Здравейте! От известно време компютъра започна да става доста бавен и да "лагва" докато играя която и да е игра.Сканирах с новите IOBit програми , намериха доста проблеми поправиха ги и се оправи за един ден.Но на следващия ден отново започна да забива,лаги и т.н. Ето логовете: . DDS (Ver_2011-06-12.02) - NTFSx86 Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_15 Run by Administrator at 19:50:20 on 2011-06-16 Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.2047.1259 [GMT 3:00] . AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7} . ============== Running Processes =============== . C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost -k DcomLaunch C:\WINDOWS\system32\svchost -k rpcss C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\WINDOWS\Explorer.EXE C:\Program Files\IObit\Advanced SystemCare 4\PMonitor.exe C:\Program Files\Razer\Copperhead\razerhid.exe C:\Program Files\Razer\Copperhead\razertra.exe C:\Program Files\Razer\Copperhead\razerofa.exe C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\system32\wdfmgr.exe C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\System32\alg.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe D:\Steam\Steam.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Datecs\FlexType 2K\FType2K.exe C:\WINDOWS\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uInternet Settings,ProxyOverride = *.local uSearchURL,(Default) = hxxp://www.google.com/search?q=%s BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Flash Catcher: {3af255c7-8742-4b96-8971-1268eee04974} - Flash Catcher uRun: [Octoshape Streaming Services] "c:\documents and settings\administrator\application data\octoshape\octoshape streaming services\OctoshapeClient.exe" -inv:bootrun uRun: [steam] "d:\steam\steam.exe" -silent uRun: [Advanced SystemCare 4] "c:\program files\iobit\advanced systemcare 4\ASCTray.exe" mRun: [amd_dc_opt] c:\program files\amd\dual-core optimizer\amd_dc_opt.exe mRun: [Copperhead] c:\program files\razer\copperhead\razerhid.exe mRun: [razer] c:\program files\razer\copperhead\razerhid.exe mRun: [iObit Security 360] "c:\program files\iobit\iobit security 360\IS360tray.exe" /autostart uPolicies-explorer: NoInstrumentation = 1 (0x1) DPF: {33564D57-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab TCP: DhcpNameServer = 168.95.1.1 TCP: Interfaces\{C6EE125B-E8AF-4851-B509-4A49516FEF45} : DhcpNameServer = 168.95.1.1 Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: AtiExtEvent - Ati2evxx.dll . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\administrator\application data\mozilla\firefox\profiles\fzprxefj.default\ FF - prefs.js: browser.search.selectedEngine - Wikipedia (en) FF - prefs.js: browser.startup.homepage - hxxp://www.google.bg/ FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=685749&p= FF - component: c:\program files\common files\spigot\wtxpcom\components\WidgiToolbarFF.dll FF - plugin: c:\documents and settings\administrator\application data\mozilla\plugins\npoctoshape.dll . ============= SERVICES / DRIVERS =============== . R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2007-1-1 11608] R2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\iobit\advanced systemcare 4\ASCService.exe [2011-6-13 352656] R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2007-1-1 108289] R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2007-1-1 185089] R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2007-1-1 56816] R2 ESLWireAC;ESLWireAC;c:\windows\system32\drivers\ESLWireACD.sys [2010-9-23 812448] R3 ESLvnic1;ESLvnic Virtual Network 32 Bit;c:\windows\system32\drivers\ESLvnic.sys [2009-8-28 24504] R3 Razerlow;Razer Copperhead Driver;c:\windows\system32\drivers\Razerlow.sys [2010-1-7 19020] S2 IS360service;IS360service;c:\program files\iobit\iobit security 360\is360srv.exe [2010-12-15 312152] . =============== Created Last 30 ================ . 2011-06-15 11:40:44 455936 -c----w- c:\windows\system32\dllcache\mrxsmb.sys 2011-06-15 11:37:35 2192768 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe 2011-06-15 11:37:35 2148864 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe 2011-06-15 11:37:35 2027008 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe 2011-06-15 11:29:51 293376 ------w- c:\windows\system32\browserchoice.exe 2011-06-15 11:28:15 8704 -c----w- c:\windows\system32\dllcache\tsbyuv.dll 2011-06-15 11:28:14 48128 -c----w- c:\windows\system32\dllcache\iyuv_32.dll 2011-06-15 11:27:51 17920 -c----w- c:\windows\system32\dllcache\msyuv.dll 2011-06-15 11:25:05 -------- d-----w- c:\program files\MSXML 4.0 2011-06-13 17:42:06 -------- d-----w- c:\documents and settings\administrator\application data\IObit 2011-06-11 20:08:59 381 ----a-w- C:\mouse_fix.reg 2011-06-05 12:16:23 -------- d-----w- c:\documents and settings\all users\application data\VOIPlay 2011-06-05 12:12:19 -------- d-----w- c:\program files\VOIPlay 2011-05-28 11:45:00 -------- d-----w- c:\documents and settings\administrator\application data\go 2011-05-28 11:44:58 -------- d-----w- c:\documents and settings\all users\application data\Easybits GO . ==================== Find3M ==================== . 2011-05-07 20:21:41 249856 ------w- c:\windows\Setup1.exe 2011-05-07 20:21:40 73216 ----a-w- c:\windows\ST6UNST.EXE 2011-04-18 09:10:56 812448 ----a-w- c:\windows\system32\drivers\ESLWireACD.sys . ============= FINISH: 19:51:11.79 =============== ATTACH . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-06-12.02) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 12/31/2006 11:33:23 PM System Uptime: 6/16/2011 4:16:40 PM (3 hours ago) . Motherboard: | | RS780-SB700 Processor: AMD Athlon 64 X2 Dual Core Processor 5000+ | Socket AM2 | 2600/200mhz . ==== Disk Partitions ========================= . A: is Removable C: is FIXED (NTFS) - 117 GiB total, 8.749 GiB free. D: is FIXED (NTFS) - 116 GiB total, 58.432 GiB free. E: is CDROM () F: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318} Description: ESLvnic Virtual Network 32 Bit Device ID: ROOT\NET\0001 Manufacturer: Turtle Entertainment GmbH Name: ESLvnic Virtual Network 32 Bit #2 PNP Device ID: ROOT\NET\0001 Service: ESLvnic1 . ==== System Restore Points =================== . RP122: 5/24/2011 3:03:55 PM - Контролна точка на системата RP123: 6/10/2011 6:03:45 PM - Removed Neighbors From Hell: On Vacation RP124: 6/10/2011 6:06:12 PM - Removed Neighbours From Hell RP125: 6/10/2011 6:07:09 PM - Removed Neighbours From Hell 2 RP126: 6/11/2011 10:28:32 PM - Configured Tourney Master 3 Ultimate RP127: 6/11/2011 10:30:34 PM - Removed System Requirements Lab CYRI RP128: 6/11/2011 10:33:12 PM - Removed IObit Toolbar v4.4. RP129: 6/11/2011 10:38:13 PM - Removed CodeZulu Bind Maker RP130: 6/14/2011 9:54:52 AM - Installed Windows XP KB941569. RP131: 6/14/2011 9:55:12 AM - Installed %1 %2. RP132: 6/14/2011 1:55:23 PM - IObit Uninstaller restore point RP133: 6/15/2011 2:20:57 PM - Installed Windows XP KB961501. RP134: 6/15/2011 2:22:29 PM - Installed Windows Media Player KB973540. RP135: 6/15/2011 2:22:48 PM - Installed Windows XP KB973869. RP136: 6/15/2011 2:22:59 PM - Installed Windows XP KB956744. RP137: 6/15/2011 2:23:10 PM - Installed Windows XP KB973507. RP138: 6/15/2011 2:23:20 PM - Installed Windows XP KB960859. RP139: 6/15/2011 2:23:30 PM - Installed Windows XP KB973815. RP140: 6/15/2011 2:23:42 PM - Installed Windows XP KB971657. RP141: 6/15/2011 2:23:52 PM - Installed Windows XP KB956844. RP142: 6/15/2011 2:24:02 PM - Installed Windows Media Player KB954155. RP143: 6/15/2011 2:24:12 PM - Installed Windows XP KB975025. RP144: 6/15/2011 2:24:24 PM - Installed Windows XP KB974571. RP145: 6/15/2011 2:24:35 PM - Installed Windows XP KB974112. RP146: 6/15/2011 2:24:47 PM - Installed Windows XP KB969059. RP147: 6/15/2011 2:25:19 PM - Installed Windows XP KB968389. RP148: 6/15/2011 2:25:33 PM - Installed Windows XP KB973687. RP149: 6/15/2011 2:26:08 PM - Installed Windows Media Player KB952069. RP150: 6/15/2011 2:26:20 PM - Installed Windows XP KB974318. RP151: 6/15/2011 2:26:32 PM - Installed Windows XP KB974392. RP152: 6/15/2011 2:26:47 PM - Installed Windows XP KB973904. RP153: 6/15/2011 2:27:03 PM - Installed Windows XP Update for Microsoft Windows (KB971513). RP154: 6/15/2011 2:27:31 PM - Installed Windows XP KB972270. RP155: 6/15/2011 2:27:45 PM - Installed Windows XP KB975713. RP156: 6/15/2011 2:28:10 PM - Installed Windows XP KB975560. RP157: 6/15/2011 2:28:29 PM - Installed Windows XP KB977914. RP158: 6/15/2011 2:28:48 PM - Installed Windows XP KB978706. RP159: 6/15/2011 2:29:00 PM - Installed Windows XP KB977816. RP160: 6/15/2011 2:29:14 PM - Installed Windows XP KB979309. RP161: 6/15/2011 2:29:28 PM - Installed Windows XP KB978338. RP162: 6/15/2011 2:29:47 PM - Installed Windows XP KB978601. RP163: 6/15/2011 2:29:56 PM - Installed Windows XP KB976002-v5. RP164: 6/15/2011 2:30:10 PM - Installed Windows XP KB978542. RP165: 6/15/2011 2:30:22 PM - Installed Windows Media Player KB978695. RP166: 6/15/2011 2:30:39 PM - Installed Windows XP KB979482. RP167: 6/15/2011 2:30:59 PM - Installed Windows XP KB975562. RP168: 6/15/2011 2:31:14 PM - Installed Windows XP KB2229593. RP169: 6/15/2011 2:31:29 PM - Installed Windows XP KB2115168. RP170: 6/15/2011 2:31:43 PM - Installed Windows XP KB982665. RP171: 6/15/2011 2:31:58 PM - Installed Windows XP KB981997. RP172: 6/15/2011 2:32:14 PM - Installed Windows XP KB980436. RP173: 6/15/2011 2:32:28 PM - Installed Windows XP KB981322. RP174: 6/15/2011 2:32:46 PM - Installed Windows XP KB2121546. RP175: 6/15/2011 2:33:01 PM - Installed Windows XP KB2347290. RP176: 6/15/2011 2:33:11 PM - Installed Windows Media Player KB975558. RP177: 6/15/2011 2:33:27 PM - Installed Windows XP KB979687. RP178: 6/15/2011 2:33:45 PM - Installed Windows XP KB2296011. RP179: 6/15/2011 2:33:56 PM - Installed Windows Media Player KB2378111. RP180: 6/15/2011 2:34:15 PM - Installed Windows XP KB2387149. RP181: 6/15/2011 2:34:33 PM - Installed Windows XP KB982132. RP182: 6/15/2011 2:34:50 PM - Installed Windows XP KB2360937. RP183: 6/15/2011 2:35:06 PM - Installed Windows XP KB2079403. RP184: 6/15/2011 2:35:24 PM - Installed Windows XP KB2423089. RP185: 6/15/2011 2:35:42 PM - Installed Windows XP KB2443105. RP186: 6/15/2011 2:35:51 PM - Installed Windows XP KB2443685. RP187: 6/15/2011 2:36:08 PM - Installed Windows XP KB2440591. RP188: 6/15/2011 2:36:28 PM - Installed Windows XP KB2419632. RP189: 6/15/2011 2:36:49 PM - Installed Windows XP KB2478971. RP190: 6/15/2011 2:37:09 PM - Installed Windows XP KB2483185. RP191: 6/15/2011 2:37:31 PM - Installed Windows XP KB2478960. RP192: 6/15/2011 2:37:51 PM - Installed Windows XP KB2393802. RP193: 6/15/2011 2:38:11 PM - Installed Windows XP KB2476687. RP194: 6/15/2011 2:38:33 PM - Installed Windows XP KB971029. RP195: 6/15/2011 2:38:54 PM - Installed Windows XP KB2479943. RP196: 6/15/2011 2:39:15 PM - Installed Windows XP KB2481109. RP197: 6/15/2011 2:39:37 PM - Installed Windows XP KB2485663. RP198: 6/15/2011 2:39:56 PM - Installed Windows XP KB2508429. RP199: 6/15/2011 2:40:17 PM - Installed Windows XP KB2506212. RP200: 6/15/2011 2:40:39 PM - Installed Windows XP KB2506223. RP201: 6/15/2011 2:41:02 PM - Installed Windows XP KB2511455. RP202: 6/15/2011 2:41:25 PM - Installed Windows XP KB2503658. RP203: 6/15/2011 2:41:51 PM - Installed Windows XP KB2508272. RP204: 6/15/2011 2:42:17 PM - Installed Windows XP KB2497640. RP205: 6/15/2011 2:42:47 PM - Installed Windows XP KB2507618. RP206: 6/15/2011 2:43:10 PM - Installed Windows XP KB2510581. RP207: 6/15/2011 2:43:35 PM - Installed Windows XP KB2412687. RP208: 6/15/2011 2:43:59 PM - Installed Windows XP KB2509553. RP209: 6/15/2011 2:44:27 PM - Installed Windows XP KB2492386. RP210: 6/15/2011 2:44:55 PM - Installed Windows XP KB2524375. . ==== Installed Programs ====================== . Acrobat.com Adobe After Effects CS4 Template Projects & Footage Adobe AIR Adobe Anchor Service CS3 Adobe Asset Services CS3 Adobe Bridge CS3 Adobe Bridge Start Meeting Adobe Camera Raw 4.0 Adobe CMaps Adobe Color - Photoshop Specific Adobe Color Common Settings Adobe Color EU Extra Settings Adobe Color JA Extra Settings Adobe Color NA Recommended Settings Adobe Default Language CS3 Adobe Device Central CS3 Adobe ExtendScript Toolkit 2 Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Fonts All Adobe Help Viewer CS3 Adobe Linguistics CS3 Adobe PDF Library Files Adobe Photoshop CS3 Adobe Reader 9.3.4 Adobe Setup Adobe Shockwave Player Adobe Stock Photos CS3 Adobe Type Support Adobe Update Manager CS3 Adobe Version Cue CS3 Client Adobe WinSoft Linguistics Plugin Adobe XMP Panels CS3 Advanced SystemCare 4 AMX Mod X Installer 1.8.1 ATI - Software Uninstall Utility ATI Catalyst Control Center ATI Display Driver Avira AntiVir Personal - Free Antivirus BitLord 1.1 BSPlayer Catalyst Control Center - Branding Catalyst Control Center Core Implementation Catalyst Control Center Graphics Full Existing Catalyst Control Center Graphics Full New Catalyst Control Center Graphics Light Catalyst Control Center Graphics Previews Common Catalyst Control Center HydraVision Full ccc-core-preinstall ccc-core-static ccc-utility CCC Help English Counter-Strike Counter-Strike 1.6 Counter-Strike Steamworks Beta Counter-Strike Counter Strike 1.6 1.01 CSStrat Dedicated Server Dual-Core Optimizer EasyBits GO ESET Online Scanner v3 ESL Wire 1.9.7 FIFA 07 FIFA 08 FIFA 10 FIFA 10 v1.0 R-E FlexType 2K Game Booster GTA San Andreas Half-Life 2: Lost Coast HijackThis 2.0.2 HLSW v1.3.1 HLTooLz Hotfix for Windows XP (KB2443685) Hotfix for Windows XP (KB976002-v5) ImgBurn IObit Security 360 Java 6 Update 15 K-Lite Codec Pack 4.4.5 (Full) Malwarebytes' Anti-Malware Marvell Miniport Driver McAfee Security Scan Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft Base Smart Card Cryptographic Service Provider Package Microsoft Office Professional Edition 2003 Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR) Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Mozilla Firefox 4.0.1 (x86 bg) MP3 Cutter 1.4 MSN MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) MSXML 6.0 Parser (KB925673) Need for Speed™ Most Wanted Nero 8 Nero 8 Lite neroxml Octoshape add-in for Adobe Flash Player Octoshape Streaming Services PDF Settings Pro Evolution Soccer 2009 R.U.S.E. Beta Razer Copperhead Realtek High Definition Audio Driver Ricochet Security Update for Windows Media Player (KB2378111) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player (KB975558) Security Update for Windows Media Player (KB978695) Security Update for Windows XP (KB2079403) Security Update for Windows XP (KB2115168) Security Update for Windows XP (KB2121546) Security Update for Windows XP (KB2229593) Security Update for Windows XP (KB2296011) Security Update for Windows XP (KB2347290) Security Update for Windows XP (KB2360937) Security Update for Windows XP (KB2387149) Security Update for Windows XP (KB2393802) Security Update for Windows XP (KB2412687) Security Update for Windows XP (KB2419632) Security Update for Windows XP (KB2423089) Security Update for Windows XP (KB2440591) Security Update for Windows XP (KB2443105) Security Update for Windows XP (KB2476687) Security Update for Windows XP (KB2478960) Security Update for Windows XP (KB2478971) Security Update for Windows XP (KB2479943) Security Update for Windows XP (KB2481109) Security Update for Windows XP (KB2483185) Security Update for Windows XP (KB2485663) Security Update for Windows XP (KB2497640) Security Update for Windows XP (KB2503658) Security Update for Windows XP (KB2506212) Security Update for Windows XP (KB2506223) Security Update for Windows XP (KB2507618) Security Update for Windows XP (KB2508272) Security Update for Windows XP (KB2508429) Security Update for Windows XP (KB2509553) Security Update for Windows XP (KB2510581) Security Update for Windows XP (KB2511455) Security Update for Windows XP (KB2524375) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB956744) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973869) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975562) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977816) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978338) Security Update for Windows XP (KB978542) Security Update for Windows XP (KB978601) Security Update for Windows XP (KB978706) Security Update for Windows XP (KB979309) Security Update for Windows XP (KB979482) Security Update for Windows XP (KB979687) Security Update for Windows XP (KB980436) Security Update for Windows XP (KB981322) Security Update for Windows XP (KB981997) Security Update for Windows XP (KB982132) Security Update for Windows XP (KB982665) Skype™ 5.3 Smart Defrag Sony Media Manager 2.2 Sony Vegas 7.0 TeamSpeak 3 Client The Sims 2 Update for Microsoft Windows (KB971513) Update for Windows XP (KB2492386) Update for Windows XP (KB955839) Update for Windows XP (KB968389) Update for Windows XP (KB971029) Update for Windows XP (KB973687) Update for Windows XP (KB973815) Ventrilo Client Ventrilo Server VideoLAN VLC media player 0.8.6c vloader 2.1 VOIPlay WebFldrs XP Windows Bulgarian Interface Pack Windows Communication Foundation Windows Media Format Runtime Windows Presentation Foundation Windows Workflow Foundation WinRAR archiver XML Paper Specification Shared Components Pack 1.0 . ==== Event Viewer Messages From Past Week ======== . 6/13/2011 8:47:20 PM, error: Service Control Manager [7034] - The Terminal Services service terminated unexpectedly. It has done this 1 time(s). 6/13/2011 8:47:20 PM, error: Service Control Manager [7031] - The DCOM Server Process Launcher service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine. 6/13/2011 8:34:36 PM, error: Service Control Manager [7000] - The ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## service failed to start due to the following error: The system cannot find the file specified. 6/13/2011 6:25:47 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Application Layer Gateway Service service to connect. 6/13/2011 6:25:47 PM, error: Service Control Manager [7000] - The Application Layer Gateway Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 6/12/2011 9:48:28 AM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751) 6/12/2011 12:54:21 PM, error: Disk [11] - The driver detected a controller error on \Device\Harddisk0\D. 6/12/2011 12:52:24 PM, error: atapi [5] - A parity error was detected on \Device\Ide\IdePort1. 6/11/2011 10:58:17 PM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s). 6/11/2011 10:19:32 PM, error: Service Control Manager [7034] - The ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## service terminated unexpectedly. It has done this 1 time(s). . ==== End Of File ===========================

Привет, armbar! Сега ще се опитаме да оправим Windows. Ето какво предлагам:

Стъпка 1

Деинсталирайте през контролния панел -> Add or Remove Programs следните програми:

• IObit Security 360
• Advanced SystemCare

След като приключим, може да ги инсталирате отново.

Стъпка 2

• Изтеглете OTL.exe и го запазете на десктопа.
• Стартирайте файла с двукратен клик на мишката.
• Направете следните настройки:

• Под с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

netsvcs
drivers32 /all
%SYSTEMDRIVE%\*.*
%PROGRAMFILES%\*.*
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%PROGRAMFILES%\Internet Explorer\*.tmp
%PROGRAMFILES%\Internet Explorer\*.dat
/md5start
atapi.sys
iaStor.sys
explorer.exe
svchost.exe
userinit.exe
hlp.dat
winlogon.exe
wininit.exe
userinit.exe
explorer.exe
volsnap.sys
/md5stop

• Натиснете маркираният в синьо бутон: .
• Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt. Прикачете тези два файла в следващия си коментар (погледнете опцията "прикачени файлове", когато публикувате мнение).

Готово! Съжалявам за забавянето , но докато ги кача ми заби 3 пъти...

OTL.Txt

Extras.Txt

Стартирайте отново OTL и с Copy/ Paste под колонката Custom Scans/Fixes въведете скриптовия текст от текстовото поле по-долу, като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта!

:otl
SRV - (Ventrilo) -- File not found
SRV - (MSSQLServerADHelper) -- File not found
SRV - (Bonjour Service) -- File not found
IE - HKU\S-1-5-21-507921405-1715567821-682003330-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
[2011/06/11 22:33:22 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) -- 
O2 - BHO: (Flash Catcher) - {3AF255C7-8742-4B96-8971-1268EEE04974} - Reg Error: Value error. File not found
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O33 - MountPoints2\{f8636045-48a6-11df-81a5-00ff01000001}\Shell\AutoRun\command - "" = G:\office\\\stroking.exe
O33 - MountPoints2\{f8636045-48a6-11df-81a5-00ff01000001}\Shell\explore\command - "" = G:\office\\\stroking.exe
O33 - MountPoints2\{f8636045-48a6-11df-81a5-00ff01000001}\Shell\Install\command - "" = G:\office\\\stroking.exe
O33 - MountPoints2\{f8636045-48a6-11df-81a5-00ff01000001}\Shell\open\command - "" = G:\office\\\stroking.exe
:files
autorun.inf /alldrives
recycler /alldrives
ipconfig /flushdns /c
:commands
[purity]
[emptytemp]
[emptyflash]
[Reboot]

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix

Ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

А пак ли трябва да е с настройките от по-горния пост?

Не, няма нужда от настройки. Внимавайте, след въвеждане на скрипта натиснете Run Fix.

Редактирано 16 юни 201115 г. от nologo (преглед на промените)

All processes killed

========== OTL ==========

Service Ventrilo stopped successfully!

Service Ventrilo deleted successfully!

File File not found not found.

Service MSSQLServerADHelper stopped successfully!

Service MSSQLServerADHelper deleted successfully!

File File not found not found.

Service Bonjour Service stopped successfully!

Service Bonjour Service deleted successfully!

File File not found not found.

HKU\S-1-5-21-507921405-1715567821-682003330-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\zh-TW\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\zh-TW folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\zh-CN\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\zh-CN folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\sv-SE\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\sv-SE folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\ko-KR\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\ko-KR folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\ja-JP\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\ja-JP folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\it-IT\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\it-IT folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\fr-FR\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\fr-FR folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\es-ES\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\es-ES folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\en-US\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\en-US folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\de-DE\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale\de-DE folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\locale folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\content\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome\content folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\chrome folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions folder moved successfully.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3AF255C7-8742-4B96-8971-1268EEE04974}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3AF255C7-8742-4B96-8971-1268EEE04974}\ deleted successfully.

Starting removal of ActiveX control {33564D57-0000-0010-8000-00AA00389B71}

C:\WINDOWS\Downloaded Program Files\WMV9VCM.inf moved successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{33564D57-0000-0010-8000-00AA00389B71}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-0000-0010-8000-00AA00389B71}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f8636045-48a6-11df-81a5-00ff01000001}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f8636045-48a6-11df-81a5-00ff01000001}\ not found.

File G:\office\\\stroking.exe not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f8636045-48a6-11df-81a5-00ff01000001}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f8636045-48a6-11df-81a5-00ff01000001}\ not found.

File G:\office\\\stroking.exe not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f8636045-48a6-11df-81a5-00ff01000001}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f8636045-48a6-11df-81a5-00ff01000001}\ not found.

File G:\office\\\stroking.exe not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f8636045-48a6-11df-81a5-00ff01000001}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f8636045-48a6-11df-81a5-00ff01000001}\ not found.

File G:\office\\\stroking.exe not found.

========== FILES ==========

autorun.inf not found in C:\

autorun.inf not found in D:\

C:\RECYCLER\S-1-5-21-507921405-1715567821-682003330-500 folder moved successfully.

C:\RECYCLER folder moved successfully.

D:\RECYCLER\S-1-5-21-507921405-1715567821-682003330-500 folder moved successfully.

D:\RECYCLER\S-1-5-21-436374069-1682526488-682003330-500\Dd189 folder moved successfully.

D:\RECYCLER\S-1-5-21-436374069-1682526488-682003330-500\Dd188\1024watermarked folder moved successfully.

D:\RECYCLER\S-1-5-21-436374069-1682526488-682003330-500\Dd188 folder moved successfully.

D:\RECYCLER\S-1-5-21-436374069-1682526488-682003330-500 folder moved successfully.

D:\RECYCLER folder moved successfully.

< ipconfig /flushdns /c >

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Documents and Settings\Administrator\Desktop\cmd.bat deleted successfully.

C:\Documents and Settings\Administrator\Desktop\cmd.txt deleted successfully.

========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator

->Temp folder emptied: 281081298 bytes

->Temporary Internet Files folder emptied: 1091945 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 77465155 bytes

->Flash cache emptied: 2227 bytes

User: All Users

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

->Flash cache emptied: 41620 bytes

User: LocalService

->Temp folder emptied: 65984 bytes

->Temporary Internet Files folder emptied: 1371493 bytes

->Flash cache emptied: 405 bytes

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 32902 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 2402044 bytes

%systemroot%\System32 .tmp files removed: 2577 bytes

%systemroot%\System32\dllcache .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 344064 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes

RecycleBin emptied: 0 bytes

Total Files Cleaned = 347.00 mb

[EMPTYFLASH]

User: Administrator

->Flash cache emptied: 0 bytes

User: All Users

User: Default User

->Flash cache emptied: 0 bytes

User: LocalService

->Flash cache emptied: 0 bytes

User: NetworkService

Total Flash Files Cleaned = 0.00 mb

OTL by OldTimer - Version 3.2.24.0 log created on 06162011_221835

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

Добре. Има някакъв проблем с харддиска, което не ми харесва. Затова ще проверим, ето как:

Стъпка 1

Моля, изтеглете aswMBR и го запазете на вашия десктоп.

• Щракнете два пъти върху файла aswMBR.exe, за да го стартирате.
• Изберете Scan бутона, за да започне проверката.
• Когато проверката завърши, натиснете бутона save log, запазете съдържанието на лог файла на десктопа и публикувайте съдържанието му в следващия си коментар.

Стъпка 2

Start -> напишете в полето cmd

после натиснете ENTER

Поставете в конзолата с Copy/ Paste следния текст, маркиран в синьо:

chkdsk /f /r C: > C:\report.txt

натиснете ENTER

Публикувайте съдържанието на report.txt, който се намира на C: в следващия си коментар.

aswMBR version 0.9.6.399 Copyright© 2011 AVAST Software Run date: 2011-06-16 22:37:31 ----------------------------- 22:37:31.953 OS Version: Windows 5.1.2600 Service Pack 3 22:37:31.953 Number of processors: 2 586 0x6B02 22:37:31.953 ComputerName: CHANGEME UserName: 22:37:32.484 Initialize success 22:37:36.750 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T1L0-5 22:37:36.750 Disk 0 Vendor: Hitachi_HDP725025GLA380 GM2OA52A Size: 238475MB BusType: 3 22:37:36.750 Disk 0 MBR read error 0 22:37:36.750 Disk 0 MBR scan 22:37:36.750 Disk 0 unknown MBR code 22:37:36.750 MBR BIOS signature not found 0 22:37:36.750 Disk 0 scanning sectors +488391120 22:37:36.750 Disk 0 scanning C:\WINDOWS\system32\drivers 22:37:42.421 Service scanning 22:37:43.687 Disk 0 trace - called modules: 22:37:43.703 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys spzz.sys >>UNKNOWN [0x89e01938]<< 22:37:43.703 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x89d5dab8] 22:37:43.703 3 CLASSPNP.SYS[ba0e8fd7] -> nt!IofCallDriver -> \Device\0000006d[0x89d8b908] 22:37:43.703 5 ACPI.sys[b9e66620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T1L0-5[0x89d8c940] 22:37:43.703 Scan finished successfully 22:39:39.234 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Administrator\Desktop\MBR.dat" 22:39:39.250 The log file has been saved successfully to "C:\Documents and Settings\Administrator\Desktop\aswMBR.txt" Report The type of the file system is NTFS. Cannot lock current drive. Chkdsk cannot run because the volume is in use by another process. Would you like to schedule this volume to be checked the next time the system restarts? (Y/N)

Искам пак да проверя MBR:

• Изтеглете: MBRCheck.exe на вашия десктоп.
• Спрете временно антивирусната си програма
• Стартирайте MBRCheck.exe
• След това на десктопа ще се появи черен прозорец
• Ако има намерен непознат бууткод (bootcode), ще се появят няколко опции. Не ги използвайте! Само натиснете N, след това ENTER два пъти.
• Ако няма проблеми, само натиснете ENTER
• Ще се генерира текстов файл - MBRCheck_mm.dd.yy_hh.mm.ss на вашия десктоп (тук mm е месец, dd - ден, yyyy - година, hh - час, mm - минута и ss - секунда). Oтворете този файл, маркирайте и копирайте с десен клик Copy (Копирай или Ctrl+С) изцяло текста, който се съдържа в него. Публикувайте копирания текст с Paste (Постави) в следващия си коментар.

MBRCheck, version 1.2.3 © 2010, AD Command-line: Windows Version: Windows XP Professional Windows Information: Service Pack 3 (build 2600) Logical Drives Mask: 0x0000003d Kernel Drivers (total 134): 0x804D7000 \WINDOWS\system32\ntkrnlpa.exe 0x806E5000 \WINDOWS\system32\hal.dll 0xBA5A8000 \WINDOWS\system32\KDCOM.DLL 0xBA4B8000 \WINDOWS\system32\BOOTVID.dll 0xB9EA6000 spzz.sys 0xBA5AA000 \WINDOWS\System32\Drivers\WMILIB.SYS 0xB9E8E000 \WINDOWS\System32\Drivers\SCSIPORT.SYS 0xB9E60000 ACPI.sys 0xB9E4F000 pci.sys 0xBA0A8000 isapnp.sys 0xBA670000 pciide.sys 0xBA328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS 0xBA0B8000 MountMgr.sys 0xB9E30000 ftdisk.sys 0xBA5AC000 dmload.sys 0xB9E0A000 dmio.sys 0xBA330000 PartMgr.sys 0xBA0C8000 VolSnap.sys 0xB9DF2000 atapi.sys 0xBA0D8000 disk.sys 0xBA0E8000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS 0xB9DD2000 fltMgr.sys 0xB9DC0000 sr.sys 0xB9DA9000 KSecDD.sys 0xB9D1C000 Ntfs.sys 0xB9CEF000 NDIS.sys 0xB9CD5000 Mup.sys 0xBA308000 \SystemRoot\system32\DRIVERS\processr.sys 0xB727D000 \SystemRoot\system32\DRIVERS\ati2mtag.sys 0xB7269000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS 0xB7241000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0xB7200000 \SystemRoot\system32\DRIVERS\yk51x86.sys 0xBA3E0000 \SystemRoot\system32\DRIVERS\usbohci.sys 0xB71DC000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0xBA3E8000 \SystemRoot\system32\DRIVERS\usbehci.sys 0xBA318000 \SystemRoot\system32\DRIVERS\imapi.sys 0xBA118000 \SystemRoot\system32\DRIVERS\cdrom.sys 0xB774C000 \SystemRoot\system32\DRIVERS\redbook.sys 0xB71B9000 \SystemRoot\system32\DRIVERS\ks.sys 0xB7181000 \SystemRoot\System32\Drivers\a84js8bo.SYS 0xBA450000 \SystemRoot\system32\DRIVERS\fdc.sys 0xB773C000 \SystemRoot\system32\DRIVERS\serial.sys 0xB9C55000 \SystemRoot\system32\DRIVERS\serenum.sys 0xBA458000 \SystemRoot\system32\DRIVERS\irsir.sys 0xB9C51000 \SystemRoot\system32\DRIVERS\irenum.sys 0xB772C000 \SystemRoot\system32\DRIVERS\i8042prt.sys 0xBA460000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0xBA6A3000 \SystemRoot\system32\DRIVERS\audstub.sys 0xBA468000 \SystemRoot\system32\DRIVERS\rasirda.sys 0xBA470000 \SystemRoot\system32\DRIVERS\TDI.SYS 0xB771C000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0xB9C45000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0xB716A000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0xB770C000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0xB76FC000 \SystemRoot\system32\DRIVERS\raspptp.sys 0xB7159000 \SystemRoot\system32\DRIVERS\psched.sys 0xB76EC000 \SystemRoot\system32\DRIVERS\msgpc.sys 0xBA478000 \SystemRoot\system32\DRIVERS\ptilink.sys 0xBA480000 \SystemRoot\system32\DRIVERS\raspti.sys 0xB76DC000 \SystemRoot\system32\DRIVERS\ESLvnic.sys 0xB7129000 \SystemRoot\system32\DRIVERS\rdpdr.sys 0xB76CC000 \SystemRoot\system32\DRIVERS\termdd.sys 0xBA488000 \SystemRoot\system32\DRIVERS\mouclass.sys 0xBA5DA000 \SystemRoot\system32\DRIVERS\swenum.sys 0xB70CB000 \SystemRoot\system32\DRIVERS\update.sys 0xB790D000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0xB76BC000 \SystemRoot\system32\DRIVERS\AmdLLD.sys 0xBA128000 \SystemRoot\System32\Drivers\NDProxy.SYS 0xAAF0B000 \SystemRoot\system32\drivers\AtiHdmi.sys 0xAAEE7000 \SystemRoot\system32\drivers\portcls.sys 0xBA158000 \SystemRoot\system32\drivers\drmk.sys 0xBA168000 \SystemRoot\system32\DRIVERS\usbhub.sys 0xBA5DE000 \SystemRoot\system32\DRIVERS\USBD.SYS 0xAAA5C000 \SystemRoot\system32\drivers\RtkHDAud.sys 0xBA4A0000 \SystemRoot\system32\DRIVERS\flpydisk.sys 0xBA5E2000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0xBA778000 \SystemRoot\System32\Drivers\Null.SYS 0xBA5E4000 \SystemRoot\System32\Drivers\Beep.SYS 0xBA4B0000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0xBA340000 \SystemRoot\System32\drivers\vga.sys 0xBA5E6000 \SystemRoot\System32\Drivers\mnmdd.SYS 0xBA5E8000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0xBA348000 \SystemRoot\System32\Drivers\Msfs.SYS 0xBA378000 \SystemRoot\System32\Drivers\Npfs.SYS 0xB9C69000 \SystemRoot\system32\DRIVERS\rasacd.sys 0xAA9D9000 \SystemRoot\system32\DRIVERS\ipsec.sys 0xAA980000 \SystemRoot\system32\DRIVERS\tcpip.sys 0xAA958000 \SystemRoot\system32\DRIVERS\netbt.sys 0xAA932000 \SystemRoot\system32\DRIVERS\ipnat.sys 0xAA910000 \SystemRoot\System32\drivers\afd.sys 0xBA188000 \SystemRoot\system32\DRIVERS\netbios.sys 0xBA198000 \SystemRoot\system32\DRIVERS\wanarp.sys 0xBA380000 \SystemRoot\system32\DRIVERS\ssmdrv.sys 0xAA8E5000 \SystemRoot\system32\DRIVERS\rdbss.sys 0xAA84D000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0xBA1A8000 \SystemRoot\System32\Drivers\Fips.SYS 0xAA831000 \SystemRoot\system32\DRIVERS\avipbb.sys 0xBA5EE000 \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys 0xBA390000 \SystemRoot\system32\DRIVERS\OVCD.sys 0xBA1C8000 \SystemRoot\system32\DRIVERS\OVCAM2.sys 0xBA1D8000 \SystemRoot\system32\DRIVERS\STREAM.SYS 0xAA73B000 \SystemRoot\system32\DRIVERS\OVCODEK2.sys 0xBA1E8000 \SystemRoot\System32\Drivers\Cdfs.SYS 0xBA398000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0xBA3A0000 \SystemRoot\System32\Drivers\Razerlow.sys 0xB6F4B000 \SystemRoot\system32\DRIVERS\hidusb.sys 0xBA1F8000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0xB6F47000 \SystemRoot\system32\DRIVERS\mouhid.sys 0xAAA54000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0xAA723000 \SystemRoot\System32\Drivers\dump_atapi.sys 0xBA5F2000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS 0xBF800000 \SystemRoot\System32\win32k.sys 0xAAA38000 \SystemRoot\System32\drivers\Dxapi.sys 0xBA3B0000 \SystemRoot\System32\watchdog.sys 0xBF000000 \SystemRoot\System32\drivers\dxg.sys 0xBA7A5000 \SystemRoot\System32\drivers\dxgthk.sys 0xBF012000 \SystemRoot\System32\ati2dvag.dll 0xBF068000 \SystemRoot\System32\ati2cqag.dll 0xBF107000 \SystemRoot\System32\atikvmag.dll 0xBF18E000 \SystemRoot\System32\atiok3x2.dll 0xBF1EE000 \SystemRoot\System32\ati3duag.dll 0xBF4CE000 \SystemRoot\System32\ativvaxx.dll 0xBF6D9000 \SystemRoot\System32\ATMFD.DLL 0xA7BBE000 \SystemRoot\system32\DRIVERS\avgntflt.sys 0xA7B30000 \SystemRoot\system32\DRIVERS\irda.sys 0xA7BBA000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0xA77FB000 \SystemRoot\system32\drivers\wdmaud.sys 0xA78F0000 \SystemRoot\system32\drivers\sysaudio.sys 0xA7620000 \??\C:\WINDOWS\system32\drivers\ESLWireACD.sys 0xA7578000 \SystemRoot\system32\DRIVERS\srv.sys 0xA7217000 \SystemRoot\System32\Drivers\HTTP.sys 0xA6C1F000 \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\aswMBR.sys 0xA6818000 \SystemRoot\system32\drivers\kmixer.sys 0x7C900000 \WINDOWS\system32\ntdll.dll Processes (total 33): 0 System Idle Process 4 System 916 C:\WINDOWS\system32\smss.exe 964 csrss.exe 996 C:\WINDOWS\system32\winlogon.exe 1040 C:\WINDOWS\system32\services.exe 1052 C:\WINDOWS\system32\lsass.exe 1240 C:\WINDOWS\system32\ati2evxx.exe 1260 C:\WINDOWS\system32\svchost.exe 1308 svchost.exe 1460 C:\WINDOWS\system32\svchost.exe 1608 svchost.exe 1820 C:\WINDOWS\system32\svchost.exe 1864 C:\WINDOWS\system32\ati2evxx.exe 1984 C:\WINDOWS\system32\spoolsv.exe 372 C:\WINDOWS\explorer.exe 380 C:\Program Files\Avira\AntiVir Desktop\sched.exe 804 C:\Program Files\Avira\AntiVir Desktop\avguard.exe 840 C:\Program Files\Java\jre6\bin\jqs.exe 1180 C:\WINDOWS\system32\svchost.exe 1524 wdfmgr.exe 692 alg.exe 2504 C:\Program Files\Razer\Copperhead\razerhid.exe 2600 D:\Steam\steam.exe 2608 svchost.exe 2844 C:\Program Files\Razer\Copperhead\razertra.exe 3008 C:\Program Files\Razer\Copperhead\razerofa.exe 3424 C:\Program Files\Mozilla Firefox\firefox.exe 3904 C:\Program Files\Mozilla Firefox\plugin-container.exe 3864 C:\Program Files\Skype\Phone\Skype.exe 2348 C:\Program Files\Skype\Plugin Manager\skypePM.exe 2992 C:\Program Files\BitLord\BitLord.exe 3568 C:\Documents and Settings\Administrator\Desktop\MBRCheck.exe \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00769e00 (NTFS) \\.\D: --> \\.\PhysicalDrive0 at offset 0x0000001d`4c03c000 (NTFS) PhysicalDrive0 Model Number: HitachiHDP725025GLA380, Rev: GM2OA52A Size Device Name MBR Status -------------------------------------------- 232 GB \\.\PhysicalDrive0 Windows XP MBR code detected SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A Done!

Досега само сканирахме, без да правим каквито и да е промени с aswMBR и MBRCheck. След като пуснахте скрипта на OTL има ли някаква промяна?

Като каза, пробвах в няколко игри и всичко беше нормално.ЗА СЕГА спря да забива.Има ли още нещо, което трябва да направим? EDIT: Сега пуснах един филм и заби няколко пъти, а и хората които говорят се чуват като роботи(както преди)

Редактирано 16 юни 201115 г. от armbar (преглед на промените)

Добре. Сега стартирайте OTL още веднъж и натиснете бутона CleanUp.

При дeинсталацията на OTL ще бъдат почистени инструменти и файлове, които използвахме в темата. Ще последва рестарт на Windows. След това деинсталирайте или просто изтрийте файловете, които използвахме в темата.

Ще може ли едно бързо сканиране с Malwarebytes' Anti-Malware? Ето как:

• Обновете и стартирайте Malwarebytes' Anti-Malware. Изберете Perform Quick Scan, след това кликнете на Scan.
• Сканирането ще отнеме малко време, затова моля бъдете търпеливи.
• Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.
• Уверете се, че на всички редове има отметки, и кликнете Remove Selected.
• Когато всичко бъде премахнато, логът ще бъде отворен в Notepad. Копирайте лога и го публикувайте в следващия си коментар в темата.

Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

За филма ще опитаме нещо. Малко по-късно.

А къде мога да намеря лога? Рестартирах компютъра и се загуби.

Ето тук (Logs):

Просто един клик на последния лог и ще се отвори Notepad.

Malwarebytes' Anti-Malware 1.44 Версия на базата от данни: 3769 Windows 5.1.2600 Service Pack 3 Internet Explorer 6.0.2900.5512 6/16/2011 11:35:25 PM mbam-log-2011-06-16 (23-35-25).txt Тип сканиране: Бързо сканиране Сканирани обекти: 110108 Изминало време: 3 minute(s), 46 second(s) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 0 Заразени стойности в регистратурата: 0 Заразени информационни обекти в регистратурата: 3 Заразени папки: 0 Заразени файлове: 1 Заразени процеси в паметта: (Не бяха открити заплахи) Заразени модули в паметта: (Не бяха открити заплахи) Заразени ключове в регистратурата: (Не бяха открити заплахи) Заразени стойности в регистратурата: (Не бяха открити заплахи) Заразени информационни обекти в регистратурата: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Заразени папки: (Не бяха открити заплахи) Заразени файлове: C:\WINDOWS\ADMDLL.dll (PUP.RemoteAdmin) -> Quarantined and deleted successfully.

Следва:

Стъпка 1

• Изтеглете Suspicious File Packer и го разархивирайте на работния плот (десктоп).
• Стартирайте sfp.exe
• Копирайте (Copy) съдържанието на текста в синьо, който е по-долу и го поставете (Paste) в програмата:

  C:\WINDOWS\ADMDLL.dll

  C:\WINDOWS\raddrv.dll

  C:\WINDOWS\app.exe

• Натиснете Continue. Програмата ще направи CAB файл на работния плот (десктоп), който изглежда ето така: requested-files[година-месец-ден_час_минута].cab
• Качете файла на rapidshare.com и дайте линк, за да го изтеглим.

Стъпка 2

Изтеглете ComboFix от: тук

ВАЖНО: Запазете ComboFix.exe на вашия десктоп!

• Прекратете временно работата на антивирусната програма и на други програми за сигурност, ако има такива. Ако не можете спрете антивирусната програма или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs

• Стартирайте Combofix.exe и следвайте инструкциите.

Забележка:

• Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа.
• ComboFix ще нулира всички настройки на Internet Explorer (IE), включително да направи IE браузър по подразбиране.
• ComboFix ще изключи autorun функцията на всички CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и защити системата от бъдещи вируси/заплахи, които поразяват посредством autorun. Ако това е проблем за вас - моля, уведомете ме.
• ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той също ще изключи интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си.
• В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:\BUG.txt в следващия Ви коментар в тази тема.

Работата на ComboFix може да отнеме до 20-30 минути. Затова имайте търпение. Когато процесът приключи успешно, ComboFix ще създаде лог файл. Моля, копирайте съдържанието на C:\ComboFix.txt и го поставете в следващия си коментар в тази тема.

https://rapidshare.com/files/2124135829/requested-files_2011-06-17_13_31_.cab Сега ще сканирам с ComboFix само да се подготвя ,че и преди съм сканирал и много неща разбъзиква. EDIT: ComboFix ComboFix 11-06-16.02 - Administrator 06/17/2011 13:41:43.3.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.2047.1610 [GMT 3:00] Running from: c:\documents and settings\Administrator\Desktop\ComboFix.exe AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7} * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\documents and settings\Administrator\Application Data\.# c:\documents and settings\Administrator\WINDOWS c:\windows\1.reg c:\windows\2.reg c:\windows\app.exe c:\windows\raddrv.dll . . ((((((((((((((((((((((((( Files Created from 2011-05-17 to 2011-06-17 ))))))))))))))))))))))))))))))) . . 2011-06-15 11:40 . 2011-02-17 13:18 455936 -c----w- c:\windows\system32\dllcache\mrxsmb.sys 2011-06-15 11:37 . 2010-12-09 13:47 2148864 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe 2011-06-15 11:37 . 2010-12-09 13:43 2192768 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe 2011-06-15 11:37 . 2010-12-09 13:09 2027008 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe 2011-06-15 11:29 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe 2011-06-15 11:28 . 2009-11-27 16:07 8704 -c----w- c:\windows\system32\dllcache\tsbyuv.dll 2011-06-15 11:28 . 2009-11-27 16:07 48128 -c----w- c:\windows\system32\dllcache\iyuv_32.dll 2011-06-15 11:27 . 2009-11-27 17:23 17920 -c----w- c:\windows\system32\dllcache\msyuv.dll 2011-06-15 11:25 . 2011-06-15 11:25 -------- d-----w- c:\program files\MSXML 4.0 2011-06-13 17:42 . 2011-06-13 17:42 -------- d-----w- c:\documents and settings\Administrator\Application Data\IObit 2011-06-11 20:08 . 2002-06-25 15:54 381 ----a-w- C:\mouse_fix.reg 2011-06-05 12:16 . 2011-06-05 12:16 -------- d-----w- c:\documents and settings\All Users\Application Data\VOIPlay 2011-06-05 12:12 . 2011-06-06 10:41 -------- d-----w- c:\program files\VOIPlay 2011-05-28 11:45 . 2011-06-17 08:50 -------- d-----w- c:\documents and settings\Administrator\Application Data\go 2011-05-28 11:44 . 2011-06-17 09:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Easybits GO . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-05-07 20:21 . 2011-05-07 20:21 249856 ------w- c:\windows\Setup1.exe 2011-05-07 20:21 . 2011-05-07 20:21 73216 ----a-w- c:\windows\ST6UNST.EXE 2011-04-18 09:10 . 2010-09-23 17:25 812448 ----a-w- c:\windows\system32\drivers\ESLWireACD.sys 2011-04-14 16:37 . 2011-04-30 19:32 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Octoshape Streaming Services"="c:\documents and settings\Administrator\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" [2009-01-08 70936] "Steam"="d:\steam\steam.exe" [2010-11-17 1242448] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824] "Copperhead"="c:\program files\Razer\Copperhead\razerhid.exe" [2005-10-08 155648] "razer"="c:\program files\Razer\Copperhead\razerhid.exe" [2005-10-08 155648] . [HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^LimeWire On Startup.lnk] path=c:\documents and settings\Administrator\Start Menu\Programs\Startup\LimeWire On Startup.lnk backup=c:\windows\pss\LimeWire On Startup.lnkStartup . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] 2010-09-21 18:37 932288 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2010-06-20 02:04 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] 2009-04-23 13:51 691656 ----a-w- c:\program files\DAEMON Tools Lite\daemon.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ESL Wire] 2011-06-07 11:25 2761216 ----a-w- c:\program files\EslWire\wire.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] 2008-04-14 02:42 1695232 ------w- c:\program files\Messenger\msmsgs.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VOIPlay] 2010-10-05 09:17 1374568 ----a-w- c:\program files\VOIPlay\voiplay.exe . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\BitLord\\BitLord.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= "c:\\Program Files\\EslWire\\wire.exe"= "c:\\Documents and Settings\\Administrator\\temp\\TeamViewer\\Version4\\TeamViewer.exe"= "c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\pes2009.exe"= "d:\\Steam\\steamapps\\usb3\\half-life 2 deathmatch\\hl2.exe"= "c:\\Program Files\\EA SPORTS\\FIFA 10\\FIFA10.exe"= "c:\\Documents and Settings\\Administrator\\Application Data\\Octoshape\\Octoshape Streaming Services\\OctoshapeClient.exe"= "c:\\Program Files\\Training\\hlds.exe"= "d:\\Steam\\steamapps\\usb3\\ricochet\\hl.exe"= "d:\\Steam\\steamapps\\usb3\\dedicated server\\hlds.exe"= "d:\\Steam\\steamapps\\usb3\\condition zero\\hl.exe"= "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"= "d:\\Steam\\steamapps\\usb3\\counter-strike\\91044127223081289851.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "d:\\Steam\\steamapps\\usb3\\counter-strike\\hl.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "22412:TCP"= 22412:TCP:BitComet 22412 TCP "22412:UDP"= 22412:UDP:BitComet 22412 UDP . R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [8/11/2009 9:32 PM 721904] R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [1/1/2007 3:54 PM 108289] R2 ESLWireAC;ESLWireAC;c:\windows\system32\drivers\ESLWireACD.sys [9/23/2010 8:25 PM 812448] R3 ESLvnic1;ESLvnic Virtual Network 32 Bit;c:\windows\system32\drivers\ESLvnic.sys [8/28/2009 4:41 PM 24504] R3 Razerlow;Razer Copperhead Driver;c:\windows\system32\drivers\Razerlow.sys [1/7/2010 11:18 PM 19020] . Contents of the 'Scheduled Tasks' folder . . ------- Supplementary Scan ------- . uSearchURL,(Default) = hxxp://www.google.com/search?q=%s TCP: DhcpNameServer = 168.95.1.1 FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fzprxefj.default\ FF - prefs.js: browser.search.selectedEngine - Wikipedia (en) FF - prefs.js: browser.startup.homepage - hxxp://www.google.bg/ FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=685749&p= . - - - - ORPHANS REMOVED - - - - . MSConfigStartUp-Advanced SystemCare 3 - c:\program files\IObit\Advanced SystemCare 3\AWC.exe MSConfigStartUp-IObit Security 360 - c:\program files\IObit\IObit Security 360\IS360tray.exe MSConfigStartUp-LogMeIn Hamachi Ui - c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe MSConfigStartUp-SearchSettings - c:\program files\Common Files\Spigot\Search Settings\SearchSettings.exe AddRemove-Octoshape add-in for Adobe Flash Player - c:\documents and settings\Administrator\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2011-06-17 13:44 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'winlogon.exe'(996) c:\windows\system32\Ati2evxx.dll . Completion time: 2011-06-17 13:46:15 ComboFix-quarantined-files.txt 2011-06-17 10:45 . Pre-Run: 8,049,713,152 bytes free Post-Run: 8,020,168,704 bytes free . WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect . - - End Of File - - ABE345738CC488B188E1ABB16ECA4CDD

Редактирано 17 юни 201115 г. от armbar (преглед на промените)

Супер! Според мен проблемите със заразите са решени. Нека все пак да има още една проверка и лог от MBAM - обновяване и бързо сканиране (Quick Scan), както преди.

Malwarebytes' Anti-Malware 1.44 Версия на базата от данни: 3769 Windows 5.1.2600 Service Pack 3 Internet Explorer 6.0.2900.5512 6/17/2011 5:19:36 PM mbam-log-2011-06-17 (17-19-36).txt Тип сканиране: Бързо сканиране Сканирани обекти: 110301 Изминало време: 12 minute(s), 39 second(s) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 0 Заразени стойности в регистратурата: 0 Заразени информационни обекти в регистратурата: 0 Заразени папки: 0 Заразени файлове: 0 Заразени процеси в паметта: (Не бяха открити заплахи) Заразени модули в паметта: (Не бяха открити заплахи) Заразени ключове в регистратурата: (Не бяха открити заплахи) Заразени стойности в регистратурата: (Не бяха открити заплахи) Заразени информационни обекти в регистратурата: (Не бяха открити заплахи) Заразени папки: (Не бяха открити заплахи) Заразени файлове: (Не бяха открити заплахи) EDIT: Имам още два проблема обаче.Някой път, когато пускам компютъра си стои черен екран, а се чува звука как зарежда Windows? И след сканирането на Combofix долу ми изчезват някой неща, които пак са пуснати.(Това и преди е ставало, но просто съм свикнал.Просто сега ми изчезнаха настройките на мишката, а преди антивирусната)

Редактирано 17 юни 201115 г. от armbar (преглед на промените)

Ще помисля за черния екран. Предполагам, че може би трябва да се инсталира наново софтуерът на мишката.

Сега деинсталирайте Combofix ето така:

Start -> Run -> копирайте (Copy) и поставете (Paste) в прозореца следния текст, маркиран в синьо:

Combofix /Uninstall

и натиснете ENTER

Снимка:

След това:

1. Изтеглете и инсталирайте последните обновявания за Java: Java SE Runtime Environment 6 Update 26.

2. Обновете К-lite до последната версия, като деинсталирате от контролния панел старата и инсталирате най-новата.

P.S. Последното обновяване за MBAM е с номер 6877. По-горе писах да обновите и да сканирате с MBAM. Ако желаете, сканирайте отново. Може да изтриете точките за възстановяване, като спрете и пуснете отново System Restore.

Как така? Преди като я бях инсталирал бях дал сама да се update-ва.А как се махаше долу Windows Securyity Alert?

Control Panel -> Security Center -> Change the way Security Centre alerts me -> махат се отметките, които желаете под Alert Settings:

Готово.Мерси, че ми помогна малко да си оправя компютъра днес цял ден не ми е засичало,лагвало и т.н.А относто това с черния екран е мистерия, оправя се просто когато рестартирам отново.А настройките на мишката се появиха след рестартирането.