Ситуацията е следната.Имах проблем със Firefox,изразяваше се във това,че се затваряше бавно.Пуснах MBAM и SAS,като SAS откри въпросния Hijacker и уж го премахна успешно,но във момента браузъра работни мудно при затваряне дори забива и Explorer......Не знам дали SAS  успешно е изтрил заразата,прилагам логовете от DDS:

 

 

DDS (Ver_2011-09-30.01) - NTFS_AMD64 Internet Explorer: 8.0.7601.17514 Run by Night Rider at 0:38:43 on 2013-01-24 Microsoft Windows 7 Professional 6.1.7601.1.1251.359.1026.18.4094.2896 [GMT 2:00] . AV: COMODO Antivirus *Enabled/Updated* {458BB331-2324-0753-3D5F-1472EB102AC0} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: COMODO Defense+ *Enabled/Updated* {FEEA52D5-051E-08DD-07EF-2F009097607D} FW: COMODO Firewall *Enabled* {7DB03214-694B-060B-1600-BD4715C36DBB} . ============== Running Processes =============== . C:Windowssystem32wininit.exe C:Windowssystem32lsm.exe C:Windowssystem32svchost.exe -k DcomLaunch C:Windowssystem32nvvsvc.exe C:Windowssystem32svchost.exe -k RPCSS C:Program FilesCOMODOCOMODO Internet Securitycmdagent.exe C:Windowssystem32svchost.exe -k NetworkService C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted C:Windowssystem32svchost.exe -k netsvcs C:Windowssystem32svchost.exe -k GPSvcGroup C:Windowssystem32svchost.exe -k LocalService C:Windowssystem32svchost.exe -k LocalServiceNoNetwork C:Program FilesSUPERAntiSpywareSASCORE64.EXE C:Program Files (x86)Malwarebytes' Anti-Malwarembamscheduler.exe C:Program Files (x86)Malwarebytes' Anti-Malwarembamservice.exe C:WindowsSysWOW64vmnat.exe C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE C:WindowsSysWOW64vmnetdhcp.exe C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSvcM.exe C:Program Files (x86)Common FilesVMwareUSBvmware-usbarbitrator64.exe C:Windowssystem32SearchIndexer.exe C:Windowssystem32svchost.exe -k NetworkServiceNetworkRestricted C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation C:Windowssystem32Dwm.exe C:WindowsExplorer.EXE C:Program Files (x86)Malwarebytes' Anti-Malwarembamgui.exe C:Program FilesCOMODOCOMODO Internet Securitycfp.exe C:Program FilesRealtekAudioHDARAVCpl64.exe C:Program Files (x86)RocketDockRocketDock.exe C:Program FilesNVIDIA CorporationDisplaynvxdsync.exe C:Windowssystem32nvvsvc.exe C:Windowssystem32taskhost.exe C:Program Files (x86)MSI AfterburnerMSIAfterburner.exe C:Windowssystem32SearchProtocolHost.exe C:Windowssystem32SearchFilterHost.exe C:Windowssystem32conhost.exe C:Windowssystem32wbemwmiprvse.exe C:WindowsSystem32cscript.exe . ============== Pseudo HJT Report =============== . mWinlogon: Userinit = userinit.exe BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program Files (x86)Common FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll uRun: [RocketDock] "C:Program Files (x86)RocketDockRocketDock.exe" uPolicies-Explorer: NoDriveTypeAutoRun = dword:255 mPolicies-Explorer: NoActiveDesktop = dword:1 mPolicies-Explorer: NoActiveDesktopChanges = dword:1 mPolicies-Explorer: NoDriveTypeAutoRun = dword:255 mPolicies-System: ConsentPromptBehaviorUser = dword:3 mPolicies-System: EnableUIADesktopToggle = dword:0 IE: E&xport to Microsoft Excel - C:PROGRA~2MICROS~1OFFICE11EXCEL.EXE/3000 IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} LSP: %windir%system32vsocklib.dll . INFO: HKCU has more than 50 listed domains. If you wish to scan all of them, select the 'Force scan all domains' option. . TCP: Interfaces{074B130A-393F-4554-B94E-47A32B33EB3C} : NameServer = 198.153.192.40 198.153.194.40 TCP: Interfaces{6FB8467E-F4A1-4D04-AEF9-2E72D92A8709} : NameServer = 198.153.192.40,198.153.194.40 SSODL: WebCheck - <orphaned> LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg pku2u livessp x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll x64-Run: [COMODO Internet Security] "C:Program FilesCOMODOCOMODO Internet Securitycfp.exe" -h x64-Run: [RTHDVCPL] C:Program FilesRealtekAudioHDARAVCpl64.exe -s x64-SSODL: WebCheck - <orphaned> . ================= FIREFOX =================== . FF - ProfilePath - C:UsersNight RiderAppDataRoamingMozillaFirefoxProfilesre5wl6x8.default FF - plugin: C:Program Files (x86)Microsoft Silverlight5.1.10411.0npctrlui.dll FF - plugin: C:WindowsSysWOW64MacromedFlashNPSWF32_11_5_502_146.dll . ============= SERVICES / DRIVERS =============== . R0 vsock;vSockets Driver;C:WindowsSystem32driversvsock.sys [2012-12-2 70296] R1 cmderd;COMODO Internet Security Eradication Driver;C:WindowsSystem32driverscmderd.sys [2012-11-7 22736] R1 cmdGuard;COMODO Internet Security Sandbox Driver;C:WindowsSystem32driverscmdGuard.sys [2012-11-7 584056] R1 cmdHlp;COMODO Internet Security Helper Driver;C:WindowsSystem32driverscmdhlp.sys [2012-11-7 38144] R1 SASDIFSV;SASDIFSV;C:Program FilesSUPERAntiSpywaresasdifsv64.sys [2011-7-22 14928] R1 SASKUTIL;SASKUTIL;C:Program FilesSUPERAntiSpywaresaskutil64.sys [2011-7-12 12368] R2 !SASCORE;SAS Core Service;C:Program FilesSUPERAntiSpywareSASCore64.exe [2012-7-11 140672] R2 MBAMScheduler;MBAMScheduler;C:Program Files (x86)Malwarebytes' Anti-Malwarembamscheduler.exe [2012-11-30 398184] R2 MBAMService;MBAMService;C:Program Files (x86)Malwarebytes' Anti-Malwarembamservice.exe [2012-11-30 682344] R2 VMUSBArbService;VMware USB Arbitration Service;C:Program Files (x86)Common FilesVMwareUSBvmware-usbarbitrator64.exe [2012-10-11 918680] R3 MBAMProtector;MBAMProtector;C:WindowsSystem32driversmbam.sys [2012-11-30 24176] R3 RTCore64;RTCore64;C:Program Files (x86)MSI AfterburnerRTCore64.sys [2013-1-23 13368] R3 RTL8167;Realtek 8167 NT Driver;C:WindowsSystem32driversRt64win7.sys [2011-6-10 539240] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2010-3-18 138576] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe [2012-11-30 251400] S3 dmvsc;dmvsc;C:WindowsSystem32driversdmvsc.sys [2011-4-12 71168] S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);C:WindowsSystem32driversL1C62x64.sys [2009-6-10 57344] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:WindowsSystem32driversrdpvideominiport.sys [2012-11-30 19456] S3 StorSvc;Storage Service;C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136] S3 TsUsbFlt;TsUsbFlt;C:WindowsSystem32driversTsUsbFlt.sys [2012-11-30 57856] S3 TsUsbGD;Remote Desktop Generic USB Device;C:WindowsSystem32driversTsUsbGD.sys [2012-11-30 30208] S3 WatAdminSvc;Услуга на технологиите за активиране на Windows;C:WindowsSystem32WatWatAdminSvc.exe [2012-11-30 1255736] . =============== Created Last 30 ================ . 2013-01-23 15:50:29   16200   ----a-w-   C:Windowsstinger.sys 2013-01-23 15:48:21   --------   d-----w-   C:Program Files (x86)stinger 2013-01-22 11:13:33   --------   d-----w-   C:UsersNight RiderAppDataLocalDiagnostics 2013-01-13 12:38:26   --------   d-----w-   C:UsersNight RiderDoctor Web 2013-01-09 09:48:09   800768   ----a-w-   C:WindowsSystem32usp10.dll 2013-01-09 09:47:59   51712   ----a-w-   C:WindowsSysWow64esrb.rs 2013-01-01 01:15:41   891240   ----a-w-   C:WindowsSystem32nvvsvc.exe 2013-01-01 01:15:41   63336   ----a-w-   C:WindowsSystem32nvshext.dll 2013-01-01 01:15:41   6200680   ----a-w-   C:WindowsSystem32nvcpl.dll 2013-01-01 01:15:41   3536817   ----a-w-   C:WindowsSystem32nvcoproc.bin 2013-01-01 01:15:41   3293544   ----a-w-   C:WindowsSystem32nvsvc64.dll 2013-01-01 01:15:41   118120   ----a-w-   C:WindowsSystem32nvmctray.dll 2013-01-01 01:15:16   --------   d-----w-   C:ProgramDataNVIDIA Corporation 2012-12-28 14:16:53   --------   d-----w-   C:UsersNight RiderAppDataLocalPrograms . ==================== Find3M  ==================== . 2013-01-08 19:52:50   74248   ----a-w-   C:WindowsSysWow64FlashPlayerCPLApp.cpl 2013-01-08 19:52:50   697864   ----a-w-   C:WindowsSysWow64FlashPlayerApp.exe 2013-01-05 20:56:28   12872   ----a-w-   C:WindowsSystem32bootdelete.exe 2012-12-16 17:11:22   46080   ----a-w-   C:WindowsSystem32atmlib.dll 2012-12-16 14:45:03   367616   ----a-w-   C:WindowsSystem32atmfd.dll 2012-12-16 14:13:28   295424   ----a-w-   C:WindowsSysWow64atmfd.dll 2012-12-16 14:13:20   34304   ----a-w-   C:WindowsSysWow64atmlib.dll 2012-12-14 14:49:28   24176   ----a-w-   C:WindowsSystem32driversmbam.sys 2012-12-07 13:20:16   441856   ----a-w-   C:WindowsSystem32Wpc.dll 2012-12-07 13:15:31   2746368   ----a-w-   C:WindowsSystem32gameux.dll 2012-12-07 12:26:17   308736   ----a-w-   C:WindowsSysWow64Wpc.dll 2012-12-07 12:20:43   2576384   ----a-w-   C:WindowsSysWow64gameux.dll 2012-12-07 11:20:04   30720   ----a-w-   C:WindowsSystem32usk.rs 2012-12-07 11:20:03   43520   ----a-w-   C:WindowsSystem32csrr.rs 2012-12-07 11:20:03   23552   ----a-w-   C:WindowsSystem32oflc.rs 2012-12-07 11:20:01   45568   ----a-w-   C:WindowsSystem32oflc-nz.rs 2012-12-07 11:20:01   44544   ----a-w-   C:WindowsSystem32pegibbfc.rs 2012-12-07 11:20:01   20480   ----a-w-   C:WindowsSystem32pegi-fi.rs 2012-12-07 11:20:00   20480   ----a-w-   C:WindowsSystem32pegi-pt.rs 2012-12-07 11:19:59   20480   ----a-w-   C:WindowsSystem32pegi.rs 2012-12-07 11:19:58   46592   ----a-w-   C:WindowsSystem32fpb.rs 2012-12-07 11:19:57   40960   ----a-w-   C:WindowsSystem32cob-au.rs 2012-12-07 11:19:57   21504   ----a-w-   C:WindowsSystem32grb.rs 2012-12-07 11:19:57   15360   ----a-w-   C:WindowsSystem32djctq.rs 2012-12-07 11:19:56   55296   ----a-w-   C:WindowsSystem32cero.rs 2012-12-07 11:19:55   51712   ----a-w-   C:WindowsSystem32esrb.rs 2012-11-30 05:45:35   362496   ----a-w-   C:WindowsSystem32wow64win.dll 2012-11-30 05:45:35   243200   ----a-w-   C:WindowsSystem32wow64.dll 2012-11-30 05:45:35   13312   ----a-w-   C:WindowsSystem32wow64cpu.dll 2012-11-30 05:45:14   215040   ----a-w-   C:WindowsSystem32winsrv.dll 2012-11-30 05:43:12   16384   ----a-w-   C:WindowsSystem32ntvdm64.dll 2012-11-30 05:41:07   424448   ----a-w-   C:WindowsSystem32KernelBase.dll 2012-11-30 04:54:00   5120   ----a-w-   C:WindowsSysWow64wow32.dll 2012-11-30 04:53:59   274944   ----a-w-   C:WindowsSysWow64KernelBase.dll 2012-11-30 03:23:48   338432   ----a-w-   C:WindowsSystem32conhost.exe 2012-11-30 02:44:06   25600   ----a-w-   C:WindowsSysWow64setup16.exe 2012-11-30 02:44:04   7680   ----a-w-   C:WindowsSysWow64instnm.exe 2012-11-30 02:44:04   14336   ----a-w-   C:WindowsSysWow64ntvdm64.dll 2012-11-30 02:44:03   2048   ----a-w-   C:WindowsSysWow64user.exe 2012-11-30 02:38:59   6144   ---ha-w-   C:WindowsSysWow64api-ms-win-security-base-l1-1-0.dll 2012-11-30 02:38:59   4608   ---ha-w-   C:WindowsSysWow64api-ms-win-core-threadpool-l1-1-0.dll 2012-11-30 02:38:59   3584   ---ha-w-   C:WindowsSysWow64api-ms-win-core-xstate-l1-1-0.dll 2012-11-30 02:38:59   3072   ---ha-w-   C:WindowsSysWow64api-ms-win-core-util-l1-1-0.dll 2012-11-23 03:26:31   3149824   ----a-w-   C:WindowsSystem32win32k.sys 2012-11-23 03:13:57   68608   ----a-w-   C:WindowsSystem32taskhost.exe 2012-11-22 04:45:03   626688   ----a-w-   C:WindowsSysWow64usp10.dll 2012-11-20 05:48:49   307200   ----a-w-   C:WindowsSystem32ncrypt.dll 2012-11-20 04:51:09   220160   ----a-w-   C:WindowsSysWow64ncrypt.dll 2012-11-09 05:45:32   750592   ----a-w-   C:WindowsSystem32win32spl.dll 2012-11-09 05:45:09   2048   ----a-w-   C:WindowsSystem32tzres.dll 2012-11-09 04:43:04   492032   ----a-w-   C:WindowsSysWow64win32spl.dll 2012-11-09 04:42:49   2048   ----a-w-   C:WindowsSysWow64tzres.dll 2012-11-07 21:38:02   38144   ----a-w-   C:WindowsSystem32driverscmdhlp.sys 2012-11-07 21:38:00   584056   ----a-w-   C:WindowsSystem32driverscmdGuard.sys 2012-11-07 21:37:58   22736   ----a-w-   C:WindowsSystem32driverscmderd.sys 2012-11-07 21:37:38   41240   ----a-w-   C:WindowsSystem32cmdcsr.dll 2012-11-07 21:37:36   301264   ----a-w-   C:WindowsSysWow64guard32.dll 2012-11-07 21:37:32   390392   ----a-w-   C:WindowsSystem32guard64.dll 2012-11-02 05:59:11   478208   ----a-w-   C:WindowsSystem32dpnet.dll 2012-11-02 05:11:31   376832   ----a-w-   C:WindowsSysWow64dpnet.dll 2012-11-01 05:43:42   2002432   ----a-w-   C:WindowsSystem32msxml6.dll 2012-11-01 05:43:42   1882624   ----a-w-   C:WindowsSystem32msxml3.dll 2012-11-01 04:47:54   1389568   ----a-w-   C:WindowsSysWow64msxml6.dll 2012-11-01 04:47:54   1236992   ----a-w-   C:WindowsSysWow64msxml3.dll 2012-11-01 00:35:20   357016   ----a-w-   C:WindowsSysWow64vmnetdhcp.exe 2012-11-01 00:35:18   933528   ----a-w-   C:WindowsSystem32vnetlib64.dll 2012-11-01 00:34:58   31384   ----a-w-   C:WindowsSystem32driversVMparport.sys 2012-11-01 00:34:54   67224   ----a-w-   C:WindowsSystem32driversvmx86.sys 2012-11-01 00:34:52   435864   ----a-w-   C:WindowsSysWow64vmnat.exe 2012-11-01 00:34:32   30360   ----a-w-   C:WindowsSystem32driversvmnetuserif.sys 2012-11-01 00:34:10   62104   ----a-w-   C:WindowsSystem32vmnetbridge.dll 2012-11-01 00:34:10   45720   ----a-w-   C:WindowsSystem32driversvmnetbridge.sys 2012-11-01 00:34:08   48792   ----a-w-   C:WindowsSystem32vnetinst.dll 2012-11-01 00:34:08   24216   ----a-w-   C:WindowsSystem32driversvmnet.sys 2012-11-01 00:34:08   20120   ----a-w-   C:WindowsSystem32driversvmnetadapter.sys 2012-11-01 00:34:04   32920   ----a-w-   C:WindowsSystem32driversVMkbd.sys 2012-10-31 23:02:08   353280   ----a-w-   C:WindowsSysWow64vmnc.dll 2012-10-26 17:01:18   237400   ----a-w-   C:WindowsSystem32driversVBoxDrv.sys 2012-10-26 16:59:44   119640   ----a-w-   C:WindowsSystem32driversVBoxUSBMon.sys 2012-10-26 16:59:44   105816   ----a-w-   C:WindowsSystem32driversVBoxUSB.sys . ============= FINISH:  0:39:36,10 ===============

 

 

. UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-09-30.01) . Microsoft Windows 7 Professional Boot Device: DeviceHarddiskVolume1 Install Date: 30.11.2012 г. 17:39:34 System Uptime: 23.1.2013 г. 21:31:39 (3 hours ago) . Motherboard: Gigabyte Technology Co., Ltd. |  | G31M-ES2C Processor: Intel® Pentium® Dual  CPU  E2220  @ 2.40GHz | Socket 775 | 3000/250mhz . ==== Disk Partitions ========================= . A: is Removable C: is FIXED (NTFS) - 33 GiB total, 19,045 GiB free. D: is FIXED (NTFS) - 200 GiB total, 82,858 GiB free. E: is CDROM () F: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: Description: Device ID: USBVID_EB1A&PID_28205&21E739F&0&8 Manufacturer: Name: PNP Device ID: USBVID_EB1A&PID_28205&21E739F&0&8 Service: . ==== System Restore Points =================== . No restore point in system. . ==== Installed Programs ====================== . µTorrent AC3Filter 2.5b Adobe Flash Player 11 Plugin Auslogics Disk Defrag BurnAware Free 4.5 CCleaner COMODO Internet Security Far Cry 3 HitmanPro 3.7 Malwarebytes Anti-Malware, версия 1.70.0.1100 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended Microsoft Games for Windows - LIVE Redistributable Microsoft Games for Windows Marketplace Microsoft Office File Validation Add-In Microsoft Office Professional Edition 2003 Microsoft Silverlight Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 Mozilla Firefox 18.0.1 (x86 bg) MSI Afterburner 2.3.1 NVIDIA Control Panel 306.97 NVIDIA Graphics Driver 306.97 NVIDIA Install Application NVIDIA PhysX NVIDIA PhysX System Software 9.12.1031 PowerISO Realtek High Definition Audio Driver RocketDock 1.3.5 Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449) Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428) Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019) Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) Security Update for Microsoft .NET Framework 4 Extended (KB2656351) Security Update for Microsoft .NET Framework 4 Extended (KB2736428) Security Update for Microsoft .NET Framework 4 Extended (KB2742595) SpywareBlaster 4.6 SumatraPDF SUPERAntiSpyware The KMPlayer (remove only) tools-windows Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft .NET Framework 4 Extended (KB2468871) Update for Microsoft .NET Framework 4 Extended (KB2533523) Update for Microsoft .NET Framework 4 Extended (KB2600217) VMware Player Windows Live ID Sign-in Assistant WinRAR archiver Wise Disk Cleaner 7.74 . ==== Event Viewer Messages From Past Week ======== . 24.1.2013 г. 00:37:28, Error: Service Control Manager [7034]  - Услуга VMware Authorization Service беше прекъсната неочаквано. Това се е случвало с нея 1 път(и). 23.1.2013 г. 01:30:45, Error: Service Control Manager [7034]  - Услуга VMware Authorization Service беше прекъсната неочаквано. Това се е случвало с нея 1 път(и). 22.1.2013 г. 14:33:53, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service NVSvc with arguments "" in order to run the server: {DCAB0989-1301-4319-BE5F-ADE89F88581C} 22.1.2013 г. 14:33:37, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030} 22.1.2013 г. 14:33:37, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 22.1.2013 г. 14:33:36, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} 22.1.2013 г. 14:33:30, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC} 22.1.2013 г. 14:33:29, Error: Service Control Manager [7026]  - Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата:  cmdGuard discache SASDIFSV SASKUTIL SCDEmu spldr Wanarpv6 21.1.2013 г. 23:44:04, Error: Service Control Manager [7034]  - Услуга VMware Authorization Service беше прекъсната неочаквано. Това се е случвало с нея 1 път(и). 19.1.2013 г. 20:47:34, Error: Service Control Manager [7034]  - Услуга VMware Authorization Service беше прекъсната неочаквано. Това се е случвало с нея 1 път(и). 18.1.2013 г. 00:08:15, Error: Service Control Manager [7034]  - Услуга VMware Authorization Service беше прекъсната неочаквано. Това се е случвало с нея 1 път(и). . ==== End Of File ===========================

Здравейте..!Да направим така:

 

Следвайте следната инструкция за проверка с GooredFix:

• Изтеглете GooredFix, миръри: тук и тук.
• Запазете го на десктопа.
• Затворете всички браузъри и стартирайте GooredFix.exe.
• Потвърдете с Yes, за да започне сканирането.
• GooredFix ще провери за инфекции и след това ще се появи лог (GooredFix.txt). Копирайте (Copy) и поставете (Paste) резултатите от сканирането в следващия си коментар.

GooredFix by jpshortstuff (03.07.10.1) Log created at 19:03 on 25/01/2013 (Night Rider) Firefox version 18.0.1 (bg) ========== GooredScan ========== ========== GooredLog ========== C:Program Files (x86)Mozilla Firefoxextensions {972ce4c6-7e08-4474-a285-3208198ce6fd} [19:31 30/11/2012] [HKEY_LOCAL_MACHINESoftwareMozillaFirefoxExtensions] (Key not found) -=E.O.F=-

1.Изтеглете програмата AVZ 4.39 и разархивирайте avz4.zip например в папка (c:antivir).



2.Стартирайте програмата и изпълнете:



File => Standard scripts => в отворилия се прозорец маркирайте позиция 7 => Execute selected scripts:










След завършване на сканирането компютъра ви ще се рестартира..!

Ще се създаде архив KL_syscure.zip в същата папка където е разархивирана програмата.

Моля, прикачете този архив във следващия си пост..!

Ето архива.

KL_syscure.zip

Здравейте..!

Изключете временно антивирусната си програма и защитната стена.Затворете всички стартирани приложения.

Изпълнете следния скрипт : Как да изпълним скрипт с AVZ

beginExecuteWizard('PRT',2,3,true);ExecuteWizard('SCU',2,3,true);RebootWindows(true);end.

След изпълнение на скрипта компютъра ви ще се рестартира..!

В системата не виждам активни зарази..!След изпълнение на скрипта има ли промяна в състоянието на браузерите..?

Има пак някакво "зачудване" при опит да затворя браузъра(ползвам само Firefox)Close бутона пак "зацикля".Сега изкача някакава грешка XUL.DLL и доколкото разбрах,този  DLL файл е във директорията на браузъра.Но сега EXPLORER не забива(поне засега).На AVZ видях,че има опция за премахване на всички драйвъри и записи във регистрите.След изпълнение на скрипта изчистих всичко.

 

Благодаря за отделеното внимание!