Здравейте, имам проблем при свързването чрез USB. Когато включа устройството в порта компютърът не реагира изобщо. Проверих на друг дали проблема не е в устройството или в свързващия кабел - всичко е наред. Това, което ме кара да мисля, че проблемът е вирус е, че при свързването на устройството Avira блокира следните два файла:

C:\autorun.inf

D:\autorun.inf

Това са логовете от dds.scr

dds.txt:

.
DDS (Ver_11-05-19.01) - NTFSx86 
Internet Explorer: 6.0.2900.3311
Run by Administrator at 23:06:40 on 2011-05-28
Microsoft Windows XP Professional  5.1.2600.3.1251.359.1033.18.1470.901 [GMT 3:00]
.
AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\VMSnap23.exe
C:\WINDOWS\Domino.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Uniblue\DriverScanner\dsmonitor.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Documents and Settings\All Users\Application Data\Easybits GO\EasyBitsGO.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Webteh\BSplayerPro\bsplayer.exe
C:\Documents and Settings\Administrator\Desktop\dds.scr
C:\WINDOWS\system32\WSCRIPT.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.bigseekpro.com/burn4free/{AA76E95F-A6C0-49F6-99DD-3EF9DD362BC7}
mStart Page = hxxp://www.bigseekpro.com/burn4free/{AA76E95F-A6C0-49F6-99DD-3EF9DD362BC7}
uURLSearchHooks: ToolbarURLSearchHook Class: {ca3eb689-8f09-4026-aa10-b9534c691ce0} - c:\program files\burn4free db toolbar\tbhelper.dll
BHO: IDM integration (IDMIEHlprObj Class): {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\program files\internet download manager\IDMIECC.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SMTTB2009 Class: {fcbccb87-9224-4b8d-b117-f56d924beb18} - c:\program files\burn4free db toolbar\tbcore3.dll
TB: Burn4Free DB Toolbar: {338b4dfe-2e2c-4338-9e41-e176d497299e} - c:\program files\burn4free db toolbar\tbcore3.dll
uRun: [Google Update] "c:\documents and settings\administrator\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe"
uRun: [ClipCube] c:\docume~1\admini~1\locals~1\temp\rar$ex44.848\clipcube-0.2.2\ClipCube.exe
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
uRun: [IDMan] c:\program files\internet download manager\IDMan.exe /onboot
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [VTTimer] VTTimer.exe
mRun: [VTTrayp] VTtrayp.exe
mRun: [RaidTool] c:\program files\via\raid\raid_tool.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [BigDogPath323VMSnap] c:\windows\VMSnap23.exe
mRun: [BigDogPath323Domino] c:\windows\Domino.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 10.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [AdobeAAMUpdater-1.0] "c:\program files\common files\adobe\oobe\pdapp\uwa\UpdaterStartupUtility.exe"
mRun: [SwitchBoard] c:\program files\common files\adobe\switchboard\SwitchBoard.exe
mRun: [AdobeCS5.5ServiceManager] "c:\program files\common files\adobe\cs5.5servicemanager\CS5.5ServiceManager.exe" -launchedbylogin
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Свали всички линкове с IDM - c:\program files\internet download manager\IEGetAll.htm
IE: Свали с IDM - c:\program files\internet download manager\IEExt.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {36ECAF82-3300-8F84-092E-AFF36D6C7040} - {86529161-034E-4F8A-88D2-3C625E612E04} - c:\program files\winhttrack\WinHTTrackIEBar.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1304537499031
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
.
============= SERVICES / DRIVERS ===============
.
R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [2011-5-27 22168]
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2011-5-18 11608]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-5-4 218688]
R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [2011-4-5 98160]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2011-5-18 136360]
R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2011-5-18 269480]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2011-5-18 61960]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-5-13 363344]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-5-13 20952]
R3 vmfilter323;323 filter service, Normal;c:\windows\system32\drivers\vmfilter323.sys [2011-5-8 420480]
R3 ZSMC326;Vimicro USB2.0 PC Camera(VC0323);c:\windows\system32\drivers\usbvm323.sys [2011-5-8 260608]
S3 FXDRV;FXDRV;\??\e:\fxdrv.sys --> e:\Fxdrv.sys [?]
S3 LLRING0;LLRING0;c:\program files\insaniamu\muguard\llck.sys [2011-5-28 3840]
S3 SwitchBoard;Adobe SwitchBoard;c:\program files\common files\adobe\switchboard\SwitchBoard.exe [2010-2-19 517096]
.
=============== Created Last 30 ================
.
2011-05-28 18:20:55	--------	d-----w-	c:\documents and settings\administrator\application data\go
2011-05-28 18:20:52	--------	d-----w-	c:\documents and settings\all users\application data\Easybits GO
2011-05-28 17:28:47	--------	d-----w-	c:\program files\InsaniaMU
2011-05-27 23:42:33	69472	----a-w-	c:\windows\system32\drivers\usbhub20.sys
2011-05-27 11:07:05	26112	-c--a-w-	c:\windows\system32\dllcache\usbser.sys
2011-05-27 11:07:05	26112	----a-w-	c:\windows\system32\drivers\usbser.sys
2011-05-27 02:10:15	10264	----a-w-	c:\windows\system32\Viagart.sys
2011-05-27 02:10:11	22168	----a-w-	c:\windows\system32\drivers\xfilt.sys
2011-05-27 02:10:06	13976	----a-w-	c:\windows\system32\drivers\videX32.sys
2011-05-27 02:09:46	73728	----a-w-	c:\windows\system32\RtNicProp32.dll
2011-05-27 02:09:46	130432	----a-w-	c:\windows\system32\drivers\Rtnicxp.sys
2011-05-27 02:05:00	--------	d-----w-	c:\documents and settings\all users\Uniblue
2011-05-27 02:04:53	--------	d-----w-	c:\documents and settings\administrator\application data\Uniblue
2011-05-27 02:04:30	--------	d-----w-	c:\program files\Uniblue
2011-05-26 22:55:00	442368	----a-r-	c:\windows\system32\vp6vfw.dll
2011-05-26 07:40:50	33792	----a-r-	c:\windows\NPSExec.exe
2011-05-26 07:39:16	--------	d-----w-	c:\program files\Maxis
2011-05-26 07:39:02	--------	d-----w-	c:\documents and settings\administrator\WINDOWS
2011-05-25 21:09:21	--------	d-----w-	c:\documents and settings\all users\application data\AlawarWrapper
2011-05-25 21:09:16	--------	d-----w-	c:\program files\Alawar
2011-05-25 20:14:30	--------	d-----w-	c:\program files\Hard Truck 18 Wheels of Steel
2011-05-23 19:11:10	--------	d-----w-	c:\documents and settings\administrator\application data\Toolbar4
2011-05-23 19:11:05	--------	d-----w-	c:\documents and settings\administrator\local settings\application data\Somoto
2011-05-23 19:11:02	--------	d-----w-	c:\program files\Burn4Free DB Toolbar
2011-05-23 19:10:40	--------	d-----w-	c:\program files\b4ficons
2011-05-23 19:10:38	--------	d-----w-	c:\program files\Burn4Free
2011-05-21 20:38:57	323584	----a-w-	c:\windows\system32\AudioControl.ocx
2011-05-21 20:38:57	24576	----a-w-	c:\windows\system32\JKTryIcn.ocx
2011-05-21 20:38:56	--------	d-----w-	c:\program files\KP  Software
2011-05-21 10:03:14	--------	d-----w-	c:\program files\Cyrilla
2011-05-21 00:17:07	--------	d-----w-	c:\program files\Aimersoft
2011-05-20 22:38:44	--------	d-----w-	c:\documents and settings\administrator\application data\IDM
2011-05-20 22:38:35	--------	d-----w-	c:\documents and settings\administrator\application data\DMCache
2011-05-20 22:38:28	--------	d-----w-	c:\program files\Internet Download Manager
2011-05-18 19:41:53	--------	d-----w-	c:\windows\system32\NtmsData
2011-05-18 19:37:03	--------	d-----w-	c:\documents and settings\administrator\application data\Avira
2011-05-18 19:34:48	61960	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2011-05-18 19:34:48	--------	d-----w-	c:\program files\Avira
2011-05-18 19:34:48	--------	d-----w-	c:\documents and settings\all users\application data\Avira
2011-05-17 23:13:26	--------	d-----w-	c:\program files\Lavalys
2011-05-17 22:56:21	--------	d-----w-	c:\program files\SpeedFan
2011-05-15 00:39:58	--------	d-----w-	c:\program files\AVI to 3GP
2011-05-13 22:10:14	--------	d-----w-	c:\documents and settings\administrator\application data\Utherverse
2011-05-13 21:44:35	--------	d-----w-	c:\program files\Utherverse Digital Inc
2011-05-13 20:39:23	--------	d-----w-	c:\documents and settings\administrator\application data\Malwarebytes
2011-05-13 20:39:13	38224	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-13 20:39:12	--------	d-----w-	c:\documents and settings\all users\application data\Malwarebytes
2011-05-13 20:39:08	20952	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-05-13 20:39:08	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2011-05-13 18:09:27	--------	d-----w-	c:\documents and settings\administrator\application data\Adobe Mini Bridge CS5.1
2011-05-13 18:09:24	--------	d-----w-	c:\documents and settings\administrator\application data\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2011-05-13 17:59:17	--------	d-----w-	c:\documents and settings\all users\application data\regid.1986-12.com.adobe
2011-05-11 23:17:36	--------	d-----w-	c:\documents and settings\administrator\.rainlendar2
2011-05-11 23:17:20	--------	d-----w-	c:\program files\Rainlendar2
2011-05-10 18:17:47	40960	----a-w-	c:\windows\system32\secLib.ocx
2011-05-10 18:17:47	140288	----a-w-	c:\windows\system32\comdlg32.ocx
2011-05-10 18:17:47	108336	----a-w-	c:\windows\system32\mswinsck.ocx
2011-05-10 18:17:46	--------	d-----w-	C:\midi
2011-05-08 16:38:07	--------	d-----w-	c:\documents and settings\administrator\local settings\application data\Temp
2011-05-08 16:38:07	--------	d-----w-	c:\documents and settings\administrator\local settings\application data\Adobe
2011-05-08 00:39:40	--------	d-----w-	c:\documents and settings\administrator\local settings\application data\bcWebCam
2011-05-08 00:39:17	--------	d-----w-	c:\documents and settings\all users\application data\Vladovsoft
2011-05-08 00:31:19	53760	-c--a-w-	c:\windows\system32\dllcache\vfwwdm32.dll
2011-05-08 00:31:19	53760	----a-w-	c:\windows\system32\vfwwdm32.dll
2011-05-08 00:31:19	20992	----a-w-	c:\windows\system32\dshowext.ax
2011-05-08 00:31:07	98304	----a-w-	c:\windows\system32\VMCtrl323.ax
2011-05-08 00:31:07	81920	----a-w-	c:\windows\VMCap323.exe
2011-05-08 00:31:07	49152	----a-w-	c:\windows\domino.exe
2011-05-08 00:31:07	260608	----a-w-	c:\windows\system32\drivers\usbvm323.sys
2011-05-08 00:31:07	253952	----a-w-	c:\windows\system32\Vmprp323.ax
2011-05-08 00:31:07	212992	----a-w-	c:\windows\VMSnap23.exe
2011-05-08 00:31:07	192512	----a-w-	c:\windows\VmCam.exe
2011-05-08 00:31:06	420480	----a-w-	c:\windows\system32\drivers\vmfilter323.sys
2011-05-08 00:31:06	40960	----a-w-	c:\windows\system32\setupfilter.exe
2011-05-07 20:04:45	221184	----a-w-	c:\windows\system32\wmpns.dll
2011-05-07 20:03:21	--------	d-----w-	c:\windows\system32\wbem\repository\FS
2011-05-07 20:03:21	--------	d-----w-	c:\windows\system32\wbem\Repository
2011-05-07 17:34:41	--------	d-----w-	c:\windows\EffectResources
2011-05-07 17:34:10	--------	d-----w-	c:\program files\Vimicro
2011-05-07 12:15:02	1892184	----a-w-	c:\windows\system32\D3DX9_42.dll
2011-05-07 12:15:01	2414360	----a-w-	c:\windows\system32\d3dx9_31.dll
2011-05-07 12:14:56	--------	d-----w-	c:\windows\Logs
2011-05-07 12:14:08	819200	----a-w-	c:\program files\windows media player\wmsetsdk.exe
2011-05-07 12:14:08	47616	----a-w-	c:\program files\windows media player\msoobci.dll
2011-05-07 12:14:08	--------	d-----w-	c:\program files\Winamp Detect
2011-05-07 02:24:49	--------	d-----w-	C:\Моите Интернет Страници
2011-05-07 02:23:54	--------	d-----w-	c:\program files\WinHTTrack
2011-05-06 17:44:35	--------	d-----w-	c:\program files\CCleaner
2011-05-06 17:05:46	--------	d-----w-	c:\documents and settings\all users\application data\Speedbit
2011-05-06 16:10:59	--------	d-----w-	c:\documents and settings\administrator\application data\Auslogics
2011-05-06 15:34:30	76288	----a-w-	c:\windows\system32\ChFmls.dll
2011-05-06 15:34:25	--------	d-----w-	c:\program files\MSOTools
2011-05-06 15:03:54	--------	d-----w-	C:\cfadata
2011-05-06 15:03:03	--------	d-----w-	c:\program files\Business Functions
2011-05-06 15:00:10	--------	d-----w-	c:\documents and settings\administrator\local settings\application data\Identities
2011-05-06 14:49:05	--------	d-----w-	c:\program files\Digital Physiognomy
2011-05-06 14:43:00	--------	d-----w-	c:\documents and settings\administrator\application data\GetRightToGo
2011-05-06 13:56:19	8704	----a-w-	c:\windows\system32\CNMVS75.DLL
2011-05-06 13:56:19	59392	----a-w-	c:\windows\system32\spool\prtprocs\w32x86\CNMPP75.DLL
2011-05-06 13:56:18	20992	----a-w-	c:\windows\system32\spool\prtprocs\w32x86\CNMPD75.DLL
2011-05-06 13:56:17	139776	----a-w-	c:\windows\system32\CNMLM75.DLL
2011-05-06 13:56:14	90112	----a-w-	c:\windows\system32\CNMCP75.exe
2011-05-06 13:36:26	--------	d-----w-	c:\program files\FreePromote 3
2011-05-06 13:35:22	--------	d-----w-	c:\program files\mojosoft
2011-05-06 13:35:22	--------	d-----w-	c:\documents and settings\administrator\application data\mojosoft
2011-05-06 13:16:46	--------	d-----w-	c:\program files\Auslogics
2011-05-06 13:03:27	--------	d-----w-	c:\documents and settings\administrator\application data\Stardock
2011-05-06 13:03:21	--------	dc-h--w-	c:\documents and settings\all users\application data\~0
2011-05-06 13:02:00	--------	d-----w-	c:\documents and settings\administrator\local settings\application data\PackageAware
2011-05-06 12:42:28	--------	d-----w-	c:\documents and settings\administrator\local settings\application data\Sphere
2011-05-06 10:53:38	--------	d-----w-	c:\documents and settings\administrator\application data\.minecraft
2011-05-06 10:51:37	73728	----a-w-	c:\windows\system32\javacpl.cpl
2011-05-06 10:51:37	472808	----a-w-	c:\windows\system32\deployJava1.dll
2011-05-06 10:38:43	--------	d-----w-	c:\program files\EA GAMES
2011-05-06 10:18:02	2297552	----a-w-	c:\windows\system32\d3dx9_26.dll
2011-05-05 20:22:42	--------	d-----w-	c:\documents and settings\administrator\application data\vloader-bg
2011-05-05 20:22:21	--------	d-----w-	c:\program files\vloader-bg
2011-05-04 22:37:09	175616	----a-w-	c:\windows\system32\unrar.dll
2011-05-04 22:37:08	80896	----a-w-	c:\windows\system32\ff_vfw.dll
2011-05-04 22:37:08	631808	----a-w-	c:\windows\system32\xvidcore.dll
2011-05-04 22:37:08	243200	----a-w-	c:\windows\system32\xvidvfw.dll
2011-05-04 22:37:08	237568	----a-w-	c:\windows\system32\yv12vfw.dll
2011-05-04 22:37:08	232448	----a-w-	c:\windows\system32\mp3fhg.acm
2011-05-04 22:37:08	151552	----a-w-	c:\windows\system32\ac3acm.acm
2011-05-04 22:37:05	--------	d-----w-	c:\program files\K-Lite Codec Pack
2011-05-04 22:32:59	--------	d-----w-	c:\program files\GRETECH
2011-05-04 22:22:53	--------	d-----w-	c:\windows\system32\CatRoot_bak
2011-05-04 22:08:48	--------	d-----w-	c:\windows\ServicePackFiles
2011-05-04 22:08:38	294912	------w-	c:\program files\windows media player\dlimport.exe
2011-05-04 22:08:35	294912	-c----w-	c:\windows\system32\dllcache\dlimport.exe
2011-05-04 22:06:59	73216	------w-	c:\windows\system32\drivers\atintuxx.sys
2011-05-04 22:05:48	19569	----a-w-	c:\windows\002896_.tmp
2011-05-04 21:59:21	--------	d-----w-	C:\1a8b16c3eb15d037006beb
2011-05-04 21:39:08	--------	d-----w-	c:\program files\FreeTime
.
==================== Find3M  ====================
.
2011-05-14 14:25:28	53	----a-w-	c:\windows\SW_Win9423X24.DLL
2011-05-04 19:37:35	218688	----a-w-	c:\windows\system32\drivers\dtsoftbus01.sys
2011-05-04 19:27:34	691696	----a-w-	c:\windows\system32\drivers\sptd.sys
2011-03-28 17:46:40	98160	----a-w-	c:\windows\system32\drivers\idmtdi.sys
2011-03-04 19:44:14	59888	------w-	c:\windows\system32\pxwma.dll
2011-03-04 19:44:14	45648	------w-	c:\windows\system32\drivers\PxHelp20.sys
2011-03-04 19:44:14	133616	------w-	c:\windows\system32\pxafs.dll
2011-03-04 19:44:12	9200	------w-	c:\windows\system32\drivers\cdralw2k.sys
2011-03-04 19:44:12	9072	------w-	c:\windows\system32\drivers\cdr4_xp.sys
2011-03-04 19:44:12	126448	------w-	c:\windows\system32\pxinsi64.exe
2011-03-04 19:44:12	123888	------w-	c:\windows\system32\pxcpyi64.exe
2011-02-28 15:01:40	947472	----a-w-	c:\windows\system32\msjava.dll
.
============= FINISH: 23:07:37,82 ===============

attach.txt:

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-05-19.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 5/4/2011 8:40:49 PM
System Uptime: 5/28/2011 8:35:10 PM (3 hours ago)
.
Motherboard: Foxconn |  | P4M800P7MB
Processor:               Intel(R) Celeron(R) D CPU 3.33GHz | Socket 775 | 3319/133mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 29 GiB total, 7.641 GiB free.
D: is FIXED (NTFS) - 124 GiB total, 1.806 GiB free.
E: is CDROM ()
F: is CDROM (CDFS)
G: is CDROM ()
H: is CDROM ()
I: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP1: 5/4/2011 8:42:39 PM - System Checkpoint
RP2: 5/4/2011 8:47:24 PM - Installed Realtek AC'97 Audio
RP3: 5/4/2011 8:49:05 PM - Installed REALTEK Gigabit and Fast Ethernet NIC Driver
RP4: 5/4/2011 8:49:33 PM - Installed Platform
RP5: 5/4/2011 10:27:34 PM - SPTD setup V1.62
RP6: 5/4/2011 10:38:54 PM - Software Distribution Service 3.0
RP7: 5/4/2011 10:40:17 PM - Installed Microsoft Office Professional Edition 2003
RP8: 5/4/2011 11:08:26 PM - Премахнат Skype™ 5.3
RP9: 5/5/2011 1:05:53 AM - Installed Windows XP Service Pack 3.
RP10: 5/6/2011 1:18:12 AM - System Checkpoint
RP11: 5/6/2011 1:17:07 PM - Installed DirectX 9.0
RP12: 5/6/2011 1:51:24 PM - Installed Java(TM) 6 Update 25
RP13: 5/6/2011 4:56:33 PM - Printer Driver Canon iP1600 Installed
RP14: 5/6/2011 9:18:05 PM - Removed Skype Toolbars
RP15: 5/7/2011 3:13:43 PM - Installed Windows Media Format Runtime
RP16: 5/7/2011 3:14:59 PM - Installed DirectX
RP17: 5/7/2011 8:34:10 PM - Инсталиран CANYON USB PC Camera
RP18: 5/7/2011 11:03:05 PM - Restore Operation
RP19: 5/8/2011 3:30:57 AM - Инсталиран CANYON USB PC Camera
RP20: 5/8/2011 3:39:10 AM - Installed bcWebCam
RP21: 5/8/2011 3:49:39 AM - Removed bcWebCam
RP22: 5/8/2011 4:28:13 AM - Installed Google SketchUp 8
RP23: 5/8/2011 7:37:03 PM - Installed Adobe Reader X (10.0.1).
RP24: 5/9/2011 7:50:31 PM - System Checkpoint
RP25: 5/10/2011 10:00:27 PM - System Checkpoint
RP26: 5/12/2011 2:39:08 AM - System Checkpoint
RP27: 5/13/2011 2:43:47 AM - System Checkpoint
RP28: 5/15/2011 8:09:38 PM - System Checkpoint
RP29: 5/18/2011 7:38:05 AM - System Checkpoint
RP30: 5/19/2011 2:11:29 PM - System Checkpoint
RP31: 5/20/2011 4:06:09 AM - Installed VB 2010 SBS.
RP32: 5/21/2011 5:18:04 AM - System Checkpoint
RP33: 5/21/2011 1:02:49 PM - Инсталиран Cyrilla Correct
RP34: 5/22/2011 10:42:50 PM - System Checkpoint
RP35: 5/24/2011 3:02:06 AM - System Checkpoint
RP36: 5/25/2011 4:22:29 AM - System Checkpoint
RP37: 5/25/2011 11:14:30 PM - Installed Hard Truck 18 Wheels of Steel
RP38: 5/27/2011 1:09:48 AM - System Checkpoint
RP39: 5/27/2011 5:09:43 AM - DriverScanner - 5/27/2011 5:09:40 AM
RP40: 5/27/2011 5:10:04 AM - DriverScanner - 5/27/2011 5:10:01 AM
RP41: 5/27/2011 5:13:50 AM - DriverScanner - 5/27/2011 5:13:46 AM
RP42: 5/28/2011 2:40:13 AM - DriverScanner - 5/28/2011 2:40:09 AM
RP43: 5/28/2011 2:40:59 AM - DriverScanner - 5/28/2011 2:40:56 AM
RP44: 5/28/2011 2:41:15 AM - DriverScanner - 5/28/2011 2:41:12 AM
RP45: 5/28/2011 2:41:27 AM - DriverScanner - 5/28/2011 2:41:24 AM
RP46: 5/28/2011 2:41:59 AM - DriverScanner - 5/28/2011 2:41:56 AM
RP47: 5/28/2011 2:42:32 AM - DriverScanner - 5/28/2011 2:42:29 AM
.
==== Installed Programs ======================
.
µTorrent
AceMoney Lite
Adobe AIR
Adobe Community Help
Adobe Flash Player 10 ActiveX
Adobe Photoshop CS5.1
Adobe Reader X (10.0.1)
Aimersoft Video Cutter(Build 2.5.0.7)
Aimersoft Video Editor(Build 2.5.0.8)
Aimersoft Video Joiner(Build 2.5.0.8)
Aimersoft Video Splitter(Build 2.5.0.5)
Auslogics Disk Defrag
AVI to 3GP 1.4
Avira AntiVir Personal - Free Antivirus
BS.Player PRO
Burn4Free DB Toolbar
Burn4Free DVD Burning 5.5.0.0
Business Functions
BusinessCards MX
Canon iP1600
CANYON USB PC Camera
CCleaner
ClassicPro© v1.15
Click MusicalKEYS 3.0.214
Convert Image To PDF
Cyrilla Correct
DAEMON Tools Lite
EasyBits GO
EVEREST Ultimate Edition v5.50
FileZilla Client 3.4.0
FormatFactory 2.60
FreePromote 3
GOM Player
Google Chrome
Google SketchUp 8
Hard Truck 18 Wheels of Steel
Internet Download Manager
Java Auto Updater
Java(TM) 6 Update 25
K-Lite Mega Codec Pack 7.1.0
KP-Anti Mosquitoes
Malwarebytes' Anti-Malware
Microsoft .NET Framework 2.0
Microsoft .NET Framework 2.0 Language Pack - DEU
Microsoft Office Professional Edition 2003
Microsoft_VC80_ATL_x86
Microsoft_VC80_CRT_x86
Microsoft_VC80_MFC_x86
Microsoft_VC80_MFCLOC_x86
Microsoft_VC90_ATL_x86
Microsoft_VC90_CRT_x86
Microsoft_VC90_MFC_x86
Microsoft_VC90_MFCLOC_x86
Need for Speed™ Most Wanted
Network Play System (Patching)
Notepad++
PDF Settings CS5
Platform
Realtek AC'97 Audio
REALTEK Gigabit and Fast Ethernet NIC Driver
Skype™ 4.2
SpeedFan (remove only)
The Sims 2
Uniblue DriverScanner
VB 2010 SBS
VIA Platform Device Manager
VIA/S3G Display Driver
vloader-bg
WebFldrs XP
Winamp
Winamp Detector Plug-in
Windows Genuine Advantage Validation Tool (KB892130)
Windows Media Format Runtime
Windows XP Service Pack 3
WinHTTrack Website Copier 3.44-1
WinRAR 4.00 (32-битова версия)
.
==== Event Viewer Messages From Past Week ========
.
5/28/2011 7:39:43 AM, error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  PCIIde uagp35 ViaIde viamraid
5/28/2011 7:39:18 AM, error: sr [1]  - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'.  It has stopped monitoring the volume.
5/26/2011 1:54:31 PM, error: DCOM [10016]  - The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID  {DCBCA92E-7DBE-4EDA-8B7B-3AAEA4DD412B}  to the user NT AUTHORITY\SYSTEM SID (S-1-5-18).  This security permission can be modified using the Component Services administrative tool.
5/24/2011 5:55:12 PM, error: EventLog [6004]  - A driver packet received from the I/O subsystem was invalid.  The data is the packet.
5/21/2011 5:00:32 PM, error: Print [6161]  - The document Microsoft Word - „Стрийт Уеар” ООД.doc owned by Administrator failed to print on printer Canon iP1600. Data type: NT EMF 1.008. Size of the spool file in bytes: 3567364. Number of bytes printed: 139748. Total number of pages in the document: 8. Number of pages printed: 0. Client machine: \\MOMOPC. Win32 error code returned by the print processor: 13 (0xd). 
5/21/2011 4:56:32 PM, error: Print [6161]  - The document Microsoft Word - „Стрийт Уеар” ООД.doc owned by Administrator failed to print on printer Canon iP1600. Data type: NT EMF 1.008. Size of the spool file in bytes: 3748576. Number of bytes printed: 316264. Total number of pages in the document: 14. Number of pages printed: 0. Client machine: \\MOMOPC. Win32 error code returned by the print processor: 13 (0xd). 
5/21/2011 4:54:33 PM, error: Print [6161]  - The document Microsoft Word - „Стрийт Уеар” ООД.doc owned by Administrator failed to print on printer Canon iP1600. Data type: NT EMF 1.008. Size of the spool file in bytes: 3658704. Number of bytes printed: 46132. Total number of pages in the document: 14. Number of pages printed: 0. Client machine: \\MOMOPC. Win32 error code returned by the print processor: 5 (0x5). 
.
==== End Of File ===========================

Предварително благодаря за отделеното време.

Здравейте..!

==>> Следвайте следната инструкция за работа с OTL:

• Изтеглете OTL.exe и го запазете на десктопа.
• Стартирайте файла с двукратен клик на мишката.
• Сложете отметка пред Scan All Users
• Под менюто File Age => изберете 90 days
• Под менюто Standard Registry => променете на ALL
• Сложете отметки пред LOP и Purity Check

• Под с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

netsvcs
msconfig
%SYSTEMDRIVE%\*.*
%USERPROFILE%\*.*
%USERPROFILE%\Application Data\*.*
%USERPROFILE%\Local Settings\Application Data\*.*
%AllUsersProfile%\*.*
%AllUsersProfile%\Application Data\*.*
%USERPROFILE%\AppData\*.*
%USERPROFILE%\My Documents\*.*
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /90
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\system32\Spool\prtprocs\w32x86\*.dll
/md5start
hlp.dat
winlogon.exe
wininit.exe
userinit.exe
explorer.exe
volsnap.sys
/md5stop

• Натиснете маркираният в синьо бутон: .
• Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt. Прикачете тези два файла в следващия си коментар (погледнете опцията "прикачени файлове", когато публикувате мнение).

==>> Следвайте следната инструкция за работа с Security Check:

• Изтеглете Security Check (автор: screen317) от тук или от тук и го запишете на десктопа.
• Кликнете два пъти върху SecurityCheck.exe и следвайте инструкциите.
• Когато програмата завърши работата си, ще се отвори един текстов документ: checkup.txt.
• Копирайте съдържанието с Копирай (Copy) на checkup.txt и с Постави (Paste) го поставете в следващия си коментар.

checkup.txt:

Results of screen317's Security Check version 0.99.12

Windows XP Service Pack 3

Internet Explorer 6 Out of date!

``````````````````````````````

Antivirus/Firewall Check:

Windows Firewall Enabled!

Avira AntiVir Personal - Free Antivirus

Antivirus out of date!

```````````````````````````````

Anti-malware/Other Utilities Check:

Malwarebytes' Anti-Malware

CCleaner

Java 6 Update 25

Adobe Flash Player

Adobe Reader X (10.0.1)

````````````````````````````````

Process Check:

objlist.exe by Laurent

Malwarebytes' Anti-Malware mbamservice.exe

Avira Antivir avgnt.exe

Avira Antivir avguard.exe

``````````End of Log````````````

OTL.Txt

Extras.Txt

Стартирайте пак OTL и с Copy/ Paste под колонката Custom Scans/Fixes въведете скриптовия текст от текстовото поле по-долу, като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта!

:OTL
O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Burn4Free DB Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Burn4Free DB Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\Burn4Free DB Toolbar\tbcore3.dll ()
O3 - HKU\S-1-5-21-1275210071-1644491937-839522115-500\..\Toolbar\WebBrowser: (Burn4Free DB Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\Burn4Free DB Toolbar\tbcore3.dll ()
O4 - HKLM..\Run: [AdobeCS5.5ServiceManager]  File not found
O4 - HKU\S-1-5-21-1275210071-1644491937-839522115-500..\Run: [ClipCube]  File not found
O33 - MountPoints2\{f32285b1-7685-11e0-a40a-00155858ea9d}\Shell - "" = AutoRun
O33 - MountPoints2\{f32285b1-7685-11e0-a40a-00155858ea9d}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{f32285b1-7685-11e0-a40a-00155858ea9d}\Shell\AutoRun\command - "" = F:\launcher.exe -- [2003.06.05 11:05:14 | 000,909,312 | R--- | M] ()

:Reg

:files

autorun.inf /alldrives
recycler /alldrives
ipconfig /flushdns /c

:Commands
[purity]
[emptytemp]
[resethosts]
[CreateRestorePoint]
[emptyflash]
[Reboot]

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix

Ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

Логът е много дълъг затова го качих тук: http://msexcel.hit.bg/05292011_164400.log

Имам проблем с Интернет връзката...затова и не ви отговарям...Оправя ли нещата че огледам лога ви...!

Хубаво...сега как е положението със системата ви..?Наблюдавате ли проблеми..?

Хубаво...сега как е положението със системата ви..?Наблюдавате ли проблеми..?

Единствената промяна е, че съобщението от Avira спря да се показва, но проблема продължава.

Редактирано 29 май 201115 г. от momo752 (преглед на промените)

Кой проблем ....този че, когато включиш флашка в USB,няма реакция...?Ами това е изключено ....прави се превантивно за избягване на зарази от външни носители.!

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-1275210071-1644491937-839522115-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

Стартираш от My Computer....!

Няма устройство в My Computer.

А ,ама това е съвсем друга работа...не се разпознава устройството....!!!А в Девайс мениджъра да не са забранени USB..?

Да направим още една проверка:

Изтеглете ComboFix от тук или тук и го запазете на десктопа си.

• Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.

Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs

• Стартирайте Combo-Fix.com и следвайте инструкциите.

Бележка: ComboFix ще се стартира без инсталирана Recovery Console.

• Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repair режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.

• Следвайте инструкциите, за да позволите на ComboFix да изтегли и инсталира Microsoft Windows Recovery Console. В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

Изберете Yes, за да продължи сканирането за зловреден софтуер.

Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:\ComboFix.txt в следващия Ви коментар в тази тема.

Бележка:

• Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа.
• ComboFix ще нулира всички настройки на Microsoft Internet Explorer, включително да направи IE браузър по подразбиране.
• ComboFix ще изключи autorun функцията на ВСИЧКИ CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и Ви защити от бъдещи вируси/заплахи, които поразяват чрез autorun. Ако това е проблем за вас - моля, уведомете ме.
• ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той ще прекрати интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си.
• В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:\BUG.txt в следващия Ви коментар в тази тема.

Работата на ComboFix, може да отнеме до 20-30 минути, за да завърши, моля имайте търпение.

Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.

Не, не са забранени.

Направи сканирането за да сме сигурни на 100 % че системата е чиста и после ще мислим..!

ComboFix 11-05-28.01 - Administrator 05.2011 г. 20:02:25.1.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.1470.1095 [GMT 3:00] Running from: c:\documents and settings\Administrator\Desktop\ComboFix.exe AV: AntiVir Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\documents and settings\Administrator\WINDOWS c:\program files\Burn4Free DB Toolbar\tbHElper.dll c:\windows\SW_Win9423X24.DLL . . ((((((((((((((((((((((((( Files Created from 2011-04-28 to 2011-05-29 ))))))))))))))))))))))))))))))) . . 2011-05-29 13:44 . 2011-05-29 13:44 -------- d-----w- C:\_OTL 2011-05-10 18:17 . 2011-05-10 18:17 -------- d-----w- C:\midi 2011-05-07 02:24 . 2011-05-14 11:40 -------- d-----w- C:\Моите Интернет Страници 2011-05-06 15:03 . 2011-05-06 15:03 -------- d-----w- C:\cfadata 2011-05-04 21:59 . 2011-05-04 22:00 -------- d-----w- C:\1a8b16c3eb15d037006beb . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-03-28 17:46 . 2011-04-05 18:01 98160 ----a-w- c:\windows\system32\drivers\idmtdi.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension] @="{CDC95B92-E27C-4745-A8C5-64A52A78855D}" [HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}] 2011-03-02 15:23 68216 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-05-04 399736] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408] "IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2011-04-25 3298712] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMan"="SOUNDMAN.EXE" [2005-08-17 90112] "VTTimer"="VTTimer.exe" [2005-03-07 53248] "VTTrayp"="VTtrayp.exe" [2005-10-31 163840] "RaidTool"="c:\program files\VIA\RAID\raid_tool.exe" [2005-06-20 1056768] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672] "BigDogPath323VMSnap"="c:\windows\VMSnap23.exe" [2007-06-29 212992] "BigDogPath323Domino"="c:\windows\Domino.exe" [2007-06-29 49152] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288] "AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-03-15 499608] "SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-03-28 281768] . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] 2011-01-20 09:20 1305408 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware] 2010-12-20 15:08 443728 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] 2010-03-09 07:02 26100520 ----a-r- c:\program files\Skype\Phone\Skype.exe . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\FreePromote 3\\mysql\\bin\\mysqld-nt.exe"= "c:\\Program Files\\WinHTTrack\\WinHTTrack.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= . R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [5/4/2011 10:27 PM 691696] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [5/4/2011 10:37 PM 218688] R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [4/5/2011 9:01 PM 98160] R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [5/18/2011 10:34 PM 136360] R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [5/13/2011 11:39 PM 363344] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [5/13/2011 11:39 PM 20952] R3 vmfilter323;323 filter service, Normal;c:\windows\system32\drivers\vmfilter323.sys [5/8/2011 3:31 AM 420480] R3 ZSMC326;Vimicro USB2.0 PC Camera(VC0323);c:\windows\system32\drivers\usbvm323.sys [5/8/2011 3:31 AM 260608] S3 FXDRV;FXDRV;\??\e:\fxdrv.sys --> e:\Fxdrv.sys [?] S3 LLRING0;LLRING0;c:\program files\InsaniaMU\MuGuard\llck.sys [5/28/2011 8:33 PM 3840] S3 SwitchBoard;Adobe SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2/19/2010 1:37 PM 517096] . Contents of the 'Scheduled Tasks' folder . 2011-05-28 c:\windows\Tasks\AdobeAAMUpdater-1.0-MOMOPC-Administrator.job - c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2011-05-13 14:42] . 2011-05-29 c:\windows\Tasks\DriverScanner.job - c:\program files\Uniblue\DriverScanner\dsmonitor.exe [2011-05-27 08:22] . 2011-05-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1644491937-839522115-500Core.job - c:\documents and settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-05-04 19:08] . 2011-05-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1644491937-839522115-500UA.job - c:\documents and settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-05-04 19:08] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.bigseekpro.com/burn4free/{AA76E95F-A6C0-49F6-99DD-3EF9DD362BC7} mStart Page = hxxp://www.bigseekpro.com/burn4free/{AA76E95F-A6C0-49F6-99DD-3EF9DD362BC7} IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 IE: Свали всички линкове с IDM - c:\program files\Internet Download Manager\IEGetAll.htm IE: Свали с IDM - c:\program files\Internet Download Manager\IEExt.htm TCP: DhcpNameServer = 192.168.252.1 . - - - - ORPHANS REMOVED - - - - . AddRemove-Convert Image To PDF_is1 - c:\program files\Softinterface . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2011-05-29 20:08 Windows 5.1.2600 Service Pack 3, v.3311 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\B20@O=5 *=0 *C*C*l*e*a*n*e*r*& \command] @="c:\\Program Files\\CCleaner\\ccleaner.exe" . Completion time: 2011-05-29 20:10:51 ComboFix-quarantined-files.txt 2011-05-29 17:10 . Pre-Run: 8 369 860 608 bytes free Post-Run: 8 329 023 488 bytes free . WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect . - - End Of File - - 72BF307D5FE6FC0C7839E56F21C71CB5

Супер ...ако изтриеш тази папка ръчно:

C:\1a8b16c3eb15d037006beb

ще е добре.....Всико останало изглежда наред...!Не виждам активни зарази...!

Супер ...ако изтриеш тази папка ръчно:

ще е добре.....Всико останало изглежда наред...!Не виждам активни зарази...!

Готово

Някакви промени...?

Някакви промени...?

Не

Добре..да разчистм малко терена:

Деинсталирайте Комбофикс така:

1.Натиснете Start ==> Run ==> въведете командата Combofix /Uninstall ==> OK

2.Изтеглете OTCleanIt или от тук,стартирайте и натиснете Clean up

И да уточним нещо ....слагаш флашка никаква реакция (няма устройство), слагаш кабела на камерата същата работа....?

Готово. Проблема е само при устройствата за съхранение на информация (при мен флашка, телефон и фотоапарат) иначе с останалите у-ва няма проблем.

Да опитаме така: Изтеглете програмата NoMoreAutorun Разархивирате на десктопа си и стартирате файла GUI_NoMoreAutorun...!Направете следните настройки - поставете отметка:

След като програмата завърши работата си проверете какво е състоянието със системата и проблема ви..!

Има напредък фотоапарата го засече, но при телефона и флашката положението е същото.

Е, сега няма логика....рестартирай компютъра си да видим какво ще се получи..!

След рестарта не засича само телефоните.

Хм...единственото в момента което си мисля е дали за да разпознае телефона ,трябват драйвери ...въпреки че ама няма никаква логика да разпознава флашката и фотоапарата ,а телефона - не...!