преди 4 дена имах хакерска атака и ми напълниха и компа с вируси и исписва някакви грешки при пускане

 

DDS (Ver_2011-09-30.01) - NTFS_AMD64Internet Explorer: 9.11.9600.16428Run by TheReaver at 16:00:18 on 2013-12-25Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1026.18.8167.4962 [GMT 2:00].SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}.============== Running Processes ===============.C:Windowssystem32wininit.exeC:Windowssystem32lsm.exeC:Windowssystem32svchost.exe -k DcomLaunchC:Program Files (x86)Common FilesCOMODOlauncher_service.exeC:Windowssystem32svchost.exe -k RPCSSC:Windowssystem32atiesrxx.exeC:WindowsSystem32svchost.exe -k LocalServiceNetworkRestrictedC:WindowsSystem32svchost.exe -k LocalSystemNetworkRestrictedC:Windowssystem32svchost.exe -k LocalServiceC:Windowssystem32svchost.exe -k netsvcsC:Windowssystem32svchost.exe -k GPSvcGroupC:WindowsSysWOW64fsproflt2.exeC:Windowssystem32atieclxx.exeC:Windowssystem32svchost.exe -k NetworkServiceC:WindowsSystem32spoolsv.exeC:Windowssystem32svchost.exe -k LocalServiceNoNetworkD:xamppapachebinhttpd.exeC:Program Files (x86)ComodoDragondragon_updater.exeC:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonationD:xamppfilezillaftpfilezillaserver.exeC:Program Files (x86)Common FilesCOMODOGeekBuddyRSP.exeC:Program FilesHide Folders 2012hf.exeC:Windowssystem32taskhost.exeC:Windowssystem32Dwm.exeC:Program FilesMicrosoft SQL ServerMSSQL10_50.MSSQLSERVERMSSQLBinnsqlservr.exeC:WindowsExplorer.EXED:xamppapachebinhttpd.exeC:Windowssystem32taskeng.exeC:Program Files (x86)ASRock UtilityAXTUBinAsrXTU.exeC:Program FilesRealtekAudioHDARAVCpl64.exeC:Windowsvmsnap3.exeC:WindowsDomino.exeC:UsersTheReaverAppDataRoamingSearch ProtectionSearchProtection.exeC:UsersTheReaverAppDataRoaminguTorrentuTorrent.exeC:Program Files (x86)IM Magicianvicamon.exeC:Program Files (x86)IM Magicianvmonproc.exeC:Program Files (x86)AdTrustMediaPrivDog1.8.0.18trustedadssvc.exeC:Program Files (x86)Common FilesCOMODOGeekBuddyRSP.exeC:Program FilesCOMODOGeekBuddyunit_manager.exeC:Program FilesCOMODOGeekBuddyunit.exeC:Program Files (x86)RelevantKnowledgerlservice.exeC:WindowsSysWOW64rserver30RServer3.exeC:Program FilesMicrosoft SQL Server90Sharedsqlwriter.exeC:Windowssystem32svchost.exe -k imgsvcC:WindowsSysWOW64rserver30FamItrfc.ExeC:WindowsSysWOW64rserver30FamItrfc.ExeC:Program Files (x86)TeamViewerVersion9TeamViewer_Service.exeC:Windowssystem32SearchIndexer.exeC:Windowssystem32wbemwmiprvse.exeC:Program Files (x86)RelevantKnowledgerlvknlg.exeC:Windowssystem32wbemunsecapp.exeC:PROGRA~2RELEVA~1rlvknlg64.exeC:PROGRA~2RELEVA~1rlvknlg32.exeC:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exeC:WindowsSystem32svchost.exe -k secsvcsC:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exeC:WindowsSysWOW64MacromedFlashFlashPlayerPlugin_11_9_900_170.exeC:WindowsSysWOW64MacromedFlashFlashPlayerPlugin_11_9_900_170.exeD:CS 1.6 SERVERSDeathrun [4Fun] 4CS - For Servershlds.exeD:CS 1.6 SERVERSHNS 1CS - For Servershlds.exeD:CS 1.6 SERVERSSURF 4CS - For Servershlds.exeD:CS 1.6 SERVERSZOMBIE 3CS - For Servershlds.exeC:Program Files (x86)Mozilla Firefoxfirefox.exeC:Program Files (x86)Mozilla Firefoxplugin-container.exeC:WindowsSysWOW64MacromedFlashFlashPlayerPlugin_11_9_900_170.exeC:WindowsSysWOW64MacromedFlashFlashPlayerPlugin_11_9_900_170.exeC:Program Files (x86)SkypePhoneSkype.exeC:Program Files (x86)OriginOrigin.exeC:Program FilesDAUMPotPlayerPotPlayerMini64.exeC:Windowssystem32SearchProtocolHost.exeC:Windowssystem32SearchFilterHost.exeC:Windowssystem32conhost.exeC:WindowsSystem32cscript.exe.============== Pseudo HJT Report ===============.mWinlogon: Userinit = userinit.exeBHO: Advanced SystemCare Browser Protection: {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:Program Files (x86)IObitSurfing ProtectionBrowerProtectASCPlugin_Protection.dllBHO: PrivDog Extension: {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:Program Files (x86)AdTrustMediaPrivDog1.8.0.18trustedads.dlluRun: [searchProtection] "C:UsersTheReaverAppDataRoamingSearch ProtectionSearchProtection.EXE" /autostartuRun: [uTorrent] "C:UsersTheReaverAppDataRoaminguTorrentuTorrent.exe"  /MINIMIZEDuRun: [RSS] wscript "C:UsersTheReaverAppDataRoamingAdobeFlash PlayerFile Cachefile.vbs" "C:UsersTheReaverAppDataRoamingAdobeFlash PlayerFile Cacherss.bat"uRun: [KiwiGuard] C:UsersTheReaverDesktopKiwiGuard-CrackedKiwiGuard-CrackedKiwiGuard.exeuRun: [firebwall] C:Program Files (x86)fireBwallfireBwall.exemRun: [iMMON] "C:Program Files (x86)IM MagicianVicamon.exe"mRun: [iMMONSUPPORT] "C:Program Files (x86)IM Magicianvmonproc.exe" /cls=IMMAGICIAN_CAMERA_MONITOR_I /exe=Vicamon.exemRun: [ComodoFSFirefox] "C:Program Files (x86)AdTrustMediaPrivDogFinalizeSetup.exe" /fmRun: [PrivDogService] "C:Program Files (x86)AdTrustMediaPrivDog1.8.0.18trustedadssvc.exe"mRun: [tvncontrol] "C:Program Files (x86)Common FilesCOMODOGeekBuddyRSP.exe" -controlservice -slaveStartupFolder: C:UsersTHEREA~1AppDataRoamingMICROS~1WindowsSTARTM~1ProgramsStartupGAMERA~1.LNK - C:UsersTheReaverAppDataRoamingGameRangerGameRangerGameRanger.exeStartupFolder: C:PROGRA~3MICROS~1WindowsSTARTM~1ProgramsStartupSQLSER~1.LNK - C:Program Files (x86)Microsoft SQL Server80ToolsBinnscm.exeStartupFolder: C:PROGRA~3MICROS~1WindowsSTARTM~1ProgramsStartupSTARTG~1.LNK - C:Program FilesCOMODOGeekBuddylauncher.exeuPolicies-Explorer: NoDriveTypeAutoRun = dword:145mPolicies-Explorer: NoActiveDesktop = dword:1mPolicies-Explorer: NoActiveDesktopChanges = dword:1mPolicies-System: ConsentPromptBehaviorAdmin = dword:0mPolicies-System: ConsentPromptBehaviorUser = dword:3mPolicies-System: EnableLUA = dword:0mPolicies-System: EnableUIADesktopToggle = dword:0mPolicies-System: PromptOnSecureDesktop = dword:0IE: {2F5C139F-79BD-4C84-A95A-E7140525BC55} - {5B06364D-FF00-4BD5-9D01-4379952513F2} - C:Program Files (x86)AdTrustMediaPrivDog1.8.0.18trustedads.dll.INFO: HKCU has more than 50 listed domains.If you wish to scan all of them, select the 'Force scan all domains' option..TCP: Interfaces{90C7E2AA-A9AE-4207-95B0-24447E8CB857} : NameServer = 88.87.0.2,88.87.10.2Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program Files (x86)Common FilesSkypeSkype4COM.dllSSODL: WebCheck - <orphaned>mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:Program Files (x86)GoogleChromeApplication31.0.1650.63Installerchrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chromex64-BHO: ExplorerWnd Helper: {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:Program Files (x86)IObitIObit UninstallerUninstallExplorer64.dllx64-BHO: PrivDog Extension: {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:Program FilesAdTrustMediaPrivDog1.8.0.18trustedads.dllx64-Run: [RtHDVCpl] C:Program FilesRealtekAudioHDARAVCpl64.exe -sx64-Run: [VMSnap3] C:WindowsVMSnap3.exex64-Run: [Domino] C:WindowsDomino.exex64-IE: {2F5C139F-79BD-4C84-A95A-E7140525BC55} - {5B06364D-FF00-4BD5-9D01-4379952513F2} - C:Program FilesAdTrustMediaPrivDog1.8.0.18trustedads.dllx64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>x64-SSODL: WebCheck - <orphaned>.================= FIREFOX ===================.FF - ProfilePath - C:UsersTheReaverAppDataRoamingMozillaFirefoxProfileso2bq2ky2.defaultFF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=3&q={searchTerms}FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=407453&p=FF - plugin: C:Program Files (x86)GoogleUpdate1.3.22.3npGoogleUpdate3.dllFF - plugin: C:Program Files (x86)Pando NetworksMedia BoosternpPandoWebPlugin.dllFF - plugin: C:WindowsSysWOW64MacromedFlashNPSWF32_11_9_900_170.dll.---- FIREFOX POLICIES ----FF - user.js: nglayout.initialpaint.delay - 750FF - user.js: content.notify.interval - 750000FF - user.js: content.max.tokenizing.time - 2250000FF - user.js: content.switch.threshold - 750000FF - user.js: network.http.pipelining.maxrequests - 8FF - user.js: network.http.request.max-start-delay - 0FF - user.js: network.http.max-connections - 48FF - user.js: network.http.max-connections-per-server - 16FF - user.js: network.http.max-persistent-connections-per-proxy - 16FF - user.js: network.http.max-persistent-connections-per-server - 8FF - user.js: browser.turbo.enabled - trueFF - user.js: browser.display.show_image_placeholders - trueFF - user.js: browser.chrome.favicons - falseFF - user.js: browser.urlbar.autocomplete.enabled - trueFF - user.js: browser.cache.memory.capacity - 65536FF - user.js: content.notify.ontimer - trueFF - user.js: content.interrupt.parsing - trueFF - user.js: plugin.expose_full_path - trueFF - user.js: ui.submenuDelay - 0FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://search.babylon.com/?babsrc=TB_def&mntrId=32d9490d000000000000002522aa4cc7&q=FF - user.js: extensions.BabylonToolbar.id - 32d9490d000000000000002522aa4cc7FF - user.js: extensions.BabylonToolbar.appId - {BDB69379-802F-4eaf-B541-F8DE92DD98DB}FF - user.js: extensions.BabylonToolbar.instlDay - 15726FF - user.js: extensions.BabylonToolbar.vrsn - 1.8.7.2FF - user.js: extensions.BabylonToolbar.vrsni - 1.8.7.2FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.8.7.222:44:07FF - user.js: extensions.BabylonToolbar.prtnrId - babylonFF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbarFF - user.js: extensions.BabylonToolbar.aflt - babsstFF - user.js: extensions.BabylonToolbar_i.smplGrp - noneFF - user.js: extensions.BabylonToolbar.tlbrId - baseFF - user.js: extensions.BabylonToolbar.instlRef - sstFF - user.js: extensions.BabylonToolbar.dfltLng - enFF - user.js: extensions.BabylonToolbar_i.excTlbr - falseFF - user.js: extensions.BabylonToolbar.excTlbr - falseFF - user.js: extensions.BabylonToolbar.admin - falseFF - user.js: extensions.BabylonToolbar_i.babTrack - affID=117023&tt=0313_7FF - user.js: extensions.BabylonToolbar_i.babExt -FF - user.js: extensions.BabylonToolbar_i.srcExt - ssFF - user.js: extensions.BabylonToolbar.autoRvrt - falseFF - user.js: extensions.BabylonToolbar.rvrt - falseFF - user.js: extensions.BabylonToolbar_i.newTab - false.============= SERVICES / DRIVERS ===============.R0 FSProFilter2;FSPro File Filter 2;C:WindowsSystem32driversFSPFltd2.sys [2013-11-20 57648]R1 CFRMD;CFRMD;C:WindowsSystem32driversCFRMD.sys [2013-5-7 37976]R1 HMD;COMODO livePCsupport Hardware Monitor Driver;C:WindowsSystem32drivershmd.sys [2013-10-7 14888]R1 ndisrd;WinpkFilter LightWeight Filter;C:WindowsSystem32driversndisrd.sys [2013-8-5 43088]R1 raddrvv3;raddrvv3;C:WindowsSysWOW64rserver30raddrvv3.sys [2009-10-9 68704]R2 AMD External Events Utility;AMD External Events Utility;C:WindowsSystem32atiesrxx.exe [2013-8-31 239616]R2 Apache2.2;Apache2.2;D:xamppapachebinhttpd.exe [2008-12-10 24636]R2 CLPSLauncher;COMODO LPS Launcher;C:Program Files (x86)Common FilesCOMODOlauncher_service.exe [2013-12-13 70352]R2 DragonUpdater;COMODO Dragon Update Service;C:Program Files (x86)ComodoDragondragon_updater.exe [2013-11-11 2098880]R2 fsproflt2;FSPro Filter Service 2;C:WindowsSysWOW64fsproflt2.exe [2013-11-20 49512]R2 GeekBuddyRSP;GeekBuddyRSP Server;C:Program Files (x86)Common FilesCOMODOGeekBuddyRSP.exe [2013-12-13 2327248]R2 RelevantKnowledge;RelevantKnowledge;C:Program Files (x86)RelevantKnowledgerlservice.exe [2013-12-13 186136]R2 RServer3;Radmin Server V3;C:WindowsSysWOW64rserver30rserver3.exe [2009-10-9 1242504]R2 TeamViewer9;TeamViewer 9;C:Program Files (x86)TeamViewerVersion9TeamViewer_Service.exe [2013-12-20 5341536]R2 UNS;Intel® Management and Security Application User Notification Service;C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe [2013-11-20 2656280]R3 amdkmdag;amdkmdag;C:WindowsSystem32driversatikmdag.sys [2013-8-31 12528640]R3 amdkmdap;amdkmdap;C:WindowsSystem32driversatikmpag.sys [2013-8-31 618496]R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:WindowsSystem32driversAtihdW76.sys [2013-7-5 96256]R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;C:WindowsSystem32driversEtronHub3.sys [2011-2-8 39936]R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;C:WindowsSystem32driversEtronXHCI.sys [2011-2-8 64512]R3 MEIx64;Intel® Management Engine Interface;C:WindowsSystem32driversHECIx64.sys [2013-11-20 56344]R3 mirrorv3;mirrorv3;C:WindowsSystem32driversrminiv3.sys [2012-12-18 5632]R3 RTL8167;Realtek 8167 NT Driver;C:WindowsSystem32driversRt64win7.sys [2013-11-20 344680]R3 vvftav303;vvftav303;C:WindowsSystem32driversvvftav303.sys [2013-12-13 308096]R3 ZSMC0303;A4 TECH PC Camera H;C:WindowsSystem32driversusbVM303.sys [2013-12-13 1494656]S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2012-7-9 104912]S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2012-7-8 123856]S2 gupdate;Услуга на Google Актуализация (gupdate);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2013-11-21 116648]S2 hlsm;HL Server Monitor;D:CS 1.6 SERVERSDEATHRUN [FUN] (6132)hlsm.exe --> D:CS 1.6 SERVERSDEATHRUN [FUN] (6132)hlsm.exe [?]S2 LiveUpdateSvc;LiveUpdate;C:Program Files (x86)IObitLiveUpdateLiveUpdate.exe [2013-11-20 2151232]S2 SkypeUpdate;Skype Updater;C:Program Files (x86)SkypeUpdaterUpdater.exe [2013-9-5 171680]S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe [2013-11-20 257416]S3 dmvsc;dmvsc;C:WindowsSystem32driversdmvsc.sys [2011-4-12 71168]S3 gupdatem;Услуга на Google Актуализация (gupdatem);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2013-11-21 116648]S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:WindowsSystem32ieetwcollector.exe [2013-12-13 111616]S3 MozillaMaintenance;Mozilla Maintenance Service;C:Program Files (x86)Mozilla Maintenance Servicemaintenanceservice.exe [2013-11-20 119408]S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:WindowsSystem32driversrdpvideominiport.sys [2013-11-20 19456]S3 Revoflt;Revoflt;C:WindowsSystem32driversrevoflt.sys [2013-11-21 31800]S3 RTCore64;RTCore64;C:Program Files (x86)MSI AfterburnerRTCore64.sys [2013-1-23 13368]S3 Synth3dVsc;Synth3dVsc;C:WindowsSystem32driversSynth3dVsc.sys [2011-4-12 88960]S3 terminpt;Microsoft Remote Desktop Input Driver;C:WindowsSystem32driversterminpt.sys [2013-11-20 29696]S3 TsUsbFlt;TsUsbFlt;C:WindowsSystem32driversTsUsbFlt.sys [2013-11-20 57856]S3 TsUsbGD;Remote Desktop Generic USB Device;C:WindowsSystem32driversTsUsbGD.sys [2013-11-20 30208]S3 WatAdminSvc;Windows Activation Technologies Service;C:WindowsSystem32WatWatAdminSvc.exe [2013-11-20 1255736]S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;C:Program FilesMicrosoft SQL Server100Sharedsqladhlp.exe [2010-4-3 59744]S4 RsFx0153;RsFx0153 Driver;C:WindowsSystem32driversRsFx0153.sys [2012-6-29 321992]SUnknown tsusbhub;tsusbhub; [x].=============== Created Last 30 ================.2013-12-24 12:30:49  --------  d-----w-  C:Program FilesHide Folders 20122013-12-24 10:04:12  10315576  ----a-w-  C:ProgramDataMicrosoftWindows DefenderDefinition Updates{9FC35C14-EFDF-4276-8687-A6985F460EBC}mpengine.dll2013-12-24 09:52:46  94208  ----a-w-  C:WindowsDIIUnin.exe2013-12-24 09:52:46  2829  ----a-w-  C:WindowsDIIUnin.pif2013-12-24 09:51:17  --------  d-----w-  C:Program Files (x86)Diablo II2013-12-22 09:30:17  --------  d-----w-  C:Program Files (x86)QS2013-12-21 09:49:11  --------  d-----w-  C:UsersTheReaverAppDataRoamingComodo2013-12-21 07:51:23  --------  d-----w-  C:Program Files (x86)Common FilesCOMODO2013-12-21 07:35:34  --------  d-----w-  C:UsersTheReaverAppDataLocalAdTrustMedia2013-12-21 07:34:36  --------  d-----w-  C:Program FilesAdTrustMedia2013-12-21 07:34:36  --------  d-----w-  C:Program Files (x86)AdTrustMedia2013-12-21 07:34:35  --------  d-----w-  C:ProgramDataAdtrustmedia2013-12-21 07:34:26  --------  d-----w-  C:ProgramDataCOMODO2013-12-21 07:34:17  --------  d-----w-  C:Program FilesCOMODO2013-12-21 07:34:10  --------  d-----w-  C:UsersTheReaverAppDataLocalComodo2013-12-21 07:34:07  57096  ----a-w-  C:WindowsSystem32certsentry.dll2013-12-21 07:34:07  48392  ----a-w-  C:WindowsSysWow64certsentry.dll2013-12-21 07:34:02  --------  d-----w-  C:Program Files (x86)Comodo2013-12-21 07:22:57  --------  d-----w-  C:ISA Server 2006 SP1 Standard Edition CD2013-12-21 07:12:56  --------  d-----w-  C:Program Files (x86)Sygate2013-12-21 07:12:39  --------  d-----w-  C:Program Files (x86)Common FilesWise Installation Wizard2013-12-21 07:10:31  --------  d-----w-  C:UsersTheReaverAppDataRoamingfirebwall2013-12-21 07:10:03  --------  d-----w-  C:Program Files (x86)WinpkFilter2013-12-20 23:31:32  --------  d-----w-  C:Program Files (x86)Everything2013-12-20 22:56:59  --------  d-----w-  C:Program Files (x86)Anti DDoS Guardian 2.32013-12-20 22:39:34  36256  ----a-w-  C:WindowsSystem32driversnblocker.sys2013-12-20 22:39:33  --------  d-----w-  C:Program Files (x86)Anti DDoS Guardian 3.12013-12-18 17:56:22  --------  d-----w-  C:WindowsCS 1.6 COOL EDiTiON2013-12-14 20:59:00  --------  d-----w-  C:Program Files (x86)MSXML 4.02013-12-14 06:06:35  859416  ----a-w-  C:WindowsSystem32rlls64.dll2013-12-14 06:06:35  593688  ----a-w-  C:WindowsSysWow64rlls.dll2013-12-13 21:10:26  167424  ----a-w-  C:Program FilesWindows Media Playerwmplayer.exe2013-12-13 21:10:26  164864  ----a-w-  C:Program Files (x86)Windows Media Playerwmplayer.exe2013-12-13 21:10:26  12625920  ----a-w-  C:WindowsSystem32wmploc.DLL2013-12-13 21:10:25  12625408  ----a-w-  C:WindowsSysWow64wmploc.DLL2013-12-13 20:23:47  --------  d-----w-  C:Program FilesCPUID2013-12-13 11:57:55  --------  d-----w-  C:UsersTheReaverAppDataRoamingVimisoft Studio2013-12-13 11:57:47  77824  ----a-w-  C:WindowsSysWow64vgf.dll2013-12-13 11:57:47  450560  ----a-w-  C:WindowsSysWow64newlistview2.dll2013-12-13 11:57:47  --------  d-----w-  C:Program Files (x86)Common FilesVimisoft Studio2013-12-13 11:57:30  --------  d-----w-  C:Program Files (x86)Vimicro Corporation2013-12-13 11:57:16  --------  d-----w-  C:Program Files (x86)IM Magician2013-12-13 11:49:04  --------  d-----w-  C:WindowsEffectResources2013-12-12 22:32:08  --------  d-----w-  C:Program Files (x86)RelevantKnowledge2013-12-12 22:31:34  --------  d-----w-  C:Program Files (x86)Free EXE Lock2013-12-12 22:20:11  --------  d-----w-  C:Program Files (x86)ELTIMA Software2013-12-12 10:10:15  --------  d-----w-  C:UsersTheReaverAppDataRoamingLolClient2013-12-12 09:28:07  467984  ----a-w-  C:WindowsSysWow64d3dx10_39.dll2013-12-12 09:28:07  1493528  ----a-w-  C:WindowsSysWow64D3DCompiler_39.dll2013-12-12 09:28:06  3851784  ----a-w-  C:WindowsSysWow64D3DX9_39.dll2013-12-12 09:27:55  --------  d-sh--w-  C:WindowsSysWow64AI_RecycleBin2013-12-12 09:26:13  --------  d-----w-  C:UsersTheReaverAppDataLocalPMB Files2013-12-12 09:26:12  --------  d-----w-  C:ProgramDataPMB Files2013-12-12 09:26:09  --------  d-----w-  C:Program Files (x86)Pando Networks2013-12-12 09:25:45  --------  d-----w-  C:UsersTheReaverAppDataRoamingRiot Games2013-12-11 19:58:08  --------  d-----w-  C:WindowsSysWow64directx2013-12-11 19:57:52  --------  d-----w-  C:Program Files (x86)MSI Afterburner2013-12-11 11:37:34  --------  d-----w-  C:Fraps2013-12-10 08:35:22  --------  d-----w-  C:UsersTheReaverAppDataLocalApps2013-12-10 08:34:55  --------  d-----w-  C:Program Files (x86)Active Data Recovery Software2013-12-10 08:25:13  --------  d-----w-  C:UsersTheReaverAppDataLocalstorage2013-12-08 16:15:05  --------  d-----w-  C:UsersTheReaverAppDataLocalMicrosoft_Corporation2013-12-08 16:13:31  57288  ----a-w-  C:WindowsSysWow64perf-MSSQL10_50.MSSQLSERVER-sqlagtctr.dll2013-12-08 16:13:30  86984  ----a-w-  C:WindowsSystem32perf-MSSQL10_50.MSSQLSERVER-sqlagtctr.dll2013-12-08 16:13:18  88520  ----a-w-  C:WindowsSystem32perf-MSSQLSERVER-sqlctr10.52.4000.0.dll2013-12-08 16:13:18  82888  ----a-w-  C:WindowsSysWow64perf-MSSQLSERVER-sqlctr10.52.4000.0.dll2013-12-08 16:12:11  --------  d-----w-  C:WindowsSystem32RsFx2013-12-08 16:09:22  --------  d-----w-  C:UsersTheReaverAppDataLocalMicrosoft Help2013-12-08 16:08:30  --------  d-----w-  C:Program Files (x86)Microsoft Synchronization Services2013-12-08 16:08:16  --------  d-----w-  C:Program Files (x86)Microsoft SQL Server Compact Edition2013-12-08 16:08:10  --------  d-----w-  C:WindowsSysWow6410332013-12-08 16:08:10  --------  d-----w-  C:WindowsSystem3210332013-12-08 16:04:43  --------  d-----w-  C:WindowsPCHEALTH2013-12-08 16:02:41  --------  d-----w-  C:Program FilesMicrosoft SQL Server2013-12-08 15:49:45  --------  d-----w-  C:UsersTheReaverAppDataLocalDownloaded Installations2013-12-07 07:05:24  --------  d-----w-  C:UsersTheReaverAppDataRoamingSearch Protection2013-12-07 07:05:17  --------  d-----w-  C:ProgramDataYTD Video Downloader2013-12-07 07:05:04  --------  d-----w-  C:Program Files (x86)GreenTree Applications2013-12-06 16:02:03  --------  d-----w-  C:ProgramData{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}2013-12-06 16:02:03  --------  d-----w-  C:ProgramData{D76294E6-03B8-4971-AF2E-3F846161A690}2013-12-05 20:05:47  --------  d-----w-  C:Program Files (x86)VideoLAN2013-12-05 10:34:33  --------  d-----w-  C:Program Files (x86)ASRock Utility2013-11-29 20:03:21  --------  d-----w-  C:Program Files (x86)Unlocker2013-11-29 12:44:01  --------  d-----w-  C:Program Files (x86)avpbg2013-11-29 12:40:47  --------  d-----w-  C:ProgramDataKaspersky Lab2013-11-29 12:16:43  --------  d-----w-  C:Program Files (x86)Kaspersky Lab2013-11-29 12:04:19  --------  d-s---w-  C:WindowsSysWow64Microsoft2013-11-28 16:43:50  --------  d-----w-  C:ProgramDataAMMYY2013-11-27 20:20:17  --------  d-----w-  C:Program Files (x86)TeamViewer2013-11-27 18:59:11  --------  d-----w-  C:Program Files (x86)Common FilesSteam2013-11-27 18:03:20  --------  d-----w-  C:UsersTheReaverAppDataRoamingRadmin2013-11-27 11:13:35  99840  ----a-w-  C:WindowsSystem32driversusbccgp.sys2013-11-27 11:13:35  52736  ----a-w-  C:WindowsSystem32driversusbehci.sys2013-11-27 11:13:34  7808  ----a-w-  C:WindowsSystem32driversusbd.sys2013-11-27 11:13:34  343040  ----a-w-  C:WindowsSystem32driversusbhub.sys2013-11-27 11:13:34  325120  ----a-w-  C:WindowsSystem32driversusbport.sys2013-11-27 11:13:34  30720  ----a-w-  C:WindowsSystem32driversusbuhci.sys2013-11-27 11:13:34  25600  ----a-w-  C:WindowsSystem32driversusbohci.sys2013-11-27 09:18:01  140288  ----a-w-  C:WindowsSysWow64Comdlg32.ocx2013-11-27 09:18:00  1355776  ----a-w-  C:WindowsSysWow64msvbvm50.dll2013-11-27 09:17:57  192569  ----a-w-  C:WindowsSysWow64msrpjt40.dll2013-11-27 09:17:42  274489  ----a-w-  C:WindowsSysWow64ntwdblib.dll2013-11-27 09:17:39  97552  ----a-w-  C:WindowsSysWow64rdocurs.dll2013-11-27 09:17:39  376592  ----a-w-  C:WindowsSysWow64msrdo20.dll2013-11-27 09:17:38  32830  ----a-w-  C:WindowsSysWow64dbmsshrn.dll2013-11-27 09:17:13  --------  d-----w-  C:Program Files (x86)Microsoft SQL Server2013-11-27 09:04:36  306688  ----a-w-  C:WindowsIsUninst.exe2013-11-27 08:59:29  --------  d-----w-  C:UsersTheReaverAppDataRoamingTeamViewer2013-11-27 08:48:29  --------  d-----w-  C:WindowsSysWow64rserver302013-11-27 07:43:42  --------  d-sh--w-  C:ProgramDataDSS2013-11-26 19:05:36  --------  d-----w-  C:Program Files (x86)Origin Games2013-11-26 19:05:17  --------  d-----w-  C:UsersTheReaverAppDataRoamingOrigin2013-11-26 19:05:16  --------  d-----w-  C:UsersTheReaverAppDataLocalOrigin2013-11-26 19:03:58  --------  d-----w-  C:ProgramDataOrigin2013-11-26 19:03:57  --------  d-----w-  C:ProgramDataElectronic Arts2013-11-26 19:03:43  --------  d-----w-  C:Program Files (x86)Origin2013-11-26 07:47:40  --------  d-----r-  C:Program Files (x86)Skype2013-11-26 06:14:47  --------  d-----w-  C:WindowsSystem32MRT.==================== Find3M  ====================.2013-12-11 18:21:23  71048  ----a-w-  C:WindowsSysWow64FlashPlayerCPLApp.cpl2013-12-11 18:21:23  692616  ----a-w-  C:WindowsSysWow64FlashPlayerApp.exe2013-11-26 10:19:07  2724864  ----a-w-  C:WindowsSystem32mshtml.tlb2013-11-26 10:18:23  4096  ----a-w-  C:WindowsSystem32ieetwcollectorres.dll2013-11-26 09:48:07  66048  ----a-w-  C:WindowsSystem32iesetup.dll2013-11-26 09:46:25  48640  ----a-w-  C:WindowsSystem32ieetwproxystub.dll2013-11-26 09:23:02  2724864  ----a-w-  C:WindowsSysWow64mshtml.tlb2013-11-26 09:18:39  139264  ----a-w-  C:WindowsSystem32ieUnatt.exe2013-11-26 09:18:09  111616  ----a-w-  C:WindowsSystem32ieetwcollector.exe2013-11-26 09:16:57  708608  ----a-w-  C:WindowsSystem32jscript9diag.dll2013-11-26 08:35:02  5769216  ----a-w-  C:WindowsSystem32jscript9.dll2013-11-26 08:28:16  553472  ----a-w-  C:WindowsSysWow64jscript9diag.dll2013-11-26 08:16:12  4243968  ----a-w-  C:WindowsSysWow64jscript9.dll2013-11-26 08:02:16  1995264  ----a-w-  C:WindowsSystem32inetcpl.cpl2013-11-26 07:32:06  1928192  ----a-w-  C:WindowsSysWow64inetcpl.cpl2013-11-26 07:07:57  2334208  ----a-w-  C:WindowsSystem32wininet.dll2013-11-26 06:33:33  1820160  ----a-w-  C:WindowsSysWow64wininet.dll2013-11-23 18:26:20  417792  ----a-w-  C:WindowsSysWow64WMPhoto.dll2013-11-23 17:47:34  465920  ----a-w-  C:WindowsSystem32WMPhoto.dll2013-11-21 11:44:01  447888  ----a-w-  C:WindowsSystem32driversaswNdisFlt.sys2013-11-20 17:05:45  197120  ----a-w-  C:WindowsSystem32credui.dll2013-11-20 17:05:45  1930752  ----a-w-  C:WindowsSystem32authui.dll2013-11-20 17:05:45  190464  ----a-w-  C:WindowsSystem32SmartcardCredentialProvider.dll2013-11-20 17:05:45  1796096  ----a-w-  C:WindowsSysWow64authui.dll2013-11-20 17:05:45  168960  ----a-w-  C:WindowsSysWow64credui.dll2013-11-20 17:05:45  152576  ----a-w-  C:WindowsSysWow64SmartcardCredentialProvider.dll2013-11-20 17:03:35  404480  ----a-w-  C:WindowsSystem32gdi32.dll2013-11-20 17:03:35  311808  ----a-w-  C:WindowsSysWow64gdi32.dll2013-11-20 17:02:43  1474048  ----a-w-  C:WindowsSystem32crypt32.dll2013-11-20 17:02:43  1168384  ----a-w-  C:WindowsSysWow64crypt32.dll2013-11-20 17:01:48  497152  ----a-w-  C:WindowsSystem32driversafd.sys2013-11-20 16:59:21  30720  ----a-w-  C:WindowsSystem32cryptdlg.dll2013-11-20 16:59:21  24576  ----a-w-  C:WindowsSysWow64cryptdlg.dll2013-11-20 16:58:28  81920  ----a-w-  C:WindowsSysWow64davclnt.dll2013-11-20 16:58:28  259584  ----a-w-  C:WindowsSystem32WebClnt.dll2013-11-20 16:58:28  205824  ----a-w-  C:WindowsSysWow64WebClnt.dll2013-11-20 16:58:28  140800  ----a-w-  C:WindowsSystem32driversmrxdav.sys2013-11-20 16:58:28  102400  ----a-w-  C:WindowsSystem32davclnt.dll2013-11-20 16:56:50  461312  ----a-w-  C:WindowsSystem32scavengeui.dll2013-11-20 16:55:28  109824  ----a-w-  C:WindowsSystem32driversUSBAUDIO.sys2013-11-20 16:55:28  100864  ----a-w-  C:WindowsSystem32driversusbcir.sys2013-11-20 16:54:46  785624  ----a-w-  C:WindowsSystem32driversWdf01000.sys2013-11-20 16:54:00  633856  ----a-w-  C:WindowsSystem32comctl32.dll2013-11-20 16:54:00  530432  ----a-w-  C:WindowsSysWow64comctl32.dll2013-11-20 16:53:19  76800  ----a-w-  C:WindowsSystem32drivershidclass.sys2013-11-20 16:53:19  32896  ----a-w-  C:WindowsSystem32drivershidparse.sys2013-11-20 16:52:32  70656  ----a-w-  C:WindowsSysWow64fontsub.dll2013-11-20 16:52:32  46080  ----a-w-  C:WindowsSystem32atmlib.dll2013-11-20 16:52:32  41472  ----a-w-  C:WindowsSystem32lpk.dll2013-11-20 16:52:32  368128  ----a-w-  C:WindowsSystem32atmfd.dll2013-11-20 16:52:32  34304  ----a-w-  C:WindowsSysWow64atmlib.dll2013-11-20 16:52:32  295424  ----a-w-  C:WindowsSysWow64atmfd.dll2013-11-20 16:52:32  25600  ----a-w-  C:WindowsSysWow64lpk.dll2013-11-20 16:52:32  14336  ----a-w-  C:WindowsSystem32dciman32.dll2013-11-20 16:52:32  10240  ----a-w-  C:WindowsSysWow64dciman32.dll2013-11-20 16:52:32  100864  ----a-w-  C:WindowsSystem32fontsub.dll2013-11-20 16:51:50  983488  ----a-w-  C:WindowsSystem32driversdxgkrnl.sys2013-11-20 16:51:50  265064  ----a-w-  C:WindowsSystem32driversdxgmms1.sys2013-11-20 16:51:50  144384  ----a-w-  C:WindowsSystem32cdd.dll2013-11-20 16:48:18  124112  ----a-w-  C:WindowsSystem32PresentationCFFRasterizerNative_v0300.dll2013-11-20 16:48:18  102608  ----a-w-  C:WindowsSysWow64PresentationCFFRasterizerNative_v0300.dll2013-11-20 16:46:51  1887232  ----a-w-  C:WindowsSystem32d3d11.dll2013-11-20 16:46:51  1505280  ----a-w-  C:WindowsSysWow64d3d11.dll2013-11-20 16:46:05  327168  ----a-w-  C:WindowsSystem32mswsock.dll2013-11-20 16:46:05  231424  ----a-w-  C:WindowsSysWow64mswsock.dll2013-11-20 16:46:05  1903552  ----a-w-  C:WindowsSystem32driverstcpip.sys2013-11-20 16:44:23  62976  ----a-w-  C:WindowsSystem32TSWbPrxy.exe2013-11-20 16:41:21  155584  ----a-w-  C:WindowsSystem32driversataport.sys2013-11-20 16:40:48  1888768  ----a-w-  C:WindowsSystem32WMVDECOD.DLL2013-11-20 16:40:48  1620992  ----a-w-  C:WindowsSysWow64WMVDECOD.DLL2013-11-20 16:37:55  663552  ----a-w-  C:WindowsSysWow64rpcrt4.dll2013-11-20 16:37:55  1217024  ----a-w-  C:WindowsSystem32rpcrt4.dll2013-11-20 16:37:18  288088  ----a-w-  C:WindowsSystem32driversFWPKCLNT.SYS2013-11-20 16:36:46  39936  ----a-w-  C:WindowsSystem32driverstssecsrv.sys2013-11-20 16:36:08  224256  ----a-w-  C:WindowsSystem32wintrust.dll2013-11-20 16:36:08  184320  ----a-w-  C:WindowsSystem32cryptsvc.dll2013-11-20 16:36:08  175104  ----a-w-  C:WindowsSysWow64wintrust.dll2013-11-20 16:36:08  140288  ----a-w-  C:WindowsSysWow64cryptsvc.dll2013-11-20 16:36:08  139776  ----a-w-  C:WindowsSystem32cryptnet.dll2013-11-20 16:36:08  103936  ----a-w-  C:WindowsSysWow64cryptnet.dll2013-11-20 16:34:58  624128  ----a-w-  C:WindowsSystem32qedit.dll2013-11-20 16:34:58  509440  ----a-w-  C:WindowsSysWow64qedit.dll2013-11-20 16:29:24  751104  ----a-w-  C:WindowsSystem32win32spl.dll2013-11-20 16:29:24  492544  ----a-w-  C:WindowsSysWow64win32spl.dll2013-11-20 16:28:45  903168  ----a-w-  C:WindowsSysWow64certutil.exe2013-11-20 16:28:45  52224  ----a-w-  C:WindowsSystem32certenc.dll2013-11-20 16:28:45  43008  ----a-w-  C:WindowsSysWow64certenc.dll2013-11-20 16:28:45  1192448  ----a-w-  C:WindowsSystem32certutil.exe2013-11-20 16:26:26  70144  ----a-w-  C:WindowsSystem32appinfo.dll2013-11-20 16:26:26  111448  ----a-w-  C:WindowsSystem32consent.exe2013-11-20 16:25:51  48640  ----a-w-  C:WindowsSystem32wwanprotdim.dll2013-11-20 16:25:51  230400  ----a-w-  C:WindowsSystem32wwansvc.dll2013-11-20 16:25:26  474624  ----a-w-  C:WindowsapppatchAcSpecfc.dll2013-11-20 16:25:26  350208  ----a-w-  C:WindowsapppatchAppPatch64AcLayers.dll2013-11-20 16:25:26  308736  ----a-w-  C:WindowsapppatchAppPatch64AcGenral.dll2013-11-20 16:25:26  2176512  ----a-w-  C:WindowsapppatchAcGenral.dll2013-11-20 16:25:26  135168  ----a-w-  C:WindowsapppatchAppPatch64AcXtrnal.dll2013-11-20 16:25:26  111104  ----a-w-  C:WindowsapppatchAppPatch64acspecfc.dll2013-11-20 16:23:47  1656680  ----a-w-  C:WindowsSystem32driversntfs.sys2013-11-20 16:22:41  223752  ----a-w-  C:WindowsSystem32driversfvevol.sys.============= FINISH: 16:00:33,29 ===============.UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.IF REQUESTED, ZIP IT UP & ATTACH IT.DDS (Ver_2011-09-30.01).Microsoft Windows 7 UltimateBoot Device: DeviceHarddiskVolume1Install Date: 20.11.2013 г. 17:05:38System Uptime: 25.12.2013 г. 08:00:46 (8 hours ago).Motherboard: ASRock |  | H67M-GEProcessor: Intel® Core i5-2400 CPU @ 3.10GHz | CPUSocket | 3101/100mhz.==== Disk Partitions =========================.C: is FIXED (NTFS) - 100 GiB total, 46,398 GiB free.D: is FIXED (NTFS) - 831 GiB total, 364,807 GiB free.E: is CDROM ().==== Disabled Device Manager Items =============.==== System Restore Points ===================.RP102: 21.12.2013 г. 13:28:20 - Инсталиране на драйверен пакет за устройство: COMODO Мрежова услугаRP103: 24.12.2013 г. 12:03:54 - Windows Update.==== Installed Programs ======================.µTorrentA4 TECH PC Camera HActive@ UNDELETE 7 EnterpriseAdobe Flash Player 11 PluginAdobe Flash Player 9 ActiveXAIDA64 Business v4.00AMD Accelerated Video TranscodingAMD Catalyst Control CenterAMD Catalyst Install ManagerAMD Drag and Drop TranscodingAMD Media Foundation DecodersASRock eXtreme Tuner v0.1.215Catalyst Control Center - BrandingCatalyst Control Center Graphics Previews CommonCatalyst Control Center InstallProxyCatalyst Control Center Localization Allccc-utility64CCC Help Chinese StandardCCC Help Chinese TraditionalCCC Help CzechCCC Help DanishCCC Help DutchCCC Help EnglishCCC Help FinnishCCC Help FrenchCCC Help GermanCCC Help GreekCCC Help HungarianCCC Help ItalianCCC Help JapaneseCCC Help KoreanCCC Help NorwegianCCC Help PolishCCC Help PortugueseCCC Help RussianCCC Help SpanishCCC Help SwedishCCC Help ThaiCCC Help TurkishCCleanerComodo DragonComponents SetupCounter-StrikeCPUID CPU-Z 1.67.1CS 1.6 COOL EDiTiONDaum PotPlayer 1.5.39659 x64 EditionDiablo IIDiablo II - Eastern SunEtron USB3.0 Host ControllerEverything 1.2.1.371EXE Password Protector 1.1.6.214FIFA 13foobar2000 v1.2.9Fraps (remove only)Free EXE Lock 5.4.5GameRangerGeekBuddyGoogle ChromeGoogle Update HelperHotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946040)Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946308)Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946344)Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947540)Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789)IM MagicianInfinityMU SEASON 3Intel® Management Engine ComponentsIObit UninstallerK-Lite Mega Codec Pack 9.8.5League of LegendsMicrosoft .NET Framework 4.5Microsoft Application Error ReportingMicrosoft Report Viewer Redistributable 2008 (KB971119)Microsoft Report Viewer Redistributable 2008 SP1Microsoft SQL Server 2008 R2 (64-bit)Microsoft SQL Server 2008 R2 Native ClientMicrosoft SQL Server 2008 R2 PoliciesMicrosoft SQL Server 2008 R2 RsFx DriverMicrosoft SQL Server 2008 R2 Setup (English)Microsoft SQL Server 2008 Setup Support FilesMicrosoft SQL Server BrowserMicrosoft SQL Server Compact 3.5 SP2 ENUMicrosoft SQL Server Compact 3.5 SP2 Query Tools ENUMicrosoft SQL Server VSS WriterMicrosoft Visual C++ 2005 RedistributableMicrosoft Visual C++ 2005 Redistributable (x64)Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727Microsoft Visual Studio Tools for Applications 2.0 - ENUMozilla Firefox 26.0 (x86 bg)Mozilla Maintenance ServiceMSI Afterburner 2.3.1MSXML 4.0 SP2 (KB954430)MSXML 4.0 SP2 (KB973688)NetTools 5.0Notepad++OriginPando Media BoosterPowerISOPrivDogRadmin Server 3.4Realtek Ethernet Controller Driver For Windows 7Realtek High Definition Audio DriverRelevantKnowledgeRevo Uninstaller Pro 3.0.8Search ProtectionSecurity Update for Microsoft .NET Framework 4.5 (KB2737083)Security Update for Microsoft .NET Framework 4.5 (KB2742613)Security Update for Microsoft .NET Framework 4.5 (KB2789648)Security Update for Microsoft .NET Framework 4.5 (KB2833957)Security Update for Microsoft .NET Framework 4.5 (KB2840642v2)Security Update for Microsoft .NET Framework 4.5 (KB2861208)Service Pack 2 for SQL Server 2008 R2 (KB2630458) (64-bit)Skype™ 6.11SQL Server 2008 R2 SP2 Common FilesSQL Server 2008 R2 SP2 Database Engine ServicesSQL Server 2008 R2 SP2 Database Engine SharedSQL Server 2008 R2 SP2 Management StudioSql Server Customer Experience Improvement ProgramSurfing ProtectionTeamViewer 9Ubisoft Game LauncherUpdate for Microsoft .NET Framework 4.5 (KB2750147)Update for Microsoft .NET Framework 4.5 (KB2805221)Update for Microsoft .NET Framework 4.5 (KB2805226)VLC media player 2.1.1WinPcap 3.0WinpkFilter Runtime & ToolsWinRAR 5.00 (64-битова версия)XAMPP 1.7.1YTD Video Downloader 4.7.1.==== Event Viewer Messages From Past Week ========.25.12.2013 г. 08:02:08, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).25.12.2013 г. 08:01:08, Error: Service Control Manager [7000]  - The HL Server Monitor service failed to start due to the following error:  The system cannot find the file specified.24.12.2013 г. 19:44:51, Error: Service Control Manager [7034]  - The Apache2.2 service terminated unexpectedly.  It has done this 1 time(s).24.12.2013 г. 18:55:27, Error: Service Control Manager [7034]  - The HL Server Monitor service terminated unexpectedly.  It has done this 1 time(s).24.12.2013 г. 18:04:43, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).24.12.2013 г. 18:03:54, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the SQL Server (MSSQLSERVER) service to connect.24.12.2013 г. 18:03:54, Error: Service Control Manager [7000]  - The SQL Server (MSSQLSERVER) service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.24.12.2013 г. 10:06:42, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).24.12.2013 г. 10:06:10, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the SQL Server (MSSQLSERVER) service to connect.24.12.2013 г. 10:06:10, Error: Service Control Manager [7000]  - The SQL Server (MSSQLSERVER) service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.24.12.2013 г. 08:55:09, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).24.12.2013 г. 08:54:28, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the SQL Server (MSSQLSERVER) service to connect.24.12.2013 г. 08:54:28, Error: Service Control Manager [7000]  - The SQL Server (MSSQLSERVER) service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.24.12.2013 г. 08:02:09, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).22.12.2013 г. 13:54:34, Error: Service Control Manager [7030]  - The HL Server Monitor service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.22.12.2013 г. 11:27:16, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).22.12.2013 г. 08:02:07, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).21.12.2013 г. 13:33:48, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).21.12.2013 г. 13:23:58, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).21.12.2013 г. 13:22:51, Error: Service Control Manager [7003]  - The BeeThink IP Blocker Service service depends the following service: NBlocker. This service might not be installed.21.12.2013 г. 12:04:56, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).21.12.2013 г. 12:03:44, Error: Service Control Manager [7003]  - The BeeThink IP Blocker Service service depends the following service: NBlocker. This service might not be installed.21.12.2013 г. 09:41:48, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).21.12.2013 г. 09:40:16, Error: Service Control Manager [7003]  - The BeeThink IP Blocker Service service depends the following service: NBlocker. This service might not be installed.21.12.2013 г. 09:37:29, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 2 time(s).21.12.2013 г. 09:37:13, Error: Service Control Manager [7034]  - The Advanced SystemCare Service 7 service terminated unexpectedly.  It has done this 1 time(s).21.12.2013 г. 09:36:39, Error: Service Control Manager [7030]  - The Advanced SystemCare Service 7 service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.21.12.2013 г. 09:36:18, Error: Service Control Manager [7034]  - The AdvancedSystemCareAntivirus service terminated unexpectedly.  It has done this 1 time(s).21.12.2013 г. 09:19:03, Error: Service Control Manager [7011]  - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SmcService service.21.12.2013 г. 09:16:56, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).21.12.2013 г. 09:16:26, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  Teefer wpsdrvnt21.12.2013 г. 09:15:51, Error: Service Control Manager [7003]  - The BeeThink IP Blocker Service service depends the following service: NBlocker. This service might not be installed.21.12.2013 г. 09:15:51, Error: Service Control Manager [7000]  - The SyGate for NT, wg6n service failed to start due to the following error:  This driver has been blocked from loading21.12.2013 г. 09:15:51, Error: Service Control Manager [7000]  - The SyGate for NT, wg5n service failed to start due to the following error:  This driver has been blocked from loading21.12.2013 г. 09:15:51, Error: Service Control Manager [7000]  - The SyGate for NT, wg4n service failed to start due to the following error:  This driver has been blocked from loading21.12.2013 г. 09:15:51, Error: Service Control Manager [7000]  - The SyGate for NT, wg3n service failed to start due to the following error:  This driver has been blocked from loading21.12.2013 г. 09:15:51, Error: Application Popup [1060]  - SystemRootSysWow64Driverswg6n.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.21.12.2013 г. 09:15:51, Error: Application Popup [1060]  - SystemRootSysWow64Driverswg5n.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.21.12.2013 г. 09:15:51, Error: Application Popup [1060]  - SystemRootSysWow64Driverswg4n.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.21.12.2013 г. 09:15:51, Error: Application Popup [1060]  - SystemRootSysWow64Driverswg3n.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.21.12.2013 г. 09:15:40, Error: Application Popup [1060]  - SystemRootSysWow64DriversTeefer.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.21.12.2013 г. 09:13:19, Error: Service Control Manager [7000]  - The SyGate for NT, wg6n service failed to start due to the following error:  This driver has been blocked from loading21.12.2013 г. 09:13:19, Error: Service Control Manager [7000]  - The SyGate for NT, wg5n service failed to start due to the following error:  This driver has been blocked from loading21.12.2013 г. 09:13:19, Error: Application Popup [1060]  - SystemRootSysWow64Driverswg6n.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.21.12.2013 г. 09:13:19, Error: Application Popup [1060]  - SystemRootSysWow64Driverswg5n.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.21.12.2013 г. 09:13:18, Error: Service Control Manager [7000]  - The SyGate for NT, wg4n service failed to start due to the following error:  This driver has been blocked from loading21.12.2013 г. 09:13:18, Error: Application Popup [1060]  - SystemRootSysWow64Driverswg4n.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.21.12.2013 г. 09:13:17, Error: Service Control Manager [7000]  - The SyGate for NT, wg3n service failed to start due to the following error:  This driver has been blocked from loading21.12.2013 г. 09:13:17, Error: Application Popup [1060]  - SystemRootSysWow64Driverswg3n.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.21.12.2013 г. 09:13:16, Error: Service Control Manager [7000]  - The Teefer for NT service failed to start due to the following error:  This driver has been blocked from loading21.12.2013 г. 09:13:16, Error: Application Popup [1060]  - SystemRootSysWow64DriversTeefer.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.21.12.2013 г. 09:13:02, Error: Service Control Manager [7000]  - The wpsdrvnt service failed to start due to the following error:  This driver has been blocked from loading21.12.2013 г. 09:13:02, Error: Service Control Manager [7000]  - The Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0 service failed to start due to the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.21.12.2013 г. 09:13:02, Error: Application Popup [1060]  - SystemRootSysWow64driverswpsdrvnt.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.21.12.2013 г. 09:13:00, Error: Service Control Manager [7030]  - The Sygate Personal Firewall Pro service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.21.12.2013 г. 08:02:08, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).21.12.2013 г. 08:01:03, Error: Service Control Manager [7003]  - The BeeThink IP Blocker Service service depends the following service: NBlocker. This service might not be installed.21.12.2013 г. 05:29:58, Error: Service Control Manager [7011]  - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the lmhosts service.21.12.2013 г. 04:49:33, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).21.12.2013 г. 04:48:29, Error: Service Control Manager [7003]  - The BeeThink IP Blocker Service service depends the following service: NBlocker. This service might not be installed.20.12.2013 г. 23:36:55, Error: Service Control Manager [7034]  - The Kaspersky Anti-Virus Service service terminated unexpectedly.  It has done this 1 time(s).20.12.2013 г. 23:31:21, Error: Service Control Manager [7030]  - The Radmin Server V3 service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.20.12.2013 г. 23:25:01, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).20.12.2013 г. 23:19:23, Error: Service Control Manager [7030]  - The Radmin Server V3 service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.20.12.2013 г. 23:17:15, Error: Service Control Manager [7030]  - The Radmin Server V3 service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.20.12.2013 г. 23:06:03, Error: Service Control Manager [7031]  - The Kaspersky Anti-Virus Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Рестартиране на услугата.20.12.2013 г. 21:27:31, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).20.12.2013 г. 21:21:25, Error: Microsoft-Windows-DistributedCOM [10000]  - Unable to start a DCOM Server: {06622D85-6856-4460-8DE1-A81921B41C4B}. The error: "5" Happened while starting this command: C:WindowsSysWOW64DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}20.12.2013 г. 21:14:26, Error: Service Control Manager [7034]  - The SQL Server VSS Writer service terminated unexpectedly.  It has done this 1 time(s).20.12.2013 г. 21:14:23, Error: Service Control Manager [7034]  - The SQL Server (MSSQLSERVER) service terminated unexpectedly.  It has done this 1 time(s).20.12.2013 г. 20:36:14, Error: Service Control Manager [7034]  - The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).20.12.2013 г. 13:48:24, Error: bowser [8003]  - The master browser has received a server announcement from the computer GFDDGF-79E68F5A that believes that it is the master browser for the domain on transport NetBT_Tcpip_{90C7E2AA-A9AE-4207-95B0-24447E8CB857}. The master browser is stopping or an election is being forced.18.12.2013 г. 14:58:22, Error: bowser [8003]  - The master browser has received a server announcement from the computer AKY-CCB1B381A4F that believes that it is the master browser for the domain on transport NetBT_Tcpip_{90C7E2AA-A9AE-4207-95B0-24447E8CB857}. The master browser is stopping or an election is being forced..==== End Of File =========================== 

Здравейте и Честита Коледа..!
 
 
Моля, изтеглете и стартирайте програмата AdwCleaner(by Xplode):

• [*]Затворете всички стартирани програми и браузъри [*]Кликнете два пъти върху

adwcleaner.exe за да стартирате инструмента. [*]Натиснете OK, за да потвърдите, че всички стартирани програми ще бъдат затворени. [*]Маркирайте Clean [*]Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта. [*]Моля, да публикувате съдържанието на този лог в отговора си [*]Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s0].txt

 

Моля, изтеглете Junkware Removal Tool (by Thisisu ) и запазете на вашия десктоп.

• [*]Спрете временно работата на защитните програми. [*]Стартирайте инструмента

JRT.exe [*]Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата. [*]Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши. [*]Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt). [*]Моля копирайте съдържанието на лог файла в следващия си пост.

 

 

Изтеглете Malwarebytes' Anti-Malware или от тук (не забравяйте да обновите програмата с нови дефиниции)
* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.
* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.
* Ако има намерени обновявания, тя ще ги изтегли и инсталира.
* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.
* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.
* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата
* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.
* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог.
Копирайте този лог и го публикувайте в следващия си коментар по темата.
Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран


...и последно..:

• [*]Моля изтеглете

Farbar Recovery Scan Tool и го запазете на десктопа. [*]Стартирайте файла FRST.exe. [*]Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение. [*]Сложете всички отметки. [*]Натиснете бутона SCAN. [*]Ще се създадат два лог файл с името - FRST.txt и Addition.txt на десктопа. [*]Файлът FRST.txt копирайте в следващия си пост. Addition.txt прикачете в следващия си коментар (погледнете опцията Прикачени файлове, когато публикувате мнение).

След третия скан стоя 50мин на добре дошли

под save mode немога да влизам нормално ко ми напрайха тези програми

 

 

Ами почистваме батака..! Нещо проблем ли има..?

Ако имате съмнения да прекратим..?

Изтеглете прикачения файл и го запазете там, където сте свалили FRST.exe => Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.

 

 

Препоръчително е да премахнете остатъците от Kaspersky и COMODO ...!

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-12-2013 01Ran by TheReaver at 2013-12-27 19:11:02 Run:1Running from C:UsersTheReaverDesktopBoot Mode: Normal==============================================Content of fixlist:*****************startMountPoints2: F - F:SETUP.EXEMountPoints2: G - G:SETUP.EXEMountPoints2: H - H:SETUP.EXEMountPoints2: I - I:SETUP.EXEAlternateDataStreams: C:ProgramDataTEMP:F8D65F32AlternateDataStreams: C:UsersPublicDRM:??????end*****************HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerMountPoints2F => Key deleted successfully.HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerMountPoints2G => Key deleted successfully.HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerMountPoints2H => Key deleted successfully.HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerMountPoints2I => Key deleted successfully.C:ProgramDataTEMP => ":F8D65F32" ADS removed successfully."C:UsersPublicDRM" => ":??????" ADS not found.==== End of Fixlog ====

 

Махнах ги

Редактирано 27 декември 201312 г. от Jason222 (преглед на промените)

Изтеглете ComboFix от тук и го запазете на десктопа си.
Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.
Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to disable your security applications by amateur
Стартирайте Combo-Fix.com    и следвайте инструкциите.
Бележка: ComboFix ще се стартира без инсталирана Recovery Console.
Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repai режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.

• [*]Следвайте инструкциите, за да позволите на

ComboFix да изтегли и инсталира Microsoft Windows Recovery Console.В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.



След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:



Изберете Yes, за да продължи сканирането за зловреден софтуер.
Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:ComboFix.txt в следващия Ви коментар в тази тема.

Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.

Препоръчително е да премахнете остатъците от Kaspersky и COMODO ...!

 

Махнах ги

 

 

Не ,не сте..! Не разбирам ,опитвате де ме заблудите ли...?

Всъщност въпросът ми е ..към коя антивирусна програма ще се ориентирате след като приключим..?

kaspersky или аваст

Как да премахнете остатъците от COMODO:
 
1.Проверете в Контрол панела => Програми =>Деинсталиране на програми дали Comodo фигурира в списъка с инсталираните програми.Ако е "да"..деинсталирайте по стандартния начин ,рестартирайте компютъра си и преминете към следващата точка.Ако е "не"..или деинсталацията не се стартира или се появява грешка преминете към следващата точка.
2.Изключете Sandbox / Defense+ Става така - десен бутон на мишката върху иконата на програмата => CIS > Sandbox/Defense+ Security Level > Disable
3. Изтеглете Uninstaller Tool for Comodo Products
4.Разархивирате и стартирате файла "Uninstaller Tool.exe" (от името на администратор)
5.Изберете програмата която искате да изтриете и натискате "Uninstall ***"
6.След приключване на процедурата рестартирайте компютъра си.
 
 

Как да премахнете остатъците от Касперски:
 
1.Проверете в Контрол панела => Програми =>Деинсталиране на програми дали Kaspersky фигурира в списъка с инсталираните програми.Ако е "да"..деинсталирайте по стандартния начин ,рестартирайте компютъра си и преминете към следващата точка.Ако е "не"..или деинсталацията не се стартира или се появява грешка преминете към следващата точка.
2.Изтеглете kavremover.zip и разархивирате.
3.Стартирайте файла kavremover.exe и следвайте инструкцията.
4.Въведете в полето защитния код ,в другото поле изберете програмата на Kaspersky която е инсталирана на вашия компютър:
 

 
5.Процесът отнема известно време.Изчакайте да се появи прозорец със съобщение за успешно премахнат продукт:
 

 
6.Рестартирайте вашия компютър.
 
 
Забележка: По подразбиране в папката на продукта ще се генерира лог - kavremvr xxxx-xx-xx xx-xx-xx (pid xxxx).log, публикувайте съдържанието му във следващия си пост.

готово

 

http://www.speedyshare.com/afZSG/kavremvr-2013-12-27-19-12-10-pid-22788.log

Изтрийте вашето копие на Комбофикс (като изтриете иконата от вашия десктоп)...изтеглете ново свежо копие от тук и го запазете на десктопа си.Стартирайте проверка по инструкцията от пост 7.

Копирайте текста в карето на notepad и го запазвате с име CFScript.txt на десктопа си:
 

KILLALL::ClearJavaCache::File::c:program files (x86)AdTrustMediaPrivDog1.8.0.18trustedads.dllc:program files (x86)Common FilesCOMODOGeekBuddyRSP.exec:program filesCOMODOGeekBuddylauncher.exe "unit_manager.exeRegistry::[-HKEY_LOCAL_MACHINESOFTWAREWow6432Node~Browser Helper Objects{FB16E5C3-A9E2-47A2-8EFC-319E775E62CC}][HKEY_LOCAL_MACHINESOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun]"tvncontrol"=-Driver::CLPSLauncherGeekBuddyRSPFolder::c:usersTheReaverAppDataRoamingComodoc:program files (x86)Common FilesCOMODOc:programdataCOMODOc:program filesCOMODOc:usersTheReaverAppDataLocalComodoc:program files (x86)Comodoc:program files (x86)Kaspersky LabFirefox::FF - ExtSQL: 2013-11-29 20:46; [email protected]; c:program files (x86)Kaspersky LabKaspersky PURE [email protected] - ExtSQL: 2013-11-29 20:46; [email protected]; c:program files (x86)Kaspersky LabKaspersky PURE [email protected] - ExtSQL: 2013-11-29 20:47; [email protected]; c:program files (x86)Kaspersky LabKaspersky PURE [email protected] - ExtSQL: 2013-11-29 20:47; [email protected]; c:program files (x86)Kaspersky LabKaspersky PURE [email protected] - ExtSQL: 2013-11-29 20:47; [email protected]; c:program files (x86)Kaspersky LabKaspersky PURE [email protected]

След съхранението преместете  CFScript.txt на иконата на ComboFix.exe

Генерирания рапорт копирайте  и го поставете в следващия си коментар...!

Генерирания рапорт копирайте  и го поставете в следващия си коментар...! post to long винаги

 

http://speedy.sh/WpCJ6/ComboFix.txt

Здравейте..! Какво е положението със системата ви след всички процедури до тук..?

еми добре е мисля че се е оправила

Прекрасно....последни проверки и приключваме:

• [*]Моля, изтеглете

TFC (Temp File Cleaner) от тук или тук и го запишете на вашия работен плот. [*]Затворете всички отворени програми и интернет браузъри. [*]Кликнете два пъти върху TFC.exe да го стартирате и след като тя се отваря кликнете върху Start бутона в долната лява част на програмата, за да може да започне почистване. [*]Моля, бъдете търпеливи като разчистване временни файлове може да отнеме известно време. [*]След като приключи може да се наложи да рестартирате компютъра си, моля, направете го.

След като приключи можете да изтриете TFC.exe от компютъра си или да го запишете за по-нататъшна употреба за почистване на временни файлове.

 

 
Стартирайте програмата Malwarebytes' Anti-Malware отново и изберете "Perform quick scan", след това кликнете на Scan.
* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата
* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.
* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог.
Копирайте този лог и го публикувайте в следващия си коментар по темата.

Изтеглете програмата: ESET Online Scanner

• [*]Стартирайте esetsmartinstaller_enu.exe [*]Сложете отметка на

YES, I accept the Terms of Use и изберете Start:

• [*]
  

• [*]Скенерът ще започне да изтегля компонентите, които са му необходими:
  

• [*]
  

Уверете се, че е премахната отметката от:

• [*]

Remove found threats

Уверете се че са маркирани следните позиции:

• [*]

Scan Archives

Кликнете върху Advanced Settings и маркирайте следните опции:

• [*]

Scan for potentially unwanted applications [*]Scan for potentially unsafe applications [*]Enable Anti-Stealth Technology

Накрая изберете Start
Скенерът ще започне да изтегля последните дефиниции и ще започне сканиране на вашия компютър.
Моля, бъдете търпеливи, тъй като това може да отнеме известно време.

• [*]След, като сканирането завърши кликнете на

List of found threats. [*]Щракнете върху Export, и запишете файла на вашия работен плот с  име  ESETScan. Копирайте съдържанието на този доклад, в следващия си отговор. [*]Изберете бутона Back. [*]Изберете бутона Finish.

Malwarebytes Anti-Malware (Trial) 1.75.0.1300www.malwarebytes.orgDatabase version: v2013.12.30.05Windows 7 Service Pack 1 x64 NTFSInternet Explorer 11.0.9600.16476TheReaver :: THEREAVER-PC [administrator]Protection: Disabled30.12.2013 г. 17:38:04 ч.mbam-log-2013-12-30 (17-38-04).txtScan type: Quick scanScan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUMScan options disabled: P2PObjects scanned: 212024Time elapsed: 2 minute(s), 50 second(s)Memory Processes Detected: 0(No malicious items detected)Memory Modules Detected: 0(No malicious items detected)Registry Keys Detected: 0(No malicious items detected)Registry Values Detected: 0(No malicious items detected)Registry Data Items Detected: 0(No malicious items detected)Folders Detected: 0(No malicious items detected)Files Detected: 1C:UsersTheReaverDesktopSFInstaller_SFFZ_filezilla_8992693_.exe (PUP.Optional.Spigot.A) -> Quarantined and deleted successfully.(end)C:AdwCleanerQuarantineCUsersTheReaverAppDataRoamingSearch ProtectionSearchProtection.exe.vir  a variant of Win32/Toolbar.Widgi applicationC:AdwCleanerQuarantineCUsersTheReaverAppDataRoamingSearch ProtectionUninstall.exe.vir  probably a variant of Win32/Toolbar.Widgi applicationC:Program Files (x86)Net ToolsIPscanneripscanner.exe  probably a variant of Win32/NetTool.Portscan.AA applicationC:UsersTheReaverAppDataLocalDownloaded Installations{ECF6FE39-A8B0-411B-83AC-75A17875FE6F}rserv34.msi  Win32/RemoteAdmin.RAdmin.AC applicationC:WindowsInstaller71f93.msi  Win32/RemoteAdmin.RAdmin.AC applicationC:WindowsSystem32rserver30rserver3.bak  Win32/RemoteAdmin.RAdmin.AC applicationC:WindowsSysWOW64rserver30rserver3.bak  Win32/RemoteAdmin.RAdmin.AC applicationD:GAMESTeenage_Mutant_Ninja_Turtles_Out_of_the_Shadows-FLTflt-oots.iso  a variant of Win32/CoinMiner.HY trojanD:Install FilesDRIVERIFIREFOX BACKUPFirefox 20.0.1 (bg) - 2013-04-25.pcv  Win32/Adware.MultiPlug.H applicationD:Install FilesDRIVERIFIREFOX BACKUPFirefox 20.0.1 (bg) - 2013-04-29.pcv  Win32/Adware.MultiPlug.H applicationD:Install FilesDRIVERIFIREFOX BACKUPFirefox 20.0.1 (bg) - 2013-05-07.pcv  Win32/Adware.MultiPlug.H applicationD:Install FilesDRIVERIFIREFOX BACKUPFirefox 21.0 (bg) - 2013-06-13.pcv  Win32/Adware.MultiPlug.H applicationD:Install FilesDRIVERIFIREFOX BACKUPFirefox 23.0 (bg) - 2013-08-09.pcv  Win32/Adware.MultiPlug.H applicationD:Install FilesDRIVERIFIREFOX BACKUPFirefox 23.0 (bg) - 2013-08-13.pcv  Win32/Adware.MultiPlug.H applicationD:Install FilesDRIVERIFIREFOX BACKUPFirefox 23.0.1 (bg) - 2013-09-15.pcv  Win32/Adware.MultiPlug.H applicationD:Install FilesTHEMES WINDOWS 7blueHUD Evolution Premium Theme Free by TheHacker0007.7z  Win32/OpenCandy applicationD:Install FilesTHEMES WINDOWS 7blueHUD Evolution Premium Theme Free by TheHacker0007HUD_Evolution_Complete_PackImportant ToolsVistaGlazz v2.4VistaGlazzSetup.exe  Win32/OpenCandy applicationD:Install FilesTHEMES WINDOWS 7Midnight_themeMidnight_theme_Pack.7z  Win32/OpenCandy applicationD:Install FilesTHEMES WINDOWS 7Midnight_themeMidnight_theme_PackTheme Optioanal ExtrasVistaGlazzSetup.exe  Win32/OpenCandy applicationD:Install FilesTHEMES WINDOWS 7themeHUD Evolution Premium Theme Free by TheHacker0007.7z  Win32/OpenCandy applicationD:Install FilesTHEMES WINDOWS 7themeHUD_Evolution_Complete_PackImportant ToolsVistaGlazz v2.4VistaGlazzSetup.exe  Win32/OpenCandy applicationD:Install FilesTHEMES WINDOWS 7yellowHUD LAUNCH Theme (TheHacker0007).rar  Win32/OpenCandy applicationD:Install FilesTHEMES WINDOWS 7yellowHUD LAUNCH Theme (TheHacker0007)Important ToolsVistaGlazz v2.4VistaGlazzSetup.exe  Win32/OpenCandy applicationD:MuOnlineAA_v3.exe  a variant of Win32/RemoteAdmin.Ammyy.B applicationD:MuOnlineDevil Mu 99b+ Files.rar  probably a variant of Win32/Packed.FlyStudio applicationD:MuOnlineLinkos MU Online Server Files 99b+.rar  a variant of Win32/Packed.Themida applicationD:MuOnlineradmin35 (1).zip  a variant of Win32/RemoteAdmin.RAdmin.AC applicationD:MuOnlineradmin35.zip  a variant of Win32/RemoteAdmin.RAdmin.AC applicationD:MuOnlineRemote Administrator (Radmin) 3.0 FULL Server & Viewer + Tested Patch.zip  Win32/RAdmin.30 applicationD:MuOnlineOptiLan AngelsMU Server FilesMuServer.rar  probably a variant of Win32/Packed.FlyStudio applicationD:SOFTavira_free_antivirus_en.exe  a variant of Win32/Bundled.Toolbar.Ask applicationD:SOFTccsetup328.exe  Win32/Bundled.Toolbar.Google.D applicationD:SOFTccsetup405.exe  Win32/Bundled.Toolbar.Google.D applicationD:SOFTccsetup406.exe  Win32/Bundled.Toolbar.Google.D applicationD:SOFTccsetup407.exe  Win32/Bundled.Toolbar.Google.D applicationD:SOFTcpu-z_1.61-setup-en.exe  a variant of Win32/Bundled.Toolbar.Ask applicationD:SOFTFreeVideoToTabletPCConverter.exe  Win32/OpenCandy applicationD:SOFThwmonitor_1.19-setup.exe  a variant of Win32/Bundled.Toolbar.Ask applicationD:SOFThwmonitor_1.20-setup.exe  a variant of Win32/Bundled.Toolbar.Ask applicationD:SOFTsd-setup.exe  a variant of Win32/ELEX applicationD:SOFTUnlocker 1.9.1 x86 (kaldata.com).exe  multiple threatsD:SOFTVirtuaGirlHD? a1198-b93-c401-d251=1943.exe  a variant of Win32/Packed.VMProtect.AAH trojanD:SOFTActivation - Windows 8 build 9200 ALL?????????_Win8_RTM_ALL.exe  Win32/HackTool.WinActivator.F applicationD:SOFTAdobe Photoshop CS5.1 v12.10 ExtendedAdobe.Photoshop.CS5.1.iso  a variant of Win32/Keygen.BH applicationD:SOFTAdvanced.SystemCare.Pro.v6.2.0.254.READ.NFO.Incl.Keygen.by.Rigel-TSRhadvanced.systemcare.pro.6.0.read.nfo.keygen-tsrhkeygen_pro.exe  a variant of Win32/Keygen.AN applicationD:SOFTAshampoo Undeleter v1.0.0 (BG) + PortableSetupashampoo_undeleter_1.00_sm.exe  a variant of Win32/Toolbar.Conduit.B applicationD:SOFTBigasoft Total Video Converter v3.5.6.4299keygen.exe  a variant of Win32/Keygen.AD applicationD:SOFTCCleaner 3.26.1888 + Portableccsetup326.exe  Win32/Bundled.Toolbar.Google.D applicationD:SOFTCCleaner 3.27.1900 + Portableccsetup327.exe  Win32/Bundled.Toolbar.Google.D applicationD:SOFTCCleaner 3.28.1913 Free Business Professional + Portableccsetup328.exe  Win32/Bundled.Toolbar.Google.D applicationD:SOFTDriver.Checker.v2.7.5.WinALL.Incl.Keygen-BRDKeygenKeygen.exe  a variant of Win32/Keygen.AS applicationD:SOFTFormat Factory v2.95FFSetup295.exe  multiple threatsD:SOFTGom Player 2.1.37.5085GOMPLAYERENSETUP.EXE  a variant of Win32/Bundled.Toolbar.Ask applicationD:SOFTGom Player v2.1.33.5071GOMPLAYERENSETUP.EXE  a variant of Win32/Bundled.Toolbar.Ask applicationD:SOFTKaspersky Antivirus and Internet Security 2014 v14.0.0.4651 FINALKaspersky_Reset_Trial_2.1KRT_2.1.exe  Win32/RiskWare.HackAV.NR applicationD:SOFTSuperiorXP64sxp64love.iso  Win32/CMDOW.143 applicationD:SOFTThe KMPlayer 3.4.0.55 FinalKMPlayer_3.4.0.55_00_20121101030204.exe  a variant of Win32/Bundled.Toolbar.Ask.D applicationD:SOFTVideo EditorSFreeVideoToTabletPCConverter.exe  Win32/OpenCandy application 

Radmin Server - използвате ли...?

не

Копирайте текста в карето на notepad и го запазвате с име CFScript.txt на десктопа си:
 

KILLALL::File::  C:UsersTheReaverAppDataLocalDownloaded Installations{ECF6FE39-A8B0-411B-83AC-75A17875FE6F}rserv34.msi    C:WindowsInstaller71f93.msi    C:WindowsSystem32rserver30rserver3.bak   C:WindowsSysWOW64rserver30rserver3.bak C:Program Files (x86)Net ToolsIPscanneripscanner.exe  

След съхранението преместете  CFScript.txt на иконата на ComboFix.exe

Генерирания рапорт копирайте  и го поставете в следващия си коментар...!

Ами това е от мен..!
 
Деинсталирайте ComboFix така:

• [*]Натиснете Start ==> Run ==> въведете командата

Combofix /Uninstall ==> OK

• [*]
  

• [*]Моля, следвайте инструкциите, за да деинсталирате ComboFix. Ще получите съобщение, в което се казва ComboFix е деинсталиран успешно.
  

Изтеглете Delfix.exe и го стартирайте. Сложете отметка пред Remove disinfection tools => натиснете бутона Run Инструмента ще се самоизтрие след като приключи своята задача!
 

Деинсталирайте adwcleaner.exe

• [*]Моля, затворете всички отворени програми и интернет браузъри. [*]Кликнете два пъти върху

adwcleaner.exe за да стартирате инструмента. [*]Кликнете върху Uninstall . [*]Щракнете върху Yes за да деинсталирате Adwcleaner

Деинсталирайте ESET Online Scaner.

• [*]

Start => Run, въведете control appwiz.cpl в полето.След това натиснете ENTER. [*]Изберете ESET Online Scanner от списъка с приложения, а след това маркирайте Remove. Aко бъдете подканени рестартирайте компютъра си.

Препоръчвам програмата Malwarebytes' Anti-Malware да остане на вашия компютър и периодично да сканирате системата си с нея (поне един -два пъти в седмицата),като не забравяйте да обновите дефинициите и преди всяко сканиране..!
 
Инсталирайте си и поддържайте антивирусна  програма  с актуални ъпдейти и  сканирайте с нея редовно.
 
 
Стартирайте PatchMyPC и инсталирайте всички ъпдейти, които инструмента ви предложи.


Ако нямате други въпроси и проблеми маркирам случая за "Решен"..! Пожелавам Ви весело посрещане на Новата 2014 година .