Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

вирус от фб

Jason222
в Премахване на зловреден софтуер

Featured Replies

пратиха ми на лс в фб вирус и го отворих и ме зарази аваст го блокира но имам проблем сега докато пиша ми става замъглен монитора ето го заразения филе DDS (Ver_2011-09-30.01) - NTFS_AMD64 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.7.2 Run by TheReaverLaptop at 8:51:37 on 2012-09-11 Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1026.18.3959.2272 [GMT 3:00] . AV: avast! Internet Security *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Internet Security *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: avast! Internet Security *Enabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\WLANExt.exe C:\Windows\system32\conhost.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\Windows\system32\atieclxx.exe C:\Program Files\AVAST Software\Avast\afwServ.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe C:\Windows\SysWOW64\rpcnet.exe C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Update\1.3.21.115\GoogleCrashHandler.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Update\1.3.21.115\GoogleCrashHandler64.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\sppsvc.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\servicing\TrustedInstaller.exe C:\Users\TheReaverLaptop\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\System32\cscript.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxps://isearch.avg.com/?cid={66E6D62B-ADE2-42E4-805B-BEE929F617BA}&mid=39d74e0fc6a747d0a6d5a113f0142e2c-f5224554cee43ed1417f0395086cc17eca877007&lang=en&ds=st011&pr=sa&d=2012-07-18 08:54:25&v=12.1.0.20&sap=hp mWinlogon: Userinit = userinit.exe BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll uRun: [Google Update] "C:\Users\TheReaverLaptop\AppData\Local\Google\Update\GoogleUpdate.exe" /c mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\EMPOWE~1.LNK - C:\Acer\Empowering Technology\eAPLauncher.exe uPolicies-Explorer: NoDriveTypeAutoRun = dword:145 mPolicies-Explorer: NoActiveDesktop = dword:1 mPolicies-Explorer: NoActiveDesktopChanges = dword:1 mPolicies-Explorer: NoDriveTypeAutoRun = dword:28 mPolicies-System: ConsentPromptBehaviorAdmin = dword:0 mPolicies-System: ConsentPromptBehaviorUser = dword:3 mPolicies-System: EnableLUA = dword:0 mPolicies-System: EnableUIADesktopToggle = dword:0 mPolicies-System: PromptOnSecureDesktop = dword:0 IE: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~3\Office15\EXCEL.EXE/3000 IE: Se&nd to OneNote - C:\PROGRA~1\MICROS~3\Office15\ONBttnIE.dll/105 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll IE: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - <orphaned> IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll . INFO: HKCU has more than 50 listed domains. If you wish to scan all of them, select the 'Force scan all domains' option. . TCP: NameServer = 192.168.1.1 TCP: Interfaces\{1171010F-FB08-47FF-A03E-AC83F6D42F0E} : DHCPNameServer = 192.168.1.1 Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll SSODL: WebCheck - <orphaned> x64-BHO: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll x64-BHO: Lync Browser Helper: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL x64-BHO: Microsoft SPFS Browser Helper: {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL x64-TB: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll x64-IE: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll x64-Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL x64-Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned> x64-SSODL: WebCheck - <orphaned> x64-STS: CThemeResourceChangerObject Class - {F791A188-699D-4FD4-955A-EB59E89B1907} - \Program Files\Theme Resource Changer\ThemeResourceChanger.dll . ============= SERVICES / DRIVERS =============== . R0 aswNdis;avast! Firewall NDIS Filter Service;C:\Windows\System32\drivers\aswNdis.sys [2012-9-10 12368] R0 aswNdis2;avast! Firewall Core Firewall Service;C:\Windows\System32\drivers\aswNdis2.sys [2012-9-10 266776] R1 aswFW;avast! TDI Firewall driver;C:\Windows\System32\drivers\aswFW.sys [2012-9-10 142128] R1 aswKbd;aswKbd;C:\Windows\System32\drivers\aswKbd.sys [2012-9-10 19600] R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2012-9-10 969200] R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2012-9-10 359464] R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-14 59904] R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-2-15 235520] R2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2012-9-10 25232] R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2012-9-10 71600] R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-9-10 44808] R2 avast! Firewall;avast! Firewall;C:\Program Files\AVAST Software\Avast\afwServ.exe [2012-9-10 133912] R2 TeamViewer7;TeamViewer 7;C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-8-24 2735528] R2 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-7-18 2320920] R3 amdkmdag;amdkmdag;C:\Windows\System32\drivers\atikmdag.sys [2012-2-15 10856960] R3 amdkmdap;amdkmdap;C:\Windows\System32\drivers\atikmpag.sys [2012-2-15 327680] R3 AmdTools64;AMD Special Tools Driver;C:\Windows\System32\drivers\AmdTools64.sys [2012-8-2 47160] R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2011-12-5 95248] R3 HECIx64;Intel® Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2011-10-30 56344] R3 k57nd;Broadcom NetLink Gigabit Ethernet;C:\Windows\System32\drivers\k57amd64.sys [2011-10-30 334376] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-6-7 160944] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-7-18 250056] S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2011-4-12 71168] S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-6-23 178784] S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-6-23 5132888] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-21 20992] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2012-7-18 239136] S3 RTCore64;RTCore64;D:\NEW SOFT\ACER DRIVERS\rmclock_235_bin\RTCore64.sys [2012-8-6 14352] S3 Synth3dVsc;Synth3dVsc;C:\Windows\System32\drivers\Synth3dVsc.sys [2011-4-12 88960] S3 terminpt;Microsoft Remote Desktop Input Driver;C:\Windows\System32\drivers\terminpt.sys [2011-4-12 34816] S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-21 59392] S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-21 31232] S3 tsusbhub;tsusbhub;C:\Windows\System32\drivers\tsusbhub.sys [2011-4-12 117248] S3 WatAdminSvc;Услуга на технологиите за активиране на Windows;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-7-20 1255736] S3 WinRing0_1_2_0;WinRing0_1_2_0;D:\NEW SOFT\RealTemp_370\WinRing0x64.sys [2012-5-5 14544] . =============== Created Last 30 ================ . 2012-09-10 14:45:19 142128 ----a-w- C:\Windows\System32\drivers\aswFW.sys 2012-09-10 14:45:03 266776 ----a-w- C:\Windows\System32\drivers\aswNdis2.sys 2012-09-10 14:45:02 54072 ----a-w- C:\Windows\System32\drivers\aswRdr2.sys 2012-09-10 14:45:01 969200 ----a-w- C:\Windows\System32\drivers\aswSnx.sys 2012-09-10 14:45:01 19600 ----a-w- C:\Windows\System32\drivers\aswKbd.sys 2012-09-10 14:44:57 71600 ----a-w- C:\Windows\System32\drivers\aswMonFlt.sys 2012-09-10 14:44:40 12368 ----a-w- C:\Windows\System32\drivers\aswNdis.sys 2012-09-10 14:44:27 41224 ----a-w- C:\Windows\avastSS.scr 2012-09-09 05:26:02 69000 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{68B03377-0706-4D68-8805-BE269204438F}\offreg.dll 2012-09-09 05:25:50 -------- d-----w- C:\Users\TheReaverLaptop\AppData\Roaming\foobar2000 2012-09-09 05:03:57 -------- d-----w- C:\Program Files (x86)\PirateFreeYouMind 2012-09-08 05:01:39 9310152 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{68B03377-0706-4D68-8805-BE269204438F}\mpengine.dll 2012-09-06 05:43:55 95208 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll 2012-08-30 13:53:13 -------- d-----r- C:\Backup 2012-08-30 13:50:34 85048 ----a-w- C:\Windows\System32\drivers\CSCrySec.sys 2012-08-30 13:50:34 66104 ----a-w- C:\Windows\System32\drivers\CSVirtualDiskDrv.sys 2012-08-30 13:49:30 -------- d-----w- C:\ProgramData\Kaspersky Lab 2012-08-30 13:33:07 -------- d-----w- C:\Users\TheReaverLaptop\AppData\Roaming\URSoft 2012-08-30 13:33:01 -------- d-----w- C:\Program Files (x86)\Your Uninstaller! 7 2012-08-25 19:55:36 -------- d-----w- C:\Users\TheReaverLaptop\AppData\Roaming\Microsoft Corporation 2012-08-24 13:25:00 -------- d-----w- C:\WinSetupFromUSB 2012-08-24 13:06:24 -------- d-----w- C:\WinUSB 2012-08-22 18:51:48 -------- d-----w- C:\Program Files (x86)\Microsoft SQL Server 2012-08-22 18:50:06 -------- d-----w- C:\Windows\PCHEALTH 2012-08-22 18:50:05 -------- d-----w- C:\Program Files\Microsoft SQL Server 2012-08-22 18:46:18 -------- d-----w- C:\Program Files\Microsoft Analysis Services 2012-08-22 18:46:18 -------- d-----w- C:\Program Files (x86)\Microsoft Analysis Services 2012-08-22 18:45:27 -------- d-----w- C:\Users\TheReaverLaptop\AppData\Local\Microsoft Help 2012-08-20 05:59:59 -------- d-----w- C:\Program Files\Speccy 2012-08-19 05:43:36 -------- d-----w- C:\Users\TheReaverLaptop\AppData\Roaming\Malwarebytes 2012-08-19 05:43:17 -------- d-----w- C:\ProgramData\Malwarebytes 2012-08-19 05:24:18 -------- d-----w- C:\Program Files (x86)\K-Lite Codec Pack 2012-08-16 04:56:01 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb 2012-08-16 04:56:01 2382848 ----a-w- C:\Windows\System32\mshtml.tlb 2012-08-16 04:56:00 140920 ----a-w- C:\Program Files (x86)\Internet Explorer\sqmapi.dll 2012-08-15 13:18:41 751104 ----a-w- C:\Windows\System32\win32spl.dll 2012-08-15 13:18:41 67072 ----a-w- C:\Windows\splwow64.exe 2012-08-15 13:18:41 559104 ----a-w- C:\Windows\System32\spoolsv.exe 2012-08-15 13:18:41 492032 ----a-w- C:\Windows\SysWow64\win32spl.dll 2012-08-15 13:18:37 503808 ----a-w- C:\Windows\System32\srcore.dll 2012-08-15 13:18:37 43008 ----a-w- C:\Windows\SysWow64\srclient.dll 2012-08-15 13:18:34 59392 ----a-w- C:\Windows\System32\browcli.dll 2012-08-15 13:18:34 41984 ----a-w- C:\Windows\SysWow64\browcli.dll 2012-08-15 13:18:34 136704 ----a-w- C:\Windows\System32\browser.dll 2012-08-15 13:18:32 3148800 ----a-w- C:\Windows\System32\win32k.sys 2012-08-15 13:18:30 956928 ----a-w- C:\Windows\System32\localspl.dll 2012-08-14 06:54:30 71680 ----a-w- C:\Windows\System32\frapsv64.dll 2012-08-14 06:54:28 65536 ----a-w- C:\Windows\SysWow64\frapsvid.dll . ==================== Find3M ==================== . 2012-09-11 05:45:25 17920 ----a-w- C:\Windows\System32\rpcnetp.exe 2012-09-11 05:45:23 58288 ----a-w- C:\Windows\SysWow64\rpcnet.dll 2012-09-06 05:43:49 821736 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll 2012-09-06 05:43:49 746984 ----a-w- C:\Windows\SysWow64\deployJava1.dll 2012-08-16 05:25:14 70344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2012-08-16 05:25:14 426184 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe 2012-08-11 05:37:05 13160 ----a-w- C:\Windows\SysWow64\Upgrd.exe 2012-08-11 05:36:56 58288 ------w- C:\Windows\SysWow64\rpcnet.exe 2012-08-11 04:49:17 17920 ----a-w- C:\Windows\SysWow64\rpcnetp.dll 2012-08-11 04:48:29 17920 ----a-w- C:\Windows\SysWow64\rpcnetp.exe 2012-08-10 13:26:44 44544 ----a-w- C:\Windows\System32\themeservice.dll 2012-08-10 13:26:43 2851840 ----a-w- C:\Windows\System32\themeui.dll 2012-08-10 13:26:41 332288 ----a-w- C:\Windows\System32\uxtheme.dll 2012-07-28 13:27:02 514560 ----a-w- C:\Windows\SysWow64\qdvd.dll 2012-07-28 13:27:02 366592 ----a-w- C:\Windows\System32\qdvd.dll 2012-07-23 12:59:14 24960 ----a-w- C:\Windows\System32\RegistryDefragBootTime.exe 2012-07-18 06:08:35 2829 ----a-w- C:\Windows\War3Unin.pif 2012-07-18 06:08:35 139264 ----a-w- C:\Windows\War3Unin.exe 2012-07-18 05:38:22 0 ----a-w- C:\Windows\ativpsrm.bin 2012-06-29 03:56:34 2312704 ----a-w- C:\Windows\System32\jscript9.dll 2012-06-29 03:49:11 1392128 ----a-w- C:\Windows\System32\wininet.dll 2012-06-29 03:48:07 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl 2012-06-29 03:43:49 173056 ----a-w- C:\Windows\System32\ieUnatt.exe 2012-06-29 00:16:58 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll 2012-06-29 00:09:01 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll 2012-06-29 00:08:59 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl 2012-06-29 00:04:43 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe 2012-06-23 15:19:48 64336 ----a-w- C:\Windows\System32\mfc100fra.dll 2012-06-23 14:25:04 829264 ----a-w- C:\Windows\System32\msvcr100.dll 2012-06-23 14:25:04 608080 ----a-w- C:\Windows\System32\msvcp100.dll 2012-06-22 21:13:42 41152 ----a-w- C:\Windows\System32\VEN2232.OLB . ============= FINISH: 8:52:16,93 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-09-30.01) . Microsoft Windows 7 Ultimate Boot Device: \Device\HarddiskVolume1 Install Date: 18.7.2012 г. 08:14:53 System Uptime: 11.9.2012 г. 08:42:51 (0 hours ago) . Motherboard: Acer | | TravelMate 5740G Processor: Intel® Core™ i3 CPU M 350 @ 2.27GHz | CPU | 2266/1066mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 56 GiB total, 22,492 GiB free. D: is FIXED (NTFS) - 410 GiB total, 18,823 GiB free. E: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP71: 6.9.2012 г. 08:42:59 - Installed Java 7 Update 7 RP72: 8.9.2012 г. 08:01:01 - Windows Update RP73: 10.9.2012 г. 16:56:04 - Before uninstalling Kaspersky PURE 2.0 RP74: 10.9.2012 г. 17:43:57 - avast! Internet Security Инсталация . ==== Installed Programs ====================== . (Street-Boy) All Cards Unlocker µTorrent Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin AIMP3 AMD Accelerated Video Transcoding AMD APP SDK Runtime AMD Catalyst Install Manager AMD Drag and Drop Transcoding AMD GPU Clock Tool AMD Media Foundation Decoders avast! Internet Security Catalyst Control Center Catalyst Control Center - Branding Catalyst Control Center Graphics Previews Common Catalyst Control Center InstallProxy Catalyst Control Center Localization All ccc-utility64 CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Czech CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Greek CCC Help Hungarian CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Polish CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish CCC Help Thai CCC Help Turkish CCleaner CPUID CPU-Z 1.61.2 Foobar2000 1.1.8 (Clean) Fraps (remove only) GameRanger Google Chrome Intel® Management Engine Components Java 7 Update 7 Java Auto Updater JavaFX 2.1.1 K-Lite Codec Pack 9.2.0 (Full) Microsoft .NET Framework 4 Client Profile Microsoft Access MUI (English) 2013 Microsoft Access Setup Metadata MUI (English) 2013 Microsoft Antimalware Service BG-BG Language Pack Microsoft DCF MUI (English) 2013 Microsoft Excel MUI (English) 2013 Microsoft Groove MUI (English) 2013 Microsoft InfoPath MUI (English) 2013 Microsoft Lync MUI (English) 2013 Microsoft Office 32-bit Components 2013 Microsoft Office Professional Plus 2013 Preview Microsoft Office Proofing Tools 2013 Preview - English Microsoft Office Proofing Tools 2013 Preview - French Microsoft Office Proofing Tools 2013 Preview - Spanish Microsoft OneNote MUI (English) 2013 Microsoft OSM MUI (English) 2013 Microsoft OSM UX MUI (English) 2013 Microsoft Outlook MUI (English) 2013 Microsoft PowerPoint MUI (English) 2013 Microsoft Professional Plus 2013 Microsoft Proofing (English) 2013 Microsoft Publisher MUI (English) 2013 Microsoft Security Client BG-BG Language Pack Microsoft Shared 32-bit MUI (English) 2013 Microsoft Shared MUI (English) 2013 Microsoft Shared Setup Metadata MUI (English) 2013 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 Microsoft Word MUI (English) 2013 MozBackup 1.5.1 MPC-HC 1.6.2.4902 MPC-HC 1.6.2.4902 (64-bit) PotPlayer64 1.5.31934 BG PowerISO Realtek HDMI Audio Driver for ATI Realtek High Definition Audio Driver Realtek USB 2.0 Card Reader Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) Skype™ 5.10 Speccy System Requirements Lab CYRI TeamViewer 7 Theme Resource Changer X64 v1.0 Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft Outlook 2013 Previ VLC media player 2.0.2 Warcraft III Warcraft III: All Products WinRAR 4.20 (64-битова версия) WinSetupFromUSB Your Uninstaller! 7 . ==== Event Viewer Messages From Past Week ======== . 10.9.2012 г. 16:58:29, Error: Service Control Manager [7034] - Услуга Kaspersky Anti-Virus Service беше прекъсната неочаквано. Това се е случвало с нея 1 път(и). . ==== End Of File ===========================

DSR30582.JPG.zip

Редактирано от icotonev (преглед на промените)

Здравейте..!

Публикувано изображение Моля изтеглете последната версия на TDSSKiller оттук и я запазете на вашия декстоп.

  • Стартирайте TDSSKiller.exe за да стартирате приложението. След това кликнете върху бутона Change parameters.

    Публикувано изображение

  • Сложете отметка през Loaded Modules.

    Публикувано изображение

  • Необходим е рестарт за осъществяване на промените. Направете го!
  • TDSSKiller ще стартира автоматично след рестарта. Важно е да се отбележи, че вашия компютър може да изглежда по-бавен, на моменти неизползваем и с по-ниска производителност. Това е нормално и ще трае само един рестарт. Дайте му достатъчно време да зареди приложенията стартиращи с Операционната Система във фонов режим.
  • След това натиснете Change parameters в TDSSKiller отново.
  • Сложете всички отметки (този път рестарт не се изисква).

    Публикувано изображение

  • Натиснете бутона Start Scan.

    Публикувано изображение

  • Проверката не би трябвало да отмене повече от 2 minutes.
  • Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.

    Публикувано изображение

  • Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.

    Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue > Рестартирайте за да бъде завършена поправката.

    Публикувано изображение

    Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова.

  • Лог файл ще бъде създаден в свободната директория на дял C: . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.

Здравейте..!

Публикувано изображение Изтеглете Malwarebytes' Anti-Malware или от тук (не забравяйте да обновите програмата с нови дефиниции)

* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.

* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.

* Ако има намерени обновявания, тя ще ги изтегли и инсталира.

* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.

* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.

* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.

* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.

* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. Копирайте този лог и го публикувайте в следващия си коментар по темата.

Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

Публикувано изображение Изтеглете програмата: ESET Online Scanner

  • Стартирайте esetsmartinstaller_enu.exe Публикувано изображение
  • Сложете отметка на YES, I accept the Terms of Use и изберете Start:

    Публикувано изображение

  • Скенерът ще започне да изтегля компонентите, които са му необходими:

    Публикувано изображение

Уверете се, че е премахната отметката от:
  • Remove found threats
Уверете се че са маркирани следните позиции:
  • Scan Archives
Кликнете върху Advanced Settings и маркирайте следните опции:
  • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology
Накрая изберете Start
  • Скенерът ще започне да изтегля последните дефиниции.
  • След, като сканирането завърши изберете Finish.
  • Отидете в: C:Program FilesESETESET Online Scanner
  • Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си коментар.
  • Автор

Malwarebytes Anti-Malware (PRO) 1.65.0.1400 www.malwarebytes.org Версия на базата от данни: v2012.09.12.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 TheReaverLaptop :: THEREAVER [администратор] Защита: изключена 12.9.2012 г. 16:51:32 ч. mbam-log-2012-09-12 (16-51-32).txt Тип сканиране: Пълно сканиране (C:|) Включени опции за сканиране: Памет | Автоматично зареждане | Системен регистър | Файлова система | Евристики/Допълнителни | Евристики/Shuriken | PUP | PUM Изключени опции за сканиране: P2P Сканирани обекти: 290376 Изминало време: 44 минута(и), 54 секунда(и) Открити процеси в паметта: 0 (Не бяха открити зловредни обекти) Открити модули в паметта: 0 (Не бяха открити зловредни обекти) Открити ключове в системния регистър: 0 (Не бяха открити зловредни обекти) Открити стойности в системния регистър: 0 (Не бяха открити зловредни обекти) Открити информационни обекти в системния регистър: 0 (Не бяха открити зловредни обекти) Открити папки: 0 (Не бяха открити зловредни обекти) Открити файлове: 0 (Не бяха открити зловредни обекти) (край)

Редактирано от Jason222 (преглед на промените)

  • Автор

ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6583 # api_version=3.0.2 # EOSSerial=c853e1aa741c5349b5e4146db5684d5b # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2012-09-13 05:57:45 # local_time=2012-09-13 08:57:45 ) # country="Bulgaria" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776573 100 94 963 99087997 0 0 # compatibility_mode=8192 67108863 100 0 709 709 0 0 # scanned=143895 # found=27 # cleaned=0 # scan_time=57718 C:UsersTheReaverLaptopAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5K66VBU0Sk[1] a variant of Win32/Injector.WIV trojan (unable to clean) 00000000000000000000000000000000 I C:UsersTheReaverLaptopAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5K66VBU0Sm[1] a variant of Win32/Injector.WIV trojan (unable to clean) 00000000000000000000000000000000 I C:UsersTheReaverLaptopDownloadsDSR30582.JPG.zip a variant of Win32/Injector.WIV trojan (unable to clean) 00000000000000000000000000000000 I C:Windowswinsxsamd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30autochk.exe a variant of Win32/CompuTrace.B application (unable to clean) 00000000000000000000000000000000 I D:GAMESCounter-Strike 1.6[cheat-project.com] Basic hack v1 2007-12-16.rar probably a variant of Win32/PSW.OnLineGames.FKORFVY trojan (unable to clean) 00000000000000000000000000000000 I D:GAMESCounter-Strike 1.6[cheat-project.com] bi0sBase - PE-B V2.0 2008-08-10.rar probably a variant of Win32/Agent.FLHOJIQ trojan (unable to clean) 00000000000000000000000000000000 I D:GAMESCounter-Strike 1.6[cheat-project.com] bi0sBase - PE-B V2.0 2008-08-10bi0sBasebi0sBase.exe probably a variant of Win32/Agent.FLHOJIQ trojan (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTCCleaner Professional + Business Edition v3.22.1800.rar a variant of Win32/Miner.NAB trojan (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTcnet2_Camera_Suyin_App_v2_0_7_1_Driver_v5_8_33_501_XP_zip.exe a variant of Win32/InstallCore.D application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTcoretemp_1236.exe a variant of Win32/InstallIQ application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFThfs.exe a variant of Win32/Server-Web.HFS.A application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTKMPlayer_EN_3.1.0.0.exe Win32/OpenCandy application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTwinamp5623_full_emusic-7plus_all.exe Win32/OpenCandy application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTACER DRIVERSDownloadSetup.exe Win32/InstallMate application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTAdvanced SystemCare Pro v5.0.0.158 Final + SerialAdvanced SystemCare Pro v5.0.0.158 Final + Serial.rar multiple threats (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTAdvanced SystemCare Pro v5.0.0.158 Final + SerialAdvanced SystemCare Pro v5.0.0.158 Final + Serialasc-setup.exe multiple threats (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTAdvanced SystemCare with Antivirus 2013 5.5.3.270 Finalasc-antivirus-setup.exe probably unknown NewHeur_PE virus (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTCCleaner Professional + Business Edition v3.22.1800CCleaner Professional + Business Edition v3.22.1800.exe a variant of Win32/Miner.NAB trojan (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTESET Smart Security 5.2.9.12 & ESET NOD32 Antivirus System 5.2.9.12 (32bit-64bit)ESET PureFix v2.02.zip MSIL/HackAV.J application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTKMPlayer v3.2.0.0 FinalKMPlayer_EN_3.2.0.0.exe Win32/OpenCandy application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTTuneUp Utilities 2012 v12.0.3010.5TuneUp Utilities 2012 v12.0.3010.5.rar Win32/Keygen.CD application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTTuneUp Utilities v2012 12.0.2120.7TuneUp Utilities v2012 12.0.2120.7.rar Win32/Keygen.CD application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTWinRAR 4.10Keygen FFF.rar a variant of Win32/Keygen.AI application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTwrar411Keygen.rar Win32/Keygen.AI application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTwrar411KeygenFFF_Keygen.3.93.exe Win32/Keygen.AI application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTYour Uninstaller! 7.4.2011.11Your Uninstaller! 7.4.2011.11.rar Win32/Toolbar.Zugo application (unable to clean) 00000000000000000000000000000000 I D:NEW SOFTYour Uninstaller! Pro 7.4.2011.15yusetup7.exe Win32/Toolbar.Zugo application (unable to clean) 00000000000000000000000000000000 I

D:GAMESCounter-Strike 1.6[cheat-project.com] Basic hack v1 2007-12-16.rar probably a variant of Win32/PSW.OnLineGames.FKORFVY trojan (unable to clean) 00000000000000000000000000000000 I

D:GAMESCounter-Strike 1.6[cheat-project.com] bi0sBase - PE-B V2.0 2008-08-10.rar probably a variant of Win32/Agent.FLHOJIQ trojan (unable to clean) 00000000000000000000000000000000 I

D:GAMESCounter-Strike 1.6[cheat-project.com] bi0sBase - PE-B V2.0 2008-08-10bi0sBasebi0sBase.exe probably a variant of Win32/Agent.FLHOJIQ trojan (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTCCleaner Professional + Business Edition v3.22.1800.rar a variant of Win32/Miner.NAB trojan (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTcnet2_Camera_Suyin_App_v2_0_7_1_Driver_v5_8_33_501_XP_zip.exe a variant of Win32/InstallCore.D application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTcoretemp_1236.exe a variant of Win32/InstallIQ application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFThfs.exe a variant of Win32/Server-Web.HFS.A application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTKMPlayer_EN_3.1.0.0.exe Win32/OpenCandy application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTwinamp5623_full_emusic-7plus_all.exe Win32/OpenCandy application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTACER DRIVERSDownloadSetup.exe Win32/InstallMate application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTAdvanced SystemCare Pro v5.0.0.158 Final + SerialAdvanced SystemCare Pro v5.0.0.158 Final + Serial.rar multiple threats (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTAdvanced SystemCare Pro v5.0.0.158 Final + SerialAdvanced SystemCare Pro v5.0.0.158 Final + Serialasc-setup.exe multiple threats (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTAdvanced SystemCare with Antivirus 2013 5.5.3.270 Finalasc-antivirus-setup.exe probably unknown NewHeur_PE virus (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTCCleaner Professional + Business Edition v3.22.1800CCleaner Professional + Business Edition v3.22.1800.exe a variant of Win32/Miner.NAB trojan (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTESET Smart Security 5.2.9.12 & ESET NOD32 Antivirus System 5.2.9.12 (32bit-64bit)ESET PureFix v2.02.zip MSIL/HackAV.J application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTKMPlayer v3.2.0.0 FinalKMPlayer_EN_3.2.0.0.exe Win32/OpenCandy application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTTuneUp Utilities 2012 v12.0.3010.5TuneUp Utilities 2012 v12.0.3010.5.rar Win32/Keygen.CD application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTTuneUp Utilities v2012 12.0.2120.7TuneUp Utilities v2012 12.0.2120.7.rar Win32/Keygen.CD application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTWinRAR 4.10Keygen FFF.rar a variant of Win32/Keygen.AI application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTwrar411Keygen.rar Win32/Keygen.AI application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTwrar411KeygenFFF_Keygen.3.93.exe Win32/Keygen.AI application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTYour Uninstaller! 7.4.2011.11Your Uninstaller! 7.4.2011.11.rar Win32/Toolbar.Zugo application (unable to clean) 00000000000000000000000000000000 I

D:NEW SOFTYour Uninstaller! Pro 7.4.2011.15yusetup7.exe Win32/Toolbar.Zugo application (unable to clean) 00000000000000000000000000000000 I

За пиратския софтуер ще си затворя очите...! :ph34r:

Публикувано изображение Изтеглете ComboFix Публикувано изображение от тук и го запазете на десктопа си.

  • Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.
Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs
  • Стартирайте Combo-Fix.com Публикувано изображение и следвайте инструкциите.
Бележка: ComboFix ще се стартира без инсталирана Recovery Console.
  • Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repair режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.
  • Следвайте инструкциите, за да позволите на ComboFix да изтегли и инсталира Microsoft Windows Recovery Console. В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.
** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.

Публикувано изображение

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

Публикувано изображение

Изберете Yes, за да продължи сканирането за зловреден софтуер.

Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:ComboFix.txt в следващия Ви коментар в тази тема.

Бележка:

  • Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа.
  • ComboFix ще нулира всички настройки на Microsoft Internet Explorer, включително да направи IE браузър по подразбиране.
  • ComboFix ще изключи autorun функцията на ВСИЧКИ CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и Ви защити от бъдещи вируси/заплахи, които поразяват чрез autorun. Ако това е проблем за вас - моля, уведомете ме.
  • ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той ще прекрати интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си.
  • В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:BUG.txt в следващия Ви коментар в тази тема.
Публикувано изображение Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.
  • Автор

ComboFix 12-09-12.03 - TheReaverLaptop 09.2012 г. 16:38:38.1.4 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1026.18.3959.2666 [GMT 3:00] Running from: c:usersTheReaverLaptopDesktopComboFix.exe AV: avast! Internet Security *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} FW: avast! Internet Security *Enabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47} SP: avast! Internet Security *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((( Files Created from 2012-08-13 to 2012-09-13 ))))))))))))))))))))))))))))))) . . 2012-09-13 13:42 . 2012-09-13 13:42 -------- d-----w- c:usersDefaultAppDataLocaltemp 2012-09-12 13:44 . 2012-09-07 14:04 25928 ----a-w- c:windowssystem32driversmbam.sys 2012-09-12 13:44 . 2012-09-12 13:44 -------- d-----w- c:program files (x86)Malwarebytes' Anti-Malware 2012-09-12 13:43 . 2012-09-12 13:43 -------- d-----w- c:program files (x86)ESET 2012-09-12 05:01 . 2012-08-22 18:12 950128 ----a-w- c:windowssystem32driversndis.sys 2012-09-12 05:01 . 2012-07-04 20:26 41472 ----a-w- c:windowssystem32driversRNDISMP.sys 2012-09-12 05:01 . 2012-08-02 17:58 574464 ----a-w- c:windowssystem32d3d10level9.dll 2012-09-12 05:01 . 2012-08-02 16:57 490496 ----a-w- c:windowsSysWow64d3d10level9.dll 2012-09-12 05:01 . 2012-08-22 18:12 1913200 ----a-w- c:windowssystem32driverstcpip.sys 2012-09-12 05:01 . 2012-08-22 18:12 376688 ----a-w- c:windowssystem32driversnetio.sys 2012-09-12 05:01 . 2012-08-22 18:12 288624 ----a-w- c:windowssystem32driversFWPKCLNT.SYS 2012-09-12 04:59 . 2012-08-23 08:26 9310152 ----a-w- c:programdataMicrosoftWindows DefenderDefinition Updates{C2987A4D-D178-4303-A29D-85A980C7D496}mpengine.dll 2012-09-10 14:45 . 2012-08-21 09:13 359464 ----a-w- c:windowssystem32driversaswSP.sys 2012-09-10 14:45 . 2012-08-21 09:13 25232 ----a-w- c:windowssystem32driversaswFsBlk.sys 2012-09-10 14:45 . 2012-08-21 09:13 142128 ----a-w- c:windowssystem32driversaswFW.sys 2012-09-10 14:45 . 2012-08-21 09:13 266776 ----a-w- c:windowssystem32driversaswNdis2.sys 2012-09-10 14:45 . 2012-08-21 09:13 59728 ----a-w- c:windowssystem32driversaswTdi.sys 2012-09-10 14:45 . 2012-08-21 09:13 54072 ----a-w- c:windowssystem32driversaswRdr2.sys 2012-09-10 14:45 . 2012-08-21 09:13 969200 ----a-w- c:windowssystem32driversaswSnx.sys 2012-09-10 14:45 . 2012-08-21 09:13 19600 ----a-w- c:windowssystem32driversaswKbd.sys 2012-09-10 14:44 . 2012-08-21 09:13 71600 ----a-w- c:windowssystem32driversaswMonFlt.sys 2012-09-10 14:44 . 2012-07-13 10:47 12368 ----a-w- c:windowssystem32driversaswNdis.sys 2012-09-10 14:44 . 2012-08-21 09:12 41224 ----a-w- c:windowsavastSS.scr 2012-09-10 14:44 . 2012-08-21 09:12 227648 ----a-w- c:windowsSysWow64aswBoot.exe 2012-09-09 05:25 . 2012-09-09 13:22 -------- d-----w- c:usersTheReaverLaptopAppDataRoamingfoobar2000 2012-09-09 05:03 . 2012-09-09 05:03 -------- d-----w- c:program files (x86)PirateFreeYouMind 2012-09-06 05:44 . 2012-09-06 05:44 -------- d-----w- c:program files (x86)Common FilesJava 2012-09-06 05:43 . 2012-09-06 05:43 95208 ----a-w- c:windowsSysWow64WindowsAccessBridge-32.dll 2012-08-30 13:53 . 2012-08-30 13:53 -------- d-----r- C:Backup 2012-08-30 13:50 . 2009-12-14 09:44 85048 ----a-w- c:windowssystem32driversCSCrySec.sys 2012-08-30 13:50 . 2009-12-14 09:44 66104 ----a-w- c:windowssystem32driversCSVirtualDiskDrv.sys 2012-08-30 13:50 . 2012-09-10 14:00 -------- dc----w- c:windowssystem32DRVSTORE 2012-08-30 13:49 . 2012-09-10 14:03 -------- d-----w- c:programdataKaspersky Lab 2012-08-30 13:33 . 2012-08-30 13:33 -------- d-----w- c:usersTheReaverLaptopAppDataRoamingURSoft 2012-08-30 13:33 . 2012-08-30 13:33 -------- d-----w- c:program files (x86)Your Uninstaller! 7 2012-08-25 19:55 . 2012-08-25 19:55 -------- d-----w- c:usersTheReaverLaptopAppDataRoamingMicrosoft Corporation 2012-08-22 19:07 . 2012-08-21 09:12 285328 ----a-w- c:windowssystem32aswBoot.exe 2012-08-22 18:52 . 2012-08-22 18:52 -------- d-----w- c:program filesCommon FilesDESIGNER 2012-08-22 18:51 . 2012-08-22 18:51 -------- d-----w- c:program files (x86)Microsoft SQL Server 2012-08-22 18:51 . 2012-08-22 18:51 -------- d-----w- c:program filesMicrosoft.NET 2012-08-22 18:50 . 2012-08-22 18:50 -------- d-----w- c:windowsPCHEALTH 2012-08-22 18:50 . 2012-08-22 18:51 -------- d-----w- c:program filesMicrosoft SQL Server 2012-08-22 18:46 . 2012-08-22 18:46 -------- d-----w- c:program filesMicrosoft Analysis Services 2012-08-22 18:46 . 2012-08-22 18:46 -------- d-----w- c:program files (x86)Microsoft Analysis Services 2012-08-22 18:45 . 2012-08-22 18:45 -------- d-----w- c:usersTheReaverLaptopAppDataLocalMicrosoft Help 2012-08-22 18:45 . 2012-08-22 18:50 -------- d-----w- c:program filesMicrosoft Office 2012-08-22 18:45 . 2012-08-22 18:55 -------- d-----w- c:programdataMicrosoft Help 2012-08-22 18:43 . 2012-08-22 18:43 -------- d-----r- C:MSOCache 2012-08-20 05:59 . 2012-08-20 06:00 -------- d-----w- c:program filesSpeccy 2012-08-19 05:43 . 2012-08-19 05:43 -------- d-----w- c:usersTheReaverLaptopAppDataRoamingMalwarebytes 2012-08-19 05:43 . 2012-08-19 05:43 -------- d-----w- c:programdataMalwarebytes 2012-08-19 05:24 . 2012-08-19 05:24 -------- d-----w- c:program files (x86)K-Lite Codec Pack 2012-08-16 04:56 . 2012-06-29 03:39 2382848 ----a-w- c:windowssystem32mshtml.tlb 2012-08-16 04:56 . 2012-06-29 00:00 2382848 ----a-w- c:windowsSysWow64mshtml.tlb 2012-08-16 04:56 . 2012-06-29 03:40 96768 ----a-w- c:windowssystem32mshtmled.dll 2012-08-16 04:56 . 2012-06-29 01:00 140920 ----a-w- c:program files (x86)Internet Explorersqmapi.dll 2012-08-15 13:18 . 2012-02-11 06:43 751104 ----a-w- c:windowssystem32win32spl.dll 2012-08-15 13:18 . 2012-02-11 06:36 559104 ----a-w- c:windowssystem32spoolsv.exe 2012-08-15 13:18 . 2012-02-11 06:36 67072 ----a-w- c:windowssplwow64.exe 2012-08-15 13:18 . 2012-02-11 05:43 492032 ----a-w- c:windowsSysWow64win32spl.dll 2012-08-15 13:18 . 2012-05-05 08:36 503808 ----a-w- c:windowssystem32srcore.dll 2012-08-15 13:18 . 2012-05-05 07:46 43008 ----a-w- c:windowsSysWow64srclient.dll 2012-08-15 13:18 . 2012-07-04 22:16 73216 ----a-w- c:windowssystem32netapi32.dll 2012-08-15 13:18 . 2012-07-04 22:13 59392 ----a-w- c:windowssystem32browcli.dll 2012-08-15 13:18 . 2012-07-04 22:13 136704 ----a-w- c:windowssystem32browser.dll 2012-08-15 13:18 . 2012-07-04 21:14 41984 ----a-w- c:windowsSysWow64browcli.dll 2012-08-15 13:18 . 2012-07-18 18:15 3148800 ----a-w- c:windowssystem32win32k.sys 2012-08-15 13:18 . 2012-05-14 05:26 956928 ----a-w- c:windowssystem32localspl.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-09-13 13:44 . 2012-07-18 05:07 17920 ----a-w- c:windowssystem32rpcnetp.exe 2012-09-13 13:44 . 2012-07-18 05:37 58288 ----a-w- c:windowsSysWow64rpcnet.dll 2012-09-12 05:36 . 2012-07-25 05:09 64462936 ----a-w- c:windowssystem32MRT.exe 2012-09-06 05:43 . 2012-08-10 13:10 821736 ----a-w- c:windowsSysWow64npDeployJava1.dll 2012-09-06 05:43 . 2012-08-10 13:10 746984 ----a-w- c:windowsSysWow64deployJava1.dll 2012-08-16 05:25 . 2012-07-18 06:07 70344 ----a-w- c:windowsSysWow64FlashPlayerCPLApp.cpl 2012-08-16 05:25 . 2012-07-18 06:07 426184 ----a-w- c:windowsSysWow64FlashPlayerApp.exe 2012-08-14 06:54 . 2012-08-14 06:54 71680 ----a-w- c:windowssystem32frapsv64.dll 2012-08-14 06:54 . 2012-08-14 06:54 65536 ----a-w- c:windowsSysWow64frapsvid.dll 2012-08-11 05:37 . 2012-07-18 05:36 13160 ----a-w- c:windowsSysWow64Upgrd.exe 2012-08-11 05:36 . 2012-07-18 05:37 58288 ------w- c:windowsSysWow64rpcnet.exe 2012-08-11 04:49 . 2012-07-18 05:08 17920 ----a-w- c:windowsSysWow64rpcnetp.dll 2012-08-11 04:48 . 2012-07-18 05:07 17920 ----a-w- c:windowsSysWow64rpcnetp.exe 2012-08-10 13:26 . 2009-07-13 23:54 44544 ----a-w- c:windowssystem32themeservice.dll 2012-08-10 13:26 . 2010-11-21 03:23 2851840 ----a-w- c:windowssystem32themeui.dll 2012-08-10 13:26 . 2009-07-13 23:55 332288 ----a-w- c:windowssystem32uxtheme.dll 2012-07-28 13:27 . 2012-07-28 13:27 514560 ----a-w- c:windowsSysWow64qdvd.dll 2012-07-28 13:27 . 2012-07-28 13:27 366592 ----a-w- c:windowssystem32qdvd.dll 2012-07-23 12:59 . 2012-07-28 13:25 24960 ----a-w- c:windowssystem32RegistryDefragBootTime.exe 2012-07-18 06:08 . 2012-07-18 06:04 2829 ----a-w- c:windowsWar3Unin.pif 2012-07-18 06:08 . 2012-07-18 06:04 139264 ----a-w- c:windowsWar3Unin.exe 2012-06-23 15:20 . 2012-06-23 15:20 81744 ----a-w- c:windowsSysWow64mfcm100u.dll 2012-06-23 15:20 . 2012-06-23 15:20 64336 ----a-w- c:windowsSysWow64mfc100fra.dll 2012-06-23 15:20 . 2012-06-23 15:20 64336 ----a-w- c:windowsSysWow64mfc100deu.dll 2012-06-23 15:20 . 2012-06-23 15:20 63824 ----a-w- c:windowsSysWow64mfc100esn.dll 2012-06-23 15:20 . 2012-06-23 15:20 62288 ----a-w- c:windowsSysWow64mfc100ita.dll 2012-06-23 15:20 . 2012-06-23 15:20 60752 ----a-w- c:windowsSysWow64mfc100rus.dll 2012-06-23 15:20 . 2012-06-23 15:20 55120 ----a-w- c:windowsSysWow64mfc100enu.dll 2012-06-23 15:20 . 2012-06-23 15:20 43856 ----a-w- c:windowsSysWow64mfc100jpn.dll 2012-06-23 15:20 . 2012-06-23 15:20 43344 ----a-w- c:windowsSysWow64mfc100kor.dll 2012-06-23 15:20 . 2012-06-23 15:20 36176 ----a-w- c:windowsSysWow64mfc100cht.dll 2012-06-23 15:20 . 2012-06-23 15:20 36176 ----a-w- c:windowsSysWow64mfc100chs.dll 2012-06-23 15:20 . 2012-06-23 15:20 31864 ----a-w- c:windowssystem32FM20ENU.DLL 2012-06-23 15:20 . 2012-06-23 15:20 81744 ----a-w- c:windowsSysWow64mfcm100.dll 2012-06-23 15:20 . 2012-06-23 15:20 4422992 ----a-w- c:windowsSysWow64mfc100u.dll 2012-06-23 15:20 . 2012-06-23 15:20 4397384 ----a-w- c:windowsSysWow64mfc100.dll 2012-06-23 15:20 . 2012-06-23 15:20 138056 ----a-w- c:windowsSysWow64atl100.dll 2012-06-23 15:20 . 2012-06-23 15:20 826232 ----a-w- c:windowssystem32msvcr110.dll 2012-06-23 15:20 . 2012-06-23 15:20 595328 ----a-w- c:windowssystem32msvcp110.dll 2012-06-23 15:20 . 2012-06-23 15:20 338824 ----a-w- c:windowssystem32vccorlib110.dll 2012-06-23 15:19 . 2012-06-23 15:19 64336 ----a-w- c:windowssystem32mfc100fra.dll 2012-06-23 15:19 . 2012-06-23 15:19 64336 ----a-w- c:windowssystem32mfc100deu.dll 2012-06-23 15:19 . 2012-06-23 15:19 63824 ----a-w- c:windowssystem32mfc100esn.dll 2012-06-23 15:19 . 2012-06-23 15:19 62288 ----a-w- c:windowssystem32mfc100ita.dll 2012-06-23 15:19 . 2012-06-23 15:19 60752 ----a-w- c:windowssystem32mfc100rus.dll 2012-06-23 15:19 . 2012-06-23 15:19 55120 ----a-w- c:windowssystem32mfc100enu.dll 2012-06-23 15:19 . 2012-06-23 15:19 43856 ----a-w- c:windowssystem32mfc100jpn.dll 2012-06-23 15:19 . 2012-06-23 15:19 43344 ----a-w- c:windowssystem32mfc100kor.dll 2012-06-23 15:19 . 2012-06-23 15:19 36176 ----a-w- c:windowssystem32mfc100cht.dll 2012-06-23 15:19 . 2012-06-23 15:19 36176 ----a-w- c:windowssystem32mfc100chs.dll 2012-06-23 15:19 . 2012-06-23 15:19 93008 ----a-w- c:windowssystem32mfcm100u.dll 2012-06-23 15:19 . 2012-06-23 15:19 93008 ----a-w- c:windowssystem32mfcm100.dll 2012-06-23 15:19 . 2012-06-23 15:19 5601616 ----a-w- c:windowssystem32mfc100u.dll 2012-06-23 15:19 . 2012-06-23 15:19 5574472 ----a-w- c:windowssystem32mfc100.dll 2012-06-23 15:19 . 2012-06-23 15:19 1592416 ----a-w- c:windowssystem32FM20.DLL 2012-06-23 15:19 . 2012-06-23 15:19 158536 ----a-w- c:windowssystem32atl100.dll 2012-06-23 15:19 . 2012-06-23 15:19 773968 ----a-w- c:windowsSysWow64msvcr100.dll 2012-06-23 15:19 . 2012-06-23 15:19 421200 ----a-w- c:windowsSysWow64msvcp100.dll 2012-06-23 14:25 . 2012-06-23 14:25 829264 ----a-w- c:windowssystem32msvcr100.dll 2012-06-23 14:25 . 2012-06-23 14:25 608080 ----a-w- c:windowssystem32msvcp100.dll 2012-06-22 21:13 . 2012-06-22 21:13 41152 ----a-w- c:windowssystem32VEN2232.OLB . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINESOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun] "SunJavaUpdateSched"="c:program files (x86)Common FilesJavaJava Updatejusched.exe" [2012-07-03 252848] "avast"="c:program filesAVAST SoftwareAvastavastUI.exe" [2012-08-21 4282728] . c:programdataMicrosoftWindowsStart MenuProgramsStartup Empowering Technology Launcher.lnk - c:acerEmpowering TechnologyeAPLauncher.exe [2012-8-6 528384] . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINEsoftwarewow6432nodemicrosoftwindows ntcurrentversiondrivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetcontrolsession manager] BootExecute REG_MULTI_SZ 0 . [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalrpcnet] @="Service" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:windowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:program files (x86)SkypeUpdaterUpdater.exe [2012-06-07 160944] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe [2012-08-16 250056] R3 atillk64;atillk64;c:program files (x86)AMD GPU Clock Toolatillk64.sys [x] R3 dmvsc;dmvsc;c:windowssystem32driversdmvsc.sys [2010-11-21 71168] R3 ose64;Office 64 Source Engine;c:program filesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2012-06-23 178784] R3 osppsvc;Office Software Protection Platform;c:program filesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPSVC.EXE [2012-06-23 5132888] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:windowssystem32driversrdpvideominiport.sys [2010-11-21 20992] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:windowssystem32DriversRtsUStor.sys [2010-03-01 239136] R3 RTCore64;RTCore64;d:new softACER DRIVERSrmclock_235_binRTCore64.sys [2008-09-08 14352] R3 Synth3dVsc;Synth3dVsc;c:windowssystem32driverssynth3dvsc.sys [2010-11-21 88960] R3 terminpt;Microsoft Remote Desktop Input Driver;c:windowssystem32driversterminpt.sys [2010-11-21 34816] R3 TsUsbFlt;TsUsbFlt;c:windowssystem32driverstsusbflt.sys [2010-11-21 59392] R3 TsUsbGD;Remote Desktop Generic USB Device;c:windowssystem32driversTsUsbGD.sys [2010-11-21 31232] R3 tsusbhub;tsusbhub;c:windowssystem32driverstsusbhub.sys [2010-11-21 117248] R3 VGPU;VGPU;c:windowssystem32driversrdvgkmd.sys [x] R3 WatAdminSvc;Услуга на технологиите за активиране на Windows;c:windowssystem32WatWatAdminSvc.exe [2012-07-20 1255736] R3 WinRing0_1_2_0;WinRing0_1_2_0;d:new softRealTemp_370WinRing0x64.sys [2008-07-26 14544] S0 aswNdis;avast! Firewall NDIS Filter Service;c:windowssystem32DRIVERSaswNdis.sys [2012-07-13 12368] S0 aswNdis2;avast! Firewall Core Firewall Service; [x] S1 aswFW;avast! TDI Firewall driver; [x] S1 aswKbd;aswKbd; [x] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 vwififlt;Virtual WiFi Filter Driver;c:windowssystem32DRIVERSvwififlt.sys [2009-07-14 59904] S2 AMD External Events Utility;AMD External Events Utility;c:windowssystem32atiesrxx.exe [2012-02-15 235520] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:windowssystem32driversaswMonFlt.sys [2012-08-21 71600] S2 avast! Firewall;avast! Firewall;c:program filesAVAST SoftwareAvastafwServ.exe [2012-08-21 133912] S2 MBAMScheduler;MBAMScheduler;c:program files (x86)Malwarebytes' Anti-Malwarembamscheduler.exe [2012-09-07 399432] S2 MBAMService;MBAMService;c:program files (x86)Malwarebytes' Anti-Malwarembamservice.exe [2012-09-07 676936] S2 TeamViewer7;TeamViewer 7;c:program files (x86)TeamViewerVersion7TeamViewer_Service.exe [2012-08-24 2735528] S2 UNS;Intel® Management & Security Application User Notification Service;c:program files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe [2009-09-30 2320920] S3 amdkmdag;amdkmdag;c:windowssystem32DRIVERSatikmdag.sys [2012-02-15 10856960] S3 amdkmdap;amdkmdap;c:windowssystem32DRIVERSatikmpag.sys [2012-02-15 327680] S3 AmdTools64;AMD Special Tools Driver;c:windowssystem32DRIVERSAmdTools64.sys [2008-04-28 47160] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:windowssystem32driversAtihdW76.sys [2011-12-05 95248] S3 HECIx64;Intel® Management Engine Interface;c:windowssystem32DRIVERSHECIx64.sys [2009-09-17 56344] S3 k57nd;Broadcom NetLink Gigabit Ethernet;c:windowssystem32DRIVERSk57amd64.sys [2010-03-21 334376] S3 MBAMProtector;MBAMProtector;c:windowssystem32driversmbam.sys [2012-09-07 25928] . . --- Other Services/Drivers In Memory --- . *NewlyCreated* - WS2IFSL . Contents of the 'Scheduled Tasks' folder . 2012-09-13 c:windowsTasksAdobe Flash Player Updater.job - c:windowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe [2012-07-18 05:25] . 2012-09-13 c:windowsTasksGoogleUpdateTaskUserS-1-5-21-212255808-1729040260-19795979-1000Core.job - c:usersTheReaverLaptopAppDataLocalGoogleUpdateGoogleUpdate.exe [2012-07-18 05:46] . 2012-09-13 c:windowsTasksGoogleUpdateTaskUserS-1-5-21-212255808-1729040260-19795979-1000UA.job - c:usersTheReaverLaptopAppDataLocalGoogleUpdateGoogleUpdate.exe [2012-07-18 05:46] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE~Browser Helper Objects{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] 2012-06-23 15:20 2860168 ----a-w- c:progra~1MICROS~3Office15GROOVEEX.DLL . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorershelliconoverlayidentifiers SkyDrivePro1 (ErrorConflict)] @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}" [HKEY_CLASSES_ROOTCLSID{8BA85C75-763B-4103-94EB-9470F12FE0F7}] 2012-06-23 15:20 2860168 ----a-w- c:progra~1MICROS~3Office15GROOVEEX.DLL . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorershelliconoverlayidentifiers SkyDrivePro2 (SyncInProgress)] @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}" [HKEY_CLASSES_ROOTCLSID{CD55129A-B1A1-438E-A425-CEBC7DC684EE}] 2012-06-23 15:20 2860168 ----a-w- c:progra~1MICROS~3Office15GROOVEEX.DLL . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorershelliconoverlayidentifiers SkyDrivePro3 (InSync)] @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}" [HKEY_CLASSES_ROOTCLSID{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}] 2012-06-23 15:20 2860168 ----a-w- c:progra~1MICROS~3Office15GROOVEEX.DLL . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorershelliconoverlayidentifiers00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOTCLSID{472083B0-C522-11CF-8763-00608CC02F24}] 2012-08-21 09:11 133400 ----a-w- c:program filesAVAST SoftwareAvastashShA64.dll . [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun] "RtHDVCpl"="c:program filesRealtekAudioHDARAVCpl64.exe" [2010-01-29 10038304] . [hkey_local_machinesoftwaremicrosoftwindowscurrentversionexplorerSharedTaskScheduler] "{F791A188-699D-4FD4-955A-EB59E89B1907}"= "Program FilesTheme Resource ChangerThemeResourceChanger.dll" [2010-10-07 103936] . [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows] "LoadAppInit_DLLs"=0x0 . ------- Supplementary Scan ------- . uLocal Page = c:windowssystem32blank.htm uStart Page = https://isearch.avg.com/?cid={66E6D62B-ADE2-42E4-805B-BEE929F617BA}&mid=39d74e0fc6a747d0a6d5a113f0142e2c-f5224554cee43ed1417f0395086cc17eca877007&lang=en&ds=st011&pr=sa&d=2012-07-18 08:54&v=12.1.0.20&sap=hp mLocal Page = c:windowsSysWOW64blank.htm IE: E&xport to Microsoft Excel - c:progra~1MICROS~3Office15EXCEL.EXE/3000 IE: Se&nd to OneNote - c:progra~1MICROS~3Office15ONBttnIE.dll/105 TCP: DhcpNameServer = 192.168.1.1 Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:program files (x86)Common Filesmicrosoft sharedOFFICE15MSOXMLMF.DLL Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - c:program files (x86)Microsoft OfficeOffice15MSOSB.DLL . - - - - ORPHANS REMOVED - - - - . ShellIconOverlayIdentifiers-{8BA85C75-763B-4103-94EB-9470F12FE0F7} - c:progra~2MICROS~2Office15GROOVEEX.DLL ShellIconOverlayIdentifiers-{CD55129A-B1A1-438E-A425-CEBC7DC684EE} - c:progra~2MICROS~2Office15GROOVEEX.DLL ShellIconOverlayIdentifiers-{E768CD3B-BDDC-436D-9C13-E1B39CA257B1} - c:progra~2MICROS~2Office15GROOVEEX.DLL SafeBoot-47072773.sys WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file) AddRemove-WinSetupFromUSB - c:winsetupfromusbUninstall.exe . . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:WindowsSysWOW64MacromedFlashFlashUtil32_11_3_300_271_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{A483C63A-CDBC-426E-BF93-872502E8144E}Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{A483C63A-CDBC-426E-BF93-872502E8144E}LocalServer32] @="c:WindowsSysWOW64MacromedFlashFlashUtil32_11_3_300_271_ActiveX.exe" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{A483C63A-CDBC-426E-BF93-872502E8144E}TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}InprocServer32] @="c:WindowsSysWOW64MacromedFlashFlash32_11_3_300_271.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}MiscStatus] @="0" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}ToolboxBitmap32] @="c:WindowsSysWOW64MacromedFlashFlash32_11_3_300_271.ocx, 1" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}Version] @="1.0" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}InprocServer32] @="c:WindowsSysWOW64MacromedFlashFlash32_11_3_300_271.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}ToolboxBitmap32] @="c:WindowsSysWOW64MacromedFlashFlash32_11_3_300_271.ocx, 1" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}Version] @="1.0" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeInterface{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeInterface{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeInterface{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINESYSTEMControlSet001ControlPCWSecurity] @Denied: (Full) (Everyone) . ------------------------ Other Running Processes ------------------------ . c:program filesAVAST SoftwareAvastAvastSvc.exe c:program files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe c:windowsSysWOW64rpcnet.exe . ************************************************************************** . Completion time: 2012-09-13 16:49:44 - machine was rebooted ComboFix-quarantined-files.txt 2012-09-13 13:49 . Pre-Run: 25 785 737 216 bytes free Post-Run: 25 514 754 048 bytes free . - - End Of File - - 6421431BDEA7886583519584CC1FF026

Копирайте текста в карето на notepad и го запазвате с име CFScript.txt на десктопа си:

KILLALL::
ClearJavaCache::

File::
C:UsersTheReaverLaptopAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5K66VBU0Sk[1]
C:UsersTheReaverLaptopAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5K66VBU0Sm[1]
C:UsersTheReaverLaptopDownloadsDSR30582.JPG.zip

След съхранението преместете CFScript.txt на иконата на ComboFix.exe

Публикувано изображение

Генерирания рапорт копирайте и го поставете в следващия си коментар...!

  • Автор

ComboFix 12-09-13.03 - TheReaverLaptop 09.2012 г. 8:08.2.4 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1026.18.3959.2615 [GMT 3:00] Running from: c:usersTheReaverLaptopDesktopComboFix.exe Command switches used :: c:usersTheReaverLaptopDesktopCFScript.txt.txt AV: avast! Internet Security *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} FW: avast! Internet Security *Enabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47} SP: avast! Internet Security *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . FILE :: "c:usersTheReaverLaptopAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5K66VBU0Sk[1]" "c:usersTheReaverLaptopAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5K66VBU0Sm[1]" "c:usersTheReaverLaptopDownloadsDSR30582.JPG.zip" . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:usersTheReaverLaptopDownloadsDSR30582.JPG.zip . . ((((((((((((((((((((((((( Files Created from 2012-08-14 to 2012-09-14 ))))))))))))))))))))))))))))))) . . 2012-09-14 05:12 . 2012-09-14 05:12 -------- d-----w- c:usersDefaultAppDataLocaltemp 2012-09-12 13:44 . 2012-09-07 14:04 25928 ----a-w- c:windowssystem32driversmbam.sys 2012-09-12 13:44 . 2012-09-12 13:44 -------- d-----w- c:program files (x86)Malwarebytes' Anti-Malware 2012-09-12 13:43 . 2012-09-12 13:43 -------- d-----w- c:program files (x86)ESET 2012-09-12 05:01 . 2012-08-22 18:12 950128 ----a-w- c:windowssystem32driversndis.sys 2012-09-12 05:01 . 2012-07-04 20:26 41472 ----a-w- c:windowssystem32driversRNDISMP.sys 2012-09-12 05:01 . 2012-08-02 17:58 574464 ----a-w- c:windowssystem32d3d10level9.dll 2012-09-12 05:01 . 2012-08-02 16:57 490496 ----a-w- c:windowsSysWow64d3d10level9.dll 2012-09-12 05:01 . 2012-08-22 18:12 1913200 ----a-w- c:windowssystem32driverstcpip.sys 2012-09-12 05:01 . 2012-08-22 18:12 376688 ----a-w- c:windowssystem32driversnetio.sys 2012-09-12 05:01 . 2012-08-22 18:12 288624 ----a-w- c:windowssystem32driversFWPKCLNT.SYS 2012-09-12 04:59 . 2012-08-23 08:26 9310152 ----a-w- c:programdataMicrosoftWindows DefenderDefinition Updates{C2987A4D-D178-4303-A29D-85A980C7D496}mpengine.dll 2012-09-10 14:45 . 2012-08-21 09:13 359464 ----a-w- c:windowssystem32driversaswSP.sys 2012-09-10 14:45 . 2012-08-21 09:13 25232 ----a-w- c:windowssystem32driversaswFsBlk.sys 2012-09-10 14:45 . 2012-08-21 09:13 142128 ----a-w- c:windowssystem32driversaswFW.sys 2012-09-10 14:45 . 2012-08-21 09:13 266776 ----a-w- c:windowssystem32driversaswNdis2.sys 2012-09-10 14:45 . 2012-08-21 09:13 59728 ----a-w- c:windowssystem32driversaswTdi.sys 2012-09-10 14:45 . 2012-08-21 09:13 54072 ----a-w- c:windowssystem32driversaswRdr2.sys 2012-09-10 14:45 . 2012-08-21 09:13 969200 ----a-w- c:windowssystem32driversaswSnx.sys 2012-09-10 14:45 . 2012-08-21 09:13 19600 ----a-w- c:windowssystem32driversaswKbd.sys 2012-09-10 14:44 . 2012-08-21 09:13 71600 ----a-w- c:windowssystem32driversaswMonFlt.sys 2012-09-10 14:44 . 2012-07-13 10:47 12368 ----a-w- c:windowssystem32driversaswNdis.sys 2012-09-10 14:44 . 2012-08-21 09:12 41224 ----a-w- c:windowsavastSS.scr 2012-09-10 14:44 . 2012-08-21 09:12 227648 ----a-w- c:windowsSysWow64aswBoot.exe 2012-09-09 05:25 . 2012-09-09 13:22 -------- d-----w- c:usersTheReaverLaptopAppDataRoamingfoobar2000 2012-09-09 05:03 . 2012-09-09 05:03 -------- d-----w- c:program files (x86)PirateFreeYouMind 2012-09-06 05:44 . 2012-09-06 05:44 -------- d-----w- c:program files (x86)Common FilesJava 2012-09-06 05:43 . 2012-09-06 05:43 95208 ----a-w- c:windowsSysWow64WindowsAccessBridge-32.dll 2012-08-30 13:53 . 2012-08-30 13:53 -------- d-----r- C:Backup 2012-08-30 13:50 . 2009-12-14 09:44 85048 ----a-w- c:windowssystem32driversCSCrySec.sys 2012-08-30 13:50 . 2009-12-14 09:44 66104 ----a-w- c:windowssystem32driversCSVirtualDiskDrv.sys 2012-08-30 13:50 . 2012-09-10 14:00 -------- dc----w- c:windowssystem32DRVSTORE 2012-08-30 13:49 . 2012-09-10 14:03 -------- d-----w- c:programdataKaspersky Lab 2012-08-30 13:33 . 2012-08-30 13:33 -------- d-----w- c:usersTheReaverLaptopAppDataRoamingURSoft 2012-08-30 13:33 . 2012-08-30 13:33 -------- d-----w- c:program files (x86)Your Uninstaller! 7 2012-08-25 19:55 . 2012-08-25 19:55 -------- d-----w- c:usersTheReaverLaptopAppDataRoamingMicrosoft Corporation 2012-08-22 19:07 . 2012-08-21 09:12 285328 ----a-w- c:windowssystem32aswBoot.exe 2012-08-22 18:52 . 2012-08-22 18:52 -------- d-----w- c:program filesCommon FilesDESIGNER 2012-08-22 18:51 . 2012-08-22 18:51 -------- d-----w- c:program files (x86)Microsoft SQL Server 2012-08-22 18:51 . 2012-08-22 18:51 -------- d-----w- c:program filesMicrosoft.NET 2012-08-22 18:50 . 2012-08-22 18:50 -------- d-----w- c:windowsPCHEALTH 2012-08-22 18:50 . 2012-08-22 18:51 -------- d-----w- c:program filesMicrosoft SQL Server 2012-08-22 18:46 . 2012-08-22 18:46 -------- d-----w- c:program filesMicrosoft Analysis Services 2012-08-22 18:46 . 2012-08-22 18:46 -------- d-----w- c:program files (x86)Microsoft Analysis Services 2012-08-22 18:45 . 2012-08-22 18:45 -------- d-----w- c:usersTheReaverLaptopAppDataLocalMicrosoft Help 2012-08-22 18:45 . 2012-08-22 18:50 -------- d-----w- c:program filesMicrosoft Office 2012-08-22 18:45 . 2012-08-22 18:55 -------- d-----w- c:programdataMicrosoft Help 2012-08-22 18:43 . 2012-08-22 18:43 -------- d-----r- C:MSOCache 2012-08-20 05:59 . 2012-08-20 06:00 -------- d-----w- c:program filesSpeccy 2012-08-19 05:43 . 2012-08-19 05:43 -------- d-----w- c:usersTheReaverLaptopAppDataRoamingMalwarebytes 2012-08-19 05:43 . 2012-08-19 05:43 -------- d-----w- c:programdataMalwarebytes 2012-08-19 05:24 . 2012-08-19 05:24 -------- d-----w- c:program files (x86)K-Lite Codec Pack 2012-08-16 04:56 . 2012-06-29 03:39 2382848 ----a-w- c:windowssystem32mshtml.tlb 2012-08-16 04:56 . 2012-06-29 00:00 2382848 ----a-w- c:windowsSysWow64mshtml.tlb 2012-08-16 04:56 . 2012-06-29 03:40 96768 ----a-w- c:windowssystem32mshtmled.dll 2012-08-16 04:56 . 2012-06-29 01:00 140920 ----a-w- c:program files (x86)Internet Explorersqmapi.dll 2012-08-15 13:18 . 2012-02-11 06:43 751104 ----a-w- c:windowssystem32win32spl.dll 2012-08-15 13:18 . 2012-02-11 06:36 559104 ----a-w- c:windowssystem32spoolsv.exe 2012-08-15 13:18 . 2012-02-11 06:36 67072 ----a-w- c:windowssplwow64.exe 2012-08-15 13:18 . 2012-02-11 05:43 492032 ----a-w- c:windowsSysWow64win32spl.dll 2012-08-15 13:18 . 2012-05-05 08:36 503808 ----a-w- c:windowssystem32srcore.dll 2012-08-15 13:18 . 2012-05-05 07:46 43008 ----a-w- c:windowsSysWow64srclient.dll 2012-08-15 13:18 . 2012-07-04 22:16 73216 ----a-w- c:windowssystem32netapi32.dll 2012-08-15 13:18 . 2012-07-04 22:13 59392 ----a-w- c:windowssystem32browcli.dll 2012-08-15 13:18 . 2012-07-04 22:13 136704 ----a-w- c:windowssystem32browser.dll 2012-08-15 13:18 . 2012-07-04 21:14 41984 ----a-w- c:windowsSysWow64browcli.dll 2012-08-15 13:18 . 2012-07-18 18:15 3148800 ----a-w- c:windowssystem32win32k.sys 2012-08-15 13:18 . 2012-05-14 05:26 956928 ----a-w- c:windowssystem32localspl.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-09-14 05:13 . 2012-07-18 05:07 17920 ----a-w- c:windowssystem32rpcnetp.exe 2012-09-14 05:13 . 2012-07-18 05:37 58288 ----a-w- c:windowsSysWow64rpcnet.dll 2012-09-12 05:36 . 2012-07-25 05:09 64462936 ----a-w- c:windowssystem32MRT.exe 2012-09-06 05:43 . 2012-08-10 13:10 821736 ----a-w- c:windowsSysWow64npDeployJava1.dll 2012-09-06 05:43 . 2012-08-10 13:10 746984 ----a-w- c:windowsSysWow64deployJava1.dll 2012-08-16 05:25 . 2012-07-18 06:07 70344 ----a-w- c:windowsSysWow64FlashPlayerCPLApp.cpl 2012-08-16 05:25 . 2012-07-18 06:07 426184 ----a-w- c:windowsSysWow64FlashPlayerApp.exe 2012-08-14 06:54 . 2012-08-14 06:54 71680 ----a-w- c:windowssystem32frapsv64.dll 2012-08-14 06:54 . 2012-08-14 06:54 65536 ----a-w- c:windowsSysWow64frapsvid.dll 2012-08-11 05:37 . 2012-07-18 05:36 13160 ----a-w- c:windowsSysWow64Upgrd.exe 2012-08-11 05:36 . 2012-07-18 05:37 58288 ------w- c:windowsSysWow64rpcnet.exe 2012-08-11 04:49 . 2012-07-18 05:08 17920 ----a-w- c:windowsSysWow64rpcnetp.dll 2012-08-11 04:48 . 2012-07-18 05:07 17920 ----a-w- c:windowsSysWow64rpcnetp.exe 2012-08-10 13:26 . 2009-07-13 23:54 44544 ----a-w- c:windowssystem32themeservice.dll 2012-08-10 13:26 . 2010-11-21 03:23 2851840 ----a-w- c:windowssystem32themeui.dll 2012-08-10 13:26 . 2009-07-13 23:55 332288 ----a-w- c:windowssystem32uxtheme.dll 2012-07-28 13:27 . 2012-07-28 13:27 514560 ----a-w- c:windowsSysWow64qdvd.dll 2012-07-28 13:27 . 2012-07-28 13:27 366592 ----a-w- c:windowssystem32qdvd.dll 2012-07-23 12:59 . 2012-07-28 13:25 24960 ----a-w- c:windowssystem32RegistryDefragBootTime.exe 2012-07-18 06:08 . 2012-07-18 06:04 2829 ----a-w- c:windowsWar3Unin.pif 2012-07-18 06:08 . 2012-07-18 06:04 139264 ----a-w- c:windowsWar3Unin.exe 2012-06-23 15:20 . 2012-06-23 15:20 81744 ----a-w- c:windowsSysWow64mfcm100u.dll 2012-06-23 15:20 . 2012-06-23 15:20 64336 ----a-w- c:windowsSysWow64mfc100fra.dll 2012-06-23 15:20 . 2012-06-23 15:20 64336 ----a-w- c:windowsSysWow64mfc100deu.dll 2012-06-23 15:20 . 2012-06-23 15:20 63824 ----a-w- c:windowsSysWow64mfc100esn.dll 2012-06-23 15:20 . 2012-06-23 15:20 62288 ----a-w- c:windowsSysWow64mfc100ita.dll 2012-06-23 15:20 . 2012-06-23 15:20 60752 ----a-w- c:windowsSysWow64mfc100rus.dll 2012-06-23 15:20 . 2012-06-23 15:20 55120 ----a-w- c:windowsSysWow64mfc100enu.dll 2012-06-23 15:20 . 2012-06-23 15:20 43856 ----a-w- c:windowsSysWow64mfc100jpn.dll 2012-06-23 15:20 . 2012-06-23 15:20 43344 ----a-w- c:windowsSysWow64mfc100kor.dll 2012-06-23 15:20 . 2012-06-23 15:20 36176 ----a-w- c:windowsSysWow64mfc100cht.dll 2012-06-23 15:20 . 2012-06-23 15:20 36176 ----a-w- c:windowsSysWow64mfc100chs.dll 2012-06-23 15:20 . 2012-06-23 15:20 31864 ----a-w- c:windowssystem32FM20ENU.DLL 2012-06-23 15:20 . 2012-06-23 15:20 81744 ----a-w- c:windowsSysWow64mfcm100.dll 2012-06-23 15:20 . 2012-06-23 15:20 4422992 ----a-w- c:windowsSysWow64mfc100u.dll 2012-06-23 15:20 . 2012-06-23 15:20 4397384 ----a-w- c:windowsSysWow64mfc100.dll 2012-06-23 15:20 . 2012-06-23 15:20 138056 ----a-w- c:windowsSysWow64atl100.dll 2012-06-23 15:20 . 2012-06-23 15:20 826232 ----a-w- c:windowssystem32msvcr110.dll 2012-06-23 15:20 . 2012-06-23 15:20 595328 ----a-w- c:windowssystem32msvcp110.dll 2012-06-23 15:20 . 2012-06-23 15:20 338824 ----a-w- c:windowssystem32vccorlib110.dll 2012-06-23 15:19 . 2012-06-23 15:19 64336 ----a-w- c:windowssystem32mfc100fra.dll 2012-06-23 15:19 . 2012-06-23 15:19 64336 ----a-w- c:windowssystem32mfc100deu.dll 2012-06-23 15:19 . 2012-06-23 15:19 63824 ----a-w- c:windowssystem32mfc100esn.dll 2012-06-23 15:19 . 2012-06-23 15:19 62288 ----a-w- c:windowssystem32mfc100ita.dll 2012-06-23 15:19 . 2012-06-23 15:19 60752 ----a-w- c:windowssystem32mfc100rus.dll 2012-06-23 15:19 . 2012-06-23 15:19 55120 ----a-w- c:windowssystem32mfc100enu.dll 2012-06-23 15:19 . 2012-06-23 15:19 43856 ----a-w- c:windowssystem32mfc100jpn.dll 2012-06-23 15:19 . 2012-06-23 15:19 43344 ----a-w- c:windowssystem32mfc100kor.dll 2012-06-23 15:19 . 2012-06-23 15:19 36176 ----a-w- c:windowssystem32mfc100cht.dll 2012-06-23 15:19 . 2012-06-23 15:19 36176 ----a-w- c:windowssystem32mfc100chs.dll 2012-06-23 15:19 . 2012-06-23 15:19 93008 ----a-w- c:windowssystem32mfcm100u.dll 2012-06-23 15:19 . 2012-06-23 15:19 93008 ----a-w- c:windowssystem32mfcm100.dll 2012-06-23 15:19 . 2012-06-23 15:19 5601616 ----a-w- c:windowssystem32mfc100u.dll 2012-06-23 15:19 . 2012-06-23 15:19 5574472 ----a-w- c:windowssystem32mfc100.dll 2012-06-23 15:19 . 2012-06-23 15:19 1592416 ----a-w- c:windowssystem32FM20.DLL 2012-06-23 15:19 . 2012-06-23 15:19 158536 ----a-w- c:windowssystem32atl100.dll 2012-06-23 15:19 . 2012-06-23 15:19 773968 ----a-w- c:windowsSysWow64msvcr100.dll 2012-06-23 15:19 . 2012-06-23 15:19 421200 ----a-w- c:windowsSysWow64msvcp100.dll 2012-06-23 14:25 . 2012-06-23 14:25 829264 ----a-w- c:windowssystem32msvcr100.dll 2012-06-23 14:25 . 2012-06-23 14:25 608080 ----a-w- c:windowssystem32msvcp100.dll 2012-06-22 21:13 . 2012-06-22 21:13 41152 ----a-w- c:windowssystem32VEN2232.OLB . . ((((((((((((((((((((((((((((( SnapShot@2012-09-13_13.45.02 ))))))))))))))))))))))))))))))))))))))))) . - 2009-07-14 04:54 . 2012-09-13 13:44 16384 c:windowsSysWOW64configsystemprofileAppDataRoamingMicrosoftWindowsCookiesindex.dat + 2009-07-14 04:54 . 2012-09-14 05:14 16384 c:windowsSysWOW64configsystemprofileAppDataRoamingMicrosoftWindowsCookiesindex.dat + 2009-07-14 04:54 . 2012-09-14 05:14 32768 c:windowsSysWOW64configsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat - 2009-07-14 04:54 . 2012-09-13 13:44 32768 c:windowsSysWOW64configsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat - 2009-07-14 04:54 . 2012-09-13 13:44 16384 c:windowsSysWOW64configsystemprofileAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat + 2009-07-14 04:54 . 2012-09-14 05:14 16384 c:windowsSysWOW64configsystemprofileAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat + 2009-07-14 04:46 . 2012-09-13 13:52 89040 c:windowsServiceProfilesNetworkServiceAppDataRoamingMicrosoftSoftwareProtectionPlatformCachecache.dat + 2012-09-10 14:02 . 2012-09-14 05:12 3580 c:windowssystem32wdiERCQueuedResolutions.dat - 2012-09-13 13:43 . 2012-09-13 13:43 2048 c:windowsServiceProfilesLocalServiceAppDataLocallastalive1.dat + 2012-09-14 05:13 . 2012-09-14 05:13 2048 c:windowsServiceProfilesLocalServiceAppDataLocallastalive1.dat - 2012-09-13 13:43 . 2012-09-13 13:43 2048 c:windowsServiceProfilesLocalServiceAppDataLocallastalive0.dat + 2012-09-14 05:13 . 2012-09-14 05:13 2048 c:windowsServiceProfilesLocalServiceAppDataLocallastalive0.dat + 2012-07-22 05:09 . 2012-09-14 05:03 244186 c:windowssystem32wdiSuspendPerformanceDiagnostics_SystemData_S4.bin + 2009-07-14 05:01 . 2012-09-14 05:12 407240 c:windowsServiceProfilesLocalServiceAppDataLocalFontCache-System.dat - 2009-07-14 05:01 . 2012-09-13 13:43 407240 c:windowsServiceProfilesLocalServiceAppDataLocalFontCache-System.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINESOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun] "SunJavaUpdateSched"="c:program files (x86)Common FilesJavaJava Updatejusched.exe" [2012-07-03 252848] "avast"="c:program filesAVAST SoftwareAvastavastUI.exe" [2012-08-21 4282728] . c:programdataMicrosoftWindowsStart MenuProgramsStartup Empowering Technology Launcher.lnk - c:acerEmpowering TechnologyeAPLauncher.exe [2012-8-6 528384] . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINEsoftwarewow6432nodemicrosoftwindows ntcurrentversiondrivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetcontrolsession manager] BootExecute REG_MULTI_SZ 0 . [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalrpcnet] @="Service" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:windowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:program files (x86)SkypeUpdaterUpdater.exe [2012-06-07 160944] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe [2012-08-16 250056] R3 atillk64;atillk64;c:program files (x86)AMD GPU Clock Toolatillk64.sys [x] R3 dmvsc;dmvsc;c:windowssystem32driversdmvsc.sys [2010-11-21 71168] R3 ose64;Office 64 Source Engine;c:program filesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2012-06-23 178784] R3 osppsvc;Office Software Protection Platform;c:program filesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPSVC.EXE [2012-06-23 5132888] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:windowssystem32driversrdpvideominiport.sys [2010-11-21 20992] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:windowssystem32DriversRtsUStor.sys [2010-03-01 239136] R3 RTCore64;RTCore64;d:new softACER DRIVERSrmclock_235_binRTCore64.sys [2008-09-08 14352] R3 Synth3dVsc;Synth3dVsc;c:windowssystem32driverssynth3dvsc.sys [2010-11-21 88960] R3 terminpt;Microsoft Remote Desktop Input Driver;c:windowssystem32driversterminpt.sys [2010-11-21 34816] R3 TsUsbFlt;TsUsbFlt;c:windowssystem32driverstsusbflt.sys [2010-11-21 59392] R3 TsUsbGD;Remote Desktop Generic USB Device;c:windowssystem32driversTsUsbGD.sys [2010-11-21 31232] R3 tsusbhub;tsusbhub;c:windowssystem32driverstsusbhub.sys [2010-11-21 117248] R3 VGPU;VGPU;c:windowssystem32driversrdvgkmd.sys [x] R3 WatAdminSvc;Услуга на технологиите за активиране на Windows;c:windowssystem32WatWatAdminSvc.exe [2012-07-20 1255736] R3 WinRing0_1_2_0;WinRing0_1_2_0;d:new softRealTemp_370WinRing0x64.sys [2008-07-26 14544] S0 aswNdis;avast! Firewall NDIS Filter Service;c:windowssystem32DRIVERSaswNdis.sys [2012-07-13 12368] S0 aswNdis2;avast! Firewall Core Firewall Service; [x] S1 aswFW;avast! TDI Firewall driver; [x] S1 aswKbd;aswKbd; [x] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 vwififlt;Virtual WiFi Filter Driver;c:windowssystem32DRIVERSvwififlt.sys [2009-07-14 59904] S2 AMD External Events Utility;AMD External Events Utility;c:windowssystem32atiesrxx.exe [2012-02-15 235520] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:windowssystem32driversaswMonFlt.sys [2012-08-21 71600] S2 avast! Firewall;avast! Firewall;c:program filesAVAST SoftwareAvastafwServ.exe [2012-08-21 133912] S2 MBAMScheduler;MBAMScheduler;c:program files (x86)Malwarebytes' Anti-Malwarembamscheduler.exe [2012-09-07 399432] S2 MBAMService;MBAMService;c:program files (x86)Malwarebytes' Anti-Malwarembamservice.exe [2012-09-07 676936] S2 TeamViewer7;TeamViewer 7;c:program files (x86)TeamViewerVersion7TeamViewer_Service.exe [2012-08-24 2735528] S2 UNS;Intel® Management & Security Application User Notification Service;c:program files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe [2009-09-30 2320920] S3 amdkmdag;amdkmdag;c:windowssystem32DRIVERSatikmdag.sys [2012-02-15 10856960] S3 amdkmdap;amdkmdap;c:windowssystem32DRIVERSatikmpag.sys [2012-02-15 327680] S3 AmdTools64;AMD Special Tools Driver;c:windowssystem32DRIVERSAmdTools64.sys [2008-04-28 47160] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:windowssystem32driversAtihdW76.sys [2011-12-05 95248] S3 HECIx64;Intel® Management Engine Interface;c:windowssystem32DRIVERSHECIx64.sys [2009-09-17 56344] S3 k57nd;Broadcom NetLink Gigabit Ethernet;c:windowssystem32DRIVERSk57amd64.sys [2010-03-21 334376] S3 MBAMProtector;MBAMProtector;c:windowssystem32driversmbam.sys [2012-09-07 25928] . . Contents of the 'Scheduled Tasks' folder . 2012-09-14 c:windowsTasksAdobe Flash Player Updater.job - c:windowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe [2012-07-18 05:25] . 2012-09-13 c:windowsTasksGoogleUpdateTaskUserS-1-5-21-212255808-1729040260-19795979-1000Core.job - c:usersTheReaverLaptopAppDataLocalGoogleUpdateGoogleUpdate.exe [2012-07-18 05:46] . 2012-09-14 c:windowsTasksGoogleUpdateTaskUserS-1-5-21-212255808-1729040260-19795979-1000UA.job - c:usersTheReaverLaptopAppDataLocalGoogleUpdateGoogleUpdate.exe [2012-07-18 05:46] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE~Browser Helper Objects{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] 2012-06-23 15:20 2860168 ----a-w- c:progra~1MICROS~3Office15GROOVEEX.DLL . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorershelliconoverlayidentifiers00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOTCLSID{472083B0-C522-11CF-8763-00608CC02F24}] 2012-08-21 09:11 133400 ----a-w- c:program filesAVAST SoftwareAvastashShA64.dll . [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun] "RtHDVCpl"="c:program filesRealtekAudioHDARAVCpl64.exe" [2010-01-29 10038304] . [hkey_local_machinesoftwaremicrosoftwindowscurrentversionexplorerSharedTaskScheduler] "{F791A188-699D-4FD4-955A-EB59E89B1907}"= "Program FilesTheme Resource ChangerThemeResourceChanger.dll" [2010-10-07 103936] . ------- Supplementary Scan ------- . uLocal Page = c:windowssystem32blank.htm uStart Page = https://isearch.avg.com/?cid={66E6D62B-ADE2-42E4-805B-BEE929F617BA}&mid=39d74e0fc6a747d0a6d5a113f0142e2c-f5224554cee43ed1417f0395086cc17eca877007&lang=en&ds=st011&pr=sa&d=2012-07-18 08:54&v=12.1.0.20&sap=hp mLocal Page = c:windowsSysWOW64blank.htm IE: E&xport to Microsoft Excel - c:progra~1MICROS~3Office15EXCEL.EXE/3000 IE: Se&nd to OneNote - c:progra~1MICROS~3Office15ONBttnIE.dll/105 TCP: DhcpNameServer = 192.168.1.1 Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:program files (x86)Common Filesmicrosoft sharedOFFICE15MSOXMLMF.DLL Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - c:program files (x86)Microsoft OfficeOffice15MSOSB.DLL . - - - - ORPHANS REMOVED - - - - . WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file) ShellIconOverlayIdentifiers-{8BA85C75-763B-4103-94EB-9470F12FE0F7} - (no file) ShellIconOverlayIdentifiers-{CD55129A-B1A1-438E-A425-CEBC7DC684EE} - (no file) ShellIconOverlayIdentifiers-{E768CD3B-BDDC-436D-9C13-E1B39CA257B1} - (no file) . . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:WindowsSysWOW64MacromedFlashFlashUtil32_11_3_300_271_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{A483C63A-CDBC-426E-BF93-872502E8144E}Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{A483C63A-CDBC-426E-BF93-872502E8144E}LocalServer32] @="c:WindowsSysWOW64MacromedFlashFlashUtil32_11_3_300_271_ActiveX.exe" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{A483C63A-CDBC-426E-BF93-872502E8144E}TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}InprocServer32] @="c:WindowsSysWOW64MacromedFlashFlash32_11_3_300_271.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}MiscStatus] @="0" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}ToolboxBitmap32] @="c:WindowsSysWOW64MacromedFlashFlash32_11_3_300_271.ocx, 1" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}Version] @="1.0" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}InprocServer32] @="c:WindowsSysWOW64MacromedFlashFlash32_11_3_300_271.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}ToolboxBitmap32] @="c:WindowsSysWOW64MacromedFlashFlash32_11_3_300_271.ocx, 1" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}Version] @="1.0" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeInterface{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeInterface{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeInterface{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINESYSTEMControlSet001ControlPCWSecurity] @Denied: (Full) (Everyone) . ------------------------ Other Running Processes ------------------------ . c:program filesAVAST SoftwareAvastAvastSvc.exe c:program files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe c:windowsSysWOW64rpcnet.exe c:program files (x86)Malwarebytes' Anti-Malwarembamgui.exe . ************************************************************************** . Completion time: 2012-09-14 08:18:16 - machine was rebooted ComboFix-quarantined-files.txt 2012-09-14 05:18 ComboFix2.txt 2012-09-13 13:49 . Pre-Run: 24 842 596 352 bytes free Post-Run: 24 631 701 504 bytes free . - - End Of File - - 610B02528A9FF7FD2CFC67B56F151AB9

  • Автор

не всичко е добре кажи как да премахна толовете

Радвам се..! :)

Деинсталирайте Комбофикс така:

1.Натиснете Start ==> Run ==> въведете командата Combofix /Uninstall ==> OK

Публикувано изображение

2.Изтеглете Публикувано изображениеOTCleanIt или от тук,стартирайте и натиснете Публикувано изображение

Изтрийете всичко което използвахме в процедурата (което е останало), логове,програмки и фиксове.Деинсталирайте ESET Online Scaner.

Това е от мен....!Пожелавам лека вечер и безопасен интернет..! :)

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.