Добър ден,

е пак съм тук, но този път може би, с по-лош проблем. След инсталацията на една игра, нещо се случи, и се натовари много, компютъра. Рестартирах го и след 5 минути аваст откри Rootkit, във Windows/system32 дяла, и аз му дадох Delete Now (беше recommended), и ми предложи boot-time scan, но аз го отказах. След като го премахна, компютъра сякаш пак се почувства по-добре (не се товареше толкова), но мисля, че все още има някакъв проблем и искам да съм на 100% уверен, че той ще е премахнат. Rootkit-a започваше нещо с m, но го забравих нататък.. И го няма в клетката на аваст.

 

DDS

 

DDS (Ver_2011-09-30.01) - NTFS_x86 

Internet Explorer: 9.10.9200.16686  BrowserJavaVersion: 10.25.2

Run by PC at 12:55:11 on 2013-09-22

Microsoft Windows 7 Ultimate   6.1.7601.1.1251.359.1033.18.3070.1727 [GMT 3:00]

.

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ================

.

C:Windowssystem32wininit.exe

C:Windowssystem32lsm.exe

C:Windowssystem32nvvsvc.exe

C:Program FilesNVIDIA Corporation3D VisionnvSCPAPISvr.exe

C:WindowsInstallerMSIB418.tmp

C:Program FilesNVIDIA CorporationDisplaynvxdsync.exe

C:Windowssystem32nvvsvc.exe

D:SandboxieSbieSvc.exe

E:avast!AvastSvc.exe

C:Windowssystem32Dwm.exe

C:WindowsExplorer.EXE

C:WindowsSystem32spoolsv.exe

C:Windowssystem32taskhost.exe

E:hamhamachi-2.exe

E:Malwarebytes' Anti-Malwarembamscheduler.exe

E:Malwarebytes' Anti-Malwarembamservice.exe

C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE

C:Program FilesMicrosoft SQL ServerMSSQL10.SQLEXPRESSMSSQLBinnsqlservr.exe

E:Malwarebytes' Anti-Malwarembamgui.exe

C:Program FilesNVIDIA CorporationNVIDIA Update Coredaemonu.exe

C:Program FilesMicrosoft SQL Server90Sharedsqlwriter.exe

C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE

C:Program FilesNVIDIA CorporationDisplaynvtray.exe

C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSvcM.exe

C:WindowsSystem32alg.exe

C:Program FilesRealtekAudioHDARtHDVCpl.exe

C:Program FilesCommon FilesJavaJava Updatejusched.exe

E:avast!AvastUI.exe

C:Program FilesNVIDIA CorporationNVIDIA Update CoreNvTmru.exe

C:Program FilesRocketDockRocketDock.exe

C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe

C:Program FilesGoogleUpdateGoogleUpdate.exe

C:Program FilesGoogleUpdate1.3.21.153GoogleCrashHandler.exe

C:Program FilesSkypePhoneSkype.exe

C:Windowsexplorer.exe

C:Windowssystem32wbemwmiprvse.exe

C:Windowssystem32conhost.exe

C:Windowssystem32svchost.exe -k DcomLaunch

C:Windowssystem32svchost.exe -k RPCSS

C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted

C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted

C:Windowssystem32svchost.exe -k LocalService

C:Windowssystem32svchost.exe -k netsvcs

C:Windowssystem32svchost.exe -k GPSvcGroup

C:Windowssystem32svchost.exe -k NetworkService

C:Windowssystem32svchost.exe -k LocalServiceNoNetwork

C:Windowssystem32svchost.exe -k imgsvc

C:WindowsSystem32svchost.exe -k secsvcs

C:Windowssystem32svchost.exe -k NetworkServiceNetworkRestricted

C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation

.

============== Pseudo HJT Report ===============

.

 

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - e:javabinssv.dll

BHO: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - <orphaned>

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:program filescommon filesmicrosoft sharedwindows liveWindowsLiveLogin.dll

BHO: {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - <orphaned>

BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogle toolbarGoogleToolbar_32.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - e:javabinjp2ssv.dll

TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:program filesgooglegoogle toolbarGoogleToolbar_32.dll

TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogle toolbarGoogleToolbar_32.dll

uRun: [RocketDock] "c:program filesrocketdockRocketDock.exe"

uRun: [skype] "c:program filesskypephoneSkype.exe" /minimized /regrun

uRun: [swg] "c:program filesgooglegoogletoolbarnotifierGoogleToolbarNotifier.exe"

uRun: [DAEMON Tools Lite] "e:daemon tools liteDTLite.exe" -autorun

mRun: [RTHDVCPL] c:program filesrealtekaudiohdaRtHDVCpl.exe -s

mRun: [sunJavaUpdateSched] "c:program filescommon filesjavajava updatejusched.exe"

mRun: [LogMeIn Hamachi Ui] "e:hamhamachi-2-ui.exe" --auto-start

mRun: [avast] "e:avast!avastUI.exe" /nogui

mRun: [Nvtmru] "c:program filesnvidia corporationnvidia update corenvtmru.exe"

uPolicies-Explorer: NoDriveTypeAutoRun = dword:255

uPolicies-Explorer: DontSetAutoplayCheckbox = dword:1

uPolicies-Explorer: NoAutorun = dword:2

mPolicies-Explorer: NoDriveTypeAutoRun = dword:255

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:2

mPolicies-System: EnableUIADesktopToggle = dword:0

mPolicies-WindowsSystem: AllowBlockingAppsAtShutdown = dword:0

IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - <orphaned>

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:program fileswindows livewriterWriterBrowserExtension.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

.

INFO: HKCU has more than 50 listed domains.

If you wish to scan all of them, select the 'Force scan all domains' option.

.

 

 

 

TCP: Interfaces{A070B0E8-E97D-45E2-A87F-F08AFA60FBD2} : NameServer = 4.4.4.4,8.8.4.4

TCP: Interfaces{BD1EDD15-135B-4F61-AC1D-E7816E9DD80A} : DHCPNameServer = 7.254.254.254

TCP: Interfaces{C5F920D5-E326-4864-BB89-F895D8045262} : NameServer = 4.4.4.4,8.8.4.4

TCP: Interfaces{C5F920D5-E326-4864-BB89-F895D8045262} : DHCPNameServer = 192.168.0.1

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:program filesskypetoolbarsinternet explorerskypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:program fileswindows livephoto galleryAlbumDownloadProtocolHandler.dll

SSODL: WebCheck - <orphaned>

STS: CAveStartButtonChangerObject Class - {F791A188-699D-4FD4-955A-EB59E89B1907} - c:program filesthe skins factoryhyperdeskcommonAveStartButtonChangerInProc.dll

SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:SASSEH.DLL

LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

================= FIREFOX ===================

.

FF - ProfilePath - c:userspcappdataroamingmozillafirefoxprofileskajtqeym.default

FF - prefs.js: browser.search.selectedEngine - Google

 

 

.

============= SERVICES / DRIVERS ===============

.

R0 aswRvrt;aswRvrt;c:windowssystem32driversaswRvrt.sys [2013-8-29 49376]

R0 aswVmm;aswVmm;c:windowssystem32driversaswVmm.sys [2013-8-29 177864]

R0 gfibto;gfibto;c:windowssystem32driversgfibto.sys [2013-3-15 13560]

R0 SmartDefragDriver;SmartDefragDriver;c:windowssystem32driversSmartDefragDriver.sys [2013-3-13 15672]

R1 AppleCharger;AppleCharger;c:windowssystem32driversAppleCharger.sys [2010-12-11 19496]

R1 aswSnx;aswSnx;c:windowssystem32driversaswSnx.sys [2013-8-29 770344]

R1 aswSP;aswSP;c:windowssystem32driversaswSP.sys [2013-8-29 369584]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:windowssystem32driversdtsoftbus01.sys [2013-4-6 242240]

R1 SASDIFSV;SASDIFSV;D:sasdifsv.sys [2011-7-22 12880]

R1 SASKUTIL;SASKUTIL;D:SASKUTIL.SYS [2011-7-13 67664]

R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2010/12/11 11:04:48];c:program filescyberlinkpowerdvd10navfilter000.fcl [2010-3-13 87536]

R2 aswFsBlk;aswFsBlk;c:windowssystem32driversaswFsBlk.sys [2013-8-29 29816]

R2 aswMonFlt;aswMonFlt;c:windowssystem32driversaswMonFlt.sys [2013-8-29 66336]

R2 avast! Antivirus;avast! Antivirus;e:avast!AvastSvc.exe [2013-9-4 46808]

R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;e:hamhamachi-2.exe -s --> e:hamhamachi-2.exe -s [?]

R2 HyperDeskCustomThemeEnabler;HyperDesk's Custom Theme Enabler;c:windowsinstallerMSIB418.tmp [2013-8-23 86016]

R2 MBAMScheduler;MBAMScheduler;e:malwarebytes' anti-malwarembamscheduler.exe [2012-9-12 418376]

R2 MBAMService;MBAMService;e:malwarebytes' anti-malwarembamservice.exe [2012-9-12 701512]

R2 nvUpdatusService;NVIDIA Update Service Daemon;c:program filesnvidia corporationnvidia update coredaemonu.exe [2013-9-4 1826592]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:program filesnvidia corporation3d visionnvSCPAPISvr.exe [2013-6-21 413472]

R3 MBAMProtector;MBAMProtector;c:windowssystem32driversmbam.sys [2010-12-15 22856]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:windowssystem32driversnvhda32v.sys [2013-9-4 154400]

R3 RTL8167;Realtek 8167 NT Driver;c:windowssystem32driversRt86win7.sys [2013-3-18 614624]

R3 SbieDrv;SbieDrv;d:sandboxieSbieDrv.sys [2013-7-8 159208]

R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:windowssystem32driverstap0901t.sys [2012-1-18 27136]

R3 vvftav303;vvftav303;c:windowssystem32driversvvftav303.sys [2013-2-1 480128]

R3 ZSMC0303;A4 TECH PC Camera H;c:windowssystem32driversusbVM303.sys [2013-2-2 1472768]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:windowsmicrosoft.netframeworkv4.0.30319mscorsvw.exe [2012-7-9 104912]

S2 gupdate;Услуга Google Update (gupdate);c:program filesgoogleupdateGoogleUpdate.exe [2010-12-11 136176]

S2 SKLProService;Run software as a Windows service;e:prokawardrsasws.exe [2013-8-15 98304]

S2 SkypeUpdate;Skype Updater;c:program filesskypeupdaterUpdater.exe [2013-6-21 162408]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:windowssystem32driversb57nd60x.sys [2009-7-14 229888]

S3 btusbflt;Bluetooth USB Filter;c:windowssystem32driversbtusbflt.sys [2010-4-14 45736]

S3 fssfltr;fssfltr;c:windowssystem32driversfssfltr.sys [2011-2-4 39272]

S3 fsssvc;Windows Live Family Safety Service;c:program fileswindows livefamily safetyfsssvc.exe [2010-9-23 1493352]

S3 gupdatem;Услуга на Google Актуализация (gupdatem);c:program filesgoogleupdateGoogleUpdate.exe [2010-12-11 136176]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:windowssystem32driversrdpvideominiport.sys [2013-2-5 14848]

S3 TsUsbFlt;TsUsbFlt;c:windowssystem32driversTsUsbFlt.sys [2013-2-5 49664]

S3 TunngleService;TunngleService;e:tunngleTnglCtrl.exe [2013-7-21 759192]

S3 WatAdminSvc;Windows Activation Technologies Service;c:windowssystem32watWatAdminSvc.exe [2011-6-23 1343400]

S3 WMZuneComm;Zune Windows Mobile Connectivity Service;e:zuneWMZuneComm.exe [2011-8-5 268512]

S3 XFDriver;XFDriver;e:xfire2XFDriver.sys [2013-3-23 16648]

S4 !SASCORE;SAS Core Service;D:SASCore.exe [2013-5-23 119056]

S4 AdobeARMservice;Adobe Acrobat Update Service;c:program filescommon filesadobearm1.0armsvc.exe [2013-5-10 65640]

S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2012-4-10 257416]

S4 AppleChargerSrv;AppleChargerSrv;system32AppleChargerSrv.exe --> system32AppleChargerSrv.exe [?]

S4 MozillaMaintenance;Mozilla Maintenance Service;c:program filesmozilla maintenance servicemaintenanceservice.exe [2012-7-28 117144]

S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:program filesmicrosoft sql server100sharedsqladhlp.exe [2008-7-11 47128]

S4 RsFx0105;RsFx0105 Driver;c:windowssystem32driversRsFx0105.sys [2011-9-22 238696]

S4 SwitchBoard;Adobe SwitchBoard;c:program filescommon filesadobeswitchboardSwitchBoard.exe [2010-2-19 517096]

S4 TeamViewer8;TeamViewer 8;c:program filesteamviewerversion8TeamViewer_Service.exe [2013-1-25 4153184]

.

=============== Created Last 30 ================

.

2013-09-21 12:49:06 -------- d-----w- c:programdataTunngle

2013-09-21 10:03:32 -------- d-----w- c:program filesCheat Engine 6.3

2013-09-21 05:39:14 7328304 ----a-w- c:programdatamicrosoftwindows defenderdefinition updates{82c9ee68-127d-4dd9-b363-a31ce6887041}mpengine.dll

2013-09-20 08:19:35 -------- d-----w- c:userspcVirtualBox VMs

2013-09-20 08:19:10 -------- d-----w- c:userspc.VirtualBox

2013-09-20 08:18:27 188176 ----a-w- c:windowssystem32driversVBoxDrv.sys

2013-09-20 08:18:16 93968 ----a-w- c:windowssystem32driversVBoxUSBMon.sys

2013-09-17 08:42:34 475648 ----a-w- c:windowssystem32MyDefragScreenSaver_v4.3.1.scr

2013-09-17 08:42:34 1061888 ----a-w- c:windowssystem32MyDefragScreenSaver_v4.3.1.exe

2013-09-15 09:55:58 -------- d-----w- c:userspcappdatalocalTemporary Projects

2013-09-08 08:03:21 -------- d-----w- c:userspcappdatalocalCriterion Games

2013-09-07 15:29:12 -------- d-sh--w- c:windowssystem32AI_RecycleBin

2013-09-06 12:42:36 174864 ----a-w- c:windowssystem32VBoxNetFltNobj.dll

2013-09-06 12:42:36 115984 ----a-w- c:windowssystem32driversVBoxNetFlt.sys

2013-09-06 12:42:36 104720 ----a-w- c:windowssystem32driversVBoxNetAdp.sys

2013-09-04 18:55:43 -------- d-----w- c:userspcappdatalocalyetanotherstest

2013-09-04 12:09:26 640288 ----a-w- c:windowssystem32nvvsvc.exe

2013-09-04 12:09:26 62752 ----a-w- c:windowssystem32nvshext.dll

2013-09-04 12:09:26 4192544 ----a-w- c:windowssystem32nvcpl.dll

2013-09-04 12:09:26 3253909 ----a-w- c:windowssystem32nvcoproc.bin

2013-09-04 12:09:26 3045664 ----a-w- c:windowssystem32nvsvc.dll

2013-09-04 12:09:26 223008 ----a-w- c:windowssystem32nvmctray.dll

2013-09-04 12:09:11 53024 ----a-w- c:windowssystem32OpenCL.dll

2013-09-04 12:09:06 -------- d-----w- c:programdataNVIDIA Corporation

2013-09-04 12:07:15 -------- d-----w- C:NVIDIA

2013-08-31 13:56:18 -------- d-----w- c:userspcappdatalocaljoin.me

2013-08-31 08:27:39 -------- d-----w- c:userspcappdatalocal_

2013-08-31 07:47:51 -------- d-sh--w- C:$RECYCLE.BIN

2013-08-29 19:41:15 61680 ----a-w- c:windowssystem32driversaswRdr2.sys

2013-08-29 19:41:11 770344 ----a-w- c:windowssystem32driversaswSnx.sys

2013-08-29 19:41:08 177864 ----a-w- c:windowssystem32driversaswVmm.sys

2013-08-29 19:41:06 49376 ----a-w- c:windowssystem32driversaswRvrt.sys

2013-08-29 19:41:04 66336 ----a-w- c:windowssystem32driversaswMonFlt.sys

2013-08-29 19:40:51 41664 ----a-w- c:windowsavastSS.scr

2013-08-28 09:43:20 -------- d-----w- c:programdataSophos

2013-08-27 09:37:51 -------- d-----w- c:programdataMalwarebytes' Anti-Malware (portable)

2013-08-23 15:23:30 -------- d-----w- c:userspcappdatalocalImages

2013-08-23 13:26:19 212992 ----a-w- c:program filescommon filesinstallshieldengine6intel 32ILog.dll

2013-08-23 10:25:42 -------- d-----w- c:userspcappdatalocalSplitMediaLabs

2013-08-23 10:25:02 -------- d-----w- c:programdataSplitMediaLabs

2013-08-23 10:23:11 -------- d-----w- c:userspcappdataroamingSplitMediaLabs

.

==================== Find3M  ====================

.

2013-08-20 10:08:43 177152 ----a-w- c:windowssystem32driversaswvmm.sys.1377797427

2013-08-18 07:50:21 107888 ----a-w- c:windowssystem32CmdLineExt.dll

2013-08-10 07:58:34 94632 ----a-w- c:windowssystem32WindowsAccessBridge.dll

2013-08-10 07:58:30 867240 ----a-w- c:windowssystem32npdeployJava1.dll

2013-08-10 07:58:30 789416 ----a-w- c:windowssystem32deployJava1.dll

2013-08-10 03:59:10 1767936 ----a-w- c:windowssystem32wininet.dll

2013-08-10 03:58:09 2876928 ----a-w- c:windowssystem32jscript9.dll

2013-08-10 03:58:06 61440 ----a-w- c:windowssystem32iesetup.dll

2013-08-10 03:58:06 109056 ----a-w- c:windowssystem32iesysprep.dll

2013-08-10 03:07:50 2706432 ----a-w- c:windowssystem32mshtml.tlb

2013-08-10 02:17:19 71680 ----a-w- c:windowssystem32RegisterIEPKEYs.exe

2013-08-08 01:03:07 2348544 ----a-w- c:windowssystem32win32k.sys

2013-08-07 01:22:04 238872 ------w- c:windowssystem32MpSigStub.exe

2013-08-05 01:56:47 133056 ----a-w- c:windowssystem32driversataport.sys

2013-08-02 01:50:36 169984 ----a-w- c:windowssystem32winsrv.dll

2013-08-02 01:49:19 293376 ----a-w- c:windowssystem32KernelBase.dll

2013-08-02 00:52:57 271360 ----a-w- c:windowssystem32conhost.exe

2013-08-02 00:43:05 6144 ---ha-w- c:windowssystem32api-ms-win-security-base-l1-1-0.dll

2013-08-02 00:43:05 4608 ---ha-w- c:windowssystem32api-ms-win-core-threadpool-l1-1-0.dll

2013-08-02 00:43:05 3584 ---ha-w- c:windowssystem32api-ms-win-core-xstate-l1-1-0.dll

2013-08-02 00:43:05 3072 ---ha-w- c:windowssystem32api-ms-win-core-util-l1-1-0.dll

2013-07-25 08:57:27 1620992 ----a-w- c:windowssystem32WMVDECOD.DLL

2013-07-19 01:41:01 2048 ----a-w- c:windowssystem32tzres.dll

2013-07-15 05:08:53 71048 ----a-w- c:windowssystem32FlashPlayerCPLApp.cpl

2013-07-15 05:08:53 692104 ----a-w- c:windowssystem32FlashPlayerApp.exe

2013-07-09 05:03:34 3968960 ----a-w- c:windowssystem32ntkrnlpa.exe

2013-07-09 05:03:34 3913664 ----a-w- c:windowssystem32ntoskrnl.exe

2013-07-09 04:53:46 1289096 ----a-w- c:windowssystem32ntdll.dll

2013-07-09 04:52:10 175104 ----a-w- c:windowssystem32wintrust.dll

2013-07-09 04:50:42 652800 ----a-w- c:windowssystem32rpcrt4.dll

2013-07-09 04:46:31 140288 ----a-w- c:windowssystem32cryptsvc.dll

2013-07-09 04:46:31 1166848 ----a-w- c:windowssystem32crypt32.dll

2013-07-09 04:46:31 103936 ----a-w- c:windowssystem32cryptnet.dll

2013-07-06 05:05:35 1293760 ----a-w- c:windowssystem32driverstcpip.sys

.

============= FINISH: 12:56:11,64 ===============

 

Attach

 

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-09-30.01)

.

Microsoft Windows 7 Ultimate 

Boot Device: DeviceHarddiskVolume1

Install Date: 4.4.2004 г. 10:29:29

System Uptime: 22.9.2013 г. 12:34:39 (0 hours ago)

.

Motherboard: Gigabyte Technology Co., Ltd. |  | P41T-D3

Processor: Pentium® Dual-Core  CPU      E5700  @ 3.00GHz | Socket 775 | 3000/200mhz

.

==== Disk Partitions =========================

.

A: is Removable

C: is FIXED (NTFS) - 59 GiB total, 12,493 GiB free.

D: is FIXED (NTFS) - 204 GiB total, 106,185 GiB free.

E: is FIXED (NTFS) - 204 GiB total, 133,654 GiB free.

F: is CDROM (CDFS)

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP1135: 21.9.2013 г. 18:31:14 - Scheduled Checkpoint

.

==== Installed Programs ======================

.

Фотогалерия на Windows Live

µTorrent

A4 TECH PC Camera H

ActiveX контрола на Windows Live Mesh за отдалечени връзки

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Photoshop CS5.1

Adobe Reader X (10.1.7)

AIMP3

Auslogics BoostSpeed

avast! Free Antivirus

BS.Player FREE

BulgarianPhonetic XP by G. Atanasov

Burnout Paradise The Ultimate Box

Call of Duty

Call of Duty® 4 - Modern Warfare

Call of Duty® 4 - Modern Warfare 1.6 Patch

Call of Duty® 4 - Modern Warfare 1.7 Patch

Camtasia Studio 7

Canon MP550 series MP Drivers

CCleaner

Compatibility Pack for the 2007 Office system

D3DX10

DAEMON Tools Lite

DiRT 3

Europa Universalis III

Favorite-Games 5.22

Fraps (remove only)

Fruit Ninja Lite 1.6.1

Gaberoff Koral German Dictionary 1.01

Google Chrome

Google Earth

Google Toolbar for Internet Explorer

Grand Theft Auto IV

Grand Theft Auto: Episodes from Liberty City

GTA San Andreas

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB945282)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB946040)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB946308)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB946344)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB947540)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB947789)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB948127)

Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB951708)

Hotfix for Microsoft Visual Basic 2010 Express - ENU (KB2635973)

Hotfix for Microsoft Visual C# 2010 Express - ENU (KB2635973)

Hyperdesk - DarkMatter Gamma Ray

Hyperdesk - DarkMatter Subspace

IObit Toolbar v4.6

Java 7 Update 25

Java Auto Updater

join.me

K-Lite Codec Pack 6.3.0 (Full)

Kartagen

LogMeIn Hamachi

Mafia II

Malwarebytes Anti-Malware, версия 1.75.0.1300

ManiaPlanet

Microsoft .NET Framework 1.1

Microsoft .NET Framework 4 Multi-Targeting Pack

Microsoft .NET Framework 4.5

Microsoft Application Error Reporting

Microsoft Games for Windows - LIVE Redistributable

Microsoft Games for Windows Marketplace

Microsoft Help Viewer 1.1

Microsoft Office 2003 Bulgarian User Interface Pack

Microsoft Office File Validation Add-In

Microsoft Office Outlook Connector

Microsoft Office Professional Edition 2003

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft SQL Server 2008

Microsoft SQL Server 2008 Browser

Microsoft SQL Server 2008 Common Files

Microsoft SQL Server 2008 Database Engine Services

Microsoft SQL Server 2008 Database Engine Shared

Microsoft SQL Server 2008 Native Client

Microsoft SQL Server 2008 R2 Management Objects

Microsoft SQL Server 2008 RsFx Driver

Microsoft SQL Server 2008 Setup Support Files 

Microsoft SQL Server Compact 3.5 SP1 Design Tools English

Microsoft SQL Server Compact 3.5 SP2 ENU

Microsoft SQL Server System CLR Types

Microsoft SQL Server VSS Writer

Microsoft Visual Basic 2008 Express Edition with SP1 - ENU

Microsoft Visual Basic 2010 Express - ENU

Microsoft Visual C# 2010 Express - ENU

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219

Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools

Microsoft Visual Studio 2010 Service Pack 1

Microsoft Visual Studio 2010 Tools for Office Runtime (x86)

Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - enu

Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32

Microsoft WSE 3.0 Runtime

Microsoft_VC80_ATL_x86

Microsoft_VC80_CRT_x86

Microsoft_VC80_MFC_x86

Microsoft_VC80_MFCLOC_x86

Microsoft_VC90_ATL_x86

Microsoft_VC90_CRT_x86

Microsoft_VC90_MFC_x86

Microsoft_VC90_MFCLOC_x86

Mozilla Firefox 21.0 (x86 bg)

Mozilla Maintenance Service

MSVCRT

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

MyDefrag v4.3.1

Need for Speed Underground 2

Nero 8

neroxml

NVIDIA 3D Vision Controller Driver 320.49

NVIDIA 3D Vision Driver 320.49

NVIDIA Control Panel 320.49

NVIDIA GeForce Experience 1.5

NVIDIA Graphics Driver 320.49

NVIDIA HD Audio Driver 1.3.24.2

NVIDIA Install Application

NVIDIA PhysX

NVIDIA PhysX System Software 9.13.0604

NVIDIA Stereoscopic 3D Driver

NVIDIA Update 4.11.9

NVIDIA Update Components

OpenAL

Oracle VM VirtualBox 4.2.18

PDF Settings CS5

PokerStars.net

RocketDock 1.3.5

Rome - Total War

SA Dictionary 2008 Beta 4

Saints Row IV

Sandboxie 4.04 (32-bit)

Security Update for Microsoft .NET Framework 4.5 (KB2737083)

Security Update for Microsoft .NET Framework 4.5 (KB2742613)

Security Update for Microsoft .NET Framework 4.5 (KB2789648)

Security Update for Microsoft .NET Framework 4.5 (KB2804582)

Security Update for Microsoft .NET Framework 4.5 (KB2833957)

Security Update for Microsoft .NET Framework 4.5 (KB2840642)

Security Update for Microsoft .NET Framework 4.5 (KB2840642v2)

Security Update for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB2251487)

Service Pack 3 for SQL Server 2008 (KB2546951)

Skype Click to Call

Skype™ 6.6

Sql Server Customer Experience Improvement Program

Steam

Street Legal Racing - Redline 2.2.1 MWM Jack V2 v2.2.1 (Jack V2 pre-release 3) / R.G. ReCoding

System Requirements Lab CYRI

TeamSpeak 3 Client

TeamViewer 8

TmNationsForever

Tunatic

Tunngle beta

Update for Microsoft .NET Framework 4.5 (KB2750147)

Update for Microsoft .NET Framework 4.5 (KB2805221)

Update for Microsoft .NET Framework 4.5 (KB2805226)

Uplay

VCRedistSetup

Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU

VLC media player 2.0.6

Winamp

Windows Live Communications Platform

Windows Live Essentials

Windows Live Family Safety

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Mesh ActiveX Control for Remote Connections

Windows Live Movie Maker

Windows Live Photo Common

Windows Live Photo Gallery

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

WinRAR 4.20 (32-bit)

Xfire (remove only)

Xfire 2.0 Beta

Zune

.

==== Event Viewer Messages From Past Week ========

.

22.9.2013 г. 12:35:50, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

22.9.2013 г. 11:31:03, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

22.9.2013 г. 09:31:02, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

22.9.2013 г. 08:31:02, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

22.9.2013 г. 07:33:27, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

22.9.2013 г. 07:33:25, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

22.9.2013 г. 07:33:25, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

22.9.2013 г. 07:31:13, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

22.9.2013 г. 07:31:04, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

21.9.2013 г. 21:09:56, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

21.9.2013 г. 21:01:17, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

21.9.2013 г. 21:01:03, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

21.9.2013 г. 20:49:00, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

21.9.2013 г. 20:48:59, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

21.9.2013 г. 17:20:00, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

21.9.2013 г. 17:19:58, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

21.9.2013 г. 15:49:48, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

21.9.2013 г. 15:49:44, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

21.9.2013 г. 15:49:39, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

21.9.2013 г. 11:58:48, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

21.9.2013 г. 11:30:57, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

21.9.2013 г. 09:54:31, Error: NetBT [4321]  - The name "WORKGROUP      :1d" could not be registered on the interface with IP address 25.77.25.2. The computer with the IP address 25.198.243.119 did not allow the name to be claimed by this computer.

21.9.2013 г. 08:35:21, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

21.9.2013 г. 08:33:12, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

21.9.2013 г. 08:30:54, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

20.9.2013 г. 19:28:58, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

20.9.2013 г. 17:28:59, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

20.9.2013 г. 16:29:11, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

20.9.2013 г. 13:18:51, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

20.9.2013 г. 11:27:23, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

20.9.2013 г. 11:18:58, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

20.9.2013 г. 11:18:57, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

20.9.2013 г. 11:18:55, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

20.9.2013 г. 11:18:53, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

20.9.2013 г. 11:18:53, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

20.9.2013 г. 11:18:52, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

20.9.2013 г. 11:18:50, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

20.9.2013 г. 11:18:43, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

20.9.2013 г. 09:54:46, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

20.9.2013 г. 07:55:04, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

19.9.2013 г. 18:30:25, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

19.9.2013 г. 11:14:22, Error: bowser [8003]  - The master browser has received a server announcement from the computer PETAR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6140D07E-F451-49F2-8422-CDCC331A6. The master browser is stopping or an election is being forced.

19.9.2013 г. 08:19:05, Error: bowser [8003]  - The master browser has received a server announcement from the computer PETAR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6140D07E-F451-49F2-8422-CDCC331A6. The master browser is stopping or an election is being forced.

19.9.2013 г. 07:47:17, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

19.9.2013 г. 07:47:05, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

18.9.2013 г. 20:05:42, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

18.9.2013 г. 19:05:43, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

18.9.2013 г. 18:33:26, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

18.9.2013 г. 17:05:55, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

18.9.2013 г. 17:05:47, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

18.9.2013 г. 12:27:15, Error: nvlddmkm [14]  - 

18.9.2013 г. 07:54:32, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

18.9.2013 г. 07:54:30, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

17.9.2013 г. 20:28:47, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

17.9.2013 г. 20:28:45, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

17.9.2013 г. 20:28:43, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

17.9.2013 г. 19:00:28, Error: NetBT [4321]  - The name "WORKGROUP      :1d" could not be registered on the interface with IP address 25.77.25.2. The computer with the IP address 25.151.69.158 did not allow the name to be claimed by this computer.

17.9.2013 г. 19:00:17, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

17.9.2013 г. 18:36:49, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

17.9.2013 г. 16:37:05, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

17.9.2013 г. 12:33:59, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

17.9.2013 г. 11:44:12, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

17.9.2013 г. 11:34:14, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

17.9.2013 г. 11:32:30, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

17.9.2013 г. 11:32:06, Error: Service Control Manager [7034]  - The NVIDIA Display Driver Service service terminated unexpectedly.  It has done this 1 time(s).

17.9.2013 г. 10:28:37, Error: BROWSER [8009]  - The browser was unable to promote itself to master browser.  The computer that currently believes it is the master browser is XPHANTOM.

17.9.2013 г. 09:29:30, Error: BROWSER [8020]  - The browser was unable to promote itself to master browser.  The computer that currently believes it is the master browser is unknown.

17.9.2013 г. 08:19:58, Error: NetBT [4321]  - The name "WORKGROUP      :1d" could not be registered on the interface with IP address 25.77.25.2. The computer with the IP address 25.151.69.158 did not allow the name to be claimed by this computer.

17.9.2013 г. 08:17:47, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

16.9.2013 г. 21:28:15, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

16.9.2013 г. 20:28:27, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

16.9.2013 г. 15:34:30, Error: BROWSER [8019]  - The browser was unable to promote itself to master browser.  The browser will continue to attempt to promote itself to the master browser, but will no longer log any events in the event log in Event Viewer.

16.9.2013 г. 15:33:26, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

16.9.2013 г. 14:08:10, Error: BROWSER [8020]  - The browser was unable to promote itself to master browser.  The computer that currently believes it is the master browser is unknown.

16.9.2013 г. 13:47:28, Error: NetBT [4321]  - The name "WORKGROUP      :1d" could not be registered on the interface with IP address 25.77.25.2. The computer with the IP address 25.151.69.158 did not allow the name to be claimed by this computer.

16.9.2013 г. 13:15:49, Error: bowser [8003]  - The master browser has received a server announcement from the computer XPHANTOM that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6140D07E-F451-49F2-8422-CDCC331A6. The master browser is stopping or an election is being forced.

16.9.2013 г. 12:51:51, Error: bowser [8003]  - The master browser has received a server announcement from the computer XPHANTOM that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6140D07E-F451-49F2-8422-CDCC331A6. The master browser is stopping or an election is being forced.

16.9.2013 г. 12:15:49, Error: bowser [8003]  - The master browser has received a server announcement from the computer XPHANTOM that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6140D07E-F451-49F2-8422-CDCC331A6. The master browser is stopping or an election is being forced.

16.9.2013 г. 11:35:31, Error: bowser [8003]  - The master browser has received a server announcement from the computer XPHANTOM that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6140D07E-F451-49F2-8422-CDCC331A6. The master browser is stopping or an election is being forced.

16.9.2013 г. 11:33:37, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

15.9.2013 г. 20:55:06, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

15.9.2013 г. 17:55:20, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

15.9.2013 г. 17:55:10, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

15.9.2013 г. 12:27:03, Error: BROWSER [8019]  - The browser was unable to promote itself to master browser.  The browser will continue to attempt to promote itself to the master browser, but will no longer log any events in the event log in Event Viewer.

15.9.2013 г. 12:27:03, Error: BROWSER [8009]  - The browser was unable to promote itself to master browser.  The computer that currently believes it is the master browser is XPHANTOM.

15.9.2013 г. 10:09:03, Error: BROWSER [8020]  - The browser was unable to promote itself to master browser.  The computer that currently believes it is the master browser is unknown.

15.9.2013 г. 09:47:12, Error: BROWSER [8009]  - The browser was unable to promote itself to master browser.  The computer that currently believes it is the master browser is XPHANTOM.

15.9.2013 г. 09:26:32, Error: NetBT [4321]  - The name "WORKGROUP      :1d" could not be registered on the interface with IP address 25.77.25.2. The computer with the IP address 25.151.69.158 did not allow the name to be claimed by this computer.

15.9.2013 г. 08:55:42, Error: bowser [8003]  - The master browser has received a server announcement from the computer XPHANTOM that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6140D07E-F451-49F2-8422-CDCC331A6. The master browser is stopping or an election is being forced.

15.9.2013 г. 08:31:43, Error: bowser [8003]  - The master browser has received a server announcement from the computer XPHANTOM that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6140D07E-F451-49F2-8422-CDCC331A6. The master browser is stopping or an election is being forced.

15.9.2013 г. 08:20:07, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

15.9.2013 г. 08:19:58, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

.

==== End Of File ===========================

 

Здравейте..!
 
Моля, изтеглете Malwarebytes Anti-Rootkit и запазете архива на десктопа.

• [*]Tъй като е официална бета версия, отговорността за използването на инструмента е изцяло ваша. (добре е да направите бекъп на ценните документи за всеки случай). [*]Разархивирайте архива в папка на десктопа и стартирайте файла

mbar.exe. [*]Натиснете Next и после натиснете Update. [*]Натиснете Next и после натиснете Scan. [*]Изчакайте проверката да завърши и натиснете бутона Cleanup за да премахнете всички намерени паразити (ако има такива). [*]Ако бъдете попитан да рестартирате, съгласете се. [*]Два файла (mbar-log-YYYY-MM-DD, system-log.txt) ще бъдат създадени в папката, където сте разархивирали програмата. [*]Публикувайте съдържанието на тези файлове в следващия си коментар.

 

 

Моля, изтеглете aswMBR и го запазете на вашия десктоп.

• [*]Кликнете с двоен клин на мишката върху файла

aswMBR.exe за да го стартирате. [*]Изчакайте да изтегли дефинициите на avast! [*]От падащото меню посочете дял C: както е на снимката:

• [*]Изберете

Scan бутона, за да започне проверката. [*]Когато проверката завърши, натиснете бутона save log, запазете съдържанието на лог файла на десктопа и публикувайте съдържанието му в следващия си коментар.

 

 

 

Моля, изтеглете последната версия на TDSSKiller оттук и я запазете на вашия декстоп.

• [*]Стартирайте

TDSSKiller.exe за да стартирате приложението. След това кликнете върху бутона Change parameters.
[*]Сложете отметка през Loaded Modules.
[*]Необходим е рестарт за осъществяване на промените. Направете го! [*]TDSSKiller ще стартира автоматично след рестарта. Важно е да се отбележи, че вашия компютър може да изглежда по-бавен, на моменти неизползваем и с по-ниска производителност. Това е нормално и ще трае само един рестарт. Дайте му достатъчно време да зареди приложенията стартиращи с Операционната Система във фонов режим. [*]След това натиснете Change parameters в TDSSKiller отново. [*]Сложете всички отметки (този път рестарт не се изисква).

• [*] [*]Натиснете бутона

Start Scan.
[*]Проверката не би трябвало да отмене повече от 2 minutes. [*]Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.
[*]Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.
Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue > Рестартирайте за да бъде завършена поправката.

Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова. [*]Лог файл ще бъде създаден в свободната директория на дял C: . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.

 

Изтеглете Gmer или от тук.
* Временно спрете Интернета си,всички работещи програми,както и антивирусната си програма.
* Стартирате програмата.
* След завършването на автомаичната експрес-проверка,махнете отметките от следните позиции:
- Sections
- IAT/EAT
- Show all
* От всички локални дискове маркирайте само системния дял (обикновенно това е C: )

• [*]Натиснете бутона

Scan [*]Изчакайте програмата да завърши сканирането,след което натиснете бутона Save и запишете (save as) резултатите на десктопа с име Gmer.log. [*]Включете Интернета си и прикачете Gmer.log в следващия си коментар.

Забележка:
* Ако бъде открит Rootkit, ще последва въпрос дали желаете пълно сканиране на системата. Изберете NO.
* Не предприемайте никакви действия върху редовете маркирани с "<--- ROOТKIT" ,защото това може да доведе до грешки.

TDSSKiller.2.9.2.0_23.09.2013_07.43.33_log.txt

Редактирано 23 септември 201312 г. от Ritte (преглед на промените)

Здравейте..!Не виждам активни зарази и каквито и да са данни за действие на Rootkit..!

Имате ли все още някакви проблеми..?

Здравейте..!Не виждам активни зарази и каквито и да са данни за действие на Rootkit..!

Имате ли все още някакви проблеми..?

Не, вече нямам!