Здравейте. Имам проблем с ОС Windows xp sp3. Последните дни системата се забави и то доста, също така тъй като компютъра е на по малкия ми брат, той често ми се оплаква че определени игри MU NFS-MW (старата), CS направо се изключват без той да е направил нищо. Поствам лог от ДДС, поради неизвестни причини за мене лог Attach не ми се появи. Благодаря предварително за помоща!

 

 

 

DDS (Ver_2011-09-30.01) - NTFS_x86 

Internet Explorer: 6.0.2900.5512  BrowserJavaVersion: 10.9.2

Run by Stoyanovi at 19:04:19 on 2012-12-27

Microsoft Windows XP Professional  5.1.2600.3.1251.359.1033.18.1535.937 [GMT 2:00]

.

AV: Doctor Web Anti-Virus *Enabled/Updated* {3454C8F1-ECBC-4180-A6F4-04632FBA762B}

.

============== Running Processes ================

.

C:WINDOWSsystem32Ati2evxx.exe

C:WINDOWSsystem32Ati2evxx.exe

C:WINDOWSExplorer.EXE

C:WINDOWSsystem32spoolsv.exe

C:WINDOWSsystem32nvraidservice.exe

C:Program FilesATI TechnologiesATI.ACEcli.exe

C:WINDOWSSOUNDMAN.EXE

C:WINDOWStsnp2std.exe

C:WINDOWSvsnp2std.exe

C:PROGRA~1OfficeKBOfficeKB.EXE

C:PROGRA~1OfficeKBKPDrv4XP.exe

C:Program FilesCommon FilesJavaJava Updatejusched.exe

C:WINDOWSsystem32ctfmon.exe

C:Program FilesATI TechnologiesATI.ACECLI.exe

C:Program FilesUSB TVEM28XXBDARemote.exe

C:WINDOWSDatecsFType2K.exe

C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe

C:Program FilesIObitAdvanced SystemCare 4ASCService.exe

C:Program FilesJavajre7binjqs.exe

C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE

C:WINDOWSsystem32tlntsvr.exe

C:Program FilesCanonCALCALMAIN.exe

C:WINDOWSsystem32wbemwmiprvse.exe

C:WINDOWSsystem32wbemunsecapp.exe

C:WINDOWSSystem32alg.exe

C:Program FilesGoogleChromeApplicationchrome.exe

C:Program FilesGoogleChromeApplicationchrome.exe

C:Program FilesGoogleChromeApplicationchrome.exe

C:WINDOWSsystem32wbemwmiprvse.exe

C:WINDOWSSystem32svchost.exe -k netsvcs

C:WINDOWSsystem32svchost.exe -k NetworkService

C:WINDOWSsystem32svchost.exe -k imgsvc

C:WINDOWSsystem32svchost.exe -k LocalService

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://home.myplaycity.com/

uSearch Bar = hxxp://www.google.com/ie

uSearch Page = hxxp://www.google.com

uDefault_Search_URL = hxxp://www.google.com/ie

mStart Page = hxxp://home.myplaycity.com/

uInternet Connection Wizard,ShellNext = iexplore

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

mSearchAssistant = hxxp://dts.search-results.com/sr?src=ieb&appid=282&systemid=406&sr=0&q={searchTerms}

uURLSearchHooks: ICQToolBar: {855F3B16-6D32-4fe6-8A56-BBB695989046} - LocalServer32 - <no file>

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:program filescommon filesadobeacrobatactivexAcroIEHelperShim.dll

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:program filesjavajre7binssv.dll

BHO: Searchqu Toolbar: {99079a25-328f-4bd4-be04-00955acaa0a7} - LocalServer32 - <no file>

BHO: DataMngr: {9D717F81-9148-4f12-8568-69135F087DB0} - c:program fileswindows ilivid toolbardatamngrBrowserConnection.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:program filesjavajre7binjp2ssv.dll

TB: DAEMON Tools Toolbar: {32099AAC-C132-4136-9E9A-4E364A424E17} - LocalServer32 - <no file>

TB: DAEMON Tools Toolbar: {32099AAC-C132-4136-9E9A-4E364A424E17} - LocalServer32 - <no file>

TB: ICQToolBar: {855F3B16-6D32-4FE6-8A56-BBB695989046} - LocalServer32 - <no file>

TB: Searchqu Toolbar: {99079a25-328f-4bd4-be04-00955acaa0a7} - LocalServer32 - <no file>

EB: ICQToolBar: {855F3B16-6D32-4FE6-8A56-BBB695989046} - LocalServer32 - <no file>

uRun: [DAEMON Tools Lite] "c:program filesdaemon tools litedaemon.exe" -autorun

uRun: [uTorrent] "c:program filesutorrentuTorrent.exe"  /MINIMIZED

uRun: [Advanced SystemCare 4] "c:program filesiobitadvanced systemcare 4ASCTray.exe"

uRun: [ctfmon.exe] c:windowssystem32ctfmon.exe

uRun: [skype] "c:program filesskypephoneSkype.exe" /nosplash /minimized

mRun: [NVRaidService] c:windowssystem32nvraidservice.exe

mRun: [ATICCC] "c:program filesati technologiesati.acecli.exe" runtime

mRun: [soundMan] SOUNDMAN.EXE

mRun: [KernelFaultCheck] c:windowssystem32dumprep 0 -k

mRun: [tsnp2std] c:windowstsnp2std.exe

mRun: [snp2std] c:windowsvsnp2std.exe

mRun: [Adobe Reader Speed Launcher] "c:program filesadobereader 9.0readerReader_sl.exe"

mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe"

mRun: [OfficeKB] c:progra~1officekbOfficeKB.EXE

mRun: [KPDrv4XP] c:progra~1officekbKPDrv4XP.exe

mRun: [WinampAgent] "c:program fileswinampwinampa.exe"

mRun: [sunJavaUpdateSched] "c:program filescommon filesjavajava updatejusched.exe"

dRun: [CTFMON.EXE] c:windowssystem32ctfmon.exe

StartupFolder: c:docume~1alluse~1startm~1programsstartupaticat~1.lnk - c:program filesati technologiesati.aceCLI.exe

StartupFolder: c:docume~1alluse~1startm~1programsstartupbdarem~1.lnk - c:program filesusb tvem28xxBDARemote.exe

StartupFolder: c:docume~1alluse~1startm~1programsstartupflexty~1.lnk - c:windowsdatecsFType2K.exe

StartupFolder: c:docume~1alluse~1startm~1programsstartupmcafee~1.lnk - c:program filesmcafee security scan2.0.181SSScheduler.exe

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

uPolicies-Explorer: NoFolderOptions = dword:1

mPolicies-System: EnableLUA = dword:0

mPolicies-WindowsSystem: Allow-LogonScript-NetbiosDisabled = dword:1

mPolicies-Explorer: NoDriveTypeAutoRun = dword:145

IE: Add to Google Photos Screensa&ver - c:windowssystem32GPhotos.scr/200

IE: E&xport to Microsoft Excel - c:progra~1mi1933~1office11EXCEL.EXE/3000

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:program filesmessengermsmsgs.exe

.

INFO: HKCU has more than 50 listed domains.

If you wish to scan all of them, select the 'Force scan all domains' option.

.

DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

TCP: NameServer = 88.87.0.2 88.87.10.2

TCP: Interfaces{25B2627E-0177-48D5-BD64-9F5E3F8043C6} : NameServer = 88.87.0.2,208.67.222.222

TCP: Interfaces{25B2627E-0177-48D5-BD64-9F5E3F8043C6} : DHCPNameServer = 88.87.0.2 88.87.10.2

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll

Notify: AtiExtEvent - Ati2evxx.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:windowssystem32WPDShServiceObj.dll

.

============= SERVICES / DRIVERS ===============

.

R1 oreans32;oreans32;c:windowssystem32driversoreans32.sys [2011-1-31 33824]

R2 AdvancedSystemCareService;Advanced SystemCare Service;c:program filesiobitadvanced systemcare 4ASCService.exe [2011-8-23 328536]

R2 mmkbd;Dritek USB Keyboard HID Filter;c:windowssystem32driversmmkbd.sys [2007-1-5 29712]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:windowsmicrosoft.netframeworkv4.0.30319mscorsvw.exe [2010-3-18 130384]

S2 gupdate;Ус»уі° Ѕ° Google рєту°»ё·°цёя (gupdate);c:program filesgoogleupdateGoogleUpdate.exe [2012-12-7 116648]

S2 ICQ Service;ICQ Service;c:program filesicq6toolbaricq service.exe --> c:program filesicq6toolbarICQ Service.exe [?]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2012-5-13 250808]

S3 gAGP440p;gAGP440p;??c:docume~1stoyan~1locals~1tempgagp440p.sys --> c:docume~1stoyan~1locals~1tempgAGP440p.sys [?]

S3 gupdatem;Ус»уі° Ѕ° Google рєту°»ё·°цёя (gupdatem);c:program filesgoogleupdateGoogleUpdate.exe [2012-12-7 116648]

S3 McComponentHostService;McAfee Security Scan Component Host Service;c:program filesmcafee security scan2.0.181McCHSvc.exe [2010-1-15 227232]

S3 nosGetPlusHelper;getPlus® Helper 3004;c:windowssystem32svchost.exe -k nosGetPlusHelper [2004-8-4 14336]

S3 npggsvc;nProtect GameGuard Service;c:windowssystem32gamemon.des -service --> c:windowssystem32GameMon.des -service [?]

S3 WinRM;Windows Remote Management (WS-Management);c:windowssystem32svchost.exe -k WINRM [2004-8-4 14336]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:windowsmicrosoft.netframeworkv4.0.30319wpfWPFFontCache_v0400.exe [2010-3-18 753504]

.

=============== Created Last 30 ================

.

2012-12-27 11:35:59 -------- d-----w- c:documents and settingsstoyanoviDoctor Web

2012-12-27 11:34:27 -------- d-----w- c:program filescommon filesDoctor Web

2012-12-27 11:33:54 -------- d-----w- c:program filesDrWeb

2012-12-27 11:33:54 -------- d-----w- c:documents and settingsall usersapplication dataDoctor Web

2012-12-11 12:24:02 -------- d-----w- c:documents and settingsstoyanovilocal settingsapplication dataSun

2012-12-11 08:15:18 14 ----a-w- c:windowssystem32systeminfo.dll

2012-12-11 08:14:51 1645320 ----a-w- c:windowssystem32gdiplus.dll

2012-12-11 08:14:46 -------- d-----w- c:documents and settingsall usersapplication dataDVD X Studios

2012-12-11 08:06:38 839680 ----a-w- c:windowssystem32lameACM.acm

2012-12-11 08:06:38 650752 ----a-w- c:windowssystem32xvidcore.dll

2012-12-11 08:06:38 243200 ----a-w- c:windowssystem32xvidvfw.dll

2012-12-11 08:06:38 216064 ----a-w- c:windowssystem32lagarith.dll

2012-12-11 08:06:36 151552 ----a-w- c:windowssystem32ac3acm.acm

2012-12-11 08:06:32 112640 ----a-w- c:windowssystem32ff_vfw.dll

2012-12-07 15:59:42 93672 ----a-w- c:windowssystem32WindowsAccessBridge.dll

2012-12-07 03:55:06 96224 ----a-w- c:program filesmozilla firefoxwebapprt-stub.exe

2012-12-07 03:55:06 157272 ----a-w- c:program filesmozilla firefoxwebapp-uninstaller.exe

2012-12-07 03:55:06 12800 ----a-w- c:program filesmozilla firefoxpluginsnpwachk.dll

2012-12-07 03:55:05 103904 ----a-w- c:program filesmozilla firefoxpluginsnppdf32.dll

.

==================== Find3M  ====================

.

2012-12-16 12:23:59 290560 ----a-w- c:windowssystem32atmfd.dll

2012-12-12 17:58:22 73656 ----a-w- c:windowssystem32FlashPlayerCPLApp.cpl

2012-12-12 17:58:22 697272 ----a-w- c:windowssystem32FlashPlayerApp.exe

2012-12-12 17:58:20 16363960 ----a-w- c:windowssystem32FlashPlayerInstaller.exe

2012-12-07 15:59:19 143872 ----a-w- c:windowssystem32javacpl.cpl

2012-12-07 15:59:18 821736 ----a-w- c:windowssystem32npdeployJava1.dll

2012-12-07 15:59:18 746984 ----a-w- c:windowssystem32deployJava1.dll

2012-11-13 01:25:12 1866368 ----a-w- c:windowssystem32win32k.sys

2012-11-02 02:02:42 375296 ----a-w- c:windowssystem32dpnet.dll

2012-10-31 11:33:26 81920 ----a-w- c:windowssystem32ieencode.dll

2012-10-31 11:33:26 667136 ----a-w- c:windowssystem32wininet.dll

2012-10-31 11:33:26 61952 ----a-w- c:windowssystem32tdc.ocx

2012-10-31 09:52:14 369664 ----a-w- c:windowssystem32html.iec

2012-10-02 18:04:21 58368 ----a-w- c:windowssystem32synceng.dll

.

============= FINISH: 19:05:21,53 ===============

DDS (Ver_2011-09-30.01) - NTFS_x86 

Internet Explorer: 6.0.2900.5512  BrowserJavaVersion: 10.9.2

Run by Stoyanovi at 19:04:19 on 2012-12-27

Microsoft Windows XP Professional  5.1.2600.3.1251.359.1033.18.1535.937 [GMT 2:00]

.

AV: Doctor Web Anti-Virus *Enabled/Updated* {3454C8F1-ECBC-4180-A6F4-04632FBA762B}

.

============== Running Processes ================

.

C:WINDOWSsystem32Ati2evxx.exe

C:WINDOWSsystem32Ati2evxx.exe

C:WINDOWSExplorer.EXE

C:WINDOWSsystem32spoolsv.exe

C:WINDOWSsystem32nvraidservice.exe

C:Program FilesATI TechnologiesATI.ACEcli.exe

C:WINDOWSSOUNDMAN.EXE

C:WINDOWStsnp2std.exe

C:WINDOWSvsnp2std.exe

C:PROGRA~1OfficeKBOfficeKB.EXE

C:PROGRA~1OfficeKBKPDrv4XP.exe

C:Program FilesCommon FilesJavaJava Updatejusched.exe

C:WINDOWSsystem32ctfmon.exe

C:Program FilesATI TechnologiesATI.ACECLI.exe

C:Program FilesUSB TVEM28XXBDARemote.exe

C:WINDOWSDatecsFType2K.exe

C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe

C:Program FilesIObitAdvanced SystemCare 4ASCService.exe

C:Program FilesJavajre7binjqs.exe

C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE

C:WINDOWSsystem32tlntsvr.exe

C:Program FilesCanonCALCALMAIN.exe

C:WINDOWSsystem32wbemwmiprvse.exe

C:WINDOWSsystem32wbemunsecapp.exe

C:WINDOWSSystem32alg.exe

C:Program FilesGoogleChromeApplicationchrome.exe

C:Program FilesGoogleChromeApplicationchrome.exe

C:Program FilesGoogleChromeApplicationchrome.exe

C:WINDOWSsystem32wbemwmiprvse.exe

C:WINDOWSSystem32svchost.exe -k netsvcs

C:WINDOWSsystem32svchost.exe -k NetworkService

C:WINDOWSsystem32svchost.exe -k imgsvc

C:WINDOWSsystem32svchost.exe -k LocalService

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://home.myplaycity.com/

uSearch Bar = hxxp://www.google.com/ie

uSearch Page = hxxp://www.google.com

uDefault_Search_URL = hxxp://www.google.com/ie

mStart Page = hxxp://home.myplaycity.com/

uInternet Connection Wizard,ShellNext = iexplore

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

mSearchAssistant = hxxp://dts.search-results.com/sr?src=ieb&appid=282&systemid=406&sr=0&q={searchTerms}

uURLSearchHooks: ICQToolBar: {855F3B16-6D32-4fe6-8A56-BBB695989046} - LocalServer32 - <no file>

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:program filescommon filesadobeacrobatactivexAcroIEHelperShim.dll

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:program filesjavajre7binssv.dll

BHO: Searchqu Toolbar: {99079a25-328f-4bd4-be04-00955acaa0a7} - LocalServer32 - <no file>

BHO: DataMngr: {9D717F81-9148-4f12-8568-69135F087DB0} - c:program fileswindows ilivid toolbardatamngrBrowserConnection.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:program filesjavajre7binjp2ssv.dll

TB: DAEMON Tools Toolbar: {32099AAC-C132-4136-9E9A-4E364A424E17} - LocalServer32 - <no file>

TB: DAEMON Tools Toolbar: {32099AAC-C132-4136-9E9A-4E364A424E17} - LocalServer32 - <no file>

TB: ICQToolBar: {855F3B16-6D32-4FE6-8A56-BBB695989046} - LocalServer32 - <no file>

TB: Searchqu Toolbar: {99079a25-328f-4bd4-be04-00955acaa0a7} - LocalServer32 - <no file>

EB: ICQToolBar: {855F3B16-6D32-4FE6-8A56-BBB695989046} - LocalServer32 - <no file>

uRun: [DAEMON Tools Lite] "c:program filesdaemon tools litedaemon.exe" -autorun

uRun: [uTorrent] "c:program filesutorrentuTorrent.exe"  /MINIMIZED

uRun: [Advanced SystemCare 4] "c:program filesiobitadvanced systemcare 4ASCTray.exe"

uRun: [ctfmon.exe] c:windowssystem32ctfmon.exe

uRun: [skype] "c:program filesskypephoneSkype.exe" /nosplash /minimized

mRun: [NVRaidService] c:windowssystem32nvraidservice.exe

mRun: [ATICCC] "c:program filesati technologiesati.acecli.exe" runtime

mRun: [soundMan] SOUNDMAN.EXE

mRun: [KernelFaultCheck] c:windowssystem32dumprep 0 -k

mRun: [tsnp2std] c:windowstsnp2std.exe

mRun: [snp2std] c:windowsvsnp2std.exe

mRun: [Adobe Reader Speed Launcher] "c:program filesadobereader 9.0readerReader_sl.exe"

mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe"

mRun: [OfficeKB] c:progra~1officekbOfficeKB.EXE

mRun: [KPDrv4XP] c:progra~1officekbKPDrv4XP.exe

mRun: [WinampAgent] "c:program fileswinampwinampa.exe"

mRun: [sunJavaUpdateSched] "c:program filescommon filesjavajava updatejusched.exe"

dRun: [CTFMON.EXE] c:windowssystem32ctfmon.exe

StartupFolder: c:docume~1alluse~1startm~1programsstartupaticat~1.lnk - c:program filesati technologiesati.aceCLI.exe

StartupFolder: c:docume~1alluse~1startm~1programsstartupbdarem~1.lnk - c:program filesusb tvem28xxBDARemote.exe

StartupFolder: c:docume~1alluse~1startm~1programsstartupflexty~1.lnk - c:windowsdatecsFType2K.exe

StartupFolder: c:docume~1alluse~1startm~1programsstartupmcafee~1.lnk - c:program filesmcafee security scan2.0.181SSScheduler.exe

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

uPolicies-Explorer: NoFolderOptions = dword:1

mPolicies-System: EnableLUA = dword:0

mPolicies-WindowsSystem: Allow-LogonScript-NetbiosDisabled = dword:1

mPolicies-Explorer: NoDriveTypeAutoRun = dword:145

IE: Add to Google Photos Screensa&ver - c:windowssystem32GPhotos.scr/200

IE: E&xport to Microsoft Excel - c:progra~1mi1933~1office11EXCEL.EXE/3000

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:program filesmessengermsmsgs.exe

.

INFO: HKCU has more than 50 listed domains.

If you wish to scan all of them, select the 'Force scan all domains' option.

.

DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

TCP: NameServer = 88.87.0.2 88.87.10.2

TCP: Interfaces{25B2627E-0177-48D5-BD64-9F5E3F8043C6} : NameServer = 88.87.0.2,208.67.222.222

TCP: Interfaces{25B2627E-0177-48D5-BD64-9F5E3F8043C6} : DHCPNameServer = 88.87.0.2 88.87.10.2

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll

Notify: AtiExtEvent - Ati2evxx.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:windowssystem32WPDShServiceObj.dll

.

============= SERVICES / DRIVERS ===============

.

R1 oreans32;oreans32;c:windowssystem32driversoreans32.sys [2011-1-31 33824]

R2 AdvancedSystemCareService;Advanced SystemCare Service;c:program filesiobitadvanced systemcare 4ASCService.exe [2011-8-23 328536]

R2 mmkbd;Dritek USB Keyboard HID Filter;c:windowssystem32driversmmkbd.sys [2007-1-5 29712]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:windowsmicrosoft.netframeworkv4.0.30319mscorsvw.exe [2010-3-18 130384]

S2 gupdate;Ус»уі° Ѕ° Google рєту°»ё·°цёя (gupdate);c:program filesgoogleupdateGoogleUpdate.exe [2012-12-7 116648]

S2 ICQ Service;ICQ Service;c:program filesicq6toolbaricq service.exe --> c:program filesicq6toolbarICQ Service.exe [?]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2012-5-13 250808]

S3 gAGP440p;gAGP440p;??c:docume~1stoyan~1locals~1tempgagp440p.sys --> c:docume~1stoyan~1locals~1tempgAGP440p.sys [?]

S3 gupdatem;Ус»уі° Ѕ° Google рєту°»ё·°цёя (gupdatem);c:program filesgoogleupdateGoogleUpdate.exe [2012-12-7 116648]

S3 McComponentHostService;McAfee Security Scan Component Host Service;c:program filesmcafee security scan2.0.181McCHSvc.exe [2010-1-15 227232]

S3 nosGetPlusHelper;getPlus® Helper 3004;c:windowssystem32svchost.exe -k nosGetPlusHelper [2004-8-4 14336]

S3 npggsvc;nProtect GameGuard Service;c:windowssystem32gamemon.des -service --> c:windowssystem32GameMon.des -service [?]

S3 WinRM;Windows Remote Management (WS-Management);c:windowssystem32svchost.exe -k WINRM [2004-8-4 14336]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:windowsmicrosoft.netframeworkv4.0.30319wpfWPFFontCache_v0400.exe [2010-3-18 753504]

.

=============== Created Last 30 ================

.

2012-12-27 11:35:59 -------- d-----w- c:documents and settingsstoyanoviDoctor Web

2012-12-27 11:34:27 -------- d-----w- c:program filescommon filesDoctor Web

2012-12-27 11:33:54 -------- d-----w- c:program filesDrWeb

2012-12-27 11:33:54 -------- d-----w- c:documents and settingsall usersapplication dataDoctor Web

2012-12-11 12:24:02 -------- d-----w- c:documents and settingsstoyanovilocal settingsapplication dataSun

2012-12-11 08:15:18 14 ----a-w- c:windowssystem32systeminfo.dll

2012-12-11 08:14:51 1645320 ----a-w- c:windowssystem32gdiplus.dll

2012-12-11 08:14:46 -------- d-----w- c:documents and settingsall usersapplication dataDVD X Studios

2012-12-11 08:06:38 839680 ----a-w- c:windowssystem32lameACM.acm

2012-12-11 08:06:38 650752 ----a-w- c:windowssystem32xvidcore.dll

2012-12-11 08:06:38 243200 ----a-w- c:windowssystem32xvidvfw.dll

2012-12-11 08:06:38 216064 ----a-w- c:windowssystem32lagarith.dll

2012-12-11 08:06:36 151552 ----a-w- c:windowssystem32ac3acm.acm

2012-12-11 08:06:32 112640 ----a-w- c:windowssystem32ff_vfw.dll

2012-12-07 15:59:42 93672 ----a-w- c:windowssystem32WindowsAccessBridge.dll

2012-12-07 03:55:06 96224 ----a-w- c:program filesmozilla firefoxwebapprt-stub.exe

2012-12-07 03:55:06 157272 ----a-w- c:program filesmozilla firefoxwebapp-uninstaller.exe

2012-12-07 03:55:06 12800 ----a-w- c:program filesmozilla firefoxpluginsnpwachk.dll

2012-12-07 03:55:05 103904 ----a-w- c:program filesmozilla firefoxpluginsnppdf32.dll

.

==================== Find3M  ====================

.

2012-12-16 12:23:59 290560 ----a-w- c:windowssystem32atmfd.dll

2012-12-12 17:58:22 73656 ----a-w- c:windowssystem32FlashPlayerCPLApp.cpl

2012-12-12 17:58:22 697272 ----a-w- c:windowssystem32FlashPlayerApp.exe

2012-12-12 17:58:20 16363960 ----a-w- c:windowssystem32FlashPlayerInstaller.exe

2012-12-07 15:59:19 143872 ----a-w- c:windowssystem32javacpl.cpl

2012-12-07 15:59:18 821736 ----a-w- c:windowssystem32npdeployJava1.dll

2012-12-07 15:59:18 746984 ----a-w- c:windowssystem32deployJava1.dll

2012-11-13 01:25:12 1866368 ----a-w- c:windowssystem32win32k.sys

2012-11-02 02:02:42 375296 ----a-w- c:windowssystem32dpnet.dll

2012-10-31 11:33:26 81920 ----a-w- c:windowssystem32ieencode.dll

2012-10-31 11:33:26 667136 ----a-w- c:windowssystem32wininet.dll

2012-10-31 11:33:26 61952 ----a-w- c:windowssystem32tdc.ocx

2012-10-31 09:52:14 369664 ----a-w- c:windowssystem32html.iec

2012-10-02 18:04:21 58368 ----a-w- c:windowssystem32synceng.dll

.

============= FINISH: 19:05:21,53 ===============

 

Преди това сканирах с dr.web, (Cure it и Антивирус) двете ми дадоха иформация за общо 64 зловредни програми, като само 24 от тях бяха изчистени (всичките от които троянци) Малко недоглеждане от моя страна ето и 2рия файл 

 

 

 

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-09-30.01)

.

Microsoft Windows XP Professional

Boot Device: DeviceHarddiskVolume1

Install Date: 24.4.2011 г. 14:56:52

System Uptime: 27.12.2012 г. 18:47:47 (1 hours ago)

.

Motherboard: Gigabyte Technology Co., Ltd. |  | nForce

Processor: AMD Sempron Processor 2600+ | Socket 754 | 1607/200mhz

.

==== Disk Partitions =========================

.

A: is Removable

C: is FIXED (NTFS) - 34 GiB total, 2,781 GiB free.

D: is FIXED (NTFS) - 42 GiB total, 21,038 GiB free.

E: is CDROM ()

F: is CDROM ()

G: is CDROM ()

.

==== Disabled Device Manager Items =============

.

Class GUID: {4D36E97B-E325-11CE-BFC1-08002BE10318}

Description: AU8EJAYX IDE Controller

Device ID: ACPIPNPA0004&5D18F2DF&0

Manufacturer: Unknown Manufacturer

Name: AU8EJAYX IDE Controller

PNP Device ID: ACPIPNPA0004&5D18F2DF&0

Service: ap5pi0kr

.

==== System Restore Points ===================

.

RP88: 17.8.2011 г. 01:40:25 - System Checkpoint

RP89: 20.8.2011 г. 17:47:33 - System Checkpoint

RP90: 21.8.2011 г. 19:01:30 - System Checkpoint

RP91: 21.8.2011 г. 21:51:29 - Removed Readon TV Movie Radio Player 6.2.0.0

RP92: 23.8.2011 г. 19:54:21 - Installed %1 %2.

RP93: 23.8.2011 г. 19:54:42 - Installed Windows XP Update for Microsoft Windows (KB971513).

RP94: 23.8.2011 г. 19:55:04 - Installed %1 %2.

RP95: 23.8.2011 г. 19:56:53 - Installed Windows XP KB2492386.

RP96: 24.8.2011 г. 23:35:47 - Software Distribution Service 3.0

RP97: 26.8.2011 г. 02:38:08 - System Checkpoint

RP98: 27.8.2011 г. 03:22:07 - System Checkpoint

RP99: 28.8.2011 г. 05:11:12 - System Checkpoint

RP100: 29.8.2011 г. 05:21:45 - System Checkpoint

RP101: 29.8.2011 г. 22:38:12 - Removed Skype™ 5.5

RP102: 31.8.2011 г. 23:32:58 - System Checkpoint

RP103: 02.9.2011 г. 09:41:45 - System Checkpoint

RP104: 03.9.2011 г. 20:28:36 - System Checkpoint

RP105: 04.9.2011 г. 20:51:22 - System Checkpoint

RP106: 07.9.2011 г. 14:24:04 - System Checkpoint

RP107: 09.9.2011 г. 14:28:15 - Software Distribution Service 3.0

RP108: 13.9.2011 г. 09:13:12 - Installed Java 6 Update 27

RP109: 22.9.2011 г. 13:16:35 - Software Distribution Service 3.0

RP110: 24.9.2011 г. 12:46:16 - System Checkpoint

.

==== Installed Programs ======================

.

4 Elements

Adobe Acrobat 4.0

Adobe Download Manager

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader 9.5.2 - Bulgarian

Advanced SystemCare 4

Aplicacion para detectar Winamp

Ashampoo Undeleter v.1.10

Athlon 64 Processor Driver

ATI - Software Uninstall Utility

ATI AVIVO Codecs

ATI Catalyst Control Center

ATI Control Panel

ATI Display Driver

BS.Player PRO

Canon Camera Access Library

Canon MovieEdit Task for ZoomBrowser EX

Canon Utilities CameraWindow

Canon Utilities CameraWindow DC 8

Canon Utilities Movie Uploader for YouTube

Canon Utilities MyCamera

Canon Utilities PhotoStitch

Canon Utilities ZoomBrowser EX

Canon ZoomBrowser EX Memory Card Utility

Catalyst Control Center - Branding

Catalyst Control Center Graphics Full Existing

Catalyst Control Center Graphics Full New

Catalyst Control Center Graphics Light

Catalyst Control Center Graphics Previews Common

Catalyst Control Center HydraVision Full

Catalyst Control Center Localization All

ccc-core-preinstall

ccc-utility

CCC Help Chinese Standard

CCC Help Chinese Traditional

CCC Help Czech

CCC Help Danish

CCC Help Dutch

CCC Help English

CCC Help Finnish

CCC Help French

CCC Help German

CCC Help Greek

CCC Help Hungarian

CCC Help Italian

CCC Help Japanese

CCC Help Korean

CCC Help Norwegian

CCC Help Polish

CCC Help Portuguese

CCC Help Russian

CCC Help Spanish

CCC Help Swedish

CCC Help Thai

CCC Help Turkish

CMe2+ Web Camera

DTS+AC3 Filter

FlexType 2K

Google Chrome

Google Update Helper

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix for Windows Media Format SDK (KB902344)

Hotfix for Windows XP (KB2570791)

Hotfix for Windows XP (KB2633952)

Hotfix for Windows XP (KB2756822)

Hotfix for Windows XP (KB2779562)

Hotfix for Windows XP (KB952287)

Hotfix for Windows XP (KB961118)

Inhatch web plugins

Java 7 Update 9

Java Auto Updater

Java 6 Update 35

Jewels of Sinai

K-Lite Mega Codec Pack 9.5.5

McAfee Security Scan Plus

Media and Office Keyboard

Microsoft .NET Compact Framework 1.0 SP3 Developer

Microsoft .NET Compact Framework 2.0 SP2

Microsoft .NET Compact Framework 3.5

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 Security Update (KB979906)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft .NET Framework 4 Multi-Targeting Pack

Microsoft Application Error Reporting

Microsoft Base Smart Card Cryptographic Service Provider Package

Microsoft Device Emulator version 1.0 - ENU

Microsoft Device Emulator version 3.0 - ENU

Microsoft Document Explorer 2005

Microsoft Document Explorer 2008

Microsoft Help Viewer 1.0

Microsoft Kernel-Mode Driver Framework Feature Pack 1.9

Microsoft Office 2003 Bulgarian User Interface Pack

Microsoft Office Professional Edition 2003

Microsoft SQL Server 2005 Mobile [ENU] Developer Tools

Microsoft SQL Server Compact 3.5 Design Tools ENU

Microsoft SQL Server Compact 3.5 for Devices ENU

Microsoft SQL Server Compact 3.5 SP2 ENU

Microsoft SQL Server Database Publishing Wizard 1.2

Microsoft SQL Server Native Client

Microsoft SQL Server Setup Support Files (English)

Microsoft SQL Server VSS Writer

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

Microsoft Visual J# 2.0 Redistributable Package

Microsoft Visual Studio 2005 Professional Edition - ENU

Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools

Microsoft Windows SDK for Visual Studio 2008 Win32 Tools

Movie Maker

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

MSXML 6 Service Pack 2 (KB973686)

Natalie Brooks - Mystery at Hillcrest High

NEC-Mitsubishi NaViSet

Need for Speed™ Most Wanted

Nero

Nokia Connectivity Cable Driver

NVIDIA Drivers

Picasa 3

PuppetShow Souls of the Innocent 1.01

Realtek AC'97 Audio

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Extended (KB2416472)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft Windows (KB2564958)

Security Update for Windows Media Player (KB973540)

Security Update for Windows Media Player (KB979402)

Security Update for Windows XP (KB2079403)

Security Update for Windows XP (KB2115168)

Security Update for Windows XP (KB2121546)

Security Update for Windows XP (KB2229593)

Security Update for Windows XP (KB2296011)

Security Update for Windows XP (KB2347290)

Security Update for Windows XP (KB2360937)

Security Update for Windows XP (KB2387149)

Security Update for Windows XP (KB2393802)

Security Update for Windows XP (KB2412687)

Security Update for Windows XP (KB2419632)

Security Update for Windows XP (KB2423089)

Security Update for Windows XP (KB2440591)

Security Update for Windows XP (KB2443105)

Security Update for Windows XP (KB2476490)

Security Update for Windows XP (KB2476687)

Security Update for Windows XP (KB2478960)

Security Update for Windows XP (KB2478971)

Security Update for Windows XP (KB2479943)

Security Update for Windows XP (KB2481109)

Security Update for Windows XP (KB2483185)

Security Update for Windows XP (KB2485663)

Security Update for Windows XP (KB2497640)

Security Update for Windows XP (KB2503658)

Security Update for Windows XP (KB2503665)

Security Update for Windows XP (KB2506212)

Security Update for Windows XP (KB2506223)

Security Update for Windows XP (KB2507618)

Security Update for Windows XP (KB2507938)

Security Update for Windows XP (KB2508429)

Security Update for Windows XP (KB2509553)

Security Update for Windows XP (KB2510581)

Security Update for Windows XP (KB2511455)

Security Update for Windows XP (KB2524375)

Security Update for Windows XP (KB2530548)

Security Update for Windows XP (KB2535512)

Security Update for Windows XP (KB2536276-v2)

Security Update for Windows XP (KB2536276)

Security Update for Windows XP (KB2544521)

Security Update for Windows XP (KB2544893-v2)

Security Update for Windows XP (KB2544893)

Security Update for Windows XP (KB2555917)

Security Update for Windows XP (KB2559049)

Security Update for Windows XP (KB2562937)

Security Update for Windows XP (KB2566454)

Security Update for Windows XP (KB2567053)

Security Update for Windows XP (KB2567680)

Security Update for Windows XP (KB2570222)

Security Update for Windows XP (KB2570947)

Security Update for Windows XP (KB2584146)

Security Update for Windows XP (KB2585542)

Security Update for Windows XP (KB2586448)

Security Update for Windows XP (KB2592799)

Security Update for Windows XP (KB2598479)

Security Update for Windows XP (KB2603381)

Security Update for Windows XP (KB2618444)

Security Update for Windows XP (KB2618451)

Security Update for Windows XP (KB2619339)

Security Update for Windows XP (KB2620712)

Security Update for Windows XP (KB2621440)

Security Update for Windows XP (KB2624667)

Security Update for Windows XP (KB2631813)

Security Update for Windows XP (KB2633171)

Security Update for Windows XP (KB2639417)

Security Update for Windows XP (KB2641653)

Security Update for Windows XP (KB2646524)

Security Update for Windows XP (KB2647516)

Security Update for Windows XP (KB2647518)

Security Update for Windows XP (KB2653956)

Security Update for Windows XP (KB2655992)

Security Update for Windows XP (KB2659262)

Security Update for Windows XP (KB2660465)

Security Update for Windows XP (KB2661637)

Security Update for Windows XP (KB2675157)

Security Update for Windows XP (KB2676562)

Security Update for Windows XP (KB2685939)

Security Update for Windows XP (KB2691442)

Security Update for Windows XP (KB2695962)

Security Update for Windows XP (KB2698365)

Security Update for Windows XP (KB2699988)

Security Update for Windows XP (KB2705219)

Security Update for Windows XP (KB2707511)

Security Update for Windows XP (KB2709162)

Security Update for Windows XP (KB2712808)

Security Update for Windows XP (KB2718523)

Security Update for Windows XP (KB2719985)

Security Update for Windows XP (KB2722913)

Security Update for Windows XP (KB2723135)

Security Update for Windows XP (KB2724197)

Security Update for Windows XP (KB2727528)

Security Update for Windows XP (KB2731847)

Security Update for Windows XP (KB2744842)

Security Update for Windows XP (KB2753842-v2)

Security Update for Windows XP (KB2753842)

Security Update for Windows XP (KB2758857)

Security Update for Windows XP (KB2761226)

Security Update for Windows XP (KB2761465)

Security Update for Windows XP (KB2770660)

Security Update for Windows XP (KB2779030)

Security Update for Windows XP (KB923561)

Security Update for Windows XP (KB923789)

Security Update for Windows XP (KB941569)

Security Update for Windows XP (KB946648)

Security Update for Windows XP (KB950762)

Security Update for Windows XP (KB950974)

Security Update for Windows XP (KB951376-v2)

Security Update for Windows XP (KB951748)

Security Update for Windows XP (KB952004)

Security Update for Windows XP (KB952954)

Security Update for Windows XP (KB955069)

Security Update for Windows XP (KB956572)

Security Update for Windows XP (KB956744)

Security Update for Windows XP (KB956802)

Security Update for Windows XP (KB956803)

Security Update for Windows XP (KB956844)

Security Update for Windows XP (KB958644)

Security Update for Windows XP (KB958869)

Security Update for Windows XP (KB959426)

Security Update for Windows XP (KB960225)

Security Update for Windows XP (KB960803)

Security Update for Windows XP (KB960859)

Security Update for Windows XP (KB961501)

Security Update for Windows XP (KB969059)

Security Update for Windows XP (KB970238)

Security Update for Windows XP (KB970430)

Security Update for Windows XP (KB971468)

Security Update for Windows XP (KB971657)

Security Update for Windows XP (KB972270)

Security Update for Windows XP (KB973507)

Security Update for Windows XP (KB973869)

Security Update for Windows XP (KB973904)

Security Update for Windows XP (KB974112)

Security Update for Windows XP (KB974318)

Security Update for Windows XP (KB974392)

Security Update for Windows XP (KB974571)

Security Update for Windows XP (KB975025)

Security Update for Windows XP (KB975467)

Security Update for Windows XP (KB975560)

Security Update for Windows XP (KB975561)

Security Update for Windows XP (KB975562)

Security Update for Windows XP (KB975713)

Security Update for Windows XP (KB977816)

Security Update for Windows XP (KB977914)

Security Update for Windows XP (KB978037)

Security Update for Windows XP (KB978338)

Security Update for Windows XP (KB978542)

Security Update for Windows XP (KB978601)

Security Update for Windows XP (KB978706)

Security Update for Windows XP (KB979309)

Security Update for Windows XP (KB979482)

Security Update for Windows XP (KB979559)

Security Update for Windows XP (KB979683)

Security Update for Windows XP (KB979687)

Security Update for Windows XP (KB980218)

Security Update for Windows XP (KB980232)

Security Update for Windows XP (KB980436)

Security Update for Windows XP (KB981322)

Security Update for Windows XP (KB981997)

Security Update for Windows XP (KB982132)

Security Update for Windows XP (KB982381)

Security Update for Windows XP (KB982665)

Skins

Skype Launcher

Skype™ 3.8

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2600217)

Update for Microsoft Windows (KB971513)

Update for Windows XP (KB2345886)

Update for Windows XP (KB2492386)

Update for Windows XP (KB2541763)

Update for Windows XP (KB2607712)

Update for Windows XP (KB2616676-v2)

Update for Windows XP (KB2641690)

Update for Windows XP (KB2661254-v2)

Update for Windows XP (KB2718704)

Update for Windows XP (KB2736233)

Update for Windows XP (KB2749655)

Update for Windows XP (KB951978)

Update for Windows XP (KB955759)

Update for Windows XP (KB967715)

Update for Windows XP (KB968389)

Update for Windows XP (KB971029)

Update for Windows XP (KB971737)

Update for Windows XP (KB973687)

Update for Windows XP (KB973815)

USB Video Driver

WebFldrs XP

Winamp

Windows Driver Package - Advanced Micro Devices, Inc. (USB28xxBGA) Media  (08/31/2007 5.7.0831.0)

Windows Driver Package - eMPIA Technology Inc, (emAudio) MEDIA  (08/31/2007 5.7.0831.0)

Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray

Windows Genuine Advantage Notifications (KB905474)

Windows Management Framework Core

Windows Media Format 11 runtime

Windows Media Format Runtime

Windows XP Service Pack 3

WinRAR archiver

XML Paper Specification Shared Components Pack 1.0

µTorrent

.

==== Event Viewer Messages From Past Week ========

.

27.12.2012 і. 18:43:12, error: Service Control Manager [7031]  - The Dr.Web Scanning Engine (DrWebEngine) service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

27.12.2012 і. 18:41:06, error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  atapi PCIIde

27.12.2012 і. 18:40:29, error: sr [1]  - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'.  It has stopped monitoring the volume.

23.12.2012 і. 19:12:36, error: Dhcp [1002]  - The IP address lease 192.168.1.100 for the Network Card with network address 001485BF543A has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).

.

==== End Of File ===========================

 

Редактирано 28 декември 201213 г. от icotonev (преглед на промените)

Намирисва ми на прегрял елемент /видеокарта или захранване/, поради блокирал вентилатор за охлаждане. Същите симптоми се появяват и при дефектна плочка RAM памет.

Възможен е и вариянта с РАМ паметта тъй като наскоро взех използвана платка (1 гб) и му я сложих за да засиля машината, но не ми дава дефект към нея... всичко си открива, но като се замисля преди време даваше все едно липсва някакъв драйвър. Намерих стари снимки с проблема с драйвера - става дума за "API5PI0KR IDE Controller". което е USB контролер доколкото не ме лъжат знанията от ВТУ които ми наби лектора ми (rofl)

Редактирано 27 декември 201213 г. от Yavor Stoyanov (преглед на промените)

Здравейте..!Не разбирам това какво общо има със зловреден софтуер..?

 

Изтеглете Malwarebytes' Anti-Malware или от тук (не забравяйте да обновите програмата с нови дефиниции)

* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.
* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.
* Ако има намерени обновявания, тя ще ги изтегли и инсталира.
* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.
* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.
* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.
* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.
* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. Копирайте този лог и го публикувайте в следващия си коментар по темата.

Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

Malwarebytes Anti-Malware 1.65.1.1000

www.malwarebytes.org

 

Database version: v2012.12.27.08

 

Windows XP Service Pack 3 x86 NTFS

Internet Explorer 6.0.2900.5512

Stoyanovi :: TELNET [administrator]

 

27.12.2012 г. 21:26:59

mbam-log-2012-12-27 (21-26-59).txt

 

Scan type: Full scan (C:|D:|)

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 319467

Time elapsed: 1 hour(s), 25 minute(s), 8 second(s)

 

Memory Processes Detected: 0

(No malicious items detected)

 

Memory Modules Detected: 0

(No malicious items detected)

 

Registry Keys Detected: 0

(No malicious items detected)

 

Registry Values Detected: 1

HKCUSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer|NoFolderOptions (Hijack.FolderOptions) -> Data: 1 -> Quarantined and deleted successfully.

 

Registry Data Items Detected: 0

(No malicious items detected)

 

Folders Detected: 2

C:WINDOWSsystem3228463 (Keylogger.Ardamax) -> Quarantined and deleted successfully.

C:WINDOWSsystem32twain_32 (Backdoor.Bot) -> Quarantined and deleted successfully.

 

Files Detected: 12

C:Documents and SettingsStoyanoviLocal SettingsApplication Databdfueqqn.exe (Trojan.LameShield) -> Quarantined and deleted successfully.

C:Program FilesiRolliRoll.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.

C:Program FilesKoralSoftEuroDictXPUnInstall.exe (Trojan.Downloader.bh) -> Quarantined and deleted successfully.

C:System Volume Information_restore{FC9E5835-6076-4CB2-97FF-E2E746C9EA62}RP110A0230770.exe (PUP.ArdamaxKeyLogger) -> Quarantined and deleted successfully.

C:System Volume Information_restore{FC9E5835-6076-4CB2-97FF-E2E746C9EA62}RP110A0230774.exe (PUP.ArdamaxKeyLogger) -> Quarantined and deleted successfully.

C:WINDOWSDatecsRemove.exe (Trojan.FakeAlert.SecGen) -> Quarantined and deleted successfully.

D:System Volume Information_restore{FC9E5835-6076-4CB2-97FF-E2E746C9EA62}RP110A0098234.EXE (Dont.Steal.Our.Software) -> Quarantined and deleted successfully.

D:System Volume Information_restore{FC9E5835-6076-4CB2-97FF-E2E746C9EA62}RP110A0098235.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.

D:System Volume Information_restore{FC9E5835-6076-4CB2-97FF-E2E746C9EA62}RP110A0113300.exe (Trojan.Agent) -> Quarantined and deleted successfully.

C:WINDOWSsystem3228463LYIV.001 (Keylogger.Ardamax) -> Quarantined and deleted successfully.

C:WINDOWSsystem3228463LYIV.002 (Keylogger.Ardamax) -> Quarantined and deleted successfully.

C:WINDOWSsystem3228463LYIV.002.tmp (Keylogger.Ardamax) -> Quarantined and deleted successfully.

 

(end)

 

Изтеглете ComboFix от тук и го запазете на десктопа си.

• Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.

Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs

 

• Стартирайте Combo-Fix.com и следвайте инструкциите.

Бележка: ComboFix ще се стартира без инсталирана Recovery Console.

• Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repair режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.
• Следвайте инструкциите, за да позволите на ComboFix да изтегли и инсталира Microsoft Windows Recovery Console. В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.




След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:



Изберете Yes, за да продължи сканирането за зловреден софтуер.

Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:ComboFix.txt в следващия Ви коментар в тази тема.

Бележка:

• Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа.
• ComboFix ще нулира всички настройки на Microsoft Internet Explorer, включително да направи IE браузър по подразбиране.
• ComboFix ще изключи autorun функцията на ВСИЧКИ CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и Ви защити от бъдещи вируси/заплахи, които поразяват чрез autorun. Ако това е проблем за вас - моля, уведомете ме.
• ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той ще прекрати интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си.
• В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:BUG.txt в следващия Ви коментар в тази тема.

Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.

Копирайте текста в карето на notepad и го запазвате с име CFScript.txt на десктопа си:
 

KILLALL::ClearJavaCache::File::c:docume~1STOYAN~1LOCALS~1TempgAGP440p.sysc:program filesMcAfee Security Scan2.0.181SSScheduler.exec:program filesMcAfee Security Scan2.0.181McCHSvc.exeDriver::gAGP440pMcComponentHostService

 
 
 След съхранението преместете  CFScript.txt на иконата на ComboFix.exe



Генерирания рапорт копирайте  и го поставете в следващия си коментар...!

Отговора на компютъра.... Смимката е качена от лаптопа ми ( при него няма инфекция) Редовно си го поддържам и сканирам

Редактирано 28 декември 201213 г. от Yavor Stoyanov (преглед на промените)

Отговора на компютъра.... Смимката е качена от лаптопа ми ( при него няма инфекция) Редовно си го поддържам и сканирам

 

???

Редактирана е горната тема забравих да натисна копчето за прикачи (rofl)

2ри опит ..... неуспешен!

Редактирано 28 декември 201213 г. от Yavor Stoyanov (преглед на промените)

Стартирайте компютъра си в Safe Mode и така изпълнете същия скрипт....!

Супер..! Какво е положението сега със системата ви.....Доста неща поразчистихме...Някакви проблеми наблюдавате ли..?

Не. Благодаря за което. Имам друг въпрос, които не е във вашата компетенция, но може и вие да знаете. На компютъра, който чистим дребния си е играл с инсталационен диск на Уиндолс, и всеки път треа да избирам кой уин да зарежда (този който не е доинсталиран или инсталирания) Има ли някакъв начин да прекратя инсталацията, на която и без това ми дава че има липсващ файл и заради него не може да се довърши. Системата е добре в момента за което съм ви страшно много благодарен. Ще разгледам дали му прави същите проблеми и ще ви отговоря до няколко часа

За сега никакви проблеми Темата може да се заключи. Ако някой има отговор на горния въпрос по отношение на инсталацията може да ми пише на ЛС

Деинсталирайте ComboFix така:

• Натиснете Start ==> Run ==> въведете командата Combofix /Uninstall ==> OK

• Моля, следвайте инструкциите, за да деинсталирате ComboFix. Ще получите съобщение, в което се казва ComboFix е деинсталиран успешно.

 

Изтеглете OTCleanIt или от тук,стартирайте и натиснете

 

Изтрийте всичко друго което е останало след процедурите по деинсталация .Прпоръчвам програмата Malwarebytes' Anti-Malware да остане на вашия компютър и периодично да сканирате системата си с нея (поне един -два пъти в седмицата),като не забравяйте да обновите дефинициите и преди всяко сканиране..!

 

Весели празници и безопасен интернет през  Новата година...!