Проблем с e5188982.exe [РЕШЕН]

icotonev

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

17 септември 201115 г.

Ами за втори път си позволявате да изпълнявате повторен скрип въпреки че предния път ви предупредих.....!Нищо не се е получило защото не се пуска второ сканиране произволно .....това не са обикновенни програми и за да се борави качествено с тях се спазват някои правила...!

Сега пак започваме отначало.......!!!

Публикувано изображение Моля изтеглете unhide.exe от Grinler и го запазете на вашия десктоп:

Кликнете върху файла unhide.exe за да го стартирате
Програмата ще премахне hidden атрибутите от всички файлове на компютъра (ако имате скрити такива от вас, ще трябва да ги си ги скриете отново ръчно).

На преносимите дискове и флашки изпълнете този *. бат файл ..!

Публикувано изображение Стартирайте отново OTL и направете сканиране със същите настройки ...Този път обаче вместо Run Fix натиснете бутона ...Ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

17 септември 201115 г.

Автор

Извинявам се че съм допуснал грешки. Само да ви попитам че не разбрах след като стартирам бат файла, като стартирам OTL инструкциите ви от пост 22 ли да изпълня или от 24? Ще пиша отново довечера след 17:00, тогава ще се прибера от работа.

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

17 септември 201115 г.

Проблема все още стои, много се притеснявам за това дали и другите ми дялове не са заразени и те и по-тях да има вируси? И ако да ще може ли да се оправи всичко без да се форматират те?

Ще направим всичко възможно......стига да не се правят свободни съчинения...!И един такъв въпрос ...след като използвате толкова външни дискове и флашки какви мерки взехте за да предотвратите евентуален проблем ..например като този с който се занимаваме сега...?

Извинявам се че съм допуснал грешки. Само да ви попитам че не разбрах след като стартирам бат файла, като стартирам OTL инструкциите ви от пост 22 ли да изпълня или от 24? Ще пиша отново довечера след 17:00, тогава ще се прибера от работа.

Със същите настройки като в пост 22 ..без текстовата част....!Правите настройките и натскате бутона .

17 септември 201115 г.

Автор

Това е лога от сканирането на OTL:

OTL logfile created on: 9/17/2011 17:32:59 - Run 2

OTL by OldTimer - Version 3.2.28.0 Folder = C:\Documents and Settings\Spunki\Desktop

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.29 Gb Available Physical Memory | 64.69% Memory free

3.84 Gb Paging File | 3.37 Gb Available in Paging File | 87.75% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 19.53 Gb Total Space | 10.90 Gb Free Space | 55.81% Space Free | Partition Type: NTFS

Drive D: | 92.77 Gb Total Space | 26.12 Gb Free Space | 28.15% Space Free | Partition Type: NTFS

Drive E: | 129.51 Gb Total Space | 51.60 Gb Free Space | 39.85% Space Free | Partition Type: NTFS

Drive F: | 93.46 Gb Total Space | 76.85 Gb Free Space | 82.23% Space Free | Partition Type: NTFS

Drive H: | 298.09 Gb Total Space | 210.76 Gb Free Space | 70.70% Space Free | Partition Type: NTFS

Drive I: | 596.17 Gb Total Space | 538.70 Gb Free Space | 90.36% Space Free | Partition Type: NTFS

Drive J: | 1.86 Gb Total Space | 1.86 Gb Free Space | 99.99% Space Free | Partition Type: FAT

Drive K: | 15.01 Gb Total Space | 4.87 Gb Free Space | 32.45% Space Free | Partition Type: FAT32

Drive L: | 14.91 Gb Total Space | 0.91 Gb Free Space | 6.07% Space Free | Partition Type: FAT32

Computer Name: SPUNKI-479FD454 | User Name: Spunki | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/09/16 23:12:33 | 000,581,632 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Spunki\Desktop\OTL.exe

PRC - [2011/09/14 08:02:43 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe

PRC - [2010/11/02 22:06:06 | 000,365,336 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe

PRC - [2010/05/25 17:28:58 | 000,263,600 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe

PRC - [2008/04/14 15:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

PRC - [2005/05/17 19:48:00 | 000,077,824 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE

PRC - [2004/06/11 12:15:18 | 000,083,968 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvraidservice.exe

========== Modules (No Company Name) ==========

MOD - [2011/09/14 08:02:42 | 001,846,232 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll

MOD - [2011/07/27 02:18:04 | 006,271,648 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

MOD - [2010/10/05 20:26:52 | 002,111,160 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avzkrnl.dll

MOD - [2010/07/05 00:32:38 | 000,010,752 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerCOM.dll

MOD - [2008/09/16 20:18:06 | 000,132,608 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll

MOD - [2008/04/14 15:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll

MOD - [2006/12/19 19:16:04 | 000,073,728 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (HidServ)

SRV - [2011/08/31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2010/11/02 22:06:06 | 000,365,336 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe -- (AVP)

========== Driver Services (SafeList) ==========

DRV - [2011/09/15 05:45:11 | 000,475,736 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF)

DRV - [2011/09/04 16:18:05 | 000,053,312 | ---- | M] (microOLAP Technologies LTD) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\pssdklbf.sys -- (PSSDKLBF)

DRV - [2011/09/04 16:18:05 | 000,038,976 | ---- | M] (microOLAP Technologies LTD) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\pssdk42.sys -- (PSSDK42)

DRV - [2011/08/31 17:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)

DRV - [2011/07/06 18:14:42 | 000,101,616 | ---- | M] (Tonec Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\idmtdi.sys -- (IDMTDI)

DRV - [2010/12/27 15:36:38 | 000,022,504 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\cpuz135_x32.sys -- (cpuz135)

DRV - [2010/06/09 16:43:52 | 000,011,352 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kl2.sys -- (kl2)

DRV - [2010/06/09 16:43:50 | 000,132,184 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\kl1.sys -- (KL1)

DRV - [2010/05/07 11:06:26 | 000,032,856 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5)

DRV - [2009/11/02 19:27:24 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt)

DRV - [2008/04/14 03:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)

DRV - [2008/04/14 01:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)

DRV - [2007/02/02 23:03:25 | 001,975,296 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)

DRV - [2005/09/07 18:42:06 | 000,087,792 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w800mgmt.sys -- (w800mgmt)

DRV - [2005/09/07 18:42:06 | 000,085,664 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w800obex.sys -- (w800obex)

DRV - [2005/09/07 18:42:04 | 000,096,224 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w800mdm.sys -- (w800mdm)

DRV - [2005/09/07 18:42:04 | 000,009,264 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w800mdfl.sys -- (w800mdfl)

DRV - [2005/09/07 18:42:00 | 000,060,768 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w800bus.sys -- (w800bus) Sony Ericsson W800 driver (WDM)

DRV - [2005/07/07 17:26:04 | 000,055,216 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750bus.sys -- (k750bus) Sony Ericsson 750 driver (WDM)

DRV - [2005/07/07 17:26:00 | 000,006,576 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mdfl.sys -- (k750mdfl)

DRV - [2005/07/07 17:25:58 | 000,089,872 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mdm.sys -- (k750mdm)

DRV - [2005/07/07 17:25:52 | 000,081,728 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mgmt.sys -- (k750mgmt)

DRV - [2005/07/07 17:25:50 | 000,079,488 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750obex.sys -- (k750obex)

DRV - [2005/05/18 18:50:00 | 002,319,680 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)

DRV - [2005/03/09 15:53:00 | 000,036,352 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)

DRV - [2004/06/03 11:40:46 | 000,079,360 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvatabus.sys -- (nvatabus)

DRV - [2004/04/02 16:40:00 | 000,021,760 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nv_agp.sys -- (nv_agp)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-796845957-1993962763-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com/

IE - HKU\S-1-5-21-796845957-1993962763-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://bg.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:bg:official"

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\[email protected] [2011/09/15 06:24:27 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.21\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/09/14 08:02:45 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.21\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/09/14 00:03:17 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/09/14 08:02:45 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/09/14 00:03:17 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Documents and Settings\Spunki\Application Data\IDM\idmmzcc5 [2011/09/13 19:10:46 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\[email protected]: C:\Documents and Settings\Spunki\Application Data\IDM\idmmzcc5 [2011/09/13 19:10:46 | 000,000,000 | ---D | M]

[2011/09/13 23:12:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Spunki\Application Data\Mozilla\Extensions

[2011/09/15 17:06:35 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Spunki\Application Data\Mozilla\Firefox\Profiles\9n1rh0j1.default\extensions

[2011/09/15 17:06:35 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Spunki\Application Data\Mozilla\Firefox\Profiles\9n1rh0j1.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2011/09/14 12:52:55 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Spunki\Application Data\Mozilla\Firefox\Profiles\9n1rh0j1.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

[2011/09/15 06:24:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2011/09/15 05:46:50 | 000,000,000 | ---D | M] (Защита от банери) -- C:\Program Files\Mozilla Firefox\extensions\[email protected]_bak

[2011/09/15 05:46:47 | 000,000,000 | ---D | M] (Модул за сканиране на уеб адреси) -- C:\Program Files\Mozilla Firefox\extensions\[email protected]_bak

[2011/09/13 19:10:46 | 000,000,000 | ---D | M] (IDM CC) -- C:\DOCUMENTS AND SETTINGS\SPUNKI\APPLICATION DATA\IDM\IDMMZCC5

[2011/09/14 08:02:45 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll

[2011/09/14 08:02:39 | 000,001,083 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\911bg.xml

[2011/09/14 08:02:39 | 000,002,442 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\diribg.xml

[2011/09/14 08:02:39 | 000,001,515 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pe-bg.xml

[2011/09/14 08:02:39 | 000,001,857 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\portalbgdict.xml

[2011/09/14 08:02:39 | 000,001,220 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-bg.xml

Hosts file not found

O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)

O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO)

O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)

O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)

O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)

O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)

O4 - HKLM..\Run: [NVRaidService] C:\WINDOWS\system32\nvraidservice.exe (NVIDIA Corporation)

O4 - HKLM..\Run: [soundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)

O4 - HKU\S-1-5-21-796845957-1993962763-1417001333-1003..\Run: [startCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863

O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863

O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-796845957-1993962763-1417001333-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-21-796845957-1993962763-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323

O7 - HKU\S-1-5-21-796845957-1993962763-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863

O7 - HKU\S-1-5-21-796845957-1993962763-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll (Google Inc.)

O8 - Extra context menu item: Добави към Защитата от банери - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm ()

O8 - Extra context menu item: Свали всички линкове с IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm ()

O8 - Extra context menu item: Свали с IDM - C:\Program Files\Internet Download Manager\IEExt.htm ()

O9 - Extra Button: &Виртуална клавиатура - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)

O9 - Extra Button: Add to VideoGet - {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - C:\Program Files\Nuclear Coffee\VideoGet\Plugins\VideoGet_IE.dll (Nuclear Coffee Software)

O9 - Extra 'Tools' menuitem : Add to &VideoGet - {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - C:\Program Files\Nuclear Coffee\VideoGet\Plugins\VideoGet_IE.dll (Nuclear Coffee Software)

O9 - Extra Button: Сканиране на &уеб адреси - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 87.121.24.12

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DA0DE55A-9C86-49A5-A46B-A04B94893B28}: DhcpNameServer = 87.121.24.12

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)

O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)

O20 - Winlogon\Notify\klogon: DllName - (C:\WINDOWS\system32\klogon.dll) - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab ZAO)

O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp

O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2010/01/26 12:16:46 | 000,000,000 | R--D | M] - D:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2010/01/26 12:16:46 | 000,000,000 | R--D | M] - E:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2010/01/26 12:16:46 | 000,000,000 | R--D | M] - F:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2011/09/15 12:12:44 | 000,000,000 | R--D | M] - H:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2011/09/15 12:12:45 | 000,000,000 | R--D | M] - I:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2010/01/03 17:44:26 | 000,000,000 | ---D | M] - K:\autorun.inf -- [ FAT32 ]

O32 - AutoRun File - [2010/01/03 17:44:26 | 000,000,000 | ---D | M] - L:\autorun.inf -- [ FAT32 ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = ComFile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/09/17 12:01:41 | 000,000,000 | -HSD | C] -- C:\RECYCLER

[2011/09/17 11:54:51 | 000,000,000 | ---D | C] -- C:\_OTL

[2011/09/16 23:12:59 | 000,581,632 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Spunki\Desktop\OTL.exe

[2011/09/16 18:23:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp

[2011/09/16 18:16:05 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe

[2011/09/16 18:16:05 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe

[2011/09/16 18:16:05 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe

[2011/09/16 18:16:05 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe

[2011/09/16 18:15:56 | 000,000,000 | ---D | C] -- C:\ComboFix

[2011/09/16 18:15:51 | 000,000,000 | ---D | C] -- C:\Qoobox

[2011/09/16 18:11:30 | 004,210,959 | R--- | C] (Swearware) -- C:\Documents and Settings\Spunki\Desktop\ComboFix.exe

[2011/09/15 19:48:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump

[2011/09/15 19:42:22 | 000,000,000 | RHSD | C] -- C:\cmdcons

[2011/09/15 19:40:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT

[2011/09/15 18:36:53 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Spunki\Start Menu\Programs\Administrative Tools

[2011/09/15 05:46:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Kaspersky Internet Security 2011

[2011/09/15 05:45:27 | 000,000,000 | ---D | C] -- C:\Program Files\Kaspersky Lab

[2011/09/15 05:45:11 | 000,475,736 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys

[2011/09/15 05:43:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files

[2011/09/14 20:58:27 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Spunki\Recent

[2011/09/13 23:42:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt

[2011/09/13 23:12:59 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware

[2011/09/13 23:12:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware

[2011/09/13 23:12:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox

[2011/09/13 23:12:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Spunki\Application Data\Mozilla

[2011/09/13 23:12:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\K-Lite Codec Pack

[2011/09/13 23:12:04 | 000,000,000 | ---D | C] -- C:\Program Files\DVD Cutter Plus

[2011/09/13 23:12:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\DVD Cutter Plus

[2011/09/13 23:11:53 | 000,000,000 | ---D | C] -- C:\Program Files\Nikozen

[2011/09/13 23:11:35 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild

[2011/09/13 23:11:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer

[2011/09/13 23:11:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\fr-FR

[2011/09/13 23:10:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Spunki\Internet Explorer Video Dowload Helper

[2011/09/13 19:12:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Spunki\Local Settings\Application Data\Nikozen

[2011/09/13 19:12:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Spunki\Application Data\Download Helper

[2011/09/13 19:11:56 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies

[2011/09/13 19:11:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\HDD Low Level Format Tool

[2011/09/13 19:08:56 | 000,000,000 | ---D | C] -- C:\Config.Msi

[2011/09/11 10:33:34 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm

[2011/09/11 10:33:34 | 000,151,552 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm

[2011/09/10 01:26:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Spunki\My Documents\My Recordings

[2011/09/10 01:23:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Spunki\Local Settings\Application Data\FLVService

[2011/09/10 01:23:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Spunki\My Documents\Ask and Record Toolbar

[2011/09/10 01:23:39 | 000,000,000 | ---D | C] -- C:\Program Files\Replay Media Catcher

[2011/09/08 01:14:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Spunki\Application Data\Mozilla(2)

[2011/09/06 18:03:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Spunki\Application Data\Google

[2011/09/06 18:02:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Google

[2011/09/06 18:01:54 | 000,000,000 | ---D | C] -- C:\Program Files\Google

[2011/09/06 18:01:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Spunki\Local Settings\Application Data\Google

[2011/09/06 15:18:01 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Spunki\IECompatCache

[2011/09/04 20:46:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Spunki\Local Settings\Application Data\Identities

[2011/09/04 16:00:25 | 000,053,312 | ---- | C] (microOLAP Technologies LTD) -- C:\WINDOWS\System32\drivers\pssdklbf.sys

[2011/09/04 16:00:25 | 000,038,976 | ---- | C] (microOLAP Technologies LTD) -- C:\WINDOWS\System32\drivers\pssdk42.sys

[2011/09/03 23:59:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss

[2011/09/03 18:08:24 | 000,000,000 | ---D | C] -- C:\Program Files\Ant.com

[2011/09/01 12:19:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\CyberLink

[2011/09/01 12:18:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\CyberLink

[2011/08/29 23:45:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Spunki\Start Menu\Programs\The KMPlayer

[2011/08/29 23:45:13 | 000,000,000 | ---D | C] -- C:\Program Files\The KMPlayer

[2011/08/28 19:36:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang

[4 C:\Documents and Settings\Spunki\Application Data\*.tmp files -> C:\Documents and Settings\Spunki\Application Data\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/09/17 17:07:00 | 000,000,986 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2011/09/17 16:40:54 | 000,684,297 | ---- | M] () -- C:\Documents and Settings\Spunki\Desktop\unhide.exe

[2011/09/17 16:38:16 | 000,184,320 | ---- | M] () -- C:\Documents and Settings\Spunki\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011/09/17 13:09:42 | 000,000,982 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2011/09/17 13:09:31 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2011/09/16 23:12:33 | 000,581,632 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Spunki\Desktop\OTL.exe

[2011/09/16 18:11:05 | 004,210,959 | R--- | M] (Swearware) -- C:\Documents and Settings\Spunki\Desktop\ComboFix.exe

[2011/09/16 00:17:08 | 000,095,072 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2011/09/15 22:37:25 | 000,196,975 | ---- | M] () -- C:\Documents and Settings\Spunki\Desktop\OTCleanIt.zip

[2011/09/15 20:53:08 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk

[2011/09/15 19:52:51 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\Spunki\Desktop\TeamViewer.lnk

[2011/09/15 19:52:51 | 000,000,560 | ---- | M] () -- C:\Documents and Settings\Spunki\Desktop\Picasa v3.8.0 (117.16,0) BG.lnk

[2011/09/15 19:52:50 | 000,000,583 | ---- | M] () -- C:\Documents and Settings\Spunki\Desktop\RegSupreme.lnk

[2011/09/15 19:52:49 | 000,000,607 | ---- | M] () -- C:\Documents and Settings\Spunki\Desktop\SkypeLauncher.lnk

[2011/09/15 19:52:48 | 000,000,767 | ---- | M] () -- C:\Documents and Settings\Spunki\Desktop\StrongDC.lnk

[2011/09/15 19:51:53 | 000,033,978 | ---- | M] () -- C:\Documents and Settings\Spunki\Desktop\Windows Error Reporting Dump Reporting Tool.jpg

[2011/09/15 19:42:26 | 000,000,327 | RHS- | M] () -- C:\boot.ini

[2011/09/15 12:29:45 | 000,000,634 | ---- | M] () -- C:\Documents and Settings\Spunki\Desktop\Process Explorer.lnk

[2011/09/15 06:24:25 | 000,115,369 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat

[2011/09/15 06:24:24 | 000,097,961 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat

[2011/09/15 06:19:24 | 000,002,387 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk

[2011/09/15 05:45:11 | 000,475,736 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys

[2011/09/15 05:37:43 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\TEMP

[2011/09/14 12:44:38 | 000,673,123 | ---- | M] () -- C:\Documents and Settings\Spunki\My Documents\dwhelper-4.9.4a6.xpi

[2011/09/14 07:56:20 | 000,000,742 | ---- | M] () -- C:\Documents and Settings\Spunki\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk

[2011/09/14 07:56:20 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk

[2011/09/13 23:14:05 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2011/09/13 18:38:13 | 000,014,012 | ---- | M] () -- C:\WINDOWS\System32\mlfcache.dat

[2011/09/13 17:10:34 | 000,392,736 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2011/09/13 17:10:34 | 000,058,932 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2011/09/07 19:33:08 | 000,000,211 | ---- | M] () -- C:\Boot.bak

[2011/09/06 23:59:50 | 000,006,656 | ---- | M] () -- C:\WINDOWS\System32\lpcio.dll

[2011/09/04 20:42:17 | 000,000,782 | ---- | M] () -- C:\Documents and Settings\Spunki\Desktop\Internet Download Manager.lnk

[2011/09/04 16:18:05 | 000,053,312 | ---- | M] (microOLAP Technologies LTD) -- C:\WINDOWS\System32\drivers\pssdklbf.sys

[2011/09/04 16:18:05 | 000,038,976 | ---- | M] (microOLAP Technologies LTD) -- C:\WINDOWS\System32\drivers\pssdk42.sys

[2011/08/31 17:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[2011/08/29 23:51:46 | 000,000,710 | ---- | M] () -- C:\Documents and Settings\Spunki\Desktop\The KMPlayer.lnk

[2011/08/28 19:36:57 | 000,940,794 | ---- | M] () -- C:\WINDOWS\System32\LoopyMusic.wav

[2011/08/28 19:36:57 | 000,146,650 | ---- | M] () -- C:\WINDOWS\System32\BuzzingBee.wav

[4 C:\Documents and Settings\Spunki\Application Data\*.tmp files -> C:\Documents and Settings\Spunki\Application Data\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/09/16 18:16:05 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe

[2011/09/16 18:16:05 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe

[2011/09/16 18:16:05 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe

[2011/09/16 18:16:05 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe

[2011/09/16 18:16:05 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe

[2011/09/15 22:37:25 | 000,196,975 | ---- | C] () -- C:\Documents and Settings\Spunki\Desktop\OTCleanIt.zip

[2011/09/15 20:53:08 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk

[2011/09/15 19:51:53 | 000,033,978 | ---- | C] () -- C:\Documents and Settings\Spunki\Desktop\Windows Error Reporting Dump Reporting Tool.jpg

[2011/09/15 19:42:26 | 000,000,211 | ---- | C] () -- C:\Boot.bak

[2011/09/15 19:42:24 | 000,260,272 | RHS- | C] () -- C:\cmldr

[2011/09/15 19:27:01 | 000,684,297 | ---- | C] () -- C:\Documents and Settings\Spunki\Desktop\unhide.exe

[2011/09/15 12:29:45 | 000,000,634 | ---- | C] () -- C:\Documents and Settings\Spunki\Desktop\Process Explorer.lnk

[2011/09/15 05:46:36 | 000,115,369 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat

[2011/09/15 05:46:36 | 000,097,961 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat

[2011/09/14 12:44:38 | 000,673,123 | ---- | C] () -- C:\Documents and Settings\Spunki\My Documents\dwhelper-4.9.4a6.xpi

[2011/09/14 07:56:20 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\Spunki\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk

[2011/09/14 07:56:20 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk

[2011/09/12 22:48:19 | 000,000,767 | ---- | C] () -- C:\Documents and Settings\Spunki\Desktop\StrongDC.lnk

[2011/09/12 22:47:27 | 000,000,560 | ---- | C] () -- C:\Documents and Settings\Spunki\Desktop\Picasa v3.8.0 (117.16,0) BG.lnk

[2011/09/12 22:46:19 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\Spunki\Desktop\TeamViewer.lnk

[2011/09/12 22:24:36 | 000,000,583 | ---- | C] () -- C:\Documents and Settings\Spunki\Desktop\RegSupreme.lnk

[2011/09/12 22:22:22 | 000,000,607 | ---- | C] () -- C:\Documents and Settings\Spunki\Desktop\SkypeLauncher.lnk

[2011/09/11 10:33:34 | 000,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml

[2011/09/06 18:02:09 | 000,000,986 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2011/09/06 18:02:08 | 000,000,982 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2011/09/04 20:42:17 | 000,000,782 | ---- | C] () -- C:\Documents and Settings\Spunki\Desktop\Internet Download Manager.lnk

[2011/08/29 23:51:46 | 000,000,710 | ---- | C] () -- C:\Documents and Settings\Spunki\Desktop\The KMPlayer.lnk

[2011/08/28 19:36:57 | 000,940,794 | ---- | C] () -- C:\WINDOWS\System32\LoopyMusic.wav

[2011/08/28 19:36:57 | 000,146,650 | ---- | C] () -- C:\WINDOWS\System32\BuzzingBee.wav

[2011/08/08 14:31:45 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini

[2011/08/08 14:31:44 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2011/08/08 14:31:44 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2011/08/08 14:31:44 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll

[2011/07/28 18:19:18 | 000,014,012 | ---- | C] () -- C:\WINDOWS\System32\mlfcache.dat

[2011/07/28 00:50:58 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\TEMP

[2011/07/27 01:41:04 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2011/07/27 01:38:07 | 000,095,072 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2011/07/27 00:42:59 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll

[2011/07/27 00:12:40 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat

[2011/07/26 23:26:01 | 000,184,320 | ---- | C] () -- C:\Documents and Settings\Spunki\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011/07/26 23:12:31 | 000,000,164 | R--- | C] () -- C:\WINDOWS\avrack.ini

[2011/07/26 23:12:27 | 000,156,672 | R--- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll

[2011/07/26 23:12:27 | 000,040,960 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe

[2011/07/26 23:12:20 | 000,001,360 | R--- | C] () -- C:\WINDOWS\System32\drivers\alcxinit.dat

[2011/07/26 23:10:06 | 000,244,224 | R--- | C] () -- C:\WINDOWS\System32\NvRaidMan.exe

[2011/07/26 23:06:34 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe

[2011/07/26 22:56:08 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2011/07/26 22:49:41 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

[2009/09/09 18:01:40 | 000,027,675 | ---- | C] () -- C:\WINDOWS\System32\drivers\klopp.dat

[2008/04/14 15:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin

[2008/04/14 15:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat

[2008/04/14 15:00:00 | 000,392,736 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat

[2008/04/14 15:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat

[2008/04/14 15:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat

[2008/04/14 15:00:00 | 000,058,932 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat

[2008/04/14 15:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin

[2008/04/14 15:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat

[2008/04/14 15:00:00 | 000,006,656 | ---- | C] () -- C:\WINDOWS\System32\lpcio.dll

[2008/04/14 15:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat

[2008/04/14 15:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

[2008/04/14 15:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin

[2008/04/14 15:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

[2007/02/02 22:40:11 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat

[2007/01/30 19:21:34 | 000,128,813 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat

========== LOP Check ==========

[2011/08/23 19:45:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Application Data\ImgBurn

[2011/09/13 23:12:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ScreenVCR

[2011/08/13 16:55:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Spunki\Application Data\AltrixSoft

[2011/09/17 16:52:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Spunki\Application Data\DMCache

[2011/09/13 19:13:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Spunki\Application Data\Download Helper

[2011/09/13 19:12:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Spunki\Application Data\IDM

[2011/07/27 07:25:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Spunki\Application Data\streamripper

[2011/09/14 20:58:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Spunki\Application Data\uTorrent

========== Purity Check ==========

< End of report >

Направих настройките както ми казахте. След това дадох QUICK SCAN и програмата започна да сканира. След няколко секунди по-време на сканирането курсора се превърна в пясъчен часовник и екрана на на програмата стана чисто бял. Така постоя около минута-две. След това екрана на програмата се възстанови но настройките на File Age бяха променени на 30 дни, на Standard Registry беше избрано Use Safe List (аз не съм пипал нищо) и така да продължи да сканира. Искам да ви кажа че, когато изпълних файла unhide.exe ми изписа processing не за всички преносими устройства и флашки, въпреки че бяха включени всички.

Ами честно казано, никакви мерки не съм вземал до сега защото незнам как по-точно и по-какъв начин да им осигуря защита и да ги предпазя.

Като търсих в интернет информация за този вирус попаднах на този сайт:

http://www.dendrblog.ru/raznoe/yarlyiki-vmesto-papok-na-fleshke/

Виждам че в него и в клипа по-долу е обяснено как могат да се защитят флашки с помощта на програмата Panda USB and AutoRun Vaccine, но незнам как да го направя, имам компютър от скоро и много неща не са ми ясни.

Вие как бихте ми препоъчали да ги защитя?

До сега винаги съм разчитал на антивирусната тя да ги предпази, по-принцип винаги ползвам Kaspersky Internet Security.

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

17 септември 201115 г.

Публикувано изображение Стартирайте отново OTL, копирайте (Copy) и поставете (Paste) скриптовия текст от текстовото поле по-долу под колонката Custom Scans/Fixes, като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта.

:OTL
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/01/26 12:16:46 | 000,000,000 | R--D | M] - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010/01/26 12:16:46 | 000,000,000 | R--D | M] - E:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010/01/26 12:16:46 | 000,000,000 | R--D | M] - F:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2011/09/15 12:12:44 | 000,000,000 | R--D | M] - H:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2011/09/15 12:12:45 | 000,000,000 | R--D | M] - I:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010/01/03 17:44:26 | 000,000,000 | ---D | M] - K:\autorun.inf -- [ FAT32 ]
O32 - AutoRun File - [2010/01/03 17:44:26 | 000,000,000 | ---D | M] - L:\autorun.inf -- [ FAT32 ]
O32 - AutoRun File - [2010/01/03 17:44:26 | 000,000,000 | ---D | M] - L:\autorun.inf -- [ FAT32 ]
 
autorun.inf /alldrives
autorun.exe /alldrives
recycler /alldrives
ipconfig /flushdns /c
 
:Commands
[purity]
[emptytemp]
[resethosts]
[clearallrestorepoints]
[emptyflash]
[Reboot]

Публикувано изображение След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix

Windows ще се рестартира и ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

17 септември 201115 г.

Автор

Наистина незнам какво става, и защо така се получава, изпълних инструкциите ви от пост 30 съвсем точно. Както работеше OTL изведнъж ми излезна отново съобщението: Cannot create file C:\Windows\system32\Driver\etc\Hosts и освен ок нямаше какво друго да натисна. Дадох ок но копмютъра ми не се рестартира, програмата остана отворена и най-долу в нея отново пишеше това: Resseting hosts file. DO NOT INTERRUPT... Почаках малко и като видях че не се рестартира, го изключих и го включих отново, но този път когато компютъра се включи, програмата не ми даде никакъв лог, и колкото и да търсих не открих такъв.

18 септември 201115 г.

Автор

Проблема още стои. Какво да правя?

18 септември 201115 г.

Христо дали проблема не е заради липсата на тази критична кръпка, защото? Ако успее да я инсталира и след това мине по стъпките които му препоръчвате?

Към автора на темата: Изчакайте мнението на човек от екипа на HJT, не бързайте да предприемате на своя глава действия!

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

18 септември 201115 г.

Изтеглете TDSSKiller и го разархивирайте на десктопa.
Стартирайте TDSSKiller.exe, след това натиснете бутона Start Scan.
Ако бъде открит зловреден (malicious) файл, проверете дали е избрана опцията Cure (по подразбиране). Ако е избрана Cure - натиснете Continue
Ако бъде открит подозрителен (suspicious) файл, проверете дали е избрана опцията Skip (по подразбиране). Ако е избрана Skip - натиснете Continue.
Изберете skip и за sptd услугата:
Възможно е програмата да изиска рестарт. Ако е така - потвърдете с Reboot Now.

-Ако няма рестартиране, отидете на Report. Ще се появи лог файл. Копирайте и поставете съдържанието му в следващия си коментар.

-Ако има рестартиране, отидете на в основаната директория на дял C:\. Там трябва да има файл с формат: TDSSKiller.[Version]_[Date]_[Time]_log.txt. Отворете го, копирайте и поставете съдържанието му в следващия си коментар.

18 септември 201115 г.

Автор

Пуснах TDSSKiller и той сканира системата ми за няколко секунди (след сканирането не поиска рестарт): Това е лога от неговото сканиране: 2011/09/18 12:18:37.0015 3668 TDSS rootkit removing tool 2.5.22.0 Sep 13 2011 15:55:17 2011/09/18 12:18:37.0218 3668 ================================================================================ 2011/09/18 12:18:37.0218 3668 SystemInfo: 2011/09/18 12:18:37.0218 3668 2011/09/18 12:18:37.0218 3668 OS Version: 5.1.2600 ServicePack: 3.0 2011/09/18 12:18:37.0218 3668 Product type: Workstation 2011/09/18 12:18:37.0218 3668 ComputerName: SPUNKI-479FD454 2011/09/18 12:18:37.0218 3668 UserName: Spunki 2011/09/18 12:18:37.0218 3668 Windows directory: C:\WINDOWS 2011/09/18 12:18:37.0218 3668 System windows directory: C:\WINDOWS 2011/09/18 12:18:37.0218 3668 Processor architecture: Intel x86 2011/09/18 12:18:37.0218 3668 Number of processors: 1 2011/09/18 12:18:37.0218 3668 Page size: 0x1000 2011/09/18 12:18:37.0218 3668 Boot type: Normal boot 2011/09/18 12:18:37.0218 3668 ================================================================================ 2011/09/18 12:18:38.0375 3668 Initialize success 2011/09/18 12:18:49.0968 3904 ================================================================================ 2011/09/18 12:18:49.0968 3904 Scan started 2011/09/18 12:18:49.0968 3904 Mode: Manual; 2011/09/18 12:18:49.0968 3904 ================================================================================ 2011/09/18 12:18:50.0968 3904 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 2011/09/18 12:18:51.0046 3904 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 2011/09/18 12:18:51.0156 3904 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 2011/09/18 12:18:51.0250 3904 AFD (322d0e36693d6e24a2398bee62a268cd) C:\WINDOWS\System32\drivers\afd.sys 2011/09/18 12:18:51.0515 3904 ALCXWDM (9a6aa923f00d368c8ad3bd7485d5cdca) C:\WINDOWS\system32\drivers\ALCXWDM.SYS 2011/09/18 12:18:51.0765 3904 AmdK8 (59301936898ae62245a6f09c0aba9475) C:\WINDOWS\system32\DRIVERS\AmdK8.sys 2011/09/18 12:18:52.0031 3904 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 2011/09/18 12:18:52.0140 3904 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 2011/09/18 12:18:52.0375 3904 ati2mtag (a1789368b4a31d2111af7aeda0c8d3fc) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys 2011/09/18 12:18:52.0468 3904 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 2011/09/18 12:18:52.0546 3904 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 2011/09/18 12:18:52.0625 3904 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 2011/09/18 12:18:52.0859 3904 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 2011/09/18 12:18:52.0937 3904 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 2011/09/18 12:18:53.0046 3904 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 2011/09/18 12:18:53.0109 3904 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 2011/09/18 12:18:53.0171 3904 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 2011/09/18 12:18:53.0609 3904 cpuz135 (44a3b9cc0a8e89c11544932b295ea113) C:\WINDOWS\system32\drivers\cpuz135_x32.sys 2011/09/18 12:18:53.0984 3904 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 2011/09/18 12:18:54.0125 3904 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 2011/09/18 12:18:54.0250 3904 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 2011/09/18 12:18:54.0328 3904 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 2011/09/18 12:18:54.0437 3904 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 2011/09/18 12:18:54.0562 3904 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 2011/09/18 12:18:54.0734 3904 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 2011/09/18 12:18:54.0859 3904 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 2011/09/18 12:18:54.0921 3904 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 2011/09/18 12:18:54.0968 3904 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 2011/09/18 12:18:55.0078 3904 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys 2011/09/18 12:18:55.0171 3904 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 2011/09/18 12:18:55.0250 3904 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 2011/09/18 12:18:55.0359 3904 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys 2011/09/18 12:18:55.0437 3904 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 2011/09/18 12:18:55.0687 3904 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:\WINDOWS\system32\Drivers\HTTP.sys 2011/09/18 12:18:56.0125 3904 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 2011/09/18 12:18:56.0250 3904 IDMTDI (330a6a0baf4fd945bde14c7b1d88d9b9) C:\WINDOWS\system32\DRIVERS\idmtdi.sys 2011/09/18 12:18:56.0375 3904 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 2011/09/18 12:18:56.0531 3904 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys 2011/09/18 12:18:56.0625 3904 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 2011/09/18 12:18:56.0687 3904 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 2011/09/18 12:18:56.0750 3904 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 2011/09/18 12:18:56.0828 3904 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 2011/09/18 12:18:56.0890 3904 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 2011/09/18 12:18:57.0078 3904 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 2011/09/18 12:18:57.0187 3904 k750bus (fe8300320281d658a7854d5cfc02a63f) C:\WINDOWS\system32\DRIVERS\k750bus.sys 2011/09/18 12:18:57.0312 3904 k750mdfl (f44521f63c0c00364fa3d59db980de6a) C:\WINDOWS\system32\DRIVERS\k750mdfl.sys 2011/09/18 12:18:57.0406 3904 k750mdm (e93323c3ed5e8923a177740a973c27b2) C:\WINDOWS\system32\DRIVERS\k750mdm.sys 2011/09/18 12:18:57.0531 3904 k750mgmt (9d5f5a70ca0b7c428efcd73db50e6ac7) C:\WINDOWS\system32\DRIVERS\k750mgmt.sys 2011/09/18 12:18:57.0593 3904 k750obex (81ca2d57b2c14f76f4ba80846784bb3d) C:\WINDOWS\system32\DRIVERS\k750obex.sys 2011/09/18 12:18:57.0687 3904 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 2011/09/18 12:18:57.0812 3904 KL1 (94d67d49bd9503bb1d838405d80f2058) C:\WINDOWS\system32\DRIVERS\kl1.sys 2011/09/18 12:18:57.0890 3904 kl2 (713576569667ac9e0f8556076004a96b) C:\WINDOWS\system32\DRIVERS\kl2.sys 2011/09/18 12:18:58.0140 3904 KLIF (44ec6b3dbe167c7fa818f9918d2cbf22) C:\WINDOWS\system32\DRIVERS\klif.sys 2011/09/18 12:18:58.0328 3904 klim5 (8d6e11bfa9927978d25b1b8029554f07) C:\WINDOWS\system32\DRIVERS\klim5.sys 2011/09/18 12:18:58.0468 3904 klmouflt (3959530f69e19da56f1f24f2c89f1e2c) C:\WINDOWS\system32\DRIVERS\klmouflt.sys 2011/09/18 12:18:58.0578 3904 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 2011/09/18 12:18:58.0703 3904 KSecDD (1705745d900dabf2d89f90ebaddc7517) C:\WINDOWS\system32\drivers\KSecDD.sys 2011/09/18 12:18:58.0953 3904 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys 2011/09/18 12:18:59.0093 3904 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 2011/09/18 12:18:59.0187 3904 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 2011/09/18 12:18:59.0250 3904 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 2011/09/18 12:18:59.0406 3904 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 2011/09/18 12:18:59.0531 3904 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 2011/09/18 12:18:59.0656 3904 MRxSmb (68755f0ff16070178b54674fe5b847b0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 2011/09/18 12:18:59.0843 3904 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 2011/09/18 12:18:59.0921 3904 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 2011/09/18 12:18:59.0984 3904 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2011/09/18 12:19:00.0125 3904 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 2011/09/18 12:19:00.0203 3904 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 2011/09/18 12:19:00.0265 3904 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys 2011/09/18 12:19:00.0343 3904 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys 2011/09/18 12:19:00.0406 3904 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 2011/09/18 12:19:00.0484 3904 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 2011/09/18 12:19:00.0546 3904 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 2011/09/18 12:19:00.0625 3904 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 2011/09/18 12:19:00.0703 3904 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 2011/09/18 12:19:00.0750 3904 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 2011/09/18 12:19:00.0796 3904 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys 2011/09/18 12:19:00.0890 3904 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 2011/09/18 12:19:00.0937 3904 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 2011/09/18 12:19:01.0078 3904 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 2011/09/18 12:19:01.0171 3904 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 2011/09/18 12:19:01.0296 3904 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 2011/09/18 12:19:01.0375 3904 nvatabus (46deed4c6c5fa765f9a2c723be60348d) C:\WINDOWS\system32\DRIVERS\nvatabus.sys 2011/09/18 12:19:01.0437 3904 nvraid (a5c77d944410fadee380fb20b432760d) C:\WINDOWS\system32\DRIVERS\nvraid.sys 2011/09/18 12:19:01.0484 3904 nv_agp (3194e2f6c9000c39dcf9d0580754f714) C:\WINDOWS\system32\DRIVERS\nv_agp.sys 2011/09/18 12:19:01.0562 3904 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 2011/09/18 12:19:01.0609 3904 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 2011/09/18 12:19:01.0687 3904 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 2011/09/18 12:19:01.0765 3904 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 2011/09/18 12:19:01.0843 3904 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 2011/09/18 12:19:01.0906 3904 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 2011/09/18 12:19:02.0046 3904 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 2011/09/18 12:19:02.0125 3904 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 2011/09/18 12:19:02.0531 3904 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 2011/09/18 12:19:02.0625 3904 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys 2011/09/18 12:19:02.0703 3904 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 2011/09/18 12:19:02.0765 3904 PSSDK42 (c8eb36910d3bd582891977e80925e21e) C:\WINDOWS\system32\Drivers\pssdk42.sys 2011/09/18 12:19:02.0828 3904 PSSDKLBF (0bec7b42f4093400509821c63f13f1d5) C:\WINDOWS\system32\Drivers\pssdklbf.sys 2011/09/18 12:19:02.0890 3904 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 2011/09/18 12:19:03.0156 3904 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 2011/09/18 12:19:03.0250 3904 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 2011/09/18 12:19:03.0328 3904 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 2011/09/18 12:19:03.0390 3904 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 2011/09/18 12:19:03.0468 3904 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 2011/09/18 12:19:03.0546 3904 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 2011/09/18 12:19:03.0640 3904 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 2011/09/18 12:19:03.0750 3904 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys 2011/09/18 12:19:03.0843 3904 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 2011/09/18 12:19:03.0968 3904 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS 2011/09/18 12:19:04.0078 3904 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 2011/09/18 12:19:04.0203 3904 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 2011/09/18 12:19:04.0265 3904 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 2011/09/18 12:19:04.0328 3904 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 2011/09/18 12:19:04.0500 3904 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys 2011/09/18 12:19:04.0640 3904 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 2011/09/18 12:19:04.0734 3904 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 2011/09/18 12:19:04.0843 3904 Srv (5252605079810904e31c332e241cd59b) C:\WINDOWS\system32\DRIVERS\srv.sys 2011/09/18 12:19:04.0984 3904 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 2011/09/18 12:19:05.0046 3904 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 2011/09/18 12:19:05.0125 3904 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 2011/09/18 12:19:05.0375 3904 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 2011/09/18 12:19:05.0500 3904 Tcpip (93ea8d04ec73a85db02eb8805988f733) C:\WINDOWS\system32\DRIVERS\tcpip.sys 2011/09/18 12:19:05.0609 3904 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 2011/09/18 12:19:05.0656 3904 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 2011/09/18 12:19:05.0718 3904 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 2011/09/18 12:19:05.0953 3904 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 2011/09/18 12:19:06.0078 3904 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 2011/09/18 12:19:06.0187 3904 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 2011/09/18 12:19:06.0218 3904 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 2011/09/18 12:19:06.0265 3904 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 2011/09/18 12:19:06.0343 3904 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys 2011/09/18 12:19:06.0421 3904 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 2011/09/18 12:19:06.0515 3904 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 2011/09/18 12:19:06.0578 3904 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys 2011/09/18 12:19:06.0656 3904 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 2011/09/18 12:19:06.0765 3904 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 2011/09/18 12:19:06.0906 3904 w800bus (b8c182df79ac8938311ac8e193d52762) C:\WINDOWS\system32\DRIVERS\w800bus.sys 2011/09/18 12:19:06.0968 3904 w800mdfl (3af69f28c17e1e03bb894f00d905add8) C:\WINDOWS\system32\DRIVERS\w800mdfl.sys 2011/09/18 12:19:07.0031 3904 w800mdm (0d12afd1e1c95226b4268c1777625d05) C:\WINDOWS\system32\DRIVERS\w800mdm.sys 2011/09/18 12:19:07.0109 3904 w800mgmt (36ad2eb4a6376d08555864eb4cfd2508) C:\WINDOWS\system32\DRIVERS\w800mgmt.sys 2011/09/18 12:19:07.0187 3904 w800obex (7905915006febbf0f137af36a3fd6429) C:\WINDOWS\system32\DRIVERS\w800obex.sys 2011/09/18 12:19:07.0234 3904 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 2011/09/18 12:19:07.0359 3904 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 2011/09/18 12:19:07.0593 3904 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 2011/09/18 12:19:07.0703 3904 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0 2011/09/18 12:19:07.0859 3904 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1 2011/09/18 12:19:07.0921 3904 MBR (0x1B8) (ddae9d649db12f6aff24483f2c298989) \Device\Harddisk2\DR14 2011/09/18 12:19:07.0953 3904 MBR (0x1B8) (66d0b28c8b44e531d0c19f436252abaa) \Device\Harddisk3\DR8 2011/09/18 12:19:08.0015 3904 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk4\DR9 2011/09/18 12:19:08.0062 3904 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk5\DR10 2011/09/18 12:19:08.0109 3904 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk6\DR16 2011/09/18 12:19:08.0156 3904 Boot (0x1200) (e2aa7f52f84973d2bfffa21f63597161) \Device\Harddisk0\DR0\Partition0 2011/09/18 12:19:08.0203 3904 Boot (0x1200) (471db52f2ef084f85bcbfe2fa0a0ed39) \Device\Harddisk0\DR0\Partition1 2011/09/18 12:19:08.0234 3904 Boot (0x1200) (9f089fdd66120d965e01f82eb3fcb0fd) \Device\Harddisk1\DR1\Partition0 2011/09/18 12:19:08.0265 3904 Boot (0x1200) (f47d7471a1d026163448fb35e8dc34fc) \Device\Harddisk1\DR1\Partition1 2011/09/18 12:19:08.0312 3904 Boot (0x1200) (92583313d773c6f3cc84176c4bf5a480) \Device\Harddisk2\DR14\Partition0 2011/09/18 12:19:08.0359 3904 Boot (0x1200) (5305c7f30a88aab2aa583cfc75a78265) \Device\Harddisk3\DR8\Partition0 2011/09/18 12:19:08.0406 3904 Boot (0x1200) (61ad48418a128464e101ffaadd17c2e6) \Device\Harddisk4\DR9\Partition0 2011/09/18 12:19:08.0437 3904 Boot (0x1200) (8b8297be9072d0fa2ef0cef7678cdc54) \Device\Harddisk5\DR10\Partition0 2011/09/18 12:19:08.0484 3904 Boot (0x1200) (a7e01a513d29255a81a45e91bc4125d2) \Device\Harddisk6\DR16\Partition0 2011/09/18 12:19:08.0515 3904 ================================================================================ 2011/09/18 12:19:08.0515 3904 Scan finished 2011/09/18 12:19:08.0515 3904 ================================================================================ 2011/09/18 12:19:08.0562 0212 Detected object count: 0

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

18 септември 201115 г.

Деинсталирайте Комбофикс така:

1.Натиснете Start ==> Run ==> въведете командата Combofix /Uninstall ==> OK

Публикувано изображение

2.Изтеглете Публикувано изображение OTCleanIt или от тук,стартирайте и натиснете

Стартирайте OTL още веднъж и натиснете бутона CleanUp.

Публикувано изображение

Ще последва рестарт на Windows..!

След като сте готов пишете...!

18 септември 201115 г.

Автор

През времето през което се деинсталираше ComboFix Kaspersky разпозна самия ComboFix като вирус, след деинсталирането му пуснах OT CleanIt и след като програмата изтри файловете, компютъра се рестартира автоматично, и като се включи отново беше изчезнала иконата на OTL и на TDSSKiller иконите на десктопа също ги нямаше. Сложих OTL на десктопа отново, пуснах го и дадох CleanUp, и като изтри файловете програмата попита дали да бъде рестартиран компютъра, за да приключи процеса по-изтриването на файловете успешно, дадох му рестарт.

Редактирано 18 септември 201115 г. от pranjev (преглед на промените)

19 септември 201115 г.

Автор

Icotonev, благодаря ти много. Нямах възможност вчера да пиша, защото нямах интернет. След рестарта на компютъра, видях че оригиналните папки и файлове в преносимите ми дискове и флашките са възстановени, но преките пътища на всички папки останаха. Какво да правя, има ли някаква опасност ако изтрия всички папки с преките пътища? Какво трябва да направя за да мога да си използвам преносимите дискове и флашките нормално отново? Как да ги защитя по-добре? Вие казахте, че скритите папки създавани от този бацил са невидими за антивирусните, бихте ли ми казали, искам освен антивирусната ми в допълнение към нея искам да си инсталирам още една или дори няколко програми, които да ме предпазват от такива заплахи а и не само от такива като този вирус за който ми помогнахте. Моля ви, кажете ми какво да си потърся и да си инсталирам за да се предпазя от тях занапред, търся мнението ви като на човек който е добре запознат със вички заплахи и вируси и знае как да се предпазим от тях. Всички файлове autorun.inf, RECYCLER и $RECYCLE.BIN, са все още навсякъде по-всичките ми дялове което ме притеснява много. Ако ги изтрия има ли някаква опасност, или може би и за тях трябва специална процедура за отстраняването им? Може ли и тях да ги премахнем?

Редактирано 19 септември 201115 г. от pranjev (преглед на промените)

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

20 септември 201114 г.

Всички файлове autorun.inf, RECYCLER и $RECYCLE.BIN, са все още навсякъде по-всичките ми дялове което ме притеснява много. Ако ги изтрия има ли някаква опасност, или може би и за тях трябва специална процедура за отстраняването им? Може ли и тях да ги премахнем?

Здравейте..!Това са файлове от Flash Desinfector.Ще ви помоля за следния лог:

Изтеглете DDS: от BleepingComputer.
След изтегляне на файла го запишете (бутон Save => Save as) DDS на вашия десктоп, снимка:
След като изтеглите DDS на десктопа, иконката на програмата би трябвало да изглежда така:
Прекратете временно работата на всички скрипт блокиращи приложения, ако има такива или разрешете изпълнението на dds.scr. След това стартирайте DDS с двоен клик на иконката, като потвърдите с Run.
След приключване на работата на DDS копирайте с Copy текста от двата файлови лога, които ще се появят в Notepad: DDS.txt и Attach.txt и ги запазете (бутон Save => Save as) на десктопа.Копирайте и поставете съдържанието на DDS.txt и Attach.txt във вашата тема. Моля, не ги прикачвайте!

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

20 септември 201114 г.

п.п. Flash Disinfector е прекрасна програма - в по горните постове видях че сте се опитали да я използвате...но..тя не се използва на заразена система...първо се почиства системата и после Flash Disinfector....а и тя си има начин на действие....препоръчвам да я деинсталирате и да завършим с почистването ..След това ще ви напиша инструкция за използването на програмката...!

20 септември 201114 г.

Автор

Това са 2 та лога на DDS: DDS: DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 Run by Spunki at 17:39:56 on 2011-09-20 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.2047.1366 [GMT 3:00] . AV: Kaspersky Internet Security *Enabled/Updated* {2C4D4BC6-0793-4956-A9F9-E252435469C0} FW: Kaspersky Internet Security *Enabled* . ============== Running Processes =============== . C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\Ati2evxx.exe svchost.exe svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\system32\nvraidservice.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\system32\wbem\unsecapp.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Winamp\winamp.exe C:\PROGRAM FILES\WINAMP\wstreamripper.exe C:\Program Files\mIRC\mirc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://google.com/ BHO: IDM integration (IDMIEHlprObj Class): {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\program files\internet download manager\IDMIECC.dll BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky internet security 2011\ievkbd.dll BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.7.6406.1642\swg.dll BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky internet security 2011\klwtbbho.dll TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll uRun: [startCCC] c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe uRun: [skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe" uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [NVRaidService] c:\windows\system32\nvraidservice.exe mRun: [soundMan] SOUNDMAN.EXE mRun: [AVP] "c:\program files\kaspersky lab\kaspersky internet security 2011\avp.exe" mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html IE: Добави към Защитата от банери - c:\program files\kaspersky lab\kaspersky internet security 2011\ie_banner_deny.htm IE: Свали всички линкове с IDM - c:\program files\internet download manager\IEGetAll.htm IE: Свали с IDM - c:\program files\internet download manager\IEExt.htm IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky internet security 2011\klwtbbho.dll IE: {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - {17A84966-F1E9-4645-AA9E-5E771EE1C859} - c:\progra~1\nuclea~1\videoget\plugins\VIDEOG~1.DLL IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky internet security 2011\klwtbbho.dll TCP: DhcpNameServer = 87.121.24.12 TCP: Interfaces\{DA0DE55A-9C86-49A5-A46B-A04B94893B28} : DhcpNameServer = 87.121.24.12 Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: AtiExtEvent - Ati2evxx.dll Notify: klogon - c:\windows\system32\klogon.dll AppInit_DLLs: c:\progra~1\kasper~1\kasper~1\kloehk.dll . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\spunki\application data\mozilla\firefox\profiles\9n1rh0j1.default\ FF - prefs.js: browser.startup.homepage - hxxp://bg.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:bg:official FF - plugin: c:\program files\google\update\1.3.21.69\npGoogleUpdate3.dll . ============= SERVICES / DRIVERS =============== . R0 KL1;kl1;c:\windows\system32\drivers\kl1.sys [2010-6-9 132184] R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [2011-8-8 101616] R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2010-6-9 11352] R1 KLIF;Kaspersky Lab Driver;c:\windows\system32\drivers\klif.sys [2011-9-15 475736] R1 PSSDK42;PSSDK42;c:\windows\system32\drivers\pssdk42.sys [2011-9-4 38976] R1 PSSDKLBF;PSSDKLBF;c:\windows\system32\drivers\pssdklbf.sys [2011-9-4 53312] R2 AVP;Kaspersky Anti-Virus Service;c:\program files\kaspersky lab\kaspersky internet security 2011\avp.exe [2010-11-2 365336] R2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [2011-8-15 22504] R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-9-15 366152] R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2010-5-7 32856] R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 19472] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-8-18 22216] S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-9-6 136176] S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-9-6 136176] S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?] . =============== File Associations =============== . regfile\shell\edit\command=%SystemRoot%\system32\NOTEPAD.EXE %1 . =============== Created Last 30 ================ . 2011-09-18 17:49:34 -------- d-----w- c:\windows\XSxS 2011-09-17 08:54:51 -------- d-----w- C:\_OTL 2011-09-16 15:28:45 2668 ----a-w- c:\documents and settings\spunki\application data\44.tmp 2011-09-16 15:28:43 2668 ----a-w- c:\documents and settings\spunki\application data\43.tmp 2011-09-16 15:28:39 2671 ----a-w- c:\documents and settings\spunki\application data\42.tmp 2011-09-16 15:28:36 2668 ----a-w- c:\documents and settings\spunki\application data\41.tmp 2011-09-15 16:42:22 -------- d-sha-r- C:\cmdcons 2011-09-15 02:46:50 109240 ----a-w- c:\program files\mozilla firefox\extensions\[email protected]_bak\components\abhelperxpcom.dll 2011-09-15 02:46:47 150200 ----a-w- c:\program files\mozilla firefox\extensions\[email protected]_bak\components\kavlinkfilter.dll 2011-09-15 02:46:36 97961 ----a-w- c:\windows\system32\drivers\klick.dat 2011-09-15 02:46:36 115369 ----a-w- c:\windows\system32\drivers\klin.dat 2011-09-15 02:45:27 -------- d-----w- c:\program files\Kaspersky Lab 2011-09-15 02:43:50 -------- d-----w- c:\documents and settings\all users\application data\Kaspersky Lab Setup Files 2011-09-14 05:02:45 2106216 ----a-w- c:\program files\mozilla firefox\D3DCompiler_43.dll 2011-09-14 05:02:44 1998168 ----a-w- c:\program files\mozilla firefox\d3dx9_43.dll 2011-09-13 20:42:41 -------- d-----w- c:\windows\system32\appmgmt 2011-09-13 20:13:07 -------- d-----w- c:\windows\system32\wbem\repository\FS 2011-09-13 20:13:07 -------- d-----w- c:\windows\system32\wbem\Repository 2011-09-13 20:12:59 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-09-13 20:12:04 -------- d-----w- c:\program files\DVD Cutter Plus 2011-09-13 20:11:53 -------- d-----w- c:\program files\Nikozen 2011-09-13 20:11:19 -------- d-----w- c:\windows\system32\XPSViewer 2011-09-13 20:11:19 -------- d-----w- c:\windows\system32\fr-FR 2011-09-13 20:10:57 -------- d-----w- c:\documents and settings\spunki\Internet Explorer Video Dowload Helper 2011-09-13 16:12:36 -------- d-----w- c:\documents and settings\spunki\local settings\application data\Nikozen 2011-09-13 16:12:28 -------- d-----w- c:\documents and settings\spunki\application data\Download Helper 2011-09-13 09:53:43 282112 ----a-w- c:\windows\system32\mscoree.dll 2011-09-11 07:33:34 839680 ----a-w- c:\windows\system32\lameACM.acm 2011-09-11 07:33:34 151552 ----a-w- c:\windows\system32\ac3acm.acm 2011-09-09 22:23:58 -------- d-----w- c:\documents and settings\spunki\local settings\application data\FLVService 2011-09-09 22:23:39 -------- d-----w- c:\program files\Replay Media Catcher 2011-09-07 22:14:03 -------- d-----w- c:\documents and settings\spunki\application data\Mozilla(2) 2011-09-06 15:01:54 -------- d-----w- c:\documents and settings\spunki\local settings\application data\Google 2011-09-06 12:18:01 -------- d-sh--w- c:\documents and settings\spunki\IECompatCache 2011-09-04 17:46:30 -------- d-----w- c:\documents and settings\spunki\local settings\application data\Identities 2011-09-04 13:00:25 53312 ----a-w- c:\windows\system32\drivers\pssdklbf.sys 2011-09-04 13:00:25 38976 ----a-w- c:\windows\system32\drivers\pssdk42.sys 2011-09-04 12:45:48 28160 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll 2011-09-04 12:45:22 14048 ------w- c:\windows\system32\spmsg2.dll 2011-09-03 20:59:05 -------- d-----w- c:\windows\pss 2011-09-03 15:08:24 -------- d-----w- c:\program files\Ant.com 2011-09-01 09:19:09 -------- d-----w- c:\documents and settings\all users\CyberLink 2011-08-29 20:45:13 -------- d-----w- c:\program files\The KMPlayer 2011-08-28 16:36:57 60416 ----a-w- c:\windows\ALCFDRTM.VER 2011-08-28 16:36:57 60416 ----a-w- c:\windows\ALCFDRTM.EXE 2011-08-28 16:36:54 -------- d-----w- c:\windows\system32\Lang . ==================== Find3M ==================== . 2011-09-06 20:59:50 6656 ----a-w- c:\windows\system32\lpcio.dll 2011-08-31 14:00:50 22216 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-07-26 23:18:04 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-07-06 15:14:42 101616 ----a-w- c:\windows\system32\drivers\idmtdi.sys . ============= FINISH: 17:42:59.12 =============== DDS attach: . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 26.7.2011 г. 22:56:02 System Uptime: 20.9.2011 г. 17:29:32 (0 hours ago) . Motherboard: | | K8Upgrade-NF3 Processor: AMD Sempron™ Processor 2600+ | CPUSocket | 1607/200mhz . ==== Disk Partitions ========================= . . ==== Installed Programs ====================== . Архиватор WinRAR µTorrent Пакет за езиков интерфейс на Windows Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Athlon 64 Processor Driver ATI - Software Uninstall Utility ATI Catalyst Control Center ATI Display Driver Boost Your Browser BSPlayer Bulgarian (Phonetic) - Huku Catalyst Control Center Core Implementation Catalyst Control Center Graphics Full Existing Catalyst Control Center Graphics Full New Catalyst Control Center Graphics Light Catalyst Control Center Graphics Previews Common ccc-core-static ccc-utility CCC Help English ConvertHelper 2.2 CPUID HWMonitor Pro 1.12 EASEUS Data Recovery Wizard Professional 5.5.1 FastStone Capture 6.5 GetASFStream Google Toolbar for Internet Explorer Google Update Helper Internet Download Manager K-Lite Codec Pack 6.4.0 (Full) Kaspersky Internet Security 2011 Malwarebytes' Anti-Malware, версия 1.51.2.1300 Mozilla Firefox 6.0.2 (x86 bg) Mp3 Knife 3.1 Nuclear Coffee - VideoGet NVIDIA Drivers Realtek AC'97 Audio Skins Skype™ 3.8 Streamripper (Remove only) The KMPlayer 2.9.4.1434 Total Screen Recorder Gold 1.5 Unlocker 1.9.0 Video Encoder 1.6 VirtualDub 1.9.6.0 WebFldrs XP Winamp (remove only) Windows Internet Explorer 8 Windows Media Format Runtime XML Paper Specification Shared Components Language Pack 1.0 XML Paper Specification Shared Components Pack 1.0 . ==== Event Viewer Messages From Past Week ======== . 17.9.2011 г. 20:56:50, error: Service Control Manager [7034] - The MBAMService service terminated unexpectedly. It has done this 1 time(s). 17.9.2011 г. 20:56:48, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s). 17.9.2011 г. 16:52:53, error: Service Control Manager [7034] - The MBAMService service terminated unexpectedly. It has done this 1 time(s). 17.9.2011 г. 12:11:56, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:56, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:56, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:56, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:56, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:56, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:56, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:56, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:55, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:11:54, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 17.9.2011 г. 12:01:30, error: Service Control Manager [7034] - The MBAMService service terminated unexpectedly. It has done this 1 time(s). 17.9.2011 г. 12:01:29, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s). 17.9.2011 г. 11:54:54, error: Service Control Manager [7034] - The MBAMService service terminated unexpectedly. It has done this 1 time(s). 17.9.2011 г. 11:54:52, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s). 16.9.2011 г. 23:06:26, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: atapi PCIIde 16.9.2011 г. 18:39:22, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: atapi PCIIde 16.9.2011 г. 18:39:12, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume. 16.9.2011 г. 18:14:01, error: Service Control Manager [7034] - The MBAMService service terminated unexpectedly. It has done this 1 time(s). 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:09, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:34:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:37, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:36, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:36, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:36, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:36, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:36, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:36, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:36, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 12:09:36, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:40, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:39, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 10:29:38, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:30, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:30, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:30, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:30, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:30, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:30, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:30, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:30, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:29, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:51:28, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:08, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:07, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:06, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:06, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:06, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:06, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:06, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:06, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:06, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 07:49:06, error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\D. 16.9.2011 г. 00:17:43, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume. 16.9.2011 г. 00:17:43, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: atapi PCIIde 16.9.2011 г. 00:13:54, error: Service Control Manager [7000] - The MBAMSwissArmy service failed to start due to the following error: The system cannot find the file specified. 15.9.2011 г. 20:21:19, error: PlugPlayManager [11] - The device Root\LEGACY_UNLOCKERDRIVER5\0000 disappeared from the system without first being prepared for removal. 15.9.2011 г. 19:49:18, error: System Error [1003] - Error code 000000ca, parameter1 00000004, parameter2 88878030, parameter3 00000000, parameter4 00000000. 15.9.2011 г. 17:17:17, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: atapi PCIIde 15.9.2011 г. 11:54:46, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: atapi PCIIde 15.9.2011 г. 07:02:20, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: atapi PCIIde 15.9.2011 г. 06:01:59, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: atapi PCIIde 15.9.2011 г. 06:01:51, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume. 14.9.2011 г. 20:20:00, error: Schedule [7901] - The At5.job command failed to start due to the following error: %%2147942402 14.9.2011 г. 20:20:00, error: Schedule [7901] - The At4.job command failed to start due to the following error: %%2147942402 13.9.2011 г. 22:48:11, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Windows CardSpace service to connect. 13.9.2011 г. 22:48:11, error: Service Control Manager [7000] - The Windows CardSpace service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 13.9.2011 г. 20:20:00, error: Schedule [7901] - The At5.job command failed to start due to the following error: %%2147942402 13.9.2011 г. 20:20:00, error: Schedule [7901] - The At4.job command failed to start due to the following error: %%2147942402 13.9.2011 г. 12:39:23, error: Service Control Manager [7034] - The Windows Installer service terminated unexpectedly. It has done this 1 time(s). . ==== End Of File =========================== Потърсих Flash Disinfector в Add To Remove Programs но я няма, никъде не я видях да е инсталирана. Искам да ви попитам, сега като свържа преносим диск или флашка към компютъра, автоматичното изпълнение е изключено и не работи, има ли някакъв проблем да го включим отново? И още нещо да ви попитам: виждам че в момента System Restore е изключено, проблем ли ще е ако го пуснем отново? Всъщност направило ми е впечатление, че Kaspesky от край време винаги засича вируси в папката в която са файловете и контролните точки за въстановяване на системата, мисля че System Volume Information ако не се лъжа. Бихте ли ми обяснили защо Kaspersky винаги засича вируси там и как може това да се предотврати? Аз държа тази опция да ми бъде включена постоянно, защото по-някой път ми се налага да си възстановявам системата към по-ранна дата, а като е изключена тази опция това е невъзможно.

Редактирано 20 септември 201114 г. от pranjev (преглед на промените)

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

20 септември 201114 г.

автоматичното изпълнение е изключено и не работи, има ли някакъв проблем да го включим отново?

Защо..? Една от стъпките и препоръките за предотвратяване на повторно заразяване с autorun-вируси е спиране на Autoplay

Потърсих Flash Disinfector в Add To Remove Programs но я няма, никъде не я видях да е инсталирана.

Просто я изтрийте от декстопа си..!

в момента System Restore е изключено

Естествено че ще го включим ..но в по късен момент....!

Направете една проверка с Kaspersky Virus Removal Tool 2011

След като стартирате инструмента, отидете до Settings (Иконата, която прилича на звездичка) сложете отметка пред My Computer.

От опциите за почистване изберете Disinfect => но не избирайте delete if disinfection fails.

Върнете се до Automatic Scan и натиснете Start Scanning.

Ако по време на сканирането ви попита за дадено действие изберете skip.

След като приключи проверката изберете Report (Иконата която прилича на листче) => Detected Threats изберете SAVE и запазете документа на десктопа.

Kопирайте съдържанието му в следващия си пост.

Затворете инструмента - това ще до деинсталира автоматично.

20 септември 201114 г.

Автор

Като чукна върху линка за изтегляне на Kaspersky Virus Removal Tool 2011 и ми изписва това:

Срокът за доунлоад на файла е изтекъл.

Да си го потърся ли аз или да изчакам да ми дадете друг линк?

Редактирано 20 септември 201114 г. от pranjev (преглед на промените)

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

20 септември 201114 г.

Ето линк: http://devbuilds.kas...09_20_19_09.exe

20 септември 201114 г.

Автор

Искам да ви кажа че, пуснах Kaspersky Virus Removal Tool 2011 да сканира и след около 10 минути тока за малко спря и съответно компютъра се изключи. Да го пускам ли да сканира отново?

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

20 септември 201114 г.

Да ..поне с този инструмент няма проблеми да се стартира по този начин..!

21 септември 201114 г.

Автор

Лога на Kaspersky Virus Removal Tool 2011 е прекалено голям 63 МБ и не мога тук да го кача.

Редактирано 21 септември 201114 г. от pranjev (преглед на промените)

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

21 септември 201114 г.

Благодаря..!Логът е чист..Не виждам проблеми...!Ще ви помоля да направите проверка на системата си и да ми пишете дали след последните процедури наблюдавате някъкви проблеми...!

21 септември 201114 г.

Автор

Как по-точно да направя проверка на системата ми, да пусна Kaspersky на пълно сканиране ли?

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

21 септември 201114 г.

Не ,нямах впредвид да пускате програми....просто да пробвате вие .....как чуствате системата,наблюдавате ли някой от първоначалните проблеми,нещо което ви притеснява или нещо което сме пропуснали ....!

Добре дошли!

Проблем с e5188982.exe [РЕШЕН]

Featured Replies

Архивирана тема

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)