Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Инфектирана система opencandy

Gibellini
в Премахване на зловреден софтуер

Featured Replies

Здравейте , днес забелязах че нещо системата е по-бавна т.е. бавно ми отваря сайтовете проверих speedtest всичко е наред, но вчера инсталирах новата версия на utorrent 3.3.5 дали нещо не е виновен уторента незнам, и реших да си сканирам с MBAM програмата я имам от години, но напоследък я използвам рядко. Ето резултат от MBAM. отри ми вирус opencandy пуснах проверка във вирустотал и ето от там резултата https://www.virustotal.com/en/file/6823d68e916795561616586014e71a91ef248e67f7805817e3d6767fa6e7e3cd/analysis/1457295906/

Ако може да ми помогнете, Благодаря.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-03-2016 01
Ran by Administrator (administrator) on USER-E64E52E658 (06-03-2016 22:41:37)
Running from C:\Documents and Settings\Administrator\Desktop
Loaded Profiles: UpdatusUser & Administrator (Available Profiles: UpdatusUser & Administrator)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\WINXP\system32\smss.exe
(Microsoft Corporation) C:\WINXP\system32\csrss.exe
(Microsoft Corporation) C:\WINXP\system32\winlogon.exe
(Microsoft Corporation) C:\WINXP\system32\services.exe
(Microsoft Corporation) C:\WINXP\system32\lsass.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\spoolsv.exe
(Microsoft Corporation) C:\WINXP\explorer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
(Microsoft Corporation) C:\WINXP\system32\rundll32.exe
(VIA Technologies, Inc.) C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Lite\daemon.exe
(Microsoft Corporation) C:\WINXP\system32\ctfmon.exe
() C:\WINXP\Datecs\Flex2K.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(VIA Technologies, Inc.) C:\WINXP\system32\KaraokeSer.exe
(NVIDIA Corporation) C:\WINXP\system32\nvsvc32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\WINXP\system32\wscntfy.exe
(Microsoft Corporation) C:\WINXP\system32\alg.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\WINXP\system32\notepad.exe
(Microsoft Corporation) C:\WINXP\system32\wbem\wmiprvse.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDCPL] => C:\WINXP\RTHDCPL.EXE [16859648 2008-04-28] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] => C:\WINXP\ALCMTR.EXE [69632 2008-04-28] (Realtek Semiconductor Corp.)
HKLM\...\Run: [TaskTray] => [X]
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [30208 2005-12-08] (Cyberlink Corp.)
HKLM\...\Run: [LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [49152 2006-05-18] ()
HKLM\...\Run: [eurobattlegui] => "H:\Game1\Warcraft III 1\Warcraft III\eb.exe"
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINXP\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINXP\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [41101936 2011-06-20] (VIA Technologies, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2029640 2009-04-09] (ESET)
HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k
HKLM\...\Winlogon: [Userinit] C:\WINXP\system32\userinit.exe,
HKLM\...\Winlogon: [Shell] Explorer.exe [x ] ()
HKLM\...\Winlogon: [UIHost] C:\WINXP\system32\logonui.exe [514560 2008-04-14] (Microsoft Corporation)
Winlogon\Notify\crypt32chain: C:\WINXP\system32\crypt32.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\cryptnet: C:\WINXP\system32\cryptnet.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\cscdll: C:\WINXP\system32\cscdll.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\dimsntfy: C:\WINXP\System32\dimsntfy.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\ScCertProp: C:\WINXP\system32\wlnotify.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\Schedule: C:\WINXP\system32\wlnotify.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\sclgntfy: C:\WINXP\system32\sclgntfy.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\SensLogn: C:\WINXP\system32\WlNotify.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\termsrv: C:\WINXP\system32\wlnotify.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\wlballoon: C:\WINXP\system32\wlnotify.dll [2008-04-14] (Microsoft Corporation)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINXP\System32\logon.scr [220672 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINXP\System32\logon.scr [220672 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-1547161642-1123561945-1801674531-1003\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINXP\System32\logon.scr [220672 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-1547161642-1123561945-1801674531-500\...\Run: [Google Update] => C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc.)
HKU\S-1-5-21-1547161642-1123561945-1801674531-500\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\daemon.exe [490952 2008-08-08] (DT Soft Ltd)
HKU\S-1-5-21-1547161642-1123561945-1801674531-500\...\Run: [ctfmon.exe] => C:\WINXP\system32\ctfmon.exe [15360 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-1547161642-1123561945-1801674531-500\...\Run: [Facebook Update] => C:\Documents and Settings\Administrator\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe [138096 2014-08-24] (Facebook Inc.)
HKU\S-1-5-21-1547161642-1123561945-1801674531-500\...\Run: [uTorrent] => C:\Documents and Settings\Administrator\Application Data\uTorrent\uTorrent.exe [2094080 2016-03-04] (BitTorrent Inc.)
HKU\S-1-5-21-1547161642-1123561945-1801674531-500\...\MountPoints2: D - D:\ASRSetup.exe
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINXP\system32\logon.scr [220672 2008-04-14] (Microsoft Corporation)
ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [113024 2011-07-19] (SuperAdBlocker.com)
Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2013-09-25]
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\FlexType 2K.lnk [2011-09-15]
ShortcutTarget: FlexType 2K.lnk -> C:\WINXP\Datecs\Flex2K.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 01 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog5 02 C:\WINXP\system32\winrnr.dll [16896 2008-04-14] (Microsoft Corporation)
Winsock: Catalog5 03 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 01 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 02 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 03 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 04 C:\WINXP\system32\rsvpsp.dll [92672 2008-04-14] (Microsoft Corporation)
Winsock: Catalog9 05 C:\WINXP\system32\rsvpsp.dll [92672 2008-04-14] (Microsoft Corporation)
Winsock: Catalog9 06 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 07 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 08 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 09 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 10 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 11 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 12 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 13 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 14 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 15 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 16 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 17 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8EC002B7-C06E-4E6B-A74A-593AA2591DED}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AA033210-7C70-4501-87EC-583D519F901D}: [NameServer] 195.24.90.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
HKU\S-1-5-21-1547161642-1123561945-1801674531-500\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
HKU\S-1-5-21-1547161642-1123561945-1801674531-500\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.bg/
URLSearchHook: [S-1-5-21-1547161642-1123561945-1801674531-1003] ATTENTION => Default URLSearchHook is missing
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\z9y5jb5u.default
FF Homepage: hxxps://www.google.bg/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINXP\system32\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-26] ()
FF Plugin: @inhatch.com,version=0.7.61 -> C:\Program Files\InhatchTeam\Inhatch\npinhatch.dll [No File]
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2007-11-07] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1547161642-1123561945-1801674531-500: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Documents and Settings\Administrator\Local Settings\Application Data\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-1547161642-1123561945-1801674531-500: @tools.google.com/Google Update;version=3 -> C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-01-31] (Google Inc.)
FF Plugin HKU\S-1-5-21-1547161642-1123561945-1801674531-500: @tools.google.com/Google Update;version=9 -> C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-01-31] (Google Inc.)
FF Extension: Adblock Plus - C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\z9y5jb5u.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-10-17]
FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: Eset Plugin - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-08-10] [not signed]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/webhp?hl=bg
CHR StartupUrls: Default -> "hxxp://google.bg/"
CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=
CHR Plugin: (Shockwave Flash) - C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\47.0.2526.111\gcswf32.dll => No File
CHR Plugin: (Shockwave Flash) - C:\WINXP\system32\Macromed\Flash\NPSWF32.dll => No File
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Native Client) - C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\47.0.2526.111\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\47.0.2526.111\pdf.dll => No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll => No File
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\1.3.21.69\npGoogleUpdate3.dll => No File
CHR Plugin: (Inhatch Plug-in) - C:\Program Files\InhatchTeam\Inhatch\npinhatch.dll => No File
CHR Plugin: (Windows Presentation Foundation) - C:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Profile: C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-20]
CHR Extension: (Google Търсене) - C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-17]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-25]
CHR Extension: (Gmail) - C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-01]
StartMenuInternet: chrome.exe - C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
StartMenuInternet: Google Chrome - C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [142648 2015-07-30] (SUPERAntiSpyware.com)
S4 Alerter; C:\WINXP\system32\alrsvc.dll [17408 2008-04-14] (Microsoft Corporation)
R3 ALG; C:\WINXP\System32\alg.exe [44544 2008-04-14] (Microsoft Corporation)
S3 AppMgmt; C:\WINXP\System32\appmgmts.dll [167936 2008-04-14] (Microsoft Corporation)
S3 aspnet_state; C:\WINXP\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [33800 2007-10-24] (Microsoft Corporation)
R2 AudioSrv; C:\WINXP\System32\audiosrv.dll [42496 2008-04-14] (Microsoft Corporation)
S3 BITS; C:\WINXP\system32\qmgr.dll [409088 2008-04-14] (Microsoft Corporation)
S2 Browser; C:\WINXP\System32\browser.dll [77824 2008-04-14] (Microsoft Corporation)
S3 CiSvc; C:\WINXP\system32\cisvc.exe [5632 2008-04-14] (Microsoft Corporation)
S4 ClipSrv; C:\WINXP\system32\clipsrv.exe [33280 2008-04-14] (Microsoft Corporation)
S3 clr_optimization_v2.0.50727_32; C:\WINXP\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [70144 2007-10-24] (Microsoft Corporation)
R2 CryptSvc; C:\WINXP\System32\cryptsvc.dll [62464 2008-04-14] (Microsoft Corporation)
R2 DcomLaunch; C:\WINXP\system32\rpcss.dll [401408 2010-09-16] (Microsoft Corporation)
R2 Dhcp; C:\WINXP\System32\dhcpcsvc.dll [126976 2008-04-14] (Microsoft Corporation)
S3 dmadmin; C:\WINXP\System32\dmadmin.exe [224768 2008-04-14] (Microsoft Corp., Veritas Software)
R2 dmserver; C:\WINXP\System32\dmserver.dll [23552 2008-04-14] (Microsoft Corp.)
R2 Dnscache; C:\WINXP\System32\dnsrslvr.dll [45568 2008-04-14] (Microsoft Corporation)
S3 Dot3svc; C:\WINXP\System32\dot3svc.dll [132096 2008-04-14] (Microsoft Corporation)
S3 EapHost; C:\WINXP\System32\eapsvc.dll [33792 2008-04-14] (Microsoft Corporation)
S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [20680 2009-04-09] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [731840 2009-04-09] (ESET)
R2 ERSvc; C:\WINXP\System32\ersvc.dll [23040 2008-04-14] (Microsoft Corporation)
R2 Eventlog; C:\WINXP\system32\services.exe [110592 2010-09-16] (Microsoft Corporation)
R3 EventSystem; C:\WINXP\system32\es.dll [253952 2010-09-16] (Microsoft Corporation)
R3 FastUserSwitchingCompatibility; C:\WINXP\System32\shsvcs.dll [135168 2011-03-08] (Microsoft Corporation)
S3 FontCache3.0.0.0; C:\WINXP\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [36864 2007-10-09] (Microsoft Corporation)
R2 helpsvc; C:\WINXP\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400 2008-04-14] (Microsoft Corporation)
R2 HidServ; C:\WINXP\System32\hidserv.dll [21504 2008-04-14] (Microsoft Corporation)
S3 hkmsvc; C:\WINXP\System32\kmsvc.dll [61440 2008-04-14] (Microsoft Corporation)
S3 HTTPFilter; C:\WINXP\System32\w3ssl.dll [15872 2008-04-14] (Microsoft Corporation)
S3 idsvc; C:\WINXP\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [864256 2007-10-11] (Microsoft Corporation) [File not signed]
S3 ImapiService; C:\WINXP\system32\imapi.exe [150528 2008-04-14] (Microsoft Corporation)
R2 KaraokeService; C:\WINXP\system32\KaraokeSer.exe [88688 2011-06-14] (VIA Technologies, Inc.)
R2 LanmanServer; C:\WINXP\System32\srvsvc.dll [99840 2010-10-12] (Microsoft Corporation)
R2 lanmanworkstation; C:\WINXP\System32\wkssvc.dll [134144 2010-09-16] (Microsoft Corporation)
R2 LmHosts; C:\WINXP\System32\lmhsvc.dll [13824 2008-04-14] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S4 Messenger; C:\WINXP\System32\msgsvc.dll [33792 2008-04-14] (Microsoft Corporation)
S3 mnmsrvc; C:\WINXP\system32\mnmsrvc.exe [32768 2008-04-14] (Microsoft Corporation)
S3 MSDTC; C:\WINXP\system32\msdtc.exe [6144 2008-04-14] (Microsoft Corporation)
S3 MSIServer; C:\WINXP\System32\msiexec.exe [78848 2008-04-14] (Microsoft Corporation)
S3 napagent; C:\WINXP\System32\qagentrt.dll [291328 2008-04-14] (Microsoft Corporation)
S4 NetDDE; C:\WINXP\system32\netdde.exe [111104 2008-04-14] (Microsoft Corporation)
S4 NetDDEdsdm; C:\WINXP\system32\netdde.exe [111104 2008-04-14] (Microsoft Corporation)
S3 Netlogon; C:\WINXP\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
R3 Netman; C:\WINXP\System32\netman.dll [198144 2008-04-14] (Microsoft Corporation)
S4 NetTcpPortSharing; C:\WINXP\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [122880 2007-10-11] (Microsoft Corporation) [File not signed]
R3 Nla; C:\WINXP\System32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
S3 NtLmSsp; C:\WINXP\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
S3 NtmsSvc; C:\WINXP\system32\ntmssvc.dll [435200 2008-04-14] (Microsoft Corporation)
R2 NVSvc; C:\WINXP\system32\nvsvc32.exe [146024 2011-08-03] (NVIDIA Corporation)
R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2255464 2011-08-03] (NVIDIA Corporation)
R2 PlugPlay; C:\WINXP\system32\services.exe [110592 2010-09-16] (Microsoft Corporation)
R2 PolicyAgent; C:\WINXP\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
R2 ProtectedStorage; C:\WINXP\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
S3 RasAuto; C:\WINXP\System32\rasauto.dll [88576 2008-04-14] (Microsoft Corporation)
R3 RasMan; C:\WINXP\System32\rasmans.dll [186368 2008-04-14] (Microsoft Corporation)
S3 RDSessMgr; C:\WINXP\system32\sessmgr.exe [141312 2008-04-14] (Microsoft Corporation)
S4 RemoteAccess; C:\WINXP\System32\mprdim.dll [53248 2008-04-14] (Microsoft Corporation)
R2 RemoteRegistry; C:\WINXP\system32\regsvc.dll [59904 2008-04-14] (Microsoft Corporation)
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [167936 2005-08-08] () [File not signed]
S3 RpcLocator; C:\WINXP\system32\locator.exe [75264 2008-04-14] (Microsoft Corporation)
R2 RpcSs; C:\WINXP\system32\rpcss.dll [401408 2010-09-16] (Microsoft Corporation)
S3 RSVP; C:\WINXP\system32\rsvp.exe [132608 2008-04-14] (Microsoft Corporation)
R2 SamSs; C:\WINXP\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
S3 SCardSvr; C:\WINXP\System32\SCardSvr.exe [95744 2008-04-14] (Microsoft Corporation)
R2 Schedule; C:\WINXP\system32\schedsvc.dll [192512 2008-04-14] (Microsoft Corporation)
R2 seclogon; C:\WINXP\System32\seclogon.dll [18944 2008-04-14] (Microsoft Corporation)
R2 SENS; C:\WINXP\system32\sens.dll [39424 2008-04-14] (Microsoft Corporation)
R2 SharedAccess; C:\WINXP\System32\ipnathlp.dll [331264 2008-04-14] (Microsoft Corporation)
R2 ShellHWDetection; C:\WINXP\System32\shsvcs.dll [135168 2011-03-08] (Microsoft Corporation)
R2 Spooler; C:\WINXP\system32\spoolsv.exe [58880 2010-09-16] (Microsoft Corporation)
R2 srservice; C:\WINXP\system32\srsvc.dll [171008 2008-04-14] (Microsoft Corporation)
R3 SSDPSRV; C:\WINXP\System32\ssdpsrv.dll [71680 2008-04-14] (Microsoft Corporation)
S3 stisvc; C:\WINXP\system32\wiaservc.dll [333824 2008-04-14] (Microsoft Corporation)
S3 SysmonLog; C:\WINXP\system32\smlogsvc.exe [89600 2008-04-14] (Microsoft Corporation)
R3 TapiSrv; C:\WINXP\System32\tapisrv.dll [249856 2008-04-14] (Microsoft Corporation)
R3 TermService; C:\WINXP\System32\termsrv.dll [295424 2008-04-14] (Microsoft Corporation)
R2 Themes; C:\WINXP\System32\shsvcs.dll [135168 2011-03-08] (Microsoft Corporation)
S4 TlntSvr; C:\WINXP\system32\tlntsvr.exe [73216 2008-04-14] (Microsoft Corporation)
R2 TrkWks; C:\WINXP\system32\trkwks.dll [90112 2008-04-14] (Microsoft Corporation)
S3 upnphost; C:\WINXP\System32\upnphost.dll [185856 2008-04-14] (Microsoft Corporation)
S3 UPS; C:\WINXP\System32\ups.exe [18432 2008-04-14] (Microsoft Corporation)
S3 VSS; C:\WINXP\System32\vssvc.exe [289792 2008-04-14] (Microsoft Corporation)
R2 W32Time; C:\WINXP\system32\w32time.dll [175104 2008-04-14] (Microsoft Corporation)
R2 WebClient; C:\WINXP\System32\webclnt.dll [68096 2008-04-14] (Microsoft Corporation)
R2 winmgmt; C:\WINXP\system32\wbem\WMIsvc.dll [144896 2008-04-14] (Microsoft Corporation)
S3 WmdmPmSN; C:\WINXP\system32\mspmsnsv.dll [27136 2010-09-16] (Microsoft Corporation)
S3 Wmi; C:\WINXP\System32\advapi32.dll [617472 2010-09-16] (Microsoft Corporation)
S3 WmiApSrv; C:\WINXP\system32\wbem\wmiapsrv.exe [126464 2008-04-14] (Microsoft Corporation)
R2 wscsvc; C:\WINXP\system32\wscsvc.dll [80896 2008-04-14] (Microsoft Corporation)
R2 wuauserv; C:\WINXP\system32\wuauserv.dll [6656 2008-04-14] (Microsoft Corporation)
S3 WudfSvc; C:\WINXP\System32\WUDFSvc.dll [55808 2010-09-16] (Microsoft Corporation)
R2 WZCSVC; C:\WINXP\System32\wzcsvc.dll [483840 2011-03-08] (Microsoft Corporation)
S3 xmlprov; C:\WINXP\System32\xmlprov.dll [129024 2008-04-14] (Microsoft Corporation)
S3 COMSysApp; C:\WINXP\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
S3 SwPrv; C:\WINXP\system32\dllhost.exe /Processid:{507226E1-B26B-4DB9-A39C-180FCB61F336}

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 ACPI; C:\WINXP\System32\DRIVERS\ACPI.sys [187776 2008-04-14] (Microsoft Corporation)
S4 ACPIEC; C:\WINXP\system32\Drivers\ACPIEC.sys [11648 2008-04-14] (Microsoft Corporation)
S3 aec; C:\WINXP\System32\drivers\aec.sys [142592 2008-04-14] (Microsoft Corporation)
R1 AFD; C:\WINXP\System32\drivers\afd.sys [138496 2010-09-16] (Microsoft Corporation)
S3 AMBFilt; C:\WINXP\System32\drivers\AMBFilt.sys [1656960 2009-06-26] (Creative)
R1 AsrAppCharger; C:\WINXP\System32\DRIVERS\AsrAppCharger.sys [15656 2011-05-10] (Windows (R) Win 7 DDK provider)
S3 AsyncMac; C:\WINXP\System32\DRIVERS\asyncmac.sys [14336 2008-04-14] (Microsoft Corporation)
R0 atapi; C:\WINXP\System32\DRIVERS\atapi.sys [96512 2008-04-14] (Microsoft Corporation)
S3 Atmarpc; C:\WINXP\System32\DRIVERS\atmarpc.sys [59904 2008-04-14] (Microsoft Corporation)
R3 audstub; C:\WINXP\System32\DRIVERS\audstub.sys [3072 2001-08-17] (Microsoft Corporation)
R1 Beep; C:\WINXP\system32\Drivers\Beep.sys [4224 2008-04-14] (Microsoft Corporation)
S4 cbidf2k; C:\WINXP\system32\Drivers\cbidf2k.sys [13952 2008-04-14] (Microsoft Corporation)
S1 Cdaudio; C:\WINXP\system32\Drivers\Cdaudio.sys [18688 2011-03-08] (Microsoft Corporation)
R4 Cdfs; C:\WINXP\system32\Drivers\Cdfs.sys [63744 2008-04-14] (Microsoft Corporation)
R1 Cdrom; C:\WINXP\System32\DRIVERS\cdrom.sys [62976 2008-04-14] (Microsoft Corporation)
R0 Disk; C:\WINXP\System32\DRIVERS\disk.sys [36352 2008-04-14] (Microsoft Corporation)
S4 dmboot; C:\WINXP\System32\drivers\dmboot.sys [799744 2008-04-14] (Microsoft Corp., Veritas Software)
R0 dmio; C:\WINXP\System32\drivers\dmio.sys [153344 2008-04-14] (Microsoft Corp., Veritas Software)
R0 dmload; C:\WINXP\System32\drivers\dmload.sys [5888 2008-04-14] (Microsoft Corp., Veritas Software.)
S3 DMusic; C:\WINXP\System32\drivers\DMusic.sys [52864 2008-04-14] (Microsoft Corporation)
S3 drmkaud; C:\WINXP\System32\drivers\drmkaud.sys [2944 2008-04-14] (Microsoft Corporation)
R2 eamon; C:\WINXP\System32\DRIVERS\eamon.sys [113960 2009-04-09] (ESET)
R1 ehdrv; C:\WINXP\System32\DRIVERS\ehdrv.sys [107256 2009-04-09] (ESET)
R1 epfwtdir; C:\WINXP\System32\DRIVERS\epfwtdir.sys [94360 2009-04-09] (ESET)
S4 Fastfat; C:\WINXP\system32\Drivers\Fastfat.sys [143744 2008-04-14] (Microsoft Corporation)
S1 Fdc; C:\WINXP\system32\Drivers\Fdc.sys [27392 2008-04-14] (Microsoft Corporation)
R1 Fips; C:\WINXP\system32\Drivers\Fips.sys [44544 2008-04-14] (Microsoft Corporation)
S1 Flpydisk; C:\WINXP\system32\Drivers\Flpydisk.sys [20480 2008-04-14] (Microsoft Corporation)
R0 FltMgr; C:\WINXP\System32\DRIVERS\fltMgr.sys [129792 2008-04-14] (Microsoft Corporation)
U1 Fs_Rec; C:\WINXP\system32\Drivers\Fs_Rec.sys [7936 2008-04-14] (Microsoft Corporation)
R0 Ftdisk; C:\WINXP\System32\DRIVERS\ftdisk.sys [125056 2008-04-14] (Microsoft Corporation)
R3 Gpc; C:\WINXP\System32\DRIVERS\msgpc.sys [35072 2008-04-14] (Microsoft Corporation)
R3 HDAudBus; C:\WINXP\System32\DRIVERS\HDAudBus.sys [144384 2008-04-14] (Windows (R) Server 2003 DDK provider)
R3 HidUsb; C:\WINXP\System32\DRIVERS\hidusb.sys [10368 2008-04-14] (Microsoft Corporation)
R3 HTTP; C:\WINXP\System32\Drivers\HTTP.sys [265728 2010-09-16] (Microsoft Corporation)
S1 i8042prt; C:\WINXP\System32\DRIVERS\i8042prt.sys [52480 2008-04-14] (Microsoft Corporation)
R1 Imapi; C:\WINXP\System32\DRIVERS\imapi.sys [42112 2008-04-14] (Microsoft Corporation)
S3 IntcAzAudAddService; C:\WINXP\System32\drivers\RtkHDAud.sys [4725760 2008-04-28] (Realtek Semiconductor Corp.)
S3 Ip6Fw; C:\WINXP\System32\DRIVERS\Ip6Fw.sys [36608 2008-04-14] (Microsoft Corporation)
S3 IpFilterDriver; C:\WINXP\System32\DRIVERS\ipfltdrv.sys [32896 2008-04-14] (Microsoft Corporation)
S3 IpInIp; C:\WINXP\System32\DRIVERS\ipinip.sys [20864 2008-04-14] (Microsoft Corporation)
R3 IpNat; C:\WINXP\System32\DRIVERS\ipnat.sys [152832 2008-04-14] (Microsoft Corporation)
R1 IPSec; C:\WINXP\System32\DRIVERS\ipsec.sys [75264 2008-04-14] (Microsoft Corporation)
S3 IRENUM; C:\WINXP\System32\DRIVERS\irenum.sys [11264 2008-04-14] (Microsoft Corporation)
R0 isapnp; C:\WINXP\System32\DRIVERS\isapnp.sys [37248 2008-04-14] (Microsoft Corporation)
R1 Kbdclass; C:\WINXP\System32\DRIVERS\kbdclass.sys [24576 2008-04-14] (Microsoft Corporation)
R1 kbdhid; C:\WINXP\System32\DRIVERS\kbdhid.sys [14592 2008-04-14] (Microsoft Corporation)
R3 kmixer; C:\WINXP\System32\drivers\kmixer.sys [172416 2008-04-14] (Microsoft Corporation)
R0 KSecDD; C:\WINXP\system32\Drivers\KSecDD.sys [92928 2009-06-24] (Microsoft Corporation)
R3 MBAMProtector; C:\WINXP\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINXP\system32\drivers\MBAMSwissArmy.sys [170200 2016-03-06] (Malwarebytes)
R1 mnmdd; C:\WINXP\system32\Drivers\mnmdd.sys [4224 2008-04-14] (Microsoft Corporation)
S3 Modem; C:\WINXP\system32\Drivers\Modem.sys [30080 2011-03-08] (Microsoft Corporation)
S3 MonFilt; C:\WINXP\System32\drivers\MonFilt.sys [1389056 2008-12-02] (Creative Technology Ltd.)
R1 Mouclass; C:\WINXP\System32\DRIVERS\mouclass.sys [23040 2011-03-08] (Microsoft Corporation)
R3 mouhid; C:\WINXP\System32\DRIVERS\mouhid.sys [12160 2001-08-17] (Microsoft Corporation)
R0 MountMgr; C:\WINXP\system32\Drivers\MountMgr.sys [42368 2008-04-14] (Microsoft Corporation)
R3 MRxDAV; C:\WINXP\System32\DRIVERS\mrxdav.sys [180608 2008-04-14] (Microsoft Corporation)
R1 MRxSmb; C:\WINXP\System32\DRIVERS\mrxsmb.sys [457216 2010-09-16] (Microsoft Corporation)
R1 Msfs; C:\WINXP\system32\Drivers\Msfs.sys [19072 2008-04-14] (Microsoft Corporation)
S3 MSKSSRV; C:\WINXP\System32\drivers\MSKSSRV.sys [7552 2008-04-13] (Microsoft Corporation)
S3 MSPCLOCK; C:\WINXP\System32\drivers\MSPCLOCK.sys [5376 2008-04-13] (Microsoft Corporation)
S3 MSPQM; C:\WINXP\System32\drivers\MSPQM.sys [4992 2008-04-13] (Microsoft Corporation)
R3 mssmbios; C:\WINXP\System32\DRIVERS\mssmbios.sys [15488 2011-03-08] (Microsoft Corporation)
R0 Mup; C:\WINXP\system32\Drivers\Mup.sys [105344 2008-04-14] (Microsoft Corporation)
R0 NDIS; C:\WINXP\system32\Drivers\NDIS.sys [182656 2008-04-14] (Microsoft Corporation)
R3 NdisTapi; C:\WINXP\System32\DRIVERS\ndistapi.sys [10112 2008-04-14] (Microsoft Corporation)
R3 Ndisuio; C:\WINXP\System32\DRIVERS\ndisuio.sys [14592 2011-03-08] (Microsoft Corporation)
R3 NdisWan; C:\WINXP\System32\DRIVERS\ndiswan.sys [91520 2008-04-14] (Microsoft Corporation)
R3 NDProxy; C:\WINXP\system32\Drivers\NDProxy.sys [40960 2010-12-14] (Microsoft Corporation)
R1 NetBIOS; C:\WINXP\System32\DRIVERS\netbios.sys [34688 2008-04-14] (Microsoft Corporation)
R1 NetBT; C:\WINXP\System32\DRIVERS\netbt.sys [162816 2008-04-14] (Microsoft Corporation)
R1 Npfs; C:\WINXP\system32\Drivers\Npfs.sys [30848 2008-04-14] (Microsoft Corporation)
R4 Ntfs; C:\WINXP\system32\Drivers\Ntfs.sys [574976 2008-04-14] (Microsoft Corporation)
R1 Null; C:\WINXP\system32\Drivers\Null.sys [2944 2008-04-14] (Microsoft Corporation)
R3 nv; C:\WINXP\System32\DRIVERS\nv4_mini.sys [12542592 2011-08-03] (NVIDIA Corporation)
R3 NVENETFD; C:\WINXP\System32\DRIVERS\NVENETFD.sys [54400 2008-03-25] (NVIDIA Corporation)
R0 nvgts; C:\WINXP\System32\DRIVERS\nvgts.sys [145952 2008-08-18] (NVIDIA Corporation)
R3 nvnetbus; C:\WINXP\System32\DRIVERS\nvnetbus.sys [22016 2008-03-25] (NVIDIA Corporation)
S3 NwlnkFlt; C:\WINXP\System32\DRIVERS\nwlnkflt.sys [12416 2008-04-14] (Microsoft Corporation)
S3 NwlnkFwd; C:\WINXP\System32\DRIVERS\nwlnkfwd.sys [32512 2008-04-14] (Microsoft Corporation)
R3 Parport; C:\WINXP\System32\DRIVERS\parport.sys [80128 2011-03-08] (Microsoft Corporation)
R0 PartMgr; C:\WINXP\system32\Drivers\PartMgr.sys [19712 2008-04-14] (Microsoft Corporation)
R2 ParVdm; C:\WINXP\system32\Drivers\ParVdm.sys [6784 2008-04-14] (Microsoft Corporation)
R0 PCI; C:\WINXP\System32\DRIVERS\pci.sys [68224 2008-04-14] (Microsoft Corporation)
R0 PCIIde; C:\WINXP\System32\DRIVERS\pciide.sys [3328 2008-04-14] (Microsoft Corporation)
S4 Pcmcia; C:\WINXP\system32\Drivers\Pcmcia.sys [120192 2008-04-14] (Microsoft Corporation)
R3 PptpMiniport; C:\WINXP\System32\DRIVERS\raspptp.sys [48384 2008-04-14] (Microsoft Corporation)
R1 Processor; C:\WINXP\System32\DRIVERS\processr.sys [35840 2011-03-08] (Microsoft Corporation)
R3 PSched; C:\WINXP\System32\DRIVERS\psched.sys [69120 2008-04-14] (Microsoft Corporation)
R3 Ptilink; C:\WINXP\System32\DRIVERS\ptilink.sys [17792 2008-04-14] (Parallel Technologies, Inc.)
R0 PxHelp20; C:\WINXP\System32\DRIVERS\PxHelp20.sys [43528 2007-03-08] (Sonic Solutions)
R1 RasAcd; C:\WINXP\System32\DRIVERS\rasacd.sys [8832 2008-04-14] (Microsoft Corporation)
R3 Rasl2tp; C:\WINXP\System32\DRIVERS\rasl2tp.sys [51328 2008-04-14] (Microsoft Corporation)
R3 RasPppoe; C:\WINXP\System32\DRIVERS\raspppoe.sys [41472 2008-04-14] (Microsoft Corporation)
R3 Raspti; C:\WINXP\System32\DRIVERS\raspti.sys [16512 2008-04-14] (Microsoft Corporation)
R1 Rdbss; C:\WINXP\System32\DRIVERS\rdbss.sys [175744 2008-04-14] (Microsoft Corporation)
R1 RDPCDD; C:\WINXP\System32\DRIVERS\RDPCDD.sys [4224 2008-04-14] (Microsoft Corporation)
R3 rdpdr; C:\WINXP\System32\DRIVERS\rdpdr.sys [196224 2008-04-14] (Microsoft Corporation)
S3 RDPWD; C:\WINXP\system32\Drivers\RDPWD.sys [139656 2008-04-14] (Microsoft Corporation)
R1 redbook; C:\WINXP\System32\DRIVERS\redbook.sys [57600 2008-04-14] (Microsoft Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 Secdrv; C:\WINXP\System32\DRIVERS\secdrv.sys [20480 2008-04-14] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
R3 serenum; C:\WINXP\System32\DRIVERS\serenum.sys [15744 2008-04-14] (Microsoft Corporation)
R1 Serial; C:\WINXP\System32\DRIVERS\serial.sys [64512 2008-04-14] (Microsoft Corporation)
S1 Sfloppy; C:\WINXP\system32\Drivers\Sfloppy.sys [11392 2008-04-14] (Microsoft Corporation)
S3 splitter; C:\WINXP\System32\drivers\splitter.sys [6272 2008-04-14] (Microsoft Corporation)
R0 sptd; C:\WINXP\System32\Drivers\sptd.sys [717296 2011-12-01] () [File not signed]
R0 sr; C:\WINXP\System32\DRIVERS\sr.sys [73472 2008-04-14] (Microsoft Corporation)
R3 Srv; C:\WINXP\System32\DRIVERS\srv.sys [357248 2010-10-12] (Microsoft Corporation)
R3 swenum; C:\WINXP\System32\DRIVERS\swenum.sys [4352 2011-03-08] (Microsoft Corporation)
S3 swmidi; C:\WINXP\System32\drivers\swmidi.sys [56576 2008-04-14] (Microsoft Corporation)
R3 sysaudio; C:\WINXP\System32\drivers\sysaudio.sys [60800 2008-04-14] (Microsoft Corporation)
R1 Tcpip; C:\WINXP\System32\DRIVERS\tcpip.sys [361600 2010-09-16] (Microsoft Corporation)
S3 TDPIPE; C:\WINXP\system32\Drivers\TDPIPE.sys [12040 2008-04-14] (Microsoft Corporation)
S3 TDTCP; C:\WINXP\system32\Drivers\TDTCP.sys [21896 2008-04-14] (Microsoft Corporation)
R1 TermDD; C:\WINXP\System32\DRIVERS\termdd.sys [40840 2008-04-14] (Microsoft Corporation)
S4 Udfs; C:\WINXP\system32\Drivers\Udfs.sys [66048 2008-04-14] (Microsoft Corporation)
R3 Update; C:\WINXP\System32\DRIVERS\update.sys [384768 2008-04-14] (Microsoft Corporation)
R3 usbccgp; C:\WINXP\System32\DRIVERS\usbccgp.sys [32128 2008-04-14] (Microsoft Corporation)
R3 usbehci; C:\WINXP\System32\DRIVERS\usbehci.sys [30208 2008-04-14] (Microsoft Corporation)
R3 usbhub; C:\WINXP\System32\DRIVERS\usbhub.sys [59520 2008-04-14] (Microsoft Corporation)
R3 usbohci; C:\WINXP\System32\DRIVERS\usbohci.sys [17152 2008-04-14] (Microsoft Corporation)
R3 usbstor; C:\WINXP\System32\DRIVERS\USBSTOR.SYS [26368 2008-04-14] (Microsoft Corporation)
R1 VgaSave; C:\WINXP\System32\drivers\vga.sys [20992 2008-04-14] (Microsoft Corporation)
R3 VIAHdAudAddService; C:\WINXP\System32\drivers\viahduaa.sys [2801904 2011-06-14] (VIA Technologies, Inc.)
R0 VolSnap; C:\WINXP\system32\Drivers\VolSnap.sys [52352 2008-04-14] (Microsoft Corporation)
R3 Wanarp; C:\WINXP\System32\DRIVERS\wanarp.sys [34560 2008-04-14] (Microsoft Corporation)
R3 wdmaud; C:\WINXP\System32\drivers\wdmaud.sys [83072 2008-04-14] (Microsoft Corporation)
S1 WmiAcpi; C:\WINXP\System32\DRIVERS\wmiacpi.sys [8832 2008-04-14] (Microsoft Corporation)
S3 WudfPf; C:\WINXP\System32\DRIVERS\WudfPf.sys [77568 2010-09-16] (Microsoft Corporation)
S3 WudfRd; C:\WINXP\System32\DRIVERS\wudfrd.sys [82944 2010-09-16] (Microsoft Corporation)
U3 a271ubm5; C:\WINXP\system32\Drivers\a271ubm5.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)
S1 AmdK8; system32\DRIVERS\AmdK8.sys [X]
S1 AmdPPM; system32\DRIVERS\AmdPPM.sys [X]
S3 AsrCDDrv; \??\C:\WINXP\system32\Drivers\AsrCDDrv.sys [X]
S4 IntelIde; no ImagePath
U1 WS2IFSL; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-06 22:41 - 2016-03-06 22:41 - 00038614 _____ C:\Documents and Settings\Administrator\Desktop\FRST.txt
2016-03-06 22:41 - 2016-03-06 22:41 - 00000000 ____D C:\FRST
2016-03-06 22:39 - 2016-03-06 22:39 - 01725440 _____ (Farbar) C:\Documents and Settings\Administrator\Desktop\FRST.exe
2016-03-06 22:21 - 2016-03-06 22:21 - 00002746 _____ C:\Documents and Settings\Administrator\Desktop\malware.txt
2016-03-05 10:36 - 2016-03-04 22:52 - 00002692 _____ C:\Documents and Settings\Administrator\Desktop\µTorrent.lnk
2016-03-04 22:52 - 2016-03-04 22:52 - 00002692 _____ C:\Documents and Settings\Administrator\Start Menu\µTorrent.lnk
2016-02-26 21:08 - 2016-02-26 21:09 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-02-23 20:54 - 2016-02-26 00:13 - 00382317 _____ C:\Documents and Settings\Administrator\Desktop\ДИПЛОМНА РАБОТА презентация.pptx
2016-02-23 00:30 - 2016-02-23 00:30 - 00673675 _____ C:\Documents and Settings\Administrator\Desktop\Светлана.pptx

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-06 22:41 - 2011-09-16 02:02 - 00000000 ____D C:\Documents and Settings\Administrator\Local Settings\Temp
2016-03-06 22:41 - 2011-09-15 18:19 - 00000000 ____D C:\WINXP\Temp
2016-03-06 22:32 - 2011-09-20 17:11 - 00000434 ____H C:\WINXP\Tasks\User_Feed_Synchronization-{3B73099C-115E-43EB-81F1-656606B04271}.job
2016-03-06 22:24 - 2011-09-20 21:45 - 00000000 ____D C:\Documents and Settings\Administrator\Application Data\uTorrent
2016-03-06 22:03 - 2011-09-19 15:35 - 00001110 _____ C:\WINXP\Tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-1123561945-1801674531-500UA.job
2016-03-06 22:03 - 2011-09-19 15:35 - 00001058 _____ C:\WINXP\Tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-1123561945-1801674531-500Core.job
2016-03-06 21:44 - 2014-08-24 14:38 - 00001030 _____ C:\WINXP\Tasks\FacebookUpdateTaskUserS-1-5-21-1547161642-1123561945-1801674531-500UA.job
2016-03-06 21:22 - 2014-09-13 16:53 - 00170200 _____ (Malwarebytes) C:\WINXP\system32\Drivers\MBAMSwissArmy.sys
2016-03-06 21:21 - 2014-09-13 16:53 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-03-06 21:21 - 2014-09-13 16:53 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-06 21:21 - 2012-09-26 14:39 - 00000777 _____ C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
2016-03-06 20:53 - 2014-06-30 13:31 - 00000000 ____D C:\Documents and Settings\Administrator\Application Data\ViberPC
2016-03-06 20:52 - 2014-06-30 13:30 - 00000000 ____D C:\Documents and Settings\Administrator\Local Settings\Application Data\Viber
2016-03-06 20:28 - 2011-09-16 02:02 - 00000006 ____H C:\WINXP\Tasks\SA.DAT
2016-03-06 16:06 - 2011-09-16 02:02 - 00032312 _____ C:\WINXP\SchedLgU.Txt
2016-03-06 16:06 - 2011-09-16 02:02 - 00000178 ___SH C:\Documents and Settings\Administrator\ntuser.ini
2016-03-06 15:44 - 2014-08-24 14:38 - 00001008 _____ C:\WINXP\Tasks\FacebookUpdateTaskUserS-1-5-21-1547161642-1123561945-1801674531-500Core.job
2016-03-06 14:46 - 2008-04-14 11:00 - 00002206 _____ C:\WINXP\system32\wpa.dbl
2016-03-05 12:10 - 2011-09-20 15:54 - 00000000 ____D C:\Program Files\Winamp
2016-03-05 10:19 - 2011-09-15 18:19 - 00000000 ____D C:\WINXP
2016-03-04 22:48 - 2011-09-21 19:49 - 00000000 ____D C:\WINXP\Minidump
2016-03-04 22:48 - 2011-09-16 02:02 - 00000000 ____D C:\Documents and Settings\Administrator
2016-03-01 23:50 - 2011-09-15 21:30 - 00000000 ____D C:\Documents and Settings\Administrator\Application Data\vlc
2016-03-01 19:57 - 2014-07-08 17:23 - 00000000 ____D C:\Documents and Settings\Administrator\My Documents\ViberDownloads
2016-02-27 09:07 - 2012-04-25 13:05 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-02-26 21:12 - 2014-08-25 22:39 - 00000000 ____D C:\Documents and Settings\Administrator\Local Settings\Application Data\Adobe
2016-02-26 21:12 - 2012-10-11 08:49 - 00796864 _____ (Adobe Systems Incorporated) C:\WINXP\system32\FlashPlayerApp.exe
2016-02-26 21:12 - 2011-10-13 21:53 - 00142528 _____ (Adobe Systems Incorporated) C:\WINXP\system32\FlashPlayerCPLApp.cpl
2016-02-26 17:22 - 2011-09-15 16:17 - 00000178 ___SH C:\Documents and Settings\UpdatusUser\ntuser.ini
2016-02-25 20:21 - 2016-01-01 16:28 - 00000000 ____D C:\Documents and Settings\Administrator\Desktop\DiplomMats
2016-02-24 22:45 - 2015-11-13 09:38 - 00004380 _____ C:\Documents and Settings\Administrator\Desktop\Дипломна.txt
2016-02-20 00:04 - 2011-09-19 15:36 - 00002348 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Google Chrome.lnk
2016-02-20 00:04 - 2011-09-19 15:36 - 00002342 _____ C:\Documents and Settings\Administrator\Desktop\Google Chrome.lnk

==================== Files in the root of some directories =======

2011-09-15 16:22 - 2010-08-30 03:36 - 0000043 _____ () C:\Documents and Settings\Administrator\Application Data\coreavc.ini
2011-09-15 18:01 - 2015-05-23 10:19 - 0070656 _____ () C:\Documents and Settings\Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some files in TEMP:
====================
C:\Documents and Settings\Administrator\Local Settings\Temp\SkypeSetup.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\utt5BE8.tmp.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\utt922.tmp.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\uttB5B.tmp.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINXP\explorer.exe => File is digitally signed
C:\WINXP\system32\winlogon.exe => File is digitally signed
C:\WINXP\system32\svchost.exe => File is digitally signed
C:\WINXP\system32\services.exe => File is digitally signed
C:\WINXP\system32\User32.dll => File is digitally signed
C:\WINXP\system32\userinit.exe => File is digitally signed
C:\WINXP\system32\rpcss.dll => File is digitally signed
C:\WINXP\system32\dnsapi.dll => File is digitally signed
C:\WINXP\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ===========================

Addition.txt

malware.txt

Здравейте,

На бърз преглед няма активни зарази и е слабо вероятно заразата да е от торент клиента. OpenCandy го вграждат в повечето безплатни програми и при невнимание се инсталира в системата, но не представлява опасност за нея освен, че е досадна. В случая качения от вас файл е в zip формат (и ако вие не сте го поставили в архив, а си е бил в архив по подразбиране тогава е безопасен за системата и не може да зарази системата без да се разархивира, но все пак можете да го изтриете). По-всяка вероятност не сте за нашия раздел, но по-късно ще напиша скрипт за освежаване на настройките за интернет. За забавената системата вижте следните теми:

За подобряване на производителността (ако системата ви се вижда мудна) вижте следните няколко теми:

Оптимизиране на Windows с цел по-добра производителност

Ръководство за поддръжка на Windows (XP, Vista и 7) [Revision 2.0]

Какво да направя, ако компютърът ми работи бавно

Проверете системата си актуални драйвери от сайтовете на производителите на компонентите ако ви се занимава (не използвайте програми за автоматично обновяване на драйверите за да си спестите главоболията после) и направете пълна проверка за гадини с наличната ви антивирусна програма за всеки случай.

След няколко часа ще рефрешнем и самите интернет настройки.

Поздрави!

  • Автор

Благодаря за отговора пуснах скан с НОД32 и откри 9 фаила които ги изчисти. Трябва ли да пусна и скан с МБАМ и ако открие зараза да ги трия ли. Иначе  сега се оправи проблема зарежда доволно както преди :), дали проблема не е бил свързан и с интернет доставчика остава загадка :rolleyes: За драйверите ако може да ме насочите кои трябва да се update процесора и видеокартата ли?

преди 41 минути, Gibellini написа:

Благодаря за отговора пуснах скан с НОД32 и откри 9 фаила които ги изчисти. Трябва ли да пусна и скан с МБАМ и ако открие зараза да ги трия ли. Иначе  сега се оправи проблема зарежда доволно както преди :), дали проблема не е бил свързан и с интернет доставчика остава загадка :rolleyes: За драйверите ако може да ме насочите кои трябва да се update процесора и видеокартата ли?

Може ли да покажете резултатите от проверката с ESET?

  • Автор

Scan Log
Version of virus signature database: 13137 (20160307)
Date: 3/7/2016  Time: 11:42:33 AM
Scanned disks, folders and files: C:\
C:\pagefile.sys - error opening [4]
C:\Documents and Settings\Administrator\ntuser.dat - error opening [4]
C:\Documents and Settings\Administrator\ntuser.dat.LOG - error opening [4]
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\z9y5jb5u.default\parent.lock - error opening [4]
C:\Documents and Settings\Administrator\Application Data\uTorrent\uTorrent.exe » ZIP »  - archive damaged
C:\Documents and Settings\Administrator\Application Data\uTorrent\updates\3.4.5_41865.exe » ZIP »  - archive damaged
C:\Documents and Settings\Administrator\Desktop\mphaimr14\Aimbot Cs 1.6.rar » RAR » Aimbot.exe - is OK
C:\Documents and Settings\Administrator\Local Settings\Application Data\Facebook\Update\1.2.205.0\FacebookUpdateHelper.msi » MSI » required.cab » CAB - error reading archive
C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\1.3.29.5\GoogleUpdateHelper.msi » MSI » required.cab » CAB - error reading archive
C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\1.3.29.5\GoogleUpdateSetup.exe » OMAHA » content.tar » TAR » GoogleUpdateHelper.msi » MSI » required.cab » CAB - error reading archive
C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.29.5\GoogleUpdateSetup.exe » OMAHA » content.tar » TAR » GoogleUpdateHelper.msi » MSI » required.cab » CAB - error reading archive
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening [4]
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening [4]
C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\20\7c178f94-7d5363e9 » ZIP » akKl.class - a variant of Java/Exploit.Agent.PQX trojan - cleaned by deleting [1]
C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\20\7c178f94-7d5363e9 » ZIP » ckTo.class - a variant of Java/Exploit.Obfus.A trojan - cleaned by deleting [1]
C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\20\7c178f94-7d5363e9 » ZIP » dlLpDYhDmD.class - a variant of Java/Exploit.Obfus.A trojan - cleaned by deleting [1]
C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\20\7c178f94-7d5363e9 » ZIP » fhqMtBS.class - a variant of Java/Exploit.CVE-2013-2465.W trojan - cleaned by deleting [1]
C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\20\7c178f94-7d5363e9 » ZIP » GoP.class - a variant of Java/Exploit.Obfus.A trojan - cleaned by deleting [1]
C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\20\7c178f94-7d5363e9 » ZIP » LckXITW.class - a variant of Java/Exploit.Obfus.A trojan - cleaned by deleting [1]
C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\20\7c178f94-7d5363e9 » ZIP » LGKq.class - a variant of Java/Exploit.Agent.PMR trojan - cleaned by deleting [1]
C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\20\7c178f94-7d5363e9 » ZIP » LUJi.class - a variant of Java/Exploit.Obfus.A trojan - cleaned by deleting [1]
C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\20\7c178f94-7d5363e9 » ZIP » TlO.class - a variant of Java/Exploit.Obfus.A trojan - cleaned by deleting [1]
C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\35\38f8f1e3-70eec1e7-temp » ZIP »  - archive damaged
C:\Documents and Settings\Administrator\Local Settings\Temp\utt922.tmp.exe » ZIP »  - archive damaged
C:\Documents and Settings\Administrator\Local Settings\Temp\uttB5B.tmp.exe » ZIP »  - archive damaged
C:\Documents and Settings\Administrator\Local Settings\Temp\HYDBBE.tmp.1457124535\HTA\install.1457124535.zip » ZIP » 3rdparty/OCComSDK.dll - is OK
C:\Documents and Settings\Administrator\Local Settings\Temp\HYDBBE.tmp.1457124535\HTA\install.1457124535.zip » ZIP » 3rdparty/OCSetupHlp.dll - is OK
C:\Documents and Settings\Administrator\Local Settings\Temp\HYDBC0.tmp.1457124535\HTA\install.1457124535.zip » ZIP » 3rdparty/OCComSDK.dll - is OK
C:\Documents and Settings\Administrator\Local Settings\Temp\HYDBC0.tmp.1457124535\HTA\install.1457124535.zip » ZIP » 3rdparty/OCSetupHlp.dll - is OK
C:\Documents and Settings\LocalService\NTUSER.DAT - error opening [4]
C:\Documents and Settings\LocalService\ntuser.dat.LOG - error opening [4]
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening [4]
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening [4]
C:\Documents and Settings\NetworkService\NTUSER.DAT - error opening [4]
C:\Documents and Settings\NetworkService\ntuser.dat.LOG - error opening [4]
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening [4]
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening [4]
C:\Documents and Settings\UpdatusUser\ntuser.dat - error opening [4]
C:\Documents and Settings\UpdatusUser\ntuser.dat.LOG - error opening [4]
C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening [4]
C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening [4]
C:\Program Files\WinRAR\Default.SFX » WINRARSFX - archive damaged
C:\Program Files\WinRAR\Zip.SFX » WINRARSFX - archive damaged
C:\WINXP\system32\CatRoot2\edb.log - error opening [4]
C:\WINXP\system32\CatRoot2\tmp.edb - error opening [4]
C:\WINXP\system32\config\default - error opening [4]
C:\WINXP\system32\config\default.LOG - error opening [4]
C:\WINXP\system32\config\SAM - error opening [4]
C:\WINXP\system32\config\SAM.LOG - error opening [4]
C:\WINXP\system32\config\SECURITY - error opening [4]
C:\WINXP\system32\config\SECURITY.LOG - error opening [4]
C:\WINXP\system32\config\software - error opening [4]
C:\WINXP\system32\config\software.LOG - error opening [4]
C:\WINXP\system32\config\system - error opening [4]
C:\WINXP\system32\config\system.LOG - error opening [4]
C:\WINXP\system32\drivers\sptd.sys - error opening [4]
Number of scanned objects: 209542
Number of threats found: 9
Number of cleaned objects: 9
Time of completion: 12:08:53 PM  Total scanning time: 1580 sec (00:26:20)

Notes:
[1] Object has been deleted as it only contained the virus body.
[4] Object cannot be opened. It may be in use by another application or operating system.

Намерените неща едва ли имат общо с бързината на машината и сърфирането като цяло, но все пак е добре да се почисти целия кеш от JAVA и да се обнови самата програма до последната и версия.

Изтрийте следната папка => C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0

Освен това изтеглете Публикувано изображение Security Check от screen317 от този линк и го запаметете на вашия десктоп.

Кликнете два пъти върху SecurityCheck.exe и следвайте инструкциите.

Накрая, автоматично ще се отвори текстов документ, наречен checkup.txt, моля поставете съдържанието му в следващия ви коментар в тази тема.

 

  • Автор

изтрих посочената папка 6.0 и ето резултата от програмата.

Results of screen317's Security Check version 1.014 --- 12/23/15  
 Windows XP Service Pack 3 x86   
 Internet Explorer 8  
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled!  
Please wait while WMIC compiles updated MOF files.d
i
s
p
l
a
y
N
a
m
e
ECHO is off.
E
S
E
T
ECHO is off.
N
O
D
3
2
ECHO is off.
A
n
t
i
v
i
r
u
s
ECHO is off.
4
.
0
ECHO is off.
 Antivirus up to date!  
`````````Anti-malware/Other Utilities Check:`````````
 SUPERAntiSpyware     
 CCleaner     
 Adobe Flash Player     20.0.0.306  
 Adobe Reader XI  
 Mozilla Firefox (44.0.2)
````````Process Check: objlist.exe by Laurent````````  
 ESET NOD32 Antivirus egui.exe  
 ESET NOD32 Antivirus ekrn.exe  
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C:: 28% Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````

 

Редактирано от Gibellini (преглед на промените)

Желателно е да замените  Adobe Reader XI  с новата Adobe Actobat Reader DC

  • Моля изтеглете JavaRa 2.6  и я разархивирайте на вашия десктоп.
  • Стартирайте файла JavaRa.exe.
  • Сега натиснете Remove JRE и тъй като не се виждат предишни версии на JAVA инсталирани в системата просто натиснете бутона Next.
  • Сега натиснете Perform Removal Routine за да премахнете всички остатъци от JAVA в регистъра и от компютъра.
  • Когато приключи натиснете бутона OK за да затворите съобщението.
  • Изберете Next за да пропуснете download процеса. Изберете бутона Next още веднъж.Сега изберете бутона Close this wizard и натиснете Finish.
  • От основното меню изберете сега Additional tasks.
  • Сложете отметка пред Remove startup entry, Remove Outdated JRE Firefox Extentions и Clean JRE Temp Files и натиснете бутона Run. Браузърите трябва да бъде затворени преди да се опитате да изпълните тази стъпка!
  • След като приключи успешно, ще видите съобщението: "Selected tasks completed successfully".
  • Ще се създаде лог файл в същата папка от която сте стартирали JavaRa.
  • Моля, публикувайте този файл в следващия си коментар. Ако е много голям го качете на dox.bg.
  • Затворете JavaRa с натискането на червения хикс.
  • Автор

User initialised redundant data purge.
......................

Removed registry subkey tree: JavaSoft
Removed registry subkey: {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
Removed registry subkey tree: {5852F5ED-8BF4-11D4-A245-0080C6F74284}
Removed registry subkey: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
Removed registry subkey: {DBC80044-A445-435b-BC74-9C25C1C588A9}
Removed registry subkey tree: {5852F5EC-8BF4-11D4-A245-0080C6F74284}
Removed registry subkey: application/java-deployment-toolkit
Removed registry subkey tree: {5852F5E0-8BF4-11D4-A245-0080C6F74284}
Removed registry subkey tree: JavaWebStart.isInstalled
Removed registry subkey tree: JavaWebStart.isInstalled.1.7.0.0
Removed registry subkey: {5852F5ED-8BF4-11D4-A245-0080C6F74284}
Removed registry subkey tree: Browser Helper Objects
Removed registry subkey: ATs
Removed registry subkey tree: JavaSoft
Removed registry subkey: JreMetrics
Removed registry subkey tree: JavaPlugin.10402
Removed registry subkey tree: JavaPlugin.10512
Removal routine completed successfully. 17 items have been deleted.
== Cleaning JRE temporary files ==
Deleted file: C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\SystemCache\6.0\lastAccessed
Deleted file: C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-215289d3
Deleted file: C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-215289d3.idx
Deleted file: C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-75ecfd57
Deleted file: C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-75ecfd57.idx
Deleted file: C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\Deployment\cache\security\blacklist.cache
 

Ако диска ви не е SSD тогава не е зле да го дефрагментирате.

Цитат

Total Fragmentation on Drive C:: 28% Defragment your hard drive soon! (Do NOT defrag if SSD!)

Това значително ще подобри производителността на системата.

Изтеглете MyDefrag и я инсталирайте в папката избрана от инсталатора по подразбиране.

Отворете следната папка C:\Program Files\MyDefrag v4.3.1\Scripts и изтрийте всички файлове в папката Scripts.

Изтеглете следния архив и го разархивирайте в C:\Program Files\MyDefrag v4.3.1\Scripts, която е празна в момента.

Стартирайте MyDefrag.exe и изберете System Disk Level V и посочете системния дял C: и натиснете Run

KcdlAEi.jpg

Може да отнеме доста време, защото за основа на скрипта са използвани скриптовете на Jaspion и на някои други потребители + мои лични настройки и модификации.

Скрипта ще направи приоритизация на често използваните програми и файлове.

След като приключи ще изпише Finished и можете да затворите програмата от X-са.

Пишете след това как е положението.

  • Автор

с HDD съм, линка за mydefrag не се отваря ако може друг линк, попринцип използвам вградения дефрагментатор на windows, но някои фаилове ми казва че не може да се подреждат и остава с много червено, дано тази програма да подреди всичко :)

  • Автор

при инсталирането ми се появява този прозорец давам X пак се появява същия прозорец давам пак X и тогава вече може finish нормално ли е? и след изтриване на фаиловете в папката поставям вашия рар и стартирам програмата но в прозореца select a script няма нищо прикачвам 2ра снимка за да видите. Така оправи се след като разархивирах в папката на програмата, а не в папка Script :) и има само дял C да дам ли RUN

Дефрагг.JPG

дефраггг2.JPG

Редактирано от Gibellini (преглед на промените)

Не, така нищо не сте направили. Затворете програмата. Копирайте разархивираните файлове от C:\ в C:\Program Files\MyDefrag v4.3.1\Scripts

Стартирайте програмата отново и вече изберете System Disk Level V, сложете отметка на системния дял и натиснете Run!

 

  • Автор

Приключи дефрагментирането тази програма имам само  въпрос нямам много място в C около 3ГБ свободно, има ли начин да изчистя темп.фаилове но историята в мозила да си остане ? ATF cleaner или CCleaner  препоръчвате, и тези opencandy фаилове дето засича МБАМ да ги оставя ли или да ги изтрия. Благодаря.

ATF-Cleaner на Attribune и TFC (Temp File Cleaner) на OldTimer не са лоши инструменти, но не са обновявани от доста време (и поддръжката им е спряна). Тъй като браузърите се развиват постоянно и се добавят нови папки и места на които кешират файловете си е желателно да се ползва обновена програма и затова препоръчвам CCleaner (но с условието да се внимава в Registry частта). Но като цяло тези инструменти са ползвани най-вече заради допълнителните им възможности. Ако е само за почистване на ненужното място лично аз препоръчвам да се използва Disk Cleanup на Windows, а самите браузъри имат опция за почистване (за Mozilla понеже него ползвам клавишната комбинация е Ctrl + Shift + Del) и вече там от новопоявилия се прозорец премахнете първата отметка за да запазите историята на браузъра (премахнете и други такива, ако искате да запазите съответната информация, която стои зад тях).

Почистите и старите точки за възстановяване.

Отворете My Computer => Кликнете с десен бутон върху дял C:\ => Изберете Properties => Отидете до Disk Cleanup => отидете до More Options => и под System Restore => Натиснете CleanUp!

2010050416202848.1.gif

Може pagefile.sys да се премести на друг по-голям дял и да се изключи хибернацията (за да спре създаването на hiberfil.sys).

Вижте и с TreeSize Free програмата къде може да има още големи и ненужни за вас файлове, които може да сте забравили да изтриете.

Като последен вариант, който не препоръчвам за начинаещите е да си прехвърлите място от друг дял в C:\ например с AOMEI Partition Assistant

OpenCandy файловете можете да ги премахнете.

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.