B3D1B52EC5AF9BC6FD6B854F7D9FEA547BFE174 ft=1 fh=7884e5425942138b vn="Win32/ReImageRepair.F potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files\Reimage\Reimage Protector\ProtectorUpdater.exe"

sh=1800652CFE08885C12BA8BDC4BF916FD15B551BF ft=1 fh=d539a514c8eed865 vn="Win32/ReImageRepair.F potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files\Reimage\Reimage Repair\ReimageRepair.exe"

sh=F3A9A6DD7B2C665AF8B943ABF203EA084A6D2BCC ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application (deleted - quarantined)" ac=C fn="C:\ProgramData\CoolYou\jhjjaieabcmmdcjkiohhcigkhcgjmdep.crx"

sh=982D48AD817E6627C17B8C063C6285DB18E1F9EC ft=1 fh=7e3230d84a51a06f vn="a variant of Win32/Bundled.Toolbar.Ask.D potentially unsafe application (cleaned by deleting - quarantined)" ac=C fn="C:\Qoobox\Quarantine\C\Users\HP ProBook\AppData\Local\Microsoft\Windows\Temporary Internet Files\Offercast2802_PCD_.exe.vir"

sh=AD4C1CE4BCAB64E4DA98A36F2774D33E4E1574E3 ft=1 fh=438430599380b8ac vn="Win32/ReImageRepair.F potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GLKPTBF2\ReimagePackage1817x64a[1].exe"

sh=3EF2653450DC545F857CEE6929B565FC6203AEE1 ft=1 fh=267ee94ef955d52f vn="Win32/ReImageRepair.F potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HOLSSYDB\ProtectorPackage2008x64[1].exe"

sh=7A8425D8DAD8E153088D6BB5A296B0BFA0B8D1C4 ft=1 fh=00cc0dd029de9043 vn="a variant of Win32/OpenCandy.C potentially unsafe application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\HP ProBook\AppData\Roaming\BitTorrent\updates\7.9.3_40209.exe"

sh=373AD1485924193C6AAEC83293DC4D41FBBB5B03 ft=1 fh=efca26f8c77d3d10 vn="a variant of Win32/Bundled.Toolbar.Ask.F potentially unsafe application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\Installer\MSI27DB.tmp"

sh=DC3C29A963871A9FF0613FFEC4FC39AB04760924 ft=1 fh=aa8756f8c51680cf vn="a variant of Win32/Bundled.Toolbar.Ask.F potentially unsafe application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\Installer\MSI5120.tmp"

sh=3F7F25A0628A731849E70F5C6A37B48F3CF431D0 ft=1 fh=6ca57a02b1c441c3 vn="a variant of Win32/Bundled.Toolbar.Ask.F potentially unsafe application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\Installer\MSI76BD.tmp"

sh=BF8EDA32BDCD510936D3037B5DB362F549DB896E ft=1 fh=4d767199a2feb42a vn="a variant of Win64/NetFilter.A potentially unsafe application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\System32\drivers\{e08fcad9-9d66-45db-b3c2-5d84d4983d6e}Gw64.sys"

30 юни 201511 г.

Създайте си ваша Нова тема

Правила на форум: Премахване на зловреден софтуер - HiJackThis логове

Точка 2. Не пишете в чужда тема, а само във вашата.

Системата ми е инфектирана - Какво да правя сега?

Редактирано 30 юни 201511 г. от kolev_74 (преглед на промените)

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

30 юни 201511 г.

Създал съм му нова тема още вчера....:

https://www.kaldata.com/forums/topic/243455-%D1%81%D0%BF%D0%B0%D0%B7%D0%B2%D0%B0%D0%B9%D1%82%D0%B5-%D0%BF%D1%80%D0%B0%D0%B2%D0%B8%D0%BB%D0%B0%D1%82%D0%B0-%D0%BD%D0%B0-%D0%BF%D0%BE%D0%B4%D1%80%D0%B0%D0%B7%D0%B4%D0%B5%D0%BB%D0%B0/

Няма кой да прочете...има правила на подраздела...Още една глупост и ще последва бан...!

Повече не искам никой да пише в чужда тема....още повече маркирана като "Решена"

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Няма регистрирани потребители разглеждащи тази страница.

Подкрепи съществуването на форума - направи дарение
32%

Дарени 315 € от нужните 1 000 €
- +21

Получавайте известие, когато има важна промяна или новина свързана с форума.

Абонирайте се

Добре дошли!

Много бавни браузъри

Featured Replies

Архивирана тема

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)