Търся помощ за премахване на вирус от Skype и евентуално други вируси на компютъра. Това стана като отворих файл който ми беше пратен от мой абонат след което започна да се само изпраща на всички мои абонати. Ето и логовете :

DDS (Ver_2011-09-30.01) - NTFS_AMD64 

Internet Explorer: 9.0.8112.16421  BrowserJavaVersion: 10.10.2

Run by yavor at 18:11:10 on 2013-01-27

Microsoft Windows 7 Ultimate   6.1.7601.1.1251.359.1033.18.6143.4785 [GMT 2:00]

.

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:Windowssystem32wininit.exe

C:Windowssystem32lsm.exe

C:Windowssystem32svchost.exe -k DcomLaunch

C:Windowssystem32nvvsvc.exe

C:Program Files (x86)NVIDIA Corporation3D VisionnvSCPAPISvr.exe

C:Windowssystem32svchost.exe -k RPCSS

C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted

C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted

C:Windowssystem32svchost.exe -k netsvcs

C:Windowssystem32svchost.exe -k GPSvcGroup

C:Windowssystem32svchost.exe -k LocalService

C:Program FilesNVIDIA CorporationDisplaynvxdsync.exe

C:Windowssystem32nvvsvc.exe

C:Windowssystem32svchost.exe -k NetworkService

C:WindowsSystem32spoolsv.exe

C:Windowssystem32svchost.exe -k LocalServiceNoNetwork

C:Windowssystem32Dwm.exe

C:WindowsExplorer.EXE

C:Windowssystem32taskhost.exe

C:Windowssystem32taskeng.exe

C:Program Files (x86)ASRock UtilityIESAsrIes.exe

C:Program FilesRealtekAudioHDARAVCpl64.exe

C:Program Files (x86)DAEMON Tools ProDTAgent.exe

C:Program Files (x86)SkypePhoneSkype.exe

C:Program Files (x86)NEC ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe

C:Program FilesNVIDIA CorporationDisplaynvtray.exe

C:Windowssystem32SearchIndexer.exe

svchost.exe

C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation

C:Program Files (x86)NVIDIA CorporationNVIDIA Update Coredaemonu.exe

C:WindowsSystem32svchost.exe -k secsvcs

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:UsersyavorAppDataLocalTempdixrh.exe

C:Program Files (x86)Common FilesJavaJava Updatejucheck.exe

C:Windowssystem32wbemwmiprvse.exe

C:WindowsSysWOW64NOTEPAD.EXE

C:Windowssystem32conhost.exe

C:WindowsSystem32cscript.exe

.

============== Pseudo HJT Report ===============

.

mWinlogon: Userinit = userinit.exe,

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program Files (x86)Javajre7binssv.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program Files (x86)Javajre7binjp2ssv.dll

uRun: [DAEMON Tools Pro Agent] "C:Program Files (x86)DAEMON Tools ProDTAgent.exe" -autorun

uRun: [ASRockIES] <no file>

mRun: [NUSB3MON] "C:Program Files (x86)NEC ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe"

mRun: [sunJavaUpdateSched] "C:Program Files (x86)Common FilesJavaJava Updatejusched.exe"

uExplorerRun: [ASRock] C:UsersyavorAppDataRoaming6BFA646BFA64.exe

uExplorerRun: [64100] C:PROGRA~3LOCALS~1Tempmsowqzkci.pif

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

uPolicies-System: DisableTaskMgr = dword:1

uPolicies-System: DisableRegistryTools = dword:1

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:0

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableLUA = dword:0

mPolicies-System: EnableUIADesktopToggle = dword:0

mPolicies-System: PromptOnSecureDesktop = dword:0

TCP: NameServer = 192.168.1.1

TCP: Interfaces{72BA8458-1BCF-49A0-8E0A-5A084A89A9A4} : DHCPNameServer = 192.168.1.1

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program Files (x86)Common FilesSkypeSkype4COM.dll

SSODL: WebCheck - <orphaned>

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:Program Files (x86)GoogleChromeApplication24.0.1312.56Installerchrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

x64-Run: [RtHDVCpl] C:Program FilesRealtekAudioHDARAVCpl64.exe -s

x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

x64-SSODL: WebCheck - <orphaned>

Hosts: 192.157.56.28 www.google-analytics.com.

Hosts: 192.157.56.28 ad-emea.doubleclick.net.

Hosts: 192.157.56.28 www.statcounter.com.

Hosts: 192.157.56.28 connect.facebook.net.

Hosts: 192.157.56.28 platform.twitter.com.

.

Note: multiple HOSTS entries found. Please refer to Attach.txt

.

============= SERVICES / DRIVERS ===============

.

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:WindowsSystem32driversdtsoftbus01.sys [2013-1-1 272448]

R2 nvUpdatusService;NVIDIA Update Service Daemon;C:Program Files (x86)NVIDIA CorporationNVIDIA Update Coredaemonu.exe [2013-1-1 1259880]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:Program Files (x86)NVIDIA Corporation3D VisionnvSCPAPISvr.exe [2012-11-30 382824]

R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;C:WindowsSystem32driversnusb3hub.sys [2010-1-22 77824]

R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;C:WindowsSystem32driversnusb3xhc.sys [2010-1-22 180224]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:WindowsSystem32driversnvhda64v.sys [2013-1-1 189288]

R3 RTL8167;Realtek 8167 NT Driver;C:WindowsSystem32driversRt64win7.sys [2013-1-1 346144]

S2 gupdate;Услуга на Google Актуализация (gupdate);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2013-1-1 116648]

S2 SkypeUpdate;Skype Updater;C:Program Files (x86)SkypeUpdaterUpdater.exe [2013-1-8 161536]

S3 dmvsc;dmvsc;C:WindowsSystem32driversdmvsc.sys [2010-11-21 71168]

S3 gupdatem;Услуга на Google Актуализация (gupdatem);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2013-1-1 116648]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:WindowsSystem32driversrdpvideominiport.sys [2012-11-14 19456]

S3 Synth3dVsc;Synth3dVsc;C:WindowsSystem32driversSynth3dVsc.sys [2010-11-21 88960]

S3 terminpt;Microsoft Remote Desktop Input Driver;C:WindowsSystem32driversterminpt.sys [2012-11-14 29696]

S3 TsUsbFlt;TsUsbFlt;C:WindowsSystem32driversTsUsbFlt.sys [2012-11-14 57856]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:WindowsSystem32driversTsUsbGD.sys [2012-11-14 30208]

S3 tsusbhub;tsusbhub;C:WindowsSystem32driverstsusbhub.sys [2010-11-21 117248]

S3 WatAdminSvc;Windows Activation Technologies Service;C:WindowsSystem32WatWatAdminSvc.exe [2012-11-14 1255736]

.

=============== Created Last 30 ================

.

2013-01-27 15:59:26 103140 ----a-w- C:chhljl.pif

2013-01-27 15:52:41 -------- d-----w- C:UsersyavorAppDataRoamingMalwarebytes

2013-01-27 15:52:36 -------- d-----w- C:ProgramDataMalwarebytes

2013-01-27 15:52:35 24176 ----a-w- C:WindowsSystem32driversmbam.sys

2013-01-27 15:52:35 -------- d-----w- C:Program Files (x86)Malwarebytes' Anti-Malware

2013-01-27 09:31:20 -------- d-----r- C:Program Files (x86)Skype

2013-01-26 19:14:57 -------- d-----w- C:WindowsSystem32appmgmt

2013-01-26 19:04:22 0 ---ha-w- C:UsersyavorAppDataRoamingwinsvcns.sys

2013-01-26 19:04:18 -------- d-sh--r- C:Usersyavor46357865364647353

2013-01-25 16:25:09 306688 ----a-w- C:WindowsIsUninst.exe

2013-01-06 13:12:17 -------- d-----w- C:UsersyavorAppDataRoaming.minecraft

2013-01-06 13:12:09 859072 ----a-w- C:WindowsSysWow64npDeployJava1.dll

2013-01-06 13:12:09 779704 ----a-w- C:WindowsSysWow64deployJava1.dll

2013-01-06 13:12:06 95184 ----a-w- C:WindowsSysWow64WindowsAccessBridge-32.dll

2013-01-05 17:53:22 15088 ----a-w- C:UsersyavorAppDataRoamingMicrosoftIdentityCRLproductionppcrlconfig.dll

2013-01-05 17:52:03 -------- d-----w- C:ProgramDataCodemasters

2013-01-05 17:50:33 839680 ----a-w- C:WindowsSysWow64mkl_vml_p4.dll

2013-01-05 17:50:33 532480 ----a-w- C:WindowsSysWow64mkl_vml_p3.dll

2013-01-05 17:50:33 512000 ----a-w- C:WindowsSysWow64mkl_vml_def.dll

2013-01-05 17:50:32 3485696 ----a-w- C:WindowsSysWow64mkl_p4.dll

2013-01-05 17:50:32 2793472 ----a-w- C:WindowsSysWow64mkl_p3.dll

2013-01-05 17:50:32 2441216 ----a-w- C:WindowsSysWow64mkl_def.dll

2013-01-05 17:50:32 2174976 ----a-w- C:WindowsSysWow64mkl_lapack32.dll

2013-01-05 17:50:32 2125824 ----a-w- C:WindowsSysWow64mkl_lapack64.dll

2013-01-05 17:50:32 184320 ----a-w- C:WindowsSysWow64libguide40.dll

2013-01-05 17:50:31 872448 ----a-w- C:WindowsSysWow64rapture3d_oal.dll

2013-01-05 17:50:30 -------- d-----w- C:Program Files (x86)BRS

2013-01-05 17:48:14 809560 ----a-r- C:WindowsSysWow64tmp1DB8.tmp

2013-01-01 17:19:45 -------- d-----w- C:WindowsPanther

2013-01-01 16:00:39 -------- d-----w- C:UsersyavorAppDataRoamingNVIDIA

2013-01-01 09:21:21 -------- d-----w- C:UsersyavorAppDataLocalPrograms

2013-01-01 09:20:29 -------- d-----w- C:UsersyavorAppDataLocalSKIDROW

2013-01-01 09:14:29 -------- d-----w- C:Program Files (x86)uTorrent

2013-01-01 09:13:54 -------- d-----w- C:UsersyavorAppDataRoaminguTorrent

2013-01-01 09:12:40 -------- d-----w- C:Program Files (x86)The KMPlayer

2013-01-01 09:06:15 -------- d-----w- C:Program Files (x86)ASRock Utility

2013-01-01 09:05:44 -------- d-----w- C:UsersyavorAppDataRoamingFoxit Software

2013-01-01 09:05:38 -------- d-----w- C:Program Files (x86)Foxit Software

2013-01-01 08:34:10 272448 ----a-w- C:WindowsSystem32driversdtsoftbus01.sys

2013-01-01 08:34:08 -------- d-----w- C:Program Files (x86)DAEMON Tools Pro

2013-01-01 08:33:29 -------- d-----w- C:UsersyavorAppDataRoamingDAEMON Tools Pro

2013-01-01 08:33:29 -------- d-----w- C:ProgramDataDAEMON Tools Pro

2013-01-01 08:02:53 -------- d-----w- C:Program FilesNVIDIA Corporation

2013-01-01 08:02:38 -------- d-----w- C:NVIDIA

2013-01-01 07:50:22 -------- d-----w- C:UsersyavorAppDataLocalGoogle

2013-01-01 07:50:06 -------- d-----w- C:UsersyavorAppDataLocalApps

2013-01-01 07:50:05 -------- d-----w- C:UsersyavorAppDataLocalDeployment

2013-01-01 07:44:18 1247776 ----a-w- C:WindowsRtlExUpd.dll

2013-01-01 07:44:18 -------- d--h--w- C:Program Files (x86)Temp

2013-01-01 07:44:17 757760 ----a-w- C:Program Files (x86)Common FilesInstallShieldProfessionalRunTime1150Intel32iKernel.dll

2013-01-01 07:44:17 69715 ----a-w- C:Program Files (x86)Common FilesInstallShieldProfessionalRunTime1150Intel32ctor.dll

2013-01-01 07:44:17 65024 ----a-w- C:Program Files (x86)Common FilesInstallShieldProfessionalRunTime1150Intel32ISBEW64.exe

2013-01-01 07:44:17 5632 ----a-w- C:Program Files (x86)Common FilesInstallShieldProfessionalRunTime1150Intel32DotNetInstaller.exe

2013-01-01 07:44:17 32768 ----a-w- C:Program Files (x86)Common FilesInstallShieldProfessionalRunTimeObjectps.dll

2013-01-01 07:44:17 274432 ----a-w- C:Program Files (x86)Common FilesInstallShieldProfessionalRunTime1150Intel32iscript.dll

2013-01-01 07:44:17 204800 ----a-w- C:Program Files (x86)Common FilesInstallShieldProfessionalRunTime1150Intel32iuser.dll

2013-01-01 07:44:16 331908 ----a-w- C:Program Files (x86)Common FilesInstallShieldProfessionalRunTime1150Intel32setup.dll

2013-01-01 07:44:16 200836 ----a-w- C:Program Files (x86)Common FilesInstallShieldProfessionalRunTime1150Intel32iGdi.dll

2013-01-01 07:43:09 -------- d-----w- C:Program Files (x86)NEC Electronics

2013-01-01 07:42:45 -------- d-sh--w- C:WindowsInstaller

2013-01-01 07:42:43 -------- d-----w- C:UsersyavorAppDataLocalDownloaded Installations

2013-01-01 07:39:49 74272 ----a-w- C:WindowsSystem32RtNicProp64.dll

2013-01-01 07:39:49 346144 ----a-w- C:WindowsSystem32driversRt64win7.sys

2013-01-01 07:39:49 107552 ----a-w- C:WindowsSystem32RTNUninst64.dll

2013-01-01 07:39:46 -------- d-----w- C:Program Files (x86)Realtek

2013-01-01 07:36:21 8199504 ----a-w- C:ProgramDataMicrosoftWindows DefenderDefinition UpdatesBackupmpengine.dll

2013-01-01 07:36:18 9291768 ----a-w- C:ProgramDataMicrosoftWindows DefenderDefinition Updates{F550B54B-B7B6-4011-B438-AD04CFE0FA39}mpengine.dll

2013-01-01 07:31:17 9291768 ------w- C:ProgramDataMicrosoftWindows DefenderDefinition UpdatesUpdatesmpengine.dll

2013-01-01 07:31:15 -------- d-----w- C:WindowsSystem32MpEngineStore

2013-01-01 07:29:33 -------- d-sh--w- C:Recovery

.

==================== Find3M  ====================

.

2013-01-05 17:49:39 466520 ----a-w- C:WindowsSystem32wrap_oal.dll

2013-01-05 17:49:39 445016 ----a-w- C:WindowsSysWow64wrap_oal.dll

2013-01-05 17:49:39 122968 ----a-w- C:WindowsSystem32OpenAL32.dll

2013-01-05 17:49:38 109144 ----a-w- C:WindowsSysWow64OpenAL32.dll

2012-12-01 05:49:26 3663213 ----a-w- C:WindowsSystem32nvcoproc.bin

2012-12-01 05:49:25 63336 ----a-w- C:WindowsSystem32nvshext.dll

2012-12-01 05:49:25 118120 ----a-w- C:WindowsSystem32nvmctray.dll

2012-12-01 05:49:24 890216 ----a-w- C:WindowsSystem32nvvsvc.exe

2012-12-01 05:48:41 6223208 ----a-w- C:WindowsSystem32nvcpl.dll

2012-12-01 05:48:37 3311464 ----a-w- C:WindowsSystem32nvsvc64.dll

2012-11-30 20:43:52 438632 ----a-w- C:WindowsSysWow64nvStreaming.exe

2012-11-14 18:04:43 55296 ----a-w- C:WindowsSystem32dhcpcsvc6.dll

2012-11-14 18:04:43 44032 ----a-w- C:WindowsSysWow64dhcpcsvc6.dll

2012-11-14 18:04:43 226816 ----a-w- C:WindowsSystem32dhcpcore6.dll

2012-11-14 18:04:43 193536 ----a-w- C:WindowsSysWow64dhcpcore6.dll

2012-11-14 18:04:20 3149824 ----a-w- C:WindowsSystem32win32k.sys

2012-11-14 18:02:41 220160 ----a-w- C:WindowsSystem32wintrust.dll

2012-11-14 18:02:41 172544 ----a-w- C:WindowsSysWow64wintrust.dll

2012-11-14 18:02:22 715776 ----a-w- C:WindowsSystem32kerberos.dll

2012-11-14 18:02:22 542208 ----a-w- C:WindowsSysWow64kerberos.dll

2012-11-14 18:02:02 574464 ----a-w- C:WindowsSystem32d3d10level9.dll

2012-11-14 18:02:02 490496 ----a-w- C:WindowsSysWow64d3d10level9.dll

2012-11-14 18:01:43 1659760 ----a-w- C:WindowsSystem32driversntfs.sys

2012-11-14 18:01:04 376688 ----a-w- C:WindowsSystem32driversnetio.sys

2012-11-14 18:01:04 288624 ----a-w- C:WindowsSystem32driversFWPKCLNT.SYS

2012-11-14 18:00:44 503808 ----a-w- C:WindowsSystem32srcore.dll

2012-11-14 18:00:44 43008 ----a-w- C:WindowsSysWow64srclient.dll

2012-11-14 18:00:06 245760 ----a-w- C:WindowsSystem32OxpsConverter.exe

2012-11-14 17:58:21 95744 ----a-w- C:WindowsSystem32synceng.dll

2012-11-14 17:58:21 78336 ----a-w- C:WindowsSysWow64synceng.dll

2012-11-14 17:57:59 5559664 ----a-w- C:WindowsSystem32ntoskrnl.exe

2012-11-14 17:57:59 3968880 ----a-w- C:WindowsSysWow64ntkrnlpa.exe

2012-11-14 17:57:59 3914096 ----a-w- C:WindowsSysWow64ntoskrnl.exe

2012-11-14 17:57:35 2048 ----a-w- C:WindowsSysWow64msxml3r.dll

2012-11-14 17:57:35 2048 ----a-w- C:WindowsSystem32msxml3r.dll

2012-11-14 17:57:35 2004480 ----a-w- C:WindowsSystem32msxml6.dll

2012-11-14 17:57:35 1881600 ----a-w- C:WindowsSystem32msxml3.dll

2012-11-14 17:57:35 1390080 ----a-w- C:WindowsSysWow64msxml6.dll

2012-11-14 17:57:35 1236992 ----a-w- C:WindowsSysWow64msxml3.dll

2012-11-14 17:57:13 950128 ----a-w- C:WindowsSystem32driversndis.sys

2012-11-14 17:57:13 41472 ----a-w- C:WindowsSystem32driversRNDISMP.sys

2012-11-14 17:56:33 956928 ----a-w- C:WindowsSystem32localspl.dll

2012-11-14 17:56:14 514560 ----a-w- C:WindowsSysWow64qdvd.dll

2012-11-14 17:56:14 366592 ----a-w- C:WindowsSystem32qdvd.dll

2012-11-14 17:55:55 209920 ----a-w- C:WindowsSystem32profsvc.dll

2012-11-14 17:55:36 59392 ----a-w- C:WindowsSystem32browcli.dll

2012-11-14 17:55:36 41984 ----a-w- C:WindowsSysWow64browcli.dll

2012-11-14 17:55:36 136704 ----a-w- C:WindowsSystem32browser.dll

2012-11-14 17:55:15 3216384 ----a-w- C:WindowsSystem32msi.dll

2012-11-14 17:55:15 2342400 ----a-w- C:WindowsSysWow64msi.dll

2012-11-14 17:54:52 805376 ----a-w- C:WindowsSysWow64cdosys.dll

2012-11-14 17:54:52 1133568 ----a-w- C:WindowsSystem32cdosys.dll

2012-11-14 17:53:38 75120 ----a-w- C:WindowsSystem32driverspartmgr.sys

2012-11-14 17:52:35 210944 ----a-w- C:WindowsSystem32driversrdpwd.sys

2012-11-14 17:51:02 9216 ----a-w- C:WindowsSystem32rdrmemptylst.exe

2012-11-14 17:51:02 77312 ----a-w- C:WindowsSystem32rdpwsx.dll

2012-11-14 17:51:02 149504 ----a-w- C:WindowsSystem32rdpcorekmts.dll

2012-11-14 17:50:40 184320 ----a-w- C:WindowsSystem32cryptsvc.dll

2012-11-14 17:50:40 1464320 ----a-w- C:WindowsSystem32crypt32.dll

2012-11-14 17:50:40 140288 ----a-w- C:WindowsSysWow64cryptsvc.dll

2012-11-14 17:50:40 140288 ----a-w- C:WindowsSystem32cryptnet.dll

2012-11-14 17:50:40 1159680 ----a-w- C:WindowsSysWow64crypt32.dll

2012-11-14 17:50:40 103936 ----a-w- C:WindowsSysWow64cryptnet.dll

2012-11-14 17:49:47 515584 ----a-w- C:WindowsSystem32timedate.cpl

2012-11-14 17:49:47 478720 ----a-w- C:WindowsSysWow64timedate.cpl

2012-11-14 17:49:06 1544704 ----a-w- C:WindowsSystem32DWrite.dll

2012-11-14 17:49:06 1077248 ----a-w- C:WindowsSysWow64DWrite.dll

2012-11-14 17:47:17 690688 ----a-w- C:WindowsSysWow64msvcrt.dll

2012-11-14 17:47:17 634880 ----a-w- C:WindowsSystem32msvcrt.dll

2012-11-14 17:46:57 81408 ----a-w- C:WindowsSystem32imagehlp.dll

2012-11-14 17:46:57 5120 ----a-w- C:WindowsSysWow64wmi.dll

2012-11-14 17:46:57 5120 ----a-w- C:WindowsSystem32wmi.dll

2012-11-14 17:46:57 23408 ----a-w- C:WindowsSystem32driversfs_rec.sys

2012-11-14 17:46:57 159232 ----a-w- C:WindowsSysWow64imagehlp.dll

2012-11-14 17:46:37 751104 ----a-w- C:WindowsSystem32win32spl.dll

2012-11-14 17:46:37 67072 ----a-w- C:Windowssplwow64.exe

2012-11-14 17:46:37 559104 ----a-w- C:WindowsSystem32spoolsv.exe

2012-11-14 17:46:37 492032 ----a-w- C:WindowsSysWow64win32spl.dll

2012-11-14 17:45:55 498688 ----a-w- C:WindowsSystem32driversafd.sys

2012-11-14 17:45:36 1731920 ----a-w- C:WindowsSystem32ntdll.dll

2012-11-14 17:45:36 1292080 ----a-w- C:WindowsSysWow64ntdll.dll

2012-11-14 17:44:51 509952 ----a-w- C:WindowsSystem32ntshrui.dll

2012-11-14 17:44:51 442880 ----a-w- C:WindowsSysWow64ntshrui.dll

2012-11-14 17:44:25 1572864 ----a-w- C:WindowsSystem32quartz.dll

2012-11-14 17:44:25 1328128 ----a-w- C:WindowsSysWow64quartz.dll

2012-11-14 17:44:05 826880 ----a-w- C:WindowsSysWow64rdpcore.dll

2012-11-14 17:44:05 23552 ----a-w- C:WindowsSystem32driverstdtcp.sys

2012-11-14 17:44:05 1031680 ----a-w- C:WindowsSystem32rdpcore.dll

2012-11-14 17:43:42 43520 ----a-w- C:WindowsSystem32csrsrv.dll

2012-11-14 17:43:04 723456 ----a-w- C:WindowsSystem32EncDec.dll

2012-11-14 17:43:04 534528 ----a-w- C:WindowsSysWow64EncDec.dll

2012-11-14 17:42:26 40448 ----a-w- C:WindowsSystem32driversmodem.sys

2012-11-14 17:42:26 321536 ----a-w- C:WindowsSystem32unimdm.tsp

2012-11-14 17:42:26 281088 ----a-w- C:WindowsSysWow64unimdm.tsp

2012-11-14 17:38:51 395776 ----a-w- C:WindowsSystem32webio.dll

2012-11-14 17:38:51 314880 ----a-w- C:WindowsSysWow64webio.dll

2012-11-14 17:38:31 77312 ----a-w- C:WindowsSystem32packager.dll

2012-11-14 17:38:31 67072 ----a-w- C:WindowsSysWow64packager.dll

2012-11-14 17:38:12 75776 ----a-w- C:WindowsSysWow64psisrndr.ax

2012-11-14 17:38:12 613888 ----a-w- C:WindowsSystem32psisdecd.dll

.

============= FINISH: 18:11:29,73 ===============

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-09-30.01)

.

Microsoft Windows 7 Ultimate 

Boot Device: DeviceHarddiskVolume3

Install Date: 1.1.2013 г. 09:33:18

System Uptime: 27.1.2013 г. 17:58:20 (1 hours ago)

.

Motherboard: ASRock |  | 870 Extreme3

Processor: AMD Athlon II X3 445 Processor | CPUSocket | 3100/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 20 GiB total, 3,303 GiB free.

D: is FIXED (NTFS) - 264 GiB total, 150,274 GiB free.

E: is FIXED (NTFS) - 312 GiB total, 20,893 GiB free.

F: is CDROM (CDFS)

G: is CDROM ()

.

==== Disabled Device Manager Items =============

.

Class GUID: {4d36e96b-e325-11ce-bfc1-08002be10318}

Description: Standard PS/2 Keyboard

Device ID: ACPIPNP03034&8AB8035&0

Manufacturer: (Standard keyboards)

Name: Standard PS/2 Keyboard

PNP Device ID: ACPIPNP03034&8AB8035&0

Service: i8042prt

.

==== System Restore Points ===================

.

No restore point in system.

.

==== Hosts File Hijack ======================

.

Hosts: 192.157.56.28 www.google-analytics.com.

Hosts: 192.157.56.28 ad-emea.doubleclick.net.

Hosts: 192.157.56.28 www.statcounter.com.

Hosts: 192.157.56.28 connect.facebook.net.

Hosts: 192.157.56.28 platform.twitter.com.

Hosts: 93.115.241.27 www.google-analytics.com.

Hosts: 93.115.241.27 ad-emea.doubleclick.net.

Hosts: 93.115.241.27 www.statcounter.com.

Hosts: 93.115.241.27 connect.facebook.net.

Hosts: 93.115.241.27 platform.twitter.com.

.

==== Installed Programs ======================

.

µTorrent

ASRock IES v2.0.78

DAEMON Tools Pro

DiRT2

Foxit Reader

Google Chrome

Google Update Helper

Hitman Absolution

Java 7 Update 10

Java Auto Updater

Malwarebytes Anti-Malware version 1.70.0.1100

Microsoft Games for Windows - LIVE

Microsoft Games for Windows - LIVE Redistributable

Microsoft Visual C++ 2005 Redistributable

NEC Electronics USB 3.0 Host Controller Driver

Need For Speed - Porsche Unleashed

NVIDIA 3D Vision Controller Driver 310.70

NVIDIA 3D Vision Driver 310.70

NVIDIA Control Panel 310.70

NVIDIA Graphics Driver 310.70

NVIDIA HD Audio Driver 1.3.18.0

NVIDIA Install Application

NVIDIA PhysX

NVIDIA PhysX System Software 9.12.1031

NVIDIA Stereoscopic 3D Driver

NVIDIA Update 1.11.3

NVIDIA Update Components

OpenAL

Rapture3D 2.3.22 Game

Realtek Ethernet Controller Driver For Windows 7

Realtek High Definition Audio Driver

Skype™ 6.1

The KMPlayer (remove only)

WinRAR 4.20 (64-битова версия)

.

==== Event Viewer Messages From Past Week ========

.

27.1.2013 г. 13:31:17, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

22.1.2013 г. 13:40:24, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

.

==== End Of File ===========================

 

 

Здравейте...!

 

Изтеглете ComboFix от тук и го запазете на десктопа си.

Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.

Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs

• Стартирайте Combo-Fix.com и следвайте инструкциите.

Бележка: ComboFix ще се стартира без инсталирана Recovery Console.

 

• Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repair режим, който ще ни позволи по-лесно да решите проблем, който би могъл давъзникне при премахване на зловредния софтуер.
• Следвайте инструкциите, за да позволите на ComboFix да изтегли и инсталира Microsoft Windows Recovery Console.В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.






След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:



Изберете Yes, за да продължи сканирането за зловреден софтуер.

Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:ComboFix.txt в следващия Ви коментар в тази тема.

Бележка:

• Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа.
• ComboFix ще нулира всички настройки на Microsoft Internet Explorer, включително да направи IE браузър по подразбиране.
• ComboFix ще изключи autorun функцията на ВСИЧКИ CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и Ви защити от бъдещи вируси/заплахи, които поразяват чрез autorun. Ако това е проблем за вас - моля, уведомете ме.
• ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той ще прекрати интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си.
• В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:BUG.txt в следващия Ви коментар в тази тема.

Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема

привет отново успях да изпълня инструкциите само донякъде,стигнах до създаването на файла с notepad и име :fix,но при стартирането му излезе надпис: ''Registry editing has been disabled by your administrator.''

Опитай да стартираш файла от името на администратор... десен бутон ==> Run as.....!

Опитай да стартираш файла от името на администратор... десен бутон ==> Run as.....!

Здравей  опитах се да стартирам файла от името на администратор с десен клик, но не ми излиза Run as.....,може би защото съм с Windows 7 64 bit или е нещо друго.

Ясно..а скрипта можеш ли да изпълниш...?

Ами и това не става защото не мога да стартирам файла fix.reg .

Ами и това не става защото не мога да стартирам файла fix.reg .

 

 

Това е ясно...Имах впредвид това:

 

Копирайте текста в карето на notepad и го запазвате с име CFScript.txt на десктопа си:

 

KILLALL::ClearJavaCache:: Collect::c:windowssystem32driverswgpdqmkx.sys Driver::wgpdqmkxDDS::C:UsersyavorAppDataLocalTempdixrh.exe

 

След съхранението преместете  CFScript.txt на иконата на ComboFix.exe

Генерирания рапорт копирайте  и го поставете в следващия си коментар...!

Поради липса на комуникация с автора на темата,същата се затваря..!