Здравейте,

 

искам да помоля някой ако има възможност да погледне моите логове. Нямам някакви признаци че има вируси, но ме притеснява факта че като си отворя windows task managera имам средно по 40+ процеса, което преди не ми е правило впечетление да са толкова много.

Съответно се чудя дали не работи и други ненужни работи

Прикачвам и снимка с процесите към момента.

Ще съм благодарян ако някой изрази мнение

 

DDS (Ver_2011-09-30.01) - NTFS_x86 Internet Explorer: 8.0.6001.18702 Run by Kamen at 20:06:54 on 2013-07-07 Microsoft Windows XP Professional  5.1.2600.3.1251.359.1033.18.1023.285 [GMT 3:00] . AV: AVG Internet Security 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF} FW: AVG Firewall *Disabled* . ============== Running Processes ================ . C:Program FilesIObitAdvanced SystemCare 6ASCService.exe C:WINDOWSsystem32Ati2evxx.exe C:WINDOWSsystem32Ati2evxx.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSsystem32WgaTray.exe C:Program FilesIObitAdvanced SystemCare 6Monitor.exe C:WINDOWSExplorer.EXE C:Program FilesMyPC BackupBackupStack.exe C:Documents and SettingsAll UsersApplication DataBrowserDefender2.6.1339.144{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}BrowserDefender.exe C:Program FilesDefaultTabDefaultTabSearch.exe C:Documents and SettingsAll UsersApplication DataBrowserDefender2.6.1339.144{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}BrowserDefender.exe C:Documents and SettingsKamenApplication DataDefaultTabDefaultTabDTUpdate.exe C:Documents and SettingsAll UsersApplication DataSkypeToolbarsSkype C2C Servicec2c_service.exe C:WINDOWSsystem32ctfmon.exe C:Program FilesSkypePhoneSkype.exe C:Program FilesMcAfee Security Scan3.0.318SSScheduler.exe C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe C:Program FilesAnalog DevicesSoundMAXSMAgent.exe C:WINDOWSsystem32wdfmgr.exe C:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe C:WINDOWSSystem32alg.exe C:WINDOWSsystem32wscntfy.exe C:Program FilesMozilla Firefoxfirefox.exe C:Program FilesMozilla Firefoxplugin-container.exe C:WINDOWSsystem32wbemwmiprvse.exe C:WINDOWSSystem32svchost.exe -k netsvcs C:WINDOWSsystem32svchost.exe -k NetworkService C:WINDOWSsystem32svchost.exe -k LocalService C:WINDOWSsystem32svchost.exe -k imgsvc C:WINDOWSSystem32svchost.exe -k HTTPFilter . ============== Pseudo HJT Report =============== . BHO: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - <orphaned> BHO: BitComet Helper: {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - d:bitcometprogramitoolsBitCometBHO_1.5.4.11.dll BHO: mixidj Helper Object: {4D6A9BBF-402C-4301-B1EF-28D04F71D761} - c:program filesmixidjmixidj1.8.18.8bhmixidj.dll BHO: SelectionLinks: {7825CFB6-490A-436B-9F26-4A7B5CFC01A9} - c:program filesoappsSelectionLinks.dll BHO: DefaultTab Browser Helper: {7F6AFBF1-E065-4627-A2FD-810366367D01} - c:documents and settingskamenapplication datadefaulttabdefaulttabDefaultTabBHO.dll BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:program filesskypetoolbarsinternet explorerskypeieplugin.dll BHO: {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - <orphaned> TB: MixiDJ Toolbar: {CA9B9C89-4662-4ADC-9C23-A452BECD5D19} - c:program filesmixidjmixidj1.8.18.8mixidjTlbr.dll uRun: [ctfmon.exe] c:windowssystem32ctfmon.exe uRun: [skype] "c:program filesskypephoneSkype.exe" /minimized /regrun uRun: [MSMSGS] "c:program filesmessengermsmsgs.exe" /background uRun: [Advanced SystemCare 6] "c:program filesiobitadvanced systemcare 6ASCTray.exe" /AutoStart mRun: [nwiz] c:program filesnvidia corporationnviewnwiz.exe /installquiet mRun: [startCCC] "c:program filesati technologiesati.acecore-staticCLIStart.exe" MSRun mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe" mRun: [KernelFaultCheck] c:windowssystem32dumprep 0 -k dRun: [CTFMON.EXE] c:windowssystem32CTFMON.EXE StartupFolder: c:docume~1alluse~1startm~1programsstartupmcafee~1.lnk - c:program filesmcafee security scan3.0.318SSScheduler.exe uPolicies-Explorer: NoDriveTypeAutoRun = dword:145 mPolicies-Explorer: NoDriveTypeAutoRun = dword:145 IE: &D&ownload &with BitComet - d:bitcometprogramiBitComet.exe/AddLink.htm IE: &D&ownload all with BitComet - d:bitcometprogramiBitComet.exe/AddAllLink.htm IE: E&xport to Microsoft Excel - c:progra~1micros~2office11EXCEL.EXE/3000 IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:program filesskypetoolbarsinternet explorerskypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} IE: {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - d:bitcometprogramitoolsBitCometBHO_1.5.4.11.dll/206 IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:program filesmessengermsmsgs.exe . INFO: HKCU has more than 50 listed domains. If you wish to scan all of them, select the 'Force scan all domains' option. . TCP: NameServer = 95.87.194.4 95.87.255.190 TCP: Interfaces{DA4F01A7-83D9-47A4-86C1-25AB856660F8} : DHCPNameServer = 95.87.194.4 95.87.255.190 Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:program filesskypetoolbarsinternet explorerskypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll Notify: AtiExtEvent - Ati2evxx.dll . ================= FIREFOX =================== . FF - ProfilePath - c:documents and settingskamenapplication datamozillafirefoxprofilesyrk5isa5.default FF - prefs.js: browser.search.selectedEngine - Mixi.DJ Search FF - prefs.js: network.proxy.type - 0 FF - component: c:documents and settingskamenapplication datamozillafirefoxprofilesyrk5isa5.defaultextensions{b042753d-f57e-4e8e-a01b-7379a6d4cefb}componentsIBitCometExtension.dll FF - component: c:program filesavgavg10firefoxcomponentsavgssff.dll FF - component: c:program filesmozilla firefoxextensions{82af8dca-6de9-405d-bd5e-43525bdad38a}componentsSkypeFfComponent.dll FF - plugin: c:program filesadobereader 10.0readerairnppdf32.dll FF - plugin: c:program filesiobitadvanced systemcare 6browerprotectnp_Asc_plugin.dll FF - plugin: c:program filesiobitadvanced systemcare 6browerprotectNPASCSafariPluginProtect.dll FF - plugin: c:program filesmcafee security scan3.0.318npMcAfeeMSS.dll FF - plugin: c:program filesvideodownloadconverter_4zeiinstallr1.binNP4zEISb.dll FF - plugin: c:windowssystem32macromedflashNPSWF32_11_7_700_224.dll . ---- FIREFOX POLICIES ---- FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=109153 FF - user.js: extensions.BabylonToolbar_i.babExt - FF - user.js: extensions.BabylonToolbar_i.srcExt - ss FF - user.js: extensions.BabylonToolbar_i.id - 245025be00000000000000112f40e6d6 FF - user.js: extensions.BabylonToolbar_i.hardId - 245025be00000000000000112f40e6d6 FF - user.js: extensions.BabylonToolbar_i.instlDay - 15416 FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1719:05:22 FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar_i.aflt - babsst FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar_i.tlbrId - base FF - user.js: extensions.BabylonToolbar_i.instlRef - sst FF - user.js: network.http.pipelining.maxrequests - 8 FF - user.js: network.http.request.max-start-delay - 0 FF - user.js: network.http.max-connections - 48 FF - user.js: network.http.max-connections-per-server - 16 FF - user.js: network.http.max-persistent-connections-per-proxy - 16 FF - user.js: network.http.max-persistent-connections-per-server - 8 FF - user.js: browser.turbo.enabled - true FF - user.js: browser.display.show_image_placeholders - true FF - user.js: browser.chrome.favicons - false FF - user.js: browser.urlbar.autocomplete.enabled - true FF - user.js: browser.cache.memory.capacity - 16000 FF - user.js: content.notify.ontimer - true FF - user.js: content.maxtextrun - 4095 FF - user.js: content.max.tokenizing.time - 3000000 FF - user.js: content.switch.threshold - 1000000 FF - user.js: plugin.expose_full_path - true FF - user.js: ui.submenuDelay - 0 FF - user.js: dom.disable_window_status_change - true FF - user.js: extensions.mixidj.tlbrSrchUrl - FF - user.js: extensions.mixidj.id - 245025be00000000000000112f40e6d6 FF - user.js: extensions.mixidj.appId - {A2773ED4-83BD-488A-A186-73590706C916} FF - user.js: extensions.mixidj.instlDay - 15884 FF - user.js: extensions.mixidj.vrsn - 1.8.18.8 FF - user.js: extensions.mixidj.vrsni - 1.8.18.8 FF - user.js: extensions.mixidj.vrsnTs - 1.8.18.818:59:40 FF - user.js: extensions.mixidj.prtnrId - mixidj FF - user.js: extensions.mixidj.prdct - mixidj FF - user.js: extensions.mixidj.aflt - babsst FF - user.js: extensions.mixidj.smplGrp - none FF - user.js: extensions.mixidj.tlbrId - baseyh FF - user.js: extensions.mixidj.instlRef - sst FF - user.js: extensions.mixidj.dfltLng - en FF - user.js: extensions.mixidj.excTlbr - false FF - user.js: extensions.mixidj.ffxUnstlRst - false FF - user.js: extensions.mixidj.admin - false FF - user.js: extensions.mixidj.autoRvrt - false FF - user.js: extensions.mixidj.rvrt - false FF - user.js: extensions.mixidj.newTab - false . ============= SERVICES / DRIVERS =============== . R1 ArcSec;ArcSec;c:windowssystem32driversArcSec.sys [2010-9-21 192504] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:windowssystem32driversdtsoftbus01.sys [2011-1-28 218688] R2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:program filesiobitadvanced systemcare 6ASCService.exe [2013-3-13 574272] R2 BackupStack;Computer Backup (MyPC Backup);c:program filesmypc backupBackupStack.exe [2013-5-31 32808] R2 BrowserDefendert;BrowserDefendert;c:documents and settingsall usersapplication databrowserdefender2.6.1339.144{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}BrowserDefender.exe [2013-6-28 2827728] R2 DefaultTabSearch;DefaultTabSearch;c:program filesdefaulttabDefaultTabSearch.exe [2013-2-11 572928] R2 DefaultTabUpdate;DefaultTabUpdate;c:documents and settingskamenapplication datadefaulttabdefaulttabDTUpdate.exe [2013-6-28 107520] R2 Skype C2C Service;Skype C2C Service;c:documents and settingsall usersapplication dataskypetoolbarsskype c2c servicec2c_service.exe [2013-5-14 3289208] S1 archlp;archlp;c:windowssystem32driversarchlp.sys --> c:windowssystem32driversarchlp.sys [?] S2 SkypeUpdate;Skype Updater;c:program filesskypeupdaterUpdater.exe [2013-6-3 162408] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2012-4-19 256904] S3 GGSAFERDriver;GGSAFER Driver;??c:program filesgarena plusroomsafedrv.sys --> c:program filesgarena plusroomsafedrv.sys [?] S3 McComponentHostService;McAfee Security Scan Component Host Service;c:program filesmcafee security scan3.0.318McCHSvc.exe [2013-2-5 235216] S3 MozillaMaintenance;Mozilla Maintenance Service;c:program filesmozilla maintenance servicemaintenanceservice.exe [2012-5-3 117144] S3 WinRing0_1_2_0;WinRing0_1_2_0;c:program filesiobitgame booster 3driverWinRing0.sys [2013-6-28 14416] . =============== File Associations =============== . ShellExec: BitComet.exe: open="d:bitcometprogramiBitComet.exe" . =============== Created Last 30 ================ . 2013-06-28 15:59:38  --------  d-----w-  c:documents and settingsall usersapplication dataBrowserDefender 2013-06-28 15:59:33  --------  d-----w-  c:program filesmixidj 2013-06-28 15:59:29  --------  d-----w-  c:documents and settingskamenapplication dataBabSolution 2013-06-28 15:59:27  --------  d-----w-  c:documents and settingskamenapplication datamixidj 2013-06-28 15:59:09  --------  d-----w-  c:program filesDefaultTab 2013-06-28 15:59:08  --------  d--h--w-  c:windowssystem32GroupPolicy 2013-06-28 15:58:49  --------  d-----w-  c:documents and settingskamenapplication dataDefaultTab 2013-06-28 15:58:40  --------  d-----w-  c:program filesOApps 2013-06-27 20:51:05  --------  d-----w-  c:documents and settingskamenlocal settingsapplication dataPokki 2013-06-27 20:50:40  --------  d-----w-  c:program filescommon filesSpigot 2013-06-27 20:48:50  --------  d-----w-  c:program filesMyPC Backup 2013-06-07 17:29:39  --------  d-----w-  c:documents and settingskamenapplication dataDriverCure 2013-06-07 17:29:38  --------  d-----w-  c:documents and settingskamenapplication dataSpeedyPC Software 2013-06-07 17:29:16  --------  d-----w-  c:program filescommon filesSpeedyPC Software 2013-06-07 17:29:12  --------  d-----w-  c:program filesSpeedyPC Software 2013-06-07 17:29:12  --------  d-----w-  c:documents and settingsall usersapplication dataSpeedyPC Software . ==================== Find3M  ==================== . 2013-06-12 16:52:22  692104  ----a-w-  c:windowssystem32FlashPlayerApp.exe 2013-06-12 16:52:21  71048  ----a-w-  c:windowssystem32FlashPlayerCPLApp.cpl 2013-04-17 17:22:24  23360  ----a-w-  c:windowssystem32RegistryDefragBootTime.exe . ============= FINISH: 20:12:53,00 ===============  

Здравейте,

 

Имате куп боклуци и затова нека да ги почистим:

 

 

 

СТЪПКА 1

 

 

Изтеглете и стартирайте програмата AdwCleaner (by Xplode).

• [*]Затворете всички стартирани програми и браузъри [*]Кликнете два пъти върху

adwcleaner.exe за да стартирате инструмента. [*]Този път маркирайте Delete [*]Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта. [*]Моля, да публикувате съдържанието на този лог в отговора си [*]Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s1].txt.

 

 

 

СТЪПКА 2

 

 

 

Моля изтеглете Junkware Removal Tool на вашия десктоп.

• [*]Спрете временно работата на защитните програми. [*]Стартирайте инструмента

JRT.exe [*]Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата. [*]Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши. [*]Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt). [*]Моля копирайте съдържанието на лог файла в следващия си пост.

 

 

СТЪПКА 3

 

 

Направете нова проверка с DDS и публикувайте новия лог файл.

Видимо още след първата програмка, firefox спря да ми обяснява че съм 1 милионния потребител

 

Първа програма:

 

# AdwCleaner v2.304 - Logfile created 07/07/2013 at 20:27:55 # Updated 03/07/2013 by Xplode # Operating system : Microsoft Windows XP Service Pack 3 (32 bits) # User : Kamen - KAMEN-PC # Boot Mode : Normal # Running from : C:Documents and SettingsKamenDesktopadwcleaner.exe # Option [Delete] ***** [services] ***** Stopped & Deleted : BrowserDefendert Stopped & Deleted : DefaultTabSearch Stopped & Deleted : DefaultTabUpdate ***** [Files / Folders] ***** Deleted on reboot : C:Documents and SettingsAll UsersApplication DataBrowserDefender Deleted on reboot : C:Documents and SettingsKamenLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionskpepfkjapeclaafmhoelccknpfedainn File Deleted : C:Documents and SettingsKamenApplication DataMozillaFirefoxProfilesyrk5isa5.defaultbProtector_extensions.rdf File Deleted : C:Documents and SettingsKamenApplication DataMozillaFirefoxProfilesyrk5isa5.defaultbprotector_extensions.sqlite File Deleted : C:Documents and SettingsKamenApplication DataMozillaFirefoxProfilesyrk5isa5.defaultbprotector_prefs.js File Deleted : C:Documents and SettingsKamenApplication DataMozillaFirefoxProfilesyrk5isa5.defaultextensionsaddon@defaulttab.com.xpi File Deleted : C:Documents and SettingsKamenApplication DataMozillaFirefoxProfilesyrk5isa5.defaultsearchpluginsBabylon.xml File Deleted : C:Documents and SettingsKamenApplication DataMozillaFirefoxProfilesyrk5isa5.defaultsearchpluginsmixidj.xml File Deleted : C:Documents and SettingsKamenApplication DataMozillaFirefoxProfilesyrk5isa5.defaultsearchpluginssearch-here.xml File Deleted : C:Documents and SettingsKamenApplication DataMozillaFirefoxProfilesyrk5isa5.defaultsearchpluginsyahoo-zugo.xml File Deleted : C:Documents and SettingsKamenLocal SettingsApplication DataGoogleChromeUser DataDefaultbprotectorpreferences File Deleted : C:Program FilesMozilla Firefoxsearchpluginsbabylon.xml File Deleted : C:WINDOWSTasksEPUpdater.job Folder Deleted : C:Documents and SettingsAll UsersApplication DataBabylon Folder Deleted : C:Documents and SettingsKamenApplication DataBabSolution Folder Deleted : C:Documents and SettingsKamenApplication DataBabylon Folder Deleted : C:Documents and SettingsKamenApplication DataDefaultTab Folder Deleted : C:Documents and SettingsKamenApplication DataDriverCure Folder Deleted : C:Documents and SettingsKamenApplication Datamixidj Folder Deleted : C:Documents and SettingsKamenStart MenuProgramsBrowserDefender Folder Deleted : C:Program FilesCommon Filesspigot Folder Deleted : C:Program FilesDefaultTab Folder Deleted : C:Program Filesmixidj Folder Deleted : C:Program FilesOApps ***** [Registry] ***** Data Deleted : HKLM..Windows [AppInit_DLLs] = c:docume~1alluse~1applic~1browse~1261339~1.144{c16c1~1browse~1.dll Key Deleted : HKCUSoftware592dbd9b639be14 Key Deleted : HKCUSoftwareAppDataLowSoftwareDefaultTab Key Deleted : HKCUSoftwareAppDataLowSoftwareSearch Settings Key Deleted : HKCUSoftwareBabSolution Key Deleted : HKCUSoftwareDataMngr Key Deleted : HKCUSoftwareDataMngr_Toolbar Key Deleted : HKCUSoftwareDefault Tab Key Deleted : HKCUSoftwareDefaultTab Key Deleted : HKCUSoftwareExpressFiles Key Deleted : HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Key Deleted : HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{7F6AFBF1-E065-4627-A2FD-810366367D01} Key Deleted : HKCUSoftwareMicrosoftWindowsCurrentVersionExtbProtectSettings Key Deleted : HKCUSoftwareMicrosoftWindowsCurrentVersionExtSettings{7F6AFBF1-E065-4627-A2FD-810366367D01} Key Deleted : HKCUSoftwareMicrosoftWindowsCurrentVersionExtStats{03EB0E9C-7A91-4381-A220-9B52B641CDB1} Key Deleted : HKCUSoftwareMicrosoftWindowsCurrentVersionExtStats{7F6AFBF1-E065-4627-A2FD-810366367D01} Key Deleted : HKCUSoftwaremixidj Key Deleted : HKCUSoftwareSoftonic Key Deleted : HKCUSoftwareZugo Key Deleted : HKLMSOFTWARE592dbd9b639be14 Key Deleted : HKLMSoftwareBabylon Key Deleted : HKLMSOFTWAREClassesAppID{09C554C3-109B-483C-A06B-F14172F1A947} Key Deleted : HKLMSOFTWAREClassesAppID{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} Key Deleted : HKLMSOFTWAREClassesAppID{B12E99ED-69BD-437C-86BE-C862B9E5444D} Key Deleted : HKLMSOFTWAREClassesAppID{D7EE8177-D51E-4F89-92B6-83EA2EC40800} Key Deleted : HKLMSOFTWAREClassesAppIDDefaultTabBHO.DLL Key Deleted : HKLMSOFTWAREClassesAppIDescort.DLL Key Deleted : HKLMSOFTWAREClassesAppIDescortApp.DLL Key Deleted : HKLMSOFTWAREClassesAppIDescortEng.DLL Key Deleted : HKLMSOFTWAREClassesAppIDescorTlbr.DLL Key Deleted : HKLMSOFTWAREClassesAppIDesrv.EXE Key Deleted : HKLMSOFTWAREClassesCLSID{4D6A9BBF-402C-4301-B1EF-28D04F71D761} Key Deleted : HKLMSOFTWAREClassesCLSID{7F6AFBF1-E065-4627-A2FD-810366367D01} Key Deleted : HKLMSOFTWAREClassesCLSID{CA9B9C89-4662-4ADC-9C23-A452BECD5D19} Key Deleted : HKLMSOFTWAREClassesDefaultTabBHO.DefaultTabBrowser Key Deleted : HKLMSOFTWAREClassesDefaultTabBHO.DefaultTabBrowser.1 Key Deleted : HKLMSOFTWAREClassesDefaultTabBHO.DefaultTabBrowserActiveX Key Deleted : HKLMSOFTWAREClassesDefaultTabBHO.DefaultTabBrowserActiveX.1 Key Deleted : HKLMSOFTWAREClassesescort.escortIEPane Key Deleted : HKLMSOFTWAREClassesescort.escortIEPane.1 Key Deleted : HKLMSOFTWAREClassesmixidj.mixidjappCore Key Deleted : HKLMSOFTWAREClassesmixidj.mixidjappCore.1 Key Deleted : HKLMSOFTWAREClassesmixidj.mixidjdskBnd Key Deleted : HKLMSOFTWAREClassesmixidj.mixidjdskBnd.1 Key Deleted : HKLMSOFTWAREClassesmixidj.mixidjHlpr Key Deleted : HKLMSOFTWAREClassesmixidj.mixidjHlpr.1 Key Deleted : HKLMSOFTWAREClassesProd.cap Key Deleted : HKLMSOFTWAREClassesTypeLib{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} Key Deleted : HKLMSOFTWAREClassesTypeLib{D7EE8177-D51E-4F89-92B6-83EA2EC40800} Key Deleted : HKLMSoftwareDataMngr Key Deleted : HKLMSoftwareDefault Tab Key Deleted : HKLMSoftwareDefaultTab Key Deleted : HKLMSoftwareExpressFiles Key Deleted : HKLMSOFTWAREGoogleChromeExtensionsboipimhfjpakfgckhbljjengakjhkcbp Key Deleted : HKLMSOFTWAREGoogleChromeExtensionskdidombaedgpfiiedeimiebkmbilgmlc Key Deleted : HKLMSOFTWAREGoogleChromeExtensionskpepfkjapeclaafmhoelccknpfedainn Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionApp ManagementARPCache{CD95D125-2992-4858-B3EF-5F6FB52FBAD6} Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionApp ManagementARPCacheDefaultTab Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionApp ManagementARPCacheDefaultTab Chrome Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionApp ManagementARPCacheIM Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{4D6A9BBF-402C-4301-B1EF-28D04F71D761} Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{7F6AFBF1-E065-4627-A2FD-810366367D01} Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionExtPreApproved{7F6AFBF1-E065-4627-A2FD-810366367D01} Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstall{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693} Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstallDefaultTab Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstallIM Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstallmixidj Key Deleted : HKLMSoftwaremixidj Key Deleted : HKUS-1-5-21-606747145-1645522239-515967899-1003SoftwareMicrosoftInternet ExplorerSearchScopes{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Value Deleted : HKCUSoftwareMicrosoftInternet ExplorerMain [bprotector start page] Value Deleted : HKCUSoftwareMicrosoftInternet ExplorerSearchScopes [bProtectorDefaultScope] Value Deleted : HKCUSoftwareMicrosoftInternet ExplorerToolbarWebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] Value Deleted : HKLMSOFTWAREMicrosoftInternet ExplorerToolbar [{CA9B9C89-4662-4ADC-9C23-A452BECD5D19}] ***** [internet Browsers] ***** - Internet Explorer v8.0.6001.18702 - Mozilla Firefox v21.0 (bg) File : C:Documents and SettingsKamenApplication DataMozillaFirefoxProfilesyrk5isa5.defaultprefs.js C:Documents and SettingsKamenApplication DataMozillaFirefoxProfilesyrk5isa5.defaultuser.js ... Deleted ! Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar_i.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=109153"); Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "245025be00000000000000112f40e6d6"); Deleted : user_pref("extensions.BabylonToolbar_i.id", "245025be00000000000000112f40e6d6"); Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15416"); Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "base"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1719:05:22"); - Google Chrome v12.0.742.91 File : C:Documents and SettingsKamenLocal SettingsApplication DataGoogleChromeUser DataDefaultPreferences [OK] File is clean. - Opera v12.1.1532.0 File : C:Documents and SettingsKamenApplication DataOperaOperaoperaprefs.ini [OK] File is clean. ************************* AdwCleaner[s1].txt - [10764 octets] - [07/07/2013 20:27:55] ########## EOF - C:AdwCleaner[s1].txt - [10825 octets] ##########  

 

Втора програма

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 4.9.4 (05.06.2013:1) OS: Microsoft Windows XP x86 Ran by Kamen on 07.07.2013 Ј. at 20:31:47,45 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWindowsAppInit_DLLs Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerSearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}DisplayName Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerSearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}URL ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USERSoftwareMicrosoftwindowscurrentversionextbprotectsettings Successfully deleted: [Registry Key] HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Successfully deleted: [Registry Key] HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchScopes{4BBAFA17-604D-45CE-A140-48A4E9FD4DF9} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:Documents and SettingsAll Usersapplication dataammyy" Successfully deleted: [Folder] "C:Documents and SettingsAll Usersapplication dataspeedypc software" Successfully deleted: [Folder] "C:Documents and SettingsKamenApplication Dataspeedypc software" Successfully deleted: [Folder] "C:Program Filesspeedypc software" Successfully deleted: [Folder] "C:Program FilesCommon Filesspeedypc software" Successfully deleted: [Folder] "C:Documents and SettingsKamenstart menuprogramsspeedypc software" ~~~ FireFox Successfully deleted: [File] "C:Program FilesMozilla Firefoxsearchpluginsbabylon.xml" Successfully deleted: [File] C:Documents and SettingsKamenApplication Datamozillafirefoxprofilesyrk5isa5.defaultsearchpluginsbabylon.xml Successfully deleted: [Folder] C:Documents and SettingsKamenApplication Datamozillafirefoxprofilesyrk5isa5.defaultextensionsffxtlbr@mixidj.com Successfully deleted the following from C:Documents and SettingsKamenApplication Datamozillafirefoxprofilesyrk5isa5.defaultprefs.js user_pref("[email protected]", true); user_pref("extensions.defaulttab.lastUsed", 1356542005); Emptied folder: C:Documents and SettingsKamenApplication Datamozillafirefoxprofilesyrk5isa5.defaultminidumps [6 files] ~~~ Chrome Successfully deleted: [Registry Key] hkey_current_usersoftwarepoliciesgooglechromeextensioninstallforcelist Successfully deleted: [Registry Key] hkey_local_machinesoftwarepoliciesgooglechromeextensioninstallforcelist ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 07.07.2013 Ј. at 20:35:19,68 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  

И третото, отново ДДС

 

DDS (Ver_2011-09-30.01) - NTFS_x86 Internet Explorer: 8.0.6001.18702 Run by Kamen at 20:36:20 on 2013-07-07 Microsoft Windows XP Professional  5.1.2600.3.1251.359.1033.18.1023.571 [GMT 3:00] . AV: AVG Internet Security 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF} FW: AVG Firewall *Disabled* . ============== Running Processes ================ . C:Program FilesIObitAdvanced SystemCare 6ASCService.exe C:WINDOWSsystem32Ati2evxx.exe C:WINDOWSsystem32Ati2evxx.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSsystem32WgaTray.exe C:Program FilesMyPC BackupBackupStack.exe C:Documents and SettingsAll UsersApplication DataSkypeToolbarsSkype C2C Servicec2c_service.exe C:Program FilesAnalog DevicesSoundMAXSMAgent.exe C:WINDOWSsystem32wdfmgr.exe C:WINDOWSsystem32ctfmon.exe C:WINDOWSSystem32alg.exe C:Program FilesSkypePhoneSkype.exe C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe C:WINDOWSsystem32wscntfy.exe C:Program FilesMcAfee Security Scan3.0.318SSScheduler.exe C:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe C:WINDOWSsystem32wbemwmiprvse.exe C:WINDOWSexplorer.exe C:WINDOWSsystem32wbemwmiprvse.exe C:WINDOWSSystem32svchost.exe -k netsvcs C:WINDOWSsystem32svchost.exe -k NetworkService C:WINDOWSsystem32svchost.exe -k LocalService C:WINDOWSsystem32svchost.exe -k imgsvc C:WINDOWSSystem32svchost.exe -k HTTPFilter . ============== Pseudo HJT Report =============== . BHO: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - <orphaned> BHO: BitComet Helper: {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - d:bitcometprogramitoolsBitCometBHO_1.5.4.11.dll BHO: SelectionLinks: {7825CFB6-490A-436B-9F26-4A7B5CFC01A9} - BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:program filesskypetoolbarsinternet explorerskypeieplugin.dll BHO: {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - <orphaned> uRun: [ctfmon.exe] c:windowssystem32ctfmon.exe uRun: [skype] "c:program filesskypephoneSkype.exe" /minimized /regrun uRun: [MSMSGS] "c:program filesmessengermsmsgs.exe" /background uRun: [Advanced SystemCare 6] "c:program filesiobitadvanced systemcare 6ASCTray.exe" /AutoStart mRun: [nwiz] c:program filesnvidia corporationnviewnwiz.exe /installquiet mRun: [startCCC] "c:program filesati technologiesati.acecore-staticCLIStart.exe" MSRun mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe" mRun: [KernelFaultCheck] c:windowssystem32dumprep 0 -k dRun: [CTFMON.EXE] c:windowssystem32CTFMON.EXE StartupFolder: c:docume~1alluse~1startm~1programsstartupmcafee~1.lnk - c:program filesmcafee security scan3.0.318SSScheduler.exe uPolicies-Explorer: NoDriveTypeAutoRun = dword:145 mPolicies-Explorer: NoDriveTypeAutoRun = dword:145 IE: &D&ownload &with BitComet - d:bitcometprogramiBitComet.exe/AddLink.htm IE: &D&ownload all with BitComet - d:bitcometprogramiBitComet.exe/AddAllLink.htm IE: E&xport to Microsoft Excel - c:progra~1micros~2office11EXCEL.EXE/3000 IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:program filesskypetoolbarsinternet explorerskypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} IE: {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - d:bitcometprogramitoolsBitCometBHO_1.5.4.11.dll/206 IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:program filesmessengermsmsgs.exe . INFO: HKCU has more than 50 listed domains. If you wish to scan all of them, select the 'Force scan all domains' option. . TCP: NameServer = 95.87.194.4 95.87.255.190 TCP: Interfaces{DA4F01A7-83D9-47A4-86C1-25AB856660F8} : DHCPNameServer = 95.87.194.4 95.87.255.190 Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:program filesskypetoolbarsinternet explorerskypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll Notify: AtiExtEvent - Ati2evxx.dll . ================= FIREFOX =================== . FF - ProfilePath - c:documents and settingskamenapplication datamozillafirefoxprofilesyrk5isa5.default FF - prefs.js: browser.search.selectedEngine - Mixi.DJ Search FF - prefs.js: network.proxy.type - 0 FF - component: c:documents and settingskamenapplication datamozillafirefoxprofilesyrk5isa5.defaultextensions{b042753d-f57e-4e8e-a01b-7379a6d4cefb}componentsIBitCometExtension.dll FF - component: c:program filesavgavg10firefoxcomponentsavgssff.dll FF - component: c:program filesmozilla firefoxextensions{82af8dca-6de9-405d-bd5e-43525bdad38a}componentsSkypeFfComponent.dll FF - plugin: c:program filesadobereader 10.0readerairnppdf32.dll FF - plugin: c:program filesiobitadvanced systemcare 6browerprotectnp_Asc_plugin.dll FF - plugin: c:program filesiobitadvanced systemcare 6browerprotectNPASCSafariPluginProtect.dll FF - plugin: c:program filesmcafee security scan3.0.318npMcAfeeMSS.dll FF - plugin: c:program filesvideodownloadconverter_4zeiinstallr1.binNP4zEISb.dll FF - plugin: c:windowssystem32macromedflashNPSWF32_11_7_700_224.dll . ============= SERVICES / DRIVERS =============== . R1 ArcSec;ArcSec;c:windowssystem32driversArcSec.sys [2010-9-21 192504] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:windowssystem32driversdtsoftbus01.sys [2011-1-28 218688] R2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:program filesiobitadvanced systemcare 6ASCService.exe [2013-3-13 574272] R2 BackupStack;Computer Backup (MyPC Backup);c:program filesmypc backupBackupStack.exe [2013-5-31 32808] R2 Skype C2C Service;Skype C2C Service;c:documents and settingsall usersapplication dataskypetoolbarsskype c2c servicec2c_service.exe [2013-5-14 3289208] S1 archlp;archlp;c:windowssystem32driversarchlp.sys --> c:windowssystem32driversarchlp.sys [?] S2 SkypeUpdate;Skype Updater;c:program filesskypeupdaterUpdater.exe [2013-6-3 162408] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2012-4-19 256904] S3 GGSAFERDriver;GGSAFER Driver;??c:program filesgarena plusroomsafedrv.sys --> c:program filesgarena plusroomsafedrv.sys [?] S3 McComponentHostService;McAfee Security Scan Component Host Service;c:program filesmcafee security scan3.0.318McCHSvc.exe [2013-2-5 235216] S3 MozillaMaintenance;Mozilla Maintenance Service;c:program filesmozilla maintenance servicemaintenanceservice.exe [2012-5-3 117144] S3 WinRing0_1_2_0;WinRing0_1_2_0;c:program filesiobitgame booster 3driverWinRing0.sys [2013-6-28 14416] . =============== File Associations =============== . ShellExec: BitComet.exe: open="d:bitcometprogramiBitComet.exe" . =============== Created Last 30 ================ . 2013-07-07 17:31:45  --------  d-----w-  c:windowsERUNT 2013-07-07 17:31:39  --------  d-----w-  C:JRT 2013-06-28 15:59:08  --------  d--h--w-  c:windowssystem32GroupPolicy 2013-06-27 20:51:05  --------  d-----w-  c:documents and settingskamenlocal settingsapplication dataPokki 2013-06-27 20:48:50  --------  d-----w-  c:program filesMyPC Backup . ==================== Find3M  ==================== . 2013-06-12 16:52:22  692104  ----a-w-  c:windowssystem32FlashPlayerApp.exe 2013-06-12 16:52:21  71048  ----a-w-  c:windowssystem32FlashPlayerCPLApp.cpl 2013-04-17 17:22:24  23360  ----a-w-  c:windowssystem32RegistryDefragBootTime.exe . ============= FINISH: 20:36:59,23 ===============  

Супер,

 

Съветвам ви да деинсталирате следните 3 програми:

 

Advanced SystemCare 6
McAfee Security Scan
Mozilla Maintenance Service

 

 

След това можете да публикувате един лог от FRST за да почистим някои остатъци.

 

• [*]Моля изтеглете

Farbar Recovery Scan Tool и го запазете на десктопа. [*]Стартирайте файла FRST.exe. [*]Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение. [*]Сложете всички отметки. [*]Натиснете бутона SCAN. [*]Ще се създадат два лог файл с името - FRST.txt и Addition.txt на десктопа. [*]Прикачете лог файловете в следващия си коментар.

Махнал съм и трите програми.

Прикачвам двата файла.

Исках да ппопитам има ли начин да разкарам този досаден genuine microsoft, появи се след като ъпдейтвах windows през adv system care, или трябва преинстал на системата, за да се махне?

 

 

FRST.txt

Addition.txt

По-анализа на логовете ще пиша после, че съм на работа.

 

Колкото до ъпдейта предполагам се е инсталирал този - KB971033 и е добре да го деинсталирате за да избегнете бъдещи проблеми.

Лошото е че не знам как да се деинсталира

Имате Л.С.

Здравейте,

 

оправих проблема с genuine )

Ако и логовете в 5-ти пост са окай, мисля че проблема е оправен :)

Лог файла изглежда наред, но ако не използвате Windows Messenger ви съветвам да спрете услугата и...

Най-лесно можете да го направите с този инструмент - ShootTheMessenger

 

След това отворете Control Panel => Add or remove programs => Add/Remove Windows Components => и премахнете следните отметки, ако ги има и не ползвате съответните инструменти:

 

Кликнете двукратно на Accessories and Utilities => Games => махнетге отметката пред Internet Games => натиснете Ok, Ok за да се върнете в основното меню

Fax Services

Indexing Services

Internet Information Services (ISS)

Management and monitoring tools

Message Queuing

MSN Explorer

Other Network File and Print Services

Outlook Express

Windows Messenger

 

След това натиснете Next за да ги премахнете.

 

Също така забелязах видео драйвъри на Ati и nVidia? Кои да премахнем?

 

Ако не използвате Skype Click to Call, го деинсталирайте.

 

И за да премахнем и последните остатъци, изтеглете прикачения файл и го запазете там, където сте свалили FRST.exe => fixlist.txt

Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.

Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.

И после пишете как е положението...и ще ви кажа как да премахнете използваните от нас неща.

 

Поздрави!

Здравейте,

 

всичко съм направил, само драйверите не съм пипал, защото май имам и двете видеокарти

Благодаря много за отделеното внимание.

 

Прикачвам файла от последната програма.

Всички програми за сега ги пазя

Fixlog.txt

Защо имате две видеокарти, след като от различни марки едва ли могат да работят в хибриден режим между SLI и CrossFire?

Както и да е. Как е сега положението?

 

За да почистим използваните от нас неща направете следното:

 

Изтеглете OTC.exe и го стартирайте. Натиснете бутона CleanUp!. Рестартирайте компютъра, ако ви попита! Изтеглете Delfix.exe и го стартирайте. Сложете отметка пред Remove disinfection tools => натиснете бутона Run

Инструмента ще се самоизтрие след като приключи своята задача!

 

Поздрави!