Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

Компютъра ми е заразен Worm.Brontok

27 август 201313 г.

Добър ден. След сканиране с MalwareBytes открих, че имам Worm.Brontok. Премахнах го, и на следващият ден просто ей така, за профилактика реших наново да сканирам (предишният ден нищо не съм правил), и отново го открих.

DDS:

DDS (Ver_2011-09-30.01) - NTFS_x86

Internet Explorer: 9.10.9200.16660 BrowserJavaVersion: 10.25.2

Run by PC at 9:15:21 on 2013-08-27

Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.3070.1364 [GMT 3:00]

AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

============== Running Processes ================

C:Windowssystem32wininit.exe

C:Windowssystem32lsm.exe

C:Windowssystem32nvvsvc.exe

C:Program FilesNVIDIA Corporation3D VisionnvSCPAPISvr.exe

C:WindowsInstallerMSIB418.tmp

D:SandboxieSbieSvc.exe

C:Program FilesNVIDIA CorporationDisplaynvxdsync.exe

C:Windowssystem32nvvsvc.exe

E:AvastAvastSvc.exe

C:Windowssystem32Dwm.exe

C:WindowsExplorer.EXE

C:Windowssystem32taskhost.exe

C:WindowsSystem32spoolsv.exe

E:Malwarebytes' Anti-Malwarembamscheduler.exe

E:Malwarebytes' Anti-Malwarembamservice.exe

C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE

E:Malwarebytes' Anti-Malwarembamgui.exe

C:Program FilesMicrosoft SQL ServerMSSQL10.SQLEXPRESSMSSQLBinnsqlservr.exe

C:Program FilesMicrosoft SQL Server90Sharedsqlwriter.exe

C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE

C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSvcM.exe

C:WindowsSystem32alg.exe

C:Program FilesRealtekAudioHDARtHDVCpl.exe

C:Program FilesCommon FilesJavaJava Updatejusched.exe

E:AvastAvastUI.exe

C:Program FilesRocketDockRocketDock.exe

C:Program FilesSkypePhoneSkype.exe

C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe

C:Program FilesGoogleUpdateGoogleUpdate.exe

C:Program FilesGoogleUpdate1.3.21.153GoogleCrashHandler.exe

C:UsersPCAppDataLocalGoogleChromeApplicationchrome.exe

C:Windowssystem32conhost.exe

C:Windowssystem32wbemwmiprvse.exe

C:Windowssystem32svchost.exe -k DcomLaunch

C:Windowssystem32svchost.exe -k RPCSS

C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted

C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted

C:Windowssystem32svchost.exe -k LocalService

C:Windowssystem32svchost.exe -k netsvcs

C:Windowssystem32svchost.exe -k GPSvcGroup

C:Windowssystem32svchost.exe -k NetworkService

C:Windowssystem32svchost.exe -k LocalServiceNoNetwork

C:Windowssystem32svchost.exe -k imgsvc

C:WindowsSystem32svchost.exe -k secsvcs

C:Windowssystem32svchost.exe -k NetworkServiceNetworkRestricted

C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation

============== Pseudo HJT Report ===============

uProxyServer = hxxp=127.0.0.1:8555

uProxyOverride = 127.0.0.1;localhost;10.*;192.168.*;127.0.0.1:895;127.0.0.1:896;<local>

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - e:javabinssv.dll

BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - e:avastaswWebRepIE.dll

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:program filescommon filesmicrosoft sharedwindows liveWindowsLiveLogin.dll

BHO: {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - <orphaned>

BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogle toolbarGoogleToolbar_32.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - e:javabinjp2ssv.dll

TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:program filesgooglegoogle toolbarGoogleToolbar_32.dll

TB: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - e:avastaswWebRepIE.dll

TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogle toolbarGoogleToolbar_32.dll

uRun: [RocketDock] "c:program filesrocketdockRocketDock.exe"

uRun: [skype] "c:program filesskypephoneSkype.exe" /minimized /regrun

uRun: [swg] "c:program filesgooglegoogletoolbarnotifierGoogleToolbarNotifier.exe"

uRun: [DAEMON Tools Lite] "e:daemon tools liteDTLite.exe" -autorun

uRun: [Google Update] "c:userspcappdatalocalgoogleupdateGoogleUpdate.exe" /c

mRun: [RTHDVCPL] c:program filesrealtekaudiohdaRtHDVCpl.exe -s

mRun: [sunJavaUpdateSched] "c:program filescommon filesjavajava updatejusched.exe"

mRun: [AvastUI.exe] "e:avastAvastUI.exe" /nogui

uPolicies-Explorer: NoDriveTypeAutoRun = dword:255

uPolicies-Explorer: DontSetAutoplayCheckbox = dword:1

uPolicies-Explorer: NoAutorun = dword:2

mPolicies-Explorer: NoDriveTypeAutoRun = dword:255

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:2

mPolicies-System: EnableUIADesktopToggle = dword:0

mPolicies-WindowsSystem: AllowBlockingAppsAtShutdown = dword:0

IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - <orphaned>

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:program fileswindows livewriterWriterBrowserExtension.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

INFO: HKCU has more than 50 listed domains.

If you wish to scan all of them, select the 'Force scan all domains' option.

TCP: Interfaces{A070B0E8-E97D-45E2-A87F-F08AFA60FBD2} : NameServer = 4.4.4.4,8.8.4.4

TCP: Interfaces{A070B0E8-E97D-45E2-A87F-F08AFA60FBD2} : DHCPNameServer = 192.168.0.1

TCP: Interfaces{C5F920D5-E326-4864-BB89-F895D8045262} : NameServer = 4.4.4.4,8.8.4.4

TCP: Interfaces{C5F920D5-E326-4864-BB89-F895D8045262} : DHCPNameServer = 192.168.0.1

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:program filesskypetoolbarsinternet explorerskypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:program fileswindows livephoto galleryAlbumDownloadProtocolHandler.dll

SSODL: WebCheck - <orphaned>

STS: CAveStartButtonChangerObject Class - {F791A188-699D-4FD4-955A-EB59E89B1907} - c:program filesthe skins factoryhyperdeskcommonAveStartButtonChangerInProc.dll

SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:SASSEH.DLL

LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg pku2u livessp

================= FIREFOX ===================

FF - ProfilePath - c:userspcappdataroamingmozillafirefoxprofileskajtqeym.default

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: network.proxy.http - 127.0.0.1

FF - prefs.js: network.proxy.http_port - 25015

FF - prefs.js: network.proxy.type -

FF - plugin: c:program filesadobereader 10.0readerairnppdf32.dll

FF - plugin: c:program filesgooglegoogle earthpluginnpgeplugin.dll

FF - plugin: c:program filesgoogleupdate1.3.21.145npGoogleUpdate3.dll

FF - plugin: c:program filesjavajre7binplugin2npjp2.dll

FF - plugin: c:program filesmicrosoft silverlight5.1.20125.0npctrlui.dll

FF - plugin: c:program filesnvidia corporation3d visionnpnv3dv.dll

FF - plugin: c:program filesnvidia corporation3d visionnpnv3dvstreaming.dll

FF - plugin: c:program fileswindows livephoto galleryNPWLPG.dll

FF - plugin: c:userspcappdatalocalgoogleupdate1.3.21.145npGoogleUpdate3.dll

FF - plugin: c:windowssystem32macromedflashNPSWF32_11_7_700_169.dll

FF - plugin: c:windowssystem32npdeployJava1.dll

FF - plugin: c:windowssystem32npmproxy.dll

FF - plugin: e:advanced systemcare 6browerprotectnp_Asc_plugin.dll

FF - plugin: e:advanced systemcare 6browerprotectNPASCSafariPluginProtect.dll

FF - plugin: e:new foldervlcnpvlc.dll

============= SERVICES / DRIVERS ===============

R0 aswRvrt;avast! Revert;c:windowssystem32driversaswRvrt.sys [2013-8-20 49944]

R0 aswVmm;avast! VM Monitor;c:windowssystem32driversaswVmm.sys [2013-8-20 177152]

R0 gfibto;gfibto;c:windowssystem32driversgfibto.sys [2013-3-15 13560]

R0 SmartDefragDriver;SmartDefragDriver;c:windowssystem32driversSmartDefragDriver.sys [2013-3-13 15672]

R1 AppleCharger;AppleCharger;c:windowssystem32driversAppleCharger.sys [2010-12-11 19496]

R1 aswSnx;aswSnx;c:windowssystem32driversaswSnx.sys [2013-8-20 771832]

R1 aswSP;aswSP;c:windowssystem32driversaswSP.sys [2013-8-20 399120]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:windowssystem32driversdtsoftbus01.sys [2013-4-6 242240]

R1 SASDIFSV;SASDIFSV;D:sasdifsv.sys [2011-7-22 12880]

R1 SASKUTIL;SASKUTIL;D:SASKUTIL.SYS [2011-7-13 67664]

R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2010/12/11 11:04:48];c:program filescyberlinkpowerdvd10navfilter000.fcl [2010-3-13 87536]

R2 aswFsBlk;aswFsBlk;c:windowssystem32driversaswFsBlk.sys [2013-8-20 35144]

R2 aswMonFlt;aswMonFlt;c:windowssystem32driversaswMonFlt.sys [2013-8-20 68312]

R2 avast! Antivirus;avast! Antivirus;e:avastAvastSvc.exe [2013-8-20 48808]

R2 HyperDeskCustomThemeEnabler;HyperDesk's Custom Theme Enabler;c:windowsinstallerMSIB418.tmp [2013-8-23 86016]

R2 MBAMScheduler;MBAMScheduler;e:malwarebytes' anti-malwarembamscheduler.exe [2012-9-12 418376]

R2 MBAMService;MBAMService;e:malwarebytes' anti-malwarembamservice.exe [2012-9-12 701512]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:program filesnvidia corporation3d visionnvSCPAPISvr.exe [2013-3-14 383264]

R3 MBAMProtector;MBAMProtector;c:windowssystem32driversmbam.sys [2010-12-15 22856]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:windowssystem32driversnvhda32v.sys [2013-3-14 154040]

R3 RTL8167;Realtek 8167 NT Driver;c:windowssystem32driversRt86win7.sys [2013-3-18 614624]

R3 SbieDrv;SbieDrv;d:sandboxieSbieDrv.sys [2013-7-8 159208]

R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:windowssystem32driverstap0901t.sys [2012-1-18 27136]

R3 vvftav303;vvftav303;c:windowssystem32driversvvftav303.sys [2013-2-1 480128]

R3 ZSMC0303;A4 TECH PC Camera H;c:windowssystem32driversusbVM303.sys [2013-2-2 1472768]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:windowsmicrosoft.netframeworkv4.0.30319mscorsvw.exe [2012-7-9 104912]

S2 gupdate;Услуга Google Update (gupdate);c:program filesgoogleupdateGoogleUpdate.exe [2010-12-11 136176]

S2 SKLProService;Run software as a Windows service;e:prokawardrsasws.exe [2013-8-15 98304]

S2 SkypeUpdate;Skype Updater;c:program filesskypeupdaterUpdater.exe [2013-6-21 162408]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:windowssystem32driversb57nd60x.sys [2009-7-14 229888]

S3 btusbflt;Bluetooth USB Filter;c:windowssystem32driversbtusbflt.sys [2010-4-14 45736]

S3 fssfltr;fssfltr;c:windowssystem32driversfssfltr.sys [2011-2-4 39272]

S3 fsssvc;Windows Live Family Safety Service;c:program fileswindows livefamily safetyfsssvc.exe [2010-9-23 1493352]

S3 gupdatem;Услуга на Google Актуализация (gupdatem);c:program filesgoogleupdateGoogleUpdate.exe [2010-12-11 136176]

S3 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;e:hamachihamachi-2.exe -s --> e:hamachihamachi-2.exe -s [?]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:windowssystem32driversrdpvideominiport.sys [2013-2-5 14848]

S3 TsUsbFlt;TsUsbFlt;c:windowssystem32driversTsUsbFlt.sys [2013-2-5 49664]

S3 TunngleService;TunngleService;e:tunngleTnglCtrl.exe [2013-7-21 756120]

S3 WatAdminSvc;Windows Activation Technologies Service;c:windowssystem32watWatAdminSvc.exe [2011-6-23 1343400]

S3 WMZuneComm;Zune Windows Mobile Connectivity Service;e:zuneWMZuneComm.exe [2011-8-5 268512]

S3 XFDriver;XFDriver;e:xfire2XFDriver.sys [2013-3-23 16648]

S4 !SASCORE;SAS Core Service;D:SASCore.exe [2013-5-23 119056]

S4 AdobeARMservice;Adobe Acrobat Update Service;c:program filescommon filesadobearm1.0armsvc.exe [2013-5-10 65640]

S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2012-4-10 257416]

S4 AdvancedSystemCareService6;Advanced SystemCare Service 6;e:advanced systemcare 6ASCService.exe [2013-7-7 574272]

S4 AppleChargerSrv;AppleChargerSrv;system32AppleChargerSrv.exe --> system32AppleChargerSrv.exe [?]

S4 MozillaMaintenance;Mozilla Maintenance Service;c:program filesmozilla maintenance servicemaintenanceservice.exe [2012-7-28 117144]

S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:program filesmicrosoft sql server100sharedsqladhlp.exe [2008-7-11 47128]

S4 RsFx0105;RsFx0105 Driver;c:windowssystem32driversRsFx0105.sys [2011-9-22 238696]

S4 SwitchBoard;Adobe SwitchBoard;c:program filescommon filesadobeswitchboardSwitchBoard.exe [2010-2-19 517096]

S4 TeamViewer8;TeamViewer 8;c:program filesteamviewerversion8TeamViewer_Service.exe [2013-1-25 4153184]

=============== Created Last 30 ================

2013-08-24 07:10:02 7166848 ----a-w- c:programdatamicrosoftwindows defenderdefinition updates{6b9e4e1f-4d94-4c37-ac58-24e2f02f8328}mpengine.dll

2013-08-23 15:23:30 -------- d-----w- c:userspcappdatalocalImages

2013-08-23 15:23:28 214528 ----a-w- c:userspcappdatalocaldfgdgzr.exe

2013-08-23 13:26:19 212992 ----a-w- c:program filescommon filesinstallshieldengine6intel 32ILog.dll

2013-08-23 10:25:42 -------- d-----w- c:userspcappdatalocalSplitMediaLabs

2013-08-23 10:25:02 -------- d-----w- c:programdataSplitMediaLabs

2013-08-23 10:23:11 -------- d-----w- c:userspcappdataroamingSplitMediaLabs

2013-08-23 06:08:47 -------- d-----w- c:userspcappdatalocalSpoon

2013-08-21 18:20:16 -------- d-----w- c:windowssystem32appmgmt

2013-08-21 09:09:16 -------- d-----w- C:UsbFix

2013-08-20 10:10:10 -------- d-----w- c:userspcappdataroamingAVAST Software

2013-08-20 10:08:50 771832 ----a-w- c:windowssystem32driversaswSnx.sys

2013-08-20 10:08:50 49944 ----a-w- c:windowssystem32driversaswRvrt.sys

2013-08-20 10:08:50 177152 ----a-w- c:windowssystem32driversaswVmm.sys

2013-08-20 10:08:49 68312 ----a-w- c:windowssystem32driversaswMonFlt.sys

2013-08-20 10:08:47 64704 ----a-w- c:windowssystem32driversaswRdr2.sys

2013-08-20 10:08:42 33280 ----a-w- c:windowsavastSS.scr

2013-08-19 10:25:31 -------- d-----w- c:windowsERUNT

2013-08-18 10:37:03 -------- d-----w- c:userspcappdatalocalRockstar Games

2013-08-18 10:37:02 -------- d-sh--w- c:programdataSecuROM

2013-08-18 10:34:57 -------- d-----w- c:userspcappdataroamingGrand Theft Auto IV

2013-08-18 07:50:21 107888 ----a-w- c:windowssystem32CmdLineExt.dll

2013-08-18 06:39:59 -------- d-----w- c:programdataSystemRequirementsLab

2013-08-15 15:36:08 -------- d--h--w- c:programdatakprologs

2013-08-15 15:36:04 50688 ----a-w- c:windowssystem32wbhelp2.dll

2013-08-15 15:36:04 28160 ----a-w- c:windowssystem32anim.dll

2013-08-15 10:02:54 -------- d-----w- c:userspcappdatalocalPAYDAY

2013-08-14 10:10:34 -------- d-----w- c:userspcappdatalocalLogMeIn Hamachi

2013-08-14 10:05:21 225280 ----a-w- c:program filescommon filesinstallshieldiscriptiscript.dll

2013-08-14 10:05:20 77824 ----a-w- c:program filescommon filesinstallshieldengine6intel 32ctor.dll

2013-08-14 10:05:20 32768 ----a-w- c:program filescommon filesinstallshieldengine6intel 32objectps.dll

2013-08-14 10:05:20 176128 ----a-w- c:program filescommon filesinstallshieldengine6intel 32iuser.dll

2013-08-14 07:41:54 -------- d-----w- c:windowssystem32MRT

2013-08-14 07:34:03 2706432 ----a-w- c:windowssystem32mshtml.tlb

2013-08-14 07:34:00 2877440 ----a-w- c:windowssystem32jscript9.dll

2013-08-14 07:34:00 218112 ----a-w- c:program filesinternet explorersqmapi.dll

2013-08-14 04:53:22 1620992 ----a-w- c:windowssystem32WMVDECOD.DLL

2013-08-14 04:53:20 1166848 ----a-w- c:windowssystem32crypt32.dll

2013-08-14 04:53:19 175104 ----a-w- c:windowssystem32wintrust.dll

2013-08-14 04:53:19 140288 ----a-w- c:windowssystem32cryptsvc.dll

2013-08-14 04:53:19 103936 ----a-w- c:windowssystem32cryptnet.dll

2013-08-14 04:53:16 652800 ----a-w- c:windowssystem32rpcrt4.dll

2013-08-14 04:53:15 1293760 ----a-w- c:windowssystem32driverstcpip.sys

2013-08-14 04:53:13 3968960 ----a-w- c:windowssystem32ntkrnlpa.exe

2013-08-14 04:53:13 3913664 ----a-w- c:windowssystem32ntoskrnl.exe

2013-08-14 04:53:12 1289096 ----a-w- c:windowssystem32ntdll.dll

2013-08-14 04:53:03 2048 ----a-w- c:windowssystem32tzres.dll

2013-08-14 04:52:59 31232 ----a-w- c:windowssystem32driverstssecsrv.sys

2013-08-12 11:59:02 -------- d-----w- c:userspcappdataroamingJAM Software

2013-08-12 07:54:19 -------- d-----w- c:programdataAcunetix WVS 8

2013-08-12 07:44:17 -------- d-----w- c:program filesCOMODO

2013-08-09 13:26:20 372736 ----a-w- c:windowssystem32IJL_11.DLL

2013-08-09 09:24:45 -------- d-----w- c:userspcappdataroamingPunkBuster

2013-08-07 10:14:10 -------- d-----w- c:windowssystem32directx

2013-08-06 18:59:08 -------- d-----w- c:windowssystem32HavijPro

2013-08-05 05:37:31 -------- d-----w- c:userspcappdataroamingMSdrv

2013-07-30 18:57:59 188128 ----a-w- c:programdatamicrosoftvcsexpress10.01033ResourceCache.dll

2013-07-28 07:01:16 -------- d-----w- c:userspcappdatalocalSCE

==================== Find3M ====================

2013-08-10 07:58:34 94632 ----a-w- c:windowssystem32WindowsAccessBridge.dll

2013-08-10 07:58:30 867240 ----a-w- c:windowssystem32npdeployJava1.dll

2013-08-10 07:58:30 789416 ----a-w- c:windowssystem32deployJava1.dll

2013-07-26 03:13:24 1767936 ----a-w- c:windowssystem32wininet.dll

2013-07-26 03:12:00 61440 ----a-w- c:windowssystem32iesetup.dll

2013-07-26 03:12:00 109056 ----a-w- c:windowssystem32iesysprep.dll

2013-07-26 01:59:38 71680 ----a-w- c:windowssystem32RegisterIEPKEYs.exe

2013-07-15 05:08:53 71048 ----a-w- c:windowssystem32FlashPlayerCPLApp.cpl

2013-07-15 05:08:53 692104 ----a-w- c:windowssystem32FlashPlayerApp.exe

2013-06-05 03:05:09 2347520 ----a-w- c:windowssystem32win32k.sys

2013-06-04 04:53:07 509440 ----a-w- c:windowssystem32qedit.dll

============= FINISH: 9:16:11,56 ===============

Attach:

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_2011-09-30.01)

Microsoft Windows 7 Ultimate

Boot Device: DeviceHarddiskVolume1

Install Date: 4.4.2004 г. 10:29:29

System Uptime: 27.8.2013 г. 08:30:40 (1 hours ago)

Motherboard: Gigabyte Technology Co., Ltd. | | P41T-D3

Processor: Pentium® Dual-Core CPU E5700 @ 3.00GHz | Socket 775 | 3000/200mhz

==== Disk Partitions =========================

A: is Removable

C: is FIXED (NTFS) - 59 GiB total, 22,795 GiB free.

D: is FIXED (NTFS) - 204 GiB total, 154,214 GiB free.

E: is FIXED (NTFS) - 204 GiB total, 139,973 GiB free.

F: is CDROM (CDFS)

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1083: 25.8.2013 г. 08:45:37 - Scheduled Checkpoint

RP1084: 26.8.2013 г. 10:13:27 - Restore Operation

==== Installed Programs ======================

Фотогалерия на Windows Live

µTorrent

A4 TECH PC Camera H

ActiveX контрола на Windows Live Mesh за отдалечени връзки

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Photoshop CS5.1

Adobe Reader X (10.1.7)

Advanced SystemCare 6

AIMP3

Auslogics BoostSpeed

avast! Free Antivirus

BS.Player FREE

BulgarianPhonetic XP by G. Atanasov

Call of Duty

Call of Duty® 4 - Modern Warfare 1.6 Patch

Camtasia Studio 7

Canon MP550 series MP Drivers

CCleaner

Compatibility Pack for the 2007 Office system

Counter-Strike 1.6

D3DX10

DAEMON Tools Lite

DiRT 3

Europa Universalis III

Favorite-Games 5.22

Fruit Ninja Lite 1.6.1

Gaberoff Koral German Dictionary 1.01

Google Chrome

Google Earth

Google Toolbar for Internet Explorer

Google Update Helper

Grand Theft Auto IV

Grand Theft Auto: Episodes from Liberty City

GRID 2 © Codemasters version 1

GTA San Andreas

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB945282)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB946040)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB946308)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB946344)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB947540)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB947789)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB948127)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB951708)

Hotfix for Microsoft Visual Basic 2010 Express - ENU (KB2635973)

Hotfix for Microsoft Visual C# 2010 Express - ENU (KB2635973)

Hyperdesk - DarkMatter Gamma Ray

Hyperdesk - DarkMatter Subspace

IObit Toolbar v4.6

Java 7 Update 25

Java Auto Updater

K-Lite Codec Pack 6.3.0 (Full)

Kartagen

LogMeIn Hamachi

Mafia II

Malwarebytes Anti-Malware, версия 1.75.0.1300

ManiaPlanet

Microsoft .NET Framework 1.1

Microsoft .NET Framework 4 Multi-Targeting Pack

Microsoft .NET Framework 4.5

Microsoft Application Error Reporting

Microsoft Games for Windows - LIVE Redistributable

Microsoft Games for Windows Marketplace

Microsoft Help Viewer 1.1

Microsoft Office 2003 Bulgarian User Interface Pack

Microsoft Office File Validation Add-In

Microsoft Office Outlook Connector

Microsoft Office Professional Edition 2003

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft SQL Server 2008

Microsoft SQL Server 2008 Browser

Microsoft SQL Server 2008 Common Files

Microsoft SQL Server 2008 Database Engine Services

Microsoft SQL Server 2008 Database Engine Shared

Microsoft SQL Server 2008 Native Client

Microsoft SQL Server 2008 R2 Management Objects

Microsoft SQL Server 2008 RsFx Driver

Microsoft SQL Server 2008 Setup Support Files

Microsoft SQL Server Compact 3.5 SP1 Design Tools English

Microsoft SQL Server Compact 3.5 SP2 ENU

Microsoft SQL Server System CLR Types

Microsoft SQL Server VSS Writer

Microsoft Visual Basic 2008 Express Edition with SP1 - ENU

Microsoft Visual Basic 2010 Express - ENU

Microsoft Visual C# 2010 Express - ENU

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219

Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools

Microsoft Visual Studio 2010 Service Pack 1

Microsoft Visual Studio 2010 Tools for Office Runtime (x86)

Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - enu

Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32

Microsoft WSE 3.0 Runtime

Microsoft_VC80_ATL_x86

Microsoft_VC80_CRT_x86

Microsoft_VC80_MFC_x86

Microsoft_VC80_MFCLOC_x86

Microsoft_VC90_ATL_x86

Microsoft_VC90_CRT_x86

Microsoft_VC90_MFC_x86

Microsoft_VC90_MFCLOC_x86

Mozilla Firefox 21.0 (x86 bg)

Mozilla Maintenance Service

MSVCRT

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Need for Speed Underground 2

Nero 8

neroxml

NVIDIA 3D Vision Controller Driver 314.22

NVIDIA 3D Vision Driver 314.22

NVIDIA Control Panel 314.22

NVIDIA Graphics Driver 314.22

NVIDIA HD Audio Driver 1.3.23.1

NVIDIA Install Application

NVIDIA PhysX System Software 9.12.1031

NVIDIA Stereoscopic 3D Driver

OpenAL

PDF Settings CS5

PokerStars.net

RocketDock 1.3.5

SA Dictionary 2008 Beta 4

Saints Row IV

Sandboxie 4.04 (32-bit)

Security Update for Microsoft .NET Framework 4.5 (KB2737083)

Security Update for Microsoft .NET Framework 4.5 (KB2742613)

Security Update for Microsoft .NET Framework 4.5 (KB2789648)

Security Update for Microsoft .NET Framework 4.5 (KB2804582)

Security Update for Microsoft .NET Framework 4.5 (KB2833957)

Security Update for Microsoft .NET Framework 4.5 (KB2840642)

Security Update for Microsoft .NET Framework 4.5 (KB2840642v2)

Security Update for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB2251487)

Service Pack 3 for SQL Server 2008 (KB2546951)

Skype Click to Call

Skype™ 6.6

Spoon Virtual Application Studio 2012

Sql Server Customer Experience Improvement Program

Steam

SUPERAntiSpyware

System Requirements Lab CYRI

TeamSpeak 3 Client

TeamViewer 8

TmNationsForever

Tunatic

Tunngle beta

Update for Microsoft .NET Framework 4.5 (KB2750147)

Update for Microsoft .NET Framework 4.5 (KB2805221)

Update for Microsoft .NET Framework 4.5 (KB2805226)

Uplay

VCRedistSetup

Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU

VLC media player 2.0.6

Winamp

Windows Live Communications Platform

Windows Live Essentials

Windows Live Family Safety

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Mesh ActiveX Control for Remote Connections

Windows Live Movie Maker

Windows Live Photo Common

Windows Live Photo Gallery

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

WinRAR 4.20 (32-bit)

Xfire (remove only)

Xfire 2.0 Beta

Zune

==== Event Viewer Messages From Past Week ========

54822904

27.8.2013 г. 08:38:07, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

27.8.2013 г. 08:38:06, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

27.8.2013 г. 08:38:04, Error: Microsoft-Windows-SharedAccess_NAT [31004] - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

27.8.2013 г. 08:31:23, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load:

26.8.2013 г. 10:17:07, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load:

26.8.2013 г. 08:42:05, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load:

26.8.2013 г. 08:42:05, Error: Service Control Manager [7022] - The Diagnostic System Host service hung on starting.

26.8.2013 г. 08:42:03, Error: Service Control Manager [7022] - The Diagnostic Service Host service hung on starting.

26.8.2013 г. 08:40:38, Error: Service Control Manager [7001] - The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

26.8.2013 г. 08:37:41, Error: Service Control Manager [7001] - The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

26.8.2013 г. 08:34:29, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load:

26.8.2013 г. 08:34:29, Error: Service Control Manager [7022] - The Diagnostic System Host service hung on starting.

26.8.2013 г. 08:34:26, Error: Service Control Manager [7022] - The Diagnostic Service Host service hung on starting.

26.8.2013 г. 08:12:16, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load:

26.8.2013 г. 08:12:16, Error: Service Control Manager [7022] - The Diagnostic System Host service hung on starting.

26.8.2013 г. 08:12:14, Error: Service Control Manager [7022] - The Diagnostic Service Host service hung on starting.

25.8.2013 г. 18:46:07, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load:

25.8.2013 г. 18:46:07, Error: Service Control Manager [7022] - The Diagnostic System Host service hung on starting.

25.8.2013 г. 18:46:05, Error: Service Control Manager [7022] - The Diagnostic Service Host service hung on starting.

25.8.2013 г. 18:39:43, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load:

25.8.2013 г. 18:39:42, Error: Service Control Manager [7022] - The Diagnostic System Host service hung on starting.

25.8.2013 г. 18:39:40, Error: Service Control Manager [7022] - The Diagnostic Service Host service hung on starting.

25.8.2013 г. 18:30:07, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load:

25.8.2013 г. 18:30:07, Error: Service Control Manager [7022] - The Diagnostic System Host service hung on starting.

25.8.2013 г. 18:30:05, Error: Service Control Manager [7022] - The Diagnostic Service Host service hung on starting.

25.8.2013 г. 18:27:00, Error: Service Control Manager [7034] - The NVIDIA Display Driver Service service terminated unexpectedly. It has done this 1 time(s).

25.8.2013 г. 18:10:02, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load:

25.8.2013 г. 18:04:29, Error: Disk [11] - The driver detected a controller error on DeviceHarddisk1DR1.

25.8.2013 г. 18:04:28, Error: Disk [11] - The driver detected a controller error on DeviceHarddisk1DR1.

25.8.2013 г. 18:03:50, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load:

25.8.2013 г. 18:01:11, Error: Disk [11] - The driver detected a controller error on DeviceHarddisk1DR1.

==== End Of File ===========================

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

27 август 201313 г.

Здравейте..!Деинсталирайте:

IObit Toolbar v4.6

Проксито познато ли ви е:

uProxyServer = hxxp=127.0.0.1:8555

Изтеглете ComboFix от тук и го запазете на десктопа си
Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.
Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs
Стартирайте Combo-Fix.com и следвайте инструкциите.
Бележка: ComboFix ще се стартира без инсталирана Recovery Console.
Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repai режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.

[*]Следвайте инструкциите, за да позволите на

ComboFix да изтегли и инсталира Microsoft Windows Recovery Console.В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

Изберете Yes, за да продължи сканирането за зловреден софтуер.
Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:ComboFix.txt в следващия Ви коментар в тази тема.
Бележка:

[*]Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа. [*]ComboFix ще нулира всички настройки на

Microsoft Internet Explorer, включително да направи IE браузър по подразбиране. [*]ComboFix ще изключи autorun функцията на ВСИЧКИ CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и Ви защити от бъдещи вируси/заплахи, които поразява чрез autorun. Ако това е проблем за вас - моля, уведомете ме. [*]ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той ще прекрати интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си. [*]В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:BUG.txt в следващия Ви коментар в тази тема.

Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.

27 август 201313 г.

Автор

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

27 август 201313 г.

Изтеглете Malwarebytes' Anti-Malware или от тук (не забравяйте да обновите програмата с нови дефиниции)
* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.
* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.
* Ако има намерени обновявания, тя ще ги изтегли и инсталира.
* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.
* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.
* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата
* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.
* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог.
Копирайте този лог и го публикувайте в следващия си коментар по темата.
Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

Изтеглете програмата: ESET Online Scanner

[*]Стартирайте esetsmartinstaller_enu.exe [*]Сложете отметка на

YES, I accept the Terms of Use и изберете Start:

[*]Скенерът ще започне да изтегля компонентите, които са му необходими:

Уверете се, че е премахната отметката от:

Remove found threats

Уверете се че са маркирани следните позиции:

Scan Archives

Кликнете върху Advanced Settings и маркирайте следните опции:

Scan for potentially unwanted applications [*]Scan for potentially unsafe applications [*]Enable Anti-Stealth Technology

Накрая изберете Start
Скенерът ще започне да изтегля последните дефиниции.

[*]След, като сканирането завърши изберете

Finish. [*]Отидете в: C:Program FilesESET ESET Online Scanner [*]Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си коментар

28 август 201313 г.

Автор

MalwareBytes:

Malwarebytes Anti-Malware (PRO) 1.75.0.1300

www.malwarebytes.org

Версия на базата от данни: v2013.08.27.07

Windows 7 Service Pack 1 x86 NTFS

Internet Explorer 10.0.9200.16660

PC :: PC-PC [администратор]

Защита: включена

27.8.2013 г. 21:21:20 ч.

mbam-log-2013-08-27 (21-21-20).txt

Тип сканиране: Пълно сканиране (C:|D:|E:|)

Изключени опции за сканиране: P2P

Сканирани обекти: 527121

Изминало време: 1 час(а), 9 минута(и), 39 секунда(и)

Открити процеси в паметта: 0