Активни зарази не се виждат в системата ви..!

 

• Изтеглете DDS (създаден от sUBs) от BleepingComputer.
• След изтегляне на инструмента е необходимо да бъде запаметен (чрез менюто File => Save As...) на вашия работен плот.
  
• След като изтеглите DDS на вашия работен плот, иконката на програмата би трябвало да изглежда по този начин:
• Прекратете временно защитата в реално време на антивирусния ви софтуер. След това стартирайте DDS с двоен клик на иконката, като потвърдите намерението си с кликане върху бутона Run.
• След приключване на работата на DDS, ще се появят два текстови файла в Notepad, наречени: DDS.txt и Attach.txt и ги запазете (чрез менюто File => Save As...) на вашия работен плот.Копирайте и поставете съдържанието на DDS.txt и Attach.txt директно във вашата тема. Моля, не ги прикачвайте!

DDS (Ver_2011-09-30.01) - NTFS_x86 Internet Explorer: 9.0.8112.16421 Run by Stoqn at 19:14:31 on 2013-01-03 Microsoft® Windows Vista™ Ultimate 6.0.6002.2.1251.359.1033.18.2046.890 [GMT 2:00] . . ============== Running Processes ================ . C:Windowssystem32wininit.exe C:Windowssystem32lsm.exe C:Windowssystem32Ati2evxx.exe C:Windowssystem32SLsvc.exe C:Windowssystem32Ati2evxx.exe C:Program FilesATK HotkeyASLDRSrv.exe C:Program FilesATKGFNEXGFNEXSrv.exe C:Program FilesAVAST SoftwareAvastAvastSvc.exe C:Windowssystem32Dwm.exe C:WindowsExplorer.EXE C:WindowsSystem32spoolsv.exe C:Windowssystem32taskeng.exe C:Program FilesATK HotkeyHControlUser.exe C:Windowssystem32taskeng.exe C:Program FilesATK HotkeyHcontrol.exe C:Program FilesATKOSD2ATKOSD2.exe C:Program FilesATK HotkeyMsgTranAgt.exe C:Program FilesCommon FilesAcronisSchedule2schedul2.exe C:WindowsehomeehRecvr.exe C:Windowsehomeehsched.exe C:Program FilesCyberLinkShared filesRichVideo.exe C:ProgramDataSkypeToolbarsSkype C2C Servicec2c_service.exe C:Windowssystem32SearchIndexer.exe C:Program FilesWindows Media Playerwmpnetwk.exe C:WindowsRtHDVCpl.exe C:Program FilesSynapticsSynTPSynTPEnh.exe C:Program FilesATK HotkeyATKOSD.exe C:Program FilesAcronisTrueImageHomeTrueImageMonitor.exe C:Program FilesAcronisTrueImageHomeTimounterMonitor.exe C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe C:Program FilesAVAST SoftwareAvastAvastUI.exe C:Program FilesWindows Sidebarsidebar.exe C:Windowsehomeehtray.exe C:Program FilesDatecsFlexType 2KFType2K.exe C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe C:Windowsehomeehmsas.exe C:Program FilesWindows Sidebarsidebar.exe C:Program FilesATK HotkeyKBFiltr.exe C:Program FilesATK HotkeyWDC.exe C:Program FilesSynapticsSynTPSynTPHelper.exe C:Program FilesATI TechnologiesATI.ACECore-StaticCCC.exe C:Program FilesSkypePhoneSkype.exe C:Program FilesMozilla Firefoxfirefox.exe C:Program FilesMozilla Firefoxplugin-container.exe C:Windowssystem32MacromedFlashFlashPlayerPlugin_11_5_502_135.exe C:Windowssystem32MacromedFlashFlashPlayerPlugin_11_5_502_135.exe C:WindowsservicingTrustedInstaller.exe D:DesktopНова папкаdds.exe C:Windowssystem32wbemWmiPrvSE.exe C:Windowssystem32svchost.exe -k DcomLaunch C:Windowssystem32svchost.exe -k rpcss C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted C:Windowssystem32svchost.exe -k netsvcs C:Windowssystem32svchost.exe -k GPSvcGroup C:Windowssystem32svchost.exe -k LocalService C:Windowssystem32svchost.exe -k NetworkService C:Windowssystem32svchost.exe -k LocalServiceNoNetwork C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation C:Windowssystem32svchost.exe -k NetworkServiceNetworkRestricted C:Windowssystem32svchost.exe -k imgsvc . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.com mStart Page = hxxp://www.google.com BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:program filesmicrosoft officeoffice12GrooveShellExtensions.dll BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:program filesavast softwareavastaswWebRepIE.dll BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:program filesskypetoolbarsinternet explorerskypeieplugin.dll BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:program filesavast softwareavastaswWebRepIE.dll uRun: [sidebar] c:program fileswindows sidebarsidebar.exe /autoRun uRun: [ehTray.exe] c:windowsehomeehTray.exe mRun: [HControlUser] "c:program filesatk hotkeyHcontrolUser.exe" mRun: [ATKOSD2] "c:program filesatkosd2ATKOSD2.exe" mRun: [RtHDVCpl] RtHDVCpl.exe mRun: [synTPEnh] c:program filessynapticssyntpSynTPEnh.exe mRun: [startCCC] "c:program filesati technologiesati.acecore-staticCLIStart.exe" mRun: [QuickTime Task] "c:program filesquicktimeqttask.exe" -atboottime mRun: [Malwarebytes Anti-Malware (reboot)] "c:program filesmalwarebytes' anti-malwarembam.exe" /runcleanupscript mRun: [TrueImageMonitor.exe] c:program filesacronistrueimagehomeTrueImageMonitor.exe mRun: [AcronisTimounterMonitor] c:program filesacronistrueimagehomeTimounterMonitor.exe mRun: [Acronis Scheduler2 Service] "c:program filescommon filesacronisschedule2schedhlp.exe" mRun: [avast] "c:program filesavast softwareavastavastUI.exe" /nogui StartupFolder: c:usersstoqnappdataroamingmicros~1windowsstartm~1programsstartupadobem~1.lnk - c:program filesadobe media playerAdobe Media Player.exe StartupFolder: c:usersstoqnappdataroamingmicros~1windowsstartm~1programsstartupccc.lnk - c:program filesati technologiesati.acecore-staticCCC.exe StartupFolder: c:usersstoqnappdataroamingmicros~1windowsstartm~1programsstartuponenot~1.lnk - c:program filesmicrosoft officeoffice12ONENOTEM.EXE StartupFolder: c:progra~2micros~1windowsstartm~1programsstartupflexty~1.lnk - c:program filesdatecsflextype 2kFType2K.exe uPolicies-Explorer: NoDriveTypeAutoRun = dword:149 uPolicies-Explorer: NoDrives = dword:0 mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0 mPolicies-Explorer: NoDrives = dword:0 mPolicies-System: EnableUIADesktopToggle = dword:0 IE: E&xport to Microsoft Excel - c:progra~1micros~2office12EXCEL.EXE/3000 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:program filesmicrosoft officeoffice12ONBttnIE.dll IE: {807DF5E0-4EF7-48a8-A405-239F3E29FFA9} - {FE69C007-C452-4d3e-86D2-1730DF8BC871} - <orphaned> IE: {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - {17A84966-F1E9-4645-AA9E-5E771EE1C859} - c:program filesnuclear coffeevideogetpluginsVideoGet_IE.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:program filesskypetoolbarsinternet explorerskypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:program filesyahoo!commonYinsthelper.dll TCP: NameServer = 46.40.72.9 192.168.0.1 TCP: Interfaces{EA3A2565-B297-4FE4-8C32-4329B1CB50A1} : DHCPNameServer = 46.40.72.9 192.168.0.1 Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:program filesmicrosoft officeoffice12GrooveSystemServices.dll Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:program filesskypetoolbarsinternet explorerskypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:program filesmicrosoft officeoffice12GrooveShellExtensions.dll LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg . ================= FIREFOX =================== . FF - ProfilePath - c:usersstoqnappdataroamingmozillafirefoxprofilesrftsd1zx.default FF - prefs.js: browser.startup.homepage - www.google.bg/ FF - plugin: c:program filesgooglegoogle earthpluginnpgeplugin.dll FF - plugin: c:program filesgoogleupdate1.3.21.123npGoogleUpdate3.dll FF - plugin: c:program filesmozilla firefoxpluginsnpyaxmpb.dll FF - plugin: c:windowssystem32macromedflashNPSWF32_11_5_502_135.dll . ============= SERVICES / DRIVERS =============== . R0 tdrpman228;Acronis Try&Decide and Restore Points filter (build 228);c:windowssystem32driverstdrpm228.sys [2011-1-31 902592] R1 aswKbd;aswKbd;c:windowssystem32driversaswKbd.sys [2012-8-22 20624] R1 aswSnx;aswSnx;c:windowssystem32driversaswSnx.sys [2012-1-27 738504] R1 aswSP;aswSP;c:windowssystem32driversaswSP.sys [2012-1-27 361032] R2 aswFsBlk;aswFsBlk;c:windowssystem32driversaswFsBlk.sys [2012-1-27 21256] R2 aswMonFlt;aswMonFlt;c:windowssystem32driversaswMonFlt.sys [2012-1-27 58680] R2 avast! Antivirus;avast! Antivirus;c:program filesavast softwareavastAvastSvc.exe [2012-1-27 44808] R2 FontCache;Windows Font Cache Service;c:windowssystem32svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504] R2 Skype C2C Service;Skype C2C Service;c:programdataskypetoolbarsskype c2c servicec2c_service.exe [2012-12-13 3290896] R3 NETw5v32;Intel® Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ;c:windowssystem32driversNETw5v32.sys [2009-1-21 3658752] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:windowsmicrosoft.netframeworkv4.0.30319mscorsvw.exe [2010-3-18 130384] S2 gupdate1c98e9d48070d10;Google Update Service (gupdate1c98e9d48070d10);c:program filesgoogleupdateGoogleUpdate.exe [2009-2-14 133104] S2 SkypeUpdate;Skype Updater;c:program filesskypeupdaterUpdater.exe [2012-2-15 158856] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2012-7-6 250808] S3 BthAvrcp;Bluetooth AVRCP Profile;c:windowssystem32driversBthAvrcp.sys [2010-2-5 28048] S3 gupdatem;Ус»уі° Ѕ° Google рєту°»ё·°цёя (gupdatem);c:program filesgoogleupdateGoogleUpdate.exe [2009-2-14 133104] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:windowsmicrosoft.netframeworkv4.0.30319wpfWPFFontCache_v0400.exe [2010-3-18 753504] . =============== File Associations =============== . FileExt: .js: Applicationsmplayerc.exe="c:program filesk-lite codec packmedia player classicmplayerc.exe" "%1" [userChoice] . =============== Created Last 30 ================ . 2013-01-02 21:12:42  --------  d-----w-  c:windowssystem32catroot2 2013-01-02 12:30:43  303616  ----a-w-  C:SetACL.exe 2013-01-02 12:09:17  290304  ----a-w-  C:subinacl.exe 2013-01-02 12:04:55  --------  d-----w-  C:RegBackup 2013-01-02 07:47:44  --------  d-----w-  C:Tweaking.com_Windows_Repair_Logs 2013-01-02 07:47:33  --------  d-----w-  c:program filesTweaking.com 2013-01-01 17:03:12  --------  d-sh--w-  C:found.001 2012-12-29 14:16:39  --------  d-sh--w-  C:$RECYCLE.BIN 2012-12-27 06:51:30  --------  d-----w-  c:usersstoqnappdatalocaltemp 2012-12-20 21:27:54  34304  ----a-w-  c:windowssystem32atmlib.dll 2012-12-20 21:27:54  293376  ----a-w-  c:windowssystem32atmfd.dll 2012-12-20 21:01:39  54016  ----a-w-  c:windowssystem32driversbgdgk.sys 2012-12-20 17:21:25  --------  d-----w-  C:found.000 2012-12-13 01:04:36  9728  ----a-w-  c:windowssystem32Wdfres.dll 2012-12-13 01:04:26  66560  ----a-w-  c:windowssystem32driversWUDFPf.sys 2012-12-13 01:04:26  155136  ----a-w-  c:windowssystem32driversWUDFRd.sys 2012-12-13 01:04:25  16896  ----a-w-  c:windowssystem32winusb.dll 2012-12-13 01:04:24  73216  ----a-w-  c:windowssystem32WUDFSvc.dll 2012-12-13 01:04:24  172032  ----a-w-  c:windowssystem32WUDFPlatform.dll 2012-12-13 01:04:23  47720  ----a-w-  c:windowssystem32driversWdfLdr.sys 2012-12-13 01:04:22  526952  ----a-w-  c:windowssystem32driversWdf01000.sys 2012-12-13 01:04:16  38912  ----a-w-  c:windowssystem32WUDFCoinstaller.dll 2012-12-13 01:04:15  196608  ----a-w-  c:windowssystem32WUDFHost.exe 2012-12-13 01:04:14  613888  ----a-w-  c:windowssystem32WUDFx.dll 2012-12-12 05:59:11  2048000  ----a-w-  c:windowssystem32win32k.sys 2012-12-12 05:59:10  376320  ----a-w-  c:windowssystem32dpnet.dll 2012-12-12 05:59:10  23040  ----a-w-  c:windowssystem32dpnsvr.exe 2012-12-12 05:59:08  224640  ----a-w-  c:windowssystem32driversvolsnap.sys 2012-12-12 05:59:00  2048  ----a-w-  c:windowssystem32tzres.dll 2012-12-10 17:06:45  --------  d-----w-  c:programdataThunder Network . ==================== Find3M  ==================== . 2012-12-14 14:49:28  21104  ----a-w-  c:windowssystem32driversmbam.sys 2012-12-11 18:44:21  73656  ----a-w-  c:windowssystem32FlashPlayerCPLApp.cpl 2012-12-11 18:44:21  697272  ----a-w-  c:windowssystem32FlashPlayerApp.exe 2012-11-18 17:35:52  723294  ----a-w-  c:windowsunins000.exe 2012-11-14 02:09:22  1800704  ----a-w-  c:windowssystem32jscript9.dll 2012-11-14 01:58:15  1427968  ----a-w-  c:windowssystem32inetcpl.cpl 2012-11-14 01:57:37  1129472  ----a-w-  c:windowssystem32wininet.dll 2012-11-14 01:49:25  142848  ----a-w-  c:windowssystem32ieUnatt.exe 2012-11-14 01:48:27  420864  ----a-w-  c:windowssystem32vbscript.dll 2012-11-14 01:44:42  2382848  ----a-w-  c:windowssystem32mshtml.tlb 2012-10-30 22:51:58  738504  ----a-w-  c:windowssystem32driversaswSnx.sys 2012-10-30 22:51:57  58680  ----a-w-  c:windowssystem32driversaswMonFlt.sys 2012-10-30 22:51:56  20624  ----a-w-  c:windowssystem32driversaswKbd.sys 2012-10-30 22:51:07  41224  ----a-w-  c:windowsavastSS.scr . ============= FINISH: 19:15:09,49 ===============  

Кристално чист дневник....Не се виждат никакви вируси...не се виждат и остатъци от Авира...!

 

Изтеглете OTCleanIt или от тук,стартирайте и натиснете

Koмпютъра го преинсталирахме ...

след като се изключи и започна да се включва не можа да изпълни стъпките и само се рестартираше ....

Koмпютъра го преинсталирахме ...

след като се изключи и започна да се включва не можа да изпълни стъпките и само се рестартираше ....

 

Това добре...Ама защо ми губихте времето толкова време незнам...!Поздрави и лека вечер..!

Нямахме намерение за преинсталация ...

никога не е преинсталиран ...

но нямаше какво да направя и как да влезна ...както обясних по-горе - след рестарта

не можа да тръгне и целия ден само се рестартираше ...

опитах се да влезна от телефона , да те питам какво да правя , но не можах ..

Мн. ти благодаря за всичко !

 

 

Стих за благодаря :

 

 

Icotonev е спец -

верен Калдата боец .

С вирусите знае как да се пребори ,

с точните програми - да ги обори .

Mery само му ревеше -

тулбар в компа й се вреше  .

Пред Kaspersky е признат -

браво на такъв мозък брат !

 

 

Поздрави !

Мерси..!