Здравейте и аз като много други имам проблем с този файл conms.exe  и с това безкрайно "qqqqqqqqqq" . С Windows 7 съм, нямам инсталационен диск, нямам и антивирусна. Това е инфото от 2-та файла на DDS :

 

 

DDS.TXT

DDS (Ver_2011-09-30.01) - NTFS_AMD64
Internet Explorer: 9.11.9600.16428
Run by uilytiu at 10:56:35 on 2013-12-07
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.4095.1887 [GMT 2:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:Windowssystem32wininit.exe
C:Windowssystem32lsm.exe
C:Windowssystem32svchost.exe -k DcomLaunch
C:Windowssystem32nvvsvc.exe
C:Windowssystem32svchost.exe -k RPCSS
C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted
C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted
C:Windowssystem32svchost.exe -k LocalService
C:Windowssystem32svchost.exe -k netsvcs
C:Windowssystem32svchost.exe -k GPSvcGroup
C:Windowssystem32svchost.exe -k NetworkService
C:WindowsSystem32spoolsv.exe
C:Windowssystem32svchost.exe -k LocalServiceNoNetwork
C:Program Files (x86)ASUSAsSysCtrlService1.00.02AsSysCtrlService.exe
C:Program FilesBonjourmDNSResponder.exe
C:Windowssystem32svchost.exe -k bthsvcs
C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation
C:Windowssystem32svchost.exe -k imgsvc
C:Program FilesNVIDIA CorporationDisplaynvxdsync.exe
C:Windowssystem32nvvsvc.exe
C:WindowsSystem32alg.exe
C:Windowssystem32svchost.exe -k NetworkServiceNetworkRestricted
C:Windowssystem32taskhost.exe
C:Windowssystem32taskeng.exe
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program Files (x86)ASUSEPU-6 EngineSixEngine.exe
C:WindowsSystem32rundll32.exe
C:Program FilesRealtekAudioHDARAVCpl64.exe
C:UsersuilytiuAppDataRoamingAdobetdfer.exe
C:Windowssystem32SearchIndexer.exe
C:Windowssystem32taskmgr.exe
C:UsersuilytiuAppDataRoaminguTorrentuTorrent.exe
C:Program Files (x86)SkypePhoneSkype.exe
C:WindowsSystem32svchost.exe -k secsvcs
C:Program FilesWindows Media Playerwmpnetwk.exe
C:Program Files (x86)Mozilla Firefoxfirefox.exe
C:Program Files (x86)Mozilla Firefoxplugin-container.exe
C:WindowsSysWOW64MacromedFlashFlashPlayerPlugin_11_9_900_117.exe
C:WindowsSysWOW64MacromedFlashFlashPlayerPlugin_11_9_900_117.exe
C:Windowssystem32conhost.exe
C:Windowssystem32wbemwmiprvse.exe
C:Windowssystem32LogonUI.exe
C:Windowssystem32LogonUI.exe
C:Windowssystem32LogonUI.exe
C:WindowsSystem32cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.us.com/v/2/?guid={76FAD399-6357-404F-A655-D7A3A1BAAABD}&serpv=17
mWinlogon: Userinit = userinit.exe
uRun: [system Driver] C:UsersuilytiuAppDataRoamingAdobetdfer.exe
uRun: [DAEMON Tools Lite] "C:Program Files (x86)DAEMON Tools LiteDTLite.exe" -autorun
uRun: [AdobeBridge] <no file>
mRun: [switchBoard] C:Program Files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe
mRun: [stereoLinksInstall] "C:Program Files (x86)NVIDIA Corporation3D Visionnvstlink.exe" /install1
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
IE: E&xport to Microsoft Excel - C:PROGRA~2MICROS~1OFFICE11EXCEL.EXE/3000
TCP: NameServer = 46.40.72.13 46.40.72.9
TCP: Interfaces{B0DEDB3F-C23A-4BED-A0E6-0B0CDBF1CEE2} : DHCPNameServer = 46.40.72.13 46.40.72.9
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program Files (x86)Common FilesSkypeSkype4COM.dll
SSODL: WebCheck - <orphaned>
x64-Run: [RtHDVCpl] C:Program FilesRealtekAudioHDARAVCpl64.exe
x64-Run: [skytel] C:Program FilesRealtekAudioHDASkytel.exe
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:UsersuilytiuAppDataRoamingMozillaFirefoxProfilesqbf6kkfq.default
FF - prefs.js: browser.startup.homepage - hxxps://www.google.bg/webhp?authuser=1
FF - plugin: C:WindowsSysWOW64MacromedFlashNPSWF32_11_9_900_117.dll
FF - plugin: C:WindowsSysWOW64npDeployJava1.dll
FF - plugin: C:WindowsSysWOW64npmproxy.dll
.
---- FIREFOX POLICIES ----
.
FF - user.js: browser.search.defaultenginename - Search.us
FF - user.js: browser.keywordURLPromptDeclined - 1
.
FF - user.js: browser.startup.page - 1
.
.
.
FF - user.js: browser.newtab.url -
FF - user.js: browser.newtab.url -
.
============= SERVICES / DRIVERS ===============
.
R0 BtHidBus;Bluetooth HID Bus Service;C:WindowsSystem32driversBtHidBus.sys [2011-7-27 24456]
R1 ArcCtrl;ArcCtrl;C:WindowsSystem32driversArcCtrl.sys [2013-11-7 981096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:WindowsSystem32driversdtsoftbus01.sys [2013-10-13 283200]
R2 AsSysCtrlService;ASUS System Control Service;C:Program Files (x86)ASUSAsSysCtrlService1.00.02AsSysCtrlService.exe [2013-5-4 90112]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2010-3-18 138576]
S3 btnetBUs;Bluetooth PAN Bus Service;C:WindowsSystem32driversbtnetBus.sys [2010-4-7 30088]
S3 dmvsc;dmvsc;C:WindowsSystem32driversdmvsc.sys [2011-4-12 71168]
S3 ENTECH64;ENTECH64;C:WindowsSystem32driversEntech64.sys [2013-5-4 12744]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:WindowsSystem32ieetwcollector.exe [2013-12-4 111616]
S3 IvtAudioBusSrv;IvtAudioBusSrv;C:WindowsSystem32driversIvtBtBus.sys [2010-4-7 27016]
S3 IvtBtBUs;IVT Bluetooth Bus Service;C:WindowsSystem32driversIvtBtBus.sys [2010-4-7 27016]
S3 IvtPanBusSrv;IvtPanBusSrv;C:WindowsSystem32driversbtnetBus.sys [2010-4-7 30088]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:WindowsSystem32driversrdpvideominiport.sys [2010-11-21 20992]
S3 SwitchBoard;Adobe SwitchBoard;C:Program Files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe [2010-2-19 517096]
S3 Synth3dVsc;Synth3dVsc;C:WindowsSystem32driversSynth3dVsc.sys [2011-4-12 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver;C:WindowsSystem32driversterminpt.sys [2011-4-12 34816]
S3 TsUsbFlt;TsUsbFlt;C:WindowsSystem32driversTsUsbFlt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:WindowsSystem32driversTsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;tsusbhub;C:WindowsSystem32driverstsusbhub.sys [2011-4-12 117248]
S3 USBAAPL64;Apple Mobile USB Driver;C:WindowsSystem32driversusbaapl64.sys [2012-12-13 54784]
S3 WatAdminSvc;Windows Activation Technologies Service;C:WindowsSystem32WatWatAdminSvc.exe [2013-5-4 1255736]
S4 ADExchange;ArcSoft Exchange Service;C:Program Files (x86)Common FilesArcSoftesinterBineservutil.exe [2012-8-14 43624]
S4 SkypeUpdate;Skype Updater;C:Program Files (x86)SkypeUpdaterUpdater.exe [2013-1-8 161536]
S4 TeamViewer8;TeamViewer 8;C:Program Files (x86)TeamViewerVersion8TeamViewer_Service.exe [2013-5-31 3574624]
.
=============== Created Last 30 ================
.
2013-12-07 03:49:01  75888  ----a-w-  C:ProgramDataMicrosoftWindows DefenderDefinition Updates{16B530C1-34FC-446D-BF5C-DD8F53916C13}offreg.dll
2013-12-06 16:58:55  10285968  ----a-w-  C:ProgramDataMicrosoftWindows DefenderDefinition Updates{16B530C1-34FC-446D-BF5C-DD8F53916C13}mpengine.dll
2013-12-06 13:50:48  --------  d-----w-  C:Program FilesCCleaner
2013-12-05 14:32:01  --------  d-----w-  C:Program Files (x86)SmartTweak
2013-12-04 04:01:49  --------  d-----w-  C:Windowsrescache
2013-12-03 18:28:47  --------  d-----w-  C:UsersuilytiuAppDataRoamingcalibre
2013-12-03 18:27:26  --------  d-----w-  C:Program Files (x86)Calibre2
2013-11-19 07:54:53  --------  d-----w-  C:UsersuilytiuAppDataRoamingAzureus
2013-11-18 11:48:05  --------  d-----r-  C:Program Files (x86)Skype
2013-11-14 14:34:00  922912  ----a-w-  C:WindowsSystem32nvvsvc.exe
2013-11-14 14:34:00  6669600  ----a-w-  C:WindowsSystem32nvcpl.dll
2013-11-14 14:34:00  63776  ----a-w-  C:WindowsSystem32nvshext.dll
2013-11-14 14:34:00  3489568  ----a-w-  C:WindowsSystem32nvsvc64.dll
2013-11-14 14:34:00  219424  ----a-w-  C:WindowsSystem32nvmctray.dll
2013-11-14 14:31:03  --------  d-----w-  C:Program Files (x86)NVIDIA Corporation
2013-11-13 21:51:34  839680  ----a-w-  C:WindowsSysWow64lameACM.acm
2013-11-13 21:51:34  650752  ----a-w-  C:WindowsSysWow64xvidcore.dll
2013-11-13 21:51:34  243200  ----a-w-  C:WindowsSysWow64xvidvfw.dll
2013-11-13 21:51:34  151552  ----a-w-  C:WindowsSysWow64ac3acm.acm
2013-11-13 21:51:33  79360  ----a-w-  C:WindowsSysWow64ff_vfw.dll
2013-11-13 21:51:31  --------  d-----w-  C:Program Files (x86)K-Lite Codec Pack
2013-11-13 08:57:57  404480  ----a-w-  C:WindowsSystem32gdi32.dll
2013-11-13 08:57:57  311808  ----a-w-  C:WindowsSysWow64gdi32.dll
2013-11-13 08:57:56  859648  ----a-w-  C:WindowsSystem32IKEEXT.DLL
2013-11-13 08:57:56  830464  ----a-w-  C:WindowsSystem32nshwfp.dll
2013-11-13 08:57:56  656896  ----a-w-  C:WindowsSysWow64nshwfp.dll
2013-11-13 08:57:56  324096  ----a-w-  C:WindowsSystem32FWPUCLNT.DLL
2013-11-13 08:57:56  216576  ----a-w-  C:WindowsSysWow64FWPUCLNT.DLL
2013-11-12 20:20:00  --------  d-----w-  C:UsersuilytiuAppDataLocalMy_MP4Box_GUI
2013-11-12 20:17:12  --------  d-----w-  C:Program FilesMy MP4Box GUI
2013-11-12 20:04:52  --------  d-----w-  C:Program Files (x86)MKVToolNix
2013-11-10 10:37:10  --------  d-----w-  C:Windowspss
2013-11-07 18:30:44  981096  ----a-w-  C:WindowsSystem32driversArcCtrl.sys
2013-11-07 18:30:44  80488  ----a-w-  C:WindowsSystem32MMCEDT6.exe
.
==================== Find3M  ====================
.
2013-11-28 13:26:53  692616  ----a-w-  C:WindowsSysWow64FlashPlayerApp.exe
2013-11-28 13:26:52  71048  ----a-w-  C:WindowsSysWow64FlashPlayerCPLApp.cpl
2013-11-11 03:50:16  267936  ------w-  C:WindowsSystem32MpSigStub.exe
2013-10-13 09:37:44  283200  ----a-w-  C:WindowsSystem32driversdtsoftbus01.sys
2013-10-05 20:25:35  1474048  ----a-w-  C:WindowsSystem32crypt32.dll
2013-10-05 19:57:25  1168384  ----a-w-  C:WindowsSysWow64crypt32.dll
2013-10-04 02:28:31  190464  ----a-w-  C:WindowsSystem32SmartcardCredentialProvider.dll
2013-10-04 02:25:17  197120  ----a-w-  C:WindowsSystem32credui.dll
2013-10-04 02:24:49  1930752  ----a-w-  C:WindowsSystem32authui.dll
2013-10-04 01:58:50  152576  ----a-w-  C:WindowsSysWow64SmartcardCredentialProvider.dll
2013-10-04 01:56:25  168960  ----a-w-  C:WindowsSysWow64credui.dll
2013-10-04 01:56:00  1796096  ----a-w-  C:WindowsSysWow64authui.dll
2013-09-28 01:09:10  497152  ----a-w-  C:WindowsSystem32driversafd.sys
2013-09-25 02:26:40  95680  ----a-w-  C:WindowsSystem32driversksecdd.sys
2013-09-25 02:26:40  154560  ----a-w-  C:WindowsSystem32driversksecpkg.sys
2013-09-25 02:23:33  28672  ----a-w-  C:WindowsSystem32sspisrv.dll
2013-09-25 02:23:33  135680  ----a-w-  C:WindowsSystem32sspicli.dll
2013-09-25 02:23:01  28160  ----a-w-  C:WindowsSystem32secur32.dll
2013-09-25 02:22:59  340992  ----a-w-  C:WindowsSystem32schannel.dll
2013-09-25 02:21:50  307200  ----a-w-  C:WindowsSystem32ncrypt.dll
2013-09-25 02:21:07  1447936  ----a-w-  C:WindowsSystem32lsasrv.dll
2013-09-25 01:58:17  96768  ----a-w-  C:WindowsSysWow64sspicli.dll
2013-09-25 01:57:26  22016  ----a-w-  C:WindowsSysWow64secur32.dll
2013-09-25 01:57:24  247808  ----a-w-  C:WindowsSysWow64schannel.dll
2013-09-25 01:56:42  220160  ----a-w-  C:WindowsSysWow64ncrypt.dll
2013-09-25 01:03:24  30720  ----a-w-  C:WindowsSystem32lsass.exe
2013-09-24 09:00:53  973736  ----a-w-  C:WindowsSystem32deployJava1.dll
2013-09-24 09:00:53  1095080  ----a-w-  C:WindowsSystem32npDeployJava1.dll
2013-09-24 09:00:53  108968  ----a-w-  C:WindowsSystem32WindowsAccessBridge-64.dll
.
============= FINISH: 10:57:10.38 ===============
 

ATTACH.TXT

 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-09-30.01)
.
Microsoft Windows 7 Ultimate
Boot Device: DeviceHarddiskVolume1
Install Date: 5/3/2013 10:18:04 PM
System Uptime: 12/6/2013 10:59:36 PM (12 hours ago)
.
Motherboard: ASUSTeK Computer INC. |  | P5QC
Processor: Intel® Core2 Duo CPU E8400  @ 3.00GHz | LGA 775 | 3003/333mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 108 GiB total, 24.121 GiB free.
D: is FIXED (NTFS) - 146 GiB total, 0.737 GiB free.
E: is FIXED (NTFS) - 824 GiB total, 8.933 GiB free.
F: is FIXED (NTFS) - 152 GiB total, 0.528 GiB free.
G: is CDROM ()
H: is CDROM ()
I: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID:
Description: Bluetooth Peripheral Device
Device ID: BTHENUM{00000002-0000-1000-8000-0002EE000002}_VID&00000000_PID&C0167&93BA90B&0&0018136098EF_C00000000
Manufacturer:
Name: Bluetooth Peripheral Device
PNP Device ID: BTHENUM{00000002-0000-1000-8000-0002EE000002}_VID&00000000_PID&C0167&93BA90B&0&0018136098EF_C00000000
Service:
.
Class GUID:
Description: Bluetooth Peripheral Device
Device ID: BTHENUM{00000002-0000-1000-8000-0002EE000002}_VID&00000000_PID&C0397&93BA90B&0&0022989BF1FB_C00000000
Manufacturer:
Name: Bluetooth Peripheral Device
PNP Device ID: BTHENUM{00000002-0000-1000-8000-0002EE000002}_VID&00000000_PID&C0397&93BA90B&0&0022989BF1FB_C00000000
Service:
.
Class GUID:
Description: Bluetooth Peripheral Device
Device ID: BTHENUM{0000110E-0000-1000-8000-00805F9B34FB}_VID&00000000_PID&C0397&93BA90B&0&0022989BF1FB_C00000000
Manufacturer:
Name: Bluetooth Peripheral Device
PNP Device ID: BTHENUM{0000110E-0000-1000-8000-00805F9B34FB}_VID&00000000_PID&C0397&93BA90B&0&0022989BF1FB_C00000000
Service:
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: ArcSec
Device ID: ROOTLEGACY_ARCSEC0000
Manufacturer:
Name: ArcSec
PNP Device ID: ROOTLEGACY_ARCSEC0000
Service: ArcSec
.
==== System Restore Points ===================
.
No restore point in system.
.
==== Installed Programs ======================
.
µTorrent
AC3Filter 2.6.0b
Adobe AIR
Adobe Community Help
Adobe Flash Player 11 Plugin
Adobe Photoshop CS5.1
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ArcSoft TotalMedia Theatre 6
ArtCine NFO Creator 2.0
Atheros Communications Inc.® AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver
AviSynth 2.6
Bonjour
calibre
CCleaner
Cool Beans NFO Creator 2.0.1.3
CPUID CPU-Z 1.64.0
DAEMON Tools Lite
Electronic Arts Game Updater
EPU-6 Engine
iTunes
Java 7 Update 40 (64-bit)
Java SE Development Kit 7 Update 21 (64-bit)
K-Lite Mega Codec Pack 8.7.0
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Office Professional Edition 2003
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Microsoft_VC80_ATL_x86_x64
Microsoft_VC80_CRT_x86
Microsoft_VC80_CRT_x86_x64
Microsoft_VC80_MFC_x86
Microsoft_VC80_MFC_x86_x64
Microsoft_VC80_MFCLOC_x86
Microsoft_VC80_MFCLOC_x86_x64
Microsoft_VC90_ATL_x86
Microsoft_VC90_ATL_x86_x64
Microsoft_VC90_CRT_x86
Microsoft_VC90_CRT_x86_x64
Microsoft_VC90_MFC_x86
Microsoft_VC90_MFC_x86_x64
Microsoft_VC90_MFCLOC_x86
Microsoft_VC90_MFCLOC_x86_x64
Mozilla Firefox 25.0.1 (x86 en-US)
MSVCRT Redists
Need For Speed - Porsche Unleashed
NFOlux
NVIDIA Control Panel 331.65
NVIDIA Graphics Driver 331.65
NVIDIA Install Application
NVIDIA PhysX
NVIDIA PhysX System Software 9.13.0725
PC Connectivity Solution
PDF Settings CS5
Prince of Persia The Forgotten Sands™
Realtek High Definition Audio Driver
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)
Skype™ 6.1
Steam
Subtitle Edit 3.3.4
TeamViewer 8
TouchCopy 11
Ubisoft Game Launcher
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3)
Vegas Pro 12.0 (64-bit)
Windows Driver Package - Nokia pccsmcfd  (08/22/2008 7.0.0.0)
WinRAR 4.10 (32-bit)
Wondershare Video Converter Ultimate(Build 6.0.4.0)
.
==== Event Viewer Messages From Past Week ========
.
12/7/2013 2:21:02 AM, Error: BTHUSB [5]  - The Bluetooth driver expected an HCI event with a certain size but did not receive it.
12/7/2013 10:09:21 AM, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.
12/6/2013 4:19:39 PM, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect.
12/6/2013 4:19:39 PM, Error: Service Control Manager [7000]  - The Windows Search service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
12/6/2013 4:19:11 PM, Error: Service Control Manager [7031]  - The Windows Search service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.
12/6/2013 4:19:11 PM, Error: Service Control Manager [7024]  - The Windows Search service terminated with service-specific error %%-1073473535.
12/6/2013 4:18:31 PM, Error: Server [2505]  - The server could not bind to the transport DeviceNetBT_Tcpip_{B0DEDB3F-C23A-4BED-A0E6-0B0CDBF1CEE2} because another computer on the network has the same name.  The server could not start.
12/6/2013 4:18:31 PM, Error: NetBT [4321]  - The name "LIBTECHNOLOGIES:20" could not be registered on the interface with IP address 87.116.126.36. The computer with the IP address 169.254.237.244 did not allow the name to be claimed by this computer.
12/6/2013 4:18:31 PM, Error: NetBT [4321]  - The name "LIBTECHNOLOGIES:0" could not be registered on the interface with IP address 87.116.126.36. The computer with the IP address 169.254.237.244 did not allow the name to be claimed by this computer.
12/6/2013 4:17:35 PM, Error: Service Control Manager [7023]  - The Function Discovery Resource Publication service terminated with the following error:  %%-2147014847
12/6/2013 3:05:28 PM, Error: Microsoft-Windows-SharedAccess_NAT [34001]  - The ICS_IPV6 failed to configure IPv6 stack.
12/6/2013 11:00:12 PM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  ArcSec
12/5/2013 10:55:32 AM, Error: TermDD [50]  - The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the client.
12/4/2013 4:17:15 AM, Error: Service Control Manager [7011]  - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the NlaSvc service.
12/3/2013 9:20:24 PM, Error: Disk [11]  - The driver detected a controller error on DeviceHarddisk2DR8.
12/3/2013 8:57:34 PM, Error: Disk [11]  - The driver detected a controller error on DeviceHarddisk2DR7.
12/2/2013 9:27:00 AM, Error: Service Control Manager [7011]  - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.
12/1/2013 1:28:35 AM, Error: Disk [11]  - The driver detected a controller error on DeviceHarddisk2DR4.
12/1/2013 1:03:28 AM, Error: Disk [11]  - The driver detected a controller error on DeviceHarddisk2DR3.
11/30/2013 1:42:51 AM, Error: Service Control Manager [7011]  - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UxSms service.
.
==== End Of File ===========================
 

 

Багодаря предварително за отделеното внимание.

Здравейте..!
 
Моля, изтеглете и стартирайте програмата AdwCleaner(by Xplode):

• [*]Затворете всички стартирани програми и браузъри [*]Кликнете два пъти върху

adwcleaner.exe за да стартирате инструмента. [*]Натиснете OK, за да потвърдите, че всички стартирани програми ще бъдат затворени. [*]Маркирайте Clean [*]Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта. [*]Моля, да публикувате съдържанието на този лог в отговора си [*]Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s0].txt

Моля, изтеглете Junkware Removal Tool (by Thisisu ) и запазете на вашия десктоп.

• [*]Спрете временно работата на защитните програми. [*]Стартирайте инструмента

JRT.exe [*]Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата. [*]Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши. [*]Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt). [*]Моля копирайте съдържанието на лог файла в следващия си пост.

Изтеглете Malwarebytes' Anti-Malware или от тук (не забравяйте да обновите програмата с нови дефиниции)
* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.
* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.
* Ако има намерени обновявания, тя ще ги изтегли и инсталира.
* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.
* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.
* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата
* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.
* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог.
Копирайте този лог и го публикувайте в следващия си коментар по темата.
Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран

AdwCleaner[s0].txt

 

# AdwCleaner v3.014 - Report created 07/12/2013 at 11:59:36
# Updated 01/12/2013 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : uilytiu - LIBTECHNOLOGIES
# Running from : C:UsersuilytiuDesktopDOWNLOADSadwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:ProgramDataIBUpdaterService
Folder Deleted : C:Program Files (x86)MyPC Backup
Folder Deleted : C:Program Files (x86)OApps
Folder Deleted : C:UsersuilytiuAppDataRoamingDefaultTab
Folder Deleted : C:UsersuilytiuAppDataRoamingfile scout
Folder Deleted : C:UsersuilytiuAppDataRoamingOpenCandy
Folder Deleted : C:UsersuilytiuAppDataRoamingSpeedAnalysis3
Folder Deleted : C:UsersuilytiuAppDataRoamingzulagames
File Deleted : C:END
File Deleted : C:UsersuilytiuAppDataRoamingspeedanalysis.ico
File Deleted : C:UsersuilytiuAppDataRoamingMozillaFirefoxProfilesqbf6kkfq.defaultuser.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLMSOFTWAREGoogleChromeExtensionsgflandjopdloblmlcoiidmncpinmmacn
Key Deleted : HKLMSOFTWAREClasses*shellfilescout
Key Deleted : HKLMSOFTWAREClassesAppID{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Key Deleted : HKLMSOFTWAREClassesCLSID{1663C10B-0D55-438D-8496-19A3DBAEC0E4}
Key Deleted : HKLMSOFTWAREClassesCLSID{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLMSOFTWAREClassesCLSID{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Key Deleted : HKLMSOFTWAREClassesCLSID{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Deleted : HKLMSOFTWAREClassesCLSID{A43DE495-3D00-47D4-9D2C-303115707939}
Key Deleted : HKLMSOFTWAREClassesInterface{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : HKLMSOFTWAREClassesInterface{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKLMSOFTWAREClassesTypeLib{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Key Deleted : HKCUSoftwareMicrosoftWindowsCurrentVersionExtSettings{A66261FC-B82E-4EC7-9F6D-C2F36B871DF0}
Key Deleted : HKCUSoftwareMicrosoftWindowsCurrentVersionExtPreApproved{7825CFB6-490A-436B-9F26-4A7B5CFC01A9}
Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionExtPreApproved{7825CFB6-490A-436B-9F26-4A7B5CFC01A9}
Key Deleted : HKLMSOFTWAREMicrosoftInternet ExplorerLow RightsElevationPolicy{7825CFB6-490A-436B-9F26-4A7B5CFC01A9}
Key Deleted : [x64] HKLMSOFTWAREClassesInterface{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : [x64] HKLMSOFTWAREClassesInterface{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : [x64] HKLMSOFTWAREClassesInterface{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKCUSoftwareAPN PIP
Key Deleted : HKCUSoftwareConduit
Key Deleted : HKCUSoftwarefilescout
Key Deleted : HKLMSoftwarePIP

***** [ Browsers ] *****

- Internet Explorer v11.0.9600.16428


- Mozilla Firefox v25.0.1 (en-US)

[ File : C:UsersuilytiuAppDataRoamingMozillaFirefoxProfilesqbf6kkfq.defaultprefs.js ]


*************************

AdwCleaner[R0].txt - [3271 octets] - [07/12/2013 11:58:27]
AdwCleaner[s0].txt - [3137 octets] - [07/12/2013 11:59:36]

########## EOF - C:AdwCleanerAdwCleaner[s0].txt - [3197 octets] ##########
 

JRT.txt

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Ultimate x64
Ran by uilytiu on Sat 12/07/2013 at 12:03:46.71
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainStart Page
Successfully repaired: [Registry Value] HKEY_USERS.DEFAULTSoftwareMicrosoftInternet ExplorerMainStart Page
Successfully repaired: [Registry Value] HKEY_USERSS-1-5-18SoftwareMicrosoftInternet ExplorerMainStart Page
Successfully repaired: [Registry Value] HKEY_USERSS-1-5-19SoftwareMicrosoftInternet ExplorerMainStart Page
Successfully repaired: [Registry Value] HKEY_USERSS-1-5-20SoftwareMicrosoftInternet ExplorerMainStart Page
Successfully repaired: [Registry Value] HKEY_USERSS-1-5-21-3627377305-69045726-1660407099-1001SoftwareMicrosoftInternet ExplorerMainStart Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerAboutURLsTabs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOTCLSID{02DD8284-A49F-43E5-9D84-CF19DC9AD21D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOTCLSID{27DE7D30-BCCD-44D1-ADCB-A74A4259EBEF}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOTCLSID{3A0EFC4E-F167-4D0E-9C24-FC5519237993}
Successfully deleted: [Registry Key] HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchScopes{602B05BB-8DAF-4DD3-8077-3D0B03372B28}
Successfully deleted: [Registry Key] HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchScopes{958C667B-513E-41BC-8F29-B5554FC5311F}



~~~ Files

Successfully deleted: [File] "C:Windowssyswow64wscm32.dll"
Successfully deleted: [File] "C:Windowssyswow64wscm64.dll"



~~~ Folders

Successfully deleted: [Folder] "C:Program Files (x86)smarttweak"
Successfully deleted: [Folder] "C:UsersuilytiuAppDataRoamingmicrosoftwindowsstart menuprogramssmarttweak software"



~~~ FireFox

Successfully deleted the following from C:UsersuilytiuAppDataRoamingmozillafirefoxprofilesqbf6kkfq.defaultprefs.js

user_pref("keyword.URL", "hxxp://search.us.com/serp?guid={4231FCA5-FFFD-4AD2-8E1F-287BC8FF45BA}&action=default_search&serpv=5&k=");
Emptied folder: C:UsersuilytiuAppDataRoamingmozillafirefoxprofilesqbf6kkfq.defaultminidumps [14 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sat 12/07/2013 at 12:08:06.12
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

P.S. Последното сканиране ще е малко по-дълго защото хардовете не са малки.

mbam-log-2013-12-07 (12-11-54).txt

 

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.12.07.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16428
uilytiu :: LIBTECHNOLOGIES [administrator]

Protection: Enabled

12/7/2013 12:11:54 PM
mbam-log-2013-12-07 (12-11-54).txt

Scan type: Full scan (C:|D:|E:|F:|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 345858
Time elapsed: 31 minute(s), 39 second(s)

Memory Processes Detected: 1
C:UsersuilytiuAppDataRoamingAdobetdfer.exe (Trojan.Agent) -> 380 -> Delete on reboot.

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 1
HKCUSOFTWAREMicrosoftWindowsCurrentVersionRun|System Driver (Trojan.Agent) -> Data: C:UsersuilytiuAppDataRoamingAdobetdfer.exe -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 46
C:Downloads3DMark.Vantage.Professional.v1.0.Incl.Keymaker-CORECORE10k.EXE (PUP.Keygen.Intro) -> No action taken.
C:Program Files (x86)WondershareVideo Converter Ultimatewondershare.video.converter.ultimate.6.x-patch.exe (PUP.Riskware.Patcher) -> No action taken.
C:UsersuilytiuDesktopDOWNLOADSCalibre_Setup.exe (PUP.Optional.iBryte) -> No action taken.
C:UsersuilytiuDesktopFirst.Descent.2005KRASIOWINAMP51.12keygen.exe (PUP.RiskwareTool.CK) -> No action taken.
C:UsersuilytiuDownloadspop_packcpm.php (PUP.Optional.Bandoo) -> No action taken.
E:DObjectDock Plus 1.9 Build 535uKeygen-Patch.exe (Trojan.Downloader) -> No action taken.
E:DOWNLOADSCorelDRAW Graphics Suite X6 v 16.1.0.843CorelDRAW Graphics Suite X6 v 16.1.0.843 ENGx64Keymaker-COREkeygen.exe (RiskWare.Tool.HCK) -> No action taken.
E:DOWNLOADSCorelDRAW Graphics Suite X6 v 16.1.0.843CorelDRAW Graphics Suite X6 v 16.1.0.843 ENGx86Keymaker-COREkeygen.exe (RiskWare.Tool.HCK) -> No action taken.
E:DOWNLOADSWondershare Video Converter Ultimate 6.0.4.0wondershare.video.converter.ultimate.6.x-patch.exe (PUP.Riskware.Patcher) -> No action taken.
E:INSTALAUTODESK3DS MAXAUTODESK.3DSMAX.DESIGN.V2012-ISOxf-a2012-32bits.rar (PUP.RiskwareTool.CK) -> No action taken.
E:INSTALAUTODESK3DS MAXAUTODESK.3DSMAX.DESIGN.V2012-ISOxf-a2012-64bits.rar (Trojan.Agent.ck) -> No action taken.
E:INSTALOTHERWINDOWS 7 x64DTLite4471-0333.exe (PUP.Optional.OpenCandy) -> No action taken.
E:INSTALWINAMP51.12keygen.exe (PUP.RiskwareTool.CK) -> No action taken.
C:UsersuilytiuAppDataRoamingAdobetdfer.exe (Trojan.Agent) -> Delete on reboot.
C:AdwCleanerQuarantineCUsersuilytiuAppDataRoamingDefaultTabtdfer.exe.vir (Trojan.Agent) -> Quarantined and deleted successfully.
C:AdwCleanerQuarantineCUsersuilytiuAppDataRoamingfile scoutfilescout.exe.vir (PUP.Optional.FileScout.A) -> Quarantined and deleted successfully.
C:Downloads3DMark.Vantage.Professional.v1.0.Incl.Keymaker-COREkeygen.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:UsersuilytiuAppDataRoamingAC3Filtertdfer.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:UsersuilytiuAppDataRoamingBitComettdfer.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:UsersuilytiuAppDataRoamingInstallShieldtdfer.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:UsersuilytiuAppDataRoamingMedia Center Programstdfer.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:UsersuilytiuAppDataRoamingmkvtoolnixtdfer.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:UsersuilytiuAppDataRoamingNVIDIAtdfer.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:UsersuilytiuAppDataRoamingWindSolutionstdfer.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:UsersuilytiuAppDataRoamingWinRARtdfer.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:UsersuilytiuDesktopDOWNLOADSExpress_Installer.exe (PUP.Optional.iBryte) -> Quarantined and deleted successfully.
C:UsersuilytiuDesktopDOWNLOADSiLividSetup-r706-n-bf.exe (PUP.Optional.Bandoo) -> Quarantined and deleted successfully.
C:UsersuilytiuDesktopFirst.Descent.2005KRASIOdaemon400.exe (Adware.WhenU) -> Quarantined and deleted successfully.
E:DOWNLOADSBluesoleil8+PatchBluesoleil 8.XXX Patch ToolIvt.bluesoleil.8.x.x-patch.exe (Malware.Gen) -> Quarantined and deleted successfully.
E:INSTALDOWLOADERSYouTube Downloader 2.5.3 (kaldata.com).exe (PUP.Dealio.TB) -> Quarantined and deleted successfully.
E:INSTALOTHERdaemon400.exe (Adware.WhenU) -> Quarantined and deleted successfully.
E:INSTALOTHERBSPlayer Pro 2.56 Build 1043keygen.rar (Trojan.Agent) -> Quarantined and deleted successfully.
E:INSTALOTHERWINDOWS 7 x64Wondershare Video Converter Ultimate 6.0.4.0wondershare.video.converter.ultimate.6.x-patch.exe (PUP.Riskware.Patcher) -> Quarantined and deleted successfully.
E:INSTALWINDOWSWindows Loader v2.2.1 by DazWindows Loader.exe (Trojan.Winload) -> Quarantined and deleted successfully.
E:System Volume Information_restore{F2FCA6D7-5465-43D3-8754-44A0E01F459B}RP55A0028821.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.
E:System Volume Information_restore{F2FCA6D7-5465-43D3-8754-44A0E01F459B}RP55A0028848.exe (PUP.Dealio.TB) -> Quarantined and deleted successfully.
E:System Volume Information_restore{F2FCA6D7-5465-43D3-8754-44A0E01F459B}RP55A0028859.exe (Adware.WhenU) -> Quarantined and deleted successfully.
E:System Volume Information_restore{F2FCA6D7-5465-43D3-8754-44A0E01F459B}RP55A0028894.exe (PUP.RiskwareTool.CK) -> Quarantined and deleted successfully.
E:System Volume Information_restore{F2FCA6D7-5465-43D3-8754-44A0E01F459B}RP67A0049533.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.
E:System Volume Information_restore{F2FCA6D7-5465-43D3-8754-44A0E01F459B}RP67A0049560.exe (PUP.Dealio.TB) -> Quarantined and deleted successfully.
E:System Volume Information_restore{F2FCA6D7-5465-43D3-8754-44A0E01F459B}RP67A0049571.exe (Adware.WhenU) -> Quarantined and deleted successfully.
E:System Volume Information_restore{F2FCA6D7-5465-43D3-8754-44A0E01F459B}RP67A0049606.exe (PUP.RiskwareTool.CK) -> Quarantined and deleted successfully.
E:System Volume Information_restore{F2FCA6D7-5465-43D3-8754-44A0E01F459B}RP67A0050483.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.
E:System Volume Information_restore{F2FCA6D7-5465-43D3-8754-44A0E01F459B}RP67A0050510.exe (PUP.Dealio.TB) -> Quarantined and deleted successfully.
E:System Volume Information_restore{F2FCA6D7-5465-43D3-8754-44A0E01F459B}RP67A0050521.exe (Adware.WhenU) -> Quarantined and deleted successfully.
E:System Volume Information_restore{F2FCA6D7-5465-43D3-8754-44A0E01F459B}RP67A0050556.exe (PUP.RiskwareTool.CK) -> Quarantined and deleted successfully.

(end)

 

Ето и последното което трябваше да направя.

Редактирано 7 декември 201312 г. от dzhananov (преглед на промените)

Здравейте и аз като много други имам проблем с този файл conms.exe  и с това безкрайно "qqqqqqqqqq" . С Windows 7 съм, нямам инсталационен диск, нямам и антивирусна. Това е инфото от 2-та файла на DDS :

 

Какво е положението със системата ви след процедурите до тук..?

Ами таск мениджъра вече не е зелен нон-стоп (долу в дясно) и работи много по-добре само ми е чудно защо ми показва :

 

 

 

Не пречи но ми е чудно. Благодаря много.

Да направим още една проверка..:
 
Изтеглете ComboFix от тук и го запазете на десктопа си
Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.
Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to disable your security applications by amateur
Стартирайте Combo-Fix.com и следвайте инструкциите.
Бележка: ComboFix ще се стартира без инсталирана Recovery Console.
Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repai режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.

• [*]Следвайте инструкциите, за да позволите на

ComboFix да изтегли и инсталира Microsoft Windows Recovery Console.В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.

 

 

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

 

 

Изберете Yes, за да продължи сканирането за зловреден софтуер.
Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:ComboFix.txt в следващия Ви коментар в тази тема.
Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.

ComboFix.txt

 

ComboFix 13-12-07.01 - uilytiu 12/07/2013  13:21:48.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.4095.2445 [GMT 2:00]
Running from: c:usersuilytiuDesktopDOWNLOADSComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Created a new restore point
.
.
((((((((((((((((((((((((( Files Created from 2013-11-07 to 2013-12-07  )))))))))))))))))))))))))))))))
.
.
2013-12-07 11:25 . 2013-12-07 11:25  --------  d-----w-  c:usersDefaultAppDataLocaltemp
2013-12-07 10:10 . 2013-12-07 10:10  --------  d-----w-  c:usersuilytiuAppDataRoamingMalwarebytes
2013-12-07 10:10 . 2013-12-07 10:10  --------  d-----w-  c:program files (x86)Malwarebytes' Anti-Malware
2013-12-07 10:10 . 2013-12-07 10:10  --------  d-----w-  c:programdataMalwarebytes
2013-12-07 10:10 . 2013-04-04 12:50  25928  ----a-w-  c:windowssystem32driversmbam.sys
2013-12-07 10:03 . 2013-12-07 10:03  --------  d-----w-  c:windowsERUNT
2013-12-07 09:57 . 2013-12-07 09:57  --------  d-----w-  c:program files (x86)Hosts_Anti_Adwares_PUPs
2013-12-07 09:54 . 2013-12-07 09:59  --------  d-----w-  C:AdwCleaner
2013-12-06 16:58 . 2013-11-08 03:12  10285968  ----a-w-  c:programdataMicrosoftWindows DefenderDefinition Updates{16B530C1-34FC-446D-BF5C-DD8F53916C13}mpengine.dll
2013-12-06 13:50 . 2013-12-06 13:51  --------  d-----w-  c:program filesCCleaner
2013-12-04 04:01 . 2013-12-06 17:22  --------  d-----w-  c:windowsrescache
2013-12-04 01:04 . 2013-10-14 16:00  28368  ----a-w-  c:windowssystem32IEUDINIT.EXE
2013-12-03 18:28 . 2013-12-03 18:32  --------  d-----w-  c:usersuilytiuAppDataRoamingcalibre
2013-12-03 18:27 . 2013-12-03 18:27  --------  d-----w-  c:program files (x86)Calibre2
2013-11-19 07:54 . 2013-12-06 14:01  --------  d-----w-  c:usersuilytiuAppDataRoamingAzureus
2013-11-18 11:48 . 2013-12-07 11:25  --------  d-----w-  c:usersuilytiuAppDataRoamingSkype
2013-11-18 11:48 . 2013-11-18 11:48  --------  d-----w-  c:program files (x86)Common FilesSkype
2013-11-18 11:48 . 2013-11-18 11:48  --------  d-----r-  c:program files (x86)Skype
2013-11-18 11:48 . 2013-11-18 11:48  --------  d-----w-  c:programdataSkype
2013-11-14 14:35 . 2013-11-14 14:35  --------  d-----w-  c:programdataNVIDIA
2013-11-14 14:34 . 2013-10-23 08:20  6669600  ----a-w-  c:windowssystem32nvcpl.dll
2013-11-14 14:34 . 2013-10-23 08:20  3489568  ----a-w-  c:windowssystem32nvsvc64.dll
2013-11-14 14:34 . 2013-10-23 08:20  922912  ----a-w-  c:windowssystem32nvvsvc.exe
2013-11-14 14:34 . 2013-10-23 08:20  63776  ----a-w-  c:windowssystem32nvshext.dll
2013-11-14 14:34 . 2013-10-23 08:20  219424  ----a-w-  c:windowssystem32nvmctray.dll
2013-11-14 14:31 . 2013-11-14 14:31  --------  d-----w-  c:program files (x86)AGEIA Technologies
2013-11-13 21:52 . 2013-12-07 09:31  --------  d-----w-  c:usersuilytiuAppDataRoamingMedia Player Classic
2013-11-13 21:51 . 2011-12-21 17:14  151552  ----a-w-  c:windowsSysWow64ac3acm.acm
2013-11-13 21:51 . 2011-06-24 14:44  243200  ----a-w-  c:windowsSysWow64xvidvfw.dll
2013-11-13 21:51 . 2011-06-24 14:28  650752  ----a-w-  c:windowsSysWow64xvidcore.dll
2013-11-13 21:51 . 2008-09-24 18:41  839680  ----a-w-  c:windowsSysWow64lameACM.acm
2013-11-13 21:51 . 2012-04-23 18:00  79360  ----a-w-  c:windowsSysWow64ff_vfw.dll
2013-11-13 21:51 . 2013-11-13 21:51  --------  d-----w-  c:program files (x86)K-Lite Codec Pack
2013-11-13 08:57 . 2013-10-03 02:23  404480  ----a-w-  c:windowssystem32gdi32.dll
2013-11-13 08:57 . 2013-10-03 02:00  311808  ----a-w-  c:windowsSysWow64gdi32.dll
2013-11-13 08:57 . 2013-10-12 02:30  830464  ----a-w-  c:windowssystem32nshwfp.dll
2013-11-13 08:57 . 2013-10-12 02:29  859648  ----a-w-  c:windowssystem32IKEEXT.DLL
2013-11-13 08:57 . 2013-10-12 02:29  324096  ----a-w-  c:windowssystem32FWPUCLNT.DLL
2013-11-13 08:57 . 2013-10-12 02:03  656896  ----a-w-  c:windowsSysWow64nshwfp.dll
2013-11-13 08:57 . 2013-10-12 02:01  216576  ----a-w-  c:windowsSysWow64FWPUCLNT.DLL
2013-11-12 20:20 . 2013-11-12 20:20  --------  d-----w-  c:usersuilytiuAppDataLocalMy_MP4Box_GUI
2013-11-12 20:17 . 2013-11-18 18:33  --------  d-----w-  c:program filesMy MP4Box GUI
2013-11-12 20:04 . 2013-11-18 18:33  --------  d-----w-  c:program files (x86)MKVToolNix
2013-11-07 18:30 . 2013-11-07 18:30  --------  d-----w-  c:program files (x86)Common FilesArcSoft
2013-11-07 18:30 . 2012-10-24 10:10  981096  ----a-w-  c:windowssystem32driversArcCtrl.sys
2013-11-07 18:30 . 2012-06-11 16:42  80488  ----a-w-  c:windowssystem32MMCEDT6.exe
2013-11-07 18:30 . 2013-11-07 18:30  --------  d-----w-  c:program files (x86)ArcSoft
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-28 13:26 . 2013-05-03 23:07  692616  ----a-w-  c:windowsSysWow64FlashPlayerApp.exe
2013-11-28 13:26 . 2013-05-03 23:07  71048  ----a-w-  c:windowsSysWow64FlashPlayerCPLApp.cpl
2013-11-13 19:54 . 2013-05-03 20:05  82896128  ----a-w-  c:windowssystem32MRT.exe
2013-11-11 03:50 . 2010-11-21 03:27  267936  ------w-  c:windowssystem32MpSigStub.exe
2013-10-13 09:37 . 2013-10-13 09:37  283200  ----a-w-  c:windowssystem32driversdtsoftbus01.sys
2013-09-24 09:00 . 2013-09-24 09:00  312744  ----a-w-  c:windowssystem32javaws.exe
2013-09-24 09:00 . 2013-09-24 09:00  189352  ----a-w-  c:windowssystem32javaw.exe
2013-09-24 09:00 . 2013-09-24 09:00  189352  ----a-w-  c:windowssystem32java.exe
2013-09-24 09:00 . 2013-09-24 09:00  108968  ----a-w-  c:windowssystem32WindowsAccessBridge-64.dll
2013-09-24 09:00 . 2013-05-03 23:02  973736  ----a-w-  c:windowssystem32deployJava1.dll
2013-09-24 09:00 . 2013-05-03 23:02  1095080  ----a-w-  c:windowssystem32npDeployJava1.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
"DAEMON Tools Lite"="c:program files (x86)DAEMON Tools LiteDTLite.exe" [2013-03-14 3672640]
.
[HKEY_LOCAL_MACHINESOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun]
"SwitchBoard"="c:program files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe" [2010-02-19 517096]
"HOSTS Anti-Adware_PUPs"="c:program files (x86)Hosts_Anti_Adwares_PUPsHOSTS_Anti-Adware_main.exe" [2013-12-07 302961]
.
[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINEsoftwarewow6432nodemicrosoftwindows ntcurrentversiondrivers32]
"mixer1"=wdmaud.drv
.
R1 ArcSec;ArcSec;c:windowssystem32driversArcSec.sys;c:windowsSYSNATIVEdriversArcSec.sys [x]
R2 AsSysCtrlService;ASUS System Control Service;c:program files (x86)ASUSAsSysCtrlService1.00.02AsSysCtrlService.exe;c:program files (x86)ASUSAsSysCtrlService1.00.02AsSysCtrlService.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:windowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe;c:windowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [x]
R2 HOSTS Anti-PUPs;HOSTS Anti-PUPs;c:program files (x86)Hosts_Anti_Adwares_PUPsHOSTS_Anti-Adware.exe;c:program files (x86)Hosts_Anti_Adwares_PUPsHOSTS_Anti-Adware.exe [x]
R2 MBAMScheduler;MBAMScheduler;c:program files (x86)Malwarebytes' Anti-Malwarembamscheduler.exe;c:program files (x86)Malwarebytes' Anti-Malwarembamscheduler.exe [x]
R2 MBAMService;MBAMService;c:program files (x86)Malwarebytes' Anti-Malwarembamservice.exe;c:program files (x86)Malwarebytes' Anti-Malwarembamservice.exe [x]
R3 BTCOM;Bluetooth Serial port driver;c:windowssystem32DRIVERSbtcomport.sys;c:windowsSYSNATIVEDRIVERSbtcomport.sys [x]
R3 BTCOMBUS;Bluetooth Serial Port Bus Service;c:windowssystem32Driversbtcombus.sys;c:windowsSYSNATIVEDriversbtcombus.sys [x]
R3 btnetBUs;Bluetooth PAN Bus Service;c:windowssystem32DriversbtnetBus.sys;c:windowsSYSNATIVEDriversbtnetBus.sys [x]
R3 dmvsc;dmvsc;c:windowssystem32driversdmvsc.sys;c:windowsSYSNATIVEdriversdmvsc.sys [x]
R3 ENTECH64;ENTECH64;c:windowssystem32DRIVERSENTECH64.sys;c:windowsSYSNATIVEDRIVERSENTECH64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:windowssystem32IEEtwCollector.exe;c:windowsSYSNATIVEIEEtwCollector.exe [x]
R3 IvtAudioBusSrv;IvtAudioBusSrv;c:windowssystem32DriversIvtBtBus.sys;c:windowsSYSNATIVEDriversIvtBtBus.sys [x]
R3 IvtBtBUs;IVT Bluetooth Bus Service;c:windowssystem32DriversIvtBtBus.sys;c:windowsSYSNATIVEDriversIvtBtBus.sys [x]
R3 IvtComBusSrv;IvtComBusSrv;c:windowssystem32Driversbtcombus.sys;c:windowsSYSNATIVEDriversbtcombus.sys [x]
R3 IvtPanBusSrv;IvtPanBusSrv;c:windowssystem32DriversbtnetBus.sys;c:windowsSYSNATIVEDriversbtnetBus.sys [x]
R3 MBAMProtector;MBAMProtector;c:windowssystem32driversmbam.sys;c:windowsSYSNATIVEdriversmbam.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:windowssystem32driversrdpvideominiport.sys;c:windowsSYSNATIVEdriversrdpvideominiport.sys [x]
R3 SwitchBoard;Adobe SwitchBoard;c:program files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe;c:program files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe [x]
R3 Synth3dVsc;Synth3dVsc;c:windowssystem32driverssynth3dvsc.sys;c:windowsSYSNATIVEdriverssynth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:windowssystem32driversterminpt.sys;c:windowsSYSNATIVEdriversterminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:windowssystem32driverstsusbflt.sys;c:windowsSYSNATIVEdriverstsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:windowssystem32driversTsUsbGD.sys;c:windowsSYSNATIVEdriversTsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:windowssystem32driverstsusbhub.sys;c:windowsSYSNATIVEdriverstsusbhub.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:windowssystem32Driversusbaapl64.sys;c:windowsSYSNATIVEDriversusbaapl64.sys [x]
R3 VGPU;VGPU;c:windowssystem32driversrdvgkmd.sys;c:windowsSYSNATIVEdriversrdvgkmd.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:windowssystem32WatWatAdminSvc.exe;c:windowsSYSNATIVEWatWatAdminSvc.exe [x]
R4 ADExchange;ArcSoft Exchange Service;c:program files (x86)Common FilesArcSoftesinterBineservutil.exe;c:program files (x86)Common FilesArcSoftesinterBineservutil.exe [x]
R4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:windowssystem32driversnvvad64v.sys;c:windowsSYSNATIVEdriversnvvad64v.sys [x]
R4 SkypeUpdate;Skype Updater;c:program files (x86)SkypeUpdaterUpdater.exe;c:program files (x86)SkypeUpdaterUpdater.exe [x]
R4 TeamViewer8;TeamViewer 8;c:program files (x86)TeamViewerVersion8TeamViewer_Service.exe;c:program files (x86)TeamViewerVersion8TeamViewer_Service.exe [x]
S0 BtHidBus;Bluetooth HID Bus Service;c:windowsSystem32DriversBtHidBus.sys;c:windowsSYSNATIVEDriversBtHidBus.sys [x]
S0 sptd;sptd;c:windowsSystemRootSystem32Driverssptd.sys;c:windowsSystemRootSystem32Driverssptd.sys [x]
S1 ArcCtrl;ArcCtrl;c:windowssystem32driversArcCtrl.sys;c:windowsSYSNATIVEdriversArcCtrl.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:windowssystem32DRIVERSdtsoftbus01.sys;c:windowsSYSNATIVEDRIVERSdtsoftbus01.sys [x]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
"RtHDVCpl"="c:program filesRealtekAudioHDARAVCpl64.exe" [2009-05-23 7833120]
"Skytel"="c:program filesRealtekAudioHDASkytel.exe" [2009-05-23 1833504]
.
------- Supplementary Scan -------
.
uLocal Page = c:windowssystem32blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:windowsSysWOW64blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:progra~2MICROS~1OFFICE11EXCEL.EXE/3000
TCP: DhcpNameServer = 46.40.72.13 46.40.72.9
FF - ProfilePath - c:usersuilytiuAppDataRoamingMozillaFirefoxProfilesqbf6kkfq.default
FF - prefs.js: browser.startup.homepage - hxxps://www.google.bg/webhp?authuser=1
FF - ExtSQL: 2013-11-01 10:44; {b9acf540-acba-11e1-8ccb-001fd0e08bd4}; c:usersuilytiuAppDataRoamingMozillaFirefoxProfilesqbf6kkfq.defaultextensions{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi
FF - ExtSQL: 2013-12-03 20:08; {5384767E-00D9-40E9-B72F-9CC39D655D6F}; c:usersuilytiuAppDataRoamingMozillaFirefoxProfilesqbf6kkfq.defaultextensions{5384767E-00D9-40E9-B72F-9CC39D655D6F}
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKLM-Run-StereoLinksInstall - c:program files (x86)NVIDIA Corporation3D Visionnvstlink.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{3DA165B6-CC41-11d2-BDC6-00C04F79EC6B}ProgID]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{3DA165B6-CC41-11d2-BDC6-00C04F79EC6B}Version]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}0000AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}0001AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINESYSTEMControlSet001ControlPCWSecurity]
@Denied: (Full) (Everyone)
.
Completion time: 2013-12-07  13:26:35
ComboFix-quarantined-files.txt  2013-12-07 11:26
.
Pre-Run: 25,695,756,288 bytes free
Post-Run: 25,533,378,560 bytes free
.
- - End Of File - - E6542A5387DC66B07FAC0E4A89E08C9B
A36C5E4F47E84449FF07ED3517B43A31
 

Ето това ми излезна накрая.

мисля че се получи май. В едно обаче съм сигурен -  проблема със безкрайното "qqqqqqqqqqqqqqqqqqqqqqq..." изчезна на 100%. Благодаря много за помаща още веднъж.

Прекрасно..!Радвам се че бях полезен..!
 
Деинсталирайте ComboFix така:

• [*]Натиснете Start ==> Run ==> въведете командата

Combofix /Uninstall ==> OK

• [*]
  

• [*]Моля, следвайте инструкциите, за да деинсталирате ComboFix. Ще получите съобщение, в което се казва ComboFix е деинсталиран успешно.
  

 

Изтеглете Delfix.exe и го стартирайте. Сложете отметка пред Remove disinfection tools => натиснете бутона Run Инструмента ще се самоизтрие след като

приключи своята задача!
 

 

Деинсталирайте adwcleaner.exe

• [*]Моля, затворете всички отворени програми и интернет браузъри. [*]Кликнете два пъти върху

adwcleaner.exe за да стартирате инструмента. [*]Кликнете върху Uninstall . [*]Щракнете върху Yes за да деинсталирате Adwcleaner

 

 

  Препоръчвам програмата Malwarebytes' Anti-Malware  да остане на вашия компютър и периодично да сканирате системата си с нея (поне един -два пъти в седмицата),като не забравяйте да обновите дефинициите и преди всяко сканиране..!

Стартирайте PatchMyPC и инсталирайте всички ъпдейти, които инструмента ви предложи.

Това е от мен..!Маркирам случая за "Решен"..Пожелавам лек ден и безопасен интернет..!