PC Security Guardian

6 юни 201115 г.

Значи искам да попитам как да я махна тази уж антивирусна програма.. Засича вируси ,които нямам.Във интернет намерих инструкций ,но са на английски език.Ако някой по подробно и по най-лесният начин ми каже как да я махна,ще съм много благодарен.

Цитирай

6 юни 201115 г.

Здравейте,

Следвайте инструкциите от тази тема:

Системата ми е инфектирана - Какво да правя сега?

Цитирай

6 юни 201115 г.

Автор

Здравейте,

Следвайте инструкциите от тази тема:

Системата ми е инфектирана - Какво да правя сега?

.

DDS (Ver_2011-06-03.01) - NTFSx86

Internet Explorer: 6.0.2900.2149

Run by name at 10:51:08 on 2011-06-06

Microsoft Windows XP Professional 5.1.2600.2.1251.359.1033.18.767.405 [GMT 3:00]

.

AV: PC Security Guardian *Enabled/Updated* {23AE6E7D-22A6-4188-8F4D-5B47337133D0}

AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

FW: PC Security Guardian *Enabled*

.

============== Running Processes ===============

.

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe

C:\Program Files\Analog Devices\SoundMAX\SMTray.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

C:\WINDOWS\Datecs\Flex2K.exe

C:\WINDOWS\system32\spoolsv.exe

svchost.exe

C:\Program Files\CyberLink\Shared files\RichVideo.exe

C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\WINDOWS\System32\svchost.exe -k HTTPFilter

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

.

============== Pseudo HJT Report ===============

.

uInternet Connection Wizard,ShellNext = hxxp://izarc.org/donate.html

BHO: ShopperReports: {100eb1fd-d03e-47fd-81f3-ee91287f9465} - c:\program files\shopperreports3\bin\3.1.22.0\ShopperReports.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File

BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

BHO: PandoraTV Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll

TB: PandoraTV Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll

EB: ShopperReports – Price Comparison: {a7cddcdc-beeb-4685-a062-978f5e07ceee} - c:\program files\shopperreports3\bin\3.1.22.0\ShopperReports.dll

uRun: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe"

uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background

uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe"

uRun: [ares] "c:\program files\ares\Ares.exe" -h

uRun: [Xvid] c:\program files\xvid\CheckUpdate.exe

uRun: [PC Security Guardian] "c:\documents and settings\all users\application data\7b3df2\PS7b3_284.exe" /s /d

mRun: [avast5] c:\progra~1\alwils~1\avast5\avastUI.exe /nogui

mRun: [smapp] c:\program files\analog devices\soundmax\SMTray.exe

mRun: [bigDogPath] c:\windows\VM_STI.EXE CANYON CN-WCAM23 PC-Camera

mRun: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

mRun: [<NO NAME>]

mRun: [ApnUpdater] "c:\program files\ask.com\updater\Updater.exe"

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\flexty~1.lnk - c:\windows\datecs\Flex2K.exe

uPolicies-explorer: DisallowRun = 1 (0x1)

uPolicies-disallowrun: 0 = msseces.exe

uPolicies-disallowrun: 1 = MSASCui.exe

uPolicies-disallowrun: 2 = ekrn.exe

uPolicies-disallowrun: 3 = egui.exe

uPolicies-disallowrun: 4 = avgnt.exe

uPolicies-disallowrun: 5 = avcenter.exe

uPolicies-disallowrun: 6 = avscan.exe

uPolicies-disallowrun: 7 = avgfrw.exe

uPolicies-disallowrun: 8 = avgui.exe

uPolicies-disallowrun: 9 = avgtray.exe

uPolicies-disallowrun: 10 = avgscanx.exe

uPolicies-disallowrun: 11 = avgcfgex.exe

uPolicies-disallowrun: 12 = avgemc.exe

uPolicies-disallowrun: 13 = avgchsvx.exe

uPolicies-disallowrun: 14 = avgcmgr.exe

uPolicies-disallowrun: 15 = avgwdsvc.exe

mPolicies-explorer: UseDesktopIniCache = 1 (0x1)

IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL

IE: {C5428486-50A0-4a02-9D20-520B59A9F9B2} - {C9CCBB35-D123-4a31-AFFC-9B2933132116} - c:\program files\shopperreports3\bin\3.1.22.0\ShopperReports.dll

IE: {C5428486-50A0-4a02-9D20-520B59A9F9B3} - {A16AD1E9-F69A-45af-9462-B1C286708842} - c:\program files\shopperreports3\bin\3.1.22.0\ShopperReports.dll

TCP: DhcpNameServer = 192.168.1.1

TCP: Interfaces\{00AFF642-0357-4FF9-B967-B7BB6502E570} : DhcpNameServer = 192.168.1.1

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL

IFEO: image file execution options - svchost.exe

IFEO: a.exe - svchost.exe

IFEO: aAvgApi.exe - svchost.exe

IFEO: AAWTray.exe - svchost.exe

IFEO: About.exe - svchost.exe

.

Note: multiple IFEO entries found. Please refer to Attach.txt

Hosts: 69.72.252.252 www.google.com

Hosts: 178.17.165.3 www.google.com

Hosts: 69.72.252.252 www.google.com.au

Hosts: 178.17.165.3 www.google.com.au

Hosts: 69.72.252.252 www.google.be

.

Note: multiple HOSTS entries found. Please refer to Attach.txt

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\documents and settings\name\application data\mozilla\firefox\profiles\s7l8pd6b.default\

FF - prefs.js: browser.search.selectedEngine - search

FF - prefs.js: browser.startup.homepage - hxxp://www.aol.com/?src=aim&ncid=snsusaimc00000001

FF - prefs.js: keyword.URL - hxxp://slirsredirect.search.aol.com/redirector/sredir?invocationType=bu10aiminstabie7&sredir=2706&query=

FF - component: c:\program files\mozilla firefox\extensions\{82af8dca-6de9-405d-bd5e-43525bdad38a}\components\SkypeFfComponent.dll

FF - plugin: c:\documents and settings\name\local settings\application data\unity\webplayer\loader\npUnity3D32.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npclntax_ClickPotatoLiteSA.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npdnu.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npdnupdater2.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npwachk.dll

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Skype extension: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} - c:\program files\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF - Ext: PandoraTV Toolbar: [email protected] - %profile%\extensions\[email protected]

.

---- FIREFOX POLICIES ----

FF - user.js: network.protocol-handler.warn-external.dnupdate - false

============= SERVICES / DRIVERS ===============

.

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2010-9-1 165584]

R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2010-9-1 17744]

R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2010-9-1 40384]

R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2010-9-1 40384]

R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2010-9-1 40384]

.

=============== Created Last 30 ================

.

2011-06-06 07:25:38 -------- d-----w- c:\program files\GridinSoft Trojan Killer

2011-06-06 06:55:56 -------- d-sh--w- c:\documents and settings\name\application data\PC Security Guardian

2011-06-06 06:55:55 -------- d-sh--w- c:\documents and settings\all users\application data\PSQKGJOG

2011-06-06 06:55:22 -------- d-sh--w- c:\documents and settings\all users\application data\7b3df2

2011-05-28 14:09:32 -------- d-----w- c:\documents and settings\name\application data\go

2011-05-28 14:09:21 -------- d-----w- c:\documents and settings\all users\application data\Easybits GO

2011-05-20 08:21:29 240640 ----a-w- c:\windows\system32\xvidvfw.dll

2011-05-20 08:21:28 143872 ----a-w- c:\windows\system32\xvid.ax

2011-05-20 08:21:25 -------- d-----w- c:\program files\Xvid

2011-05-18 07:15:01 -------- d-----w- c:\documents and settings\all users\application data\Skype Extras

2011-05-16 14:06:16 1090952 ----a-w- c:\program files\mozilla firefox\extensions\{82af8dca-6de9-405d-bd5e-43525bdad38a}\components\SkypeFfComponent.dll

2011-05-07 16:47:20 -------- d-----w- c:\documents and settings\name\application data\Unity

.

==================== Find3M ====================

.

2011-03-19 15:04:28 650752 ----a-w- c:\windows\system32\xvidcore.dll

.

============= FINISH: 10:51:38,96 ===============.