От два дена ми се появява едно съобщение от Аваст,а днес вече ми се появява и постоянно,трия го,местя го в клетка и пак се появява.

DDS (Ver_2011-09-30.01) - NTFS_x86
Internet Explorer: 8.0.7601.17514
Run by тони at 11:08:44 on 2013-11-22
Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.2047.1182 [GMT 2:00]
.
AV: avast! antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:Windowssystem32wininit.exe
C:Windowssystem32lsm.exe
C:Windowssystem32nvvsvc.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:Program FilesNVIDIA CorporationDisplaynvxdsync.exe
C:Windowssystem32nvvsvc.exe
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program FilesRealtekAudioHDARtHDVCpl.exe
C:Program FilesAlwil SoftwareAvast4ashDisp.exe
C:WindowsPixArtPAC7302Monitor.exe
C:Program FilesNVIDIA CorporationNVIDIA Update CoreNvTmru.exe
C:Program FilesCommon FilesInterVideoSchSvrSchSvr.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesInterVideoCommonBinWinCinemaMgr.exe
C:Program FilesNVIDIA CorporationDisplaynvtray.exe
C:UsersтониAppDataLocalTempsvchost.exe
C:WindowsSystem32spoolsv.exe
C:Windowssystem32taskhost.exe
C:Program FilesCommon FilesAdobeARM1.0armsvc.exe
C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamsvc.exe
C:Program FilesNVIDIA CorporationNVIDIA Update Coredaemonu.exe
c:Program FilesCommon FilesProtexisLicense ServicePsiService_2.exe
C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamsvc.exe
C:Windowssystem32conhost.exe
C:Program FilesWindows Media Playerwmpnetwk.exe
C:Windowssystem32SearchIndexer.exe
D:kividialer.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:UsersтониAppDataRoamingMozillaFirefoxProfilesvewgfz42.defaultextensions{E173B749-DB5B-4fd2-BA0E-94ECEA0CA55B}componentsafom.exe
C:Program FilesMozilla Firefoxplugin-container.exe
C:Windowssystem32SearchProtocolHost.exe
C:Windowssystem32SearchFilterHost.exe
C:Windowssystem32conhost.exe
C:Windowssystem32wbemwmiprvse.exe
C:Windowssystem32svchost.exe -k DcomLaunch
C:Windowssystem32svchost.exe -k RPCSS
C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted
C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted
C:Windowssystem32svchost.exe -k netsvcs
C:Windowssystem32svchost.exe -k LocalService
C:Windowssystem32svchost.exe -k NetworkService
C:Windowssystem32svchost.exe -k LocalServiceNoNetwork
C:Windowssystem32svchost.exe -k imgsvc
C:Windowssystem32svchost.exe -k bthsvcs
C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation
C:WindowsSystem32svchost.exe -k secsvcs
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://websearch.pur-esult.info/?pid=724&r=2013/11/20&hid=16423082417246540727&lg=EN&cc=BG
mStart Page = hxxp://websearch.pur-esult.info/?pid=724&r=2013/11/20&hid=16423082417246540727&lg=EN&cc=BG
uRun: [sidebar] c:program fileswindows sidebarsidebar.exe /autoRun
uRun: [ba4c12bee3027d94da5c81db2d196bfd] "c:usersтониappdatalocaltempsvchost.exe" ..
mRun: [RtHDVCpl] c:program filesrealtekaudiohdaRtHDVCpl.exe -s
mRun: [avast!] "c:program filesalwil softwareavast4ashDisp.exe"
mRun: [PAC7302_Monitor] c:windowspixartpac7302Monitor.exe
mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe"
mRun: [Nvtmru] "c:program filesnvidia corporationnvidia update corenvtmru.exe"
mRun: [shadowPlay] c:windowssystem32rundll32.exe c:windowssystem32nvspcap.dll,ShadowPlayOnSystemStart
mRun: [WinDVR SchSvr] "c:program filescommon filesintervideoschsvrSchSvr.exe"
mRun: [ba4c12bee3027d94da5c81db2d196bfd] "c:usersтониappdatalocaltempsvchost.exe" ..
StartupFolder: c:usersтониappdataroamingmicrosoftwindowsstart menuprogramsstartupba4c12bee3027d94da5c81db2d196bfd.exe
StartupFolder: c:progra~2micros~1windowsstartm~1programsstartupinterv~1.lnk - c:program filesintervideocommonbinWinCinemaMgr.exe
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
TCP: Interfaces{104A1224-66E9-48A0-A654-B90A8906892D} : NameServer = 10.0.0.100
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll
SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - c:usersтониappdataroamingmozillafirefoxprofilesvewgfz42.default
.
============= SERVICES / DRIVERS ===============
.
R1 aswSP;avast! Self Protection;c:windowssystem32driversaswSP.sys [2013-11-4 114768]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:program filescommon filesadobearm1.0armsvc.exe [2013-9-5 65640]
R2 aswFsBlk;aswFsBlk;c:windowssystem32driversaswFsBlk.sys [2013-11-4 20560]
R2 aswMonFlt;aswMonFlt;c:windowssystem32driversaswMonFlt.sys [2013-11-4 53328]
R2 avast! Antivirus;avast! Antivirus;c:program filesalwil softwareavast4ashServ.exe [2013-11-4 138680]
R2 NvStreamSvc;NVIDIA Streamer Service;c:program filesnvidia corporationnvstreamsrvnvstreamsvc.exe [2013-11-4 14652704]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:program filesnvidia corporationnvidia update coredaemonu.exe [2013-11-4 1914656]
R3 3xHybrid;ASUSTek SAA713x PCI Card;c:windowssystem32drivers3xHybrid.sys [2009-12-23 2831232]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:windowssystem32driversnvvad32v.sys [2013-11-4 33568]
R3 RTL8167;Realtek 8167 NT Driver;c:windowssystem32driversRt86win7.sys [2013-11-4 552080]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:windowsmicrosoft.netframeworkv4.0.30319mscorsvw.exe [2013-9-11 105144]
S2 SkypeUpdate;Skype Updater;c:program filesskypeupdaterUpdater.exe [2013-9-5 171680]
S3 avast! Mail Scanner;avast! Mail Scanner;c:program filesalwil softwareavast4ashMaiSv.exe [2013-11-4 254040]
S3 avast! Web Scanner;avast! Web Scanner;c:program filesalwil softwareavast4ashWebSv.exe [2013-11-4 352920]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:windowssystem32driversb57nd60x.sys [2009-7-14 229888]
S3 dmvsc;dmvsc;c:windowssystem32driversdmvsc.sys [2010-11-21 62464]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:program filesmozilla maintenance servicemaintenanceservice.exe [2013-11-4 119408]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card;c:windowssystem32driversPh3xIB32.sys [2009-6-10 1311232]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:windowssystem32driversrdpvideominiport.sys [2010-11-20 15872]
S3 Synth3dVsc;Synth3dVsc;c:windowssystem32driversSynth3dVsc.sys [2010-11-21 77184]
S3 terminpt;Microsoft Remote Desktop Input Driver;c:windowssystem32driversterminpt.sys [2010-11-21 25600]
S3 TsUsbGD;Remote Desktop Generic USB Device;c:windowssystem32driversTsUsbGD.sys [2010-11-20 27264]
SUnknown TsUsbFlt;TsUsbFlt; [x]
SUnknown tsusbhub;tsusbhub; [x]
.
=============== Created Last 30 ================
.
2013-11-22 09:08:45  --------  d-----w-  c:usersєюэшappdatalocalMicrosoft
2013-11-20 17:23:31  --------  d-----w-  c:programdataQuickSet
2013-11-20 17:23:28  --------  d-----w-  c:program filesSk-Enhancer
2013-11-20 17:23:23  --------  d-----w-  c:program filesYoutubeAdblocker
2013-11-20 17:23:13  --------  d-----w-  c:program filessurf And kkeepp
2013-11-20 17:23:10  --------  d-----w-  c:programdata23aaf67aa80fefba
2013-11-20 11:10:30  272896  ----a-w-  c:usersтониappdataroamingmicrosoftwindowsstart menuprogramsstartupba4c12bee3027d94da5c81db2d196bfd.exe
2013-11-20 10:51:14  62576  ----a-w-  c:programdatamicrosoftwindows defenderdefinition updates{12ba7bc0-a838-426d-b243-b159a2192305}offreg.dll
2013-11-19 06:54:02  --------  d-----w-  c:windowsMigration
2013-11-17 09:33:08  --------  d-----w-  c:program filescommon filesInterVideo
2013-11-17 09:33:04  204800  ----a-w-  c:windowssystem32IVIresizeW7.dll
2013-11-17 09:33:04  20480  ----a-w-  c:windowssystem32IVIresize.dll
2013-11-17 09:33:04  200704  ----a-w-  c:windowssystem32IVIresizeA6.dll
2013-11-17 09:33:04  192512  ----a-w-  c:windowssystem32IVIresizeP6.dll
2013-11-17 09:33:04  192512  ----a-w-  c:windowssystem32IVIresizeM6.dll
2013-11-17 09:33:04  188416  ----a-w-  c:windowssystem32IVIresizePX.dll
2013-11-17 09:33:03  --------  d-----w-  c:program filesInterVideo
2013-11-17 09:32:42  225280  ----a-w-  c:program filescommon filesinstallshieldiscriptIScript.dll
2013-11-13 12:23:31  --------  d-----w-  c:usersтониappdataroamingRovio
2013-11-13 12:22:02  --------  d-----w-  c:usersтониappdataroamingRovio Entertainment Ltd
2013-11-11 08:23:04  71048  ----a-w-  c:windowssystem32FlashPlayerCPLApp.cpl
2013-11-11 08:23:04  689376  ----a-w-  c:windowssystem32FlashPlayerApp.exe
2013-11-11 07:35:16  --------  d-----w-  c:programdataWinterSoft
2013-11-11 07:35:07  --------  d-----w-  c:programdataInstallMate
2013-11-07 13:11:07  --------  d-----w-  c:usersтониappdataroamingAshampoo
2013-11-07 11:22:26  3649536  ----a-w-  c:windowssystem32x264vfw.dll
2013-11-07 11:22:26  216064  ----a-w-  c:windowssystem32lagarith.dll
2013-11-07 11:22:25  650752  ----a-w-  c:windowssystem32xvidcore.dll
2013-11-07 11:22:25  243200  ----a-w-  c:windowssystem32xvidvfw.dll
2013-11-07 11:22:25  122880  ----a-w-  c:windowssystem32ac3acm.acm
2013-11-07 11:22:24  217176  ----a-w-  c:windowssystem32unrar.dll
2013-11-07 11:22:22  112640  ----a-w-  c:windowssystem32ff_vfw.dll
2013-11-07 11:22:19  --------  d-----w-  c:program filesK-Lite Codec Pack
2013-11-05 11:44:27  --------  d-----w-  c:windowspss
2013-11-05 09:18:11  --------  d-----w-  c:usersтониappdataroamingThinstall
2013-11-05 09:13:38  --------  d-----w-  c:program filesVS Revo Group
2013-11-05 09:02:01  --------  d-----w-  c:program filesCCleaner
2013-11-05 07:55:17  --------  d-----w-  c:usersтониappdataroamingNokia Suite
2013-11-05 07:55:17  --------  d-----w-  c:usersтониappdataroamingNokia
2013-11-05 07:34:10  --------  d-----w-  c:usersтониappdataroamingvloader-bg
2013-11-05 07:23:38  --------  d-----w-  c:usersтониappdataroamingPC Suite
2013-11-05 07:23:08  --------  d-----w-  c:programdataNokia
2013-11-05 07:23:08  --------  d-----w-  c:program filescommon filesNokia
2013-11-05 07:22:49  19072  ----a-w-  c:windowssystem32driverspccsmcfd.sys
2013-11-05 07:22:43  --------  d-----w-  c:program filesPC Connectivity Solution
2013-11-05 07:22:32  75264  ----a-w-  c:windowssystem32nmwcdcls.dll
2013-11-05 07:22:00  --------  d-----w-  c:programdataNokiaInstallerCache
2013-11-05 07:22:00  --------  d-----w-  c:program filesNokia
2013-11-05 07:21:48  --------  d-----w-  c:program filesvloader-bg
2013-11-05 04:04:52  --------  d-----w-  c:windowsPanther
2013-11-05 04:04:39  --------  d-sh--w-  C:Boot
2013-11-04 21:37:03  --------  d-----w-  c:usersтониappdataroamingWinRAR
2013-11-04 21:19:28  --------  d-----w-  c:usersтониappdataroamingPotPlayerMini
2013-11-04 20:46:27  --------  d-----w-  c:programdataKONAMI
2013-11-04 20:12:10  6656  ----a-w-  c:windowssystem32CoInst_071029.dll
2013-11-04 20:12:10  458752  ----a-w-  c:windowssystem32driversPAC7302.SYS
2013-11-04 20:12:10  40960  ----a-w-  c:windows98Setup.exe
2013-11-04 20:12:10  119568  ----a-w-  c:windowssystem32KSPR1527.rra
2013-11-04 20:12:10  --------  d-----w-  c:program filesANC
2013-11-04 20:12:09  14336  ----a-w-  c:windowssystem32P7302USD.dll
2013-11-04 20:12:09  129024  ----a-w-  c:windowssystem32SP7302.ax
2013-11-04 20:12:09  --------  d-----w-  c:windowsPixArt
2013-11-04 20:12:09  --------  d-----w-  c:program filescommon filesPAC7302
2013-11-04 20:10:49  --------  d-----w-  c:program filesMediaCoder
2013-11-04 19:53:01  --------  d-----w-  C:Кошче
2013-11-04 19:37:30  53328  ----a-w-  c:windowssystem32driversaswMonFlt.sys
2013-11-04 19:37:30  499712  ----a-w-  c:windowssystem32MSVCP71.dll
2013-11-04 19:37:30  348160  ----a-w-  c:windowssystem32MSVCR71.dll
2013-11-04 19:37:30  1060864  ----a-w-  c:windowssystem32MFC71.dll
2013-11-04 19:22:03  --------  d-----w-  c:programdataAshampoo
2013-11-04 19:22:03  --------  d-----w-  c:program filesAshampoo
2013-11-04 19:18:13  --------  d-----w-  c:windowssystem32driversbg-BG
2013-11-04 19:18:13  --------  d-----w-  c:windowsbg-BG
2013-11-04 19:18:11  --------  d-----w-  c:windowssystem32wbembg-BG
2013-11-04 19:13:26  2422272  ----a-w-  c:windowssystem32wucltux.dll
2013-11-04 19:13:22  88576  ----a-w-  c:windowssystem32wudriver.dll
2013-11-04 19:13:18  33792  ----a-w-  c:windowssystem32wuapp.exe
2013-11-04 19:13:18  171904  ----a-w-  c:windowssystem32wuwebv.dll
2013-11-04 18:49:53  --------  d-----w-  c:program filesDaum
2013-11-04 18:49:19  --------  d-----w-  c:usersтониappdataroamingAIMP3
2013-11-04 18:49:17  --------  d-----w-  c:program filesAIMP3
2013-11-04 18:48:21  --------  d-----w-  c:usersтониappdataroamingMacromedia
2013-11-04 18:48:21  --------  d-----w-  c:usersтониappdataroamingAdobe
2013-11-04 18:47:06  --------  d-----w-  c:usersтониappdataroamingNVIDIA
2013-11-04 18:46:59  --------  d-----w-  c:usersтониappdataroamingCorel
2013-11-04 18:46:58  7796464  ----a-w-  c:programdatamicrosoftwindows defenderdefinition updates{12ba7bc0-a838-426d-b243-b159a2192305}mpengine.dll
2013-11-04 18:46:58  --------  d-----w-  c:usersтониappdataroamingUlead Systems
2013-11-04 18:46:57  238872  ------w-  c:windowssystem32MpSigStub.exe
2013-11-04 18:45:39  --------  d-----w-  c:programdataeSellerate
2013-11-04 18:45:26  --------  d-----w-  c:program filesSmartSound Software
2013-11-04 18:45:25  --------  d-----w-  c:programdataSmartSound Software Inc
2013-11-04 18:45:01  --------  d--h--w-  c:windowsmsdownld.tmp
2013-11-04 18:45:01  --------  d-----w-  c:windowsRegisteredPackages
2013-11-04 18:43:26  --------  d-----w-  c:program filescommon filesProtexis
2013-11-04 18:43:21  --------  d-----w-  c:programdataCorel
2013-11-04 18:39:20  --------  d-----w-  c:program filesCorel
2013-11-04 18:37:02  --------  d-----w-  c:usersтониappdataroamingSkype
2013-11-04 18:36:59  --------  d-----r-  c:program filesSkype
2013-11-04 18:35:52  --------  d-----w-  c:usersтониappdataroaminguTorrent
2013-11-04 18:32:02  --------  d-----w-  c:usersтониappdataroamingMozilla
2013-11-04 18:31:57  --------  d-----w-  c:program filesMozilla Maintenance Service
2013-11-04 18:28:14  --------  d-----w-  c:program filesHTML Help Workshop
2013-11-04 18:25:26  --------  d-----w-  c:programdataInterVideo
2013-11-04 18:25:02  77824  ----a-w-  c:program filescommon filesinstallshieldengine6intel 32ctor.dll
2013-11-04 18:25:02  32768  ----a-w-  c:program filescommon filesinstallshieldengine6intel 32objectps.dll
2013-11-04 18:25:02  212992  ----a-w-  c:program filescommon filesinstallshieldengine6intel 32ILog.dll
2013-11-04 18:25:02  176128  ----a-w-  c:program filescommon filesinstallshieldengine6intel 32iuser.dll
2013-11-04 18:24:32  955168  ----a-w-  c:windowssystem32nvspcap.dll
2013-11-04 18:23:37  664352  ----a-w-  c:windowssystem32nvvsvc.exe
2013-11-04 18:23:37  62752  ----a-w-  c:windowssystem32nvshext.dll
2013-11-04 18:23:37  4318496  ----a-w-  c:windowssystem32nvcpl.dll
2013-11-04 18:23:37  3036448  ----a-w-  c:windowssystem32nvsvc.dll
2013-11-04 18:23:37  209184  ----a-w-  c:windowssystem32nvmctray.dll
2013-11-04 18:23:30  53024  ----a-w-  c:windowssystem32OpenCL.dll
2013-11-04 18:23:23  --------  d-----w-  c:programdataNVIDIA Corporation
2013-11-04 18:21:35  --------  d-sh--w-  c:windowsInstaller
2013-11-04 18:19:59  --------  d-----w-  c:program filesNVIDIA Corporation
2013-11-04 18:14:59  80488  ----a-w-  c:windowssystem32RtNicProp32.dll
2013-11-04 18:14:59  552080  ----a-w-  c:windowssystem32driversRt86win7.sys
2013-11-04 18:14:59  100896  ----a-w-  c:windowssystem32RTNUninst32.dll
2013-11-04 18:14:55  --------  d-----w-  c:program filesRealtek
2013-11-04 18:14:11  --------  d-----r-  c:usersтониSearches
2013-11-04 18:14:03  --------  d-----w-  c:usersтониappdataroamingIdentities
2013-11-04 18:14:02  --------  d-----r-  c:usersтониContacts
.
==================== Find3M  ====================
.
2013-09-27 23:01:42  33568  ----a-w-  c:windowssystem32driversnvvad32v.sys
2013-09-27 23:01:38  28960  ----a-w-  c:windowssystem32nvaudcap32v.dll
2013-09-11 19:21:54  863344  ----a-w-  c:windowssystem32msvcr110_clr0400.dll
2013-09-11 19:21:54  501872  ----a-w-  c:windowssystem32msvcp110_clr0400.dll
2013-09-11 19:21:54  28776  ----a-w-  c:windowssystem32aspnet_counters.dll
2013-09-11 19:21:54  18000  ----a-w-  c:windowssystem32msvcr100_clr0400.dll
.
============= FINISH: 11:09:12,54 ===============
 

 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-09-30.01)
.
Microsoft Windows 7 Ultimate
Boot Device: DeviceHarddiskVolume1
Install Date: 4.11.2013 г. 20:13:52
System Uptime: 22.11.2013 г. 06:40:09 (5 hours ago)
.
Motherboard: ASRock |  | G31M-GS.  
Processor: Pentium® Dual-Core  CPU   E5800  @ 3.20GHz | CPUSocket | 3191/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 49 GiB total, 23,56 GiB free.
D: is FIXED (NTFS) - 863 GiB total, 702,959 GiB free.
E: is FIXED (NTFS) - 20 GiB total, 4,21 GiB free.
F: is CDROM (UDF)
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Realtek PCIe GBE Family Controller
Device ID: PCIVEN_10EC&DEV_8168&SUBSYS_81681849&REV_034&1BA3C945&0&00E1
Manufacturer: Realtek
Name: Realtek PCIe GBE Family Controller
PNP Device ID: PCIVEN_10EC&DEV_8168&SUBSYS_81681849&REV_034&1BA3C945&0&00E1
Service: RTL8167
.
==== System Restore Points ===================
.
RP85: 21.11.2013 г. 03:30:56 - Scheduled Checkpoint
.
==== Installed Programs ======================
.
µTorrent
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader XI (11.0.05)
AIMP3
Angry Birds Star Wars II
Ashampoo Burning Studio 12 v.12.0.5
avast! Antivirus
CANYON USB PC CAMERA
CCleaner
Contents
Corel VideoStudio Ultimate X6
Daum PotPlayer 1.5.39659
GeForce Experience NvStream Client Components
HTML Help Workshop
ICA
InterVideo WinDVR 3
IPM_VS_Pro
K-Lite Mega Codec Pack 10.1.0
MediaCoder 0.6.2
Microsoft .NET Framework 4.5.1
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft_VC100_CRT_SP1_x86
Mozilla Firefox 26.0 (x86 bg)
Mozilla Maintenance Service
MSVC80_x86_v2
MSVC90_x86
Nokia Connectivity Cable Driver
Nokia Suite
NVIDIA Control Panel 331.65
NVIDIA GeForce Experience 1.7.1
NVIDIA Graphics Driver 331.65
NVIDIA Install Application
NVIDIA LED Visualizer 1.0
NVIDIA PhysX
NVIDIA PhysX System Software 9.13.0725
NVIDIA ShadowPlay 9.3.21
NVIDIA Update 9.3.21
NVIDIA Update Components
NVIDIA Virtual Audio 1.2.9
PC Connectivity Solution
PESJP Patch 2013 version 3.0.8
Pro Evolution Soccer 2013
Pro Evolution Soccer 2014
Realtek Ethernet Controller Driver
Realtek High Definition Audio Driver
Revo Uninstaller 1.95
Setup
Share
SHIELD Streaming
Skype™ 6.10
SmartSound Common Data
SmartSound Quicktracks 5
vloader-bg
VSClassic
VSHelp
VSUltimate
Windows Driver Package - Nokia pccsmcfd “LegacyDriver”  (05/31/2012 7.1.2.0)
Windows Media Encoder 9 Series
WinRAR 5.00 (32-битова версия)
.
==== Event Viewer Messages From Past Week ========
.
22.11.2013 г. 06:40:46, Error: Service Control Manager [7031]  - Услуга Windows Search беше прекъсната неочаквано. Това се е случвало с нея 1 път(и). След 30000 милисекунди ще бъде предприето следното коригиращо действие: Restart the service.
22.11.2013 г. 06:40:46, Error: Service Control Manager [7024]  - Услуга Windows Search прекъсна със следната специфична за услугите грешка %%-1073473535.
22.11.2013 г. 06:40:15, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
21.11.2013 г. 00:09:13, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
20.11.2013 г. 12:47:39, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
20.11.2013 г. 02:27:35, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
19.11.2013 г. 10:34:57, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
18.11.2013 г. 13:44:17, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
18.11.2013 г. 10:32:02, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
18.11.2013 г. 06:44:03, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
17.11.2013 г. 11:31:57, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
17.11.2013 г. 07:28:03, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
16.11.2013 г. 20:15:02, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
16.11.2013 г. 07:13:43, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
15.11.2013 г. 09:43:58, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
15.11.2013 г. 08:20:00, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
.
==== End Of File ===========================
 

 

[*]Моля изтеглете Farbar Recovery Scan Tool (според версията на Windows изберете 32 битовата или 64 битовата версия) и го запазете на десктопа.

[*]Стартирайте файла FRST.exe (или FRST64.exe)

[*]Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение.

[*]Сложете всички отметки.

[*]Натиснете бутона SCAN.

[*]Ще се създадат два лог файл с името - FRST.txt и Addition.txt на десктопа.

[*]Прикачете лог файловете в следващия си коментар.

Сега изтеглете прикачения файл => http://file.bg/f271133zAKCd  и го запазете в папката от която стартирахте FRST.exe.

Стартирайте FRST.exe и натиснете бутона Fix веднъж!

След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата.

Дотук добре:

 

Сега изтеглете и стартирайте следния файл и следвайте инструкциите за да възстановите настройките на hosts файла.

 

След това:

 

СТЪПКА 1

 

• [*]

Изтеглете и стартирайтe AdwCleaner.exe.

[*]Натиснете бутона Scan. [*]AdwCleaner ще започне да проверява компютъра, както преди. [*]След като проверката приключи...този път натиснете бутона Clean тъй като няма неща които да не са за триене от лога. [*]Натиснете OK на диалоговия прозорец, който ще се появи подканвайки Ви да затворите всички активни приложения. [*]Натиснете OK отново за да позволите наAdwCleaner да рестартира компютъра и да довърши почистващия процес. [*]След рестарта ще се появи автоматично лог файл с името (AdwCleaner[s0].txt). [*]Прикачете съдържанието му в следващия си коментар [*]Копие на лог файла можеш да намериш и в папката C:AdwCleaner.

 

 

 

СТЪПКА 2

 

 

 

Моля изтеглете Junkware Removal Tool на вашия десктоп.

• [*]Спрете временно работата на защитните програми. [*]Стартирайте инструмента

JRT.exe [*]Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата. [*]Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши. [*]Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt). [*]Моля копирайте съдържанието на лог файла в следващия си пост.

 

 

 

СТЪПКА 3

 

 

 

Изтеглете Malwarebytes' Anti-Malware

• [*]Кликнете два пъти върху

mbam-setup.exe, за да инсталирате програмата. [*]Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish. [*]Ако има намерени обновявания, тя ще ги изтегли и инсталира. [*]Стартирайте програмата и изберете "Perform Quick Scan", след това кликнете на Scan. [*]Сканирането ще отнеме малко време, затова моля да бъдете търпеливи. [*]Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата. [*]Уверете се, че на всички редове има отметки (ако няма на някои обекти ги поставете ръчно), и кликнете на Remove Selected. [*]Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. [*]Прикачете този лог в следващия си коментар в темата.

Забележка: Ако MalwareBytes'Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поискада рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

# AdwCleaner v3.012 - Report created 22/11/2013 at 13:50:28# Updated 11/11/2013 by Xplode# Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)# Username : тони - TONI# Running from : D:Изтеглениadwcleaner.exe# Option : Clean***** [ Services ] ********** [ Files / Folders ] *****Folder Deleted : C:UsersтониAppDataLocalthinstallFolder Deleted : C:UsersB8FA~1AppDataLocalTempFoxTabFolder Deleted : C:UsersтониAppDataRoamingthinstallFolder Deleted : C:UsersтониAppDataRoamingMozillaFirefoxProfilesvewgfz42.defaultFoxTab***** [ Shortcuts ] ********** [ Registry ] *****Key Deleted : HKLMSOFTWAREMicrosoftTracingau__rasapi32Key Deleted : HKLMSOFTWAREMicrosoftTracingau__rasmancsKey Deleted : HKCUSoftwareba4c12bee3027d94da5c81db2d196bfdKey Deleted : HKLMSOFTWAREClassesInterface{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}Key Deleted : HKLMSOFTWAREClassesInterface{BCFF5F55-6F44-11D2-86F8-00104B265ED5}Key Deleted : HKCUSoftwareAppDataLowSProtectorKey Deleted : HKLMSoftwareOpenCandyKey Deleted : HKLMSoftwareSP GlobalKey Deleted : HKLMSoftwareSProtector***** [ Browsers ] *****- Internet Explorer v0.0.0.0- Mozilla Firefox v26.0 (bg)[ File : C:UsersтониAppDataRoamingMozillaFirefoxProfilesvewgfz42.defaultprefs.js ]Line Deleted : user_pref("aol_toolbar.default.homepage.check", false);Line Deleted : user_pref("aol_toolbar.default.search.check", false);Line Deleted : user_pref("browser.search.defaulturl", "hxxp://websearch.pur-esult.info/?pid=724&r=2013/11/20&hid=16423082417246540727&lg=EN&cc=BG&l=1&q=");Line Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0);Line Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "WebSearch");Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "WebSearch");Line Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://websearch.pur-esult.info/?pid=724&r=2013/11/20&hid=16423082417246540727&lg=EN&cc=BG");Line Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://websearch.pur-esult.info/?pid=724&r=2013/11/20&hid=16423082417246540727&lg=EN&cc=BG&l=1&q=");Line Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");Line Deleted : user_pref("sweetim.toolbar.searchguard.enable", "");*************************AdwCleaner[R0].txt - [2818 octets] - [22/11/2013 13:49:39]AdwCleaner[s0].txt - [2743 octets] - [22/11/2013 13:50:28]########## EOF - C:AdwCleanerAdwCleaner[s0].txt - [2803 octets] ########## 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Junkware Removal Tool (JRT) by ThisisuVersion: 6.0.8 (11.05.2013:1)OS: Windows 7 Ultimate x86Ran by в®­Ё on ЇҐв 22.11.2013 Ј. at 13:55:29,52~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Services~~~ Registry Values~~~ Registry Keys~~~ Files~~~ Folders~~~ FireFoxEmptied folder: C:Usersв®­ЁAppDataRoamingmozillafirefoxprofilesvewgfz42.defaultminidumps [23 files]~~~ Event Viewer Logs were cleared~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Scan was completed on ЇҐв 22.11.2013 Ј. at 13:57:01,25Computer was rebootedEnd of JRT log~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 

 

Malwarebytes Anti-Malware (Trial) 1.75.0.1300www.malwarebytes.orgDatabase version: v2013.11.22.06Windows 7 Service Pack 1 x86 NTFSInternet Explorer 8.0.7601.17514тони :: TONI [administrator]Protection: Enabled22.11.2013 г. 13:59:43 ч.mbam-log-2013-11-22 (13-59-43).txtScan type: Quick scanScan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUMScan options disabled: P2PObjects scanned: 221745Time elapsed: 4 minute(s), 14 second(s)Memory Processes Detected: 0(No malicious items detected)Memory Modules Detected: 0(No malicious items detected)Registry Keys Detected: 0(No malicious items detected)Registry Values Detected: 0(No malicious items detected)Registry Data Items Detected: 0(No malicious items detected)Folders Detected: 0(No malicious items detected)Files Detected: 2C:ProgramDataInstallMate{6B1C9391-5B22-42F2-A019-1300B0FFB167}Custom.dll (PUP.Optional.InstalleRex) -> Quarantined and deleted successfully.C:ProgramDataInstallMate{EA5DF087-586A-407B-A290-104831BED271}Custom.dll (PUP.Optional.InstalleRex) -> Quarantined and deleted successfully.(end) 

Сега остава:

 

Изтрийте цялата папкта InstallMate:

 

C:ProgramDataInstallMate

 

Проверете следния файл => C:Program FilesSk-Enhancerpsupport.dll на VirusTotal за анализ с бутоните "Избиране" и след това "Сканиране".

Ако файла вече е бил анализиран натиснете бутона "Повторно анализиране"!

Публикуайте линка с резултатите (а не самите резултати) в следващия си коментар.

 

Също така:

 

1.Изтеглете Hitman Pro.

 

• [*]За

32-битова система - . [*]За 64-битова система -

2.Стартирайте програмата.
3.След като сте стартирали програмата като кликнете върху иконата и натиснете бутона „Напред“ като се съгласите с лицензионното споразумение (EULA).
4.Сложете отметка пред "Не, искам да завърша еднократно сканиране на компютъра".

5.Натиснете бутона „Напред“.

6.Програмата ще започне да сканира. Времето за сканиране е около 2 минути.

7.След завършване на сканирането от списъка с намерените неща (ако има такива) изберете Apply to all => Ignore.

8.Натиснете "Next" и след това натиснете "Изнеси резултата в XML file" и запазете лог файла на десктопа.

9.Архивирайте файла и го прикачете в следващия си коментар или копирайте съдържанието му в следващия си коментар.

 

 

 

И да направим една проверка на файловата система:

 

Натиснете start => въведете в полето за търсене CMD => кликнете върху файла CMD.exe и изберете Run as administrator => напишете CMD.exe В конзолата  въведете командата:

chkdsk c: /x /f /r => натиснете Enter

 

Съгласете се с Y на диалоговия прозорец.

Рестартирайте компютъра и би трябвало проверката да започне.

След това вижте какви са били резултатите.

 

Рапорта от проверката ще намерите тук:

Start => в полето за търсене въведете eventvwr.msc => applications => събитие WinInit Event ID 1001

Kопирайте рапорта в следващия си пост.

 

Поздрави!

https://www.virustotal.com/bg/file/40e8c75c609b8cac4b19208a6ca9d2a24b908661e48ca4df68ffd43d5ac7f9cc/analysis/1385122902/

Не ми дава да споделя лога бил прекалено дълъг,какво да направя?

Редактирано 22 ноември 201312 г. от trifon81 (преглед на промените)

Изтрийте файла:

 

C:Program FilesSk-Enhancerpsupport.dll

 

и папката

 

C:ProgramDataInstallMate (ако още не сте)

 

Лога качете на адрес http://file.bg/ и публикувайте линка към него в следващия си пост.

 

Накрая не забравяйте проверката на дял C: защото май имате лоши сектори:
 

 

Error: (11/21/2013 03:25:19 PM) (Source: Disk) (User: )
Description: The device, DeviceHarddisk1DR1, has a bad block.

 

http://file.bg/c271150etGzA

 

Log Name:   ApplicationSource:   Microsoft-Windows-WininitDate:   22.11.2013 г. 14:55:09 ч.Event ID:   1001Task Category: NoneLevel: InformationKeywords:   ClassicUser:   N/AComputer:   toniDescription:Checking file system on C:The type of the file system is NTFS.A disk check has been scheduled.Windows will now check the disk.    CHKDSK is verifying files (stage 1 of 5)...  125184 file records processed.    File verification completed.  112 large file records processed.   0 bad file records processed.   2 EA records processed.   60 reparse records processed.  CHKDSK is verifying indexes (stage 2 of 5)...  166542 index entries processed.  Index verification completed.  0 unindexed files scanned. 0 unindexed files recovered.  CHKDSK is verifying security descriptors (stage 3 of 5)...  125184 file SDs/SIDs processed.  Cleaning up 343 unused index entries from index $SII of file 0x9.Cleaning up 343 unused index entries from index $SDH of file 0x9.Cleaning up 343 unused security descriptors.Security descriptor verification completed.  20680 data files processed.    CHKDSK is verifying Usn Journal...  36121424 USN bytes processed.  Usn Journal verification completed.CHKDSK is verifying file data (stage 4 of 5)...  125168 files processed.  File data verification completed.CHKDSK is verifying free space (stage 5 of 5)...  6350114 free clusters processed.  Free space verification is complete.CHKDSK discovered free space marked as allocated in themaster file table (MFT) bitmap.CHKDSK discovered free space marked as allocated in the volume bitmap.Windows has made corrections to the file system.  51199670 KB total disk space.  25523072 KB in 94514 files. 47756 KB in 20681 indexes. 0 KB in bad sectors.   228382 KB in use by the system. 65536 KB occupied by the log file.  25400460 KB available on disk.   4096 bytes in each allocation unit.  12799917 total allocation units on disk. 6350115 allocation units available on disk.Internal Info:00 e9 01 00 06 c2 01 00 f5 1e 03 00 00 00 00 00  ................4a 01 00 00 3c 00 00 00 00 00 00 00 00 00 00 00  J...<...........68 8e 0b 00 50 01 0a 00 28 1a 0a 00 00 00 0a 00  h...P...(.......Windows has finished checking your disk.Please wait while your computer restarts.Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">  <System>   <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />   <EventID Qualifiers="16384">1001</EventID>   <Version>0</Version>   <Level>4</Level>   <Task>0</Task>   <Opcode>0</Opcode>   <Keywords>0x80000000000000</Keywords>   <TimeCreated SystemTime="2013-11-22T12:55:09.000000000Z" />   <EventRecordID>21053</EventRecordID>   <Correlation />   <Execution ProcessID="0" ThreadID="0" />   <Channel>Application</Channel>   <Computer>toni</Computer>   <Security />  </System>  <EventData>   <Data>Checking file system on C:The type of the file system is NTFS.A disk check has been scheduled.Windows will now check the disk.    CHKDSK is verifying files (stage 1 of 5)...  125184 file records processed.    File verification completed.  112 large file records processed.   0 bad file records processed.   2 EA records processed.   60 reparse records processed.  CHKDSK is verifying indexes (stage 2 of 5)...  166542 index entries processed.  Index verification completed.  0 unindexed files scanned. 0 unindexed files recovered.  CHKDSK is verifying security descriptors (stage 3 of 5)...  125184 file SDs/SIDs processed.  Cleaning up 343 unused index entries from index $SII of file 0x9.Cleaning up 343 unused index entries from index $SDH of file 0x9.Cleaning up 343 unused security descriptors.Security descriptor verification completed.  20680 data files processed.    CHKDSK is verifying Usn Journal...  36121424 USN bytes processed.  Usn Journal verification completed.CHKDSK is verifying file data (stage 4 of 5)...  125168 files processed.  File data verification completed.CHKDSK is verifying free space (stage 5 of 5)...  6350114 free clusters processed.  Free space verification is complete.CHKDSK discovered free space marked as allocated in themaster file table (MFT) bitmap.CHKDSK discovered free space marked as allocated in the volume bitmap.Windows has made corrections to the file system.  51199670 KB total disk space.  25523072 KB in 94514 files. 47756 KB in 20681 indexes. 0 KB in bad sectors.   228382 KB in use by the system. 65536 KB occupied by the log file.  25400460 KB available on disk.   4096 bytes in each allocation unit.  12799917 total allocation units on disk. 6350115 allocation units available on disk.Internal Info:00 e9 01 00 06 c2 01 00 f5 1e 03 00 00 00 00 00  ................4a 01 00 00 3c 00 00 00 00 00 00 00 00 00 00 00  J...&lt;...........68 8e 0b 00 50 01 0a 00 28 1a 0a 00 00 00 0a 00  h...P...(.......Windows has finished checking your disk.Please wait while your computer restarts.</Data>  </EventData></Event>

 

Проверка на С с дефрагментираща програма ли?

Тук ми дава червен удивителен знак и затова копирам и него:

Log Name:   ApplicationSource:   Microsoft-Windows-WMIDate:   22.11.2013 г. 14:56:02 ч.Event ID:   10Task Category: NoneLevel: ErrorKeywords:   ClassicUser:   N/AComputer:   toniDescription:Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">  <System>   <Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />   <EventID Qualifiers="49152">10</EventID>   <Version>0</Version>   <Level>2</Level>   <Task>0</Task>   <Opcode>0</Opcode>   <Keywords>0x80000000000000</Keywords>   <TimeCreated SystemTime="2013-11-22T12:56:02.000000000Z" />   <EventRecordID>21066</EventRecordID>   <Correlation />   <Execution ProcessID="0" ThreadID="0" />   <Channel>Application</Channel>   <Computer>toni</Computer>   <Security />  </System>  <EventData>   <Data>//./root/CIMV2</Data>   <Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data>   <Data>0x80041003</Data>  </EventData></Event>

Редактирано 22 ноември 201312 г. от trifon81 (преглед на промените)

Не, проверката на дял C: е инструмента Check Disk, не Disk Defragmenter.

 

Инструмента е оправил някои грешки по файловата система на дял C:

 

Не е зле да пуснете една проверка и на останалите дялове:

 

просто заменете c: с буквите на другите дялове

 

chkdsk d: /x /f /r

chkdsk e: /x /f /r

 

и т.н. и публикувайте и техните логове.

 

Колкото за другата грешка в червен цвят, то изтеглете и стартирайте следния инструмент и следвайте инструкциите...

 

Лога от HitmanPro ще го погледна после, че в момента съм на работа.

Ок, лога от HitmanPro е наред...намерените неща са вече премахнати от нас.

Сега архивирайте папката C:FRSTQuarantine и качете архива на следния адрес => http://file.bg/

Публикувайте линка в следващия си пост и след това изтрийте архива, но не трийте самата папка. (нея ще я изтрием по-друг начин).

 

Остава да публикувате резултатите от проверките за грешки за останалите дялове и след това финалната проверка:

 

Изтеглете Security Check от screen317 от този линк или и го запаметете на вашия десктоп.

• [*]Кликнете два пъти върху

SecurityCheck.exe и следвайте инструкциите. [*]Накрая, автоматично ще се отвори текстов документ, наречен checkup.txt, моля поставете съдържанието му в следващия Ви коментар в тази тема. [*]Направете и нова проверка с DDS и прикачете двата файла които ще се създадат.

 

Накрая пишете какво е положението.

И един въпрос - защо използвате тази архаична версия на avast! ??? По-добре или обновете до последната версия 9 2014 или се насочете към алтернативна програма за защита!

 

 

Поздрави!

Tъкмо правя проверка на D,но вече 2 часа трае и още доста има,щом стане ще пусна и тях!

Редактирано 22 ноември 201312 г. от B-boy[StyLe]
Премахнат опасен линк :) (преглед на промените)

Мерси за папката (премахнат линка за да не се опари някой).

На финала сме така че, когато се проверят дялотове тогава ще продължим - проверката ще отнеме доста време ако дяловете са големи и пълни с информация, но е за добро.

Със securitycheck ще проверим за стари програми нужни да се обновят и след това ще ви кажа как да изтриете използваните от нас неща.

Бацилите вече ги почистихме така че няма страшно...

Results of screen317's Security Check version 0.99.77  
 Windows 7 Service Pack 1 x86 (UAC is disabled!)  
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled!  
 Windows Firewall Disabled!  
avast! antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:`````````
 CCleaner    
 Adobe Flash Player  11.7.700.232  
 Adobe Reader XI  
 Mozilla Firefox (26.0)
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Alwil Software Avast4 aswUpdSv.exe
 Alwil Software Avast4 ashServ.exe
 Alwil Software Avast4 ashDisp.exe
 Alwil Software Avast4 ashMaiSv.exe
 Alwil Software Avast4 ashWebSv.exe
 Malwarebytes' Anti-Malware mbamscheduler.exe   
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 1%
````````````````````End of Log``````````````````````
 

С тази версия на аваст съм,понеже нея ми препоръча един човек,който уж разбира!

A за проверката на другия дял на харда пак ли да търся същото събитие?

А ето:

Log Name:   Application
Source:   Chkdsk
Date:   22.11.2013 г. 18:53:50 ч.
Event ID:   26214
Task Category: None
Level: Information
Keywords:   Classic
User:   N/A
Computer:   toni
Description:
Chkdsk was executed in read/write mode.  

Checking file system on D:
The type of the file system is NTFS.
Volume label is Видео,музика.

CHKDSK is verifying files (stage 1 of 5)...
  12288 file records processed.    

File verification completed.
  0 large file records processed.    

  0 bad file records processed.    

  0 EA records processed.    

  0 reparse records processed.  

CHKDSK is verifying indexes (stage 2 of 5)...
  14782 index entries processed.  

Index verification completed.
  0 unindexed files scanned.  

  0 unindexed files recovered.  

CHKDSK is verifying security descriptors (stage 3 of 5)...
  12288 file SDs/SIDs processed.  

Security descriptor verification completed.
  1248 data files processed.    

CHKDSK is verifying Usn Journal...
  7102200 USN bytes processed.  

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
  12272 files processed.  

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
  184535633 free clusters processed.  

Free space verification is complete.
Windows has checked the file system and found no problems.

 905081855 KB total disk space.
 166822212 KB in 9766 files.
  3992 KB in 1249 indexes.
0 KB in bad sectors.
  113115 KB in use by the system.
65536 KB occupied by the log file.
 738142536 KB available on disk.

  4096 bytes in each allocation unit.
 226270463 total allocation units on disk.
 184535634 allocation units available on disk.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
  <Provider Name="Chkdsk" />
  <EventID Qualifiers="0">26214</EventID>
  <Level>4</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2013-11-22T16:53:50.000000000Z" />
  <EventRecordID>21126</EventRecordID>
  <Channel>Application</Channel>
  <Computer>toni</Computer>
  <Security />
  </System>
  <EventData>
  <Data>

Checking file system on D:
The type of the file system is NTFS.
Volume label is Видео,музика.

CHKDSK is verifying files (stage 1 of 5)...
  12288 file records processed.    

File verification completed.
  0 large file records processed.    

  0 bad file records processed.    

  0 EA records processed.    

  0 reparse records processed.  

CHKDSK is verifying indexes (stage 2 of 5)...
  14782 index entries processed.  

Index verification completed.
  0 unindexed files scanned.  

  0 unindexed files recovered.  

CHKDSK is verifying security descriptors (stage 3 of 5)...
  12288 file SDs/SIDs processed.  

Security descriptor verification completed.
  1248 data files processed.    

CHKDSK is verifying Usn Journal...
  7102200 USN bytes processed.  

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
  12272 files processed.  

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
  184535633 free clusters processed.  

Free space verification is complete.
Windows has checked the file system and found no problems.

 905081855 KB total disk space.
 166822212 KB in 9766 files.
  3992 KB in 1249 indexes.
0 KB in bad sectors.
  113115 KB in use by the system.
65536 KB occupied by the log file.
 738142536 KB available on disk.

  4096 bytes in each allocation unit.
 226270463 total allocation units on disk.
 184535634 allocation units available on disk.
</Data>
  <Binary>00300000132B00008345000000000000F8000000000000000000000000000000</Binary>
  </EventData>
</Event>

DDS (Ver_2011-09-30.01) - NTFS_x86
Internet Explorer: 8.0.7601.17514
Run by тони at 19:19:50 on 2013-11-22
Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.2047.1001 [GMT 2:00]
.
AV: avast! antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:Windowssystem32wininit.exe
C:Windowssystem32lsm.exe
C:Windowssystem32nvvsvc.exe
C:Program FilesNVIDIA CorporationDisplaynvxdsync.exe
C:Windowssystem32nvvsvc.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program FilesRealtekAudioHDARtHDVCpl.exe
C:Program FilesAlwil SoftwareAvast4ashDisp.exe
C:WindowsPixArtPAC7302Monitor.exe
C:Program FilesNVIDIA CorporationNVIDIA Update CoreNvTmru.exe
C:Program FilesCommon FilesInterVideoSchSvrSchSvr.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesNokiaNokia SuiteNokiaSuite.exe
C:Program FilesInterVideoCommonBinWinCinemaMgr.exe
C:Program FilesNVIDIA CorporationDisplaynvtray.exe
C:WindowsSystem32spoolsv.exe
C:Program FilesCommon FilesAdobeARM1.0armsvc.exe
C:Program FilesMalwarebytes' Anti-Malwarembamscheduler.exe
C:Windowssystem32taskhost.exe
C:Program FilesMalwarebytes' Anti-Malwarembamservice.exe
C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamsvc.exe
C:Program FilesMalwarebytes' Anti-Malwarembamgui.exe
C:Program FilesNVIDIA CorporationNVIDIA Update Coredaemonu.exe
c:Program FilesCommon FilesProtexisLicense ServicePsiService_2.exe
C:Windowssystem32SearchIndexer.exe
C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamsvc.exe
C:Windowssystem32conhost.exe
C:Program FilesPC Connectivity SolutionServiceLayer.exe
C:Program FilesPC Connectivity SolutionTransportsNclUSBSrv.exe
C:Program FilesPC Connectivity SolutionTransportsNclMSBTSrvEx.exe
C:Program FilesWindows Media Playerwmpnetwk.exe
D:kividialer.exe
C:Program FilesSkypePhoneSkype.exe
C:Windowssystem32taskhost.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:UsersтониAppDataRoamingMozillaFirefoxProfilesvewgfz42.defaultextensions{E173B749-DB5B-4fd2-BA0E-94ECEA0CA55B}componentsafom.exe
C:Program FilesMozilla Firefoxplugin-container.exe
C:Windowssystem32conhost.exe
C:Windowssystem32wbemwmiprvse.exe
C:Windowssystem32svchost.exe -k DcomLaunch
C:Windowssystem32svchost.exe -k RPCSS
C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted
C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted
C:Windowssystem32svchost.exe -k netsvcs
C:Windowssystem32svchost.exe -k LocalService
C:Windowssystem32svchost.exe -k NetworkService
C:Windowssystem32svchost.exe -k LocalServiceNoNetwork
C:Windowssystem32svchost.exe -k imgsvc
C:Windowssystem32svchost.exe -k bthsvcs
C:Windowssystem32svchost.exe -k NetworkServiceNetworkRestricted
C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation
C:WindowsSystem32svchost.exe -k secsvcs
.
============== Pseudo HJT Report ===============
.
uRun: [sidebar] c:program fileswindows sidebarsidebar.exe /autoRun
uRun: [NokiaSuite.exe] c:program filesnokianokia suiteNokiaSuite.exe -tray
mRun: [RtHDVCpl] c:program filesrealtekaudiohdaRtHDVCpl.exe -s
mRun: [avast!] "c:program filesalwil softwareavast4ashDisp.exe"
mRun: [PAC7302_Monitor] c:windowspixartpac7302Monitor.exe
mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe"
mRun: [Nvtmru] "c:program filesnvidia corporationnvidia update corenvtmru.exe"
mRun: [shadowPlay] c:windowssystem32rundll32.exe c:windowssystem32nvspcap.dll,ShadowPlayOnSystemStart
mRun: [WinDVR SchSvr] "c:program filescommon filesintervideoschsvrSchSvr.exe"
StartupFolder: c:progra~2micros~1windowsstartm~1programsstartupinterv~1.lnk - c:program filesintervideocommonbinWinCinemaMgr.exe
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
TCP: Interfaces{104A1224-66E9-48A0-A654-B90A8906892D} : NameServer = 10.0.0.100
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll
SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - c:usersтониappdataroamingmozillafirefoxprofilesvewgfz42.default
.
============= SERVICES / DRIVERS ===============
.
R1 aswSP;avast! Self Protection;c:windowssystem32driversaswSP.sys [2013-11-4 114768]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:program filescommon filesadobearm1.0armsvc.exe [2013-9-5 65640]
R2 aswFsBlk;aswFsBlk;c:windowssystem32driversaswFsBlk.sys [2013-11-4 20560]
R2 aswMonFlt;aswMonFlt;c:windowssystem32driversaswMonFlt.sys [2013-11-4 53328]
R2 avast! Antivirus;avast! Antivirus;c:program filesalwil softwareavast4ashServ.exe [2013-11-4 138680]
R2 MBAMScheduler;MBAMScheduler;c:program filesmalwarebytes' anti-malwarembamscheduler.exe [2013-11-22 418376]
R2 MBAMService;MBAMService;c:program filesmalwarebytes' anti-malwarembamservice.exe [2013-11-22 701512]
R2 NvStreamSvc;NVIDIA Streamer Service;c:program filesnvidia corporationnvstreamsrvnvstreamsvc.exe [2013-11-4 14652704]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:program filesnvidia corporationnvidia update coredaemonu.exe [2013-11-4 1914656]
R3 3xHybrid;ASUSTek SAA713x PCI Card;c:windowssystem32drivers3xHybrid.sys [2009-12-23 2831232]
R3 MBAMProtector;MBAMProtector;c:windowssystem32driversmbam.sys [2013-11-22 22856]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:windowssystem32driversnvvad32v.sys [2013-11-4 33568]
R3 RTL8167;Realtek 8167 NT Driver;c:windowssystem32driversRt86win7.sys [2013-11-4 552080]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:windowsmicrosoft.netframeworkv4.0.30319mscorsvw.exe [2013-9-11 105144]
S2 SkypeUpdate;Skype Updater;c:program filesskypeupdaterUpdater.exe [2013-9-5 171680]
S3 avast! Mail Scanner;avast! Mail Scanner;c:program filesalwil softwareavast4ashMaiSv.exe [2013-11-4 254040]
S3 avast! Web Scanner;avast! Web Scanner;c:program filesalwil softwareavast4ashWebSv.exe [2013-11-4 352920]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:windowssystem32driversb57nd60x.sys [2009-7-14 229888]
S3 dmvsc;dmvsc;c:windowssystem32driversdmvsc.sys [2010-11-21 62464]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:program filesmozilla maintenance servicemaintenanceservice.exe [2013-11-4 119408]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card;c:windowssystem32driversPh3xIB32.sys [2009-6-10 1311232]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:windowssystem32driversrdpvideominiport.sys [2010-11-20 15872]
S3 Synth3dVsc;Synth3dVsc;c:windowssystem32driversSynth3dVsc.sys [2010-11-21 77184]
S3 terminpt;Microsoft Remote Desktop Input Driver;c:windowssystem32driversterminpt.sys [2010-11-21 25600]
S3 TsUsbGD;Remote Desktop Generic USB Device;c:windowssystem32driversTsUsbGD.sys [2010-11-20 27264]
SUnknown TsUsbFlt;TsUsbFlt; [x]
SUnknown tsusbhub;tsusbhub; [x]
.
=============== Created Last 30 ================
.
2013-11-22 12:58:06  62576  ----a-w-  c:programdatamicrosoftwindows defenderdefinition updates{12ba7bc0-a838-426d-b243-b159a2192305}offreg.dll
2013-11-22 12:23:26  --------  d-----w-  c:programdataHitmanPro
2013-11-22 11:58:11  --------  d-----w-  c:usersтониappdataroamingMalwarebytes
2013-11-22 11:58:04  --------  d-----w-  c:programdataMalwarebytes
2013-11-22 11:58:03  22856  ----a-w-  c:windowssystem32driversmbam.sys
2013-11-22 11:58:03  --------  d-----w-  c:program filesMalwarebytes' Anti-Malware
2013-11-22 11:53:52  --------  d-----w-  c:windowsERUNT
2013-11-22 11:49:31  --------  d-----w-  C:AdwCleaner
2013-11-22 09:23:31  --------  d-----w-  C:FRST
2013-11-22 09:08:45  --------  d-----w-  c:usersєюэшappdatalocalMicrosoft
2013-11-20 17:23:31  --------  d-----w-  c:programdataQuickSet
2013-11-20 17:23:28  --------  d-----w-  c:program filesSk-Enhancer
2013-11-20 17:23:23  --------  d-----w-  c:program filesYoutubeAdblocker
2013-11-20 17:23:13  --------  d-----w-  c:program filessurf And kkeepp
2013-11-19 06:54:02  --------  d-----w-  c:windowsMigration
2013-11-17 09:33:08  --------  d-----w-  c:program filescommon filesInterVideo
2013-11-17 09:33:04  204800  ----a-w-  c:windowssystem32IVIresizeW7.dll
2013-11-17 09:33:04  20480  ----a-w-  c:windowssystem32IVIresize.dll
2013-11-17 09:33:04  200704  ----a-w-  c:windowssystem32IVIresizeA6.dll
2013-11-17 09:33:04  192512  ----a-w-  c:windowssystem32IVIresizeP6.dll
2013-11-17 09:33:04  192512  ----a-w-  c:windowssystem32IVIresizeM6.dll
2013-11-17 09:33:04  188416  ----a-w-  c:windowssystem32IVIresizePX.dll
2013-11-17 09:33:03  --------  d-----w-  c:program filesInterVideo
2013-11-17 09:32:42  225280  ----a-w-  c:program filescommon filesinstallshieldiscriptIScript.dll
2013-11-13 12:23:31  --------  d-----w-  c:usersтониappdataroamingRovio
2013-11-13 12:22:02  --------  d-----w-  c:usersтониappdataroamingRovio Entertainment Ltd
2013-11-11 08:23:04  71048  ----a-w-  c:windowssystem32FlashPlayerCPLApp.cpl
2013-11-11 08:23:04  689376  ----a-w-  c:windowssystem32FlashPlayerApp.exe
2013-11-11 07:35:16  --------  d-----w-  c:programdataWinterSoft
2013-11-07 13:11:07  --------  d-----w-  c:usersтониappdataroamingAshampoo
2013-11-07 11:22:26  3649536  ----a-w-  c:windowssystem32x264vfw.dll
2013-11-07 11:22:26  216064  ----a-w-  c:windowssystem32lagarith.dll
2013-11-07 11:22:25  650752  ----a-w-  c:windowssystem32xvidcore.dll
2013-11-07 11:22:25  243200  ----a-w-  c:windowssystem32xvidvfw.dll
2013-11-07 11:22:25  122880  ----a-w-  c:windowssystem32ac3acm.acm
2013-11-07 11:22:24  217176  ----a-w-  c:windowssystem32unrar.dll
2013-11-07 11:22:22  112640  ----a-w-  c:windowssystem32ff_vfw.dll
2013-11-07 11:22:19  --------  d-----w-  c:program filesK-Lite Codec Pack
2013-11-05 11:44:27  --------  d-----w-  c:windowspss
2013-11-05 09:13:38  --------  d-----w-  c:program filesVS Revo Group
2013-11-05 09:02:01  --------  d-----w-  c:program filesCCleaner
2013-11-05 07:55:17  --------  d-----w-  c:usersтониappdataroamingNokia Suite
2013-11-05 07:55:17  --------  d-----w-  c:usersтониappdataroamingNokia
2013-11-05 07:34:10  --------  d-----w-  c:usersтониappdataroamingvloader-bg
2013-11-05 07:23:38  --------  d-----w-  c:usersтониappdataroamingPC Suite
2013-11-05 07:23:08  --------  d-----w-  c:programdataNokia
2013-11-05 07:23:08  --------  d-----w-  c:program filescommon filesNokia
2013-11-05 07:22:49  19072  ----a-w-  c:windowssystem32driverspccsmcfd.sys
2013-11-05 07:22:43  --------  d-----w-  c:program filesPC Connectivity Solution
2013-11-05 07:22:32  75264  ----a-w-  c:windowssystem32nmwcdcls.dll
2013-11-05 07:22:00  --------  d-----w-  c:programdataNokiaInstallerCache
2013-11-05 07:22:00  --------  d-----w-  c:program filesNokia
2013-11-05 07:21:48  --------  d-----w-  c:program filesvloader-bg
2013-11-05 04:04:52  --------  d-----w-  c:windowsPanther
2013-11-05 04:04:39  --------  d-sh--w-  C:Boot
2013-11-04 21:37:03  --------  d-----w-  c:usersтониappdataroamingWinRAR
2013-11-04 21:19:28  --------  d-----w-  c:usersтониappdataroamingPotPlayerMini
2013-11-04 20:46:27  --------  d-----w-  c:programdataKONAMI
2013-11-04 20:12:10  6656  ----a-w-  c:windowssystem32CoInst_071029.dll
2013-11-04 20:12:10  458752  ----a-w-  c:windowssystem32driversPAC7302.SYS
2013-11-04 20:12:10  40960  ----a-w-  c:windows98Setup.exe
2013-11-04 20:12:10  119568  ----a-w-  c:windowssystem32KSPR1527.rra
2013-11-04 20:12:10  --------  d-----w-  c:program filesANC
2013-11-04 20:12:09  14336  ----a-w-  c:windowssystem32P7302USD.dll
2013-11-04 20:12:09  129024  ----a-w-  c:windowssystem32SP7302.ax
2013-11-04 20:12:09  --------  d-----w-  c:windowsPixArt
2013-11-04 20:12:09  --------  d-----w-  c:program filescommon filesPAC7302
2013-11-04 20:10:49  --------  d-----w-  c:program filesMediaCoder
2013-11-04 19:53:01  --------  d-----w-  C:Кошче
2013-11-04 19:37:30  53328  ----a-w-  c:windowssystem32driversaswMonFlt.sys
2013-11-04 19:37:30  499712  ----a-w-  c:windowssystem32MSVCP71.dll
2013-11-04 19:37:30  348160  ----a-w-  c:windowssystem32MSVCR71.dll
2013-11-04 19:37:30  1060864  ----a-w-  c:windowssystem32MFC71.dll
2013-11-04 19:22:03  --------  d-----w-  c:programdataAshampoo
2013-11-04 19:22:03  --------  d-----w-  c:program filesAshampoo
2013-11-04 19:18:13  --------  d-----w-  c:windowssystem32driversbg-BG
2013-11-04 19:18:13  --------  d-----w-  c:windowsbg-BG
2013-11-04 19:18:11  --------  d-----w-  c:windowssystem32wbembg-BG
2013-11-04 19:13:26  2422272  ----a-w-  c:windowssystem32wucltux.dll
2013-11-04 19:13:22  88576  ----a-w-  c:windowssystem32wudriver.dll
2013-11-04 19:13:18  33792  ----a-w-  c:windowssystem32wuapp.exe
2013-11-04 19:13:18  171904  ----a-w-  c:windowssystem32wuwebv.dll
2013-11-04 18:49:53  --------  d-----w-  c:program filesDaum
2013-11-04 18:49:19  --------  d-----w-  c:usersтониappdataroamingAIMP3
2013-11-04 18:49:17  --------  d-----w-  c:program filesAIMP3
2013-11-04 18:48:21  --------  d-----w-  c:usersтониappdataroamingMacromedia
2013-11-04 18:48:21  --------  d-----w-  c:usersтониappdataroamingAdobe
2013-11-04 18:47:06  --------  d-----w-  c:usersтониappdataroamingNVIDIA
2013-11-04 18:46:59  --------  d-----w-  c:usersтониappdataroamingCorel
2013-11-04 18:46:58  7796464  ----a-w-  c:programdatamicrosoftwindows defenderdefinition updates{12ba7bc0-a838-426d-b243-b159a2192305}mpengine.dll
2013-11-04 18:46:58  --------  d-----w-  c:usersтониappdataroamingUlead Systems
2013-11-04 18:46:57  238872  ------w-  c:windowssystem32MpSigStub.exe
2013-11-04 18:45:39  --------  d-----w-  c:programdataeSellerate
2013-11-04 18:45:26  --------  d-----w-  c:program filesSmartSound Software
2013-11-04 18:45:25  --------  d-----w-  c:programdataSmartSound Software Inc
2013-11-04 18:45:01  --------  d--h--w-  c:windowsmsdownld.tmp
2013-11-04 18:45:01  --------  d-----w-  c:windowsRegisteredPackages
2013-11-04 18:43:26  --------  d-----w-  c:program filescommon filesProtexis
2013-11-04 18:43:21  --------  d-----w-  c:programdataCorel
2013-11-04 18:39:20  --------  d-----w-  c:program filesCorel
2013-11-04 18:37:02  --------  d-----w-  c:usersтониappdataroamingSkype
2013-11-04 18:36:59  --------  d-----r-  c:program filesSkype
2013-11-04 18:35:52  --------  d-----w-  c:usersтониappdataroaminguTorrent
2013-11-04 18:32:02  --------  d-----w-  c:usersтониappdataroamingMozilla
2013-11-04 18:31:57  --------  d-----w-  c:program filesMozilla Maintenance Service
2013-11-04 18:28:14  --------  d-----w-  c:program filesHTML Help Workshop
2013-11-04 18:25:26  --------  d-----w-  c:programdataInterVideo
2013-11-04 18:25:02  77824  ----a-w-  c:program filescommon filesinstallshieldengine6intel 32ctor.dll
2013-11-04 18:25:02  32768  ----a-w-  c:program filescommon filesinstallshieldengine6intel 32objectps.dll
2013-11-04 18:25:02  212992  ----a-w-  c:program filescommon filesinstallshieldengine6intel 32ILog.dll
2013-11-04 18:25:02  176128  ----a-w-  c:program filescommon filesinstallshieldengine6intel 32iuser.dll
2013-11-04 18:24:32  955168  ----a-w-  c:windowssystem32nvspcap.dll
2013-11-04 18:23:37  664352  ----a-w-  c:windowssystem32nvvsvc.exe
2013-11-04 18:23:37  62752  ----a-w-  c:windowssystem32nvshext.dll
2013-11-04 18:23:37  4318496  ----a-w-  c:windowssystem32nvcpl.dll
2013-11-04 18:23:37  3036448  ----a-w-  c:windowssystem32nvsvc.dll
2013-11-04 18:23:37  209184  ----a-w-  c:windowssystem32nvmctray.dll
2013-11-04 18:23:30  53024  ----a-w-  c:windowssystem32OpenCL.dll
2013-11-04 18:23:23  --------  d-----w-  c:programdataNVIDIA Corporation
2013-11-04 18:21:35  --------  d-sh--w-  c:windowsInstaller
2013-11-04 18:19:59  --------  d-----w-  c:program filesNVIDIA Corporation
2013-11-04 18:14:59  80488  ----a-w-  c:windowssystem32RtNicProp32.dll
2013-11-04 18:14:59  552080  ----a-w-  c:windowssystem32driversRt86win7.sys
2013-11-04 18:14:59  100896  ----a-w-  c:windowssystem32RTNUninst32.dll
2013-11-04 18:14:55  --------  d-----w-  c:program filesRealtek
2013-11-04 18:14:11  --------  d-----r-  c:usersтониSearches
2013-11-04 18:14:03  --------  d-----w-  c:usersтониappdataroamingIdentities
2013-11-04 18:14:02  --------  d-----r-  c:usersтониContacts
.
==================== Find3M  ====================
.
2013-09-27 23:01:42  33568  ----a-w-  c:windowssystem32driversnvvad32v.sys
2013-09-27 23:01:38  28960  ----a-w-  c:windowssystem32nvaudcap32v.dll
2013-09-11 19:21:54  863344  ----a-w-  c:windowssystem32msvcr110_clr0400.dll
2013-09-11 19:21:54  501872  ----a-w-  c:windowssystem32msvcp110_clr0400.dll
2013-09-11 19:21:54  28776  ----a-w-  c:windowssystem32aspnet_counters.dll
2013-09-11 19:21:54  18000  ----a-w-  c:windowssystem32msvcr100_clr0400.dll
.
============= FINISH: 19:20:22,72 ===============
 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-09-30.01)
.
Microsoft Windows 7 Ultimate
Boot Device: DeviceHarddiskVolume1
Install Date: 4.11.2013 г. 20:13:52
System Uptime: 22.11.2013 г. 14:54:03 (5 hours ago)
.
Motherboard: ASRock |  | G31M-GS.  
Processor: Pentium® Dual-Core  CPU   E5800  @ 3.20GHz | CPUSocket | 3191/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 49 GiB total, 23,937 GiB free.
D: is FIXED (NTFS) - 863 GiB total, 702,872 GiB free.
E: is FIXED (NTFS) - 20 GiB total, 4,21 GiB free.
F: is CDROM (UDF)
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Realtek PCIe GBE Family Controller
Device ID: PCIVEN_10EC&DEV_8168&SUBSYS_81681849&REV_034&1BA3C945&0&00E1
Manufacturer: Realtek
Name: Realtek PCIe GBE Family Controller
PNP Device ID: PCIVEN_10EC&DEV_8168&SUBSYS_81681849&REV_034&1BA3C945&0&00E1
Service: RTL8167
.
==== System Restore Points ===================
.
RP86: 22.11.2013 г. 15:51:25 - Installed Microsoft Fix it 50688
.
==== Installed Programs ======================
.
µTorrent
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader XI (11.0.05)
AIMP3
Angry Birds Star Wars II
Ashampoo Burning Studio 12 v.12.0.5
avast! Antivirus
CANYON USB PC CAMERA
CCleaner
Contents
Corel VideoStudio Ultimate X6
Daum PotPlayer 1.5.39659
GeForce Experience NvStream Client Components
HTML Help Workshop
ICA
InterVideo WinDVR 3
IPM_VS_Pro
K-Lite Mega Codec Pack 10.1.0
Malwarebytes Anti-Malware, версия 1.75.0.1300
MediaCoder 0.6.2
Microsoft .NET Framework 4.5.1
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft_VC100_CRT_SP1_x86
Mozilla Firefox 26.0 (x86 bg)
Mozilla Maintenance Service
MSVC80_x86_v2
MSVC90_x86
Nokia Connectivity Cable Driver
Nokia Suite
NVIDIA Control Panel 331.65
NVIDIA GeForce Experience 1.7.1
NVIDIA Graphics Driver 331.65
NVIDIA Install Application
NVIDIA LED Visualizer 1.0
NVIDIA PhysX
NVIDIA PhysX System Software 9.13.0725
NVIDIA ShadowPlay 9.3.21
NVIDIA Update 9.3.21
NVIDIA Update Components
NVIDIA Virtual Audio 1.2.9
PC Connectivity Solution
PESJP Patch 2013 version 3.0.8
Pro Evolution Soccer 2013
Pro Evolution Soccer 2014
Realtek Ethernet Controller Driver
Realtek High Definition Audio Driver
Revo Uninstaller 1.95
Setup
Share
SHIELD Streaming
Skype™ 6.10
SmartSound Common Data
SmartSound Quicktracks 5
vloader-bg
VSClassic
VSHelp
VSUltimate
Windows Driver Package - Nokia pccsmcfd “LegacyDriver”  (05/31/2012 7.1.2.0)
Windows Media Encoder 9 Series
WinRAR 5.00 (32-битова версия)
.
==== Event Viewer Messages From Past Week ========
.
22.11.2013 г. 14:55:15, Error: Microsoft-Windows-DNS-Client [1012]  - There was an error while attempting to read the local hosts file.
22.11.2013 г. 14:55:14, Error: Microsoft-Windows-DNS-Client [1012]  - There was an error while attempting to read the local hosts file.
22.11.2013 г. 14:54:45, Error: Microsoft-Windows-DNS-Client [1012]  - There was an error while attempting to read the local hosts file.
22.11.2013 г. 14:54:11, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
22.11.2013 г. 14:24:24, Error: Microsoft-Windows-DNS-Client [1012]  - There was an error while attempting to read the local hosts file.
22.11.2013 г. 14:06:51, Error: Microsoft-Windows-DNS-Client [1012]  - There was an error while attempting to read the local hosts file.
22.11.2013 г. 14:06:42, Error: Microsoft-Windows-DNS-Client [1012]  - There was an error while attempting to read the local hosts file.
22.11.2013 г. 14:06:21, Error: Microsoft-Windows-Kernel-Processor-Power [6]  - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
.
==== End Of File ===========================
 

Редактирано 22 ноември 201312 г. от trifon81 (преглед на промените)

Така...финални препоръки:

 

За avast! да не сте гледали следния клип от този пост:

Ако е така, то мога да ви кажа, че човекa направил клипа е доста назад с материала по-отношение поне на компютърната защита.

 

Затова е най-добре да деинсталирате avast! 4 и да инсталирате следната версия:

 

Изтегли: avast! Free Antivirus 9.0.2008.177 Final | BG Mirror

 

 

 

Сега изтеглете следния файл => file.bg/f271278SlkfB и го разархивирайте в папката C:WindowsSystem32driversetc

 

За да почистим използваните от нас неща направи следното:

 

След това изтеглете следния файл => file.bg/f271279oghfk и го запазете в папката от която стартирахте FRST.exe.

Стартирайте FRST.exe и натиснете бутона Fix веднъж!

Това ще изтрие карантинната папка на FRST. Не е нужно да публикувате лог файла.

 

Изтегли OTC.exe и го стартирай. Натиснете бутона CleanUp!.
Рестартирай компютъра, ако те попита!

Изтегли Delfix.exe и го стартирай. Сложи отметка пред Remove disinfection tools (трябва да има такава по-подразбиране, но все пак да си кажа) => натисни бутона Run

Инструмента ще се самоизтрие след като приключи своята задача!

 

Ако има инструменти, папки или логове от използваните от нас неща и те не са се изтрили при горе-споменатите процедури, ги изтрий ръчно.

Като например ръчно ще се наложи да изтриете следната папка c:programdataHitmanPro

 

Други препоръки:

 

Отворете Start => в полето за търсене въведете services.msc => натиснете Enter

 

От списъка намерете следните услуги една по-една и натиснете Stop, а от падащото меню на Startup Type изберете Disabled:

 

NVIDIA Display Driver Service
Windows Media Player Network Sharing Service
Windows Search

 

Отворете Start => в полето за търсене въведете msconfig => натиснете Enter => отидете до Startup и премахнете отметките пред следните програми ако не ги ползвате:

 

mRun: [RtHDVCpl] c:program filesrealtekaudiohdaRtHDVCpl.exe -s
mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe"
mRun: [Nvtmru] "c:program filesnvidia corporationnvidia update corenvtmru.exe"
mRun: [shadowPlay] c:windowssystem32rundll32.exe c:windowssystem32nvspcap.dll,ShadowPlayOnSystemStart
mRun: [WinDVR SchSvr] "c:program filescommon filesintervideoschsvrSchSvr.exe"
StartupFolder: c:progra~2micros~1windowsstartm~1programsstartupinterv~1.lnk - c:program filesintervideocommonbinWinCinemaMgr.exe

 

От Control Panel-a можете да деинсталирате Mozilla Maintenance Servicе

 

Също искам да обърна внимание, ако не знаете, че в момента мрежовата карта на Realtek е изключена от Device Manager-a, така че ако я ползвате си я включете отново:

 

==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Realtek PCIe GBE Family Controller
Device ID: PCIVEN_10EC&DEV_8168&SUBSYS_81681849&REV_034&1BA3C945&0&00E1
Manufacturer: Realtek
Name: Realtek PCIe GBE Family Controller
PNP Device ID: PCIVEN_10EC&DEV_8168&SUBSYS_81681849&REV_034&1BA3C945&0&00E1
Service: RTL8167

 

Ако няма повече въпроси и проблеми след това ще маркирам случая като решен!

След като сложите новия Avast!, обновете дефинициите и направете проверка на системата си и пишете за резултатите.

Така...финални препоръки:

 

За avast! да не сте гледали следния клип от този пост:

Ако е така, то мога да ви кажа, че човекa направил клипа е доста назад с материала по-отношение поне на компютърната защита.

 

Затова е най-добре да деинсталирате avast! 4 и да инсталирате следната версия:

 

Изтегли: avast! Free Antivirus 9.0.2008.177 Final | BG Mirror

 

 

 

Сега изтеглете следния файл => file.bg/f271278SlkfB и го разархивирайте в папката C:WindowsSystem32driversetc

 

За да почистим използваните от нас неща направи следното:

 

След това изтеглете следния файл => file.bg/f271279oghfk и го запазете в папката от която стартирахте FRST.exe.

Стартирайте FRST.exe и натиснете бутона Fix веднъж!

Това ще изтрие карантинната папка на FRST. Не е нужно да публикувате лог файла.

 

Изтегли OTC.exe и го стартирай. Натиснете бутона CleanUp!.

Рестартирай компютъра, ако те попита!

Изтегли Delfix.exe и го стартирай. Сложи отметка пред Remove disinfection tools (трябва да има такава по-подразбиране, но все пак да си кажа) => натисни бутона Run

Инструмента ще се самоизтрие след като приключи своята задача!

 

Ако има инструменти, папки или логове от използваните от нас неща и те не са се изтрили при горе-споменатите процедури, ги изтрий ръчно.

Като например ръчно ще се наложи да изтриете следната папка c:programdataHitmanPro

 

Други препоръки:

 

Отворете Start => в полето за търсене въведете services.msc => натиснете Enter

 

От списъка намерете следните услуги една по-една и натиснете Stop, а от падащото меню на Startup Type изберете Disabled:

 

 

Отворете Start => в полето за търсене въведете msconfig => натиснете Enter => отидете до Startup и премахнете отметките пред следните програми ако не ги ползвате:

 

 

От Control Panel-a можете да деинсталирате Mozilla Maintenance Servicе

 

Също искам да обърна внимание, ако не знаете, че в момента мрежовата карта на Realtek е изключена от Device Manager-a, така че ако я ползвате си я включете отново:

 

 

Ако няма повече въпроси и проблеми след това ще маркирам случая като решен!

След като сложите новия Avast!, обновете дефинициите и направете проверка на системата си и пишете за резултатите.

Направих всичко само че ми е изчезнала папката program data!

И как така ще изчезна, ако не сте я изтрили сам!?!

 

Да не би вместо само папката в червено (c:programdataHitmanPro), да сте изтрили цялата папка???

 

Момент, момент...тя папката е скрита по-подразбиране, но инструментите OTC.exe, delfix.exe и т.н. скриват скритите файлове.

 

Я ги покажете пак => Start => в търсачката въвдете => C:WindowsSystem32rundll32.exe shell32.dll,Options_RunDLL 7 => натиснете Enter

 

Сложете отметка пред:

 

Show hidden files, folders and drives

 

и махнете отметката пред:

 

Hide Protected Operating System Files (recommended)

 

натиснете Apply и вижте дали е там.

И как така ще изчезна, ако не сте я изтрили сам!?!

 

Да не би вместо само папката в червено (c:programdataHitmanPro), да сте изтрили цялата папка???

 

Момент, момент...тя папката е скрита по-подразбиране, но инструментите OTC.exe, delfix.exe и т.н. скриват скритите файлове.

 

Я ги покажете пак => Start => в търсачката въвдете => C:WindowsSystem32rundll32.exe shell32.dll,Options_RunDLL 7 => натиснете Enter

 

Сложете отметка пред:

 

Show hidden files, folders and drives

 

и махнете отметката пред:

 

Hide Protected Operating System Files (recommended)

 

натиснете Apply и вижте дали е там.

Да така е получи се по принцип бях разрешил да се виждат скрити папки и затова се учудих че я няма.Мерси!

Да, просто инструментите след почистването връщат някои настройки по-подразбиране (направено е за да може начинаещите потребители да не изтрият нещо важно за работата на Windows).

 

Ако няма повече въпроси да маркирам като Решен или имате още какво да питате?

Да, просто инструментите след почистването връщат някои настройки по-подразбиране (направено е за да може начинаещите потребители да не изтрият нещо важно за работата на Windows).

 

Ако няма повече въпроси да маркирам като Решен или имате още какво да питате?

Ами мисля че нямам,ще сложа и новата версия на аваст,а тя има ли нещо по специфично в настройки да се прави или както си е фабрично?

За въпроси свързани с avast! посетете темата => Avast Anti-Virus Free/Pro/IS - проблеми, въпроси, мнения, обсъждане-част 2

 

Ок, тогава се ориентираме към приключване!

 

Поздрави и приятен weekend...

За въпроси свързани с avast! посетете темата => Avast Anti-Virus Free/Pro/IS - проблеми, въпроси, мнения, обсъждане-част 2

 

Ок, тогава се ориентираме към приключване!

 

Поздрави и приятен weekend...

Мерси приятен и на вас!