Не мога да се отърва от 22find.com вирус

27 февруари 201511 г.

Здравейте,имам проблем с 22find.com,което се появява винаги на браузъра когато го отварям.Явява ми се като начална страница ,а не сум го задал като такава.То и незнам откъде дойде.Много е досадно и ме препраща към различни други страници.Има го и на двата браузъра,като ми излиза прозорец"repair your computer". Ползвам windows 7 , а това са резултатите след сканиране с FRST.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-02-2015 01
Ran by JORDAN (administrator) on JORDAN-PC on 27-02-2015 16:55:25
Running from C:\Users\JORDAN\Desktop
Loaded Profiles: JORDAN (Available profiles: JORDAN)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [bCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\...\MountPoints2: {5862c732-3e24-11e3-893a-94de808b1d56} - G:\SETUP.EXE
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\vpngui.exe.lnk
ShortcutTarget: vpngui.exe.lnk -> C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe ()
Startup: C:\Users\JORDAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - HP Deskjet 2510 series.lnk
ShortcutTarget: Monitor Ink Alerts - HP Deskjet 2510 series.lnk -> C:\Program Files\HP\HP Deskjet 2510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-hom...M8WXXXXW2AYKM8W
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-hom...M8WXXXXW2AYKM8W
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-...q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-...q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-hom...M8WXXXXW2AYKM8W
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-hom...M8WXXXXW2AYKM8W
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-...q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-...q={searchTerms}
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-...q={searchTerms}
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?...97&ocid=UP97DHP
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-hom...M8WXXXXW2AYKM8W
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-...q={searchTerms}
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://rts.dsrlte.com
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-...q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-...q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-...q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-...q={searchTerms}
SearchScopes: HKU\S-1-5-21-1657747020-3002511149-2105434976-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.bing.com/...rc=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1657747020-3002511149-2105434976-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1657747020-3002511149-2105434976-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.bing.com/...rc=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1657747020-3002511149-2105434976-1000 -> {565BBDD5-66F4-4822-9A2A-553A5FC02E7F} URL = http://rts.dsrlte.co...rchTerms}&r=741
SearchScopes: HKU\S-1-5-21-1657747020-3002511149-2105434976-1000 -> {5CB14ECA-21EF-494A-AA31-46482A4932AB} URL = http://search.delta-...q={searchTerms}
BHO: FTdownloader V4.0 -> {11111111-1111-1111-1111-110311551174} -> C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-bho64.dll No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: FTdownloader V4.0 -> {11111111-1111-1111-1111-110311551174} -> C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-bho.dll No File
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 46.40.72.25 192.168.0.1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.dosearche...W&ts=1382783094

FireFox:
========
FF ProfilePath: C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default
FF NewTab:
FF DefaultSearchEngine: Bing
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: Bing
FF Homepage: hxxp://www.msn.com/?pc=UP97&ocid=UP97DHP|hxxp://www.google.bg/?gfe_rd=cr&ei=8KihU_-mHO7c8gfp4YGADw
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npnul32.dll (mozilla.org)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\searchplugins\keepmysearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\911bg.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\delta-homes.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\diribg.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\pe-bg.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\portalbgdict.xml
FF Extension: Fast Start - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\Extensions\[email protected] [2014-06-12]
FF Extension: Quick Start - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\Extensions\[email protected] [2014-02-26]
FF Extension: shortcut - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\Extensions\[email protected] [2014-06-12]
FF Extension: FT Downloader - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\Extensions\[email protected] [2013-06-26]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\extensions\[email protected]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\extensions\[email protected]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\extensions\[email protected]
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.dosearche...W&ts=1382783094

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [lgnbhdnimikkoodkogjlcllngimhlapp] - C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx [2013-06-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R3 ICCS; C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe -service [X]
S2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe -service [X]
S2 Update qualitink; "C:\Program Files (x86)\qualitink\updatequalitink.exe" [X] <==== ATTENTION
S2 Util qualitink; "C:\Program Files (x86)\qualitink\bin\utilqualitink.exe" [X]
S2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [X] <==== ATTENTION
S2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe -service [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] ()
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-10-26] (Disc Soft Ltd)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-10-25] ()
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S1 {50c078f1-4117-4aad-852a-0b3bbfb46b18}w64; system32\drivers\{50c078f1-4117-4aad-852a-0b3bbfb46b18}w64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-27 18:06 - 2015-02-27 18:19 - 00000000 ____D () C:\cce_linux
2015-02-27 16:55 - 2015-02-27 16:55 - 00017094 _____ () C:\Users\JORDAN\Desktop\FRST.txt
2015-02-27 16:55 - 2015-02-27 16:55 - 00000000 ____D () C:\FRST
2015-02-27 16:54 - 2015-02-27 16:54 - 02087936 _____ (Farbar) C:\Users\JORDAN\Desktop\FRST64.exe
2015-02-27 09:26 - 2015-02-27 09:26 - 02836926 _____ () C:\Users\JORDAN\Desktop\ТАБАКА ОВ.htm
2015-02-27 09:26 - 2015-02-27 09:26 - 00000000 ____D () C:\Users\JORDAN\Desktop\ТАБАКА ОВ.files
2015-02-05 08:57 - 2015-02-18 18:01 - 00000000 ____D () C:\Users\JORDAN\Desktop\вицове

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-27 16:54 - 2013-10-25 17:33 - 01477005 _____ () C:\Windows\WindowsUpdate.log
2015-02-27 16:51 - 2013-10-28 14:18 - 00001324 _____ () C:\Windows\Tasks\FTdownloader V4.0-updater.job
2015-02-27 16:51 - 2013-10-28 14:18 - 00001216 _____ () C:\Windows\Tasks\FTdownloader V4.0-codedownloader.job
2015-02-27 16:51 - 2013-10-28 14:18 - 00001126 _____ () C:\Windows\Tasks\FTdownloader V4.0-enabler.job
2015-02-27 16:51 - 2013-10-26 12:32 - 00000202 _____ () C:\Windows\Tasks\AutoKMS.job
2015-02-27 16:51 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-27 16:51 - 2009-07-14 06:51 - 00065423 _____ () C:\Windows\setupact.log
2015-02-27 16:36 - 2009-07-14 07:13 - 00781298 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-27 15:54 - 2014-02-26 12:36 - 00000000 ____D () C:\Program Files (x86)\WinZipper
2015-02-27 15:54 - 2013-10-28 14:18 - 00000000 ____D () C:\Program Files (x86)\qualitink
2015-02-27 15:02 - 2009-07-14 06:45 - 00016832 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-27 15:02 - 2009-07-14 06:45 - 00016832 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-27 10:04 - 2013-10-24 17:06 - 00000000 ____D () C:\Users\JORDAN\Desktop\БЛАНКИ
2015-02-27 09:24 - 2013-10-25 14:17 - 00000000 ____D () C:\Users\JORDAN\AppData\Roaming\Skype
2015-02-26 16:19 - 2013-10-26 12:32 - 00000202 _____ () C:\Windows\Tasks\AutoKMSDaily.job
2015-02-25 12:43 - 2013-10-28 12:59 - 00000000 ____D () C:\Users\JORDAN\Documents\Файлове на Outlook
2015-02-23 17:15 - 2013-10-24 17:10 - 00051200 _____ () C:\Users\JORDAN\Desktop\УЧАСТЪК САМУИЛОВО.xls
2015-02-16 11:28 - 2013-10-26 15:52 - 00000000 ____D () C:\Users\JORDAN\AppData\Roaming\AIMP3
2015-02-09 09:02 - 2014-02-24 09:24 - 00000000 ____D () C:\Users\JORDAN\Desktop\ОФЕРТИ
2015-01-28 10:32 - 2015-01-22 20:24 - 00000000 ____D () C:\Users\JORDAN\Desktop\изтеглени книги

==================== Files in the root of some directories =======

2013-10-26 15:35 - 2013-10-26 15:35 - 0000057 _____ () C:\ProgramData\Ament.ini

Some content of TEMP:
====================
C:\Users\JORDAN\AppData\Local\Temp\bi_cleaner.exe
C:\Users\JORDAN\AppData\Local\Temp\DelayInst.exe
C:\Users\JORDAN\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\JORDAN\AppData\Local\Temp\installservice.exe
C:\Users\JORDAN\AppData\Local\Temp\instmsi.exe
C:\Users\JORDAN\AppData\Local\Temp\instmsiw.exe
C:\Users\JORDAN\AppData\Local\Temp\ose00000.exe
C:\Users\JORDAN\AppData\Local\Temp\SkypeSetup.exe
C:\Users\JORDAN\AppData\Local\Temp\vpnclient_setup.exe
C:\Users\JORDAN\AppData\Local\Temp\_is2E21.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-02-23 10:57

==================== End Of Log ============================

Addition.txt

27 февруари 201511 г.

Здравейте,

Довечера ще напиша скрипт, защото в момента съм на работа.

Поздрави!

27 февруари 201511 г.

Автор

благодаря за бързата реакция,надявам се да успеем да се преборим с тоя досаден проблем.

28 февруари 201511 г.

Здравейте,

Извинявам се за забавянето, но работата ми в офиса се проточи.

СТЪПКА 1

Деинсталирайте следните програми:

Bundled software uninstaller
FTDownloader
FTdownloader V4.0
IePluginService12.27.0.3326
qualitink 1.0.0
SupTab
WinZipper

Изтеглете програмата GeekUninstaller и я запазете на десктопа.

Разархивирайте я и стартирайте файла geek.exe
От списъка намерете Bundled software uninstaller (примера е за Mozilla Firefox, но това е просто за показно).

Кликнете с десен бутон върху програмата и изберете Uninstall

След края на инсталацията ще се отвори прозорец подканващ ви да премахнете всички остатъци от програмата (ако има такива, ако няма този прозорец няма да се появи):

Пример за Opera браузъра:

Натиснете бутона Finish за да изтриете останките от програмата.

Повторете стъпките и за останалите програми. Ако не искат да се премахнат тогава изберете вместо Uninstall, опцията Force Removal.

След това продължете с другите инстукции:

СТЪПКА 2

Изтеглете fixlist.txt и го запазете в папката от която стартирахте FRST.exe.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.

Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

След това пишете как е положението.

Поздрави!

28 февруари 201511 г.

Автор

Здравейте,изпълних всичко но фарбар спря сканирането донякъде и генерира този лог файл:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-02-2015 01
Ran by JORDAN at 2015-02-28 13:13:12 Run:1
Running from C:\Users\JORDAN\Desktop\New folder
Loaded Profiles: JORDAN (Available profiles: JORDAN)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
CreateRestorePoint:
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\...\MountPoints2: {5862c732-3e24-11e3-893a-94de808b1d56} - G:\SETUP.EXE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-hom...M8WXXXXW2AYKM8W
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-hom...M8WXXXXW2AYKM8W
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-...q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-...q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-hom...M8WXXXXW2AYKM8W
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-hom...M8WXXXXW2AYKM8W
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-...q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-...q={searchTerms}
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-...q={searchTerms}
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-hom...M8WXXXXW2AYKM8W
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-...q={searchTerms}
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://rts.dsrlte.com
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-...q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-...q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-...q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-...q={searchTerms}
SearchScopes: HKU\S-1-5-21-1657747020-3002511149-2105434976-1000 -> {565BBDD5-66F4-4822-9A2A-553A5FC02E7F} URL = http://rts.dsrlte.co...rchTerms}&r=741
SearchScopes: HKU\S-1-5-21-1657747020-3002511149-2105434976-1000 -> {5CB14ECA-21EF-494A-AA31-46482A4932AB} URL = http://search.delta-...q={searchTerms}
BHO: FTdownloader V4.0 -> {11111111-1111-1111-1111-110311551174} -> C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-bho64.dll No File
BHO-x32: FTdownloader V4.0 -> {11111111-1111-1111-1111-110311551174} -> C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-bho.dll No File
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.dosearche...W&ts=1382783094
FF SearchPlugin: C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\searchplugins\keepmysearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\delta-homes.xml
FF Extension: Fast Start - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\Extensions\[email protected] [2014-06-12]
FF Extension: Quick Start - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\Extensions\[email protected] [2014-02-26]
FF Extension: shortcut - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\Extensions\[email protected] [2014-06-12]
FF Extension: FT Downloader - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\Extensions\[email protected] [2013-06-26]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\extensions\[email protected]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\extensions\[email protected]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\extensions\[email protected]
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.dosearche...W&ts=1382783094
CHR HKLM-x32\...\Chrome\Extension: [lgnbhdnimikkoodkogjlcllngimhlapp] - C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx [2013-06-26]
S2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe -service [X]
S2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe -service [X]
S2 Update qualitink; "C:\Program Files (x86)\qualitink\updatequalitink.exe" [X] <==== ATTENTION
S2 Util qualitink; "C:\Program Files (x86)\qualitink\bin\utilqualitink.exe" [X]
S2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [X] <==== ATTENTION
S2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe -service [X]
S1 {50c078f1-4117-4aad-852a-0b3bbfb46b18}w64; system32\drivers\{50c078f1-4117-4aad-852a-0b3bbfb46b18}w64.sys [X]
2015-02-27 16:51 - 2013-10-28 14:18 - 00001324 _____ () C:\Windows\Tasks\FTdownloader V4.0-updater.job
2015-02-27 16:51 - 2013-10-28 14:18 - 00001216 _____ () C:\Windows\Tasks\FTdownloader V4.0-codedownloader.job
2015-02-27 16:51 - 2013-10-28 14:18 - 00001126 _____ () C:\Windows\Tasks\FTdownloader V4.0-enabler.job
2015-02-27 15:54 - 2014-02-26 12:36 - 00000000 ____D () C:\Program Files (x86)\WinZipper
2015-02-27 15:54 - 2013-10-28 14:18 - 00000000 ____D () C:\Program Files (x86)\qualitink
Task: {57A3AD80-220C-44FC-8DE5-780BF89C09C3} - System32\Tasks\FTdownloader V4.0-updater => C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-updater.exe <==== ATTENTION
Task: {B4B7CD16-D4CA-4CC8-AE7D-85BCEA115BE5} - System32\Tasks\FTdownloader V4.0-codedownloader => C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-codedownloader.exe <==== ATTENTION
Task: {D0D13727-0D4D-406E-B63E-12FD1CD09BBB} - System32\Tasks\FTdownloader V4.0-enabler => C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\FTdownloader V4.0-codedownloader.job => C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-codedownloader.exe¬/reinstallapp /agentregpath='FTdownloader V4.0' /appid=35574 /srcid='0' /subid='0' /zdata='0' /bic=1049AE5B2C6545CB99D4EF28BAE4B4E8IE /verifier=31a7af3c8ed198a76f506d57f04ce65e /installerversion=1_29_153 /installerfullversion=1.29.153.0 /installationtime=1382962687 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /codedownloaddomain=http://cr.install-daddy.com <==== ATTENTION
Task: C:\Windows\Tasks\FTdownloader V4.0-enabler.job => C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-enabler.exe†/enablebho /agentregpath='FTdownloader V4.0' /appid=35574 /srcid='0' /subid='0' /zdata='0' /bic=1049AE5B2C6545CB99D4EF28BAE4B4E8IE /verifier=31a7af3c8ed198a76f506d57f04ce65e /installerversion=1_29_153 /installationtime=1382962687 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com <==== ATTENTION
Task: C:\Windows\Tasks\FTdownloader V4.0-updater.job => C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-updater.exeй/runupdater /agentregpath='FTdownloader V4.0' /appid=35574 /srcid='0' /subid='0' /zdata='0' /bic=1049AE5B2C6545CB99D4EF28BAE4B4E8IE /verifier=31a7af3c8ed198a76f506d57f04ce65e /installerversion=1_29_153 /installationtime=1382962687 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /monetizationdomain=http://stats.syncstatsdata.com /geoserviceurl=http://ipgeoapi.com/ /updatejsondomain=http://update.srvstatsdata.com <==== ATTENTION
cmd: bitsadmin /reset /allusers
cmd: netsh winsock reset catalog
cmd: ipconfig /flushdns
emptytemp:
end
*****************

Restore point was successfully created.
Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
"HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5862c732-3e24-11e3-893a-94de808b1d56}" => Key deleted successfully.
HKCR\CLSID\{5862c732-3e24-11e3-893a-94de808b1d56} => Key not found.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages => value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully.
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found.
"HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{565BBDD5-66F4-4822-9A2A-553A5FC02E7F}" => Key deleted successfully.
HKCR\CLSID\{565BBDD5-66F4-4822-9A2A-553A5FC02E7F} => Key not found.
"HKU\S-1-5-21-1657747020-3002511149-2105434976-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5CB14ECA-21EF-494A-AA31-46482A4932AB}" => Key deleted successfully.
HKCR\CLSID\{5CB14ECA-21EF-494A-AA31-46482A4932AB} => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174}" => Key deleted successfully.
"HKCR\CLSID\{11111111-1111-1111-1111-110311551174}" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311551174}" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" => Key deleted successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.
C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\searchplugins\keepmysearch.xml => Moved successfully.
C:\Program Files (x86)\mozilla firefox\searchplugins\delta-homes.xml => Moved successfully.
C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\Extensions\[email protected] => Moved successfully.
C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\Extensions\[email protected] => Moved successfully.
C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\Extensions\[email protected] => Moved successfully.
C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\Extensions\[email protected] => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\[email protected] => value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\[email protected] => value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\[email protected] => value deleted successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\Default => Value was restored successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lgnbhdnimikkoodkogjlcllngimhlapp" => Key deleted successfully.
"C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx" => File/Directory not found.
IePluginService => Service deleted successfully.
IePluginServices => Service deleted successfully.
Update qualitink => Service deleted successfully.
Util qualitink => Service deleted successfully.
winzipersvc => Service deleted successfully.
Wpm => Service deleted successfully.
{50c078f1-4117-4aad-852a-0b3bbfb46b18}w64 => Service deleted successfully.
C:\Windows\Tasks\FTdownloader V4.0-updater.job => Moved successfully.
C:\Windows\Tasks\FTdownloader V4.0-codedownloader.job => Moved successfully.
C:\Windows\Tasks\FTdownloader V4.0-enabler.job => Moved successfully.
C:\Program Files (x86)\WinZipper => Moved successfully.
"C:\Program Files (x86)\qualitink" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{57A3AD80-220C-44FC-8DE5-780BF89C09C3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57A3AD80-220C-44FC-8DE5-780BF89C09C3}" => Key deleted successfully.
C:\Windows\System32\Tasks\FTdownloader V4.0-updater => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-updater" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B4B7CD16-D4CA-4CC8-AE7D-85BCEA115BE5}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4B7CD16-D4CA-4CC8-AE7D-85BCEA115BE5}" => Key deleted successfully.
C:\Windows\System32\Tasks\FTdownloader V4.0-codedownloader => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-codedownloader" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D0D13727-0D4D-406E-B63E-12FD1CD09BBB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0D13727-0D4D-406E-B63E-12FD1CD09BBB}" => Key deleted successfully.
C:\Windows\System32\Tasks\FTdownloader V4.0-enabler => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-enabler" => Key deleted successfully.
C:\Windows\Tasks\FTdownloader V4.0-codedownloader.job not found.
C:\Windows\Tasks\FTdownloader V4.0-enabler.job not found.
C:\Windows\Tasks\FTdownloader V4.0-updater.job not found.

========= bitsadmin /reset /allusers =========

BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
© Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

0 out of 0 jobs canceled.

========= End of CMD: =========

========= netsh winsock reset catalog =========

Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.

========= End of CMD: =========

========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

/www.22find.com още си стои.Но за сметка на това ми изчезна winrar-a и сега не мога да си отварям архивите

Редактирано 28 февруари 201511 г. от мирослав24 (преглед на промените)

28 февруари 201511 г.

Добра работа. Липсва само частта от последната команда за почистване на временните файлове...

Нека да проверим за остатъци:

СТЪПКА 1

Изтеглете и стартирайтe AdwCleaner.exe.
Натиснете бутона Scan.
AdwCleaner ще започне да проверява компютъра.
След като проверката приключи натиснете бутона Clean.
Програмата ще затвори всички излишни процеси и след почистването ще иска да рестартира машината. Съгласете се.
Ще се появи автоматично лог файл с името (AdwCleaner[s0].txt) в C:\Adwcleaner
Публикувайте съдържанието му в следващия си коментар.

СТЪПКА 2

Моля изтеглете Junkware Removal Tool на вашия десктоп.

Спрете временно работата на защитните програми.
Стартирайте инструмента JRT.exe
Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата.
Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши.
Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).
Моля копирайте съдържанието на лог файла в следващия си пост.

СТЪПКА 3

Моля изтеглете ZHPcleaner и я запазете на вашия десктоп.

Стартирайте ZHPCleaner с десен клик върху файла и изберете от контекстното меню "Run as administrator"
Кликнете върху за да се съгласите с лицензионното споразумение.
Изберете бутона
Браузърите ще бъдат затворени автоматично.
Ще се отвори лог файл след прикючването на проверката.
Публикувайте лог файла в следващия си коментар.

СТЪПКА 4

Моля изтеглете Malwarebytes Anti-Malware 2.0.4.1028 Final и я запазете на вашия десктоп.

Стартирайте файла mbam-setup-2.0.4.1028.exe и следвайте указанията за да инсталирате програмата.
След като инсталацията приключи се уверете че сте сложили отметка пред:
Launch Malwarebytes Anti-Malware
Отметката активираща пробния 14 дневен период също е маркиран по-подразбиране. Ако не желаете да тествате защитата в реално време на програмата през следващите 14 дни тогава премахнете отметката.
Натиснете бутона Finish.
Отидете до табът Settings > Detection and Protection > и под категорията Detection Options включете опцията "Scan for rootkits".
Отидете до табът Scan, сложете радио-бутона пред Threat Scan и след това натиснете бутона Scan Now >> . Ако е намерена актуализация тогава натиснете бутона Update Now.
Ще започне проверка за зловреден софтуер.
При някои инфекции можете да видите съобщението:
"Could not load DDA driver"
Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
След като проверката приключи натиснете бутона Apply Actions.
Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.
След рестарта, когато се появи десктопа MBAM ще се зареди още веднъж.
Отидете то табът History > Application Logs.
Отворете рапорта с последната дата и час и натиснете бутона "Copy to Clipboard"
Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + V и го публикувайте в следващия си коментар.

СТЪПКА 5

1.Изтеглете Hitman Pro.
За 32-битова система - .
За 64-битова система -

2.Стартирайте програмата.

3.След като сте стартирали програмата като кликнете върху иконата и натиснете бутона „Напред“ като се съгласите с лицензионното споразумение (EULA).

4.Сложете отметка пред "Не, искам да завърша еднократно сканиране на компютъра".

5.Натиснете бутона „Напред“.

6.Програмата ще започне да сканира. Времето за сканиране е около 2 минути.

7.След завършване на сканирането от списъка с намерените неща (ако има такива) изберете Apply to all => Ignore.

8.Натиснете "Next" и след това натиснете "Изнеси резултата в XML file" и запазете лог файла на десктопа.

9.Архивирайте файла и го прикачете в следващия си коментар или копирайте съдържанието му в следващия си коментар.

Забележка: Ако няма падащо меню, където да изберете ignore както на снимката:

Тогава просто затворете програмата след края на проверката (без да премахвате нищо)...след това отворете C:Programdata\HitmanPro\Logs, отворете и публикувайте съдържанието на лог файла в следващия си коментар.

28 февруари 201511 г.

Автор

хм,adwcleaner заби и ми казва че чака за действие от моя страна-иска да отбележа което искам да запазя,ама то няма какво да отбелязвам.Спря да сканира.Да продължа ли с другите стъпки беа тая?

28 февруари 201511 г.

Не е забила. Сега трябва да натиснете бутона Clean. Моля четете по-внимателно инструкциите.

Колкото до Winrar не мисля, че някои от предишните стъпки е довело до деинсталирането, изтриването точно на Winrar...

Ако говорите за WinZipper...да...аз я изтрих, защото е зловредна!

Но тя няма нищо общо с WinRaR така или иначе. Инсталирайте си читава програма като 7-Zip, PeaZip, HaoZip, Bandizip, а не боклуци като WinZipper...

28 февруари 201511 г.

Автор

Да,спряха да се разпознават и отварят архивите след премахване на WinZipper.Така,най накрая станаха всички проверки ,22find.com изчезна,ето и логовете:

# AdwCleaner v4.111 - Logfile created 28/02/2015 at 13:54:01
# Updated 18/02/2015 by Xplode
# Database : 2015-02-18.3 [server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x64)
# Username : JORDAN - JORDAN-PC
# Running from : C:\Users\JORDAN\Desktop\adwcleaner_4.111.exe
# Option : Cleaning

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\eSafe
Folder Deleted : C:\ProgramData\IePluginServices
Folder Deleted : C:\ProgramData\WPM
Folder Deleted : C:\Users\JORDAN\AppData\Local\cool_mirage
Folder Deleted : C:\Users\JORDAN\AppData\Local\webplayer
File Deleted : C:\Users\JORDAN\AppData\Roaming\Mozilla\Firefox\Profiles\me06i8lj.default\searchplugins\bingp.xml

***** [ Scheduled tasks ] *****

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox\Mozilla Firefox (Надежден режим).lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\JORDAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\JORDAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\JORDAN\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\JORDAN\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\JORDAN\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\JORDAN\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk

***** [ Registry ] *****

Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Key Deleted : HKCU\Software\Classes\keepmysearch
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginService
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm
Key Deleted : HKCU\Software\Mozilla\Extends
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0035574.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0035574.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0035574.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0035574.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322552274}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355555574}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366556674}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344554474}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322552274}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355555574}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366556674}
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\SOFTWARE\dosearchessoftware
Key Deleted : HKLM\SOFTWARE\hdcode
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\supWPM
Key Deleted : HKLM\SOFTWARE\V9
Key Deleted : HKLM\SOFTWARE\winzipersvc
Key Deleted : HKLM\SOFTWARE\Wpm

***** [ Web browsers ] *****

-\\ Internet Explorer v10.0.9200.16537

-\\ Mozilla Firefox v3.5.10 (bg)

*************************

AdwCleaner[R0].txt - [5036 bytes] - [28/02/2015 13:33:33]
AdwCleaner[R1].txt - [4404 bytes] - [28/02/2015 13:53:04]
AdwCleaner[s0].txt - [6467 bytes] - [28/02/2015 13:50:54]
AdwCleaner[s1].txt - [5345 bytes] - [28/02/2015 13:54:01]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [5404 bytes] ##########

~ ZHPCleaner v2015.2.28.98 by Nicolas Coolman (28/02/2015)
~ Run by JORDAN (Administrator) (28/02/2015 14:01:51)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\JORDAN\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\JORDAN\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 7, 64-bit Service Pack 1 (Build 7601)

---\\ Services (0)
~ No malicious items found.

---\\ Browser internet (0)
~ No malicious items found.

---\\ Hosts file (0)
~ No malicious items found.

---\\ Scheduled automatic tasks. (4)
DELETED task: [AutoKMS] [C:\Windows\AutoKMS.exe (Not File) ] (Trojan.AutoKMS)
DELETED task: [AutoKMSDaily] [C:\Windows\AutoKMS.exe (Not File) ] (Trojan.AutoKMS)
DELETED task: [AutoKMS] [C:\Windows\Tasks\AutoKMS.job] (Trojan.AutoKMS)
DELETED task: [AutoKMSDaily] [C:\Windows\Tasks\AutoKMSDaily.job] (Trojan.AutoKMS)

---\\ Explorer ( File, Folder) (2)
MOVED file: C:\Windows\Tasks\AutoKMS.job [ - ] (Trojan.AutoKMS)
MOVED file: C:\Windows\Tasks\AutoKMSDaily.job [ - ] (Trojan.AutoKMS)

---\\ Registry ( Key, Value, Data) (7)
DELETED data: HKCR\FirefoxHTML\Shell\Open\Command\\Default [bad : "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1"] (Broken.OpenCommand)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\qualitink [] (PUP.Qualitink)
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\22find.com [4795] (Hijacker.22Find)
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\22find.com [4796] (Hijacker.22Find)
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\globososo.com [38] (Adware.TencentAddressBar)
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\qualitink.net [135560] (PUP.Qualitink)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} [iTool] (Toolbar.Ask)

---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Google Chrome)
~ Browser not found (Opera Software)

---\\ Statistics
~ Items scanned : 71274
~ Items found : 0
~ Items repaired : 7

End of clean at 14:07:10
===================
ZHPCleaner-[R]-28022015-14_07_10.txt

Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Windows 7 Ultimate x64
Ran by JORDAN on бкЎ 28.02.2015 Ј. at 13:57:25,45
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\update qualitink
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\util qualitink
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311551174}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311551174}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311551174}

~~~ Files

~~~ Folders

~~~ FireFox

Emptied folder: C:\Users\JORDAN\AppData\Roaming\mozilla\firefox\profiles\me06i8lj.default\minidumps [32 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on бкЎ 28.02.2015 Ј. at 13:59:45,86
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 28.2.2015 г.
Scan Time: 14:12:35 ч.
Logfile: mbam.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.02.28.02
Rootkit Database: v2015.02.25.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: JORDAN

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 334875
Time Elapsed: 12 min, 22 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 1
PUP.Optional.Qone8, HKU\S-1-5-21-1657747020-3002511149-2105434976-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [1d8c6fb3e3a790a61b9b3ad08283fd03],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

(end)

HitmanPro 3.7.9.238
www.hitmanpro.com

   Computer name . . . . : JORDAN-PC
   Windows . . . . . . . : 6.1.1.7601.X64/2
   User name . . . . . . : JORDAN-PC\JORDAN
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2015-02-28 14:37:59
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 2m 32s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 4

   Objects scanned . . . : 1 070 032
   Files scanned . . . . : 9 897
   Remnants scanned  . . : 161 734 files / 898 401 keys

Suspicious files ____________________________________________________________

   C:\Users\JORDAN\Desktop\New folder\FRST64.exe
      Size . . . . . . . : 2 087 936 bytes
      Age  . . . . . . . : 0.9 days (2015-02-27 16:54:06)
      Entropy  . . . . . : 7.5
      SHA-256  . . . . . : 552DE6F30FD0E9BEF5519659E35FD23FD20645DE092DBA24F8551CCEBE000FD1
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.


Potential Unwanted Programs _________________________________________________

   HKLM\SYSTEM\ControlSet001\services\eventlog\Application\winzipersvc\ (AirZip)
   HKLM\SYSTEM\ControlSet002\services\eventlog\Application\winzipersvc\ (AirZip)
   HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\winzipersvc\ (AirZip)

28 февруари 201511 г.

Почти сме готови:

Изтеглете fixlist.txt и го запазете в папката от която стартирахте FRST.exe.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.

Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

Както споменах можете да си инсталирате алтернативна програма за работа с архиви. Тъй като WinRaR си е платена програма (макар че продължава да работи след 40-дневния пробен период с цената на досадното съобщение), препоръчвам да се насочите към някои от най-добрите безплатни такива като 7-zip, Bandizip, HaoZip, PeaZip или дори Izarc (само че внимавайте с отметките по-време на инсталацията, за да не си инсталирате пак нещо непредвидено).

Добра идея е да си инсталирате Unchecky, която ще се опита да запази отметките размаркирани.

Има ли други проблеми за оправяне?

28 февруари 201511 г.

Автор

всичко си е наред засега,няма проблеми,22find.com го няма вече.Ето и лога:

Fixlog.txt

28 февруари 201511 г.

Чудесно...няколко финални препоръки.

Няколко финални препоръки:

1. Проверете за стари приложения с помощта на PatchMyPC или с програмата Secunia Personal Software Inspector.

2. Инсталирайте Unchecky за да се предпазите от адуер по време на инсталацията на даден софтуер.

3. За да почистим използваните от нас инструменти направете следното:

3.1 Изтеглете OTC.exe и го стартирайте. Натиснете бутона CleanUp!.
Рестартирайте компютъра, ако ви попита!

3.2 Изтеглете Delfix.exe и го стартирайте. Сложете отметка пред Remove disinfection tools (трябва да има такава по-подразбиране, но все пак да си кажа) => натиснете бутона Run

Инструмента ще се самоизтрие след като приключи своята задача!

Ако има папки, които не са се изтрили след гореспоменатите процедури пишете и ще ги премахнем ръчно.

4. За защита от криптовирусите, освен обновяване на ОС и антивирусната програма е добре да имунизирате системата си с CryptoPrevent и профила Maximum Protection: (Не използвайте последната опция, защото още е бъгава и не работи коректно):

Не забравяйте да изключите и Autorun в Windows, защото криптовирусите могат да се настанят и там и да заразят Windows през USB базираните устройства при вкарването им в компютъра.

Microsoft са създали автоматичен инструмент за целта => MSFixIt.

Има и други програми, но са главно за напреднали потребители и няма да ги споменавам повече, защото един потребител вече се оплете с тяхното използване...

Добра идея е и да забраните скриптовете, ако не използвате такива с помощта на инструмента - Noscript.exe. Стартирайте го и изберете Disable. Ако ви потрябва да стартирате някога (js или vbs файлове, просто стартирайте инструмента и го направете на Enable).

5. За подобряване на производителността (ако системата ви се вижда мудна) вижте следните няколко теми:

Оптимизиране на Windows с цел по-добра производителност

Ръководство за поддръжка на Windows (XP, Vista и 7) [Revision 2.0]

Какво да направя, ако компютърът ми работи бавно

Профилактика на компютъра,как?

Направете и една дефрагментация с MyDefrag за повишаване на производителноста при дисковите операции: (ще се отрази благоприятно и при често използваните програми):

Забележка: Само ако диска НЕ Е SSD!!!

Изтеглете MyDefrag и я инсталирайте.

Отворете следната папка C:\Program Files\MyDefrag v4.3.1\Scripts и изтрийте всички файлове в нея.

Изтеглете следния архив и го разархивирайте в C:\Program Files\MyDefrag v4.3.1\Scripts, която е празна в момента.

Стартирайте MyDefrag.exe и изберете System Disk Level V и посочете системния дял C: и натиснете Run

Може да отнеме доста време, защото за основа на скрипта са използвани скриптовете на Jaspion и на някои други потребители + мои лични настройки и модификации.

Скрипта ще направи приоритизация на често използваните програми и файлове.

След като приключи ще изпише Finished и можете да затворите програмата от X-са.

Рестартирайте системата.

6. Проверете системата си актуални драйвери от сайтовете на производителите на компонентите ако ви се занимава (не използвайте програми за автоматично обновяване на драйверите за да си спестите главоболията после) и направете пълна проверка за гадини с наличната ви антивирусна програма за всеки случай.

Поздрави и усмихната седмица! Ще маркирам случая като РЕШЕН!

28 февруари 201511 г.

Автор

Така,изпълних всичко,ще последвам съветите за подръжката на системата.Благодаря за отделеното внимание и приятни почивни дни.

28 февруари 201511 г.

Мерси, приятни почивни дни и весело посрещане на празниците.

Добре дошли!

Не мога да се отърва от 22find.com вирус

Featured Replies

Архивирана тема

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)