Готово. Сега ??? и коя, е по-новата програма ? дето говориш за Advanced systemcare?

Има нова версия...не нова програма....Advanced SystemCare Free 4 Ако мислиш да я инсталираш искам първо да изтриеш старата и да пробваш дали игрите ти ще работят нормално...пиши преди да инсталираш новата...!Освен това след фикса с HijackThis има ли промяна..?

Пак лаг-ва но по-малко. Да. Има промяна и то голяма но още лаги... не е от играта защото и оправих настройките сичко ... и като искам да сложа някой мод ме изхварля от самата игра.... за лаг-а инсталирах 3 различни версии пак така ...

И защо си мислите че аз имам отношение към игрите ви.....повтарям се ,може и да се потретя...Системата ви е чиста от зарази...!

Има нова версия...не нова програма....Advanced SystemCare Free 4 Ако мислиш да я инсталираш искам първо да изтриеш старата и да пробваш дали игрите ти ще работят нормално...пиши преди да инсталираш новата...!Освен това след фикса с HijackThis има ли промяна..?

Деинсталирахте ли старата версия...?

Да. Компютъра сега е много по-добре не лагва/забива

Сигурен ли си ...хубаво го изпробвай и пиши.....!

Затова винаги казвам че такива програми тип ''Всичко в едно'' са пълни бози..!Това е поредното доказателство....!!!

Засега нищо му няма но засега

Няма да му има,разбира се....стига да не решиш да инсталираш отново такива програми като Advanced system care...!

Направи нов лог :

Натиснете Do a system scan and save a logfile:

След процеса на сканиране -

- ще се отвори тексто документ с лог файл

..който е необходимо да прикачите в следващия си пост.

Ако, искаш да довършиме сичко после пак да не стане така че да забива ? Заповядай!!! пак нестава ... ще го копирам: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 23:16:38 ч., on 15.07.2011 г. Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v8.00 (8.00.7601.17514) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskhost.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Microsoft IntelliType Pro\itype.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\VDOTool\TBPANEL.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe D:\BitLord\Downloads\opera.exe C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\4.5\iobitToolbarIE.dll O2 - BHO: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\4.5\iobitToolbarIE.dll O3 - Toolbar: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\4.5\iobitToolbarIE.dll O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe" O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [searchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe" O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [TBPanel] C:\Program Files\VDOTool\TBPanel.exe /A O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: GameRanger.lnk = C:\Users\ex7azy\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{6C691689-D157-4935-9EF3-21856FD41DB7}: NameServer = 94.155.50.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{6C691689-D157-4935-9EF3-21856FD41DB7}: NameServer = 94.155.50.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{6C691689-D157-4935-9EF3-21856FD41DB7}: NameServer = 94.155.50.1 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Услуга Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NitroPDFReaderDriverCreatorReadSpool (NitroReaderDriverReadSpool) - Nitro PDF Software - C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe -- End of file - 6672 bytes

А какъв е тоя тоолбар пак.....ами аз цяла вечер да чистя ти все се набутваш с нещо....А днес цял ден се опитвам да ти оправя системата...!!!

1.Стартирате HijackThis

2.Натиснете бутон "Do a system scan only"

3.Поставете отметки на следните редове и натиснете "Fix сhecked".

R3 - URLSearchHook: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\4.5\iobitToolbarIE.dll

O2 - BHO: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\4.5\iobitToolbarIE.dll

O3 - Toolbar: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\4.5\iobitToolbarIE.dll

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [searchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe"

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

Готово заповядай: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 23:48:54 ч., on 15.07.2011 г. Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v8.00 (8.00.7601.17514) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskhost.exe C:\Program Files\Microsoft IntelliType Pro\itype.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\VDOTool\TBPANEL.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe D:\BitLord\Downloads\opera.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe" O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [TBPanel] C:\Program Files\VDOTool\TBPanel.exe /A O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - Startup: GameRanger.lnk = C:\Users\ex7azy\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{6C691689-D157-4935-9EF3-21856FD41DB7}: NameServer = 94.155.50.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{6C691689-D157-4935-9EF3-21856FD41DB7}: NameServer = 94.155.50.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{6C691689-D157-4935-9EF3-21856FD41DB7}: NameServer = 94.155.50.1 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Услуга Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NitroPDFReaderDriverCreatorReadSpool (NitroReaderDriverReadSpool) - Nitro PDF Software - C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe -- End of file - 5698 bytes

Сега всичко изглежда наред..!

• Изтеглете Security Check (автор: screen317) от тук или от тук и го запишете на десктопа.
• Кликнете два пъти върху SecurityCheck.exe и следвайте инструкциите.
• Когато програмата завърши работата си, ще се отвори един текстов документ: checkup.txt.
• Копирайте съдържанието на checkup.txt с Копирай (Copy) и с Постави (Paste) го поставете в следващия си коментар.

Заповядай!!! Ще, може ли утре да продължим защото много ми се спи ??

Results of screen317's Security Check version 0.99.17

Windows 7 Service Pack 1 (UAC is disabled!)

Internet Explorer 8

``````````````````````````````

Antivirus/Firewall Check:

Windows Firewall Enabled!

avast! Free Antivirus

WMI entry may not exist for antivirus; attempting automatic update.

```````````````````````````````

Anti-malware/Other Utilities Check:

Malwarebytes' Anti-Malware

CCleaner (remove only)

Flash Player Out of Date!

Adobe Flash Player 10.1.102.64

Mozilla Firefox (3.6.10) Firefox Out of Date!

````````````````````````````````

Process Check:

objlist.exe by Laurent

Alwil Software Avast5 AvastSvc.exe

Alwil Software Avast5 AvastUI.exe

``````````End of Log````````````

Така ,,продължаваме чак в неделя ...утре ще съм на работа.....лека вечер...!

Добре... до неделя

Здравейте...Минаха два дни след като направихме последните процедури...!Как е сега положението с компютъра ви...?

Направете контролни сканирания с:

* Изтеглете Malwarebytes' Anti-Malware или от тук

* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.

* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.

* Ако има намерени обновявания, тя ще ги изтегли и инсталира.

* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.

* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.

* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.

* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.

* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. Копирайте този лог и го публикувайте в следващия си коментар по темата.

Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

• Изтеглете програмата: ESET Online Scanner
• Стартирайте esetsmartinstaller_enu.exe
• Сложете отметка на YES, I accept the Terms of Use и изберете Start:

  

• Скенерът ще започне да изтегля компонентите, които са му необходими:

  

• Уверете се, че има отметки на следните редове:

  

  Накрая изберете Start

• Скенерът ще започне да изтегля последните дефиниции.
• След, като сканирането завърши изберете Finish.
• Отидете в: C:\Program Files\ESET\ESET Online Scanner
• Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си коментар.

Положението с компютъра за сега е добро ... но пак нещо взе да лагва/забива..... ето го и файла: от програмата "Malwarebyte s Anti-Malwar" : Malwarebytes' Anti-Malware 1.51.1.1800 www.malwarebytes.org Database version: 7149 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 17.07.2011 г. 13:38:11 mbam-log-2011-07-17 (13-38-11).txt Scan type: Full scan (C:\|D:\|) Objects scanned: 361698 Time elapsed: 1 hour(s), 7 minute(s), 5 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

Ето го и лог файла: ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6528 # api_version=3.0.2 # EOSSerial=c5b4d1b729e7c14b9e8c2e4371f9db79 # end=stopped # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2011-07-17 12:02:24 # local_time=2011-07-17 03:02:24 ) # country="Bulgaria" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=512 16777215 100 0 142111 142111 0 0 # compatibility_mode=770 16774141 100 100 175138 87605617 0 0 # compatibility_mode=5893 16776573 100 94 177368 62530536 0 0 # compatibility_mode=8192 67108863 100 0 0 0 0 0 # scanned=151494 # found=12 # cleaned=12 # scan_time=4799 C:\Program Files\Application Updater\ApplicationUpdater.exe probably a variant of Win32/Adware.Toolbar.Dealio application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Program Files\AskTBar\bar\1.bin\A5POPSWT.DLL Win32/Toolbar.AskSBar application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe a variant of Win32/Adware.Toolbar.Dealio application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Program Files\Trend Micro\HiJackThis\backups\backup-20110715-234813-293.dll a variant of Win32/Adware.Toolbar.Dealio application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Users\ex7azy\Documents\hack\Fighter FX 7.2.rar a variant of Win32/GameHack.Q application (deleted - quarantined) 00000000000000000000000000000000 C C:\Users\ex7azy\Documents\hack\Fighter FX 7.2\FighterFX.dll a variant of Win32/GameHack.Q application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Windows\Installer\9d8a77.msi a variant of Win32/Adware.Toolbar.Dealio application (deleted - quarantined) 00000000000000000000000000000000 C C:\Windows.old\Documents and Settings\user\Local Settings\Temp\Rar$EX00.500\BaDBoYv4.2.dll a variant of Win32/GameHack.Q application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Windows.old\Documents and Settings\user\My Documents\Downloads\BaDBoY_V4.2_FiXeD_BY_Rodr_.zip multiple threats (deleted - quarantined) 00000000000000000000000000000000 C C:\Windows.old\Documents and Settings\user\My Documents\Downloads\Evil Hack.rar multiple threats (deleted - quarantined) 00000000000000000000000000000000 C C:\Windows.old\Documents and Settings\user\My Documents\Downloads\Jedai Hack.zip multiple threats (deleted - quarantined) 00000000000000000000000000000000 C C:\Windows.old\Documents and Settings\user\Start Menu\eBay.lnk Win32/Adware.ADON application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6528 # api_version=3.0.2 # EOSSerial=c5b4d1b729e7c14b9e8c2e4371f9db79 # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2011-07-17 04:42:13 # local_time=2011-07-17 07:42:13 ) # country="Bulgaria" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=512 16777215 100 0 152244 152244 0 0 # compatibility_mode=770 16774141 100 100 188871 87619350 0 0 # compatibility_mode=5893 16776573 100 94 194701 62544269 0 0 # compatibility_mode=8192 67108863 100 0 13819 13819 0 0 # scanned=197364 # found=4 # cleaned=4 # scan_time=7855 C:\Windows.old\Windows\system32\smab.dll a variant of Win32/Kryptik.AQX trojan (deleted - quarantined) 00000000000000000000000000000000 C D:\BitLord\Torrents\Torrents\Need For Speed Most Wanted PC DVD\NFSMWBE PC DVD.ISO a variant of Win32/HackTool.Patcher.A application (deleted - quarantined) 00000000000000000000000000000000 C D:\BitLord\Torrents\Torrents\Nero 7 Premium Reloaded v.7.10.1.0\Nero-7.10.1.0_eng.exe Win32/Toolbar.AskSBar application (deleted - quarantined) 00000000000000000000000000000000 C D:\BitLord\ПРОГРАМИ\winamp za skype.exe Win32/Skogazz.A worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C П.П. Компютъра пак зе нещо да лаг-ва....

Редактирано 17 юли 201115 г. от pfoenix (преглед на промените)

Деинсталирайте ESET\ESET Online Scanner....!

Изтеглете ComboFix от тук или тук и го запазете на десктопа си.

• Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.

Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs

• Стартирайте Combo-Fix.com и следвайте инструкциите.

Бележка: ComboFix ще се стартира без инсталирана Recovery Console.

• Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repair режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.

• Следвайте инструкциите, за да позволите на ComboFix да изтегли и инсталира Microsoft Windows Recovery Console. В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

Изберете Yes, за да продължи сканирането за зловреден софтуер.

Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:\ComboFix.txt в следващия Ви коментар в тази тема.

Бележка:

• Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа.
• ComboFix ще нулира всички настройки на Microsoft Internet Explorer, включително да направи IE браузър по подразбиране.
• ComboFix ще изключи autorun функцията на ВСИЧКИ CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и Ви защити от бъдещи вируси/заплахи, които поразяват чрез autorun. Ако това е проблем за вас - моля, уведомете ме.
• ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той ще прекрати интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си.
• В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:\BUG.txt в следващия Ви коментар в тази тема.

Работата на ComboFix, може да отнеме до 20-30 минути, за да завърши, моля имайте търпение.

Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.

Заповядай: ComboFix 11-07-17.03 - ex7azy 07.2011 г. 20:24:45.1.2 - x86 Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.2047.812 [GMT 3:00] Running from: c:\users\ex7azy\Desktop\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((( Files Created from 2011-06-17 to 2011-07-17 ))))))))))))))))))))))))))))))) . . 2011-07-17 17:31 . 2011-07-17 17:31 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-07-17 17:22 . 2011-07-17 17:22 -------- d-----w- C:\32788R22FWJFW 2011-07-17 10:40 . 2011-07-17 10:40 -------- d-----w- c:\program files\ESET 2011-07-15 20:16 . 2011-07-15 20:16 388096 ----a-r- c:\users\ex7azy\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-07-15 19:51 . 2011-07-17 10:49 -------- d-----w- c:\program files\Application Updater 2011-07-15 19:51 . 2011-07-15 19:51 -------- d-----w- c:\program files\IObit Toolbar 2011-07-15 19:51 . 2011-07-15 19:51 -------- d-----w- c:\program files\Common Files\Spigot 2011-07-15 19:13 . 2011-07-15 19:13 -------- d-----w- c:\program files\Trend Micro 2011-07-15 11:42 . 2011-07-06 16:52 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-07-15 11:42 . 2011-07-15 17:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-07-15 11:42 . 2011-07-06 16:52 22712 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-07-15 11:38 . 2011-07-15 11:38 -------- d-----w- c:\users\ex7azy\AppData\Roaming\Malwarebytes 2011-07-15 11:38 . 2011-07-15 11:38 -------- d-----w- c:\programdata\Malwarebytes 2011-07-15 08:26 . 2011-06-07 15:55 7074640 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{7C970F8C-4CA3-48D2-A755-9C97EFA208C0}\mpengine.dll 2011-07-11 13:56 . 2011-07-11 13:56 -------- d-----w- c:\users\ex7azy\AppData\Local\pLan 2011-07-11 09:46 . 2011-07-11 10:26 -------- d-----w- c:\program files\TeamViewer 2011-07-01 17:15 . 1998-09-02 08:28 38160 ----a-w- c:\windows\system32\LMRTREND.dll 2011-07-01 17:14 . 1998-10-29 13:45 306688 ----a-w- c:\windows\IsUninst.exe 2011-06-28 21:01 . 2011-05-24 10:44 293376 ----a-w- c:\windows\system32\umpnpmgr.dll 2011-06-28 21:01 . 2011-05-04 04:34 1549312 ----a-w- c:\windows\system32\tquery.dll 2011-06-28 21:01 . 2011-05-04 04:32 337408 ----a-w- c:\windows\system32\mssph.dll 2011-06-28 21:01 . 2011-05-04 04:32 1401344 ----a-w- c:\windows\system32\mssrch.dll 2011-06-28 21:01 . 2011-05-04 04:28 427520 ----a-w- c:\windows\system32\SearchIndexer.exe 2011-06-28 21:01 . 2011-05-04 04:28 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe 2011-06-28 21:01 . 2011-05-04 04:32 666624 ----a-w- c:\windows\system32\mssvp.dll 2011-06-28 21:01 . 2011-05-04 04:32 197120 ----a-w- c:\windows\system32\mssphtb.dll 2011-06-28 21:01 . 2011-05-04 04:32 59392 ----a-w- c:\windows\system32\msscntrs.dll 2011-06-28 21:01 . 2011-05-04 04:28 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe 2011-06-28 13:57 . 2011-06-28 13:57 -------- d-----w- c:\programdata\RosettaStoneLtdBackup 2011-06-28 13:28 . 2011-06-28 14:05 -------- d-----w- c:\programdata\Rosetta Stone 2011-06-27 20:36 . 2011-06-27 20:36 -------- d-----w- c:\users\ex7azy\AppData\Roaming\COWON 2011-06-23 10:57 . 2011-06-23 10:57 -------- d-----w- c:\programdata\Trymedia 2011-06-19 14:34 . 2011-07-04 11:36 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2011-06-19 11:29 . 2011-05-08 19:30 4100400 ----a-w- c:\windows\system32\GameMon.des 2011-06-19 11:29 . 2005-01-02 03:43 4682 ----a-w- c:\windows\system32\npptNT2.sys 2011-06-19 11:29 . 2003-07-18 12:17 5174 ----a-w- c:\windows\system32\nppt9x.vxd 2011-06-19 11:29 . 2011-06-19 11:29 -------- d-----w- c:\program files\Common Files\INCA Shared 2011-06-19 10:45 . 2011-06-19 13:37 -------- d-----w- c:\users\ex7azy\AppData\Roaming\Xfire 2011-06-19 10:44 . 2011-06-19 10:45 -------- d-----w- c:\programdata\Xfire . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-07-04 11:43 . 2011-01-09 15:00 40112 ----a-w- c:\windows\avastSS.scr 2011-07-04 11:43 . 2010-11-19 00:09 199304 ----a-w- c:\windows\system32\aswBoot.exe 2011-07-04 11:36 . 2010-11-19 00:09 309848 ----a-w- c:\windows\system32\drivers\aswSP.sys 2011-07-04 11:35 . 2011-01-09 15:00 43608 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2011-07-04 11:32 . 2011-01-09 15:00 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2011-07-04 11:32 . 2010-11-19 00:09 54104 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2011-07-04 11:32 . 2010-11-19 00:09 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2011-06-04 13:46 . 2011-06-04 13:46 98304 ----a-w- c:\windows\system32\CmdLineExt.dll 2011-05-28 12:56 . 2011-05-28 12:56 65536 ----a-w- c:\windows\system32\frapsvid.dll 2011-05-28 02:53 . 2011-06-16 16:25 1638912 ----a-w- c:\windows\system32\mshtml.tlb 2011-05-24 16:14 . 2010-11-19 00:08 222080 ------w- c:\windows\system32\MpSigStub.exe 2011-05-03 04:30 . 2011-06-16 16:25 741376 ----a-w- c:\windows\system32\inetcomm.dll 2011-04-29 02:46 . 2011-06-16 16:25 311808 ----a-w- c:\windows\system32\drivers\srv.sys 2011-04-29 02:46 . 2011-06-16 16:25 310272 ----a-w- c:\windows\system32\drivers\srv2.sys 2011-04-29 02:46 . 2011-06-16 16:25 114688 ----a-w- c:\windows\system32\drivers\srvnet.sys 2011-04-27 02:17 . 2011-06-16 16:25 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys 2011-04-27 02:17 . 2011-06-16 16:25 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys 2011-04-27 02:17 . 2011-06-16 16:25 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2011-04-25 04:31 . 2011-06-16 16:25 1290624 ----a-w- c:\windows\system32\drivers\tcpip.sys 2011-04-25 02:18 . 2011-06-16 16:25 338944 ----a-w- c:\windows\system32\drivers\afd.sys 2011-04-22 19:14 . 2011-05-25 09:01 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys 2011-04-22 19:10 . 2011-06-16 16:25 981504 ----a-w- c:\windows\system32\wininet.dll 2011-04-22 14:58 . 2011-04-22 14:58 101376 ----a-w- c:\windows\system32\drivers\ACEDRV07.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2011-07-04 11:43 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656] "TBPanel"="c:\program files\VDOTool\TBPanel.exe" [2008-07-04 2157096] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-04-05 26102056] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2010-07-21 1778064] "AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712] . c:\users\ex7azy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-27 97680] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate;Услуга Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x] R3 ALSysIO;ALSysIO;c:\users\ex7azy\AppData\Local\Temp\ALSysIO.sys [x] R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-12-02 137600] R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2011-05-08 4100400] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x] R3 TsUsbFlt;TsUsbFlt; [x] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-11-19 721904] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-07-04 54104] S2 NitroReaderDriverReadSpool;NitroPDFReaderDriverCreatorReadSpool;c:\program files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe [2010-12-03 196912] S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2011-03-17 2025336] . . Contents of the 'Scheduled Tasks' folder . . ------- Supplementary Scan ------- . uStart Page = IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html TCP: Interfaces\{6C691689-D157-4935-9EF3-21856FD41DB7}: NameServer = 94.155.50.1 FF - ProfilePath - c:\users\ex7azy\AppData\Roaming\Mozilla\Firefox\Profiles\us3g8r1q.default\ FF - prefs.js: browser.search.selectedEngine - Yahoo FF - prefs.js: browser.startup.homepage - hxxp://search.babylon.com/?babsrc=HP_ss&mntrId=cd146b690000000000000019663e49cd&tlver=1.4.19.19&affID=17160 FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=cd146b690000000000000019663e49cd&tlver=1.4.19.19&instlRef=sst&affID=17160&q= FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Babylon: [email protected] - %profile%\extensions\[email protected] FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF - Ext: User Agent Switcher: {e968fc70-8f95-4ab9-9e79-304de2a71ee1} - %profile%\extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1} . - - - - ORPHANS REMOVED - - - - . WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) AddRemove-Euro Truck Simulator - c:\program files\Euro Truck Simulator\Uninstal_EuroTruckSimulator.exe AddRemove-German Truck Simulator - c:\program files\German Truck Simulator\uninst.exe AddRemove-Hot_MP3 Toolbar - c:\progra~1\Hot_MP3\UNWISE.EXE AddRemove-Reward - d:\bitlord\nfs saveta za koli novi\Uninst.isu . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc] "ImagePath"="c:\windows\system32\GameMon.des -service" . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2011-07-17 20:33:17 ComboFix-quarantined-files.txt 2011-07-17 17:33 . Pre-Run: 12 230 164 480 bytes free Post-Run: 12 159 180 800 bytes free . - - End Of File - - 54E48FD2C782AA5DC554587EDA32BB51

П.П. Само този лог файл ми излезна....

Редактирано 17 юли 201115 г. от pfoenix (преглед на промените)

Копирайте текста в карето на notepad и го запазвате с име CFScript.txt на десктопа си:

KILLALL::

File::
2011-07-17 17:22 . 2011-07-17 17:22	--------	d-----w-	C:\32788R22FWJFW
2011-07-17 10:40 . 2011-07-17 10:40	--------	d-----w-	c:\program files\ESET
2011-07-15 19:51 . 2011-07-15 19:51	--------	d-----w-	c:\program files\IObit Toolbar

След съхранението преместете CFScript.txt на иконата на ComboFix.exe

Генерирания рапорт прикачете в следващия си пост..!

Заповядай... ComboFix 11-07-17.03 - ex7azy 07.2011 г. 22:13:14.3.2 - x86 Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.2047.1046 [GMT 3:00] Running from: c:\users\ex7azy\Desktop\ComboFix.exe Command switches used :: c:\users\ex7azy\Desktop\CFScript.txt.txt AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2011-06-17 to 2011-07-17 ))))))))))))))))))))))))))))))) . . 2011-07-17 19:20 . 2011-07-17 19:20 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-07-15 20:16 . 2011-07-15 20:16 388096 ----a-r- c:\users\ex7azy\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-07-15 19:51 . 2011-07-17 10:49 -------- d-----w- c:\program files\Application Updater 2011-07-15 19:51 . 2011-07-15 19:51 -------- d-----w- c:\program files\IObit Toolbar 2011-07-15 19:51 . 2011-07-15 19:51 -------- d-----w- c:\program files\Common Files\Spigot 2011-07-15 19:13 . 2011-07-15 19:13 -------- d-----w- c:\program files\Trend Micro 2011-07-15 11:42 . 2011-07-06 16:52 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-07-15 11:42 . 2011-07-15 17:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-07-15 11:42 . 2011-07-06 16:52 22712 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-07-15 11:38 . 2011-07-15 11:38 -------- d-----w- c:\users\ex7azy\AppData\Roaming\Malwarebytes 2011-07-15 11:38 . 2011-07-15 11:38 -------- d-----w- c:\programdata\Malwarebytes 2011-07-15 08:26 . 2011-06-07 15:55 7074640 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{7C970F8C-4CA3-48D2-A755-9C97EFA208C0}\mpengine.dll 2011-07-11 13:56 . 2011-07-11 13:56 -------- d-----w- c:\users\ex7azy\AppData\Local\pLan 2011-07-11 09:46 . 2011-07-11 10:26 -------- d-----w- c:\program files\TeamViewer 2011-07-01 17:15 . 1998-09-02 08:28 38160 ----a-w- c:\windows\system32\LMRTREND.dll 2011-07-01 17:14 . 1998-10-29 13:45 306688 ----a-w- c:\windows\IsUninst.exe 2011-06-28 21:01 . 2011-05-24 10:44 293376 ----a-w- c:\windows\system32\umpnpmgr.dll 2011-06-28 21:01 . 2011-05-04 04:34 1549312 ----a-w- c:\windows\system32\tquery.dll 2011-06-28 21:01 . 2011-05-04 04:32 337408 ----a-w- c:\windows\system32\mssph.dll 2011-06-28 21:01 . 2011-05-04 04:32 1401344 ----a-w- c:\windows\system32\mssrch.dll 2011-06-28 21:01 . 2011-05-04 04:28 427520 ----a-w- c:\windows\system32\SearchIndexer.exe 2011-06-28 21:01 . 2011-05-04 04:28 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe 2011-06-28 21:01 . 2011-05-04 04:32 666624 ----a-w- c:\windows\system32\mssvp.dll 2011-06-28 21:01 . 2011-05-04 04:32 197120 ----a-w- c:\windows\system32\mssphtb.dll 2011-06-28 21:01 . 2011-05-04 04:32 59392 ----a-w- c:\windows\system32\msscntrs.dll 2011-06-28 21:01 . 2011-05-04 04:28 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe 2011-06-28 13:57 . 2011-06-28 13:57 -------- d-----w- c:\programdata\RosettaStoneLtdBackup 2011-06-28 13:28 . 2011-06-28 14:05 -------- d-----w- c:\programdata\Rosetta Stone 2011-06-27 20:36 . 2011-06-27 20:36 -------- d-----w- c:\users\ex7azy\AppData\Roaming\COWON 2011-06-23 10:57 . 2011-06-23 10:57 -------- d-----w- c:\programdata\Trymedia 2011-06-19 14:34 . 2011-07-04 11:36 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2011-06-19 11:29 . 2011-05-08 19:30 4100400 ----a-w- c:\windows\system32\GameMon.des 2011-06-19 11:29 . 2005-01-02 03:43 4682 ----a-w- c:\windows\system32\npptNT2.sys 2011-06-19 11:29 . 2003-07-18 12:17 5174 ----a-w- c:\windows\system32\nppt9x.vxd 2011-06-19 11:29 . 2011-06-19 11:29 -------- d-----w- c:\program files\Common Files\INCA Shared 2011-06-19 10:45 . 2011-06-19 13:37 -------- d-----w- c:\users\ex7azy\AppData\Roaming\Xfire 2011-06-19 10:44 . 2011-06-19 10:45 -------- d-----w- c:\programdata\Xfire . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-07-04 11:43 . 2011-01-09 15:00 40112 ----a-w- c:\windows\avastSS.scr 2011-07-04 11:43 . 2010-11-19 00:09 199304 ----a-w- c:\windows\system32\aswBoot.exe 2011-07-04 11:36 . 2010-11-19 00:09 309848 ----a-w- c:\windows\system32\drivers\aswSP.sys 2011-07-04 11:35 . 2011-01-09 15:00 43608 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2011-07-04 11:32 . 2011-01-09 15:00 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2011-07-04 11:32 . 2010-11-19 00:09 54104 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2011-07-04 11:32 . 2010-11-19 00:09 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2011-06-04 13:46 . 2011-06-04 13:46 98304 ----a-w- c:\windows\system32\CmdLineExt.dll 2011-05-28 12:56 . 2011-05-28 12:56 65536 ----a-w- c:\windows\system32\frapsvid.dll 2011-05-28 02:53 . 2011-06-16 16:25 1638912 ----a-w- c:\windows\system32\mshtml.tlb 2011-05-24 16:14 . 2010-11-19 00:08 222080 ------w- c:\windows\system32\MpSigStub.exe 2011-05-03 04:30 . 2011-06-16 16:25 741376 ----a-w- c:\windows\system32\inetcomm.dll 2011-04-29 02:46 . 2011-06-16 16:25 311808 ----a-w- c:\windows\system32\drivers\srv.sys 2011-04-29 02:46 . 2011-06-16 16:25 310272 ----a-w- c:\windows\system32\drivers\srv2.sys 2011-04-29 02:46 . 2011-06-16 16:25 114688 ----a-w- c:\windows\system32\drivers\srvnet.sys 2011-04-27 02:17 . 2011-06-16 16:25 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys 2011-04-27 02:17 . 2011-06-16 16:25 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys 2011-04-27 02:17 . 2011-06-16 16:25 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2011-04-25 04:31 . 2011-06-16 16:25 1290624 ----a-w- c:\windows\system32\drivers\tcpip.sys 2011-04-25 02:18 . 2011-06-16 16:25 338944 ----a-w- c:\windows\system32\drivers\afd.sys 2011-04-22 19:14 . 2011-05-25 09:01 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys 2011-04-22 19:10 . 2011-06-16 16:25 981504 ----a-w- c:\windows\system32\wininet.dll 2011-04-22 14:58 . 2011-04-22 14:58 101376 ----a-w- c:\windows\system32\drivers\ACEDRV07.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2011-07-04 11:43 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656] "TBPanel"="c:\program files\VDOTool\TBPanel.exe" [2008-07-04 2157096] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-04-05 26102056] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2010-07-21 1778064] "AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712] . c:\users\ex7azy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-27 97680] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate;Услуга Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x] R3 ALSysIO;ALSysIO;c:\users\ex7azy\AppData\Local\Temp\ALSysIO.sys [x] R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-12-02 137600] R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2011-05-08 4100400] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x] R3 TsUsbFlt;TsUsbFlt; [x] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-11-19 721904] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-07-04 54104] S2 NitroReaderDriverReadSpool;NitroPDFReaderDriverCreatorReadSpool;c:\program files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe [2010-12-03 196912] S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2011-03-17 2025336] . . . ------- Supplementary Scan ------- . uStart Page = IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html TCP: Interfaces\{6C691689-D157-4935-9EF3-21856FD41DB7}: NameServer = 94.155.50.1 FF - ProfilePath - c:\users\ex7azy\AppData\Roaming\Mozilla\Firefox\Profiles\us3g8r1q.default\ FF - prefs.js: browser.search.selectedEngine - Yahoo FF - prefs.js: browser.startup.homepage - hxxp://search.babylon.com/?babsrc=HP_ss&mntrId=cd146b690000000000000019663e49cd&tlver=1.4.19.19&affID=17160 FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=cd146b690000000000000019663e49cd&tlver=1.4.19.19&instlRef=sst&affID=17160&q= FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Babylon: [email protected] - %profile%\extensions\[email protected] FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF - Ext: User Agent Switcher: {e968fc70-8f95-4ab9-9e79-304de2a71ee1} - %profile%\extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1} . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc] "ImagePath"="c:\windows\system32\GameMon.des -service" . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\nvvsvc.exe c:\windows\system32\nvvsvc.exe c:\program files\Alwil Software\Avast5\AvastSvc.exe c:\windows\system32\taskhost.exe c:\windows\system32\taskhost.exe c:\windows\system32\conhost.exe c:\program files\Windows Media Player\wmpnetwk.exe c:\windows\system32\sppsvc.exe c:\\?\c:\windows\system32\wbem\WMIADAP.EXE . ************************************************************************** . Completion time: 2011-07-17 22:27:18 - machine was rebooted ComboFix-quarantined-files.txt 2011-07-17 19:27 . Pre-Run: 13 095 436 288 bytes free Post-Run: 13 004 746 752 bytes free . - - End Of File - - EFA586E1580272AB27DE0F8729778C4C

Хубаво...!Сега...аз бях до тук....не виждам активни зарази....съветвам те ако имаш още проблеми ...да си провериш системата в Общи хардуерни въпроси .Обясни на колегите че съм проверил и изчистил компютъра от вируси......!

Деинсталирай Комбофикс така:

1.Натиснете Start ==> Run ==> въведете командата Combofix /Uninstall ==> OK

2.Изтеглете OTCleanIt или от тук,стартирайте и натиснете Clean up

Благодаря ти за отделеното време...... Наистина ми помогна Мерси, мерси !!! :wors: :wors: Темата може да се заключи !!!