Съмнение за Вирус [решен]

8 октомври 201114 г.

Здравейте,драги съффорумници няколко дни си бях спрял антивирусната и от 2 дни започна да ми излиза син екран при опит за изключване/излизане на Windows.

Операционната ми система е Windows 7 Ultimate x86

ето снимка на синия екран:

http://store.picbg.n...e5497bb5133.JPG

Редактирано 8 октомври 201114 г. от nologo (преглед на промените)

8 октомври 201114 г.

Привет, в този раздел има една тема. В т. 5 от тази тема става дума за DDS. Очакваме логовете, успех!

8 октомври 201114 г.

Автор

Attach.txt

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-08-26.01)

.

Microsoft Windows 7 Ultimate

Boot Device: \Device\HarddiskVolume2

Install Date: 16.7.2011 г. 23:08:38

System Uptime: 8.10.2011 г. 15:22:45 (1 hours ago)

.

Motherboard: Biostar | | I945C-M7B

Processor: Intel® Pentium® Dual CPU E2160 @ 1.80GHz | Socket 478 | 1800/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 68 GiB total, 41,505 GiB free.

D: is FIXED (NTFS) - 0 GiB total, 0,083 GiB free.

E: is FIXED (NTFS) - 165 GiB total, 122,382 GiB free.

F: is CDROM ()

G: is CDROM (CDFS)

H: is Removable

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP218: 6.10.2011 г. 11:03:25 - Installed DirectX

RP219: 6.10.2011 г. 12:12:02 - TuneUp Utilities 2011 е премахнат

RP220: 6.10.2011 г. 12:13:00 - Removed TuneUp Utilities Language Pack (en-US)

RP222: 8.10.2011 г. 12:28:53 - Installed D-Link DWA-123

.

==== Installed Programs ======================

.

µTorrent

Adobe AIR

Adobe Audition CS5.5

Adobe Community Help

Adobe Dreamweaver CS5.5

Adobe Flash Player 10 ActiveX

Adobe Flash Player 10 Plugin

Adobe Photoshop CS5.1

Adobe Reader X (10.1.1)

Adobe Widget Browser

Advanced SystemCare 4

AIDA64 Extreme Edition v1.70

AIMP3

Akamai NetSession Interface

Analyzed

Artisteer 3

Atheros Client Installation Program

Aureon 7.1 USB

avast! Internet Security

Camtasia Studio 7

Canyon USB PC Camera

CCleaner

CDBurnerXP

CorelDRAW Graphics Suite 12

D-Link DWA-123

DAEMON Tools Lite

Definition update for Microsoft Office 2010 (KB982726) 32-Bit Edition

Driver Genius Professional Edition

EasyBCD 2.1

EasyBits GO

FileZilla Client 3.5.1

Firebird 2.5.0.26074 (Win32)

foobar2000

FormatFactory 2.70

Futuremark SystemInfo

Game Booster

GameRanger

Google Земя

Google Chrome

Google Talk Plugin

Google Update Helper

Hard Drive Inspector Professional 3.92 build # 417

IObit Malware Fighter

Java Auto Updater

Java 7

K-Lite Mega Codec Pack 7.8.0

LS-USBMX1/2/3 Steering...

Malwarebytes' Anti-Malware, версия 1.51.2.1300

Memory Improve Master v6.1.2.337

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Application Error Reporting

Microsoft Games for Windows - LIVE Redistributable

Microsoft Games for Windows Marketplace

Microsoft IntelliPoint 8.2

Microsoft Office 2010 Service Pack 1 (SP1)

Microsoft Office Access MUI (English) 2010

Microsoft Office Access Setup Metadata MUI (English) 2010

Microsoft Office Excel MUI (English) 2010

Microsoft Office Groove MUI (English) 2010

Microsoft Office InfoPath MUI (English) 2010

Microsoft Office OneNote MUI (English) 2010

Microsoft Office Outlook MUI (English) 2010

Microsoft Office PowerPoint MUI (English) 2010

Microsoft Office Professional Plus 2010

Microsoft Office Proof (English) 2010

Microsoft Office Proof (French) 2010

Microsoft Office Proof (Spanish) 2010

Microsoft Office Proofing (English) 2010

Microsoft Office Publisher MUI (English) 2010

Microsoft Office Shared MUI (English) 2010

Microsoft Office Shared Setup Metadata MUI (English) 2010

Microsoft Office Word MUI (English) 2010

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319

Microsoft WSE 3.0 Runtime

Microsoft_VC80_ATL_x86

Microsoft_VC80_CRT_x86

Microsoft_VC80_MFC_x86

Microsoft_VC80_MFCLOC_x86

Microsoft_VC90_ATL_x86

Microsoft_VC90_CRT_x86

Microsoft_VC90_MFC_x86

Microsoft_VC90_MFCLOC_x86

Mixxx 1.9.0

MSI to redistribute MS VS2005 CRT libraries

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Need for Speed Underground 2

Noise Reduction Plug-in 2.0i

Notepad++

NVIDIA 3D Vision Controller Driver

NVIDIA 3D Vision Controller Driver 280.19

NVIDIA 3D Vision Driver 280.26

NVIDIA Control Panel 280.26

NVIDIA Graphics Driver 280.26

NVIDIA HD Audio Driver 1.2.23.3

NVIDIA Install Application

NVIDIA PhysX

NVIDIA PhysX System Software 9.10.0514

NVIDIA Stereoscopic 3D Driver

NVIDIA Update 1.4.28

NVIDIA Update Components

OpenAL

Oracle VM VirtualBox 4.1.2

Origin

PCFix

PDF Settings CS5

Readon TV Movie Radio Player 7.4.0.0

SAM Broadcaster v4

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Extended (KB2416472)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft Excel 2010 (KB2553070)

Security Update for Microsoft Office 2010 (KB2553091)

Security Update for Microsoft Office 2010 (KB2553096)

Security Update for Microsoft Office 2010 (KB2584066)

Security Update for Microsoft SharePoint Workspace 2010 (KB2566445)

SeePassword

SHOUTcast DNAS (remove only)

Skype Click to Call

SkypeLauncher

Skype™ 5.6

Smart Defrag 2

Sound Forge Pro 10.0

SPC 600NC PC Camera

Splash PRO EX

Sunrise Seven 1.2.61

TeamViewer 6

The KMPlayer (remove only)

tools-freebsd

tools-linux

tools-netware

tools-solaris

tools-windows

tools-winPre2k

Unlocker 1.9.1

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

Update for Microsoft Office 2010 (KB2494150)

Update for Microsoft Office 2010 (KB2553065)

Update for Microsoft Office 2010 (KB2553092)

Update for Microsoft Office 2010 (KB2566458)

Update for Microsoft Outlook Social Connector (KB2583935)

ViewSonic Monitor Drivers

VirtualDJ PRO Full

VLC media player 1.1.11

VmciSockets

VMware Workstation

Windows 7 Manager

Windows 7 USB/DVD Download Tool

Windows Live ID Sign-in Assistant

Windows Media Player Firefox Plugin

Windows Mobile Device Center

WinRAR 4.01 (32-битова версия)

Your Uninstaller! 7

.

==== Event Viewer Messages From Past Week ========

.

8.10.2011 г. 15:23:53, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

8.10.2011 г. 15:23:40, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

8.10.2011 г. 15:23:10, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - Компютърът е рестартиран от проверка за грешки. Проверката е: 0x000000f4 (0x00000003, 0x85ad26a0, 0x85ad280c, 0x83227d60). Разтоварването е записано в: C:\Windows\MEMORY.DMP. ИД на доклада: 100811-21200-01.

8.10.2011 г. 15:22:54, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

8.10.2011 г. 15:22:47, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

8.10.2011 г. 15:22:47, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

8.10.2011 г. 15:22:47, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

8.10.2011 г. 15:22:47, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

8.10.2011 г. 15:22:46, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

8.10.2011 г. 15:18:01, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

8.10.2011 г. 15:17:53, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

8.10.2011 г. 15:17:29, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - Компютърът е рестартиран от проверка за грешки. Проверката е: 0x000000f4 (0x00000003, 0x8625e488, 0x8625e5f4, 0x83230d60). Разтоварването е записано в: C:\Windows\MEMORY.DMP. ИД на доклада: 100811-21372-01.

8.10.2011 г. 15:17:13, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

8.10.2011 г. 15:17:05, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

8.10.2011 г. 15:17:05, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

8.10.2011 г. 15:17:05, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

8.10.2011 г. 15:17:05, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

8.10.2011 г. 15:17:04, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

8.10.2011 г. 14:45:51, Error: Schannel [36888] - The following fatal alert was generated: 10. The internal error state is 1203.

8.10.2011 г. 12:41:29, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

8.10.2011 г. 12:41:09, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

8.10.2011 г. 12:40:18, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - Компютърът е рестартиран от проверка за грешки. Проверката е: 0x000000f4 (0x00000003, 0x89e81498, 0x89e81604, 0x83267d60). Разтоварването е записано в: C:\Windows\MEMORY.DMP. ИД на доклада: 100811-36176-01.

8.10.2011 г. 12:40:07, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

8.10.2011 г. 12:39:39, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

8.10.2011 г. 12:39:39, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

8.10.2011 г. 12:39:39, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

8.10.2011 г. 12:39:39, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

8.10.2011 г. 12:39:38, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

8.10.2011 г. 05:20:29, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

8.10.2011 г. 05:19:57, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

8.10.2011 г. 05:18:56, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

8.10.2011 г. 05:18:49, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

8.10.2011 г. 05:18:49, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

8.10.2011 г. 05:18:49, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

8.10.2011 г. 05:18:49, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

8.10.2011 г. 05:18:48, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

7.10.2011 г. 21:28:04, Error: Service Control Manager [7031] - Услуга Услуга за мрежово споделяне на Windows Media Player беше прекъсната неочаквано. Това се е случвало с нея 1 път(и). След 30000 милисекунди ще бъде предприето следното коригиращо действие: Рестартиране на услугата.

7.10.2011 г. 20:29:28, Error: Schannel [36888] - The following fatal alert was generated: 10. The internal error state is 1203.

7.10.2011 г. 19:39:20, Error: Schannel [36888] - The following fatal alert was generated: 10. The internal error state is 1203.

7.10.2011 г. 18:47:17, Error: Schannel [36888] - The following fatal alert was generated: 10. The internal error state is 1203.

7.10.2011 г. 17:50:28, Error: Schannel [36888] - The following fatal alert was generated: 10. The internal error state is 1203.

7.10.2011 г. 12:25:00, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

7.10.2011 г. 12:24:43, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

7.10.2011 г. 12:23:22, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - Компютърът е рестартиран от проверка за грешки. Проверката е: 0x000000fe (0x00000004, 0x86879700, 0x88abd288, 0x8657ba80). Разтоварването е записано в: C:\Windows\MEMORY.DMP. ИД на доклада: 100711-24616-01.

7.10.2011 г. 12:23:05, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

7.10.2011 г. 12:22:58, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

7.10.2011 г. 12:22:58, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

7.10.2011 г. 12:22:58, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

7.10.2011 г. 12:22:58, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

7.10.2011 г. 12:22:57, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

6.10.2011 г. 10:11:30, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

6.10.2011 г. 10:00:16, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

6.10.2011 г. 10:00:12, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

6.10.2011 г. 09:59:32, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

6.10.2011 г. 09:59:27, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

6.10.2011 г. 09:59:27, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

6.10.2011 г. 09:59:27, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

6.10.2011 г. 09:59:27, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

6.10.2011 г. 09:59:26, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

5.10.2011 г. 21:31:26, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

5.10.2011 г. 21:31:11, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

5.10.2011 г. 21:30:13, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

5.10.2011 г. 21:30:08, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

5.10.2011 г. 21:30:08, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

5.10.2011 г. 21:30:08, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

5.10.2011 г. 21:30:08, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

5.10.2011 г. 21:30:07, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

4.10.2011 г. 18:22:48, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

4.10.2011 г. 18:22:39, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

4.10.2011 г. 18:21:45, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - Компютърът е рестартиран от проверка за грешки. Проверката е: 0x000000fe (0x00000004, 0x889e64f8, 0x889d5290, 0x8a3cc008). Разтоварването е записано в: C:\Windows\MEMORY.DMP. ИД на доклада: 100411-21278-01.

4.10.2011 г. 18:21:32, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

4.10.2011 г. 18:21:26, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

4.10.2011 г. 18:21:26, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

4.10.2011 г. 18:21:26, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

4.10.2011 г. 18:21:26, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

4.10.2011 г. 18:21:25, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

4.10.2011 г. 11:17:33, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR4.

4.10.2011 г. 09:43:58, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

4.10.2011 г. 09:43:40, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

4.10.2011 г. 09:42:54, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

4.10.2011 г. 09:42:47, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

4.10.2011 г. 09:42:47, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

4.10.2011 г. 09:42:47, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

4.10.2011 г. 09:42:47, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

4.10.2011 г. 09:42:46, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

4.10.2011 г. 09:31:56, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

4.10.2011 г. 09:31:49, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

4.10.2011 г. 09:31:00, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

4.10.2011 г. 09:30:55, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

4.10.2011 г. 09:30:55, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

4.10.2011 г. 09:30:55, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

4.10.2011 г. 09:30:55, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

4.10.2011 г. 09:30:54, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

4.10.2011 г. 09:20:47, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR14.

4.10.2011 г. 08:33:16, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

4.10.2011 г. 08:32:55, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

4.10.2011 г. 08:31:48, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

4.10.2011 г. 08:31:42, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

4.10.2011 г. 08:31:42, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

4.10.2011 г. 08:31:42, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

4.10.2011 г. 08:31:42, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

4.10.2011 г. 08:31:41, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

4.10.2011 г. 01:34:15, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

4.10.2011 г. 01:33:54, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

4.10.2011 г. 01:32:55, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

4.10.2011 г. 01:32:51, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

4.10.2011 г. 01:32:51, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

4.10.2011 г. 01:32:51, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

4.10.2011 г. 01:32:51, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

4.10.2011 г. 01:32:50, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

4.10.2011 г. 00:56:21, Error: Microsoft-Windows-HAL [12] - The platform firmware has corrupted memory across the previous system power transition. Please check for updated firmware for your system.

3.10.2011 г. 20:05:35, Error: VDS Basic Provider [1] - Unexpected failure. Error code: D@01010004

3.10.2011 г. 20:05:30, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

3.10.2011 г. 20:04:52, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

3.10.2011 г. 20:04:48, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

3.10.2011 г. 20:04:48, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

3.10.2011 г. 20:04:48, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

3.10.2011 г. 20:04:48, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

3.10.2011 г. 20:04:47, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

2.10.2011 г. 22:35:08, Error: Microsoft-Windows-HAL [12] - The platform firmware has corrupted memory across the previous system power transition. Please check for updated firmware for your system.

2.10.2011 г. 22:34:11, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

2.10.2011 г. 22:33:48, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

2.10.2011 г. 22:32:42, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

2.10.2011 г. 22:32:37, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

2.10.2011 г. 22:32:37, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

2.10.2011 г. 22:32:37, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

2.10.2011 г. 22:32:37, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

2.10.2011 г. 22:32:36, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

2.10.2011 г. 19:08:11, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

2.10.2011 г. 19:08:02, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

2.10.2011 г. 19:07:18, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

2.10.2011 г. 19:07:12, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

2.10.2011 г. 19:07:12, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

2.10.2011 г. 19:07:12, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

2.10.2011 г. 19:07:12, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

2.10.2011 г. 19:07:11, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

2.10.2011 г. 18:27:50, Error: volsnap [36] - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

2.10.2011 г. 01:16:44, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

2.10.2011 г. 01:16:28, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

2.10.2011 г. 01:15:09, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

2.10.2011 г. 01:15:03, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

2.10.2011 г. 01:15:03, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

2.10.2011 г. 01:15:03, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

2.10.2011 г. 01:15:03, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

2.10.2011 г. 01:15:02, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

1.10.2011 г. 17:45:24, Error: VDS Basic Provider [1] - Unexpected failure. Error code: 490@01010004

1.10.2011 г. 17:43:50, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

1.10.2011 г. 17:43:13, Error: Service Control Manager [7009] - Изтекъл период на изчакване (30000 милисекунди) при изчакване на услуга HDDlife HDD Access service да се свърже.

1.10.2011 г. 17:43:13, Error: Service Control Manager [7000] - Услуга HDDlife HDD Access service не може да бъде стартирана поради следната грешка: Услугата не отговори навреме на искане за стартиране или управление.

1.10.2011 г. 17:42:08, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

1.10.2011 г. 17:42:04, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

1.10.2011 г. 17:42:04, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

1.10.2011 г. 17:42:04, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

1.10.2011 г. 17:42:04, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

1.10.2011 г. 17:42:03, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

1.10.2011 г. 12:10:07, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

1.10.2011 г. 12:08:27, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

1.10.2011 г. 12:08:23, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

1.10.2011 г. 12:08:23, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

1.10.2011 г. 12:08:23, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

1.10.2011 г. 12:08:23, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

1.10.2011 г. 12:08:22, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

1.10.2011 г. 11:22:19, Error: TermDD [50] - The RDP protocol component "DATA ENCRYPTION" detected an error in the protocol stream and has disconnected the client.

1.10.2011 г. 00:49:51, Error: Service Control Manager [7026] - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: prodrv06 prohlp02 prosync1 sfdrv01 sfhlp01 sfsync03

1.10.2011 г. 00:49:10, Error: Application Popup [875] - Driver prodrv06.sys has been blocked from loading.

1.10.2011 г. 00:49:04, Error: Application Popup [875] - Driver sfhlp01.sys has been blocked from loading.

1.10.2011 г. 00:49:04, Error: Application Popup [875] - Driver sfdrv01.sys has been blocked from loading.

1.10.2011 г. 00:49:04, Error: Application Popup [875] - Driver prosync1.sys has been blocked from loading.

1.10.2011 г. 00:49:04, Error: Application Popup [875] - Driver prohlp02.sys has been blocked from loading.

1.10.2011 г. 00:49:03, Error: Application Popup [875] - Driver sfsync03.sys has been blocked from loading.

.

==== End Of File ===========================

DDS.txt

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.0.0

Run by SiSo at 16:12:39 on 2011-10-08

Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1026.18.2816.1669 [GMT 3:00]

.

AV: avast! Internet Security *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Internet Security *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe

C:\Windows\System32\svchost.exe -k Akamai

C:\Program Files\D-Link\DWA-123\ALPBCSVC.exe

C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe

C:\Windows\system32\vmnat.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\VMware\VMware Workstation\vmware-authd.exe

C:\Program Files\FinalWire\AIDA64 Extreme Edition\aida64.exe

C:\Windows\system32\vmnetdhcp.exe

C:\Program Files\TeamViewer\Version6\TeamViewer.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

C:\Windows\System32\rundll32.exe

C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\Domino.exe

C:\Program Files\AVAST Software\Avast\AvastUI.exe

C:\Users\SiSo\AppData\Roaming\Adobe\Flash Player\FlashPlayer.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Memory Improve Master\MemoryImproveMaster.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Program Files\DAEMON Tools Lite\DTLite.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system\Cm106eye.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Users\SiSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\system32\DllHost.exe

C:\Users\SiSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

C:\Windows\system32\svchost.exe -k WindowsMobile

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\system32\rundll32.exe

C:\Users\SiSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Windows\system32\WUDFHost.exe

C:\Users\SiSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\conhost.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://facebook.com/

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office14\GROOVEEX.DLL

BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\micros~2\office14\URLREDIR.DLL

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre7\bin\jp2ssv.dll

TB: {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No File

TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll

uRun: [sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun

uRun: [Memory Improve Master] c:\program files\memory improve master\MemoryImproveMaster.exe /autorun

uRun: [skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized

uRun: [Advanced SystemCare 4] c:\program files\iobit\advanced systemcare 4\ASCTray.exe

uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" /MINIMIZED

uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun

uRun: [AdobeFlash Player] c:\users\siso\appdata\roaming\adobe\flash player\FlashPlayer.exe

mRun: [Cm106Sound] RunDll32 cm106.cpl,CMICtrlWnd

mRun: [Domino] c:\windows\Domino.exe

mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui

mRun: [AdobeFlash Player] c:\users\siso\appdata\roaming\adobe\flash player\FlashPlayer.exe

mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray

mRunOnce: [Malwarebytes' Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent

uPolicies-explorer: NoFolderOptions = 1 (0x1)

mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableLUA = 0 (0x0)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

mPolicies-system: PromptOnSecureDesktop = 0 (0x0)

IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000

IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll

IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll

IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

LSP: %SystemRoot%\system32\vsocklib.dll

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab

DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab

TCP: DhcpNameServer = 172.16.1.1

TCP: Interfaces\{026FBA46-1679-4C7D-B24F-076B535D7236} : DhcpNameServer = 172.16.1.1

TCP: Interfaces\{60465643-38C4-4187-A8D9-6FA71919C39F} : DhcpNameServer = 172.16.1.1

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL

STS: Windows DreamScene: {e31004d1-a431-41b8-826f-e902f9d95c81} - %SystemRoot%\System32\DreamScene.dll

SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office14\GROOVEEX.DLL

Hosts: 85.10.206.9 radiox-music.info

============= SERVICES / DRIVERS ===============

.

R0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\drivers\aswNdis.sys [2011-9-28 12112]

R0 aswNdis2;avast! Firewall Core Firewall Service;c:\windows\system32\drivers\aswNdis2.sys [2011-9-28 195416]

R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-9-18 15672]

R1 anodlwf;ANOD Network Security Filter driver;c:\windows\system32\drivers\anodlwf.sys [2011-10-8 12800]

R1 aswFW;avast! TDI Firewall driver;c:\windows\system32\drivers\aswFW.sys [2011-9-28 111320]

R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-9-28 442200]

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-9-28 320856]

R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128]

R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2011-6-6 64952]

R2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\iobit\advanced systemcare 4\ASCService.exe [2011-9-18 328536]

R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2009-7-14 20992]

R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-9-28 20568]

R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-9-28 54616]

R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2011-10-4 44768]

R2 DWA-123_PBC_WPS;DWA-123_PBC_WPS Service;c:\program files\d-link\dwa-123\ALPBCSVC.exe [2011-10-8 61440]

R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\firebird\firebird_2_5\bin\fbguard.exe [2011-9-7 98304]

R2 IMFservice;IMF Service;c:\program files\iobit\iobit malware fighter\IMFsrv.exe [2011-9-18 820568]

R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-10-8 366152]

R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia updatus\daemonu.exe [2011-7-17 2255464]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2011-8-3 379496]

R2 TeamViewer6;TeamViewer 6;c:\program files\teamviewer\version6\TeamViewer_Service.exe [2011-8-30 2358656]

R2 VMUSBArbService;VMware USB Arbitration Service;c:\program files\common files\vmware\usb\vmware-usbarbitrator.exe [2011-8-21 665200]

R2 vstor2-mntapi10-shared;Vstor2 MntApi 1.0 Driver (shared);c:\windows\system32\drivers\vstor2-mntapi10-shared.sys [2011-7-8 22768]

R3 AIDA64Driver;FinalWire AIDA64 Kernel Driver;c:\program files\finalwire\aida64 extreme edition\kerneld.x32 [2011-7-16 28824]

R3 Atc002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller;c:\windows\system32\drivers\l260x86.sys [2009-6-11 29184]

R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\firebird\firebird_2_5\bin\fbserver.exe [2011-9-7 3735552]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-10-8 22216]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2011-7-16 139368]

R3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000]

R3 USBMULCD;USB Multi-Channel Audio Device Interface;c:\windows\system32\drivers\CM106.sys [2010-8-12 1517056]

R3 vvftav211;vvftav211;c:\windows\system32\drivers\vvftav211.sys [2011-9-13 480128]

R3 ZSMC30x;USB PC Camera Service ZSMC30x;c:\windows\system32\drivers\ZS211.sys [2011-9-13 1537024]

S0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);c:\windows\system32\drivers\sfsync03.sys [2005-12-6 35328]

S2 avast! Firewall;avast! Firewall;c:\program files\avast software\avast\afwServ.exe [2011-9-28 127192]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 gupdate;Услуга на Google Актуализация (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-9-10 136176]

S3 athur;Wireless Network Adapter Service;c:\windows\system32\drivers\athur.sys [2011-7-17 1500160]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]

S3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 62464]

S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files\common files\futuremark shared\futuremark systeminfo\FMSISvc.exe [2011-8-5 129440]

S3 gupdatem;Услуга на Google Актуализация (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-9-10 136176]

S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\microsoft office\office14\GROOVE.EXE [2011-6-12 31125880]

S3 netr28u;D-Link dnetr28u USB Extensible Wireless LAN Card Driver;c:\windows\system32\drivers\Dnetr28u.sys [2011-10-8 1165152]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-21 15872]

S3 RegFilter;RegFilter;c:\program files\iobit\iobit malware fighter\drivers\win7_x86\RegFilter.sys [2011-9-18 30600]

S3 SwitchBoard;Adobe SwitchBoard;c:\program files\common files\adobe\switchboard\SwitchBoard.exe [2010-2-19 517096]

S3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\Synth3dVsc.sys [2010-11-21 77184]

S3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2010-11-21 25600]

S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2010-11-21 52224]

S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 27264]

S3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [2010-11-21 112640]

S3 UrlFilter;UrlFilter;c:\program files\iobit\iobit malware fighter\drivers\win7_x86\UrlFilter.sys [2011-9-18 19280]

S3 VMwareHostd;VMware Workstation Server;c:\program files\vmware\vmware workstation\vmware-hostd.exe [2011-8-22 11837440]

S3 WatAdminSvc;Услуга на технологиите за активиране на Windows;c:\windows\system32\wat\WatAdminSvc.exe [2011-7-17 1343400]

S3 wxpSvc;webcamXP Service;c:\program files\webcamxp 5\wService.exe [2011-7-27 5023744]

S4 FileMonitor;FileMonitor;c:\program files\iobit\iobit malware fighter\drivers\win7_x86\FileMonitor.sys [2011-9-18 18768]

.

=============== Created Last 30 ================

.

2011-10-08 12:28:35 22216 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-10-08 12:28:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2011-10-08 12:10:09 3717120 ----a-w- c:\windows\system32\authui.dll

2011-10-08 09:28:04 12800 ----a-w- c:\windows\system32\drivers\anodlwf.sys

2011-10-08 09:28:03 238944 ----a-w- c:\windows\system32\RaCoInst.dll

2011-10-08 09:28:03 1165152 ----a-w- c:\windows\system32\drivers\Dnetr28u.sys

2011-10-08 09:28:01 -------- d-----w- c:\program files\D-Link

2011-10-07 23:16:28 56200 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{67370e90-ab8b-4277-a0da-0c6ce1bc21eb}\offreg.dll

2011-10-07 23:16:27 7269712 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{67370e90-ab8b-4277-a0da-0c6ce1bc21eb}\mpengine.dll

2011-10-06 20:47:28 -------- d-----w- c:\users\siso\appdata\roaming\RTL8188

2011-10-06 18:46:50 -------- d-----w- c:\users\siso\appdata\local\pLan

2011-10-06 18:12:46 -------- d-----w- c:\users\siso\appdata\roaming\GameRanger

2011-10-06 16:25:35 -------- d-----w- c:\users\siso\appdata\local\NFS Underground 2

2011-10-06 08:08:05 -------- d-----w- c:\program files\The KMPlayer

2011-10-06 08:05:29 232448 ----a-w- c:\windows\system32\mp3fhg.acm

2011-10-06 08:05:28 74752 ----a-w- c:\windows\system32\ff_vfw.dll

2011-10-06 08:05:28 650752 ----a-w- c:\windows\system32\xvidcore.dll

2011-10-06 08:05:28 243200 ----a-w- c:\windows\system32\xvidvfw.dll

2011-10-06 08:05:28 151552 ----a-w- c:\windows\system32\ac3acm.acm

2011-10-03 22:22:17 -------- d-----w- c:\program files\Yamicsoft

2011-10-03 19:00:23 2616320 ----a-w- c:\windows\explorer.exe.Back

2011-10-03 18:58:28 -------- d-----w- c:\program files\Sunrise Seven

2011-10-03 17:17:36 -------- d-----w- c:\users\siso\appdata\local\RockMelt

2011-10-03 08:39:53 -------- d-----w- c:\users\siso\appdata\roaming\Sony Creative Software

2011-10-03 08:18:57 -------- d-----w- c:\program files\Sony

2011-10-01 19:57:11 -------- d-----w- c:\program files\SkypeLauncher

2011-10-01 14:14:20 -------- d-----w- c:\programdata\AltrixSoft

2011-10-01 14:13:46 -------- d-----w- c:\program files\Hard Drive Inspector

2011-10-01 14:13:43 -------- d-----w- c:\program files\common files\AltrixSoft

2011-10-01 14:00:47 -------- d-----w- c:\users\siso\appdata\roaming\HD Tune Pro

2011-10-01 14:00:08 -------- d-----w- c:\program files\HD Tune Pro

2011-10-01 13:27:56 716058 ----a-w- c:\program files\windows media player\visualizations\analyzed\unins000.exe

2011-10-01 13:27:56 184320 ----a-w- c:\program files\windows media player\visualizations\analyzed\Analyzed.dll

2011-09-30 18:59:26 -------- d-----w- c:\users\siso\appdata\local\Deployment

2011-09-30 18:59:20 -------- d-----w- c:\program files\Lg ku990 tools

2011-09-29 18:14:53 -------- d-----w- c:\users\siso\appdata\roaming\Easy MP3 Recorder

2011-09-29 18:14:18 -------- d-----w- c:\program files\Moozy

2011-09-29 16:19:53 -------- d-----w- c:\users\siso\appdata\roaming\Origin

2011-09-29 16:19:31 -------- d-----w- c:\users\siso\appdata\local\Origin

2011-09-29 16:19:15 -------- d-----w- c:\programdata\Origin

2011-09-29 16:19:09 -------- d-----w- c:\program files\Origin Games

2011-09-29 16:18:49 -------- d-----w- c:\program files\Origin

2011-09-28 08:35:28 -------- d-----w- c:\programdata\Electronic Arts

2011-09-28 08:24:45 -------- d-----w- c:\program files\Microsoft WSE

2011-09-27 22:02:10 111320 ----a-w- c:\windows\system32\drivers\aswFW.sys

2011-09-27 22:01:37 195416 ----a-w- c:\windows\system32\drivers\aswNdis2.sys

2011-09-27 22:01:35 54616 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys

2011-09-27 22:01:35 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys

2011-09-27 22:01:17 41184 ----a-w- c:\windows\avastSS.scr

2011-09-27 22:01:17 12112 ----a-w- c:\windows\system32\drivers\aswNdis.sys

2011-09-27 21:53:18 -------- d-----w- c:\program files\FreeTime

2011-09-27 21:03:04 -------- d-----w- c:\users\siso\appdata\roaming\PCFix

2011-09-27 20:57:23 -------- d-----w- c:\program files\PCFix

2011-09-27 20:57:04 -------- d-----w- c:\program files\CCleaner

2011-09-25 22:51:03 -------- d-----w- c:\users\siso\appdata\local\SKIDROW

2011-09-24 16:22:07 -------- d-----w- c:\program files\SHOUTcast

2011-09-24 13:33:39 -------- d-----w- c:\users\siso\VirtualBox VMs

2011-09-24 13:32:26 -------- d-----w- c:\users\siso\.VirtualBox

2011-09-24 13:30:21 158512 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys

2011-09-24 13:30:10 90928 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys

2011-09-24 13:30:01 -------- d-----w- c:\program files\Oracle

2011-09-24 09:21:22 -------- d-----w- C:\NST

2011-09-24 08:44:57 -------- d-----w- c:\users\siso\appdata\roaming\Canneverbe Limited

2011-09-24 08:44:57 -------- d-----w- c:\programdata\Canneverbe Limited

2011-09-23 21:40:47 -------- d-----w- c:\program files\uTorrent

2011-09-23 21:34:45 -------- d-----w- c:\users\siso\appdata\roaming\uTorrent

2011-09-23 21:34:45 -------- d-----w- c:\users\siso\appdata\local\uTorrent

2011-09-22 19:44:16 -------- d-----w- c:\program files\TelecomLogic

2011-09-22 13:45:46 119808 ----a-r- c:\users\siso\appdata\roaming\microsoft\installer\{ccf298af-9ce1-4b26-b251-486e98a34789}\icons.exe

2011-09-22 13:16:29 -------- d-----w- c:\program files\Mixxx

2011-09-21 06:35:54 4566176 ----a-w- c:\program files\mozilla firefox\extensions\{82af8dca-6de9-405d-bd5e-43525bdad38a}\components\SkypeFfComponent.dll

2011-09-20 18:48:02 -------- d-----w- c:\program files\foobar2000

2011-09-20 18:47:58 -------- d-----w- c:\windows\fooEncoders

2011-09-20 18:47:40 -------- d-----w- c:\program files\SoundSpectrum

2011-09-18 11:56:29 -------- d--h--w- c:\windows\Icons

2011-09-18 08:16:05 25944 ----a-w- c:\windows\system32\SmartDefragBootTime.exe

2011-09-18 08:16:04 15672 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys

2011-09-18 08:15:57 -------- d-----w- c:\programdata\IObit

2011-09-18 08:14:33 -------- d-----w- c:\users\siso\appdata\roaming\IObit

2011-09-18 08:14:28 -------- d-----w- c:\program files\IObit

2011-09-17 22:25:46 614400 ----a-w- c:\windows\AutoKMS.exe

2011-09-16 08:20:44 -------- d-----w- c:\users\siso\appdata\local\VMware

2011-09-16 08:03:44 354416 ----a-w- c:\windows\system32\vmnetdhcp.exe

2011-09-16 08:03:42 432752 ----a-w- c:\windows\system32\vmnat.exe

2011-09-16 08:03:42 25712 ----a-w- c:\windows\system32\drivers\vmnetuserif.sys

2011-09-16 08:03:31 783472 ----a-w- c:\windows\system32\vnetlib.dll

2011-09-16 08:01:37 -------- d-----w- c:\program files\VMware

2011-09-16 08:00:40 -------- d-----w- c:\program files\common files\VMware

2011-09-16 07:07:23 -------- d-----w- c:\program files\MSXML 4.0

2011-09-15 07:37:30 -------- d-----w- c:\program files\common files\Corel

2011-09-15 07:36:51 -------- d-----w- c:\program files\Corel

2011-09-15 00:01:10 -------- d-sh--w- c:\windows\system32\%APPDATA%

2011-09-14 18:15:08 -------- d-----w- c:\users\siso\appdata\local\Apps

2011-09-14 13:19:36 -------- d-----w- C:\Alerts

2011-09-14 13:00:56 -------- d-----w- c:\windows\EffectResources

2011-09-13 20:44:53 -------- d-----w- c:\programdata\webcamXP 5

2011-09-13 20:44:48 -------- d-----w- c:\program files\webcamXP 5

2011-09-13 20:28:44 57344 ----a-w- c:\windows\ZSSnp211.exe

2011-09-13 20:28:43 49152 ----a-w- c:\windows\Domino.exe

2011-09-13 20:28:05 94208 ----a-w- c:\windows\system32\VvFtCtrl.dll

2011-09-13 20:28:05 480128 ----a-w- c:\windows\system32\drivers\vvftav211.sys

2011-09-13 20:28:05 188416 ----a-w- c:\windows\system32\VvftPrpav211.ax

2011-09-13 20:28:04 81920 ----a-w- c:\windows\system32\ZS211STI.dll

2011-09-13 20:28:04 77824 ----a-w- c:\windows\ZS211Cap.exe

2011-09-13 20:28:04 274432 ----a-w- c:\windows\system32\ZS211Prp.Ax

2011-09-13 20:28:04 1537024 ----a-w- c:\windows\system32\drivers\ZS211.sys

2011-09-13 20:28:03 172032 ----a-w- c:\windows\amcap.exe

2011-09-13 20:28:03 -------- d-----w- c:\program files\Vimicro

2011-09-13 08:05:54 782336 ----a-r- c:\windows\system32\tmpA2DB.tmp

2011-09-12 20:13:42 -------- d-----w- c:\users\siso\appdata\roaming\TuneUp Software

2011-09-12 20:12:53 -------- d-----w- c:\programdata\TuneUp Software

2011-09-12 20:12:46 -------- d-sh--w- c:\programdata\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}

2011-09-12 15:37:57 -------- d-----w- c:\users\siso\appdata\roaming\RigNRoll_eng

2011-09-12 15:37:05 782336 ----a-r- c:\windows\system32\tmp7322.tmp

2011-09-12 11:00:03 -------- d-----w- c:\users\siso\appdata\local\RadonLabs

2011-09-11 21:47:20 -------- d-----w- c:\program files\common files\Wise Installation Wizard

2011-09-11 20:25:04 -------- d-----w- c:\programdata\Spybot - Search & Destroy

2011-09-11 06:13:17 -------- d-----w- c:\users\siso\appdata\local\Microsoft Games

2011-09-09 09:20:58 57960 ----a-w- c:\windows\system32\OpenCL.dll

2011-09-09 09:20:58 16595560 ----a-w- c:\windows\system32\nvoglv32.dll

2011-09-09 09:20:58 10304104 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys

2011-09-09 09:20:57 914024 ----a-w- c:\windows\system32\nvdispco32.dll

2011-09-09 09:20:57 875112 ----a-w- c:\windows\system32\nvgenco32.dll

2011-09-09 09:20:57 5404776 ----a-w- c:\windows\system32\nvcuda.dll

2011-09-09 09:20:57 2391656 ----a-w- c:\windows\system32\nvcuvid.dll

2011-09-09 09:20:57 2090088 ----a-w- c:\windows\system32\nvcuvenc.dll

2011-09-09 09:20:57 17193576 ----a-w- c:\windows\system32\nvcompiler.dll

2011-09-09 09:14:29 -------- d-----w- c:\program files\Microsoft IntelliPoint

2011-09-09 08:49:27 -------- d-----w- c:\program files\Driver-Soft

2011-09-08 13:51:37 -------- d-----w- c:\users\siso\appdata\roaming\AIMP3

2011-09-08 13:51:31 -------- d-----w- c:\program files\AIMP3

2011-09-08 13:37:38 -------- d-----w- c:\users\siso\appdata\roaming\Forge100

2011-09-08 13:37:38 -------- d-----w- c:\users\siso\appdata\local\Forge100

2011-09-08 13:33:42 -------- d-----w- c:\users\siso\appdata\local\Sony

.

==================== Find3M ====================

.

2011-10-03 19:00:20 2616320 ----a-w- c:\windows\explorer.exe

2011-09-21 17:37:52 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-09-06 13:35:14 720896 ----a-w- c:\windows\iun6002.exe

2011-08-22 14:07:40 55280 ----a-w- c:\windows\system32\drivers\vmx86.sys

2011-08-22 14:07:04 23792 ----a-w- c:\windows\system32\drivers\vmparport.sys

2011-08-22 12:40:08 252016 ----a-w- c:\windows\system32\vmnc.dll

2011-08-22 12:12:26 55408 ----a-w- c:\windows\system32\vmnetbridge.dll

2011-08-22 12:12:26 49776 ----a-w- c:\windows\system32\vnetinst.dll

2011-08-22 12:12:26 36464 ----a-w- c:\windows\system32\drivers\vmnetbridge.sys

2011-08-22 12:12:26 19568 ----a-w- c:\windows\system32\drivers\vmnet.sys

2011-08-22 12:12:26 16624 ----a-w- c:\windows\system32\drivers\vmnetadapter.sys

2011-08-21 20:11:22 32496 ----a-w- c:\windows\system32\drivers\hcmon.sys

2011-08-15 12:06:20 116016 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys

2011-08-15 12:06:20 104752 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys

2011-08-15 12:06:12 135472 ----a-w- c:\windows\system32\VBoxNetFltNobj.dll

2011-08-08 11:58:56 98928 ----a-w- c:\windows\system32\drivers\vmci.sys

2011-08-08 11:58:56 63088 ----a-w- c:\windows\system32\vsocklib.dll

2011-08-03 11:50:00 66664 ----a-w- c:\windows\system32\nvshext.dll

2011-08-03 11:50:00 6613096 ----a-w- c:\windows\system32\nvwgf2um.dll

2011-08-03 11:50:00 600680 ----a-w- c:\windows\system32\easyupdatusapiu.dll

2011-08-03 11:50:00 599144 ----a-w- c:\windows\system32\nvvsvc.exe

2011-08-03 11:50:00 3730024 ----a-w- c:\windows\system32\nvcpl.dll

2011-08-03 11:50:00 2560616 ----a-w- c:\windows\system32\nvsvcr.dll

2011-08-03 11:50:00 2558568 ----a-w- c:\windows\system32\nvsvc.dll

2011-08-03 11:50:00 2412136 ----a-w- c:\windows\system32\nvapi.dll

2011-08-03 11:50:00 12636776 ----a-w- c:\windows\system32\nvd3dum.dll

2011-08-03 11:50:00 111208 ----a-w- c:\windows\system32\nvmctray.dll

2011-08-03 00:31:54 311912 ----a-w- c:\windows\system32\nvStreaming.exe

2011-08-02 08:14:16 445016 ----a-w- c:\windows\system32\wrap_oal.dll

2011-08-02 08:14:16 109144 ----a-w- c:\windows\system32\OpenAL32.dll

2011-08-01 19:24:08 544656 ----a-w- c:\windows\system32\deployJava1.dll

2011-08-01 12:56:42 45288 ----a-w- c:\windows\system32\drivers\dc3d.sys

2011-08-01 12:56:42 40936 ----a-w- c:\windows\system32\drivers\point32.sys

2011-08-01 12:56:42 395624 ----a-w- c:\windows\system32\ipcoin82.dll

2011-08-01 12:56:42 1461992 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll

2011-07-22 02:54:43 1797632 ----a-w- c:\windows\system32\jscript9.dll

2011-07-22 02:48:26 1126912 ----a-w- c:\windows\system32\wininet.dll

2011-07-22 02:44:36 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2011-07-16 21:48:28 2755072 ----a-w- c:\windows\system32\themeui.dll

2011-07-16 21:48:26 37376 ----a-w- c:\windows\system32\themeservice.dll

2011-07-16 21:48:25 249856 ----a-w- c:\windows\system32\uxtheme.dll

2011-07-16 21:48:21 50536 ----a-w- c:\windows\UTP.exe

2011-07-16 21:00:54 233888 ----a-w- c:\windows\system32\DreamScene.dll

2011-07-16 20:41:31 431672 ----a-w- c:\windows\system32\drivers\sptd.sys

2011-07-16 04:27:30 290816 ----a-w- c:\windows\system32\KernelBase.dll

2011-07-16 02:17:19 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll

2011-07-16 02:17:19 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2011-07-16 02:17:19 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2011-07-16 02:17:19 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll

.

============= FINISH: 16:13:48,88 ===============

8 октомври 201114 г.

Прочетете какво пише на тази страница. Има инструкции за обновяване или за премахване на StarForce Protection Synchronization Driver. Понеже има доста грешки, свързани с този драйвер, аз препоръчвам да го премахнете. Използвайте следния инструмент: SFREMOVE utility. Разархивирайте и стартирайте sfdrvrem.exe, като следвате инструкциите. Пишете за резултата.

8 октомври 201114 г.

Автор

Изпълних инструкциите,ви но никакъв ефект!...

8 октомври 201114 г.

Добре, Сега изтеглете OTL.exe и го запазете на десктопа.

Стартирайте OTL (ако е необходимо, потвърдете през UAC).
Направете следните настройки:
Сложете отметка пред Scan All Users
Под менюто File Age изберете 90 days
Под менюто Standard Registryпроменете на ALL
Сложете отметки пред LOP и Purity Check

Под

с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

netsvcs
msconfig
drivers32 /all
%SYSTEMDRIVE%\*.*
%PROGRAMFILES%\*.*
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%PROGRAMFILES%\Internet Explorer\*.tmp
%PROGRAMFILES%\Internet Explorer\*.dat
%systemroot%\system32\Spool\prtprocs\w32x86\*.dll
/md5start
atapi.sys
iaStor.sys
explorer.exe
svchost.exe
userinit.exe
hlp.dat
winlogon.exe
wininit.exe
volsnap.sys
/md5stop

Натиснете маркираният в синьо бутон: Run Scan.
Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt. Прикачете тези два файла в следващия си коментар (погледнете опцията Прикачени файлове, когато публикувате мнение).

8 октомври 201114 г.

Автор

Направих едно бързо сканиране с Malwarebytes и имам 8 зловредни обекта до тук след като се опитах да ги махна излезе синия екран..сега ще изпълня стъпките ви Ето логовете: Extras.Txt OTL.Txt

8 октомври 201114 г.

Няма да е лошо да видя лога от сканиране с MBAM. След като MBAM премахне заразите, може да копирате и поставите лога в следващия си коментар: MBAM > logs (дневници). Ако няма лог, здраве.

8 октомври 201114 г.

Автор

Проблема,е че не може да ги премахне при опит да ги премахне излиза синия екран... В момента отново сканирах и са останали само два зловредни обекта ето лога: mbam-log-2011-10-08 (18-02-41).txt 6-те премахнати бяха Троянски коне Току що премахнах и тези двата от лога и се рестартира изключи без проблем,но все още се съмнявам дали няма остатъци,защото го пуснах на бързо сканиране

Редактирано 8 октомври 201114 г. от sisojekov (преглед на промените)

8 октомври 201114 г.

O.K. Сега да видим дали ще почистим един файл, като махнем неговата папка.

Затова изтеглете The Avenger и го разархивирайте го на вашия десктоп.

Стартирайте avenger.exe (за Windows Vista/ 7 десен бутон => Run as administrator), копирайте следния скрипт и го поставете в текстовото поле на програмата:

Begin copying here:
Folders to delete:
C:\Users\SiSo\AppData\Roaming\Adobe\Flash Player

Забележка: Този скрипт е създаден специално за този потребител. Ако не сте този потребител, не ползвайте този скрипт, защото той може да повреди сериозно вашата система.

Уверете се, че Scan for rootkits и Automatically disable any rootkits found имат отметки.

Накрая, изберете Execute и при въпрос от страна на програмата, щракнете върху Yes, при което компютъра ще се рестартира. След рестартирането копирайте и поставете съдържанието на лог файла от програмата, намиращ се в C:\avenger.txt в следващия Ви коментар в тази тема.

8 октомври 201114 г.

Автор

Logfile of The Avenger Version 2.0, © by Swandog46 http://swandog46.geekstogo.com Platform: Windows Vista ******************* Script file opened successfully. Script file read successfully. Backups directory opened successfully at C:\Avenger ******************* Beginning to process script file: Rootkit scan active. No rootkits found! Folder "C:\Users\SiSo\AppData\Roaming\Adobe\Flash Player" deleted successfully. Completed script processing. ******************* Finished! Terminate.

8 октомври 201114 г.

Стартирайте отново OTL, копирайте (Copy) и поставете (Paste) скриптовия текст от текстовото поле по-долу под колонката Custom Scans/Fixes, като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта.

:otl
O4 - HKU\S-1-5-21-2570563294-2471894800-2345151914-1000..\Run: [AdobeFlash Player] C:\Users\SiSo\AppData\Roaming\Adobe\Flash Player\FlashPlayer.exe ()
O33 - MountPoints2\{1de97ac0-afef-11e0-b863-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{1de97ac0-afef-11e0-b863-806e6f6e6963}\Shell\AutoRun\command - "" = G:\Setup.exe
@Alternate Data Stream - 154 bytes -> C:\ProgramData\TEMP:1CE11B51
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:2BE9FEFC
:files
recycler /alldrives
ipconfig /flushdns /c
:commands
[purity]
[emptytemp]
[emptyflash]
[Reboot]

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix

Windows ще се рестартира и ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

P.S. След това пишете дали все още има проблеми.

8 октомври 201114 г.

Автор

All processes killed

========== OTL ==========

Registry value HKEY_USERS\S-1-5-21-2570563294-2471894800-2345151914-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeFlash Player not found.

File C:\Users\SiSo\AppData\Roaming\Adobe\Flash Player\FlashPlayer.exe not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1de97ac0-afef-11e0-b863-806e6f6e6963}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1de97ac0-afef-11e0-b863-806e6f6e6963}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1de97ac0-afef-11e0-b863-806e6f6e6963}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1de97ac0-afef-11e0-b863-806e6f6e6963}\ not found.

File G:\Setup.exe not found.

ADS C:\ProgramData\TEMP:1CE11B51 deleted successfully.

ADS C:\ProgramData\TEMP:2BE9FEFC deleted successfully.

========== FILES ==========

recycler not found in C:\

recycler not found in D:\

E:\RECYCLER\S-1-5-21-329068152-1214440339-1606980848-1003\Dk1 folder moved successfully.

E:\RECYCLER\S-1-5-21-329068152-1214440339-1606980848-1003 folder moved successfully.

E:\RECYCLER\S-1-5-21-1202660629-606747145-1177238915-500\Di3 folder moved successfully.

E:\RECYCLER\S-1-5-21-1202660629-606747145-1177238915-500\Di2\Zombieland (2009) BRRip XvidHD 720p-NPW folder moved successfully.

E:\RECYCLER\S-1-5-21-1202660629-606747145-1177238915-500\Di2\The Other Side of Heaven (2001) folder moved successfully.

E:\RECYCLER\S-1-5-21-1202660629-606747145-1177238915-500\Di2\The Evil Dead (1981) BRRip XvidHD 720p-NPW folder moved successfully.

E:\RECYCLER\S-1-5-21-1202660629-606747145-1177238915-500\Di2 folder moved successfully.

E:\RECYCLER\S-1-5-21-1202660629-606747145-1177238915-500\Di1 folder moved successfully.

E:\RECYCLER\S-1-5-21-1202660629-606747145-1177238915-500 folder moved successfully.

E:\RECYCLER folder moved successfully.

< ipconfig /flushdns /c >

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Users\SiSo\Desktop\cmd.bat deleted successfully.

C:\Users\SiSo\Desktop\cmd.txt deleted successfully.

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

->Flash cache emptied: 56466 bytes

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

User: Public

User: SiSo

->Temp folder emptied: 16048581 bytes

->Temporary Internet Files folder emptied: 18449748 bytes

->Java cache emptied: 4357214 bytes

->FireFox cache emptied: 155455441 bytes

->Google Chrome cache emptied: 13066457 bytes

->Flash cache emptied: 9529 bytes

User: UpdatusUser

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 6359264 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 760873 bytes

RecycleBin emptied: 0 bytes

Total Files Cleaned = 205,00 mb

[EMPTYFLASH]

User: All Users

User: Default

->Flash cache emptied: 0 bytes

User: Default User

->Flash cache emptied: 0 bytes

User: Public

User: SiSo

->Flash cache emptied: 0 bytes

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb

OTL by OldTimer - Version 3.2.29.1 log created on 10082011_192323

Files\Folders moved on Reboot...

File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

File move failed. C:\Windows\temp\vmware-SYSTEM\vmauthd.log scheduled to be moved on reboot.

C:\Windows\temp\vmware-SYSTEM\vmware-usbarb-SYSTEM-2824.log moved successfully.

Registry entries deleted on Reboot...

Нямам проблеми Windows-a е като нов!Благодаря за помощта!

8 октомври 201114 г.

Сега стартирайте OTL още веднъж и натиснете бутона CleanUp.

При дeинсталацията на OTL ще бъдат почистени инструменти и файлове, които използвахме в темата. Ще последва рестарт на Windows. Може да изтриете останалите програми и логове, които използвахме в темата, ако има остатъци. Деинсталирайте и ESET Online Scanner.

След като приключихме, маркирам проблема като решен. Приятна вечер и успех!

Добре дошли!

Съмнение за Вирус [решен]

Featured Replies

Архивирана тема

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)