lastchy

Времето е добре,но забравих да спомена за друго.. някой път копчето за рестарт не ми хваща от първия път..

AsRock G41S-GS

Чисто нова е с гаранция ..

Дъното го смених преди седмица ..хм?

Здравей отново и аз ще пробвам с 5.12..обаче има още един проблем за който забравих да ти кажа..не винаги ,но примерно преди 10 минути направих рестарт и часът ми е разместен ..това ставаше и преди преинсталацията.Мислех ,че е от вируса тогава ,но сега..?

Моя грешка .. просто като видях пак Sality и се стреснах .... А да те попитам за COMODO Firewall 5.12 някакви настройки пак има ли ..

ех толкова много сканирахме а виж.. Avira Free AntivirusReport file date: 08 Април 2013 г. 14:25 The program is running as an unrestricted full version.Online services are available. Licensee : Avira Free AntivirusSerial number : 0000149996-ADJIE-0000001Platform : Microsoft Windows XPWindows version : (Service Pack 3) [5.1.2600]Boot mode : Normally bootedUsername : KRASIComputer name : PC-7AEA1146F0C6 Version information:BUILD.DAT : 13.0.0.3499 49286 Bytes 19.3.2013 г. 16:37:00AVSCAN.EXE : 13.6.0.986 639712 Bytes 08.4.2013 г. 07:18:15AVSCANRC.DLL : 13.4.0.360 54560 Bytes 08.4.2013 г. 07:18:16LUKE.DLL : 13.6.0.902 67808 Bytes 08.4.2013 г. 07:18:56AVSCPLR.DLL : 13.6.0.986 94944 Bytes 08.4.2013 г. 07:19:57AVREG.DLL : 13.6.0.940 250592 Bytes 08.4.2013 г. 07:19:56avlode.dll : 13.6.2.940 434912 Bytes 08.4.2013 г. 07:18:13avlode.rdf : 13.0.0.46 15591 Bytes 08.4.2013 г. 07:19:57VBASE000.VDF : 7.11.70.0 66736640 Bytes 04.4.2013 г. 07:16:58VBASE001.VDF : 7.11.70.1 2048 Bytes 04.4.2013 г. 07:16:59VBASE002.VDF : 7.11.70.2 2048 Bytes 04.4.2013 г. 07:16:59VBASE003.VDF : 7.11.70.3 2048 Bytes 04.4.2013 г. 07:16:59VBASE004.VDF : 7.11.70.4 2048 Bytes 04.4.2013 г. 07:16:59VBASE005.VDF : 7.11.70.5 2048 Bytes 04.4.2013 г. 07:16:59VBASE006.VDF : 7.11.70.6 2048 Bytes 04.4.2013 г. 07:16:59VBASE007.VDF : 7.11.70.7 2048 Bytes 04.4.2013 г. 07:17:00VBASE008.VDF : 7.11.70.8 2048 Bytes 04.4.2013 г. 07:17:00VBASE009.VDF : 7.11.70.9 2048 Bytes 04.4.2013 г. 07:17:00VBASE010.VDF : 7.11.70.10 2048 Bytes 04.4.2013 г. 07:17:00VBASE011.VDF : 7.11.70.11 2048 Bytes 04.4.2013 г. 07:17:01VBASE012.VDF : 7.11.70.12 2048 Bytes 04.4.2013 г. 07:17:01VBASE013.VDF : 7.11.70.13 2048 Bytes 04.4.2013 г. 07:17:01VBASE014.VDF : 7.11.70.103 136192 Bytes 05.4.2013 г. 07:17:01VBASE015.VDF : 7.11.70.183 183808 Bytes 06.4.2013 г. 07:17:02VBASE016.VDF : 7.11.70.184 2048 Bytes 06.4.2013 г. 07:17:02VBASE017.VDF : 7.11.70.185 2048 Bytes 06.4.2013 г. 07:17:02VBASE018.VDF : 7.11.70.186 2048 Bytes 06.4.2013 г. 07:17:03VBASE019.VDF : 7.11.70.187 2048 Bytes 06.4.2013 г. 07:17:03VBASE020.VDF : 7.11.70.188 2048 Bytes 06.4.2013 г. 07:17:03VBASE021.VDF : 7.11.70.189 2048 Bytes 06.4.2013 г. 07:17:03VBASE022.VDF : 7.11.70.190 2048 Bytes 06.4.2013 г. 07:17:03VBASE023.VDF : 7.11.70.191 2048 Bytes 06.4.2013 г. 07:17:04VBASE024.VDF : 7.11.70.192 2048 Bytes 06.4.2013 г. 07:17:04VBASE025.VDF : 7.11.70.193 2048 Bytes 06.4.2013 г. 07:17:04VBASE026.VDF : 7.11.70.194 2048 Bytes 06.4.2013 г. 07:17:04VBASE027.VDF : 7.11.70.195 2048 Bytes 06.4.2013 г. 07:17:04VBASE028.VDF : 7.11.70.196 2048 Bytes 06.4.2013 г. 07:17:05VBASE029.VDF : 7.11.70.197 2048 Bytes 06.4.2013 г. 07:17:05VBASE030.VDF : 7.11.70.198 2048 Bytes 06.4.2013 г. 07:17:05VBASE031.VDF : 7.11.71.6 139264 Bytes 08.4.2013 г. 07:17:06Engine version : 8.2.12.24 AEVDF.DLL : 8.1.2.10 102772 Bytes 08.4.2013 г. 07:17:20AESCRIPT.DLL : 8.1.4.104 475517 Bytes 08.4.2013 г. 07:17:20AESCN.DLL : 8.1.10.4 131446 Bytes 08.4.2013 г. 07:17:19AESBX.DLL : 8.2.5.12 606578 Bytes 08.4.2013 г. 07:17:21AERDL.DLL : 8.2.0.88 643444 Bytes 08.4.2013 г. 07:17:19AEPACK.DLL : 8.3.2.6 827767 Bytes 08.4.2013 г. 07:17:18AEOFFICE.DLL : 8.1.2.56 205180 Bytes 08.4.2013 г. 07:17:17AEHEUR.DLL : 8.1.4.278 5828985 Bytes 08.4.2013 г. 07:17:16AEHELP.DLL : 8.1.25.2 258423 Bytes 08.4.2013 г. 07:17:09AEGEN.DLL : 8.1.7.2 442741 Bytes 08.4.2013 г. 07:17:08AEEXP.DLL : 8.4.0.16 192886 Bytes 08.4.2013 г. 07:17:22AEEMU.DLL : 8.1.3.2 393587 Bytes 08.4.2013 г. 07:17:08AECORE.DLL : 8.1.31.2 201080 Bytes 08.4.2013 г. 07:17:07AEBB.DLL : 8.1.1.4 53619 Bytes 08.4.2013 г. 07:17:07AVWINLL.DLL : 13.6.0.480 26480 Bytes 08.4.2013 г. 07:13:33AVPREF.DLL : 13.6.0.480 51056 Bytes 08.4.2013 г. 07:18:14AVREP.DLL : 13.6.0.480 178544 Bytes 08.4.2013 г. 07:19:57AVARKT.DLL : 13.6.0.902 260832 Bytes 08.4.2013 г. 07:17:58AVEVTLOG.DLL : 13.6.0.902 167648 Bytes 08.4.2013 г. 07:18:02SQLITE3.DLL : 3.7.0.1 397704 Bytes 08.4.2013 г. 07:19:27AVSMTP.DLL : 13.6.0.480 62832 Bytes 08.4.2013 г. 07:18:18NETNT.DLL : 13.6.0.480 16240 Bytes 08.4.2013 г. 07:19:09RCIMAGE.DLL : 13.4.0.360 4782880 Bytes 08.4.2013 г. 07:13:35RCTEXT.DLL : 13.6.0.976 67296 Bytes 08.4.2013 г. 07:13:36 Configuration settings for the scan:Jobname.............................: Complete system scanConfiguration file..................: c:\program files\avira\antivir desktop\sysscan.avpReporting...........................: defaultPrimary action......................: RepairSecondary action....................: DeleteScan master boot sector.............: onScan boot sector....................: onBoot sectors........................: C:, D:, Process scan........................: onExtended process scan...............: onScan registry.......................: onSearch for rootkits.................: onIntegrity checking of system files..: offScan all files......................: All filesScan archives.......................: onLimit recursion depth...............: 20Smart extensions....................: onMacrovirus heuristic................: onFile heuristic......................: extendedDeviating risk categories...........: +APPL,+GAME,+JOKE,+PCK,+SPR, Start of the scan: 08 Април 2013 г. 14:25 Starting master boot sector scan:Master boot sector HD0 [iNFO] No virus was found! Start scanning boot sectors:Boot sector 'C:\' [iNFO] No virus was found!Boot sector 'D:\' [iNFO] No virus was found! Starting search for hidden objects. The scan of running processes will be started:Scan process 'rsmsink.exe' - '28' Module(s) have been scannedScan process 'msdtc.exe' - '40' Module(s) have been scannedScan process 'dllhost.exe' - '59' Module(s) have been scannedScan process 'dllhost.exe' - '45' Module(s) have been scannedScan process 'vssvc.exe' - '48' Module(s) have been scannedScan process 'avscan.exe' - '94' Module(s) have been scannedScan process 'avcenter.exe' - '83' Module(s) have been scannedScan process 'chrome.exe' - '37' Module(s) have been scannedScan process 'chrome.exe' - '37' Module(s) have been scannedScan process 'chrome.exe' - '38' Module(s) have been scannedScan process 'chrome.exe' - '37' Module(s) have been scannedScan process 'chrome.exe' - '97' Module(s) have been scannedScan process 'alg.exe' - '33' Module(s) have been scannedScan process 'avshadow.exe' - '26' Module(s) have been scannedScan process 'nvsvc32.exe' - '36' Module(s) have been scannedScan process 'mbamservice.exe' - '37' Module(s) have been scannedScan process 'mbamscheduler.exe' - '27' Module(s) have been scannedScan process 'avguard.exe' - '62' Module(s) have been scannedScan process 'skypePM.exe' - '57' Module(s) have been scannedScan process 'Skype.exe' - '76' Module(s) have been scannedScan process 'GoogleUpdate.exe' - '44' Module(s) have been scannedScan process 'ctfmon.exe' - '25' Module(s) have been scannedScan process 'avgnt.exe' - '67' Module(s) have been scannedScan process 'RunDLL32.exe' - '28' Module(s) have been scannedScan process 'HDeck.exe' - '40' Module(s) have been scannedScan process 'Explorer.EXE' - '90' Module(s) have been scannedScan process 'sched.exe' - '39' Module(s) have been scannedScan process 'spoolsv.exe' - '50' Module(s) have been scannedScan process 'svchost.exe' - '43' Module(s) have been scannedScan process 'svchost.exe' - '32' Module(s) have been scannedScan process 'svchost.exe' - '30' Module(s) have been scannedScan process 'svchost.exe' - '163' Module(s) have been scannedScan process 'svchost.exe' - '38' Module(s) have been scannedScan process 'svchost.exe' - '48' Module(s) have been scannedScan process 'lsass.exe' - '58' Module(s) have been scannedScan process 'services.exe' - '36' Module(s) have been scannedScan process 'winlogon.exe' - '65' Module(s) have been scannedScan process 'csrss.exe' - '12' Module(s) have been scannedScan process 'smss.exe' - '2' Module(s) have been scanned Starting to scan executable files (registry):The registry was scanned ( '1918' files ). Starting the file scan: Begin scan in 'C:\'C:\WINDOWS\system32\SecuredImage32.dll [DETECTION] Is the TR/Dropper.Gen Trojan [NOTE] A backup was created as '545134d3.qua' ( QUARANTINE ) [NOTE] The file was deleted.Begin scan in 'D:\'D:\download\eset_nod32_antivirus_live_installer.exe [DETECTION] Contains code of the W32/Sality.Patched Windows virus [NOTE] A backup was created as '4cc4143d.qua' ( QUARANTINE ) [NOTE] The file was deleted.D:\download\install\eset_nod32_antivirus_live_installer (1).exe [DETECTION] Contains code of the W32/Sality.Patched Windows virus [NOTE] A backup was created as '1e9b40dd.qua' ( QUARANTINE ) [NOTE] The file was deleted.D:\download\install\eset_nod32_antivirus_live_installer.exe [DETECTION] Contains code of the W32/Sality.Patched Windows virus [NOTE] A backup was created as '78ac0f1c.qua' ( QUARANTINE ) [NOTE] The file was deleted.D:\Games\Mount&Blade With Fire and Sword\binkplay.exe [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan [NOTE] A backup was created as '3d3f2591.qua' ( QUARANTINE ) [NOTE] The file was deleted.D:\System Volume Information\_restore{8EAE5E2E-459B-4A6F-919F-6F8B34E1BD07}\RP1\A0000280.exe [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] A backup was created as '4266128b.qua' ( QUARANTINE ) [NOTE] The file was deleted.D:\System Volume Information\_restore{8EAE5E2E-459B-4A6F-919F-6F8B34E1BD07}\RP1\A0000281.exe [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] A backup was created as '0ede3ec1.qua' ( QUARANTINE ) [NOTE] The file was deleted.D:\System Volume Information\_restore{8EAE5E2E-459B-4A6F-919F-6F8B34E1BD07}\RP1\A0000282.EXE [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] A backup was created as '72c67e91.qua' ( QUARANTINE ) [NOTE] The file was deleted.D:\System Volume Information\_restore{8EAE5E2E-459B-4A6F-919F-6F8B34E1BD07}\RP1\A0000284.scr [DETECTION] Contains code of the W32/Sality.Y Windows virus [NOTE] A backup was created as '5f9c51dd.qua' ( QUARANTINE ) [NOTE] The file was repaired.D:\System Volume Information\_restore{96D8892F-7A72-4C4D-A929-202B89F2550F}\RP7\A0001616.exe [DETECTION] Contains code of the W32/Sality.Patched Windows virus [NOTE] A backup was created as '46f46a39.qua' ( QUARANTINE ) [NOTE] The file was deleted.D:\System Volume Information\_restore{96D8892F-7A72-4C4D-A929-202B89F2550F}\RP7\A0001617.exe [DETECTION] Contains code of the W32/Sality.Patched Windows virus [NOTE] A backup was created as '2aa84609.qua' ( QUARANTINE ) [NOTE] The file was deleted.D:\System Volume Information\_restore{96D8892F-7A72-4C4D-A929-202B89F2550F}\RP7\A0001618.exe [DETECTION] Contains code of the W32/Sality.Patched Windows virus [NOTE] A backup was created as '5b117f9c.qua' ( QUARANTINE ) [NOTE] The file was deleted.D:\System Volume Information\_restore{96D8892F-7A72-4C4D-A929-202B89F2550F}\RP7\A0001619.exe [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan [NOTE] A backup was created as '550b4f58.qua' ( QUARANTINE ) [NOTE] The file was deleted. End of the scan: 08 Април 2013 г. 14:38Used time: 12:35 Minute(s) The scan has been done completely. 3166 Scanned directories 162936 Files were scanned 13 Viruses and/or unwanted programs were found 0 Files were classified as suspicious 12 Files were deleted 1 Viruses and unwanted programs were repaired 13 Files were moved to quarantine 0 Files were renamed 0 Files cannot be scanned 162923 Files not concerned 1694 Archives were scanned 0 Warnings 13 Notes 176711 Objects were scanned with rootkit scan 0 Hidden objects were found

Ще пробвам с Авира и аз ..спомена за някакви настройки?

Мерси ще погледна статиите ..преинсталнах системния дял да ми е на чисто сега..а сега да те питам коя е най-удачната антивирусна ..видях , че подкрепяш авира? и друго ..мисля че знам коя е флашката,която ме е заразила . Как да я почистя?

Незнам какво да кажа..благодаря много,че си направи труда да ми помогнеш докрай.. сега ще си преинстална системния дял ..целта ми беше да се запази локалния диск D.. след като знам ,че няма зарази съм спокоен ..после ще те питам как да си поддържам компютъра както трябва от всякакви гадове.. Благодаря още веднъж!

hm.rar забравих да ти отговоря на предния пост..значи видимо системата е добре,но като видях лог файла от eset-a колко неща откри незнам какво да си мисля ..дано не се наложи да си форматирам целия хард накрая..

Desktop.rar от OTL логото не мога да го намеря..

logg.rar

Deleted Successfully Благодаря ти много ..! Мисля ,че всичко е наред вече.

ComboFix.txt