ако може да ми помогнете

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-02-2017 02
Ran by ss23 (administrator) on SS23-PC (16-02-2017 17:34:10)
Running from C:\Users\ss23\Downloads
Loaded Profiles: ss23 (Available Profiles: ss23)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\mmc.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-1571562904-1141088448-2294498773-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6868696 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-1571562904-1141088448-2294498773-1000\...\MountPoints2: H - H:\setup.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2016-11-29] (Microsoft Corporation)
GroupPolicy: Restriction ? <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{38B4E2B9-D497-4241-B54C-44F7B3703DB7}: [NameServer] 192.168.15.9,195.24.48.5

Internet Explorer:
==================
HKU\S-1-5-21-1571562904-1141088448-2294498773-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-01-26] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-26] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: whbhgzzk.default
FF ProfilePath: C:\Users\ss23\AppData\Roaming\Mozilla\Firefox\Profiles\whbhgzzk.default [2017-02-16]
FF Extension: (Adblock Plus) - C:\Users\ss23\AppData\Roaming\Mozilla\Firefox\Profiles\whbhgzzk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-20]
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-26] (Oracle Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-10-15] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-10-15] (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)

Chrome: 
=======
CHR HomePage: Default -> hxxps://www.google.bg/
CHR StartupUrls: Default -> "hxxps://www.google.bg/"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default [2017-02-16]
CHR Extension: (Google Slides) - C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-27]
CHR Extension: (Google Docs) - C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-27]
CHR Extension: (Google Drive) - C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-27]
CHR Extension: (YouTube) - C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-27]
CHR Extension: (Adblock Plus) - C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-11-27]
CHR Extension: (Google Sheets) - C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-27]
CHR Extension: (Google Docs Offline) - C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-28]
CHR Extension: (AdBlock) - C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-01-31]
CHR Extension: (Change Colors) - C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbmkekhehjedonbhoikhhkmlapalklgn [2016-11-27]
CHR Extension: (Chrome Web Store Payments) - C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Gmail) - C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-27]
CHR Extension: (Chrome Media Router) - C:\Users\ss23\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-08]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AN983; C:\Windows\System32\DRIVERS\AN983.sys [39040 2016-11-30] (ADMtek Incorporated.)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [21496 2016-01-14] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10208 2016-07-11] ()
S3 k600bus; C:\Windows\System32\DRIVERS\k600bus.sys [52384 2005-03-04] (MCCI)
S3 LNE100; C:\Windows\System32\DRIVERS\LNE100V5.sys [36224 2001-10-24] (LinkSys Group Inc.) [File not signed]
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
S3 RTCore32; C:\Program Files\MSI Afterburner\RTCore32.sys [6144 2016-09-30] () [File not signed]
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [33052 2007-08-07] (PowerISO Computing, Inc.) [File not signed]
S4 nvvad_WaveExtensible; system32\drivers\nvvad32v.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-02-16 17:34 - 2017-02-16 17:34 - 00008359 _____ C:\Users\ss23\Downloads\FRST.txt
2017-02-16 17:34 - 2017-02-16 17:34 - 00000000 ____D C:\FRST
2017-02-16 17:33 - 2017-02-16 17:33 - 01764352 _____ (Farbar) C:\Users\ss23\Downloads\FRST.exe
2017-02-16 16:13 - 2017-02-16 16:13 - 00000000 _____ C:\Users\ss23\Desktop\New Text Document (4).txt
2017-02-14 02:42 - 2017-02-14 02:42 - 00006907 _____ C:\Users\ss23\Downloads\The.Walking.Dead.S07E09.HDTV.x264-FUM[ettv].torrent
2017-02-14 02:35 - 2017-02-14 02:35 - 00013572 _____ C:\Users\ss23\Downloads\Ju-on.owari.no.hajimari.2014.BDRip.x265-WAR.torrent
2017-02-12 16:38 - 2017-02-12 16:38 - 00000000 ____D C:\Program Files\Common Files\Skype
2017-02-12 00:54 - 2017-02-12 00:54 - 00018052 _____ C:\Users\ss23\Downloads\Supernatural.S12E09.HDTV.x264-LOL.torrent
2017-02-11 19:06 - 2017-02-11 19:06 - 00031489 _____ C:\Users\ss23\Downloads\Ash.vs.Evil.Dead.S02E10.WEBRip.X264-DEFLATE (2).torrent
2017-02-11 10:42 - 2017-02-11 10:42 - 00031489 _____ C:\Users\ss23\Downloads\Ash.vs.Evil.Dead.S02E10.WEBRip.X264-DEFLATE (1).torrent
2017-02-11 00:45 - 2017-02-11 00:45 - 00031489 _____ C:\Users\ss23\Downloads\Ash.vs.Evil.Dead.S02E10.WEBRip.X264-DEFLATE.torrent
2017-02-11 00:45 - 2017-02-11 00:45 - 00022949 _____ C:\Users\ss23\Downloads\Ash.vs.Evil.Dead.S02E09.WEBRip.X264-DEFLATE.torrent
2017-02-10 02:02 - 2017-02-16 17:02 - 02756214 _____ C:\Users\ss23\Desktop\New Bitmap Image (5).bmp
2017-02-10 02:02 - 2017-02-10 02:03 - 02555958 _____ C:\Users\ss23\Desktop\New Bitmap Image (4).bmp
2017-02-10 02:01 - 2017-02-10 02:02 - 06220854 _____ C:\Users\ss23\Desktop\New Bitmap Image (3).bmp
2017-02-06 14:07 - 2017-02-06 14:07 - 00015975 _____ C:\Users\ss23\Downloads\Resident.Evil.The.Final.Chapter.2017.HD-TS.x264-CPG.torrent
2017-02-04 14:56 - 2017-02-04 14:56 - 00000000 _____ C:\Users\ss23\Desktop\New Text Document (3).txt
2017-02-04 14:49 - 2017-02-04 14:52 - 00000000 ____D C:\Users\ss23\AppData\Roaming\Winamp
2017-02-04 14:49 - 2017-02-04 14:49 - 00000941 _____ C:\Users\Public\Desktop\Winamp.lnk
2017-02-04 14:49 - 2017-02-04 14:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2017-02-04 14:49 - 2017-02-04 14:49 - 00000000 ____D C:\Program Files\Winamp
2017-02-04 14:49 - 2017-02-04 14:49 - 00000000 ____D C:\Program Files\Common Files\PX Storage Engine
2017-02-04 14:47 - 2017-02-04 14:48 - 12432368 _____ (Nullsoft, Inc.) C:\Users\ss23\Downloads\winamp5666_full_en-us.exe
2017-02-01 04:45 - 2017-02-01 04:45 - 00000000 _____ C:\Users\ss23\Desktop\New Text Document (2).txt
2017-01-30 12:37 - 2017-01-30 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-01-29 18:21 - 2017-01-29 18:21 - 00000000 ____D C:\Users\ss23\Documents\Telltale Games
2017-01-29 18:19 - 2017-01-29 18:21 - 00000000 ____D C:\Program Files\Minecraft Story Mode - A Telltale Games Series
2017-01-29 18:19 - 2017-01-29 18:19 - 00001068 _____ C:\Users\Public\Desktop\Minecraft Story Mode - A Telltale Games Series.lnk
2017-01-29 18:14 - 2017-01-29 18:14 - 00015199 _____ C:\Users\ss23\Downloads\Minecraft.Story.Mode.Episode.1-RELOADED.torrent
2017-01-29 18:10 - 2017-02-14 11:39 - 00000000 ____D C:\Users\ss23\AppData\LocalLow\BitTorrent
2017-01-29 01:45 - 2017-01-29 01:45 - 00000000 ____D C:\Users\ss23\Documents\Razer
2017-01-29 01:24 - 2017-01-29 15:30 - 00000000 ____D C:\Users\ss23\AppData\Local\Razer
2017-01-29 01:23 - 2017-01-29 15:30 - 00000000 ____D C:\ProgramData\Razer
2017-01-29 01:23 - 2017-01-29 15:30 - 00000000 ____D C:\Program Files\Razer
2017-01-29 01:09 - 2017-01-29 01:10 - 123589304 _____ (Razer Inc. ) C:\Users\ss23\Downloads\RazerCortexSetup_7.6.8.66.exe
2017-01-26 22:21 - 2017-01-26 22:21 - 00001109 _____ C:\Users\Public\Desktop\Visual Studio Code.lnk
2017-01-26 22:21 - 2017-01-26 22:21 - 00000000 ____D C:\Users\ss23\AppData\Roaming\Code
2017-01-26 22:21 - 2017-01-26 22:21 - 00000000 ____D C:\Users\ss23\.vscode
2017-01-26 22:21 - 2017-01-26 22:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2017-01-26 22:20 - 2017-01-26 22:21 - 00000000 ____D C:\Program Files\Microsoft VS Code
2017-01-26 22:19 - 2017-01-26 22:20 - 34001688 _____ (Microsoft Corporation ) C:\Users\ss23\Downloads\VSCodeSetup-1.8.1.exe
2017-01-26 21:21 - 2017-01-26 21:21 - 00000000 ____D C:\Program Files\Common Files\Java
2017-01-26 20:10 - 2017-01-26 20:10 - 00000037 _____ C:\Users\ss23\Desktop\New Text Document.txt
2017-01-24 21:56 - 2017-01-24 22:01 - 02342038 _____ C:\Users\ss23\Desktop\New Bitmap Image (2).bmp
2017-01-23 19:49 - 2017-01-23 19:50 - 00544926 _____ C:\Users\ss23\Desktop\New Bitmap Image.bmp
2017-01-23 19:38 - 2017-01-23 19:39 - 00000000 ____D C:\Users\ss23\Desktop\New folder (3)

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-02-16 16:57 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2017-02-16 14:46 - 2009-07-14 06:34 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-16 14:46 - 2009-07-14 06:34 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-16 14:39 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-16 14:38 - 2016-12-19 05:26 - 00000000 ____D C:\ProgramData\NVIDIA
2017-02-16 01:19 - 2016-12-02 03:50 - 00000000 ____D C:\Program Files\Steam
2017-02-15 00:06 - 2016-11-28 02:13 - 00000000 ____D C:\Users\ss23\AppData\Roaming\Skype
2017-02-14 14:10 - 2016-11-28 01:39 - 00000000 ____D C:\Users\ss23\AppData\Roaming\BitTorrent
2017-02-14 03:39 - 2016-11-29 14:47 - 00000000 ____D C:\Users\ss23\AppData\Roaming\vlc
2017-02-13 12:36 - 2016-12-29 23:54 - 00003504 _____ C:\Users\ss23\Desktop\mail.txt
2017-02-12 16:38 - 2016-12-09 06:24 - 00000000 ___RD C:\Program Files\Skype
2017-02-12 16:38 - 2016-11-28 02:07 - 00000000 ____D C:\ProgramData\Skype
2017-02-09 17:43 - 2016-12-20 14:52 - 00000000 ____D C:\Program Files\Opera
2017-02-09 15:23 - 2016-11-27 20:50 - 00076288 _____ C:\Users\ss23\AppData\Local\GDIPFONTCACHEV1.DAT
2017-02-09 15:20 - 2016-12-10 01:39 - 00000000 ____D C:\Users\ss23\AppData\Local\ElevatedDiagnostics
2017-02-09 15:20 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2017-02-09 13:55 - 2016-11-28 19:47 - 00000000 ____D C:\Users\ss23\AppData\Local\Glyph
2017-02-09 12:55 - 2016-11-28 19:47 - 00000000 ____D C:\Program Files\Glyph
2017-02-07 05:13 - 2016-11-27 20:51 - 00002141 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-07 05:13 - 2016-11-27 20:51 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-02-04 16:29 - 2009-07-14 06:33 - 00336600 _____ C:\Windows\system32\FNTCACHE.DAT
2017-02-04 08:50 - 2016-11-28 22:26 - 00000000 ____D C:\Users\ss23\AppData\Roaming\RIFT
2017-02-03 06:32 - 2016-12-05 23:46 - 00000000 ____D C:\Program Files\RivaTuner Statistics Server
2017-01-29 01:19 - 2016-12-09 05:45 - 00000400 __RSH C:\ProgramData\ntuser.pol
2017-01-29 01:14 - 2016-11-28 06:32 - 00793986 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-26 22:21 - 2016-11-27 20:35 - 00000000 ____D C:\Users\ss23
2017-01-26 21:46 - 2016-12-19 05:15 - 00000000 ____D C:\ProgramData\Oracle
2017-01-26 21:21 - 2016-12-19 05:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-26 21:21 - 2016-12-19 05:15 - 00000000 ____D C:\Program Files\Java
2017-01-26 21:20 - 2016-12-19 05:15 - 00095808 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2017-01-25 06:32 - 2016-12-02 03:50 - 00000000 ____D C:\Program Files\Common Files\Steam
2017-01-17 17:12 - 2009-07-14 06:53 - 00032544 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Files in the root of some directories =======

2016-11-30 06:11 - 2016-11-30 06:11 - 0000017 _____ () C:\Users\ss23\AppData\Local\resmon.resmoncfg

Some files in TEMP:
====================
2017-02-12 16:28 - 2017-02-12 16:28 - 44048864 _____ (Skype Technologies S.A.) C:\Users\ss23\AppData\Local\Temp\SkypeSetup.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-02-12 00:36

==================== End of FRST.txt ============================

Addition.txt

Редактирано 16 февруари 20179 г. от Yvan Sergeev
capnemo ми каза да редактирам (преглед на промените)

Здравейте.

Какъв е проблема? Какво разбирате под странно?

мишката ми се движи сама и застава в ценъра и не се мести и май клика

Не мисля, че проблема се дължи на зловреден код, но все пак изпълнете указанията по-долу.

Стъпка 1

• Деинсталирайте от контролния панел следния софтуер:

DriverToolkit

 

Стъпка 2

Изтеглете файла fixlist и го запазете на вашия десктоп.

• Стартирайте FRST.exe и натиснете бутона FIX веднъж!
• Почистването ще започне, не използвайте системата!
• След като приключи, ако ви поиска рестартиране, съгласете се.
• След като зареди системата публикувайте лог файла с име fixlog.txt, който се намира на десктопа Ви.

Забележка: Текущия фикс да не се използва на други системи!

 

Стъпка 3

Изтеглете:  Malwarebytes Anti-Malware.

• Стартирайте инсталационния файл и следвайте съветника за инсталация.
• Преди края на инсталацията премахнете отметката от: "Enable free trial of Malwarebytes Anti-Malware Premium" и се уверете че има отметка пред "Launch Malwarebytes Anti-Malware".
• Отидете до табът Settings => Detection and Protection => сложете отметка на "Scan for rootkits".
• Отидете до табът Dashboard => натиснете бутона "SCAN NOW".
• Програмата автоматично ще провери за актуализации и ще започне сканирането.

Забележка: Ако видите съобщението "Could not load DDA driver" натиснете бутона "YES". След което разрешете на системата да се рестартира.

• След като проверката приключи натиснете бутона "Remove Selected".
• Системата ще поиска рестарт, съгласете се.
• След като системата зареди MBAB ще зареди.
• Отидете до табът History => Applications Logs.
• Потърсете лог с име "SCAN LOG" с последната дата и час и натиснете върху него.
• Натиснете бутона EXPORT => Copy to Clipboard.
• Поставете съдържанието на лога с клавишната комбинация CTRL+V към следващия Ви коментар.

 

Стъпка 4

Изтеглете:  HitmanPro.

• Запазете файла на вашия десктоп.
• Стартирайте програмата.

Забележка: Програмата ще се актуализира, след актуализацията HitmanPro ще се рестартира.

• Натиснете бутона "Напред".
• Сложете отметка на лицензионното споразумение и натиснете отново бутона "Напред".
• Кликнете върху "Не, искам да извърша еднократно сканиране на компютъра" и натиснете бутона "Напред".
• Програмата ще започне да сканира. Сканирането ще отнеме ~2 минути.
• След като сканирането приключи от списъка с намерените обекти(ако има такива) изберете Apply to all => Ignore.
• Натиснете бутона "Next" и след това бутона "Изнеси резултатите от сканирането в XML файл" и запазете лог файла на десктопа.
• Отворете лог файла, копирайте съдържанието му и го поставете в следващия Ви коментар.

Забележка: Ако от падащото меню няма Ignore тогава просто затворете програмата след края на проверката без да премахвате нищо!

От My Computer => Tools => Folder Options => View => Сложете отметка пред "Show hidden files, folders and drives".
Натиснете Apply.

Влезте в C:\Programdata\HitmanPro\Logs прикачете лога към следващия Ви коментар.

 мерси че  ми заразихте системата 

Фалшива тревога от страна на HitmanPro. Даже фалшива е силно казано. Нали не смятате, че в инструмента наистина има зловреден код? Експерти по целия свят го използват, мислите ли какви щяха да бъдат последствията, ако наистина туулчето беше заразено. Имате нужда да прочетете отново правилата на този раздел, направете го. Ще изпълнявате ли инструкциите както са по реда им или да заключвам темата?