Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Заразен с Live security platinum

hrisi_p
в Премахване на зловреден софтуер

Featured Replies

Здравейте, Вчера компютъра ми се зарази с фалшива антивирусна програма Live security platinum. Целият компютър блокира, мога само да го рестартирам или изключа. За съжаление не мога да вляза в Safe mode и да инсталирам каквото и да било. При натискане на F8 ми излиза син екран с опции от кое устройство да се буутва компютъра. Опциите са флопи, ХДД и СД. С Уин ХР СП2 съм. В момента пиша от друг компютър. Надявам се да можете да ми помогнете. Предварително благодаря за отделеното време!

При това положение или го носи на сервиз или извикай твой познат, който е навътре в нещата и ще може да ти помогне.

малко рано натискаш F8 за Safe mode изчакай да се скрие екрана от биоса и тогава натискай F8

или от синьото меню избери HDD и продължи да настояваш с F8

http://www.kaldata.com/comments.php?catid=1&id=53225

Здравейте,

Вчера компютъра ми се зарази с фалшива антивирусна програма Live security platinum. Целият компютър блокира, мога само да го рестартирам или изключа. За съжаление не мога да вляза в Safe mode и да инсталирам каквото и да било. При натискане на F8 ми излиза син екран с опции от кое устройство да се буутва компютъра. Опциите са флопи, ХДД и СД. С Уин ХР СП2 съм. В момента пиша от друг компютър. Надявам се да можете да ми помогнете.

Предварително благодаря за отделеното време!

Като седнете на вашия компютър, изпълнете следните стъпки:http://www.kaldata.com/forums/topic/132819-%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D0%B0%D1%82%D0%B0-%D0%BC%D0%B8-%D0%B5-%D0%B8%D0%BD%D1%84%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%B0%D0%BD%D0%B0-%D0%BA%D0%B0%D0%BA%D0%B2%D0%BE-%D0%B4%D0%B0-%D0%BF%D1%80%D0%B0%D0%B2%D1%8F-%D1%81%D0%B5%D0%B3%D0%B0/

и изчакайте търпеливо момчетата да ви поемат!

  • Автор

Благодаря, след синьото меню продължих с F8 и успях да вляза след 2рия опит в Safe mode with networking. Сега ще вляза в Калдата и ще инсталирам DDS програмата Това е DDS.txt файла DDS (Ver_2011-09-30.01) - NTFS_x86 NETWORK Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_32 Run by Administrator at 13:41:27 on 2012-08-08 Microsoft Windows XP Professional 5.1.2600.2.1251.359.1033.18.1007.560 [GMT 3:00] . AV: ESET NOD32 antivirus system 2.70 *Enabled/Outdated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} . ============== Running Processes ================ . C:WINDOWSExplorer.EXE D:Program FilesMozilla Firefoxfirefox.exe D:Program FilesMozilla Firefoxplugin-container.exe C:WINDOWSsystem32wbemwmiprvse.exe C:WINDOWSsystem32svchost.exe -k netsvcs C:WINDOWSsystem32svchost.exe -k NetworkService C:WINDOWSsystem32svchost.exe -k LocalService . ============== Pseudo HJT Report =============== . BHO: Adobe PDF Reader Link Helper: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:program filescommon filesadobeacrobatactivexAcroIEHelper.dll BHO: FGCatchUrl: {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - d:program filesflashgetjccatch.dll BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:program filesspybot - search & destroySDHelper.dll BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:program filesjavajre6binssv.dll BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:program filesjavajre6binjp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - c:program filesjavajre6libdeployjqsiejqs_plugin.dll BHO: FlashGet GetFlash Class: {F156768E-81EF-470C-9057-481BA8380DBA} - d:program filesflashgetgetflash.dll uRun: [CTFMON.EXE] c:windowssystem32CTFMON.EXE uRunOnce: [NeroHomeFirstStart] "c:program filescommon filesaheadlibNMFirstStart.exe" mRun: [igfxTray] c:windowssystem32igfxtray.exe mRun: [HotKeysCmds] c:windowssystem32hkcmd.exe mRun: [Persistence] c:windowssystem32igfxpers.exe mRun: [nod32kui] "c:program filesesetnod32kui.exe" /WAITSERVICE mRun: [startCCC] "c:program filesati technologiesati.acecore-staticCLIStart.exe" mRun: [soundMAXPnP] c:program filesanalog devicescoresmax4pnp.exe mRun: [soundMAX] "c:program filesanalog devicessoundmaxSmax4.exe" /tray mRun: [LogitechCommunicationsManager] "c:program filescommon fileslogishrdlcommgrCommunications_Helper.exe" mRun: [LogitechQuickCamRibbon] "c:program fileslogitechquickcamQuickcam.exe" /hide mRun: [QuickTime Task] "c:program filesquicktimeqttask.exe" -atboottime mRun: [updateReminder] c:program filesesetUpdateReminder.exe mRun: [Adobe Reader Speed Launcher] "c:program filesadobereader 8.0readerReader_sl.exe" mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe" mRun: [PDFPrint] c:program filespdf24pdf24.exe mRun: [NPSStartup] <no file> dRun: [CTFMON.EXE] c:windowssystem32CTFMON.EXE StartupFolder: c:docume~1alluse~1.winstartm~1programsstartupadobeg~1.lnk - c:program filescommon filesadobecalibrationAdobe Gamma Loader.exe uPolicies-Explorer: NoDriveTypeAutoRun = dword:145 mPolicies-Explorer: NoDriveTypeAutoRun = dword:145 IE: Add to Google Photos Screensa&ver - c:windowssystem32GPhotos.scr/200 IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} IE: {B863453A-26C3-4e1f-A54D-A2CD196348E9} - c:program filesicqliteICQLite.exe IE: {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - d:program filesflashgetFlashGet.exe IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:program filesspybot - search & destroySDHelper.dll IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:program filesmessengermsmsgs.exe LSP: c:windowssystem32imon.dll . INFO: HKCU has more than 50 listed domains. If you wish to scan all of them, select the 'Force scan all domains' option. . . INFO: HKLM has more than 50 listed domains. If you wish to scan all of them, select the 'Force scan all domains' option. . DPF: Microsoft XML Parser for Java - file://c:windowsjavaclassesxmldso.cab DPF: {41564D57-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/0/A/9/0A9F8B32-9F8C-4D74-A130-E4CAB36EB01F/wmvadvd.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {A996E48C-D3DC-4244-89F7-AFA33EC60679} - hxxps://e-postbank.bg/capicom.cab DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab TCP: NameServer = 192.168.43.1 TCP: Interfaces{938A3140-46B8-4F28-9368-BC05B26E444D} : DHCPNameServer = 192.168.43.1 Notify: AtiExtEvent - Ati2evxx.dll Notify: igfxcui - igfxdev.dll Notify: WgaLogon - <no file> SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:windowssystem32WPDShServiceObj.dll Hosts: 127.0.0.1 www.spywareinfo.com . ================= FIREFOX =================== . FF - ProfilePath - c:documents and settingsadministratorapplication datamozillafirefoxprofilesm792qpfp.default FF - plugin: c:program filesgooglegoogle earthpluginnpgeplugin.dll FF - plugin: c:program filesgooglepicasa3npPicasa3.dll FF - plugin: c:program filesgoogleupdate1.3.21.115npGoogleUpdate3.dll FF - plugin: c:program filesjavajre6binplugin2npjp2.dll FF - plugin: c:windowssystem32macromedflashNPSWF32_11_3_300_270.dll FF - plugin: c:windowssystem32npdeployJava1.dll FF - plugin: c:windowssystem32npptools.dll FF - plugin: c:windowssystem32npwmsdrm.dll FF - plugin: d:program filesmozilla firefoxpluginsnpRLCT4Player.dll . ============= SERVICES / DRIVERS =============== . S1 nod32drv;nod32drv;c:windowssystem32driversnod32drv.sys [2007-4-25 15424] S2 FsUsbExService;FsUsbExService;c:windowssystem32FsUsbExService.Exe [2011-12-29 233472] S2 gupdate;Услуга Google Update (gupdate);c:program filesgoogleupdateGoogleUpdate.exe [2010-2-3 135664] S2 NOD32krn;NOD32 Kernel Service;c:program filesesetnod32krn.exe [2007-4-25 552064] S2 regi;regi;c:windowssystem32driversregi.sys [2007-4-17 11032] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2012-3-31 250056] S3 FsUsbExDisk;FsUsbExDisk;c:windowssystem32FsUsbExDisk.Sys [2011-12-29 36608] S3 ggflt;SEMC USB Flash Driver Filter;c:windowssystem32driversggflt.sys [2010-12-5 13224] S3 gupdatem;Услуга на Google Актуализация (gupdatem);c:program filesgoogleupdateGoogleUpdate.exe [2010-2-3 135664] S3 MozillaMaintenance;Mozilla Maintenance Service;c:program filesmozilla maintenance servicemaintenanceservice.exe [2012-4-25 113120] S3 Sony PC Companion;Sony PC Companion;c:program filessonysony pc companionPCCService.exe [2010-12-5 155320] S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:windowssystem32driversss_bbus.sys [2011-12-29 90112] S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:windowssystem32driversss_bmdfl.sys [2011-12-29 14976] S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:windowssystem32driversss_bmdm.sys [2011-12-29 121856] . =============== File Associations =============== . ShellExec: BitComet.exe: Open="c:program filesbitcometBitComet.exe" . =============== Created Last 30 ================ . 2012-08-08 10:31:11 -------- d-----w- c:documents and settingsadministratorlocal settingsapplication dataMozilla 2012-08-07 18:32:52 -------- d-----w- c:documents and settingsall users.windowsapplication data036DFF59000D2207B56F8D5CE56C3425 2012-07-12 12:33:23 9827016 ----a-w- c:windowssystem32FlashPlayerInstaller.exe . ==================== Find3M ==================== . 2012-08-03 14:33:20 70344 ----a-w- c:windowssystem32FlashPlayerCPLApp.cpl 2012-08-03 14:33:20 426184 ----a-w- c:windowssystem32FlashPlayerApp.exe 2006-05-03 10:06:54 163328 --sh--r- c:windowssystem32flvDX.dll 2007-02-21 11:47:16 31232 -csh--r- c:windowssystem32msfDX.dll 2008-03-16 13:30:52 216064 -csh--r- c:windowssystem32nbDX.dll . ============= FINISH: 13:42:06,14 =============== А това е Attach.txt файла: . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-09-30.01) . Microsoft Windows XP Professional Boot Device: DeviceHarddiskVolume1 Install Date: 25.4.2007 г. 12:34:56 System Uptime: 08.8.2012 г. 13:30:12 (0 hours ago) . Motherboard: ASUSTeK Computer INC. | | P5B-VM Processor: Intel® Core2 CPU 6300 @ 1.86GHz | LGA 775 | 1866/266mhz Processor: Intel® Core2 CPU 6300 @ 1.86GHz | LGA 775 | 1866/266mhz . ==== Disk Partitions ========================= . A: is Removable C: is FIXED (NTFS) - 20 GiB total, 0,96 GiB free. D: is FIXED (NTFS) - 65 GiB total, 0,411 GiB free. E: is FIXED (NTFS) - 65 GiB total, 0,911 GiB free. F: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318} Description: ATI Function Driver for High Definition Audio - ATI AA01 Device ID: HDAUDIOFUNC_01&VEN_1002&DEV_AA01&SUBSYS_00AA0100&REV_10005&162ED9EB&0&0001 Manufacturer: ATI Name: ATI Function Driver for High Definition Audio - ATI AA01 PNP Device ID: HDAUDIOFUNC_01&VEN_1002&DEV_AA01&SUBSYS_00AA0100&REV_10005&162ED9EB&0&0001 Service: HdAudAddService . Class GUID: {EEC5AD98-8080-425F-922A-DABF3DE3F69A} Description: Nokia 6300 Device ID: ROOTWPD0000 Manufacturer: Nokia Name: Nokia 6300 PNP Device ID: ROOTWPD0000 Service: WUDFRd . ==== System Restore Points =================== . RP1231: 16.7.2012 г. 17:26:22 - System Checkpoint RP1232: 17.7.2012 г. 18:31:27 - System Checkpoint RP1233: 18.7.2012 г. 18:53:24 - System Checkpoint RP1234: 19.7.2012 г. 19:20:29 - System Checkpoint RP1235: 20.7.2012 г. 19:52:34 - System Checkpoint RP1236: 21.7.2012 г. 19:56:59 - System Checkpoint RP1237: 23.7.2012 г. 12:28:57 - System Checkpoint RP1238: 24.7.2012 г. 12:35:58 - System Checkpoint RP1239: 25.7.2012 г. 13:30:04 - System Checkpoint RP1240: 26.7.2012 г. 17:17:27 - System Checkpoint RP1241: 27.7.2012 г. 19:37:56 - System Checkpoint RP1242: 28.7.2012 г. 20:09:45 - System Checkpoint RP1243: 29.7.2012 г. 21:47:26 - System Checkpoint RP1244: 30.7.2012 г. 21:54:45 - System Checkpoint RP1245: 31.7.2012 г. 21:55:26 - System Checkpoint RP1246: 01.8.2012 г. 22:13:58 - System Checkpoint RP1247: 02.8.2012 г. 22:31:19 - System Checkpoint RP1248: 03.8.2012 г. 23:03:14 - System Checkpoint RP1249: 04.8.2012 г. 23:57:22 - System Checkpoint RP1250: 06.8.2012 г. 10:06:38 - System Checkpoint RP1251: 07.8.2012 г. 11:19:32 - System Checkpoint . ==== Installed Programs ====================== . КОМПАС-3D LT V10 ABBYY FineReader 7.0 Professional Edition Adobe AIR Adobe Anchor Service CS4 Adobe Bridge 1.0 Adobe Bridge CS4 Adobe CMaps CS4 Adobe Color EU Extra Settings CS4 Adobe Color JA Extra Settings CS4 Adobe Color NA Recommended Settings CS4 Adobe Common File Installer Adobe CSI CS4 Adobe Default Language CS4 Adobe ExtendScript Toolkit CS4 Adobe Extension Manager CS4 Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Fonts All Adobe Help Center 1.0 Adobe Illustrator 10 CE Adobe Illustrator CS Adobe Illustrator CS2 Adobe Illustrator CS4 Adobe Linguistics CS4 Adobe Media Player Adobe Output Module Adobe PDF Library Files CS4 Adobe Photoshop CS2 Adobe Reader 8.3.1 Adobe Search for Help Adobe Service Manager Extension Adobe Setup Adobe Shockwave Player Adobe Stock Photos 1.0 Adobe SVG Viewer 3.0 Adobe Type Support CS4 Adobe Update Manager CS4 Adobe WinSoft Linguistics Plugin Adobe XMP Panels CS4 AdobeColorCommonSetCMYK AdobeColorCommonSetRGB Apple Software Update Artisteer 2 ATI - Software Uninstall Utility ATI AVIVO Codecs ATI Catalyst Control Center ATI Display Driver ATI Parental Control & Encoder AviSubtitler v2.02 BitComet 0.70 BS.Player PRO CamStudio OSS Desktop Recorder Canon Camera Access Library Canon Camera Support Core Library Canon Camera Window DC_DV 5 for ZoomBrowser EX Canon G.726 WMP-Decoder Canon MOV Decoder Canon MOV Encoder Canon MovieEdit Task for ZoomBrowser EX Canon RAW Image Task for ZoomBrowser EX Canon RemoteCapture Task for ZoomBrowser EX Canon Utilities CameraWindow DC 8 Canon Utilities CameraWindow Launcher Canon Utilities EOS Utility Canon Utilities Movie Uploader for YouTube Canon Utilities MyCamera Canon Utilities PhotoStitch Canon Utilities ZoomBrowser EX Canon ZoomBrowser EX Memory Card Utility Catalyst Control Center Core Implementation Catalyst Control Center Graphics Full Existing Catalyst Control Center Graphics Full New Catalyst Control Center Graphics Light Catalyst Control Center Graphics Previews Common ccc-core-preinstall ccc-core-static ccc-utility CCC Help English Compatibility Pack for the 2007 Office system Connect Corel WinDVD 2010 CorelDRAW Graphics Suite X4 CorelDRAW Graphics Suite X4 - Capture CorelDRAW Graphics Suite X4 - Content CorelDRAW Graphics Suite X4 - Draw CorelDRAW Graphics Suite X4 - Filters CorelDRAW Graphics Suite X4 - FontNav CorelDRAW Graphics SUite X4 - ICA CorelDRAW Graphics Suite X4 - IPM CorelDRAW Graphics Suite X4 - Lang EN CorelDRAW Graphics Suite X4 - PP CorelDRAW Graphics Suite X4 - VBA CorelDRAW® Graphics Suite X4 CorelDRAW® Graphics Suite X4 - Windows Shell Extension DVD Decrypter (Remove Only) Envisioneer 4.5 Express FileZilla Client 3.2.0 FlashGet 1.8.2.1001 Foxit PDF Editor Garmin USB Drivers Garmin WebUpdater Google Земя Google Chrome Google Update Helper High Definition Audio Driver Package - KB888111 Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB926239) Hotfix for Windows XP (KB952287) Intel® Graphics Media Accelerator Driver ItaEst - Taka e! Japanese Fonts Support For Adobe Reader 8 Java Auto Updater Java 6 Update 2 Java 6 Update 3 Java 6 Update 32 Java 6 Update 5 Java 6 Update 7 JMB36X Raid Configurer K-Lite Codec Pack 3.7.0 Standard KOMPAS-3D BG V10 LT kuler Logitech QuickCam Logitech QuickCam Driver Package Logitech Updater Macromedia Dreamweaver 8 Macromedia Extension Manager Macromedia Fireworks 8 Macromedia Flash 8 Macromedia Flash 8 Video Encoder Microsoft .NET Framework 2.0 Service Pack 1 Microsoft .NET Framework 3.0 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 Microsoft Office Professional Edition 2003 Microsoft User-Mode Driver Framework Feature Pack 1.7 Microsoft VC90 CRT + OMP Microsoft Visual C++ 2005 Redistributable MiKTeX 2.7 MiraScan V5.01 MobTime Cell Phone Manager 2007 V6.3.1 Mozilla Firefox 14.0.1 (x86 en-US) Mozilla Maintenance Service MSVC80_x86_v2 MSVC90_x86 MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) MSXML 6 Service Pack 2 (KB954459) Nero 6 Ultra Edition NOD32 antivirus system NOD32 FiX v1.9 Nokia Connectivity Cable Driver Nokia Ovi Suite Nokia Ovi Suite Software Updater Notepad++ Ovi Desktop Sync Engine OviMPlatform Pamela PCR Pro 4.5 PC Connectivity Solution PC Probe II PDF Settings CS4 PDF24 Creator 3.2.0 Photoshop Camera Raw Picasa 3 QuickTime REALTEK GbE & FE Ethernet PCI-E NIC Driver Riva FLV Encoder 2.0 SA Dictionary 2004 Datacenter SA Dictionary 2005 T2 Safari SAMSUNG Mobile Composite Device Software Samsung Mobile Modem Device Software SAMSUNG Mobile Modem Driver Set Samsung Mobile phone USB driver Software SAMSUNG Mobile USB Modem 1.0 Software SAMSUNG Mobile USB Modem Software Samsung New PC Studio SAMSUNG USB Mobile Device Software SamsungConnectivityCableDriver Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows Media Player 9 (KB917734) Security Update for Windows Media Player 9 (KB936782) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917422) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918118) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921503) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB923694) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924191) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924667) Security Update for Windows XP (KB925902) Security Update for Windows XP (KB926247) Security Update for Windows XP (KB926255) Security Update for Windows XP (KB926436) Security Update for Windows XP (KB927779) Security Update for Windows XP (KB927802) Security Update for Windows XP (KB928090) Security Update for Windows XP (KB928255) Security Update for Windows XP (KB928843) Security Update for Windows XP (KB929123) Security Update for Windows XP (KB929969) Security Update for Windows XP (KB930178) Security Update for Windows XP (KB931261) Security Update for Windows XP (KB931768) Security Update for Windows XP (KB931784) Security Update for Windows XP (KB932168) Security Update for Windows XP (KB933566) Security Update for Windows XP (KB933729) Security Update for Windows XP (KB935839) Security Update for Windows XP (KB935840) Security Update for Windows XP (KB936021) Security Update for Windows XP (KB937143) Security Update for Windows XP (KB937894) Security Update for Windows XP (KB938127) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB938829) Security Update for Windows XP (KB939653) Security Update for Windows XP (KB941202) Security Update for Windows XP (KB941568) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB941644) Security Update for Windows XP (KB941693) Security Update for Windows XP (KB942615) Security Update for Windows XP (KB943055) Security Update for Windows XP (KB943460) Security Update for Windows XP (KB943485) Security Update for Windows XP (KB944338) Security Update for Windows XP (KB944533) Security Update for Windows XP (KB944653) Security Update for Windows XP (KB945553) Security Update for Windows XP (KB946026) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB947864) Security Update for Windows XP (KB948590) Security Update for Windows XP (KB948881) Security Update for Windows XP (KB950749) Security Update for Windows XP (KB950759) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953838) Security Update for Windows XP (KB953839) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954600) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956390) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB957095) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958215) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958687) Security Update for Windows XP (KB958690) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960225) Security Update for Windows XP (KB960714) Security Update for Windows XP (KB960715) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB961373) Security Update for Windows XP (KB963027) Skins Skype™ 5.3 Sony Ericsson Themes Creator 3.17 Sony Ericsson Update Engine Sony PC Companion 2.10.065 SoundMAX Spybot - Search & Destroy Suite Shared Configuration CS4 SUPER © Version 2010.bld.42 (Nov 7, 2010) TeXnicCenter Version 1 Beta 7.01 (Greengrass) Total Commander (Remove or Repair) Update for Windows XP (KB894391) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB908531) Update for Windows XP (KB910437) Update for Windows XP (KB911280) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) Update for Windows XP (KB927891) Update for Windows XP (KB930916) Update for Windows XP (KB931836) Update for Windows XP (KB933360) Update for Windows XP (KB936357) Update for Windows XP (KB938828) Update for Windows XP (KB942763) Update for Windows XP (KB942840) Update for Windows XP (KB946627) Update for Windows XP (KB951072-v2) Update for Windows XP (KB955839) Update for Windows XP (KB967715) USB to UART Driver Visual Basic for Applications ® Core Visual Basic for Applications ® Core - English VLC media player 1.0.3 WebFldrs XP WinAce Archiver Winamp (remove only) WinAVI Video Converter Windows Communication Foundation Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0) Windows Driver Package - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0) Windows Driver Package - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0) Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0) Windows Imaging Component Windows Installer 3.1 (KB893803) Windows Media Format 11 runtime Windows Presentation Foundation Windows Workflow Foundation Windows XP Hotfix - KB873339 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB891781 WinEdt WinRAR archiver WinTopo Raster to Vector Workrave 1.8.5 XML Paper Specification Shared Components Pack 1.0 . ==== Event Viewer Messages From Past Week ======== . 08.8.2012 г. 13:32:12, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AsIO Fips intelppm nod32drv 08.8.2012 г. 13:31:04, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} 08.8.2012 г. 13:29:20, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} 08.8.2012 г. 13:28:43, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} 08.8.2012 г. 13:28:41, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E} 08.8.2012 г. 13:00:32, error: Service Control Manager [7034] - The WMDM PMSP Service service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 13:00:32, error: Service Control Manager [7034] - The SNMP Service service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 13:00:32, error: Service Control Manager [7034] - The Process Monitor service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 13:00:32, error: Service Control Manager [7034] - The ATI Smart service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 13:00:32, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 13:00:32, error: Service Control Manager [7031] - The NOD32 Kernel Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 08.8.2012 г. 13:00:32, error: Service Control Manager [7022] - The NOD32 Kernel Service service hung on starting. 08.8.2012 г. 13:00:16, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Java Quick Starter service to connect. 08.8.2012 г. 13:00:16, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the FsUsbExService service to connect. 08.8.2012 г. 13:00:16, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Услуга Google Update (gupdate) service to connect. 08.8.2012 г. 13:00:16, error: Service Control Manager [7000] - The Protexis Licensing V2 service failed to start due to the following error: The pipe has been ended. 08.8.2012 г. 13:00:16, error: Service Control Manager [7000] - The LVCOMSer service failed to start due to the following error: The pipe state is invalid. 08.8.2012 г. 13:00:16, error: Service Control Manager [7000] - The Java Quick Starter service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 13:00:16, error: Service Control Manager [7000] - The FsUsbExService service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 13:00:16, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. 08.8.2012 г. 13:00:16, error: Service Control Manager [7000] - The Услуга Google Update (gupdate) service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:47:51, error: Service Control Manager [7034] - The WMDM PMSP Service service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:47:51, error: Service Control Manager [7034] - The SNMP Service service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:47:51, error: Service Control Manager [7034] - The Protexis Licensing V2 service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:47:51, error: Service Control Manager [7034] - The Process Monitor service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:47:51, error: Service Control Manager [7034] - The LVCOMSer service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:47:51, error: Service Control Manager [7034] - The ATI Smart service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:47:51, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:47:51, error: Service Control Manager [7031] - The NOD32 Kernel Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 08.8.2012 г. 12:47:50, error: Service Control Manager [7022] - The NOD32 Kernel Service service hung on starting. 08.8.2012 г. 12:47:49, error: Service Control Manager [7022] - The ATI Smart service hung on starting. 08.8.2012 г. 12:47:38, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Java Quick Starter service to connect. 08.8.2012 г. 12:47:38, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the FsUsbExService service to connect. 08.8.2012 г. 12:47:38, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Услуга Google Update (gupdate) service to connect. 08.8.2012 г. 12:47:38, error: Service Control Manager [7000] - The Java Quick Starter service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:47:38, error: Service Control Manager [7000] - The FsUsbExService service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:47:38, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. 08.8.2012 г. 12:47:38, error: Service Control Manager [7000] - The Услуга Google Update (gupdate) service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:42:06, error: Service Control Manager [7034] - The LVCOMSer service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:42:06, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:42:06, error: Service Control Manager [7034] - The ATI Smart service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:42:06, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:42:05, error: Service Control Manager [7022] - The LVCOMSer service hung on starting. 08.8.2012 г. 12:42:05, error: Service Control Manager [7022] - The Java Quick Starter service hung on starting. 08.8.2012 г. 12:41:48, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Process Monitor service to connect. 08.8.2012 г. 12:41:48, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the FsUsbExService service to connect. 08.8.2012 г. 12:41:48, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Услуга Google Update (gupdate) service to connect. 08.8.2012 г. 12:41:48, error: Service Control Manager [7000] - The Process Monitor service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:41:48, error: Service Control Manager [7000] - The FsUsbExService service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:41:48, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. 08.8.2012 г. 12:41:48, error: Service Control Manager [7000] - The Услуга Google Update (gupdate) service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:39:15, error: Service Control Manager [7034] - The LVCOMSer service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:39:15, error: Service Control Manager [7034] - The ATI Smart service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:39:15, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s). 08.8.2012 г. 12:39:15, error: Service Control Manager [7031] - The NOD32 Kernel Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 08.8.2012 г. 12:39:14, error: Service Control Manager [7022] - The NOD32 Kernel Service service hung on starting. 08.8.2012 г. 12:39:13, error: Service Control Manager [7022] - The LVCOMSer service hung on starting. 08.8.2012 г. 12:38:48, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the WMDM PMSP Service service to connect. 08.8.2012 г. 12:38:48, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the SNMP Service service to connect. 08.8.2012 г. 12:38:48, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Protexis Licensing V2 service to connect. 08.8.2012 г. 12:38:48, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Process Monitor service to connect. 08.8.2012 г. 12:38:48, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Java Quick Starter service to connect. 08.8.2012 г. 12:38:48, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the FsUsbExService service to connect. 08.8.2012 г. 12:38:48, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Услуга Google Update (gupdate) service to connect. 08.8.2012 г. 12:38:48, error: Service Control Manager [7000] - The WMDM PMSP Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:38:48, error: Service Control Manager [7000] - The SNMP Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:38:48, error: Service Control Manager [7000] - The Protexis Licensing V2 service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:38:48, error: Service Control Manager [7000] - The Process Monitor service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:38:48, error: Service Control Manager [7000] - The Java Quick Starter service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:38:48, error: Service Control Manager [7000] - The FsUsbExService service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.8.2012 г. 12:38:48, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. 08.8.2012 г. 12:38:48, error: Service Control Manager [7000] - The Услуга Google Update (gupdate) service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 07.8.2012 г. 21:35:45, error: Service Control Manager [7034] - The WMDM PMSP Service service terminated unexpectedly. It has done this 1 time(s). 07.8.2012 г. 21:35:45, error: Service Control Manager [7034] - The SNMP Service service terminated unexpectedly. It has done this 1 time(s). 07.8.2012 г. 21:35:45, error: Service Control Manager [7034] - The Protexis Licensing V2 service terminated unexpectedly. It has done this 1 time(s). 07.8.2012 г. 21:35:45, error: Service Control Manager [7034] - The Process Monitor service terminated unexpectedly. It has done this 1 time(s). 07.8.2012 г. 21:35:45, error: Service Control Manager [7034] - The LVCOMSer service terminated unexpectedly. It has done this 1 time(s). 07.8.2012 г. 21:35:45, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s). 07.8.2012 г. 21:35:45, error: Service Control Manager [7034] - The FsUsbExService service terminated unexpectedly. It has done this 1 time(s). 07.8.2012 г. 21:35:45, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s). 07.8.2012 г. 21:35:45, error: Service Control Manager [7031] - The NOD32 Kernel Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 07.8.2012 г. 21:35:45, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the NOD32 Kernel Service service to connect. 07.8.2012 г. 21:35:45, error: Service Control Manager [7000] - The NOD32 Kernel Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 07.8.2012 г. 18:03:23, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. 07.8.2012 г. 09:52:53, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. 06.8.2012 г. 09:52:44, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. 05.8.2012 г. 11:41:20, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. 04.8.2012 г. 10:15:32, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. 03.8.2012 г. 09:59:13, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. 02.8.2012 г. 11:27:12, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. 01.8.2012 г. 14:08:10, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. 01.8.2012 г. 10:24:16, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The system cannot find the file specified. . ==== End Of File ===========================

Здравейте..и добре дошли в нашия раздел ! :)

Стъпка 1:

Стартирайте RKill Download Link - (Страница за изтегляне ще се отвори в нов таб или прозорец на браузъра.) Изтеглете iExplore.exe Download Link и го запазете на вашия десктоп.Стартирате програмата с двоен клик.С тази програма ще се опитаме да спрем всички процеси на защитния ви софтуер - временно(включително и на

фалшивата анти-спайуер програма )

.Кликнете два пъти върху иконката и чакате търпеливо.Ако антивирусната ви засече RKill като инфекция не трябва да се притеснявате..нормално е .Това е фалшив сигнал.

Едно условие имаме само - не рестартирайте компютъра си защото спрените процеси ще стартират

Стъпка 2:

Публикувано изображение Изтеглете Malwarebytes' Anti-Malware или от тук

* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.

* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.

* Ако има намерени обновявания, тя ще ги изтегли и инсталира.

* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.

* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.

* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.

* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.

* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. Копирайте този лог и го публикувайте в следващия си коментар по темата.

Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

Стъпка 3:

Публикувано изображение Моля, изтеглете последната версия на TDSSKiller - оттук и я запазете на вашия декстоп.

  • Стартирайте TDSSKiller.exe за да стартирате приложението. След това кликнете върху бутона Change parameters.

    Публикувано изображение

  • Сложете отметки пред Verify Driver Digital Signature и Detect TDLFS file system и натиснете ОК.

    Публикувано изображение

  • Натиснете бутона Start Scan.

    Публикувано изображение

  • Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.

    Публикувано изображение

  • Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.

    Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue > Рестартирайте за да бъде завършена поправката.

    Публикувано изображение

    Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова.

  • Лог файл ще бъде създаден в свободната директория на дял C: . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.
Само да добавя че е възможно Rogue да не позволи да изтеглите препоръчания софтуер ....В този случай изтеглете първите две програми на друг компютър и после ги прехвърлете на заразената машина чрез CD / DVD, външен диск или USB флаш устройство.

Другия вариант при тази ситуация е да опитате да изтеглите програмите като преминете в

Safe Mode with Networking.

  • Автор

Направих стъпка 1, 2 и 3. При стъпка 2 при стартирането й излезе съобщение, че не може да работи под Save mode, но после се стартира ъпдейта и всичко беше ОК. Наложи се рестарт. Преди стъпка 3 пак се върнах в Save mode Това е лог файла, който генерира: Malwarebytes Anti-Malware (Trial) 1.62.0.1300 www.malwarebytes.org Database version: v2012.08.08.06 Windows XP Service Pack 2 x86 NTFS (Safe Mode/Networking) Internet Explorer 6.0.2900.2180 Administrator :: USER-95E143934E [administrator] Protection: Disabled 08.8.2012 г. 16:17:32 mbam-log-2012-08-08 (16-17-32).txt Scan type: Full scan (C:|D:|E:|) Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 512367 Time elapsed: 40 minute(s), 53 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 1 HKLMSOFTWAREMicrosoftMultimediaWMPlayerSchemesf3pss (PUP.MyWebSearch) -> Quarantined and deleted successfully. Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 2 C:Documents and Settingsuser.USER-95E143934EStart MenuProgramsLive Security Platinum (Rogue.LiveSecurityPlatinum) -> Quarantined and deleted successfully. C:Recycle.Bin (Trojan.Spyeyes) -> Quarantined and deleted successfully. Files Detected: 10 C:Documents and SettingsAll Users.WINDOWSApplication Data036DFF59000D2207B56F8D5CE56C3425036DFF59000D2207B56F8D5CE56C3425.exe (Trojan.LameShield) -> Quarantined and deleted successfully. C:Documents and SettingsuserDesktopWinRAR 3.51 Final+crackWinRAR 3.51 Final+crackWinRAR 3.51 Final+crackWinRAR Patch.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully. C:Recycle.BinB6232F3AB48.exe (Spyware.Zeus) -> Quarantined and deleted successfully. D:keygen.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully. D:Adobe ILLUSTRATORCRACKKEYGEN.EXE (PUP.RiskwareTool.CK) -> Quarantined and deleted successfully. D:Program FilesArtisteer 2binloader_15338.exe (Trojan.Agent) -> Quarantined and deleted successfully. E:My Documentsfun picsSnow by Otcata.exe (Trojan.Downloader) -> Quarantined and deleted successfully. C:Documents and Settingsuser.USER-95E143934EDesktopLive Security Platinum.lnk (Rogue.LiveSecurityPlatinum) -> Quarantined and deleted successfully. C:Documents and Settingsuser.USER-95E143934EStart MenuProgramsLive Security PlatinumLive Security Platinum.lnk (Rogue.LiveSecurityPlatinum) -> Quarantined and deleted successfully. C:Recycle.BinAD5C38722846D7B (Trojan.Spyeyes) -> Quarantined and deleted successfully. (end) При стъпка 3 всичко беше ок, докато не показа файловете, които е намерил. Липсва опция Cure, както и опция Continue. Опциите са Skip, Delete и Copy to quarantine. Дали да натисна последната? Отгоре на прозореца има бутони Copy all to quarantine и Restore default actions. Може би бутона Restore default actions? Сега погледнах пак какво сте писали и оставих Skip. Не излиза съобщение за рестарт, а бутон за стартиране на скан. Ето лог файла 17:14:59.0750 1172 TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32 17:14:59.0906 1172 ============================================================ 17:14:59.0906 1172 Current date / time: 2012/08/08 17:14:59.0906 17:14:59.0906 1172 SystemInfo: 17:14:59.0906 1172 17:14:59.0906 1172 OS Version: 5.1.2600 ServicePack: 2.0 17:14:59.0906 1172 Product type: Workstation 17:14:59.0906 1172 ComputerName: USER-95E143934E 17:14:59.0906 1172 UserName: Administrator 17:14:59.0906 1172 Windows directory: C:WINDOWS 17:14:59.0906 1172 System windows directory: C:WINDOWS 17:14:59.0906 1172 Processor architecture: Intel x86 17:14:59.0906 1172 Number of processors: 2 17:14:59.0906 1172 Page size: 0x1000 17:14:59.0906 1172 Boot type: Safe boot with network 17:14:59.0906 1172 ============================================================ 17:15:02.0437 1172 Drive DeviceHarddisk0DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054 17:15:02.0437 1172 ============================================================ 17:15:02.0437 1172 DeviceHarddisk0DR0: 17:15:02.0437 1172 MBR partitions: 17:15:02.0437 1172 DeviceHarddisk0DR0Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x2711637 17:15:02.0453 1172 DeviceHarddisk0DR0Partition1: MBR, Type 0x7, StartLBA 0x27116B5, BlocksNum 0x819930C 17:15:02.0468 1172 DeviceHarddisk0DR0Partition2: MBR, Type 0x7, StartLBA 0xA8AAA00, BlocksNum 0x816E0C1 17:15:02.0468 1172 ============================================================ 17:15:02.0484 1172 C: <-> DeviceHarddisk0DR0Partition0 17:15:02.0515 1172 D: <-> DeviceHarddisk0DR0Partition1 17:15:02.0578 1172 E: <-> DeviceHarddisk0DR0Partition2 17:15:02.0625 1172 ============================================================ 17:15:02.0625 1172 Initialize success 17:15:02.0625 1172 ============================================================ 17:15:32.0328 1216 ============================================================ 17:15:32.0328 1216 Scan started 17:15:32.0328 1216 Mode: Manual; SigCheck; TDLFS; 17:15:32.0328 1216 ============================================================ 17:15:32.0984 1216 Abiosdsk - ok 17:15:33.0000 1216 abp480n5 - ok 17:15:33.0031 1216 ACPI (a10c7534f7223f4a73a948967d00e69b) C:WINDOWSsystem32DRIVERSACPI.sys 17:15:34.0578 1216 ACPI - ok 17:15:34.0609 1216 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:WINDOWSsystem32driversACPIEC.sys 17:15:34.0734 1216 ACPIEC - ok 17:15:34.0765 1216 ADIHdAudAddService (ab0d9669bab1009e48cc91117e59912b) C:WINDOWSsystem32driversADIHdAud.sys 17:15:34.0812 1216 ADIHdAudAddService - ok 17:15:34.0875 1216 Adobe LM Service (8b46d5a1d3ef08232c04d0eafb871fb2) C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe 17:15:34.0890 1216 Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning 17:15:34.0890 1216 Adobe LM Service - detected UnsignedFile.Multi.Generic (1) 17:15:34.0968 1216 AdobeFlashPlayerUpdateSvc (f19c98ad81d2c0e1bbfd8153d2c80ee8) C:WINDOWSsystem32MacromedFlashFlashPlayerUpdateService.exe 17:15:35.0000 1216 AdobeFlashPlayerUpdateSvc ( UnsignedFile.Multi.Generic ) - warning 17:15:35.0000 1216 AdobeFlashPlayerUpdateSvc - detected UnsignedFile.Multi.Generic (1) 17:15:35.0015 1216 adpu160m - ok 17:15:35.0046 1216 AEAudio (03be587e90c8b37c7ff1fe2e9c1d1c90) C:WINDOWSsystem32driversAEAudio.sys 17:15:35.0062 1216 AEAudio - ok 17:15:35.0093 1216 aec (1ee7b434ba961ef845de136224c30fec) C:WINDOWSsystem32driversaec.sys 17:15:35.0390 1216 aec - ok 17:15:35.0421 1216 AFD (55e6e1c51b6d30e54335750955453702) C:WINDOWSSystem32driversafd.sys 17:15:35.0468 1216 AFD - ok 17:15:35.0468 1216 Aha154x - ok 17:15:35.0484 1216 aic78u2 - ok 17:15:35.0500 1216 aic78xx - ok 17:15:35.0531 1216 Alerter (c7ae0fd3867db0d42b03b73c18f3d671) C:WINDOWSsystem32alrsvc.dll 17:15:35.0640 1216 Alerter - ok 17:15:35.0656 1216 ALG (f1958fbf86d5c004cf19a5951a9514b7) C:WINDOWSSystem32alg.exe 17:15:35.0718 1216 ALG - ok 17:15:35.0718 1216 AliIde - ok 17:15:35.0781 1216 AMON (98ecca556d67deba604a4b4b1fdb02b8) C:WINDOWSsystem32driversamon.sys 17:15:35.0812 1216 AMON - ok 17:15:35.0828 1216 amsint - ok 17:15:35.0859 1216 AppMgmt (9c3c12975c97119412802b181fbeeffe) C:WINDOWSSystem32appmgmts.dll 17:15:35.0921 1216 AppMgmt - ok 17:15:35.0953 1216 Arp1394 (f0d692b0bffb46e30eb3cea168bbc49f) C:WINDOWSsystem32DRIVERSarp1394.sys 17:15:36.0062 1216 Arp1394 - ok 17:15:36.0062 1216 asc - ok 17:15:36.0078 1216 asc3350p - ok 17:15:36.0093 1216 asc3550 - ok 17:15:36.0156 1216 AsIO (19a1dac5bc607c212e8a94c05886ed52) C:WINDOWSsystem32driversAsIO.sys 17:15:36.0156 1216 AsIO ( UnsignedFile.Multi.Generic ) - warning 17:15:36.0156 1216 AsIO - detected UnsignedFile.Multi.Generic (1) 17:15:36.0218 1216 Aspi32 (ed8cee58c1e4c5893f5b2fd686a272bf) C:WINDOWSsystem32driversAspi32.sys 17:15:36.0234 1216 Aspi32 ( UnsignedFile.Multi.Generic ) - warning 17:15:36.0234 1216 Aspi32 - detected UnsignedFile.Multi.Generic (1) 17:15:36.0281 1216 aspnet_state (4eabf511b1af176a971c3271e48fa3a8) C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe 17:15:36.0312 1216 aspnet_state - ok 17:15:36.0343 1216 AsyncMac (02000abf34af4c218c35d257024807d6) C:WINDOWSsystem32DRIVERSasyncmac.sys 17:15:36.0453 1216 AsyncMac - ok 17:15:36.0484 1216 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:WINDOWSsystem32DRIVERSatapi.sys 17:15:36.0578 1216 atapi - ok 17:15:36.0593 1216 Atdisk - ok 17:15:36.0640 1216 Ati HotKey Poller (c49a64d70dd96f1a511f2d2badfb924f) C:WINDOWSsystem32Ati2evxx.exe 17:15:36.0718 1216 Ati HotKey Poller - ok 17:15:36.0781 1216 ATI Smart (fdc4b0d5e8d477c75d962f395c3a25f0) C:WINDOWSsystem32ati2sgag.exe 17:15:36.0812 1216 ATI Smart ( UnsignedFile.Multi.Generic ) - warning 17:15:36.0812 1216 ATI Smart - detected UnsignedFile.Multi.Generic (1) 17:15:36.0937 1216 ati2mtag (4f1d98c5faa232d89f479aa2f6ef4196) C:WINDOWSsystem32DRIVERSati2mtag.sys 17:15:37.0171 1216 ati2mtag - ok 17:15:37.0281 1216 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:WINDOWSsystem32DRIVERSatmarpc.sys 17:15:37.0375 1216 Atmarpc - ok 17:15:37.0406 1216 AudioSrv (db66db626e4882ebef55f136f12c1829) C:WINDOWSSystem32audiosrv.dll 17:15:37.0515 1216 AudioSrv - ok 17:15:37.0531 1216 audstub (d9f724aa26c010a217c97606b160ed68) C:WINDOWSsystem32DRIVERSaudstub.sys 17:15:37.0640 1216 audstub - ok 17:15:37.0687 1216 Beep (da1f27d85e0d1525f6621372e7b685e9) C:WINDOWSsystem32driversBeep.sys 17:15:37.0781 1216 Beep - ok 17:15:37.0812 1216 BITS (2c69ec7e5a311334d10dd95f338fccea) C:WINDOWSsystem32qmgr.dll 17:15:37.0937 1216 BITS - ok 17:15:37.0968 1216 Browser (e3cfccdda4edd1d0dc9168b2e18f27b8) C:WINDOWSSystem32browser.dll 17:15:38.0078 1216 Browser - ok 17:15:38.0093 1216 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:WINDOWSsystem32driverscbidf2k.sys 17:15:38.0187 1216 cbidf2k - ok 17:15:38.0218 1216 CCALib8 - ok 17:15:38.0250 1216 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:WINDOWSsystem32DRIVERSCCDECODE.sys 17:15:38.0359 1216 CCDECODE - ok 17:15:38.0359 1216 cd20xrnt - ok 17:15:38.0390 1216 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:WINDOWSsystem32driversCdaudio.sys 17:15:38.0484 1216 Cdaudio - ok 17:15:38.0515 1216 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:WINDOWSsystem32driversCdfs.sys 17:15:38.0609 1216 Cdfs - ok 17:15:38.0640 1216 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:WINDOWSsystem32DRIVERScdrom.sys 17:15:38.0734 1216 Cdrom - ok 17:15:38.0750 1216 Changer - ok 17:15:38.0765 1216 CiSvc (3192bd04d032a9c4a85a3278c268a13a) C:WINDOWSsystem32cisvc.exe 17:15:38.0875 1216 CiSvc - ok 17:15:38.0906 1216 ClipSrv (c8dec22c4137d7a90f8bdf41ca4b82ae) C:WINDOWSsystem32clipsrv.exe 17:15:39.0015 1216 ClipSrv - ok 17:15:39.0078 1216 clr_optimization_v2.0.50727_32 (234b1bc2796483e1f5c3f26649fb3388) C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe 17:15:39.0109 1216 clr_optimization_v2.0.50727_32 - ok 17:15:39.0125 1216 CmdIde - ok 17:15:39.0140 1216 COMSysApp - ok 17:15:39.0171 1216 Cpqarray - ok 17:15:39.0203 1216 CryptSvc (10654f9ddcea9c46cfb77554231be73b) C:WINDOWSSystem32cryptsvc.dll 17:15:39.0296 1216 CryptSvc - ok 17:15:39.0312 1216 dac2w2k - ok 17:15:39.0328 1216 dac960nt - ok 17:15:39.0375 1216 DcomLaunch (01095febf33beea00c2a0730b9b3ec28) C:WINDOWSsystem32rpcss.dll 17:15:39.0437 1216 DcomLaunch - ok 17:15:39.0484 1216 Dhcp (ef545e1a4b043da4c84e230dd471c55f) C:WINDOWSSystem32dhcpcsvc.dll 17:15:39.0796 1216 Dhcp - ok 17:15:39.0828 1216 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:WINDOWSsystem32DRIVERSdisk.sys 17:15:39.0921 1216 Disk - ok 17:15:39.0937 1216 dmadmin - ok 17:15:39.0984 1216 dmboot (c0fbb516e06e243f0cf31f597e7ebf7d) C:WINDOWSsystem32driversdmboot.sys 17:15:40.0109 1216 dmboot - ok 17:15:40.0140 1216 dmio (f5e7b358a732d09f4bcf2824b88b9e28) C:WINDOWSsystem32driversdmio.sys 17:15:40.0250 1216 dmio - ok 17:15:40.0265 1216 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:WINDOWSsystem32driversdmload.sys 17:15:40.0375 1216 dmload - ok 17:15:40.0390 1216 dmserver (1639d9964c9e1b2ecca95c8217d3e70d) C:WINDOWSSystem32dmserver.dll 17:15:40.0484 1216 dmserver - ok 17:15:40.0500 1216 DMusic (a6f881284ac1150e37d9ae47ff601267) C:WINDOWSsystem32driversDMusic.sys 17:15:40.0609 1216 DMusic - ok 17:15:40.0640 1216 Dnscache (aac8ffbfd61e784fa3bac851d4a0bd5f) C:WINDOWSSystem32dnsrslvr.dll 17:15:40.0953 1216 Dnscache - ok 17:15:40.0968 1216 dpti2o - ok 17:15:41.0000 1216 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:WINDOWSsystem32driversdrmkaud.sys 17:15:41.0093 1216 drmkaud - ok 17:15:41.0125 1216 ERSvc (67dff7bbbd0e80aab7b3cf061448db8a) C:WINDOWSSystem32ersvc.dll 17:15:41.0218 1216 ERSvc - ok 17:15:41.0250 1216 Eventlog (37561f8d4160d62da86d24ae41fae8de) C:WINDOWSsystem32services.exe 17:15:41.0312 1216 Eventlog - ok 17:15:41.0343 1216 EventSystem (60d1a6342238378bfb7545c81ee3606c) C:WINDOWSsystem32es.dll 17:15:41.0375 1216 EventSystem - ok 17:15:41.0406 1216 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:WINDOWSsystem32driversFastfat.sys 17:15:41.0515 1216 Fastfat - ok 17:15:41.0546 1216 FastUserSwitchingCompatibility (6815def9b810aefac107eeaf72da6f82) C:WINDOWSSystem32shsvcs.dll 17:15:41.0859 1216 FastUserSwitchingCompatibility - ok 17:15:41.0875 1216 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:WINDOWSsystem32DRIVERSfdc.sys 17:15:41.0984 1216 Fdc - ok 17:15:42.0015 1216 FilterService (50104c5f1ee1e295781caf9521ca2e56) C:WINDOWSsystem32DRIVERSlvuvcflt.sys 17:15:42.0015 1216 FilterService - ok 17:15:42.0046 1216 Fips (e153ab8a11de5452bcf5ac7652dbf3ed) C:WINDOWSsystem32driversFips.sys 17:15:42.0140 1216 Fips - ok 17:15:42.0203 1216 FLEXnet Licensing Service (1f63900e2eb00101b9aca2b7a870704e) C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe 17:15:42.0250 1216 FLEXnet Licensing Service - ok 17:15:42.0281 1216 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:WINDOWSsystem32DRIVERSflpydisk.sys 17:15:42.0375 1216 Flpydisk - ok 17:15:42.0406 1216 FltMgr (3d234fb6d6ee875eb009864a299bea29) C:WINDOWSsystem32DRIVERSfltMgr.sys 17:15:42.0718 1216 FltMgr - ok 17:15:42.0796 1216 FontCache3.0.0.0 (facecf3f75baf3775a879d1168402270) C:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe 17:15:42.0812 1216 FontCache3.0.0.0 - ok 17:15:42.0859 1216 FsUsbExDisk (790a4ca68f44be35967b3df61f3e4675) C:WINDOWSsystem32FsUsbExDisk.SYS 17:15:42.0875 1216 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - warning 17:15:42.0875 1216 FsUsbExDisk - detected UnsignedFile.Multi.Generic (1) 17:15:42.0921 1216 FsUsbExService (d3f9205cc4cb07553f2f9472c767ea87) C:WINDOWSsystem32FsUsbExService.Exe 17:15:42.0937 1216 FsUsbExService ( UnsignedFile.Multi.Generic ) - warning 17:15:42.0937 1216 FsUsbExService - detected UnsignedFile.Multi.Generic (1) 17:15:42.0968 1216 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:WINDOWSsystem32driversFs_Rec.sys 17:15:43.0062 1216 Fs_Rec - ok 17:15:43.0078 1216 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:WINDOWSsystem32DRIVERSftdisk.sys 17:15:43.0187 1216 Ftdisk - ok 17:15:43.0218 1216 ggflt (007aea2e06e7cef7372e40c277163959) C:WINDOWSsystem32DRIVERSggflt.sys 17:15:43.0218 1216 ggflt - ok 17:15:43.0250 1216 ggsemc (c73de35960ca75c5ab4ae636b127c64e) C:WINDOWSsystem32DRIVERSggsemc.sys 17:15:43.0250 1216 ggsemc - ok 17:15:43.0265 1216 Gpc (c0f1d4a21de5a415df8170616703debf) C:WINDOWSsystem32DRIVERSmsgpc.sys 17:15:43.0359 1216 Gpc - ok 17:15:43.0437 1216 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:Program FilesGoogleUpdateGoogleUpdate.exe 17:15:43.0453 1216 gupdate - ok 17:15:43.0468 1216 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:Program FilesGoogleUpdateGoogleUpdate.exe 17:15:43.0484 1216 gupdatem - ok 17:15:43.0531 1216 gusvc (c1b577b2169900f4cf7190c39f085794) C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe 17:15:43.0546 1216 gusvc - ok 17:15:43.0562 1216 HdAudAddService (56bf27d7a539f9e6bbc1de201aba0edf) C:WINDOWSsystem32driversAtiHdAud.sys 17:15:43.0593 1216 HdAudAddService - ok 17:15:43.0625 1216 HDAudBus (3fcc124b6e08ee0e9351f717dd136939) C:WINDOWSsystem32DRIVERSHDAudBus.sys 17:15:43.0671 1216 HDAudBus - ok 17:15:43.0703 1216 helpsvc (8827911a8c37e40c027cbfc88e69d967) C:WINDOWSPCHealthHelpCtrBinariespchsvc.dll 17:15:43.0812 1216 helpsvc - ok 17:15:43.0812 1216 HidServ - ok 17:15:43.0859 1216 HidUsb (1de6783b918f540149aa69943bdfeba8) C:WINDOWSsystem32DRIVERShidusb.sys 17:15:43.0953 1216 HidUsb - ok 17:15:43.0968 1216 hpn - ok 17:15:44.0000 1216 HTTP (cb77bb47e67e84deb17ba29632501730) C:WINDOWSsystem32DriversHTTP.sys 17:15:44.0343 1216 HTTP - ok 17:15:44.0359 1216 HTTPFilter (064d8581adf77c25133e7d751d917d83) C:WINDOWSSystem32w3ssl.dll 17:15:44.0453 1216 HTTPFilter - ok 17:15:44.0453 1216 i2omgmt - ok 17:15:44.0468 1216 i2omp - ok 17:15:44.0500 1216 i8042prt (5502b58eef7486ee6f93f3f164dcb808) C:WINDOWSsystem32DRIVERSi8042prt.sys 17:15:44.0609 1216 i8042prt - ok 17:15:44.0671 1216 ialm (85d42b7f0dd406adf5e3ec7659a279ec) C:WINDOWSsystem32DRIVERSigxpmp32.sys 17:15:44.0750 1216 ialm - ok 17:15:44.0859 1216 idsvc (ea7267505149b3a10df32506a4e4e412) C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe 17:15:44.0906 1216 idsvc ( UnsignedFile.Multi.Generic ) - warning 17:15:44.0906 1216 idsvc - detected UnsignedFile.Multi.Generic (1) 17:15:44.0968 1216 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:WINDOWSsystem32DRIVERSimapi.sys 17:15:45.0062 1216 Imapi - ok 17:15:45.0093 1216 ImapiService (fa788520bcac0f5d9d5cde5615c0d931) C:WINDOWSsystem32imapi.exe 17:15:45.0203 1216 ImapiService - ok 17:15:45.0218 1216 ini910u - ok 17:15:45.0250 1216 IntelIde - ok 17:15:45.0265 1216 intelppm (279fb78702454dff2bb445f238c048d2) C:WINDOWSsystem32DRIVERSintelppm.sys 17:15:45.0359 1216 intelppm - ok 17:15:45.0375 1216 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:WINDOWSsystem32DRIVERSIp6Fw.sys 17:15:45.0468 1216 Ip6Fw - ok 17:15:45.0500 1216 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:WINDOWSsystem32DRIVERSipfltdrv.sys 17:15:45.0593 1216 IpFilterDriver - ok 17:15:45.0625 1216 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:WINDOWSsystem32DRIVERSipinip.sys 17:15:45.0718 1216 IpInIp - ok 17:15:45.0750 1216 IpNat (e2168cbc7098ffe963c6f23f472a3593) C:WINDOWSsystem32DRIVERSipnat.sys 17:15:46.0078 1216 IpNat - ok 17:15:46.0109 1216 IPSec (64537aa5c003a6afeee1df819062d0d1) C:WINDOWSsystem32DRIVERSipsec.sys 17:15:46.0203 1216 IPSec - ok 17:15:46.0234 1216 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:WINDOWSsystem32DRIVERSirenum.sys 17:15:46.0281 1216 IRENUM - ok 17:15:46.0312 1216 isapnp (e504f706ccb699c2596e9a3da1596e87) C:WINDOWSsystem32DRIVERSisapnp.sys 17:15:46.0406 1216 isapnp - ok 17:15:46.0515 1216 JavaQuickStarterService (a38441ed570f190cc041a7be49488fa7) C:Program FilesJavajre6binjqs.exe 17:15:46.0531 1216 JavaQuickStarterService - ok 17:15:46.0546 1216 JGOGO (c995c0e8b4503fac38793bb0236ad246) C:WINDOWSsystem32DRIVERSJGOGO.sys 17:15:46.0562 1216 JGOGO ( UnsignedFile.Multi.Generic ) - warning 17:15:46.0562 1216 JGOGO - detected UnsignedFile.Multi.Generic (1) 17:15:46.0578 1216 JRAID (cec10d44dc8de67d672e62b057fdae71) C:WINDOWSsystem32DRIVERSjraid.sys 17:15:46.0593 1216 JRAID ( UnsignedFile.Multi.Generic ) - warning 17:15:46.0593 1216 JRAID - detected UnsignedFile.Multi.Generic (1) 17:15:46.0625 1216 Kbdclass (ebdee8a2ee5393890a1acee971c4c246) C:WINDOWSsystem32DRIVERSkbdclass.sys 17:15:46.0718 1216 Kbdclass - ok 17:15:46.0750 1216 kmixer (ba5deda4d934e6288c2f66caf58d2562) C:WINDOWSsystem32driverskmixer.sys 17:15:47.0062 1216 kmixer - ok 17:15:47.0093 1216 KSecDD (eb7ffe87fd367ea8fca0506f74a87fbb) C:WINDOWSsystem32driversKSecDD.sys 17:15:47.0187 1216 KSecDD - ok 17:15:47.0218 1216 lanmanserver (0cb3af149a0bac0836022ca307c7a0f8) C:WINDOWSSystem32srvsvc.dll 17:15:47.0546 1216 lanmanserver - ok 17:15:47.0578 1216 lanmanworkstation (3cd291a2c4909088b3d1e98ded73d4b2) C:WINDOWSSystem32wkssvc.dll 17:15:47.0906 1216 lanmanworkstation - ok 17:15:47.0921 1216 lbrtfdc - ok 17:15:47.0953 1216 LmHosts (b3eff6d938c572e90a07b3d87a3c7657) C:WINDOWSSystem32lmhsvc.dll 17:15:48.0062 1216 LmHosts - ok 17:15:48.0125 1216 LVCOMSer (38440fe1a65b1fe3d246c5c4cad22f53) C:Program FilesCommon FilesLogiShrdLVCOMSERLVComSer.exe 17:15:48.0140 1216 LVCOMSer - ok 17:15:48.0187 1216 LVPr2Mon (a6919138f29ae45e90e99fa94737e04c) C:WINDOWSsystem32DRIVERSLVPr2Mon.sys 17:15:48.0187 1216 LVPr2Mon - ok 17:15:48.0218 1216 LVPrcSrv (28bd0e4b6c050b591b8cb35b9ad284e6) C:Program FilesCommon FilesLogiShrdLVMVFMLVPrcSrv.exe 17:15:48.0234 1216 LVPrcSrv - ok 17:15:48.0296 1216 LVRS (b895839b8743e400d7c7dae156f74e7e) C:WINDOWSsystem32DRIVERSlvrs.sys 17:15:48.0328 1216 LVRS - ok 17:15:48.0359 1216 LVUSBSta (23f8ef78bb9553e465a476f3cee5ca18) C:WINDOWSsystem32driversLVUSBSta.sys 17:15:48.0375 1216 LVUSBSta - ok 17:15:48.0546 1216 LVUVC (8bc0d5f6e3898f465a94c6d03afb5a20) C:WINDOWSsystem32DRIVERSlvuvc.sys 17:15:48.0968 1216 LVUVC - ok 17:15:49.0062 1216 MBAMProtector (6dfe7f2e8e8a337263aa5c92a215f161) C:WINDOWSsystem32driversmbam.sys 17:15:49.0078 1216 MBAMProtector - ok 17:15:49.0218 1216 MBAMService (43683e970f008c93c9429ef428147a54) C:Program FilesMalwarebytes' Anti-Malwarembamservice.exe 17:15:49.0312 1216 MBAMService - ok 17:15:49.0328 1216 Messenger (95fd808e4ac22aba025a7b3eac0375d2) C:WINDOWSSystem32msgsvc.dll 17:15:49.0437 1216 Messenger - ok 17:15:49.0468 1216 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:WINDOWSsystem32driversmnmdd.sys 17:15:49.0562 1216 mnmdd - ok 17:15:49.0593 1216 mnmsrvc (f6415361201915b9fe3896b0e4e724ff) C:WINDOWSsystem32mnmsrvc.exe 17:15:49.0687 1216 mnmsrvc - ok 17:15:49.0718 1216 Modem (6fc6f9d7acc36dca9b914565a3aeda05) C:WINDOWSsystem32driversModem.sys 17:15:49.0812 1216 Modem - ok 17:15:49.0843 1216 Mouclass (34e1f0031153e491910e12551400192c) C:WINDOWSsystem32DRIVERSmouclass.sys 17:15:49.0937 1216 Mouclass - ok 17:15:49.0968 1216 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:WINDOWSsystem32DRIVERSmouhid.sys 17:15:50.0062 1216 mouhid - ok 17:15:50.0093 1216 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:WINDOWSsystem32driversMountMgr.sys 17:15:50.0187 1216 MountMgr - ok 17:15:50.0250 1216 MozillaMaintenance (46297fa8e30a6007f14118fc2b942fbc) C:Program FilesMozilla Maintenance Servicemaintenanceservice.exe 17:15:50.0265 1216 MozillaMaintenance - ok 17:15:50.0281 1216 mraid35x - ok 17:15:50.0312 1216 MRxDAV (29414447eb5bde2f8397dc965dbb3156) C:WINDOWSsystem32DRIVERSmrxdav.sys 17:15:50.0640 1216 MRxDAV - ok 17:15:50.0671 1216 MRxSmb (6f2d483b97b395544e59749c47963c6a) C:WINDOWSsystem32DRIVERSmrxsmb.sys 17:15:50.0703 1216 MRxSmb - ok 17:15:50.0734 1216 MSDTC (c7c3d89eb0a6f3dba622ea737fa335b1) C:WINDOWSsystem32msdtc.exe 17:15:50.0828 1216 MSDTC - ok 17:15:50.0859 1216 Msfs (561b3a4333ca2dbdba28b5b956822519) C:WINDOWSsystem32driversMsfs.sys 17:15:50.0953 1216 Msfs - ok 17:15:50.0968 1216 MSIServer - ok 17:15:51.0000 1216 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:WINDOWSsystem32driversMSKSSRV.sys 17:15:51.0093 1216 MSKSSRV - ok 17:15:51.0109 1216 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:WINDOWSsystem32driversMSPCLOCK.sys 17:15:51.0203 1216 MSPCLOCK - ok 17:15:51.0218 1216 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:WINDOWSsystem32driversMSPQM.sys 17:15:51.0328 1216 MSPQM - ok 17:15:51.0343 1216 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:WINDOWSsystem32DRIVERSmssmbios.sys 17:15:51.0437 1216 mssmbios - ok 17:15:51.0453 1216 MSTEE (bf13612142995096ab084f2db7f40f77) C:WINDOWSsystem32driversMSTEE.sys 17:15:51.0562 1216 MSTEE - ok 17:15:51.0578 1216 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) C:WINDOWSsystem32DRIVERSASACPI.sys 17:15:51.0609 1216 MTsensor - ok 17:15:51.0625 1216 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:WINDOWSsystem32driversMup.sys 17:15:51.0734 1216 Mup - ok 17:15:51.0750 1216 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:WINDOWSsystem32DRIVERSNABTSFEC.sys 17:15:51.0859 1216 NABTSFEC - ok 17:15:51.0968 1216 NBService (b8f73372c02963913f764df75c53eae2) C:Program FilesNeroNero 7Nero 7Nero BackItUpNBService.exe 17:15:52.0000 1216 NBService ( UnsignedFile.Multi.Generic ) - warning 17:15:52.0000 1216 NBService - detected UnsignedFile.Multi.Generic (1) 17:15:52.0015 1216 NDIS (558635d3af1c7546d26067d5d9b6959e) C:WINDOWSsystem32driversNDIS.sys 17:15:52.0125 1216 NDIS - ok 17:15:52.0156 1216 NdisIP (520ce427a8b298f54112857bcf6bde15) C:WINDOWSsystem32DRIVERSNdisIP.sys 17:15:52.0250 1216 NdisIP - ok 17:15:52.0281 1216 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:WINDOWSsystem32DRIVERSndistapi.sys 17:15:52.0375 1216 NdisTapi - ok 17:15:52.0390 1216 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:WINDOWSsystem32DRIVERSndisuio.sys 17:15:52.0484 1216 Ndisuio - ok 17:15:52.0500 1216 NdisWan (0b90e255a9490166ab368cd55a529893) C:WINDOWSsystem32DRIVERSndiswan.sys 17:15:52.0609 1216 NdisWan - ok 17:15:52.0625 1216 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:WINDOWSsystem32driversNDProxy.sys 17:15:52.0718 1216 NDProxy - ok 17:15:52.0750 1216 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:WINDOWSsystem32DRIVERSnetbios.sys 17:15:52.0843 1216 NetBIOS - ok 17:15:52.0875 1216 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:WINDOWSsystem32DRIVERSnetbt.sys 17:15:52.0968 1216 NetBT - ok 17:15:53.0000 1216 NetDDE (05afb5ad06462257bea7495283c86d50) C:WINDOWSsystem32netdde.exe 17:15:53.0093 1216 NetDDE - ok 17:15:53.0109 1216 NetDDEdsdm (05afb5ad06462257bea7495283c86d50) C:WINDOWSsystem32netdde.exe 17:15:53.0203 1216 NetDDEdsdm - ok 17:15:53.0234 1216 Netlogon (84885f9b82f4d55c6146ebf6065d75d2) C:WINDOWSsystem32lsass.exe 17:15:53.0312 1216 Netlogon - ok 17:15:53.0343 1216 Netman (36739b39267914ba69ad0610a0299732) C:WINDOWSSystem32netman.dll 17:15:53.0687 1216 Netman - ok 17:15:53.0765 1216 NetTcpPortSharing (8070bb07fe06de8b9acb29b07016a273) C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe 17:15:53.0781 1216 NetTcpPortSharing ( UnsignedFile.Multi.Generic ) - warning 17:15:53.0781 1216 NetTcpPortSharing - detected UnsignedFile.Multi.Generic (1) 17:15:53.0812 1216 NIC1394 (5c5c53db4fef16cf87b9911c7e8c6fbc) C:WINDOWSsystem32DRIVERSnic1394.sys 17:15:53.0906 1216 NIC1394 - ok 17:15:53.0937 1216 Nla (097722f235a1fb698bf9234e01b52637) C:WINDOWSSystem32mswsock.dll 17:15:54.0000 1216 Nla - ok 17:15:54.0015 1216 nmwcd (357ddb51e03cae598c096d95497373d0) C:WINDOWSsystem32driversccdcmb.sys 17:15:54.0328 1216 nmwcd - ok 17:15:54.0359 1216 nmwcdc (7cd443f9d36c80e152fadb274089577a) C:WINDOWSsystem32driversccdcmbo.sys 17:15:54.0406 1216 nmwcdc - ok 17:15:54.0437 1216 nod32drv (18c1c4b7098130e672cb9d28cf67f81e) C:WINDOWSsystem32driversnod32drv.sys 17:15:54.0437 1216 nod32drv - ok 17:15:54.0500 1216 NOD32krn (5300e3715347a5da5b94aec3177f5f31) C:Program FilesEsetnod32krn.exe 17:15:54.0531 1216 NOD32krn ( UnsignedFile.Multi.Generic ) - warning 17:15:54.0531 1216 NOD32krn - detected UnsignedFile.Multi.Generic (1) 17:15:54.0546 1216 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:WINDOWSsystem32driversNpfs.sys 17:15:54.0656 1216 Npfs - ok 17:15:54.0687 1216 Ntfs (19a811ef5f1ed5c926a028ce107ff1af) C:WINDOWSsystem32driversNtfs.sys 17:15:55.0062 1216 Ntfs - ok 17:15:55.0093 1216 NtLmSsp (84885f9b82f4d55c6146ebf6065d75d2) C:WINDOWSsystem32lsass.exe 17:15:55.0171 1216 NtLmSsp - ok 17:15:55.0218 1216 NtmsSvc (b62f29c00ac55a761b2e45877d85ea0f) C:WINDOWSsystem32ntmssvc.dll 17:15:55.0328 1216 NtmsSvc - ok 17:15:55.0359 1216 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:WINDOWSsystem32driversNull.sys 17:15:55.0453 1216 Null - ok 17:15:55.0484 1216 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:WINDOWSsystem32DRIVERSnwlnkflt.sys 17:15:55.0578 1216 NwlnkFlt - ok 17:15:55.0593 1216 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:WINDOWSsystem32DRIVERSnwlnkfwd.sys 17:15:55.0687 1216 NwlnkFwd - ok 17:15:55.0703 1216 ohci1394 (0951db8e5823ea366b0e408d71e1ba2a) C:WINDOWSsystem32DRIVERSohci1394.sys 17:15:55.0796 1216 ohci1394 - ok 17:15:55.0843 1216 Parport (29744eb4ce659dfe3b4122deb45bc478) C:WINDOWSsystem32DRIVERSparport.sys 17:15:55.0937 1216 Parport - ok 17:15:55.0953 1216 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:WINDOWSsystem32driversPartMgr.sys 17:15:56.0062 1216 PartMgr - ok 17:15:56.0078 1216 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:WINDOWSsystem32driversParVdm.sys 17:15:56.0171 1216 ParVdm - ok 17:15:56.0203 1216 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:WINDOWSsystem32DRIVERSpccsmcfd.sys 17:15:56.0234 1216 pccsmcfd - ok 17:15:56.0265 1216 PCI (8086d9979234b603ad5bc2f5d890b234) C:WINDOWSsystem32DRIVERSpci.sys 17:15:56.0359 1216 PCI - ok 17:15:56.0359 1216 PCIDump - ok 17:15:56.0390 1216 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:WINDOWSsystem32DRIVERSpciide.sys 17:15:56.0484 1216 PCIIde - ok 17:15:56.0500 1216 Pcmcia (82a087207decec8456fbe8537947d579) C:WINDOWSsystem32driversPcmcia.sys 17:15:56.0609 1216 Pcmcia - ok 17:15:56.0625 1216 PDCOMP - ok 17:15:56.0640 1216 PDFRAME - ok 17:15:56.0656 1216 PDRELI - ok 17:15:56.0671 1216 PDRFRAME - ok 17:15:56.0687 1216 perc2 - ok 17:15:56.0703 1216 perc2hib - ok 17:15:56.0781 1216 PlugPlay (37561f8d4160d62da86d24ae41fae8de) C:WINDOWSsystem32services.exe 17:15:56.0828 1216 PlugPlay - ok 17:15:56.0843 1216 PolicyAgent (84885f9b82f4d55c6146ebf6065d75d2) C:WINDOWSsystem32lsass.exe 17:15:56.0937 1216 PolicyAgent - ok 17:15:56.0968 1216 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:WINDOWSsystem32DRIVERSraspptp.sys 17:15:57.0062 1216 PptpMiniport - ok 17:15:57.0078 1216 ProtectedStorage (84885f9b82f4d55c6146ebf6065d75d2) C:WINDOWSsystem32lsass.exe 17:15:57.0171 1216 ProtectedStorage - ok 17:15:57.0187 1216 PSched (48671f327553dcf1d27f6197f622a668) C:WINDOWSsystem32DRIVERSpsched.sys 17:15:57.0281 1216 PSched - ok 17:15:57.0328 1216 PSI_SVC_2 (a6a7ad767bf5141665f5c675f671b3e1) C:Program FilesCommon FilesProtexisLicense ServicePsiService_2.exe 17:15:57.0343 1216 PSI_SVC_2 - ok 17:15:57.0375 1216 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:WINDOWSsystem32DRIVERSptilink.sys 17:15:57.0468 1216 Ptilink - ok 17:15:57.0500 1216 PxHelp20 (49452bfcec22f36a7a9b9c2181bc3042) C:WINDOWSsystem32DriversPxHelp20.sys 17:15:57.0515 1216 PxHelp20 - ok 17:15:57.0515 1216 ql1080 - ok 17:15:57.0531 1216 Ql10wnt - ok 17:15:57.0546 1216 ql12160 - ok 17:15:57.0578 1216 ql1240 - ok 17:15:57.0593 1216 ql1280 - ok 17:15:57.0625 1216 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:WINDOWSsystem32DRIVERSrasacd.sys 17:15:57.0718 1216 RasAcd - ok 17:15:57.0734 1216 RasAuto (44db7a9bdd2fb58747d123fbf1d35adb) C:WINDOWSSystem32rasauto.dll 17:15:57.0843 1216 RasAuto - ok 17:15:57.0859 1216 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:WINDOWSsystem32DRIVERSrasl2tp.sys 17:15:57.0968 1216 Rasl2tp - ok 17:15:58.0000 1216 RasMan (49b5eed5fb89d39456a2f616ccd8ba5d) C:WINDOWSSystem32rasmans.dll 17:15:58.0359 1216 RasMan - ok 17:15:58.0375 1216 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:WINDOWSsystem32DRIVERSraspppoe.sys 17:15:58.0468 1216 RasPppoe - ok 17:15:58.0484 1216 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:WINDOWSsystem32DRIVERSraspti.sys 17:15:58.0578 1216 Raspti - ok 17:15:58.0609 1216 Rdbss (03b965b1ca47f6ef60eb5e51cb50e0af) C:WINDOWSsystem32DRIVERSrdbss.sys 17:15:58.0953 1216 Rdbss - ok 17:15:58.0968 1216 RDPCDD (4912d5b403614ce99c28420f75353332) C:WINDOWSsystem32DRIVERSRDPCDD.sys 17:15:59.0062 1216 RDPCDD - ok 17:15:59.0093 1216 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:WINDOWSsystem32DRIVERSrdpdr.sys 17:15:59.0218 1216 rdpdr - ok 17:15:59.0250 1216 RDPWD (b54cd38a9ebfbf2b3561426e3fe26f62) C:WINDOWSsystem32driversRDPWD.sys 17:15:59.0562 1216 RDPWD - ok 17:15:59.0593 1216 RDSessMgr (729798e0933076b8fcfcd9934698f164) C:WINDOWSsystem32sessmgr.exe 17:15:59.0703 1216 RDSessMgr - ok 17:15:59.0718 1216 redbook (b31b4588e4086d8d84adbf9845c2402b) C:WINDOWSsystem32DRIVERSredbook.sys 17:15:59.0828 1216 redbook - ok 17:15:59.0875 1216 regi (001b4278407f4303efc902a2b16f2453) C:WINDOWSsystem32driversregi.sys 17:15:59.0875 1216 regi - ok 17:15:59.0906 1216 RemoteAccess (3046db917e3cfa040632799dd9b14865) C:WINDOWSSystem32mprdim.dll 17:16:00.0000 1216 RemoteAccess - ok 17:16:00.0031 1216 RemoteRegistry (3151427db7d87107d1c5be58fac53960) C:WINDOWSsystem32regsvc.dll 17:16:00.0125 1216 RemoteRegistry - ok 17:16:00.0140 1216 RpcLocator (793f04a09b15e7c6c11dbdffaf06c0ab) C:WINDOWSsystem32locator.exe 17:16:00.0250 1216 RpcLocator - ok 17:16:00.0296 1216 RpcSs (01095febf33beea00c2a0730b9b3ec28) C:WINDOWSsystem32rpcss.dll 17:16:00.0343 1216 RpcSs - ok 17:16:00.0375 1216 RSVP (471b3f9741d762abe75e9deea4787e47) C:WINDOWSsystem32rsvp.exe 17:16:00.0484 1216 RSVP - ok 17:16:00.0515 1216 RTLE8023xp (25be98c05808c57e4d8d26477dc12d39) C:WINDOWSsystem32DRIVERSRtenicxp.sys 17:16:00.0546 1216 RTLE8023xp - ok 17:16:00.0562 1216 SamSs (84885f9b82f4d55c6146ebf6065d75d2) C:WINDOWSsystem32lsass.exe 17:16:00.0656 1216 SamSs - ok 17:16:00.0687 1216 SCardSvr (25d8de134df108e3dbc8d7d23b1aa58e) C:WINDOWSSystem32SCardSvr.exe 17:16:00.0781 1216 SCardSvr - ok 17:16:00.0812 1216 Schedule (92360854316611f6cc471612213c3d92) C:WINDOWSsystem32schedsvc.dll 17:16:00.0921 1216 Schedule - ok 17:16:00.0953 1216 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:WINDOWSsystem32DRIVERSsecdrv.sys 17:16:01.0312 1216 Secdrv - ok 17:16:01.0328 1216 seclogon (b1e0ce09895376871746f36dc5773b4f) C:WINDOWSSystem32seclogon.dll 17:16:01.0421 1216 seclogon - ok 17:16:01.0468 1216 SenFiltService (b6a6b409fda9d9ebd3aadb838d3d7173) C:WINDOWSsystem32driversSenfilt.sys 17:16:01.0484 1216 SenFiltService - ok 17:16:01.0500 1216 SENS (dfd9870cf39c791d86c4c209da9fa919) C:WINDOWSsystem32sens.dll 17:16:01.0609 1216 SENS - ok 17:16:01.0625 1216 Ser2pl (e42f03d1081c4f60d3db6c38235b1456) C:WINDOWSsystem32DRIVERSser2pl.sys 17:16:01.0625 1216 Ser2pl ( UnsignedFile.Multi.Generic ) - warning 17:16:01.0625 1216 Ser2pl - detected UnsignedFile.Multi.Generic (1) 17:16:01.0656 1216 serenum (a2d868aeeff612e70e213c451a70cafb) C:WINDOWSsystem32DRIVERSserenum.sys 17:16:01.0750 1216 serenum - ok 17:16:01.0765 1216 Serial (cd9404d115a00d249f70a371b46d5a26) C:WINDOWSsystem32DRIVERSserial.sys 17:16:01.0859 1216 Serial - ok 17:16:01.0953 1216 ServiceLayer (8988d1f32f56b3cd3f0f6c39f8a91a98) C:Program FilesPC Connectivity SolutionServiceLayer.exe 17:16:02.0015 1216 ServiceLayer ( UnsignedFile.Multi.Generic ) - warning 17:16:02.0015 1216 ServiceLayer - detected UnsignedFile.Multi.Generic (1) 17:16:02.0078 1216 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:WINDOWSsystem32driversSfloppy.sys 17:16:02.0171 1216 Sfloppy - ok 17:16:02.0218 1216 SharedAccess (36cc8c01b5e50163037bef56cb96deff) C:WINDOWSSystem32ipnathlp.dll 17:16:02.0328 1216 SharedAccess - ok 17:16:02.0359 1216 ShellHWDetection (6815def9b810aefac107eeaf72da6f82) C:WINDOWSSystem32shsvcs.dll 17:16:02.0671 1216 ShellHWDetection - ok 17:16:02.0687 1216 Simbad - ok 17:16:02.0718 1216 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:WINDOWSsystem32DRIVERSSLIP.sys 17:16:02.0812 1216 SLIP - ok 17:16:02.0859 1216 SNMP (6feb04de6288f5466391e29057dc5b0e) C:WINDOWSSystem32snmp.exe 17:16:03.0203 1216 SNMP - ok 17:16:03.0250 1216 SNMPTRAP (6f591dbefd11f7697042907b516f1212) C:WINDOWSSystem32snmptrap.exe 17:16:03.0343 1216 SNMPTRAP - ok 17:16:03.0421 1216 Sony PC Companion (5177d14a78e60fd61dcfc6b388e7e971) C:Program FilesSonySony PC CompanionPCCService.exe 17:16:03.0437 1216 Sony PC Companion - ok 17:16:03.0437 1216 Sparrow - ok 17:16:03.0468 1216 splitter (0ce218578fff5f4f7e4201539c45c78f) C:WINDOWSsystem32driverssplitter.sys 17:16:03.0796 1216 splitter - ok 17:16:03.0812 1216 Spooler (da81ec57acd4cdc3d4c51cf3d409af9f) C:WINDOWSsystem32spoolsv.exe 17:16:04.0171 1216 Spooler - ok 17:16:04.0203 1216 sr (e41b6d037d6cd08461470af04500dc24) C:WINDOWSsystem32DRIVERSsr.sys 17:16:04.0250 1216 sr - ok 17:16:04.0281 1216 srservice (92bdf74f12d6cbec43c94d4b7f804838) C:WINDOWSsystem32srsvc.dll 17:16:04.0343 1216 srservice - ok 17:16:04.0375 1216 Srv (ab9c79ed12d65e800aaad3d72a04792f) C:WINDOWSsystem32DRIVERSsrv.sys 17:16:04.0421 1216 Srv - ok 17:16:04.0437 1216 SSDPSRV (4b8d61792f7175bed48859cc18ce4e38) C:WINDOWSSystem32ssdpsrv.dll 17:16:04.0500 1216 SSDPSRV - ok 17:16:04.0531 1216 ss_bbus (eaa66218cd39f5bb1b4853a78c67c787) C:WINDOWSsystem32DRIVERSss_bbus.sys 17:16:04.0546 1216 ss_bbus - ok 17:16:04.0578 1216 ss_bmdfl (91765f99914ed8693d8bc76524f21581) C:WINDOWSsystem32DRIVERSss_bmdfl.sys 17:16:04.0578 1216 ss_bmdfl - ok 17:16:04.0609 1216 ss_bmdm (840e7b738b03c10ee91d9b7d3d6eff15) C:WINDOWSsystem32DRIVERSss_bmdm.sys 17:16:04.0640 1216 ss_bmdm - ok 17:16:04.0671 1216 stisvc (b6763f8534ac547cf1af98afdff2edc8) C:WINDOWSsystem32wiaservc.dll 17:16:05.0031 1216 stisvc - ok 17:16:05.0062 1216 streamip (284c57df5dc7abca656bc2b96a667afb) C:WINDOWSsystem32DRIVERSStreamIP.sys 17:16:05.0156 1216 streamip - ok 17:16:05.0171 1216 swenum (03c1bae4766e2450219d20b993d6e046) C:WINDOWSsystem32DRIVERSswenum.sys 17:16:05.0265 1216 swenum - ok 17:16:05.0296 1216 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:WINDOWSsystem32driversswmidi.sys 17:16:05.0390 1216 swmidi - ok 17:16:05.0406 1216 SwPrv - ok 17:16:05.0421 1216 symc810 - ok 17:16:05.0437 1216 symc8xx - ok 17:16:05.0453 1216 sym_hi - ok 17:16:05.0468 1216 sym_u3 - ok 17:16:05.0500 1216 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:WINDOWSsystem32driverssysaudio.sys 17:16:05.0609 1216 sysaudio - ok 17:16:05.0625 1216 SysmonLog (8b54aa346d1b1b113ffaa75501b8b1b2) C:WINDOWSsystem32smlogsvc.exe 17:16:05.0734 1216 SysmonLog - ok 17:16:05.0765 1216 TapiSrv (fb78839b36025aa286a51289ed28b73e) C:WINDOWSSystem32tapisrv.dll 17:16:06.0140 1216 TapiSrv - ok 17:16:06.0171 1216 Tcpip (2a5554fc5b1e04e131230e3ce035c3f9) C:WINDOWSsystem32DRIVERStcpip.sys 17:16:06.0250 1216 Tcpip - ok 17:16:06.0265 1216 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:WINDOWSsystem32driversTDPIPE.sys 17:16:06.0375 1216 TDPIPE - ok 17:16:06.0390 1216 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:WINDOWSsystem32driversTDTCP.sys 17:16:06.0500 1216 TDTCP - ok 17:16:06.0515 1216 TermDD (a540a99c281d933f3d69d55e48727f47) C:WINDOWSsystem32DRIVERStermdd.sys 17:16:06.0625 1216 TermDD - ok 17:16:06.0656 1216 TermService (b60c877d16d9c880b952fda04adf16e6) C:WINDOWSSystem32termsrv.dll 17:16:06.0765 1216 TermService - ok 17:16:06.0796 1216 Themes (6815def9b810aefac107eeaf72da6f82) C:WINDOWSSystem32shsvcs.dll 17:16:07.0125 1216 Themes - ok 17:16:07.0140 1216 TlntSvr (37db0a7d097310e8b4de803fc3119c78) C:WINDOWSsystem32tlntsvr.exe 17:16:07.0203 1216 TlntSvr - ok 17:16:07.0203 1216 TosIde - ok 17:16:07.0234 1216 TrkWks (6d9ac544b30f96c57f8206566c1fb6a1) C:WINDOWSsystem32trkwks.dll 17:16:07.0328 1216 TrkWks - ok 17:16:07.0359 1216 Udfs (12f70256f140cd7d52c58c7048fde657) C:WINDOWSsystem32driversUdfs.sys 17:16:07.0468 1216 Udfs - ok 17:16:07.0468 1216 ultra - ok 17:16:07.0515 1216 Update (ced744117e91bdc0beb810f7d8608183) C:WINDOWSsystem32DRIVERSupdate.sys 17:16:07.0859 1216 Update - ok 17:16:07.0890 1216 upnphost (aca5d98663d879c6baafcea7e2f1b710) C:WINDOWSSystem32upnphost.dll 17:16:08.0250 1216 upnphost - ok 17:16:08.0281 1216 upperdev (15629e4d65f97ab5432d6d9597cf6a33) C:WINDOWSsystem32DRIVERSusbser_lowerflt.sys 17:16:08.0343 1216 upperdev - ok 17:16:08.0359 1216 UPS (3f5df65b0758675f95a2d43918a740a3) C:WINDOWSSystem32ups.exe 17:16:08.0453 1216 UPS - ok 17:16:08.0468 1216 usbaudio (45a0d14b26c35497ad93bce7e15c9941) C:WINDOWSsystem32driversusbaudio.sys 17:16:08.0578 1216 usbaudio - ok 17:16:08.0593 1216 usbccgp (bffd9f120cc63bcbaa3d840f3eef9f79) C:WINDOWSsystem32DRIVERSusbccgp.sys 17:16:08.0687 1216 usbccgp - ok 17:16:08.0718 1216 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:WINDOWSsystem32DRIVERSusbehci.sys 17:16:08.0812 1216 usbehci - ok 17:16:08.0828 1216 usbhub (c72f40947f92cea56a8fb532edf025f1) C:WINDOWSsystem32DRIVERSusbhub.sys 17:16:08.0921 1216 usbhub - ok 17:16:08.0953 1216 usbscan (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:WINDOWSsystem32DRIVERSusbscan.sys 17:16:09.0046 1216 usbscan - ok 17:16:09.0078 1216 usbser (49106ee29074e6a3d3ac9e24c6d791d8) C:WINDOWSsystem32driversusbser.sys 17:16:09.0156 1216 usbser - ok 17:16:09.0203 1216 UsbserFilt (5c17e6a11aa8be53f79fd364ba19f0ce) C:WINDOWSsystem32DRIVERSusbser_lowerfltj.sys 17:16:09.0250 1216 UsbserFilt - ok 17:16:09.0265 1216 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:WINDOWSsystem32DRIVERSUSBSTOR.SYS 17:16:09.0375 1216 USBSTOR - ok 17:16:09.0390 1216 usbuhci (f8fd1400092e23c8f2f31406ef06167b) C:WINDOWSsystem32DRIVERSusbuhci.sys 17:16:09.0484 1216 usbuhci - ok 17:16:09.0515 1216 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:WINDOWSSystem32driversvga.sys 17:16:09.0625 1216 VgaSave - ok 17:16:09.0625 1216 ViaIde - ok 17:16:09.0656 1216 VolSnap (ee4660083deba849ff6c485d944b379b) C:WINDOWSsystem32driversVolSnap.sys 17:16:09.0750 1216 VolSnap - ok 17:16:09.0781 1216 VSS (3ee00364ae0fd8d604f46cbaf512838a) C:WINDOWSSystem32vssvc.exe 17:16:09.0859 1216 VSS - ok 17:16:09.0890 1216 W32Time (2b281958f5d0cf99ed626e3ef39d5c8d) C:WINDOWSsystem32w32time.dll 17:16:10.0000 1216 W32Time - ok 17:16:10.0031 1216 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:WINDOWSsystem32DRIVERSwanarp.sys 17:16:10.0125 1216 Wanarp - ok 17:16:10.0171 1216 Wdf01000 (bbcfeab7e871cddac2d397ee7fa91fdc) C:WINDOWSsystem32Driverswdf01000.sys 17:16:10.0203 1216 Wdf01000 - ok 17:16:10.0203 1216 WDICA - ok 17:16:10.0250 1216 wdmaud (efd235ca22b57c81118c1aeb4798f1c1) C:WINDOWSsystem32driverswdmaud.sys 17:16:10.0609 1216 wdmaud - ok 17:16:10.0640 1216 WebClient (265f534ef76832435afbf771ec97176d) C:WINDOWSSystem32webclnt.dll 17:16:10.0984 1216 WebClient - ok 17:16:11.0031 1216 winmgmt (f399242a80c4066fd155efa4cf96658e) C:WINDOWSsystem32wbemWMIsvc.dll 17:16:11.0140 1216 winmgmt - ok 17:16:11.0265 1216 WMConnectCDS (cd99c9feae87c1963273f6b150251e33) C:Program FilesWindows Media Connect 2wmccds.exe 17:16:11.0328 1216 WMConnectCDS ( UnsignedFile.Multi.Generic ) - warning 17:16:11.0328 1216 WMConnectCDS - detected UnsignedFile.Multi.Generic (1) 17:16:11.0359 1216 WMDM PMSP Service (668056d5c3c11ab7d266819a96b964e8) C:WINDOWSsystem32MsPMSPSv.exe 17:16:11.0375 1216 WMDM PMSP Service ( UnsignedFile.Multi.Generic ) - warning 17:16:11.0375 1216 WMDM PMSP Service - detected UnsignedFile.Multi.Generic (1) 17:16:11.0406 1216 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:WINDOWSsystem32MsPMSNSv.dll 17:16:11.0437 1216 WmdmPmSN - ok 17:16:11.0484 1216 Wmi (1081c185aed0660b2b5f173c3e023b23) C:WINDOWSSystem32advapi32.dll 17:16:11.0562 1216 Wmi - ok 17:16:11.0609 1216 WmiApSrv (ba8cecc3e813e1f7c441b20393d4f86c) C:WINDOWSsystem32wbemwmiapsrv.exe 17:16:11.0703 1216 WmiApSrv - ok 17:16:11.0750 1216 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:WINDOWSSystem32driversws2ifsl.sys 17:16:11.0859 1216 WS2IFSL - ok 17:16:11.0875 1216 wscsvc (4d59daa66c60858cdf4f67a900f42d4a) C:WINDOWSsystem32wscsvc.dll 17:16:11.0968 1216 wscsvc - ok 17:16:11.0984 1216 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:WINDOWSsystem32DRIVERSWSTCODEC.SYS 17:16:12.0093 1216 WSTCODEC - ok 17:16:12.0125 1216 wuauserv (13d72740963cba12d9ff76a7f218bcd8) C:WINDOWSsystem32wuauserv.dll 17:16:12.0218 1216 wuauserv - ok 17:16:12.0250 1216 WudfPf (6ff66513d372d479ef1810223c8d20ce) C:WINDOWSsystem32DRIVERSWudfPf.sys 17:16:12.0296 1216 WudfPf - ok 17:16:12.0312 1216 WudfRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:WINDOWSsystem32DRIVERSwudfrd.sys 17:16:12.0328 1216 WudfRd - ok 17:16:12.0343 1216 WudfSvc (575a4190d989f64732119e4114045a4f) C:WINDOWSSystem32WUDFSvc.dll 17:16:12.0390 1216 WudfSvc - ok 17:16:12.0437 1216 WZCSVC (5a91e6feab9f901302fa7ff768c0120f) C:WINDOWSSystem32wzcsvc.dll 17:16:12.0546 1216 WZCSVC - ok 17:16:12.0578 1216 xmlprov (eef46dab68229a14da3d8e73c99e2959) C:WINDOWSSystem32xmlprov.dll 17:16:12.0687 1216 xmlprov - ok 17:16:12.0718 1216 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) DeviceHarddisk0DR0 17:16:13.0125 1216 DeviceHarddisk0DR0 - ok 17:16:13.0125 1216 Boot (0x1200) (7f46343b038cf8546633422db3fba58f) DeviceHarddisk0DR0Partition0 17:16:13.0140 1216 DeviceHarddisk0DR0Partition0 - ok 17:16:13.0156 1216 Boot (0x1200) (434562bc24a479ddcbcade6ba9fb6277) DeviceHarddisk0DR0Partition1 17:16:13.0156 1216 DeviceHarddisk0DR0Partition1 - ok 17:16:13.0171 1216 Boot (0x1200) (4ecec5afef3ebea435de07f664912088) DeviceHarddisk0DR0Partition2 17:16:13.0187 1216 DeviceHarddisk0DR0Partition2 - ok 17:16:13.0187 1216 ============================================================ 17:16:13.0187 1216 Scan finished 17:16:13.0187 1216 ============================================================ 17:16:13.0281 1208 Detected object count: 17 17:16:13.0281 1208 Actual detected object count: 17 17:35:38.0125 1208 Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0125 1208 Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0125 1208 AdobeFlashPlayerUpdateSvc ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0125 1208 AdobeFlashPlayerUpdateSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0125 1208 AsIO ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0125 1208 AsIO ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0140 1208 Aspi32 ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0140 1208 Aspi32 ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0140 1208 ATI Smart ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0140 1208 ATI Smart ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0156 1208 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0156 1208 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0156 1208 FsUsbExService ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0156 1208 FsUsbExService ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0171 1208 idsvc ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0171 1208 idsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0187 1208 JGOGO ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0187 1208 JGOGO ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0187 1208 JRAID ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0187 1208 JRAID ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0203 1208 NBService ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0203 1208 NBService ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0203 1208 NetTcpPortSharing ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0203 1208 NetTcpPortSharing ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0218 1208 NOD32krn ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0218 1208 NOD32krn ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0218 1208 Ser2pl ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0218 1208 Ser2pl ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0234 1208 ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0234 1208 ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0234 1208 WMConnectCDS ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0234 1208 WMConnectCDS ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:35:38.0250 1208 WMDM PMSP Service ( UnsignedFile.Multi.Generic ) - skipped by user 17:35:38.0250 1208 WMDM PMSP Service ( UnsignedFile.Multi.Generic ) - User select action: Skip Благодаря за помощта!

Редактирано от hrisi_p (преглед на промените)

Добра работа..!:)

Въпросът ми е след процедурите вече нормално ли стартира операционната система..? Появява ли се фалшивата програма Live security platinum...?

  • Изтеглете RogueKiller.exe и го запазете на десктопа.
  • Стартирайте приложението и натиснете бутона SCAN.
Публикувано изображение
  • Ще се създаде лог файл на десктопа с името RKreport.txt на десктопа.
  • Публикувайте лог файла в следващия си пост.
  • Автор

Здравейте, Компютъра вече си е като предишният. :) Инсталирах програмата и това е лога, който генерира: RogueKiller V7.6.5 [08/03/2012] by Tigzy mail: tigzyRK<at>gmail<dot>com Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/ Blog: http://tigzyrk.blogspot.com Operating System: Windows XP (5.1.2600 Service Pack 2) 32 bits version Started in : Normal mode User: user [Admin rights] Mode: Scan -- Date: 08/09/2012 11:04:42 ¤¤¤ Bad processes: 2 ¤¤¤ [sUSP PATH] LVPrcInj02.dll -- C:WINDOWSTEMPlogishrdLVPrcInj02.dll -> UNLOADED [RESIDUE] Dropbox.exe -- C:Documents and Settingsuser.USER-95E143934EApplication DataDropboxbinDropbox.exe -> KILLED [TermProc] ¤¤¤ Registry Entries: 2 ¤¤¤ [sUSP PATH] Dropbox.lnk @user.USER-95E143934E : C:Documents and Settingsuser.USER-95E143934EApplication DataDropboxbinDropbox.exe -> FOUND [HJ] HKLM[...]NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND ¤¤¤ Particular Files / Folders: ¤¤¤ [Faked.Drv][FAKED] mf.sys : c:windowssystem32driversmf.sys --> CANNOT FIX [Faked.Drv][FAKED] nwlnknb.sys : c:windowssystem32driversnwlnknb.sys --> CANNOT FIX ¤¤¤ Driver: [LOADED] ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ 127.0.0.1 localhost 127.0.0.1 activate.adobe.com 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 www.1001namen.com 127.0.0.1 1001namen.com 127.0.0.1 www.100888290cs.com 127.0.0.1 100888290cs.com [...] ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: ST3160815AS +++++ --- User --- [MBR] 45e67c63b59eb2135fcd4c32f3b7b415 [bSP] b140c2af97dfc665cfd827930373a335 : Windows XP MBR Code Partition table: 0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 20002 Mo 1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 40965750 | Size: 132622 Mo User = LL1 ... OK! User = LL2 ... OK! Finished : << RKreport[1].txt >> RKreport[1].txt Притеснява ме, че дори след излекуването е възможно пак да се заразя със същата гадина/и. Ако си ъпдейтна антивирусната и оставя Anti-Malware инсталирана, това дали ще е достатъчно, за да няма нова зараза. Притеснява ме това, че не съм инсталирала съмнителен софтуер и определено внимавам къде кликам в интернет и въпреки това съм се заразила.

  • Стартирайте отново програмата RogueKiller.exe.
  • Стартирайте приложението и когато премине първоначалното сканиране, натиснете fix Hosts.
  • Ще се създаде лог файл на десктопа с името RKreport(2).txt на десктопа.
  • Публикувайте лог файла в следващия си пост.

Притеснява ме, че дори след излекуването е възможно пак да се заразя със същата гадина/и. Ако си ъпдейтна антивирусната и оставя Anti-Malware инсталирана, това дали ще е достатъчно, за да няма нова зараза. Притеснява ме това, че не съм инсталирала съмнителен софтуер и определено внимавам къде кликам в интернет и въпреки това съм се заразила.

Никой не е застрахован от заразяване на системата..! :) При вас обаче опасноста се умножава по три.Причините...използвате Windows XP Service Pack 2 ,който е спрян от поддръжка още преди две години и половина.Това образно значи че компютъра ви е "разграден двор" :) Това не е всичко - имате изключително стара версия на антивирусна програма ESET NOD32 antivirus system 2.70,която на всичко отгоре е и крактната ..т.е. пиратска.Това означава че,само си мислите че имате някъква защита.. :)Така най хубавото обаче от всичко е че можем да поправим тази бъркотия...само малко търпение и настояване и всичко ще бъде наред..! :) Обещавам..! :)

  • Автор

Готово. Само, че стартирах нов скан и затова репорта е с номер 3 RogueKiller V7.6.5 [08/03/2012] by Tigzy mail: tigzyRK<at>gmail<dot>com Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/ Blog: http://tigzyrk.blogspot.com Operating System: Windows XP (5.1.2600 Service Pack 2) 32 bits version Started in : Normal mode User: user [Admin rights] Mode: HOSTSFix -- Date: 08/09/2012 12:14:19 ¤¤¤ Bad processes: 0 ¤¤¤ ¤¤¤ Driver: [LOADED] ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ 127.0.0.1 localhost 127.0.0.1 activate.adobe.com 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 www.1001namen.com 127.0.0.1 1001namen.com 127.0.0.1 www.100888290cs.com 127.0.0.1 100888290cs.com [...] ¤¤¤ Resetted HOSTS: ¤¤¤ 127.0.0.1 localhost Finished : << RKreport[3].txt >> RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt Благодаря за позитивизма :) Не съм се и съмнявала във вас. :)

Какво следва :

Първо искам да проверим малко по задълбочено системата ви за "бацилчета"..Когато се уверим че системата е чиста,ще я надградим с Service Pack 3.После ще инсталираме и читава антивирусна програма и ще сме готови. Но всичко по ред:

Публикувано изображение Изтеглете Security Check (автор: screen317) от тук или от тук и го запишете на десктопа.

  • Кликнете два пъти върху SecurityCheck.exe и следвайте инструкциите.
  • Когато програмата завърши работата си, ще се отвори един текстов документ: checkup.txt.
  • Копирайте съдържанието на checkup.txt с Копирай (Copy) и с Постави (Paste) го поставете в следващия си коментар.
Публикувано изображение Изтеглете OTL.exe и го запазете на десктопа.
  • Стартирайте OTL (ако е необходимо, потвърдете през UAC).
  • Направете следните настройки:
  • Сложете отметка пред Scan All Users
  • Под менюто File Age => изберете 90 days
  • Под менюто Standard Registry => променете на ALL
  • Сложете отметки пред LOP и Purity Check
Публикувано изображение Под Публикувано изображение с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

netsvcs
msconfig
safebootminimal
safebootnetwork
"%WinDir%$NtUninstallKB*$." /30
C:Program FilesCommon FilesComObjects*.* /s
%SYSTEMDRIVE%*.*
%USERPROFILE%*.*
%USERPROFILE%Application Data*.*
%USERPROFILE%Local SettingsApplication Data*.*
%AllUsersProfile%*.*
%AllUsersProfile%Application Data*.*
%USERPROFILE%My Documents*.*
%CommonProgramFiles%*.*
%PROGRAMFILES%*.*
%systemroot%system32configsystemprofile*.*
%windir%ServiceProfilesLocalServiceAppDataLocalTemp*.*
%windir%ServiceProfilesNetworkServiceAppDataLocalTemp*.*
%windir%temp*.*
%windir%system32*.
%Temp%smtmp1*.*
%Temp%smtmp2*.*
%Temp%smtmp3*.*
%Temp%smtmp4*.*
%systemroot%system32DBBK*.* /s
%systemroot%system32*.dll /lockedfiles
%systemroot%Tasks*.job /lockedfiles
%systemroot%system32drivers*.sys /90
%systemroot%system32drivers*.sys /lockedfiles
%systemroot%system32Spoolprtprocsw32x86*.dll
%systemroot%*. /rp /s
%systemroot%assemblytmp*.* /S /MD5
%systemroot%assemblytemp*.* /S /MD5
%systemroot%assemblyGAC_32*.* /S /MD5
%systemroot%assemblyGAC_MSIL*.* /S /MD5
>C:commands.txt echo list vol /raw /hide /c
/wait
>C:DiskReport.txt diskpart /s C:commands.txt /raw /hide /c
/wait
type c:diskreport.txt /c
/wait
erase c:commands.txt /hide /c
/wait
erase c:diskreport.txt /hide /c
/md5start
smss.exe
winlogon.exe
services.exe
lsass.exe
svchost.exe
explorer.exe
userinit.exe
atapi.sys
iaStor.sys
serial.sys
disk.sys
volsnap.sys
redbook.sys
i8042prt.sys
afd.sys
netbt.sys
tcpip.sys
ipsec.sys
hlp.dat
/md5stop
  • Натиснете маркираният в синьо бутон: Run Scan.
  • Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt. Прикачете тези два файла в следващия си коментар (погледнете опцията "прикачени файлове", когато публикувате мнение).
  • Автор

Пуснах първата програма и това е лога:

Results of screen317's Security Check version 0.99.43

Windows XP Service Pack 2 x86

Out of date service pack!!

Internet Explorer 6 Out of date!

``````````````Antivirus/Firewall Check:``````````````

Windows Security Center service is not running! This report may not be accurate!

Windows Firewall Enabled!

ESET NOD32 antivirus system 2.70

Antivirus out of date!

`````````Anti-malware/Other Utilities Check:`````````

Spybot - Search & Destroy

Malwarebytes Anti-Malware version 1.62.0.1300

Java™ 6 Update 32

Java™ 6 Update 2

Java™ 6 Update 3

Java™ 6 Update 5

Java™ 6 Update 7

Java version out of Date!

Adobe Flash Player 11.3.300.270

Adobe Reader 8 Adobe Reader out of Date!

Mozilla Firefox (14.0.1)

Google Chrome 20.0.1132.57

Google Chrome 21.0.1180.60

Google Chrome VisualElementsManifest.xml..

````````Process Check: objlist.exe by Laurent````````

Malwarebytes Anti-Malware mbamservice.exe

Malwarebytes Anti-Malware mbamgui.exe

Eset nod32kui.exe

Eset UpdateReminder.exe

Eset nod32krn.exe

`````````````````System Health check`````````````````

Total Fragmentation on Drive C:: 45% Defragment your hard drive soon!

````````````````````End of Log``````````````````````

Пуснах и OTL и след около половин час ми извади това съобщение с бутон ОК.

Cannot create file C:Documents ........Desktopcmd.bat

На десктопа има файл cmd.bat, но като го отворих с notepad беше празен.

И разбира се няма нито OTL.Txt нито Extras.Txt

Редактирано от hrisi_p (преглед на промените)

  • Автор

Проверете дали двата файла не се намират в C:_OTLMovedFiles...!!! :)

Няма ги там :(

Хм.интересно защо този инструмент не сработва ...!!! Коригирах някои неща по скрипта..Опитайте нова проверка по инструкцията в пост 12.

Публикувано изображение Стартирайте отново OTL, копирайте (Copy) и поставете (Paste) скриптовия текст от текстовото поле по-долу под колонката Custom Scans/Fixes, като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта.

:OTL
O4 - HKLM..Run: [NPSStartup] File not found
O4 - HKUS-1-5-21-1214440339-1202660629-682003330-1003..Run: [] File not found
O4 - HKUS-1-5-21-1214440339-1202660629-682003330-1003..Run: [4Y3Y0C3A0F7W1I6WCKMEEE] C:Recycle.BinB6232F3AB48.exe /q File not found
@Alternate Data Stream - 72 bytes -> C:WINDOWSSystem32regsvr32.exe:{8CE0330D-C299CD33-DBA66133-F9DB8CE1}

:Reg

:files

autorun.inf /alldrives
autorun.exe /alldrives
recycler /alldrives
ipconfig /flushdns /c

:Commands
[purity]
[emptytemp]
[emptyjava]
[clearallrestorepoints]
[emptyflash]
[Reboot]

Публикувано изображение След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix

Windows ще се рестартира и ще се създаде лог файл. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

  • Автор

Здравейте, Вчера на два пъти се опитах да стартирам програмата с този код, но след натискането на Run fix системата замръзваше и забиваше. Първият път стоя така около 2 часа, но реших, че може мозилата да е попречила, а и пишеше do not interrupt, и реших, че не е трябвало да прекъсвам. Опитах отново, но пак заби и стоя така 3 часа преди да изключа компа от копчето, защото дори ctrl alt del не действаше.

Хм..разбирам..!Ще сменим инструмента..!Спрете всякъкви действия с програмата OTL.

Публикувано изображение Изтеглете ComboFix Публикувано изображение от тук и го запазете на десктопа си.

  • Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.
Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs
  • Стартирайте Combo-Fix.com Публикувано изображение и следвайте инструкциите.
Бележка: ComboFix ще се стартира без инсталирана Recovery Console.
  • Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repair режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.
  • Следвайте инструкциите, за да позволите на ComboFix да изтегли и инсталира Microsoft Windows Recovery Console. В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.
** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.

Публикувано изображение

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

Публикувано изображение

Изберете Yes, за да продължи сканирането за зловреден софтуер.

Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:ComboFix.txt в следващия Ви коментар в тази тема.

Бележка:

  • Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа.
  • ComboFix ще нулира всички настройки на Microsoft Internet Explorer, включително да направи IE браузър по подразбиране.
  • ComboFix ще изключи autorun функцията на ВСИЧКИ CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и Ви защити от бъдещи вируси/заплахи, които поразяват чрез autorun. Ако това е проблем за вас - моля, уведомете ме.
  • ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той ще прекрати интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си.
  • В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:BUG.txt в следващия Ви коментар в тази тема.
Публикувано изображение Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.
  • Автор

Съжалявам за закъснелите отговори, но имам вкъщи един малък разбойник, който иска непрекъснато внимание. По темата: Незнам дали комбофикс си свърши работата, защото въпреки изключен нод32, даде съобщение, че не е изключен, а в систем трея пак се появи иконката, при което пак го изключих. После комбофикса почна да работи, изтегли рековъри конзолата, инсталирах и продължи да работи. Някъде по това време моят разбойник реши да натисне ctrl, но не видях да се отразява на работата на комбофикса. Последно като погледнах компа показваше черен екран, но харда работеше и екрана не беше изключен. Рестартирах го, потърсих за bug.txt, но няма.

Проверете тук за такъв файл C:ComboFix.txt ...ако има такъв копирайте съдържанието му в следващия си пост..!

  • Автор

няма такъв файл. Комбофикса е създал 4 папки: Qoobox, cmdcons, WINDOWS и ComboFix - който е шортъкт икона на My Computer. Сега се замислих, че нямаше много място на харда преди да инсталирам, възможно ли е да блокирала системата заради това. На С са само уиндоус и програми и честно незнам какво да изтрия или деинсталирам за да освободя малко място, но ще се опитам.

няма такъв файл. Комбофикса е създал 4 папки: Qoobox, cmdcons, WINDOWS и ComboFix - който е шортъкт икона на My Computer. Сега се замислих, че нямаше много място на харда преди да инсталирам, възможно ли е да блокирала системата заради това. На С са само уиндоус и програми и честно незнам какво да изтрия или деинсталирам за да освободя малко място, но ще се опитам.

Не трийте нищо..!

Деинсталирайте Комбофикс така:

1.Натиснете Start ==> Run ==> въведете командата Combofix /Uninstall ==> OK

Публикувано изображение

2.Изтеглете Публикувано изображениеOTCleanIt или от тук,стартирайте и натиснете Публикувано изображение

Стартирайте OTL още веднъж и натиснете бутона CleanUp.

Публикувано изображение

Ще последва рестарт на компютъра ви..!Сега е момента да изтриете всичко което използвахме в процедурата,както и всички генерирани логове...всички програмки и фиксове.Оставете си само програмата Malwarebytes' Anti-Malware и периодически сканирайте с нея.Не забравяйте че програмата не заменя антивирусната програма,а само допълва защитата на системата ви.

След приключване на горните процедури е време за обновяване на системата ви:

Публикувано изображениеНадграждане на системата със Windows XP Service Pack 3 (SP3) изтегляте и запомнете на вашия десктоп.Затворете всички приложения и стартирате.След като процедурата завърши рестартирате вашия компютър.

Обновете следния софтуер:

Публикувано изображение Изтегли: Internet Explorer 8.0 Final за Windows XP x32 (16.1 MB)

Публикувано изображение Изтегли: Java Version 7 Update 5

Публикувано изображение Изтегли:Adobe Reader 10.1.3

Публикувано изображениеМоля, изтеглете Farbar Service Scanner и я стартирайте.

  • Сложете всички отметки и натиснете бутона "Scan".
  • Ще се създаде лог файл с името (FSS.txt) в папката откъдето стартирате инструмента.
  • Копирайте съдържанието на лог файла в следващия си пост.
  • Автор

Готова съм и с тази част. Това е лог файла от FSS Farbar Service Scanner Version: 06-08-2012 Ran by user (administrator) on 11-08-2012 at 18:32:07 Running from "C:Documents and Settingsuser.USER-95E143934EDesktop" Microsoft Windows XP Professional Service Pack 3 (X86) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo IP is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ Srservice Service is not running. Checking service configuration: The start type of Srservice service is OK. The ImagePath of Srservice service is OK. The ServiceDll of Srservice service is OK. sr Service is not running. Checking service configuration: The start type of sr service is set to Disabled. The default start type is Boot. The ImagePath of sr: "SystemRootsystem32DRIVERSsr.sys". System Restore Disabled Policy: ======================== [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSystemRestore] "DisableSR"=DWORD:1 Security Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ File Check: ======== C:WINDOWSsystem32dhcpcsvc.dll => MD5 is legit C:WINDOWSsystem32Driversafd.sys => MD5 is legit C:WINDOWSsystem32Driversnetbt.sys => MD5 is legit C:WINDOWSsystem32Driverstcpip.sys => MD5 is legit C:WINDOWSsystem32Driversipsec.sys => MD5 is legit C:WINDOWSsystem32dnsrslvr.dll => MD5 is legit C:WINDOWSsystem32ipnathlp.dll => MD5 is legit C:WINDOWSsystem32netman.dll => MD5 is legit C:WINDOWSsystem32wbemWMIsvc.dll => MD5 is legit C:WINDOWSsystem32srsvc.dll => MD5 is legit C:WINDOWSsystem32Driverssr.sys => MD5 is legit C:WINDOWSsystem32wscsvc.dll => MD5 is legit C:WINDOWSsystem32wbemWMIsvc.dll => MD5 is legit C:WINDOWSsystem32wuauserv.dll => MD5 is legit C:WINDOWSsystem32qmgr.dll => MD5 is legit C:WINDOWSsystem32es.dll => MD5 is legit C:WINDOWSsystem32cryptsvc.dll => MD5 is legit C:WINDOWSsystem32svchost.exe => MD5 is legit C:WINDOWSsystem32rpcss.dll => MD5 is legit C:WINDOWSsystem32services.exe => MD5 is legit Extra List: ======= Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4) 0x0700000005000000010000000200000003000000040000000600000007000000 IpSec Tag value is correct. **** End of log **** И едно питане. Преди да направя последните инсталации при стартирането на компютъра Malwarebytes' Anti-Malware даде грешка и изчезна от систем трея. Пуснах я наново, но вместо да я стартирам и дадох бърз скан и пускам какво намери. После видях, че отметката за защита е махната и наново я сложих и иконата в систем трея се върна. Това притеснително ли е и ли са просто карантинирани файлове? Malwarebytes Anti-Malware (Trial) 1.62.0.1300 www.malwarebytes.org Database version: v2012.08.11.01 Windows XP Service Pack 2 x86 NTFS Internet Explorer 6.0.2900.2180 user :: USER-95E143934E [administrator] Protection: Disabled 11.8.2012 г. 10:30:04 mbam-log-2012-08-11 (10-42-44).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 302510 Time elapsed: 10 minute(s), Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 1 HKCUSoftwareMicrosoftWindowsCurrentVersionUninstallLive Security Platinum (Rogue.LiveSecurityPlatinum) -> No action taken. Registry Values Detected: 1 HKCUSOFTWAREMicrosoftWindowsCurrentVersionRun|4Y3Y0C3A0F7W1I6WCKMEEE (Trojan.SpyEyes) -> Data: C:Recycle.BinB6232F3AB48.exe /q -> No action taken. Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) Също понякога ми дава, че блокира дадени IP адреси. Проверих ги, но са някакви неизвестни в Молдова и Украйна. Предполагам, че след като ги блокира, не трябва да ме притесняват.

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.