В момента повтарям проверката със SystemLook. Другия компютър и той показва малко странни проблеми, както лаптопът.

Проблеми със скайп и понякога някой програми забиват. Ще приложа DDS файл от другия компютър.

DDS (Ver_2011-09-30.01) - NTFS_x86 Internet Explorer: 7.0.5730.13  BrowserJavaVersion: 10.25.2 Run by Administrator at 16:47:32 on 2013-08-31 #Option MBR scan  is disabled. Microsoft Windows XP Professional  5.1.2600.3.1251.359.1033.18.1023.217 [GMT 2:00] . AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095} . ============== Running Processes ================ . C:WINDOWSsystem32Ati2evxx.exe C:Program FilesMicrosoft Security ClientMsMpEng.exe C:WINDOWSsystem32Ati2evxx.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSExplorer.EXE C:WINDOWSsystem32MacromedFlashFlashPlayerUpdateService.exe C:Program FilesBonjourmDNSResponder.exe C:Program FilesLogMeIn Hamachihamachi-2.exe C:Program FilesJavajre7binjqs.exe C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE C:Program FilesPANDORA.TVPanServicePandoraService.exe C:WINDOWSsystem32PnkBstrA.exe C:WINDOWSSOUNDMAN.EXE C:Program FilesMicrosoft Security Clientmsseces.exe C:Program FilesPANDORA.TVPanServicePanProcess.exe C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe C:Program FilesTortor.exe C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe C:WINDOWSVMSnap3.EXE C:WINDOWSDomino.EXE C:Program FilesCommon FilesJavaJava Updatejusched.exe C:Program FilesLogMeIn Hamachihamachi-2-ui.exe C:WINDOWSsystem32ctfmon.exe C:Program FilesMyTomTom 3MyTomTomSA.exe C:Program FilesPrinterSharepaConsole.exe C:Program FilesMessengermsmsgs.exe C:Program FilesSkypePhoneSkype.exe C:PROGRA~1MagenticbinMgApp.exe C:WINDOWSSystem32alg.exe C:Program FilesDAEMON Tools UltraDiscSoftBusService.exe C:WINDOWSsystem32wuauclt.exe C:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe C:Program FilesMozilla Firefoxfirefox.exe C:WINDOWSsystem32wbemwmiprvse.exe C:WINDOWSSystem32svchost.exe -k netsvcs C:WINDOWSsystem32svchost.exe -k WudfServiceGroup C:WINDOWSsystem32svchost.exe -k NetworkService C:WINDOWSsystem32svchost.exe -k LocalService C:WINDOWSsystem32svchost.exe -k LocalService C:WINDOWSsystem32svchost.exe -k imgsvc . ============== Pseudo HJT Report =============== . uURLSearchHooks: {00000000-6E41-4FD3-8538-502F5495E5FC} - <orphaned> uWindows: Run = c:docume~1admini~1locals~1applic~1kb2485~1KB2485~1.PIF mWinlogon: SFCDisable = dword:-99 BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:program filescommon filesadobeacrobatactivexAcroIEHelperShim.dll BHO: MuagnIPic: {35CBB98E-B5B4-0A53-9188-903E5ACFF3DA} - c:documents and settingsall usersapplication datamuagnipic514ce8e617459.dll BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:program filesjavajre7binssv.dll BHO: DealPly Shopping: {9cf699ca-2174-4ed8-bec1-ba82095edce0} - c:program filesdealplyDealPlyIE.dll BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:program filesjavajre7binjp2ssv.dll uRun: [CTFMON.EXE] c:windowssystem32ctfmon.exe uRun: [Magentic] c:progra~1magenticbinMagentic.exe /c uRun: [MyTomTomSA.exe] "c:program filesmytomtom 3MyTomTomSA.exe" uRun: [PrinterShare] c:program filesprintersharepaConsole.exe -minimized uRun: [MSMSGS] "c:program filesmessengermsmsgs.exe" /background uRun: [skype] "c:program filesskypephoneSkype.exe" /minimized /regrun uRun: [DAEMON Tools Ultra Agent] "c:program filesdaemon tools ultraDTAgent.exe" -autorun mRun: [Resume copy] copyfstq.exe /startup mRun: [NeroFilterCheck] c:windowssystem32NeroCheck.exe mRun: [soundMan] SOUNDMAN.EXE mRun: [startCCC] "c:program filesati technologiesati.acecore-staticCLIStart.exe" MSRun mRun: [MSC] "c:program filesmicrosoft security clientmsseces.exe" -hide -runkey mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe" mRun: [VMSnap3] c:windowsVMSnap3.EXE mRun: [Domino] c:windowsDomino.EXE mRun: [bigDog303] c:windowsVM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) mRun: [sunJavaUpdateSched] "c:program filescommon filesjavajava updatejusched.exe" mRun: [LogMeIn Hamachi Ui] "c:program fileslogmein hamachihamachi-2-ui.exe" --auto-start dRun: [CTFMON.EXE] c:windowssystem32CTFMON.EXE dRunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 uPolicies-Explorer: NoDriveTypeAutoRun = dword:145 mPolicies-Explorer: NoDriveTypeAutoRun = dword:145 IE: E&xport to Microsoft Excel - c:progra~1micros~1office12EXCEL.EXE/3000 IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:program filesmessengermsmsgs.exe TCP: NameServer = 192.168.1.254 TCP: Interfaces{BFBE8458-D773-403F-8A2F-93EE9DE4CC42} : DHCPNameServer = 192.168.1.254 Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll Notify: AtiExtEvent - Ati2evxx.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:windowssystem32wpdshserviceobj.dll mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:program filesgooglechromeapplication29.0.1547.62installerchrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome . ================= FIREFOX =================== . FF - ProfilePath - c:documents and settingsadministratorapplication datamozillafirefoxprofilestigxnl8v.default FF - prefs.js: browser.search.defaulturl - FF - prefs.js: browser.search.selectedEngine - Delta Search FF - plugin: c:program filesadobereader 10.0readerairnppdf32.dll FF - plugin: c:program filesdealplyliveupdate1.3.23.0npGoogleUpdate3.dll FF - plugin: c:program filesgoogleupdate1.3.21.153npGoogleUpdate3.dll FF - plugin: c:program filesjavajre7binplugin2npjp2.dll FF - plugin: c:program filesk-lite codec packrealbrowserpluginsnppl3260.dll FF - plugin: c:program filesk-lite codec packrealbrowserpluginsnprpjplug.dll FF - plugin: c:program filesmicrosoft silverlight5.1.20513.0npctrlui.dll FF - plugin: c:windowsmicrosoft.netframeworkv4.0.20506wpfNPWPF.dll FF - plugin: c:windowssystem32macromedflashNPSWF32_11_8_800_94.dll FF - plugin: c:windowssystem32npDeployJava1.dll FF - plugin: c:windowssystem32npptools.dll . ============= SERVICES / DRIVERS =============== . R0 MpFilter;Microsoft Malware Protection Driver;c:windowssystem32driversMpFilter.sys [2012-4-4 195296] R2 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2012-11-3 163328] R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:program fileslogmein hamachihamachi-2.exe [2013-6-28 1440080] R2 PanService;PandoraService;c:program filespandora.tvpanservicePandoraService.exe [2013-3-30 625304] R2 tor;Tor Win32 Service;c:program filestortor.exe [2013-8-19 3233806] R3 Disc Soft Bus Service;Disc Soft Bus Service;c:program filesdaemon tools ultraDiscSoftBusService.exe [2013-6-25 632352] R3 dtscsibus;DAEMON Tools Virtual SCSI Bus;c:windowssystem32driversdtscsibus.sys [2013-8-13 24704] R3 vmfilter303;vmfilter303;c:windowssystem32driversvmfilter303.sys [2012-8-22 428160] S2 gupdate;Услуга на Google Актуализация (gupdate);c:program filesgoogleupdateGoogleUpdate.exe [2013-8-5 116648] S2 SkypeUpdate;Skype Updater;c:program filesskypeupdaterUpdater.exe [2013-6-21 162408] S3 clr_optimization_v4.0.20506_32;.NET Runtime Optimization Service v4.0.20506_X86;c:windowsmicrosoft.netframeworkv4.0.20506mscorsvw.exe [2009-5-6 104272] S3 gupdatem;Услуга на Google Актуализация (gupdatem);c:program filesgoogleupdateGoogleUpdate.exe [2013-8-5 116648] S3 MozillaMaintenance;Mozilla Maintenance Service;c:program filesmozilla maintenance servicemaintenanceservice.exe [2013-4-15 117656] . =============== Created Last 30 ================ . 2013-08-31 10:02:44  7166848  ----a-w-  c:documents and settingsall usersapplication datamicrosoftmicrosoft antimalwaredefinition updates{dbd6cf79-e72f-419a-af4b-1fa2dbca61a7}mpengine.dll 2013-08-30 11:56:04  7166848  ------w-  c:documents and settingsall usersapplication datamicrosoftmicrosoft antimalwaredefinition updatesbackupmpengine.dll 2013-08-24 18:58:28  --------  d-----w-  c:documents and settingsadministratorlocal settingsapplication dataLogMeIn Hamachi 2013-08-24 18:57:36  --------  d-----w-  c:program filesLogMeIn Hamachi 2013-08-20 11:09:37  --------  d-----w-  c:windowssystem32dfrg 2013-08-19 18:02:50  --------  d-----w-  c:program filesTor 2013-08-17 20:12:47  59288  ----a-w-  c:program filesmozilla firefoxlibEGL.dll 2013-08-17 20:12:47  478104  ----a-w-  c:program filesmozilla firefoxlibGLESv2.dll 2013-08-17 20:12:47  117656  ----a-w-  c:program filesmozilla firefoxmaintenanceservice.exe 2013-08-17 20:12:46  3429784  ----a-w-  c:program filesmozilla firefoxgkmedias.dll 2013-08-17 20:12:46  301976  ----a-w-  c:program filesmozilla firefoxfreebl3.dll 2013-08-17 20:12:46  276376  ----a-w-  c:program filesmozilla firefoxfirefox.exe 2013-08-17 20:12:46  2106216  ----a-w-  c:program filesmozilla firefoxD3DCompiler_43.dll 2013-08-17 20:12:46  116120  ----a-w-  c:program filesmozilla firefoxcrashreporter.exe 2013-08-17 20:12:44  74136  ----a-w-  c:program filesmozilla firefoxbreakpadinjector.dll 2013-08-17 20:12:44  262552  ----a-w-  c:program filesmozilla firefoxbrowsercomponentsbrowsercomps.dll 2013-08-17 20:12:44  19352  ----a-w-  c:program filesmozilla firefoxAccessibleMarshal.dll 2013-08-13 21:14:50  --------  d-----w-  c:program filesDealPlyLive 2013-08-13 21:14:50  --------  d-----w-  c:documents and settingsadministratorlocal settingsapplication dataDealPlyLive 2013-08-13 21:14:49  --------  d-----w-  c:documents and settingsall usersapplication dataDealPlyLive 2013-08-13 21:14:07  --------  d-----w-  c:documents and settingsadministratorapplication dataDealply 2013-08-13 21:09:53  --------  d-----w-  c:program filesDealPly 2013-08-13 21:09:06  --------  d-----w-  c:documents and settingsall usersapplication dataTarma Installer 2013-08-13 14:58:36  24704  ----a-w-  c:windowssystem32driversdtscsibus.sys 2013-08-13 14:58:23  --------  d-----w-  c:documents and settingsadministratorapplication dataDAEMON Tools Ultra 2013-08-13 14:57:53  --------  d-----w-  c:program filesDAEMON Tools Ultra 2013-08-13 14:57:08  --------  d-----w-  c:documents and settingsall usersapplication dataDAEMON Tools Ultra 2013-08-04 22:09:16  144896  ----a-w-  c:windowssystem32javacpl.cpl 2013-08-04 22:09:10  94632  ----a-w-  c:windowssystem32WindowsAccessBridge.dll . ==================== Find3M  ==================== . 2013-08-05 16:26:45  692104  ----a-w-  c:windowssystem32FlashPlayerApp.exe 2013-08-05 16:26:44  71048  ----a-w-  c:windowssystem32FlashPlayerCPLApp.cpl 2013-08-04 22:08:44  867240  ----a-w-  c:windowssystem32npDeployJava1.dll 2013-08-04 22:08:44  789416  ----a-w-  c:windowssystem32deployJava1.dll 2013-08-03 12:18:38  1543680  ----a-w-  c:windowssystem32wmvdecod.dll 2013-07-25 18:08:06  841216  ----a-w-  c:windowssystem32wininet.dll 2013-07-25 18:07:32  1830912  ----a-w-  c:windowssystem32inetcpl.cpl 2013-07-25 18:06:52  78336  ----a-w-  c:windowssystem32ieencode.dll 2013-07-25 18:06:36  17408  ----a-w-  c:windowssystem32corpol.dll 2013-07-10 10:37:53  406016  ----a-w-  c:windowssystem32usp10.dll 2013-07-04 02:59:11  2193536  ----a-w-  c:windowssystem32ntoskrnl.exe 2013-07-04 02:08:30  2070144  ----a-w-  c:windowssystem32ntkrnlpa.exe 2013-06-04 07:23:02  562688  ----a-w-  c:windowssystem32qedit.dll 2013-06-04 01:40:45  1876736  ----a-w-  c:windowssystem32win32k.sys . ============= FINISH: 16:48:39,09 ===============  

. UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-09-30.01) . Microsoft Windows XP Professional Boot Device: DeviceHarddiskVolume1 Install Date: 24.10.2011 г. 15:14:58 System Uptime: 31.8.2013 г. 09:55:34 (7 hours ago) . Motherboard: Gigabyte Technology Co., Ltd. |  | GA-K8NE-RH Processor: AMD Sempron Processor 3300+ | Socket 754 | 2010/200mhz . ==== Disk Partitions ========================= . A: is Removable C: is FIXED (NTFS) - 34 GiB total, 6,365 GiB free. D: is FIXED (NTFS) - 40 GiB total, 2,604 GiB free. F: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP612: 23.8.2013 г. 11:54:28 - Software Distribution Service 3.0 RP613: 23.8.2013 г. 17:36:45 - Software Distribution Service 3.0 RP614: 24.8.2013 г. 17:55:19 - Контролна точка на системата RP615: 24.8.2013 г. 20:54:05 - Removed LogMeIn Hamachi RP616: 24.8.2013 г. 20:57:35 - Installed LogMeIn Hamachi RP617: 25.8.2013 г. 12:07:27 - Software Distribution Service 3.0 RP618: 26.8.2013 г. 12:34:07 - Software Distribution Service 3.0 RP619: 27.8.2013 г. 12:18:46 - Software Distribution Service 3.0 RP620: 27.8.2013 г. 13:08:21 - Software Distribution Service 3.0 RP621: 28.8.2013 г. 12:59:45 - Software Distribution Service 3.0 RP622: 28.8.2013 г. 13:19:03 - Software Distribution Service 3.0 RP623: 29.8.2013 г. 12:00:26 - Software Distribution Service 3.0 RP624: 29.8.2013 г. 12:47:55 - Software Distribution Service 3.0 RP625: 30.8.2013 г. 13:55:58 - Software Distribution Service 3.0 RP626: 31.8.2013 г. 12:01:14 - Software Distribution Service 3.0 . ==== Installed Programs ====================== . µTorrent A4 TECH PC Camera H Adobe Flash Player 11 Plugin Adobe Reader X (10.1.6) ATI - Software Uninstall Utility ATI Catalyst Control Center ATI Display Driver Bonjour Bulgarian Keyboards XP by G. Atanasov Caesar IV Canon MP Navigator 3.0 Canon MP180 Catalyst Control Center - Branding Catalyst Control Center Core Implementation Catalyst Control Center Graphics Full Existing Catalyst Control Center Graphics Full New Catalyst Control Center Graphics Light Catalyst Control Center Graphics Previews Common ccc-core-preinstall ccc-core-static ccc-utility CCC Help English Compatibility Pack for the 2007 Office system DAEMON Tools Ultra Dealply DealPly (remove only) Euro Truck Simulator 1.00 German Truck Simulator 1.00 Google Chrome Google Update Helper Grand Theft Auto Vice City Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Windows XP (KB2570791) Hotfix for Windows XP (KB2633952) Hotfix for Windows XP (KB2756822) Hotfix for Windows XP (KB2779562) Hotfix for Windows XP (KB942288-v3) Hotfix for Windows XP (KB954550-v5) Hotfix for Windows XP (KB961118) Hotfix for Windows XP (KB976002-v5) ItaEst - Taka e! Java 7 Update 25 Java Auto Updater K-Lite Mega Codec Pack 5.8.3 LogMeIn Hamachi Magentic MagniPic Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Beta 1 Microsoft .NET Framework 4 Extended Beta 1 Microsoft Application Error Reporting Microsoft Office 2003 Bulgarian User Interface Pack Microsoft Office 2007 Service Pack 3 (SP3) Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office File Validation Add-In Microsoft Office InfoPath MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Professional Plus 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Security Client Microsoft Security Essentials Microsoft Silverlight Microsoft Software Update for Web Folders  (English) 12 Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 Minecraft1.6.2 Mozilla Firefox 23.0.1 (x86 bg) Mozilla Maintenance Service MSXML 4.0 SP2 (KB973688) MyTomTom 3.2.0.802 Nero 7 Premium NVIDIA Drivers Pandora Service PrinterShare 2.3.06 PunkBuster Services Realtek AC'97 Audio SA Dictionary 2008 Beta 4 Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629) Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2687309) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition Security Update for Microsoft Office Publisher 2007 (KB2597971) 32-Bit Edition Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition Security Update for Microsoft Windows (KB2564958) Security Update for Windows Internet Explorer 7 (KB2544521) Security Update for Windows Internet Explorer 7 (KB2586448) Security Update for Windows Internet Explorer 7 (KB2618444) Security Update for Windows Internet Explorer 7 (KB2647516) Security Update for Windows Internet Explorer 7 (KB2675157) Security Update for Windows Internet Explorer 7 (KB2699988) Security Update for Windows Internet Explorer 7 (KB2722913) Security Update for Windows Internet Explorer 7 (KB2744842) Security Update for Windows Internet Explorer 7 (KB2761465) Security Update for Windows Internet Explorer 7 (KB2792100) Security Update for Windows Internet Explorer 7 (KB2797052) Security Update for Windows Internet Explorer 7 (KB2799329) Security Update for Windows Internet Explorer 7 (KB2809289) Security Update for Windows Internet Explorer 7 (KB2817183) Security Update for Windows Internet Explorer 7 (KB2829530) Security Update for Windows Internet Explorer 7 (KB2838727) Security Update for Windows Internet Explorer 7 (KB2846071) Security Update for Windows Internet Explorer 7 (KB2862772) Security Update for Windows Internet Explorer 7 (KB938127-v2) Security Update for Windows Internet Explorer 7 (KB958215) Security Update for Windows Internet Explorer 7 (KB960714) Security Update for Windows Internet Explorer 7 (KB961260) Security Update for Windows Media Player (KB2378111) Security Update for Windows Media Player (KB2834904-v2) Security Update for Windows Media Player (KB2834904) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player (KB975558) Security Update for Windows Media Player (KB978695) Security Update for Windows XP (KB2079403) Security Update for Windows XP (KB2115168) Security Update for Windows XP (KB2229593) Security Update for Windows XP (KB2296011) Security Update for Windows XP (KB2347290) Security Update for Windows XP (KB2360937) Security Update for Windows XP (KB2387149) Security Update for Windows XP (KB2393802) Security Update for Windows XP (KB2412687) Security Update for Windows XP (KB2419632) Security Update for Windows XP (KB2423089) Security Update for Windows XP (KB2440591) Security Update for Windows XP (KB2443105) Security Update for Windows XP (KB2476490) Security Update for Windows XP (KB2478960) Security Update for Windows XP (KB2478971) Security Update for Windows XP (KB2479943) Security Update for Windows XP (KB2483185) Security Update for Windows XP (KB2485663) Security Update for Windows XP (KB2506212) Security Update for Windows XP (KB2507618) Security Update for Windows XP (KB2507938) Security Update for Windows XP (KB2508272) Security Update for Windows XP (KB2508429) Security Update for Windows XP (KB2509553) Security Update for Windows XP (KB2510581) Security Update for Windows XP (KB2535512) Security Update for Windows XP (KB2536276-v2) Security Update for Windows XP (KB2544893-v2) Security Update for Windows XP (KB2544893) Security Update for Windows XP (KB2562937) Security Update for Windows XP (KB2566454) Security Update for Windows XP (KB2567053) Security Update for Windows XP (KB2567680) Security Update for Windows XP (KB2570222) Security Update for Windows XP (KB2570947) Security Update for Windows XP (KB2584146) Security Update for Windows XP (KB2585542) Security Update for Windows XP (KB2592799) Security Update for Windows XP (KB2598479) Security Update for Windows XP (KB2603381) Security Update for Windows XP (KB2618451) Security Update for Windows XP (KB2619339) Security Update for Windows XP (KB2620712) Security Update for Windows XP (KB2621440) Security Update for Windows XP (KB2624667) Security Update for Windows XP (KB2631813) Security Update for Windows XP (KB2633171) Security Update for Windows XP (KB2639417) Security Update for Windows XP (KB2641653) Security Update for Windows XP (KB2646524) Security Update for Windows XP (KB2647518) Security Update for Windows XP (KB2653956) Security Update for Windows XP (KB2655992) Security Update for Windows XP (KB2659262) Security Update for Windows XP (KB2660465) Security Update for Windows XP (KB2661637) Security Update for Windows XP (KB2676562) Security Update for Windows XP (KB2685939) Security Update for Windows XP (KB2686509) Security Update for Windows XP (KB2691442) Security Update for Windows XP (KB2695962) Security Update for Windows XP (KB2698365) Security Update for Windows XP (KB2705219) Security Update for Windows XP (KB2707511) Security Update for Windows XP (KB2709162) Security Update for Windows XP (KB2712808) Security Update for Windows XP (KB2718523) Security Update for Windows XP (KB2719985) Security Update for Windows XP (KB2723135) Security Update for Windows XP (KB2724197) Security Update for Windows XP (KB2727528) Security Update for Windows XP (KB2731847) Security Update for Windows XP (KB2753842-v2) Security Update for Windows XP (KB2753842) Security Update for Windows XP (KB2757638) Security Update for Windows XP (KB2758857) Security Update for Windows XP (KB2761226) Security Update for Windows XP (KB2770660) Security Update for Windows XP (KB2778344) Security Update for Windows XP (KB2779030) Security Update for Windows XP (KB2780091) Security Update for Windows XP (KB2799494) Security Update for Windows XP (KB2802968) Security Update for Windows XP (KB2807986) Security Update for Windows XP (KB2808735) Security Update for Windows XP (KB2813170) Security Update for Windows XP (KB2820197) Security Update for Windows XP (KB2820917) Security Update for Windows XP (KB2829361) Security Update for Windows XP (KB2834886) Security Update for Windows XP (KB2839229) Security Update for Windows XP (KB2845187) Security Update for Windows XP (KB2849470) Security Update for Windows XP (KB2850851) Security Update for Windows XP (KB2850869) Security Update for Windows XP (KB2859537) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956744) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960715) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB970430) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973869) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975562) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977816) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978338) Security Update for Windows XP (KB978542) Security Update for Windows XP (KB978601) Security Update for Windows XP (KB978706) Security Update for Windows XP (KB979309) Security Update for Windows XP (KB979482) Security Update for Windows XP (KB979687) Security Update for Windows XP (KB980436) Security Update for Windows XP (KB981322) Security Update for Windows XP (KB981997) Security Update for Windows XP (KB982132) Security Update for Windows XP (KB982665) Skins Skype™ 6.6 The KMPlayer (remove only) Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition Update for Microsoft Office Outlook 2007 (KB2768023) 32-Bit Edition Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817642) 32-Bit Edition Update for Windows XP (KB2345886) Update for Windows XP (KB2541763) Update for Windows XP (KB2616676-v2) Update for Windows XP (KB2641690) Update for Windows XP (KB2661254-v2) Update for Windows XP (KB2718704) Update for Windows XP (KB2736233) Update for Windows XP (KB2749655) Update for Windows XP (KB2863058) Update for Windows XP (KB955759) Update for Windows XP (KB968389) Update for Windows XP (KB971029) Update for Windows XP (KB971737) Update for Windows XP (KB973687) Update for Windows XP (KB973815) Visual Studio C++ 10.0 Runtime WebFldrs XP Winamp (remove only) Windows Bulgarian Interface Pack Windows Genuine Advantage Notifications (KB905474) WinRAR archiver . ==== Event Viewer Messages From Past Week ======== . 29.8.2013 г. 21:13:20, error: Dhcp [1002]  - The IP address lease 192.168.1.42 for the Network Card with network address 000E2E95A9DC has been denied by the DHCP server 192.168.1.254 (The DHCP Server sent a DHCPNACK message). 29.8.2013 г. 02:29:42, error: Service Control Manager [7034]  - The Windows Internet Name Service service terminated unexpectedly.  It has done this 1 time(s). 24.8.2013 г. 20:58:41, error: Dhcp [1001]  - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 7A7900000000.  The following error occurred:  The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server. 24.8.2013 г. 20:58:07, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the LogMeIn Hamachi Tunneling Engine service to connect. 24.8.2013 г. 20:58:07, error: Service Control Manager [7000]  - The LogMeIn Hamachi Tunneling Engine service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion. 24.8.2013 г. 12:23:15, error: Dhcp [1002]  - The IP address lease 192.168.1.42 for the Network Card with network address 000E2E95A9DC has been denied by the DHCP server 192.168.1.254 (The DHCP Server sent a DHCPNACK message). 24.8.2013 г. 12:15:16, error: Microsoft Antimalware [2001]  - Microsoft Antimalware се натъкна на грешка при опит за актуализиране на сигнатурите.  Нова версия на сигнатурата:    Предишна версия на сигнатурата: 1.157.254.0  Източник на актуализация: Сървър на Microsoft  Етап на актуализация: Изтегляне  Път към източник: http://www.microsoft.com  Тип на сигнатурата: AntiVirus  Тип на актуализация: Пълна  Потребител: NT AUTHORITYSYSTEM  Текуща версия на ядрото:    Предишна версия на ядрото: 1.1.9800.0  Код на грешка: 0x80240022  Описание на грешката: Програмата не може да провери за актуализация на дефинициите. 24.8.2013 г. 12:15:16, error: Microsoft Antimalware [2001]  - Microsoft Antimalware се натъкна на грешка при опит за актуализиране на сигнатурите.  Нова версия на сигнатурата:    Предишна версия на сигнатурата: 1.157.254.0  Източник на актуализация: Сървър на Microsoft  Етап на актуализация: Изтегляне  Път към източник: http://www.microsoft.com  Тип на сигнатурата: AntiVirus  Тип на актуализация: Пълна  Потребител: NT AUTHORITYSYSTEM  Текуща версия на ядрото:    Предишна версия на ядрото: 1.1.9800.0  Код на грешка: 0x80240022  Описание на грешката: Програмата не може да провери за актуализация на дефинициите. . ==== End Of File ===========================  

Редактирано 4 септември 201313 г. от B-boy[StyLe] (преглед на промените)

СТЪПКИ за втория компютър:

 

 

СТЪПКА 1

 

Моля изтеглете AdwCleaner от Xplode и го запазете на вашия десктоп.

• [*]Кликнете с двукратен клик на мишката върху

AdwCleaner.exe за да стартирате инструмента.(За потребителите на Vista/Windows 7/8 изберете с десен бутон върху иконата на инструмента и натиснете Run as administrator. [*]Натиснете бутона Scan. [*]Проверката ще започне...бъдете търпеливи докато тя завърши. [*]След като проверката приключи, натиснете бутона Report...Ще се отвори текстов лог файл с името (AdwCleaner[R0].txt). [*]Прикачете съдържанието на лог файла в следващия си коментар. [*]Копия с логовете от дейността на инструмена ще бъдат съхранени в папката C:AdwCleaner, която ще бъде създадена след стартирането на инструмента.

 

 

СТЪПКА 2

 

 

 

Изтеглете Malwarebytes' Anti-Malware

• [*]Кликнете два пъти върху

mbam-setup.exe, за да инсталирате програмата. [*]Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish. [*]Ако има намерени обновявания, тя ще ги изтегли и инсталира. [*]Стартирайте програмата и изберете "Perform Quick Scan", след това кликнете на Scan. [*]Сканирането ще отнеме малко време, затова моля да бъдете търпеливи. [*]Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата. [*]Уверете се, че на всички редове има отметки (ако няма на някои обекти ги поставете ръчно), и кликнете на Remove Selected. [*]Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. [*]Прикачете този лог в следващия си коментар в темата.

Забележка: Ако MalwareBytes'Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поискада рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

 

Засега са подобни, но този има и други неща за които се съмнявам:

uWindows: Run = c:docume~1admini~1locals~1applic~1kb2485~1KB2485~1.PIF

 

След малко ще прикача със MBAM.

В момента сканирам със МВАМ и пак ми изписва, че е блокирал достъп до страница 111.111.111.111

AdwCleanerR0.txt

Редактирано 31 август 201313 г. от Alex Kachikov (преглед на промените)

Malwarebytes Anti-Malware (Trial) 1.75.0.1300 www.malwarebytes.org Database version: v2013.08.31.03 Windows XP Service Pack 3 x86 NTFS Internet Explorer 7.0.5730.13 Administrator :: ALEX [administrator] Protection: Enabled 31.8.2013 г. 17:42:23 mbam-log-2013-08-31 (17-42-23).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 209720 Time elapsed: 13 minute(s), 46 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 80 HKCRCLSID{35CBB98E-B5B4-0A53-9188-903E5ACFF3DA} (PUP.Optional.MultiPlug.A) -> Quarantined and deleted successfully. HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{35CBB98E-B5B4-0A53-9188-903E5ACFF3DA} (PUP.Optional.MultiPlug.A) -> Quarantined and deleted successfully. HKCUSOFTWAREMicrosoftWindowsCurrentVersionExtStats{35CBB98E-B5B4-0A53-9188-903E5ACFF3DA} (PUP.Optional.MultiPlug.A) -> Quarantined and deleted successfully. HKCRCLSID{9cf699ca-2174-4ed8-bec1-ba82095edce0} (PUP.DealPly) -> Quarantined and deleted successfully. HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9CF699CA-2174-4ED8-BEC1-BA82095EDCE0} (PUP.DealPly) -> Quarantined and deleted successfully. HKCUSOFTWAREMicrosoftWindowsCurrentVersionExtStats{9CF699CA-2174-4ED8-BEC1-BA82095EDCE0} (PUP.DealPly) -> Quarantined and deleted successfully. HKCRAppID{80FABB17-63AF-4655-9F07-B6509EE37AF2} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{80FABB17-63AF-4655-9F07-B6509EE37AF2} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.OnDemandCOMClassSvc.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.OnDemandCOMClassSvc (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRAppID{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Quarantined and deleted successfully. HKCRAppID{F48FC5B2-094A-44C7-B48C-289738C9582D} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{F48FC5B2-094A-44C7-B48C-289738C9582D} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.Update3COMClassService.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.Update3COMClassService (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{1E0C9B2A-6447-452C-B012-2314A0C29412} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.OnDemandCOMClassMachineFallback.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.OnDemandCOMClassMachineFallback (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{34A8CEB6-89BB-49F1-B5E4-0D0D6C21F3B1} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.CredentialDialogMachine.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.CredentialDialogMachine (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{3A4DBD3A-98CC-41CE-AD21-352D42B6F754} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.CoCreateAsync.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.CoCreateAsync (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{4F8A50F6-69DE-4BE3-A33A-A1079B9AC0DB} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.Update3WebMachineFallback.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.Update3WebMachineFallback (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{501CB57A-D4E2-4855-96AD-EDB0A9083395} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.CoreMachineClass.1 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.CoreMachineClass (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{6FF2C4DD-77A4-4BB5-BA4C-B42DEFBF9137} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.ProcessLauncher.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.ProcessLauncher (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{83ABA270-8390-4CA6-AE48-FC089F55629E} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.OnDemandCOMClassMachine.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.OnDemandCOMClassMachine (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{8B218A5F-1A3D-4347-94EF-A79575EB8094} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{0D89DE71-3D99-4288-84DC-F18F1047A7D8} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLive.OneClickCtrl.9 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKLMSOFTWAREMicrosoftInternet ExplorerLow RightsElevationPolicy{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKLMSOFTWAREMicrosoftWindowsCurrentVersionExtPreApproved{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLive.Update3WebControl.3 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKLMSOFTWAREMicrosoftInternet ExplorerLow RightsElevationPolicy{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKLMSOFTWAREMicrosoftWindowsCurrentVersionExtPreApproved{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{9BDB5E09-4BBA-4422-8C2B-529B281C32B8} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{C536F080-57B7-46D6-8894-C647553F2889} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLive.OneClickProcessLauncherMachine.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLive.OneClickProcessLauncherMachine (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKLMSOFTWAREMicrosoftInternet ExplorerLow RightsElevationPolicy{C536F080-57B7-46D6-8894-C647553F2889} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{CA5D945F-E738-4D0B-A0B5-25AC51C64659} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.CoreClass.1 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.CoreClass (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{F7698761-4ABA-45C2-A5BB-D2163922C725} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.Update3WebSvc.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.Update3WebSvc (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRCLSID{FFCC53E6-2655-47FC-A89B-54E8D7F305D1} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.Update3WebMachine.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCRDealPlyLiveUpdate.Update3WebMachine (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCUSOFTWAREMicrosoftWindowsCurrentVersionExtStats{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Quarantined and deleted successfully. HKCUSOFTWAREMicrosoftWindowsCurrentVersionExtStats{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta.A) -> Quarantined and deleted successfully. HKCUSOFTWAREMicrosoftWindowsCurrentVersionUninstallDealply (PUP.DealPly.A) -> Quarantined and deleted successfully. HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstall{EB03EF39-C655-D560-FA95-79182B837D64} (PUP.Optional.SilentInstall.A) -> Quarantined and deleted successfully. HKLMSOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsSETUP.EXE (PUP.Optional.Tarma.A) -> Quarantined and deleted successfully. HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstallDealPly (PUP.Optional.DealPly) -> Quarantined and deleted successfully. HKCRAppIDDealPlyLive.exe (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCUSOFTWAREDataMngr_Toolbar (PUP.Optional.DataMngr) -> Quarantined and deleted successfully. HKCUSOFTWAREDealPlyLive (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCUSOFTWAREDEALPLY (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKCUSoftwareDataMngr (PUP.Optional.DataMngr) -> Quarantined and deleted successfully. HKCUSoftwareBabSolutionUpdater (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully. HKCUSOFTWAREINSTALLCORE (PUP.Optional.InstallCore.A) -> Quarantined and deleted successfully. HKLMSOFTWAREDealPlyLive (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKLMSOFTWAREDEALPLY (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. [email protected]/DealPlyLive Update;version=3 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. [email protected]/DealPlyLive Update;version=9 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKLMSYSTEMCurrentControlSetServicesdealplylive (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKLMSOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsDEALPLYLIVE.EXE (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. HKLMSYSTEMCurrentControlSetServicesdealplylivem (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. Registry Values Detected: 3 HKCUSOFTWAREDealPly|Partner (PUP.Optional.DealPly.A) -> Data: iron -> Quarantined and deleted successfully. HKCUSoftwareInstallCore|tb (PUP.Optional.InstallCore.A) -> Data: 0M1S1H1K2U -> Quarantined and deleted successfully. HKLMSOFTWAREDealPly|ChromeCrxPath (PUP.Optional.DealPly.A) -> Data: C:Program FilesDealPlyDealPly.crx -> Quarantined and deleted successfully. Registry Data Items Detected: 4 HKCUSOFTWAREMicrosoftInternet ExplorerMain|Start Page (PUP.Optional.StartPage) -> Bad: (http://www1.delta-search.com/?babsrc=HP_ss&mntrId=08E7000E2E95A9DC&affID=119357&tsp=4973) Good: (http://www.google.com) -> Quarantined and repaired successfully. HKLMSOFTWAREMicrosoftSecurity Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully. HKLMSOFTWAREMicrosoftSecurity Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully. HKLMSOFTWAREMicrosoftSecurity Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully. Folders Detected: 25 C:Program FilesDealPly (PUP.Optional.DealPly) -> No action taken. C:Documents and SettingsAdministratorApplication DataBabylon (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorStart MenuProgramsDealPly (PUP.OPtional.Dealply) -> Quarantined and deleted successfully. C:Documents and SettingsAll UsersApplication DataDealPlyLive (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAll UsersApplication DataDealPlyLiveUpdate (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAll UsersApplication DataDealPlyLiveUpdateLog (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorApplication DataDealply (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorApplication DataDealplyUpdateProc (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLive (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveCrashReports (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdateDownload (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdateInstall (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdateOffline (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdateOffline{A4959711-EFA9-47E6-B7F3-BC19C5740F0D} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAll UsersApplication DataTarma Installer (PUP.Optional.Tarma.A) -> Quarantined and deleted successfully. C:Documents and SettingsAll UsersApplication DataTarma Installer{361E80BE-388B-4270-BF54-A10C2B756504} (PUP.Optional.Tarma.A) -> Quarantined and deleted successfully. C:Documents and SettingsAll UsersApplication DataTarma Installer{361E80BE-388B-4270-BF54-A10C2B756504}Cache (PUP.Optional.Tarma.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorApplication DataFile Scout (PUP.Optional.FileScout.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempmt_ffxDelta (PUP.Optional.Delta.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempmt_ffxDeltadelta (PUP.Optional.Delta.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempmt_ffxDeltadelta1.8.10.0 (PUP.Optional.Delta.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsApplication DataDealPlyLive (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsApplication DataDealPlyLiveCrashReports (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. Files Detected: 113 C:Documents and SettingsAll UsersApplication DataMuagnIPic514ce8e617459.dll (PUP.Optional.MultiPlug.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyDealPlyIE.dll (PUP.DealPly) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0psmachine.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0npGoogleUpdate3.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorApplication DataDealplyUpdateProcUpdateTask.exe (PUP.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorApplication DataFile Scoutfilescout.exe (Trojan.PUP.Optional.FileScout.A) -> Quarantined and deleted successfully. C:Documents and SettingsAll UsersApplication DataMuagnIPicuninstall.exe (PUP.Optional.SilentInstall.A) -> Quarantined and deleted successfully. C:Documents and SettingsAll UsersApplication DataTarma Installer{361E80BE-388B-4270-BF54-A10C2B756504}Setup.exe (PUP.Optional.Tarma.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempDeltaTB.exe (PUP.Optional.Delta.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempD5.tmp (Trojan.PUP.Optional.FileScout.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTemp371.tmp (PUP.Browser.Defender.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempKMP_3.5.0.77.exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempKMP_3.6.0.87.exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempsetup_fsu_cid.exe (Trojan.PUP.Optional.FileScout.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTemp259.tmp (PUP.Babylon.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempAF6DDD5C-BAB0-7891-8F90-BE5B351A84D1LatestMyBabylonTB.exe (PUP.Optional.Delta) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempAF6DDD5C-BAB0-7891-8F90-BE5B351A84D1LatestSetup.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempis1315000151DeltaTB.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTemp31099108-BAB0-7891-9585-202C3EAB436DLatestBabMaint.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTemp31099108-BAB0-7891-9585-202C3EAB436DLatestBUSolution.dll (PUP.Optional.BabSolution.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTemp31099108-BAB0-7891-9585-202C3EAB436DLatestccp.exe (PUP.Babylon.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTemp31099108-BAB0-7891-9585-202C3EAB436DLatestMyDeltaTB.exe (PUP.Delta.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTemp31099108-BAB0-7891-9585-202C3EAB436DLatestNTRedirect.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTemp31099108-BAB0-7891-9585-202C3EAB436DLatestSetup.exe (PUP.Babylon.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempupd1BBabMaint.x (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorLocal SettingsTempbusCEBUSolution.dll (PUP.Optional.BabSolution.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyDealPly.crx (PUP.Optional.DealPly) -> Quarantined and deleted successfully. C:Program FilesDealPlyDealPly.xpi (PUP.Optional.DealPly) -> Quarantined and deleted successfully. C:Program FilesDealPlyDealPlyIE64.dll (PUP.Optional.DealPly) -> Quarantined and deleted successfully. C:Program FilesDealPlyDealPlyUpdate.exe (PUP.Optional.DealPly) -> Quarantined and deleted successfully. C:Program FilesDealPlyDealPlyUpdate.log (PUP.Optional.DealPly) -> Quarantined and deleted successfully. C:Program FilesDealPlyDealPlyUpdateRun.exe (PUP.Optional.DealPly) -> Quarantined and deleted successfully. C:Program FilesDealPlyDealPlyUpdateVer.exe (PUP.Optional.DealPly) -> Quarantined and deleted successfully. C:Program FilesDealPlyicon.ico (PUP.Optional.DealPly) -> Quarantined and deleted successfully. C:Program FilesDealPlyuninst.exe (PUP.Optional.DealPly) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorApplication DataBabylonlog_file.txt (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully. C:WINDOWSTasksDealPlyLiveUpdateTaskMachineCore.job (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:WINDOWSTasksDealPlyUpdate.job (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorStart MenuProgramsDealPlyUninstall DealPly.lnk (PUP.OPtional.Dealply) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorStart MenuProgramsDealPlyDealPly Help.url (PUP.OPtional.Dealply) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorStart MenuProgramsDealPlyDealPly.url (PUP.OPtional.Dealply) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdateDealPlyLive.exe (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAll UsersApplication DataDealPlyLiveUpdateLogDealPlyLive.log (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorApplication DataDealplyUpdateProcconfig.dat (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorApplication DataDealplyUpdateProcSTTL.DAT (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorApplication DataDealplyUpdateProcTTL.DAT (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0DealPlyLive.exe (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0DealPlyLiveBroker.exe (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0DealPlyLiveHandler.exe (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0DealPlyLiveHelper.msi (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0DealPlyLiveOnDemand.exe (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_bn.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_ca.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_cs.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_da.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_de.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_el.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_en-GB.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_en.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_es-419.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_es.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_et.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_fa.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_fi.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_fil.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_fr.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_gu.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_hr.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_hu.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_id.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_is.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_it.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_iw.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_ja.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_kn.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_ko.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_lt.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_lv.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_ml.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_mr.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_ms.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_nl.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_no.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdate.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_am.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_ar.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_pt-BR.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_pt-PT.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_ro.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_ru.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_sk.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_sl.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_sr.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_sv.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_sw.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_ta.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_te.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_th.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_tr.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_uk.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_ur.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_vi.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_zh-CN.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_zh-TW.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0psuser.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_bg.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_hi.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Program FilesDealPlyLiveUpdate1.3.23.0goopdateres_pl.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully. C:Documents and SettingsAll UsersApplication DataTarma Installer{361E80BE-388B-4270-BF54-A10C2B756504}Setup.ico (PUP.Optional.Tarma.A) -> Quarantined and deleted successfully. C:Documents and SettingsAll UsersApplication DataTarma Installer{361E80BE-388B-4270-BF54-A10C2B756504}_Setup.dll (PUP.Optional.Tarma.A) -> Quarantined and deleted successfully. C:Documents and SettingsAll UsersApplication DataTarma Installer{361E80BE-388B-4270-BF54-A10C2B756504}_Setupx.dll (PUP.Optional.Tarma.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorApplication DataFile Scoutfilescout.exe (PUP.Optional.FileScout.A) -> Quarantined and deleted successfully. C:Documents and SettingsAdministratorApplication DataFile Scoutuninst.exe (PUP.Optional.FileScout.A) -> Quarantined and deleted successfully. (end)  

Здравейте отново,

 

Стартирайте AdwCleaner.exe отново.

• [*]Натиснете бутона

Scan. [*]AdwCleaner ще започне да проверява компютъра, както преди. [*]След като проверката приключи...този път натиснете бутона Clean тъй като няма неща които да не са за триене от лога. [*]Натиснете OK на диалоговия прозорец, който ще се появи подканвайки ви да затворите всички активни приложения. [*]Натиснете OK отново за да позволите на AdwCleaner да рестартира компютъра и да довърши почистващия процес. [*]След рестарта ще се появи автоматично лог файл с името (AdwCleaner[s0].txt). [*]Прикачете съдържанието му в следващия си коментар [*]Копие на лог файла можете да намерите и в папката C:AdwCleaner.

Направете нова проверка с MBAM (бърза такава, но първо обновете дефинициите и) и се уверете, че след приключването на проверката сте сложили отметки на всички намерени обекти (ако има такива) и след това натиснете Remove selected (Премахни избраните, ако ви е на български) и публикувайте новия лог файл.

 

Казвате, че и на този имате заявки към 111.111.111.111...ами нормално - и на този имате инсталирана Pandora!

# AdwCleaner v3.001 - Report created 31/08/2013 at 23:42:16 # Updated 24/08/2013 by Xplode # Operating System : Microsoft Windows XP Service Pack 3 (32 bits) # Username : Administrator - ALEX # Running from : C:Documents and SettingsAdministratorDesktopAdwCleaner.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:Documents and SettingsAll UsersApplication DataAsk Folder Deleted : C:Documents and SettingsAll UsersApplication DataBabylon Folder Deleted : C:Documents and SettingsAll UsersApplication Dataclsoft ltd Folder Deleted : C:Documents and SettingsAll UsersApplication DataInstallMate Folder Deleted : C:Documents and SettingsAll UsersApplication DataPremium Folder Deleted : C:Documents and SettingsAll UsersApplication DataMuagnIPic Folder Deleted : C:Documents and SettingsAll UsersStart MenuProgramsMuagnIPic Folder Deleted : C:Program FilesAsk.com Folder Deleted : C:Program FilesConduit Folder Deleted : C:Program FilesDealPly Folder Deleted : C:Program FilesMagniPic Folder Deleted : C:Documents and SettingsAdministratorLocal SettingsApplication DataAskToolbar Folder Deleted : C:Documents and SettingsAdministratorLocal SettingsApplication DataConduit Folder Deleted : C:Documents and SettingsAdministratorApplication DataMozillaFirefoxProfilestigxnl8v.defaultExtensions{e53a26f5-7199-4a5b-86f5-d2e86854b979} [!] Folder Deleted : C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionseooncjejnppfjjklapaamhcdmjbilmde [!] Folder Deleted : C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionskcjlagldpmjbnebolibjngjgglhkefia File Deleted : C:END File Deleted : C:Documents and SettingsAdministratorApplication DataMozillaFirefoxProfilestigxnl8v.defaultsearchpluginsBabylon.xml File Deleted : C:Program FilesMozilla FirefoxsearchpluginsBabylon.xml File Deleted : C:Documents and SettingsAdministratorApplication DataMozillaFirefoxProfilestigxnl8v.defaultsearchpluginsBrowserProtect.xml File Deleted : C:WINDOWSTasksDealPlyLiveUpdateTaskMachineUA.job File Deleted : C:WINDOWSTasksScheduled Update for Ask Toolbar.job ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKLMSOFTWAREClassesProd.cap Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstallSP_d8283021 Key Deleted : HKCUSoftware5be8bdee53eeb12 Key Deleted : HKLMSOFTWARE5be8bdee53eeb12 Key Deleted : HKLMSOFTWAREClassesCLSID{3C471948-F874-49F5-B338-4F214A2EE0B1} Key Deleted : HKLMSOFTWAREClassesInterface{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F} Key Deleted : HKLMSOFTWAREClassesTypeLib{E2343056-CC08-46AC-B898-BFC7ACF4E755} Key Deleted : HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Key Deleted : HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E} Key Deleted : HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKLMSOFTWAREMicrosoftInternet ExplorerSearchScopes{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E} Value Deleted : HKCUSoftwareMicrosoftInternet ExplorerURLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}] Key Deleted : HKCUSoftwareAPN PIP Key Deleted : HKCUSoftwareAPN Key Deleted : HKCUSoftwareAsk.com Key Deleted : HKCUSoftwareAskToolbar Key Deleted : HKCUSoftwareBabSolution Key Deleted : HKCUSoftwareBabylonToolbar Key Deleted : HKCUSoftwareConduitSearchScopes Key Deleted : HKCUSoftwarefilescout Key Deleted : HKCUSoftwareImInstaller Key Deleted : HKCUSoftwarePrivitizeVPNInstallDates Key Deleted : HKCUSoftwareSmartBar Key Deleted : HKCUSoftwareSoftonic Key Deleted : HKCUSoftwareStartSearch Key Deleted : HKCUSoftwareAppDataLowSProtector Key Deleted : HKCUSoftwareAppDataLowSoftwareConduit Key Deleted : HKLMSoftwareBabylon Key Deleted : HKLMSoftwareConduit Key Deleted : HKLMSoftwareDataMngr Key Deleted : HKLMSoftwareImInstaller Key Deleted : HKLMSoftwarePIP Key Deleted : HKLMSoftwareSP Global Key Deleted : HKLMSoftwareSProtector Key Deleted : HKCUSoftwareMicrosoftWindowsCurrentVersionApp ManagementARPCacheDealPly Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionApp ManagementARPCache{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693} Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionApp ManagementARPCacheDealPly Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionApp ManagementARPCache{EB03EF39-C655-D560-FA95-79182B837D64} ***** [ Browsers ] ***** - Internet Explorer v7.0.6000.21348 Setting Restored : HKLMSOFTWAREMicrosoftInternet ExplorerAboutURls [bProtectTabs] - Mozilla Firefox v23.0.1 (bg) [ File : C:Documents and SettingsAdministratorApplication DataMozillaFirefoxProfilestigxnl8v.defaultprefs.js ] Line Deleted : user_pref("aol_toolbar.default.homepage.check", false); Line Deleted : user_pref("aol_toolbar.default.search.check", false); Line Deleted : user_pref("browser.search.defaultenginename", "Delta Search"); Line Deleted : user_pref("browser.search.selectedEngine", "Delta Search"); Line Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0); Line Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0); Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", ""); Line Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", ""); Line Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ""); Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", ""); Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", ""); Line Deleted : user_pref("sweetim.toolbar.searchguard.enable", ""); - Google Chrome v29.0.1547.62 [ File : C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeUser DataDefaultpreferences ] Deleted : homepage Deleted : urls_to_restore_on_startup ************************* AdwCleaner[R0].txt - [13121 octets] - [31/08/2013 17:20:11] AdwCleaner[R1].txt - [6352 octets] - [31/08/2013 23:37:06] AdwCleaner[s0].txt - [6367 octets] - [31/08/2013 23:42:16] ########## EOF - C:AdwCleanerAdwCleaner[s0].txt - [6427 octets] ##########  

Сега ще направя проверката със МВАМ, но незнам как тази програма Пандора ТВ е и на този компютър, никога не съм я използвал и не знам за какво се използва.

PandoraTV е програма за гледане на онлайн телевизия и е доста известна. Ако не използвате сам компютъра, може някой ваш гост да я е инсталирал или е дошла чрез някое приложение. Затова винаги избирайте CUSTOM инсталации на дадени програми и гледайте какви отметки слагате.

 

 

Поздрави!

Malwarebytes Anti-Malware (Trial) 1.75.0.1300 www.malwarebytes.org Database version: v2013.08.31.05 Windows XP Service Pack 3 x86 NTFS Internet Explorer 7.0.5730.13 Administrator :: ALEX [administrator] Protection: Enabled 31.8.2013 г. 23:55:51 mbam-log-2013-08-31 (23-55-51).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 209213 Time elapsed: 17 minute(s), 31 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end)  

Дотук добре:


 
СТЪПКА 1

 
 
Моля изтеглете Junkware Removal Tool на вашия десктоп.

• [*]Спрете временно работата на защитните програми. [*]Стартирайте инструмента

JRT.exe [*]Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата. [*]Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши. [*]Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt). [*]Моля копирайте съдържанието на лог файла в следващия си пост.

 

 

 

СТЪПКА 2

 

 

 

• [*]Изтеглете

OTL.exe и го запазете на десктопа

• [*]Стартирайте файла с двукратен клик на мишката (ако е необходимо, потвърдете през UAC). [*]Направете следните настройки: [*]Сложете отметка пред

Scan All Users [*]Под менюто File Age изберете 90 days [*]Под менюто Standard Registry променете на ALL [*]Сложете отметки пред LOP и Purity Check [*]Под с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%SYSTEMDRIVE%*.*
%USERPROFILE%*.*
%USERPROFILE%temp*.exe
%USERPROFILE%AppDataLocal*.*
%USERPROFILE%AppDataLocal*.
%USERPROFILE%AppDataLocaltemp*.exe
%USERPROFILE%AppDataRoaming*.*
%USERPROFILE%AppDataRoaming*.
%USERPROFILE%AppDataRoamingMicrosoftWindowsTemplates*.*
%USERPROFILE%AppDataLocalMicrosoft*.*
%USERPROFILE%AppDataRoamingMicrosoft*.*
%windir%AppPatch*.*
%Public%DocumentsFonts*.exe
%Public%DocumentsConfig*.exe
%Public%Documents*.*
%ProgramData%*.*
%ProgramData%*.
%CommonProgramFiles%*.*
%CommonProgramFiles%ComObjects*.exe
%commonprogramfiles(x86)%*.*
%ProgramFiles%*.*
%ProgramFiles%*.
%ProgramFiles(x86)%*.*
%ProgramFiles(x86)%*.
%programdata%MicrosoftWindowsDRM*.tmp
%programdata%MicrosoftDRM*.tmp
%systemroot%system32configsystemprofileAppDataLocal*.*
%systemroot%system32configsystemprofileAppDataRoaming*.*
%windir%SysWOW64configsystemprofileAppDataLocal*.*
%windir%SysWOW64configsystemprofileAppDataRoaming*.*
%windir%ServiceProfilesLocalServiceAppDataLocalTemp*.tlb
%windir%ServiceProfilesNetworkServiceAppDataLocalTemp*.tlb
%windir%temp*.exe
%windir%*.
%windir%ShellNew*.*
%windir%installer*.
%windir%system32*.
%windir%sysnative*.
%Temp%smtmp1*.*
%Temp%smtmp2*.*
%Temp%smtmp3*.*
%Temp%smtmp4*.*
%systemroot%system32*.dll /lockedfiles
%systemroot%syswow64*.dll /lockedfiles
%systemroot%Tasks*.job /lockedfiles
%systemroot%system32drivers*.sys /90
%systemroot%system32drivers*.sys /lockedfiles
%systemroot%syswow64drivers*.sys /90
%systemroot%syswow64drivers*.sys /lockedfiles
%systemroot%system32Spoolprtprocsw32x86*.dll
%SYSTEMDRIVE%*. /rp /s
%systemroot%assemblytmp*.* /S /MD5
%systemroot%assemblytemp*.* /S /MD5
%systemroot%assemblyGAC*.ini
%systemroot%assemblyGAC_32*.ini
%systemroot%assemblyGAC_64*.ini
%SystemRoot%assemblyGAC_MSIL*.ini
wsSystemRoot|l,n,u,@;True;False;True;$,{ /fn
%systemdrive%$Recycle.Bin|@;true;true;true /fp
c:|Magentic;true;true;true; /FP
c:|MuagnIPic;true;true;true; /FP
c:|MagniPic;true;true;true; /FP
c:|DealPly;true;true;true; /FP
c:|Tarma;true;true;true; /FP
c:|Pandora;true;true;true; /FP
HKEY_CLASSES_ROOTCLSID{7C857801-7381-11CF-884D-00AA004B2E24} /s
HKEY_CLASSES_ROOTCLSID{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s
HKEY_CURRENT_USERSoftwareClassesCLSID{42aedc87-2188-41fd-b9a3-0c966feabec1} /s
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{42aedc87-2188-41fd-b9a3-0c966feabec1} /s
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{a2a9545d-a0c2-42b4-9708-a0b2badd77c8} /s
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{7C857801-7381-11CF-884D-00AA004B2E24} /s
HKEY_CLASSES_ROOTclsid{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /s
HKEY_CLASSES_ROOTclsid{fbeb8a05-beee-4442-804e-409d6c4515e9} /s
HKEY_CURRENT_USERSoftwareClassesclsid{fbeb8a05-beee-4442-804e-409d6c4515e9} /s
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /s
HKEY_CURRENT_USERSoftwareClassesclsid{12d0253a-7c96-815c-11e0-3034bbd97cc0}] /s
HKEY_CLASSES_ROOTCLSID{312BFDCE-A901-4203-B4F2-ADCB957D1887} /s
HKEY_CLASSES_ROOTDirectoryShellexCopyHookHandlersMSCopy /s
HKEY_CURRENT_USERSoftwareMSOLoad /s
HKEY_CURRENT_USERSoftwareMicrosoftDirect3D /s
HKEY_CURRENT_USERSoftwareMicrosoftDirect3DMostRecentApplication /s
type C:WINDOWSsystem.ini >> test.txt /c
bcdedit /enum all /v >C:boot.txt /c
>C:commands.txt echo list vol /raw /hide /c
/wait
>C:DiskReport.txt diskpart /s C:commands.txt /raw /hide /c
/wait
type c:diskreport.txt /c
/wait
erase c:commands.txt /hide /c
/wait
erase c:diskreport.txt /hide /c
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
consrv.dll
services.exe
explorer.exe
lsass.exe
svchost.exe
wininit.exe
winlogon.exe
userinit.exe
igdkmd64.sys
imapi.sys
fastfat.sys
atapi.sys
iaStor.sys
serial.sys
volsnap.sys
disk.sys
redbook.sys
i8042prt.sys
afd.sys
netbt.sys
csc.sys
tcpip.sys
kbdclass.sys
kbdhid.sys
mouclass.sys
mouhid.sys
spldr.sys
dfsc.sys
hlp.dat
str.sys
crexv.ocx
/md5stop

• [*]Натиснете маркираният в синьо бутон:

Run Scan. [*]Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt. Прикачете тези два файла в следващия си коментар (погледнете опцията Прикачени файлове, когато публикувате мнение).

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.5.6 (08.30.2013:1) OS: Microsoft Windows XP x86 Ran by Administrator on 01.09.2013 Ј. at 13:16:19,20 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMainStart Page Successfully repaired: [Registry Value] HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}DisplayName Successfully repaired: [Registry Value] HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}URL Successfully deleted [Registry Value] HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerAboutURLsbProtectTabs ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOTInterface{2CE4D4CF-B278-4126-AD1E-B622DA2E8339} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINESoftwareClassesToolbar.CT2481032 Successfully deleted: [Registry Key] HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchScopes{A5796AF5-E153-429D-A80A-0635C891EA0B} Successfully deleted: [Registry Key] "hkey_current_usersoftwaremicrosoftinternet explorerlow rightselevationpolicy{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}" ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:WINDOWSinstaller{86d4b82a-abed-442a-be86-96357b70f4fe}" ~~~ Chrome Successfully deleted: [Folder] C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsejnmnhkgiphcaeefbaooconkceehicfi ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 01.09.2013 Ј. at 13:43:09,56 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  

Съжалявам за забавянето.

OTL.Txt

Extras.Txt

Здравейте,
 

Съветвам ви да деинсталирате следната програма:
Magentic, ако не я използвате, защото Incredimail са известни, че поставят adware в програмите си.
 

Деинсталирайте Windows Messenger (да не се бърка с Live Messenger, която вече е слята в Skype) и NetMeeting ако не ги използвате по следния начин:

Също така отворете Control Panel => Add or Remove Programs => Add/remove Windows components => махнете отметката пред Windows Messenger и MSN Explorer => Натиснете Next и следвайте инструкциите. След това затворете прозорците и изтеглете Shoot the Messenger. Стартирайте инструмента и натиснете Disable Messenger. Това ще предотврати спама, който се изпраща през този вграден в Windows инструмент.
 

Също така отворете Start => Run => копирайте командата: RunDll32 advpack.dll,LaunchINFSection C:WINDOWSinfmsnetmtg.inf,NetMtg.Remove и натиснете Enter. Това трябва да премахне и досадния Netmeeting.

 

 

 

Преди да почистим още малко остатъци нека първо да направим бекъп на регистрите:

• [*]Изтеглете и инсталирайте

Tweaking.com-Registry Backup [*]Отворете Tweaking.com-Registry Backup и натиснете Backup Now. [*]Затворете приложението.

 

 

• [*]Стартирайте файла с двукратен клик на мишката. [*]Под с

Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

:OTL
FF - prefs.js..browser.search.selectedEngine,S: S", ""
O3 - HKLM..Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - No CLSID value found.
F3 - HKUS-1-5-21-1177238915-1123561945-1606980848-500 WinNT: Run - (C:DOCUME~1ADMINI~1LOCALS~1APPLIC~1KB2485~1KB2485~1.PIF) -  File not found
[2013.09.01 13:14:00 | 000,000,418 | ---- | M] () -- C:WINDOWStasksAt1.job
:files
C:WINDOWSsystem32dfrgbtc-miner.exe
dir /s /a "C:WINDOWSSystem32dfrg" /c
:reg
[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall{683488C9-0B43-4AA4-A84F-4361B3D7AA3F}]
[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallMagniPic]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList]
"C:Program FilesMagenticbinMgImp.exe"=-
"C:Program FilesMagenticbinMagentic.exe"=-
"C:Program FilesMagenticbinMgApp.exe"=-
"C:Program FilesNetMeetingconf.exe"=-
"C:WINDOWSsystem32dfrgbtc-miner.exe"=-
"C:Program FilesPANDORA.TVPanServicePanProcess.exe"=-
"C:Program FilesPANDORA.TVPanServicePandoraService.exe"=-
"C:Documents and SettingsAdministratorLocal SettingsApps2.0Q0VTR1G1.B2TE2D9NC7B.OWGlaun...app_59711684aa47878d_0001.001e_0f529f5f0ebfb750Launcher.exe"=-
:commands
[emptytemp]

[*]След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix [*]Windows ще се рестартира и ще се създаде лог файл - OTL fix log. Публикувайте съдържанието му с Copy/Paste в следващия.

Деинсталирайте Windows Messenger (да не се бърка с Live Messenger, която вече е слята в Skype) и NetMeeting ако не ги използвате по следния начин:

Също така отворете Control Panel => Add or Remove Programs => Add/remove Windows components => махнете отметката пред Windows Messenger и MSN Explorer => Натиснете Next и следвайте инструкциите. След това затворете прозорците и изтеглете Shoot the Messenger. Стартирайте инструмента и натиснете Disable Messenger. Това ще предотврати спама, който се изпраща през този вграден в Windows инструмент.

 

-> Опитах се да ги изключа, но ми иска инсталационен диск на Windows XP. Когато включих програмата Shoot the Messenger ми изписа, че е изключен Windows Messenger. След малко ще предоставя лог файла.

Благодаря Ви предварително!

Странно, на мен никога не ми е искал инсталационен диск при премахнване на компоненти през Add/Remove Windows Components.

Сигурни ли сте, че диска не го иска чак след копирането на командата в Run менюто при премахването на Netmeeting-a?

Както и да е - това не е толкова важно - щом услугата на Messenger-a е спряна, другото не е важно...и без това няма да спечелим много място от премахването на тези компоненти. Иначе има начин това да стане и без диск - програмата се казва XtremeEraser, но не препоръчвам да се ползва от незапознати.

 

 

Лог файла още ли не се е появил? Иначе аз лягам, ще продължим утре следобяд (че вече е работна седмица)...

 

Поздрави!

-> Система блокира тотално, рестартирах и не съм пускал пак програмата. Ще изчакам до довечера, няма проблем.

Приятен ден!

• Стартирайте файла с двукратен клик на мишката.
• Под с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):
  

  Цитат

  :OTL
  FF - prefs.js..browser.search.selectedEngine,S: S", ""
  O3 - HKLM..Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - No CLSID value found.
  F3 - HKUS-1-5-21-1177238915-1123561945-1606980848-500 WinNT: Run - (C:DOCUME~1ADMINI~1LOCALS~1APPLIC~1KB2485~1KB2485~1.PIF) -  File not found
  [2013.09.01 13:14:00 | 000,000,418 | ---- | M] () -- C:WINDOWStasksAt1.job
  :files
  C:WINDOWSsystem32dfrgbtc-miner.exe
  dir /s /a "C:WINDOWSSystem32dfrg" /c
  :reg
  [-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall{683488C9-0B43-4AA4-A84F-4361B3D7AA3F}]
  [-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallMagniPic]
  [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList]
  "C:Program FilesMagenticbinMgImp.exe"=-
  "C:Program FilesMagenticbinMagentic.exe"=-
  "C:Program FilesMagenticbinMgApp.exe"=-
  "C:Program FilesNetMeetingconf.exe"=-
  "C:WINDOWSsystem32dfrgbtc-miner.exe"=-
  "C:Program FilesPANDORA.TVPanServicePanProcess.exe"=-
  "C:Program FilesPANDORA.TVPanServicePandoraService.exe"=-
  "C:Documents and SettingsAdministratorLocal SettingsApps2.0Q0VTR1G1.B2TE2D9NC7B.OWGlaun...app_59711684aa47878d_0001.001e_0f529f5f0ebfb750Launcher.exe"=-
  :commands
  [emptytemp]

• След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix
• Windows ще се рестартира и ще се създаде лог файл - OTL fix log. Публикувайте съдържанието му с Copy/Paste в следващия.

Пробвайте скрипта от Safe Mode и публикувайте резултатите.

All processes killed
========== OTL ==========
Prefs.js: S", "" removed from browser.search.selectedEngine,S
Registry value HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerToolbar{E0E899AB-F487-11D5-8D29-0050BA6940E3} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{E0E899AB-F487-11D5-8D29-0050BA6940E3} not found.
Registry value HKEY_USERSS-1-5-21-1177238915-1123561945-1606980848-500SOFTWAREMicrosoftWindows NTCurrentVersionWindowsRun:C:DOCUME~1ADMINI~1LOCALS~1APPLIC~1KB2485~1KB2485~1.PIF deleted successfully.
C:WINDOWStasksAt1.job moved successfully.
========== FILES ==========
C:WINDOWSsystem32dfrgbtc-miner.exe moved successfully.
< dir /s /a "C:WINDOWSSystem32dfrg" /c >
 Volume in drive C is System
 Volume Serial Number is 08E7-A27C
 Directory of C:WINDOWSSystem32dfrg
02.09.2013 Ј.  15:45   <DIR>   .
02.09.2013 Ј.  15:45   <DIR>   ..
14.08.2013 Ј.  16:00   49я392 bitcoinminercuda_10.cubin
14.08.2013 Ј.  16:00   49я392 bitcoinminercuda_11.cubin
05.07.2013 Ј.  17:22   43я272 bitcoinminercuda_20.cubin
05.07.2013 Ј.  17:22   50я284 bitcoinminercuda_30.cubin
05.07.2013 Ј.  17:22   10я388 bitcoinmineropencl.cl
14.08.2013 Ј.  17:39 393я216 task_registrar.exe
6 File(s)   595я944 bytes
Total Files Listed:
6 File(s)   595я944 bytes
2 Dir(s) 6я893я588я480 bytes free
C:Documents and SettingsAdministratorDesktopcmd.bat deleted successfully.
C:Documents and SettingsAdministratorDesktopcmd.txt deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall{683488C9-0B43-4AA4-A84F-4361B3D7AA3F} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{683488C9-0B43-4AA4-A84F-4361B3D7AA3F} not found.
Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallMagniPic deleted successfully.
Registry value HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:Program FilesMagenticbinMgImp.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:Program FilesMagenticbinMagentic.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:Program FilesMagenticbinMgApp.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:Program FilesNetMeetingconf.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:WINDOWSsystem32dfrgbtc-miner.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:Program FilesPANDORA.TVPanServicePanProcess.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:Program FilesPANDORA.TVPanServicePandoraService.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:Documents and SettingsAdministratorLocal SettingsApps2.0Q0VTR1G1.B2TE2D9NC7B.OWGlaun...app_59711684aa47878d_0001.001e_0f529f5f0ebfb750Launcher.exe deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 1710693828 bytes
->Temporary Internet Files folder emptied: 24104457 bytes
->FireFox cache emptied: 113189891 bytes
->Google Chrome cache emptied: 40326201 bytes
->Flash cache emptied: 35052 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: NetworkService
->Temp folder emptied: 3020836 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2402044 bytes
%systemroot%System32 .tmp files removed: 2577 bytes
%systemroot%System32dllcache .tmp files removed: 0 bytes
%systemroot%System32drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 258462867 bytes
%systemroot%system32configsystemprofileLocal SettingsTemp folder emptied: 394393537 bytes
%systemroot%system32configsystemprofileLocal SettingsTemporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 2 429,00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 09022013_154548

FilesFolders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

 

Не съм използвал този инструмент XtremeEraser, но Windows Messenger си стои още долу в лентата.

МБАМ още е в пробен период с включено сканиране в реално време, да я инсталирам ли наново както на лаптопа без първата отметка.

Благодаря Ви предварително!

Редактирано 2 септември 201313 г. от Alex Kachikov (преглед на промените)

Здравейте,

 

1. Пак ще попитам...сигурни ли сте, че ви иска диск при опит за премахването на Windows Messenger през Add/Remove Windows Components? Според мен нещо се бъркате и пробвайте отново. Диск може да ви иска, чак след като въведете командата в RUN менюто за премахване на NetMeeting-a.

 

Можете да пробвате и по-следните начини:

http://forums.softvisia.com/index.php/topic/16125-проблем-с-регистри/?p=147527

 

2. Има още малко за разчистване, защото мернах и BitcoinMiner троянец (аз му премахнах изпълнимия файл още в предишния си скрипт, но все пак да разкараме и папката му). Със скрипта ще премахна и стартирането на Windows Messenger, без да използвам агресивен метод да го изкореня напълно (все пак е част от Windows).

 

• [*]Стартирайте файла

с двукратен клик на мишката. [*]Под с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

:OTL
O4 - HKUS-1-5-21-1177238915-1123561945-1606980848-500..Run: [MSMSGS]
:files
C:WINDOWSsystem32dfrg
:commands
[emptytemp]

[*]След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix [*]Windows ще се рестартира и ще се създаде лог файл - OTL fix log. Публикувайте съдържанието му с Copy/Paste в следващия.

 

3. Да, деинсталирайте пак MBAM и я инсталирайте без първата отметка (ще се наложи пак да почистите с mbam-clean.exe преди това).

 

След това пишете как е положението.

Успях успешно да премахна Windows Messenger. За сега всичко е наред с компютъра. Сега ще направя преинсталирането на МВАМ.

 

All processes killed ========== OTL ========== Registry value HKEY_USERSS-1-5-21-1177238915-1123561945-1606980848-500SoftwareMicrosoftWindowsCurrentVersionRunMSMSGS deleted successfully. File  not found. ========== FILES ========== C:WINDOWSsystem32dfrg folder moved successfully. ========== COMMANDS ==========   [EMPTYTEMP]   User: Administrator ->Temp folder emptied: 47711 bytes ->Temporary Internet Files folder emptied: 2919875 bytes ->FireFox cache emptied: 91674652 bytes ->Google Chrome cache emptied: 1742492 bytes ->Flash cache emptied: 725 bytes   User: All Users   User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes   User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes   User: NetworkService ->Temp folder emptied: 17348 bytes ->Temporary Internet Files folder emptied: 33170 bytes   %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%System32 .tmp files removed: 0 bytes %systemroot%System32dllcache .tmp files removed: 0 bytes %systemroot%System32drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 49957 bytes %systemroot%system32configsystemprofileLocal SettingsTemp folder emptied: 0 bytes %systemroot%system32configsystemprofileLocal SettingsTemporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 0 bytes   Total Files Cleaned = 92,00 mb     OTL by OldTimer - Version 3.2.69.0 log created on 09032013_232415 FilesFolders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...  

Здравейте,

 

Моля архивирайте папката C:_OTLMovedFiles и я качете на този адрес => http://file.bg/

Публикувайте линк за download в следващия си коментар.

 

Остава само да почистим:

 

Изтеглете OTC.exe и го стартирайте. Натиснете бутона CleanUp!.
Рестартирайте компютъра, ако ви попита!

Изтеглете Delfix.exe и го стартирайте. Сложете отметка пред Remove disinfection tools => натиснете бутона Run

Инструмента ще се самоизтрие след като приключи своята задача!

 

Изтрийте нещата, които не са се изтрили при гореспоменатите процедури.

 

Ако нямате повече въпроси и проблеми - маркирам случая като РЕШЕН.

 

Поздрави и безопасно сърфиране!

http://file.bg/c255045PijwD

 

Има 2 папки освен с тези документи, но файл.бг не иска да ги качи. Всичко е наред по компютъра, оставам да следя темата ако има нещо за довършване.

Благодаря Ви за помоща!

 

Редактирано 4 септември 201313 г. от Alex Kachikov (преглед на промените)

Ако папката е прекалено голяма я ярхивирайте и я качете тук => http://www.filedropper.com/

Но, ако вече сте стартирали OTC.exe и Delfix.exe папката ще е вече изтрита, но здраве да е.

Ами не мисля че има повече за правене щом нямате повече проблеми.

Просто винаги инсталирайте ъпдейтите за използвания софтуер и внимавайте какви отметки слагате по време на инсталацията.

Поздрави и хубава вечер!

Всичко е наред с компютъра!

Благодаря Ви много!