Здравейте! За втори път пиша тук, съжалявам ако правя нещо грешно. От скоро време имам проблем с личния си компютър и той се състои в следното: прогресивно забавяне, прекъсване в Интернет-връзката, не знаех дали се дължи на някакъв бацил. Но ето днес най-сетне подозренията ми почти се оправдаха: получих съобщение от Windows, че Anti-Spyware програмите на моя компютър (разбирайте Avira и Windows Defender) са спрели да работят, при положение, че не съм ги бутал. Мигновено ги включих и сканирах - нищо. Не разполагам с диск с ОС.

 

Съдържание на DDS.txt:

 

DDS (Ver_2011-09-30.01) - NTFS_AMD64 

Internet Explorer: 9.10.9200.16736  BrowserJavaVersion: 10.45.2

Run by Ivo at 23:16:10 on 2013-11-20

Microsoft Windows 7 Ultimate   6.1.7601.1.1251.359.1033.18.4056.2315 [GMT 2:00]

.

AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:Windowssystem32wininit.exe

C:Windowssystem32lsm.exe

C:Windowssystem32svchost.exe -k DcomLaunch

C:Windowssystem32nvvsvc.exe

C:Program Files (x86)NVIDIA Corporation3D VisionnvSCPAPISvr.exe

C:Windowssystem32svchost.exe -k RPCSS

C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted

C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted

C:Windowssystem32svchost.exe -k LocalService

C:Windowssystem32svchost.exe -k netsvcs

C:Windowssystem32svchost.exe -k GPSvcGroup

C:Windowssystem32svchost.exe -k NetworkService

C:WindowsSystem32spoolsv.exe

C:Program FilesNVIDIA CorporationDisplaynvxdsync.exe

C:Windowssystem32nvvsvc.exe

C:Program Files (x86)AviraAntiVir Desktopsched.exe

C:Windowssystem32taskhost.exe

C:Windowssystem32Dwm.exe

C:Windowssystem32svchost.exe -k LocalServiceNoNetwork

C:WindowsExplorer.EXE

C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe

C:Program Files (x86)Common FilesAppleMobile Device SupportAppleMobileDeviceService.exe

C:Program Files (x86)GoogleUpdate1.3.21.165GoogleCrashHandler.exe

C:Program Files (x86)GoogleUpdate1.3.21.165GoogleCrashHandler64.exe

C:Program FilesRealtekAudioHDARAVCpl64.exe

C:Program FilesBonjourmDNSResponder.exe

D:GamesHi-Rez StudiosHiPatchService.exe

C:Program Files (x86)NVIDIA CorporationNVIDIA Update CoreNvTmru.exe

C:WindowsWindowsMobilewmdc.exe

C:Program Files (x86)Common FilesAppleInternet ServicesiCloudServices.exe

C:Program Files (x86)Common FilesAppleInternet ServicesApplePhotoStreams.exe

C:Program FilesNVIDIA CorporationDisplaynvtray.exe

C:Program Files (x86)AviraAntiVir Desktopavgnt.exe

C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe

C:Program Files (x86)Common FilesJavaJava Updatejusched.exe

C:Program Files (x86)LogMeIn HamachiLMIGuardianSvc.exe

C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamsvc.exe

C:Program Files (x86)NVIDIA CorporationNVIDIA Update Coredaemonu.exe

C:Windowssystem32svchost.exe -k imgsvc

C:Program Files (x86)LogMeIn Hamachihamachi-2.exe

C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamsvc.exe

C:Windowssystem32conhost.exe

C:Program Files (x86)iTunesiTunesHelper.exe

C:Program Files (x86)Common FilesAppleInternet ServicesAPSDaemon.exe

C:Windowssystem32svchost.exe -k WindowsMobile

C:Windowssystem32SearchIndexer.exe

C:Program FilesiPodbiniPodService.exe

C:Program Files (x86)AviraAntiVir Desktopavguard.exe

C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation

C:Windowssystem32svchost.exe -k NetworkServiceNetworkRestricted

C:Program FilesWindows Media Playerwmpnetwk.exe

C:Program Files (x86)AviraAntiVir Desktopavshadow.exe

C:Program Files (x86)SkypePhoneSkype.exe

C:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe

C:WindowsSystem32svchost.exe -k secsvcs

C:Program Files (x86)NVIDIA CorporationNVIDIA Update CoreComUpdatus.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:Program Files (x86)GoogleChromeApplicationchrome.exe

C:program files (x86)aviraantivir desktopavcenter.exe

C:Windowssystem32AUDIODG.EXE

C:Windowssystem32SearchProtocolHost.exe

C:Windowssystem32SearchFilterHost.exe

C:WindowsSysWOW64NOTEPAD.EXE

C:Windowssystem32wbemwmiprvse.exe

C:Windowssystem32conhost.exe

C:WindowsSystem32cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.bg/

mWinlogon: Userinit = userinit.exe

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program Files (x86)Javajre7binssv.dll

BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:Program Files (x86)Microsoft OfficeOffice14URLREDIR.DLL

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program Files (x86)Javajre7binjp2ssv.dll

uRun: [ASRockXTU] <no file>

mRun: [avgnt] "C:Program Files (x86)AviraAntiVir Desktopavgnt.exe" /min

mRun: [iAStorIcon] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe

mRun: [Adobe ARM] "C:Program Files (x86)Common FilesAdobeARM1.0AdobeARM.exe"

mRun: [QuickTime Task] "C:Program Files (x86)QuickTimeQTTask.exe" -atboottime

mRun: [APSDaemon] "C:Program Files (x86)Common FilesAppleApple Application SupportAPSDaemon.exe"

mRun: [sunJavaUpdateSched] "C:Program Files (x86)Common FilesJavaJava Updatejusched.exe"

mRun: [LogMeIn Hamachi Ui] "C:Program Files (x86)LogMeIn Hamachihamachi-2-ui.exe" --auto-start

mRun: [iTunesHelper] "C:Program Files (x86)iTunesiTunesHelper.exe"

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: &Експортиране към Microsoft Excel - C:PROGRA~2MICROS~1Office14EXCEL.EXE/3000

IE: &Изпрати към OneNote - C:PROGRA~2MICROS~1Office14ONBttnIE.dll/105

IE: E&xport to Microsoft Excel - C:PROGRA~1MICROS~2Office15EXCEL.EXE/3000

IE: Se&nd to OneNote - C:PROGRA~1MICROS~2Office15ONBttnIE.dll/105

IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - C:WindowsWindowsMobileINetRepl.dll

IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - C:WindowsWindowsMobileINetRepl.dll

LSP: C:Program Files (x86)AviraAntiVir Desktopavsda.dll

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

TCP: NameServer = 192.168.0.1

TCP: Interfaces{4AF7EBD4-40B4-4855-8ABC-C544AAE0989D} : DHCPNameServer = 192.168.0.1

TCP: Interfaces{505407BF-7A27-4EEB-8208-F9C67717B429} : DHCPNameServer = 192.168.0.1

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:Program Files (x86)Common FilesMicrosoft SharedOFFICE14MSOXMLMF.DLL

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program Files (x86)Common FilesSkypeSkype4COM.dll

SSODL: WebCheck - <orphaned>

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:Program Files (x86)GoogleChromeApplication31.0.1650.57Installerchrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:Program FilesMicrosoft OfficeOffice14URLREDIR.DLL

x64-Run: [RtHDVCpl] C:Program FilesRealtekAudioHDARAVCpl64.exe -s

x64-Run: [Nvtmru] "C:Program Files (x86)NVIDIA CorporationNVIDIA Update Corenvtmru.exe"

x64-Run: [igfxTray] C:WindowsSystem32igfxtray.exe

x64-Run: [HotKeysCmds] C:WindowsSystem32hkcmd.exe

x64-Run: [Persistence] C:WindowsSystem32igfxpers.exe

x64-Run: [Windows Mobile Device Center] C:WindowsWindowsMobilewmdc.exe

x64-Run: [shadowPlay] C:WindowsSystem32rundll32.exe C:WindowsSystem32nvspcap64.dll,ShadowPlayOnSystemStart

x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:Program FilesCommon FilesMicrosoft SharedOFFICE14MSOXMLMF.DLL

x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

x64-Notify: igfxcui - igfxdev.dll

x64-SSODL: WebCheck - <orphaned>

.

============= SERVICES / DRIVERS ===============

.

R1 avkmgr;avkmgr;C:WindowsSystem32driversavkmgr.sys [2013-8-5 28600]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:WindowsSystem32driversdtsoftbus01.sys [2013-8-6 283064]

R1 vwififlt;Virtual WiFi Filter Driver;C:WindowsSystem32driversvwififlt.sys [2009-7-14 59904]

R2 AdobeARMservice;Adobe Acrobat Update Service;C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe [2013-5-11 65640]

R2 AntiVirSchedulerService;Avira Scheduler;C:Program Files (x86)AviraAntiVir Desktopsched.exe [2013-8-5 440392]

R2 AntiVirService;Avira Real-Time Protection;C:Program Files (x86)AviraAntiVir Desktopavguard.exe [2013-8-5 440392]

R2 avgntflt;avgntflt;C:WindowsSystem32driversavgntflt.sys [2013-8-5 105856]

R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;C:Program Files (x86)LogMeIn Hamachihamachi-2.exe [2013-11-11 2756944]

R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;D:GamesHi-Rez StudiosHiPatchService.exe [2013-11-7 9216]

R2 LMIGuardianSvc;LMIGuardianSvc;C:Program Files (x86)LogMeIn HamachiLMIGuardianSvc.exe [2013-10-11 377104]

R2 NvStreamSvc;NVIDIA Streamer Service;C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamsvc.exe [2013-9-29 15125280]

R2 nvUpdatusService;NVIDIA Update Service Daemon;C:Program Files (x86)NVIDIA CorporationNVIDIA Update Coredaemonu.exe [2013-8-15 1914656]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:Program Files (x86)NVIDIA Corporation3D VisionnvSCPAPISvr.exe [2013-10-15 414496]

R3 ISCT;Intel® Smart Connect Technology Device Driver;C:WindowsSystem32driversISCTD64.sys [2013-1-18 46568]

R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;C:WindowsSystem32driversL1C62x64.sys [2010-8-24 76912]

R3 MEIx64;Intel® Management Engine Interface ;C:WindowsSystem32driversHECIx64.sys [2013-8-13 60184]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:WindowsSystem32driversnvhda64v.sys [2013-9-29 196384]

R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);C:WindowsSystem32driversnvvad64v.sys [2013-10-29 39200]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2010-3-18 138576]

S2 gupdate;Google Update Service (gupdate);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2013-8-5 116648]

S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe [2013-8-13 13336]

S2 SkypeUpdate;Skype Updater;C:Program Files (x86)SkypeUpdaterUpdater.exe [2013-9-5 171680]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe [2013-8-5 257416]

S3 cphs;Intel® Content Protection HECI Service;C:WindowsSysWOW64IntelCpHeciSvc.exe [2012-12-14 277616]

S3 dmvsc;dmvsc;C:WindowsSystem32driversdmvsc.sys [2011-4-12 71168]

S3 gupdatem;Google Update Service (gupdatem);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2013-8-5 116648]

S3 HTCAND64;HTC Device Driver;C:WindowsSystem32driversANDROIDUSB.sys [2009-11-2 33736]

S3 netr7364;RT73 USB Wireless LAN Card Driver for Vista;C:WindowsSystem32driversnetr7364.sys [2009-6-10 707072]

S3 ose64;Office 64 Source Engine;C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2010-1-9 174440]

S3 osppsvc;Office Software Protection Platform;C:Program FilesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPSVC.EXE [2010-1-9 4925184]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:WindowsSystem32driversrdpvideominiport.sys [2013-8-5 19456]

S3 Synth3dVsc;Synth3dVsc;C:WindowsSystem32driversSynth3dVsc.sys [2011-4-12 88960]

S3 terminpt;Microsoft Remote Desktop Input Driver;C:WindowsSystem32driversterminpt.sys [2013-8-5 29696]

S3 TsUsbFlt;TsUsbFlt;C:WindowsSystem32driversTsUsbFlt.sys [2013-8-5 57856]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:WindowsSystem32driversTsUsbGD.sys [2013-8-5 30208]

S3 tsusbhub;tsusbhub;C:WindowsSystem32driverstsusbhub.sys [2011-4-12 117248]

S3 USBAAPL64;Apple Mobile USB Driver;C:WindowsSystem32driversusbaapl64.sys [2012-12-13 54784]

S3 WatAdminSvc;Windows Activation Technologies Service;C:WindowsSystem32WatWatAdminSvc.exe [2013-8-5 1255736]

S4 AntiVirWebService;Avira Web Protection;C:Program Files (x86)AviraAntiVir Desktopavwebgrd.exe [2013-8-5 1164360]

.

=============== Created Last 30 ================

.

2013-11-19 20:35:45 -------- d-----w- C:UsersIvoAppDataLocalNVIDIA Corporation

2013-11-19 07:49:28 10285968 ----a-w- C:ProgramDataMicrosoftWindows DefenderDefinition Updates{9FC9079B-21AF-47DC-9002-2900BB2F070B}mpengine.dll

2013-11-17 18:51:11 -------- d-----w- C:ProgramData34BE82C4-E596-4e99-A191-52C6199EBF69

2013-11-17 18:51:11 -------- d-----w- C:Program FilesiTunes

2013-11-17 18:51:11 -------- d-----w- C:Program FilesiPod

2013-11-17 18:51:11 -------- d-----w- C:Program Files (x86)iTunes

2013-11-15 10:14:19 -------- d-----w- C:UsersIvoAppDataRoamingopenvr

2013-11-14 15:24:35 -------- d-----w- C:UsersIvoAppDataLocalBlizzard

2013-11-13 16:35:38 1474048 ----a-w- C:WindowsSystem32crypt32.dll

2013-11-13 16:35:37 1168384 ----a-w- C:WindowsSysWow64crypt32.dll

2013-11-13 16:35:22 497152 ----a-w- C:WindowsSystem32driversafd.sys

2013-11-13 16:35:17 197120 ----a-w- C:WindowsSystem32credui.dll

2013-11-13 16:35:17 1930752 ----a-w- C:WindowsSystem32authui.dll

2013-11-13 16:35:17 190464 ----a-w- C:WindowsSystem32SmartcardCredentialProvider.dll

2013-11-13 16:35:17 1796096 ----a-w- C:WindowsSysWow64authui.dll

2013-11-13 16:35:17 168960 ----a-w- C:WindowsSysWow64credui.dll

2013-11-13 16:35:17 152576 ----a-w- C:WindowsSysWow64SmartcardCredentialProvider.dll

2013-11-13 16:33:56 404480 ----a-w- C:WindowsSystem32gdi32.dll

2013-11-13 16:33:56 311808 ----a-w- C:WindowsSysWow64gdi32.dll

2013-11-13 16:33:53 859648 ----a-w- C:WindowsSystem32IKEEXT.DLL

2013-11-13 16:33:52 830464 ----a-w- C:WindowsSystem32nshwfp.dll

2013-11-13 16:33:52 656896 ----a-w- C:WindowsSysWow64nshwfp.dll

2013-11-13 16:33:52 324096 ----a-w- C:WindowsSystem32FWPUCLNT.DLL

2013-11-13 16:33:52 216576 ----a-w- C:WindowsSysWow64FWPUCLNT.DLL

2013-11-13 16:25:12 -------- d-----w- C:Program Files (x86)LogMeIn Hamachi

2013-11-12 18:18:04 -------- d-----w- C:UsersIvoAppDataLocalBlizzard Entertainment

2013-11-12 18:18:03 -------- d-----w- C:UsersIvoAppDataRoamingBattle.net

2013-11-12 18:18:03 -------- d-----w- C:UsersIvoAppDataLocalBattle.net

2013-11-07 07:19:18 -------- d-----w- C:UsersIvoAppDataRoamingAwesomium

2013-11-07 07:18:18 -------- d-----w- C:ProgramDataHi-Rez Studios

2013-10-29 18:54:17 -------- d-----w- C:Program Files (x86)Origin Games

2013-10-29 18:53:23 -------- d-----w- C:UsersIvoAppDataRoamingOrigin

2013-10-29 18:53:21 -------- d-----w- C:UsersIvoAppDataLocalOrigin

2013-10-29 18:52:39 -------- d-----w- C:ProgramDataOrigin

2013-10-29 18:52:37 -------- d-----w- C:Program Files (x86)Origin

2013-10-29 15:29:17 68616 ----a-w- C:WindowsSysWow64XAPOFX1_1.dll

2013-10-29 15:29:17 509448 ----a-w- C:WindowsSysWow64XAudio2_2.dll

2013-10-29 15:29:16 467984 ----a-w- C:WindowsSysWow64d3dx10_39.dll

2013-10-29 15:29:16 1493528 ----a-w- C:WindowsSysWow64D3DCompiler_39.dll

2013-10-29 15:29:14 3851784 ----a-w- C:WindowsSysWow64D3DX9_39.dll

2013-10-29 11:13:26 955168 ----a-w- C:WindowsSysWow64nvspcap.dll

2013-10-29 11:13:26 1064224 ----a-w- C:WindowsSystem32nvspcap64.dll

2013-10-29 11:12:38 39200 ----a-w- C:WindowsSystem32driversnvvad64v.sys

2013-10-29 11:12:38 28960 ----a-w- C:WindowsSysWow64nvaudcap32v.dll

.

==================== Find3M  ====================

.

2013-11-15 20:24:00 71048 ----a-w- C:WindowsSysWow64FlashPlayerCPLApp.cpl

2013-11-15 20:24:00 692616 ----a-w- C:WindowsSysWow64FlashPlayerApp.exe

2013-10-16 13:09:56 78848 ----a-w- C:WindowsKMSEmulator.exe

2013-10-15 21:47:39 6665504 ----a-w- C:WindowsSystem32nvcpl.dll

2013-10-15 21:47:39 3489568 ----a-w- C:WindowsSystem32nvsvc64.dll

2013-10-15 21:47:36 922912 ----a-w- C:WindowsSystem32nvvsvc.exe

2013-10-15 21:47:36 63776 ----a-w- C:WindowsSystem32nvshext.dll

2013-10-15 21:47:36 219424 ----a-w- C:WindowsSystem32nvmctray.dll

2013-10-15 13:54:06 589600 ----a-w- C:WindowsSysWow64nvStreaming.exe

2013-10-12 08:45:20 2241536 ----a-w- C:WindowsSystem32wininet.dll

2013-10-12 08:43:37 3959808 ----a-w- C:WindowsSystem32jscript9.dll

2013-10-12 08:43:32 67072 ----a-w- C:WindowsSystem32iesetup.dll

2013-10-12 08:43:32 136704 ----a-w- C:WindowsSystem32iesysprep.dll

2013-10-12 07:03:50 1767936 ----a-w- C:WindowsSysWow64wininet.dll

2013-10-12 07:02:33 2877952 ----a-w- C:WindowsSysWow64jscript9.dll

2013-10-12 07:02:29 61440 ----a-w- C:WindowsSysWow64iesetup.dll

2013-10-12 07:02:29 109056 ----a-w- C:WindowsSysWow64iesysprep.dll

2013-10-12 06:35:26 2706432 ----a-w- C:WindowsSystem32mshtml.tlb

2013-10-12 06:08:58 2706432 ----a-w- C:WindowsSysWow64mshtml.tlb

2013-10-12 05:44:38 89600 ----a-w- C:WindowsSystem32RegisterIEPKEYs.exe

2013-10-12 05:15:39 71680 ----a-w- C:WindowsSysWow64RegisterIEPKEYs.exe

2013-10-08 19:14:15 3398914 ----a-w- C:WindowsSystem32nvcoproc.bin

2013-10-08 04:50:37 96168 ----a-w- C:WindowsSysWow64WindowsAccessBridge-32.dll

2013-10-01 10:12:57 83160 ----a-w- C:WindowsSystem32driversavnetflt.sys

2013-10-01 10:12:57 28600 ----a-w- C:WindowsSystem32driversavkmgr.sys

2013-10-01 10:12:57 105856 ----a-w- C:WindowsSystem32driversavgntflt.sys

2013-09-27 23:01:38 29984 ----a-w- C:WindowsSystem32nvaudcap64v.dll

2013-09-25 02:26:40 95680 ----a-w- C:WindowsSystem32driversksecdd.sys

2013-09-25 02:26:40 154560 ----a-w- C:WindowsSystem32driversksecpkg.sys

2013-09-25 02:23:33 28672 ----a-w- C:WindowsSystem32sspisrv.dll

2013-09-25 02:23:33 135680 ----a-w- C:WindowsSystem32sspicli.dll

2013-09-25 02:23:01 28160 ----a-w- C:WindowsSystem32secur32.dll

2013-09-25 02:22:59 340992 ----a-w- C:WindowsSystem32schannel.dll

2013-09-25 02:21:50 307200 ----a-w- C:WindowsSystem32ncrypt.dll

2013-09-25 02:21:07 1447936 ----a-w- C:WindowsSystem32lsasrv.dll

2013-09-25 01:58:17 96768 ----a-w- C:WindowsSysWow64sspicli.dll

2013-09-25 01:57:26 22016 ----a-w- C:WindowsSysWow64secur32.dll

2013-09-25 01:57:24 247808 ----a-w- C:WindowsSysWow64schannel.dll

2013-09-25 01:56:42 220160 ----a-w- C:WindowsSysWow64ncrypt.dll

2013-09-25 01:03:24 30720 ----a-w- C:WindowsSystem32lsass.exe

2013-09-12 08:58:10 1884448 ----a-w- C:WindowsSystem32nvdispco6432723.dll

2013-09-12 08:58:10 1511712 ----a-w- C:WindowsSystem32nvdispgenco6432723.dll

2013-09-08 02:30:37 1903552 ----a-w- C:WindowsSystem32driverstcpip.sys

2013-09-08 02:27:14 327168 ----a-w- C:WindowsSystem32mswsock.dll

2013-09-08 02:03:58 231424 ----a-w- C:WindowsSysWow64mswsock.dll

2013-09-04 21:04:34 14848 ----a-w- C:WindowsSystem32slwga.dll

2013-09-04 21:04:34 13824 ----a-w- C:WindowsSysWow64slwga.dll

2013-09-04 21:04:33 833024 ----a-w- C:WindowsSysWow64user32.dll

2013-09-04 21:04:33 419840 ----a-w- C:WindowsSystem32systemcpl.dll

2013-09-04 21:04:33 1008640 ----a-w- C:WindowsSystem32user32.dll

2013-09-04 12:12:11 343040 ----a-w- C:WindowsSystem32driversusbhub.sys

2013-09-04 12:11:51 325120 ----a-w- C:WindowsSystem32driversusbport.sys

2013-09-04 12:11:49 99840 ----a-w- C:WindowsSystem32driversusbccgp.sys

2013-09-04 12:11:43 52736 ----a-w- C:WindowsSystem32driversusbehci.sys

2013-09-04 12:11:43 30720 ----a-w- C:WindowsSystem32driversusbuhci.sys

2013-09-04 12:11:42 25600 ----a-w- C:WindowsSystem32driversusbohci.sys

2013-09-04 12:11:40 7808 ----a-w- C:WindowsSystem32driversusbd.sys

2013-09-04 08:46:49 43520 ----a-w- C:WindowsSysWow64CmdLineExt03.dll

2013-09-03 11:35:10 278800 ------w- C:WindowsSystem32MpSigStub.exe

2013-08-29 02:17:48 5549504 ----a-w- C:WindowsSystem32ntoskrnl.exe

2013-08-29 02:16:35 1732032 ----a-w- C:WindowsSystem32ntdll.dll

2013-08-29 02:16:28 243712 ----a-w- C:WindowsSystem32wow64.dll

2013-08-29 02:16:14 859648 ----a-w- C:WindowsSystem32tdh.dll

2013-08-29 02:13:28 878080 ----a-w- C:WindowsSystem32advapi32.dll

2013-08-29 01:51:45 3969472 ----a-w- C:WindowsSysWow64ntkrnlpa.exe

2013-08-29 01:51:45 3914176 ----a-w- C:WindowsSysWow64ntoskrnl.exe

2013-08-29 01:50:31 5120 ----a-w- C:WindowsSysWow64wow32.dll

2013-08-29 01:50:30 1292192 ----a-w- C:WindowsSysWow64ntdll.dll

2013-08-29 01:50:16 619520 ----a-w- C:WindowsSysWow64tdh.dll

2013-08-29 01:48:17 640512 ----a-w- C:WindowsSysWow64advapi32.dll

2013-08-29 01:48:15 44032 ----a-w- C:Windowsapppatchacwow64.dll

2013-08-29 00:49:53 25600 ----a-w- C:WindowsSysWow64setup16.exe

2013-08-29 00:49:52 7680 ----a-w- C:WindowsSysWow64instnm.exe

2013-08-29 00:49:52 14336 ----a-w- C:WindowsSysWow64ntvdm64.dll

2013-08-29 00:49:49 2048 ----a-w- C:WindowsSysWow64user.exe

2013-08-28 01:21:06 3155968 ----a-w- C:WindowsSystem32win32k.sys

2013-08-28 01:12:33 461312 ----a-w- C:WindowsSystem32scavengeui.dll

.

============= FINISH: 23:16:16,38 ===============

 

 

Attach.txt:

 

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-09-30.01)

.

Microsoft Windows 7 Ultimate 

Boot Device: DeviceHarddiskVolume1

Install Date: 5.8.2013 г. 12:45:52

System Uptime: 20.11.2013 г. 22:37:30 (1 hours ago)

.

Motherboard: ASRock |  | H61M-S

Processor: Intel® Core i5-2500 CPU @ 3.30GHz | CPUSocket | 2574/100mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 49 GiB total, 11,117 GiB free.

D: is FIXED (NTFS) - 100 GiB total, 27,235 GiB free.

E: is CDROM ()

F: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

No restore point in system.

.

==== Installed Programs ======================

.

µTorrent

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader XI (11.0.05)

Apple Application Support

Apple Mobile Device Support

Apple Software Update

ASRock eXtreme Tuner v0.1.169

Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver

Avira Free Antivirus

Battle.net

Bloodline Champions

Bonjour

BS.Player FREE

DAEMON Tools Lite

Dota 2

Fraps (remove only)

GeForce Experience NvStream Client Components

Google Chrome

Google Earth

Google Update Helper

HandBrake 0.9.9.1

Hearthstone

Heroes & Generals

Hi-Rez Studios Authenticate and Update Service

iCloud

Intel® Management Engine Components

Intel® Processor Graphics

Intel® Rapid Storage Technology

iTunes

Java 7 Update 45

Java Auto Updater

League of Legends

LogMeIn Hamachi

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Office Access MUI (Bulgarian) 2010

Microsoft Office Excel MUI (Bulgarian) 2010

Microsoft Office Groove MUI (Bulgarian) 2010

Microsoft Office InfoPath MUI (Bulgarian) 2010

Microsoft Office Office 32-bit Components 2010

Microsoft Office OneNote MUI (Bulgarian) 2010

Microsoft Office Outlook MUI (Bulgarian) 2010

Microsoft Office PowerPoint MUI (Bulgarian) 2010

Microsoft Office Professional Plus 2010

Microsoft Office Proof (Bulgarian) 2010

Microsoft Office Proof (English) 2010

Microsoft Office Proof (German) 2010

Microsoft Office Proof (Russian) 2010

Microsoft Office Proofing (Bulgarian) 2010

Microsoft Office Publisher MUI (Bulgarian) 2010

Microsoft Office Shared 32-bit MUI (Bulgarian) 2010

Microsoft Office Shared MUI (Bulgarian) 2010

Microsoft Office Word MUI (Bulgarian) 2010

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2005 Redistributable (x64)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

Microsoft XNA Framework Redistributable 3.1

Microsoft XNA Framework Redistributable 4.0 Refresh

NVIDIA 3D Vision Controller Driver 331.58

NVIDIA 3D Vision Driver 331.58

NVIDIA Control Panel 331.58

NVIDIA GeForce Experience 1.7.1

NVIDIA Graphics Driver 331.58

NVIDIA HD Audio Driver 1.3.26.4

NVIDIA Install Application

NVIDIA LED Visualizer 1.0

NVIDIA PhysX

NVIDIA PhysX System Software 9.13.0725

NVIDIA ShadowPlay 9.3.21

NVIDIA Stereoscopic 3D Driver

NVIDIA Update 9.3.21

NVIDIA Update Components

NVIDIA Virtual Audio 1.2.9

Origin

Pando Media Booster

PAYDAY 2

QuickTime

Realtek High Definition Audio Driver

Revo Uninstaller 1.95

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft .NET Framework 4 Extended (KB2736428)

Security Update for Microsoft .NET Framework 4 Extended (KB2742595)

Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)

SHIELD Streaming

Skype™ 6.10

Smite

Speccy

Steam

System Requirements Lab CYRI

Team Fortress 2

Unity Web Player

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2600217)

Update for Microsoft .NET Framework 4 Extended (KB2836939)

Update for Microsoft .NET Framework 4 Extended (KB2836939v3)

Update for Microsoft Office 2010 (KB2202188)

Windows Mobile Device Center

WinRAR 5.00 (64-bit)

.

==== Event Viewer Messages From Past Week ========

.

20.11.2013 г. 22:42:25, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the Intel® Rapid Storage Technology service to connect.

20.11.2013 г. 22:42:25, Error: Service Control Manager [7000]  - The Intel® Rapid Storage Technology service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.

20.11.2013 г. 22:41:47, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X64 service to connect.

20.11.2013 г. 22:41:16, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X86 service to connect.

20.11.2013 г. 22:38:55, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Avira Real-Time Protection service, but this action failed with the following error:  An instance of the service is already running.

20.11.2013 г. 22:38:46, Error: Service Control Manager [7031]  - The Avira Real-Time Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

20.11.2013 г. 22:38:46, Error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.

20.11.2013 г. 22:38:45, Error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.

20.11.2013 г. 09:33:50, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Avira Real-Time Protection service, but this action failed with the following error:  An instance of the service is already running.

20.11.2013 г. 09:33:46, Error: Service Control Manager [7031]  - The Avira Real-Time Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

20.11.2013 г. 09:33:46, Error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.

20.11.2013 г. 09:33:44, Error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.

19.11.2013 г. 22:38:51, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

18.11.2013 г. 19:58:43, Error: Service Control Manager [7034]  - The LogMeIn Hamachi Tunneling Engine service terminated unexpectedly.  It has done this 1 time(s).

18.11.2013 г. 18:58:12, Error: Service Control Manager [7031]  - The Avira Real-Time Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

18.11.2013 г. 18:58:12, Error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.

18.11.2013 г. 18:58:03, Error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.

18.11.2013 г. 09:36:17, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Avira Real-Time Protection service, but this action failed with the following error:  An instance of the service is already running.

18.11.2013 г. 09:36:17, Error: Service Control Manager [7031]  - The Avira Real-Time Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

18.11.2013 г. 09:36:17, Error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.

18.11.2013 г. 09:36:14, Error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.

17.11.2013 г. 14:23:31, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

16.11.2013 г. 17:31:01, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

16.11.2013 г. 11:48:27, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Avira Real-Time Protection service, but this action failed with the following error:  An instance of the service is already running.

16.11.2013 г. 11:48:26, Error: Service Control Manager [7031]  - The Avira Real-Time Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

16.11.2013 г. 11:48:23, Error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.

16.11.2013 г. 11:48:20, Error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.

15.11.2013 г. 11:46:47, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

15.11.2013 г. 10:30:14, Error: Service Control Manager [7031]  - The Avira Real-Time Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

15.11.2013 г. 10:30:14, Error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.

15.11.2013 г. 10:30:12, Error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.

14.11.2013 г. 12:25:40, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1053" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}

14.11.2013 г. 12:25:36, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the Windows Installer service to connect.

14.11.2013 г. 12:25:36, Error: Service Control Manager [7000]  - The Windows Installer service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.

14.11.2013 г. 09:45:45, Error: Microsoft-Windows-WMPNSS-Service [14332]  - Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.

14.11.2013 г. 00:07:32, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

13.11.2013 г. 20:18:17, Error: Service Control Manager [7034]  - The LogMeIn Hamachi Tunneling Engine service terminated unexpectedly.  It has done this 1 time(s).

13.11.2013 г. 19:54:50, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

13.11.2013 г. 18:25:19, Error: Service Control Manager [7030]  - The LogMeIn Hamachi Tunneling Engine service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.

.

==== End Of File ===========================

 

 

Здравейте..!Имам някои съмнения ,за това искам да направим още сканирания..:
 
Стъпка 1:

Изтеглете Security Check (автор: screen317) от тук

• [*]Кликнете два пъти върху

SecurityCheck.exe и следвайте инструкциите. [*]Когато програмата завърши работата си, ще се отвори един текстов документ: checkup.txt. [*]Копирайте съдържанието на checkup.txt с Копирай (Copy) и с Постави (Paste) го поставете в следващия си коментар.

 

 

Стъпка 2:

Изтеглете Malwarebytes' Anti-Malware или от тук (не забравяйте да обновите програмата с нови дефиниции)
* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.
* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.
* Ако има намерени обновявания, тя ще ги изтегли и инсталира.
* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.
* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.
* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата
* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.
* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог.
Копирайте този лог и го публикувайте в следващия си коментар по темата.
Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран



Стъпка 3:

• [*]Изтеглете

RogueKiller.exe и го запазете на десктопа. [*]Стартирайте приложението и натиснете бутона SCAN. [*]Ще се създаде лог файл на десктопа с името RKreport.txt на десктопа. [*]Публикувайте лог файла в следващия си пост.

 

 

Стъпка 4:
 

• [*]Моля изтеглете

Farbar Recovery Scan Tool и го запазете на десктопа. [*]Стартирайте файла FRST.exe. [*]Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение. [*]Сложете всички отметки. [*]Натиснете бутона SCAN. [*]Ще се създадат два лог файл с името - FRST.txt и Addition.txt на десктопа. [*]Файлът FRST.txt копирайте в следващия си пост. Addition.txt прикачете в следващия си коментар (погледнете опцията Прикачени файлове, когато публикувате мнение).

Addition.txt

Редактирано 21 ноември 201312 г. от Sydie (преглед на промените)

Изтеглете ComboFix от тук и го запазете на десктопа си
Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.
Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to disable your security applications by amateur
Стартирайте Combo-Fix.com и следвайте инструкциите.
Бележка: ComboFix ще се стартира без инсталирана Recovery Console.
Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repai режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.

• [*]Следвайте инструкциите, за да позволите на

ComboFix да изтегли и инсталира Microsoft Windows Recovery Console.В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

Изберете Yes, за да продължи сканирането за зловреден софтуер.
Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:ComboFix.txt в следващия Ви коментар в тази тема.
Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.

Копирайте текста в карето на notepad и го запазвате с име CFScript.txt на десктопа си:
 

KILLALL::ClearJavaCache::Folder::c:programdataMcAfee

След съхранението преместете  CFScript.txt на иконата на ComboFix.exe



Генерирания рапорт копирайте  и го поставете в следващия си коментар...!

Добре изглеждат нещата дотук..!
 
Моля, изтеглете и стартирайте програмата AdwCleaner(by Xplode):

• [*]Затворете всички стартирани програми и браузъри [*]Кликнете два пъти върху

adwcleaner.exe за да стартирате инструмента. [*]Натиснете OK, за да потвърдите, че всички стартирани програми ще бъдат затворени. [*]Маркирайте Clean [*]Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта. [*]Моля, да публикувате съдържанието на този лог в отговора си [*]Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s0].txt

Моля, изтеглете Junkware Removal Tool (by Thisisu ) и запазете на вашия десктоп.

• [*]Спрете временно работата на защитните програми. [*]Стартирайте инструмента

JRT.exe [*]Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата. [*]Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши. [*]Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt). [*]Моля копирайте съдържанието на лог файла в следващия си пост.

AdwCleaner:

 

# AdwCleaner v3.012 - Report created 21/11/2013 at 21:39:40

# Updated 11/11/2013 by Xplode

# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)

# Username : Ivo - IVO-PC

# Running from : C:UsersIvoDownloadsadwcleaner.exe

# Option : Clean

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

Key Deleted : HKCUSoftwareConduit

Key Deleted : HKCUSoftwareAppDataLowSoftwaresmartbar

Key Deleted : HKLMSoftwareConduit

 

***** [ Browsers ] *****

 

- Internet Explorer v10.0.9200.16736

 

 

- Google Chrome v31.0.1650.57

 

[ File : C:UsersIvoAppDataLocalGoogleChromeUser DataDefaultpreferences ]

 

 

*************************

 

AdwCleaner[R0].txt - [917 octets] - [21/11/2013 21:39:09]

AdwCleaner[s0].txt - [804 octets] - [21/11/2013 21:39:40]

 

########## EOF - C:AdwCleanerAdwCleaner[s0].txt - [863 octets] ##########

 

JRT:

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.8 (11.05.2013:1)

OS: Windows 7 Ultimate x64

Ran by Ivo on зҐвў 21.11.2013 Ј. at 21:44:23,04

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

 

 

~~~ Services

 

 

 

~~~ Registry Values

 

 

 

~~~ Registry Keys

 

 

 

~~~ Files

 

 

 

~~~ Folders

 

Successfully deleted: [Folder] "C:Windowssyswow64ai_recyclebin"

 

 

 

~~~ Event Viewer Logs were cleared

 

 

 

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on зҐвў 21.11.2013 Ј. at 21:47:42,56

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

В системата ви не се виждат активни зарази..!
 
Контролно сканиране и приключваме:
 
Изтеглете програмата: ESET Online Scanner

• [*]Стартирайте esetsmartinstaller_enu.exe [*]Сложете отметка на

YES, I accept the Terms of Use и изберете Start:

• [*]
  

• [*]Скенерът ще започне да изтегля компонентите, които са му необходими:
  

• [*]
  

Уверете се, че е премахната отметката от:

• [*]

Remove found threats

Уверете се че са маркирани следните позиции:

• [*]

Scan Archives

Кликнете върху Advanced Settings и маркирайте следните опции:

• [*]

Scan for potentially unwanted applications [*]Scan for potentially unsafe applications [*]Enable Anti-Stealth Technology

Накрая изберете Start
Скенерът ще започне да изтегля последните дефиниции.

• [*]След, като сканирането завърши изберете

Finish. [*]Отидете в: C:Program FilesESETESET Online Scanner [*]Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си коментар

Всичко е наред..!
 
Деинсталирайте ComboFix така:

• [*]Натиснете Start ==> Run ==> въведете командата

Combofix /Uninstall ==> OK

• [*]
  

• [*]Моля, следвайте инструкциите, за да деинсталирате ComboFix. Ще получите съобщение, в което се казва ComboFix е деинсталиран успешно.
  

 

Изтеглете Delfix.exe и го стартирайте. Сложете отметка пред Remove disinfection tools => натиснете бутона Run Инструмента ще се самоизтрие след като приключи своята задача!

 
Деинсталирайте adwcleaner.exe

• [*]Моля, затворете всички отворени програми и интернет браузъри. [*]Кликнете два пъти върху

adwcleaner.exe за да стартирате инструмента. [*]Кликнете върху Uninstall . [*]Щракнете върху Yes за да деинсталирате Adwcleaner

 

Деинсталирайте ESET Online Scaner.

• [*]

Start => Run, въведете control appwiz.cpl в полето.След това натиснете ENTER. [*]Изберете ESET Online Scanner от списъка с приложения, а след това маркирайте Remove. Aко бъдете подканени рестартирайте компютъра си.

 

  Препоръчвам програмата Malwarebytes' Anti-Malware  да остане на вашия компютър и периодично да сканирате системата си с нея (поне един -два пъти в седмицата),като не забравяйте да обновите дефинициите и преди всяко сканиране..!


Стартирайте PatchMyPC и инсталирайте всички ъпдейти, които инструмента ви предложи.

 

Ако нямате други проблеми,маркирам темата за "Решен"..! Бъдете здрави и ви пожелавам безопасен интернет..! 

Всичко е наред..!

 

Деинсталирайте ComboFix така:

[*]Натиснете Start ==> Run ==> въведете командата Combofix /Uninstall ==> OK

[*]

[*]Моля, следвайте инструкциите, за да деинсталирате ComboFix. Ще получите съобщение, в което се казва ComboFix е деинсталиран успешно.

 

Изтеглете Delfix.exe и го стартирайте. Сложете отметка пред Remove disinfection tools => натиснете бутона Run Инструмента ще се самоизтрие след като приключи своята задача!

 

Деинсталирайте adwcleaner.exe

[*]Моля, затворете всички отворени програми и интернет браузъри.

[*]Кликнете два пъти върху adwcleaner.exe за да стартирате инструмента.

[*]Кликнете върху Uninstall .

[*]Щракнете върху Yes за да деинсталирате Adwcleaner

 

Деинсталирайте ESET Online Scaner.

[*]Start => Run, въведете control appwiz.cpl в полето.След това натиснете ENTER.

[*]Изберете ESET Online Scanner от списъка с приложения, а след това маркирайте Remove. Aко бъдете подканени рестартирайте компютъра си.

 

  Препоръчвам програмата Malwarebytes' Anti-Malware  да остане на вашия компютър и периодично да сканирате системата си с нея (поне един -два пъти в седмицата),като не забравяйте да обновите дефинициите и преди всяко сканиране..!

Стартирайте PatchMyPC и инсталирайте всички ъпдейти, които инструмента ви предложи.

 

Ако нямате други проблеми,маркирам темата за "Решен"..! Бъдете здрави и ви пожелавам безопасен интернет..! 

 

 

Благодаря Ви за отделеното време! Някой ден ще Ви черпя една бира!