vachy_kn

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 03-02-2014 Ran by Valentin at 2014-02-04 11:26:27 Run:2 Running from C:\Documents and Settings\Valentin\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** start CHR Extension: (YoutubeAdblocker) - C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hbnidillpghgldmkdhmlknhdbdoodokd [2014-01-24] CHR Extension: (YoutubeAdblocker) - C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lnkbcjonjkomllbnpianklhhljkeddbj\1.0 2014-01-24 16:54 - 2014-01-29 15:15 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\SNT 2014-01-24 16:53 - 2014-01-27 12:45 - 00000000 ____D C:\Program Files\Mobogenie 2014-01-24 16:53 - 2014-01-24 17:22 - 00000000 ____D C:\Documents and Settings\Valentin\Local Settings\Application Data\Mobogenie 2014-01-24 16:53 - 2014-01-24 16:53 - 00000694 _____ C:\Documents and Settings\Valentin\Desktop\Mobogenie.lnk 2014-01-24 16:53 - 2014-01-24 16:53 - 00000000 ____D C:\Documents and Settings\Valentin\Start Menu\Programs\Mobogenie 2014-01-24 16:53 - 2014-01-24 16:53 - 00000000 ____D C:\Documents and Settings\Valentin\My Documents\Mobogenie 2014-01-24 16:51 - 2014-01-29 15:15 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\YoutubeAdblocker 2014-01-24 16:54 - 2014-01-29 15:15 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\SNT CHR Extension: (SNT) - C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\omicblbfnpcnnjhhcjghnhocodindnej [2014-01-24] CHR - Extension: SNT = C:\Users\Gorazd\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkejjmekbklppmbibgdobeeill fdlepp\2.1\ ***************** C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hbnidillpghgldmkdhmlknhdbdoodokd directory not found. CHR Extension: (YoutubeAdblocker) - C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lnkbcjonjkomllbnpianklhhljkeddbj\1.0 directory not found. "C:\Documents and Settings\All Users\Application Data\SNT" => File/Directory not found. "C:\Program Files\Mobogenie" => File/Directory not found. "C:\Documents and Settings\Valentin\Local Settings\Application Data\Mobogenie" => File/Directory not found. "C:\Documents and Settings\Valentin\Desktop\Mobogenie.lnk" => File/Directory not found. "C:\Documents and Settings\Valentin\Start Menu\Programs\Mobogenie" => File/Directory not found. "C:\Documents and Settings\Valentin\My Documents\Mobogenie" => File/Directory not found. "C:\Documents and Settings\All Users\Application Data\YoutubeAdblocker" => File/Directory not found. "C:\Documents and Settings\All Users\Application Data\SNT" => File/Directory not found. C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\omicblbfnpcnnjhhcjghnhocodindnej directory not found. ==== End of Fixlog ====

Мисля че докато съм в интернет наи много се товари и е наи муден. клипчетата продължават да накъсват..по е добре от преди но не е както трябва Fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 01-02-2014 03 Ran by Valentin at 2014-02-02 13:12:23 Run:1 Running from C:\Documents and Settings\Valentin\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** MountPoints2: {9902e34e-89b4-11e3-80f2-002215bb1b5f} - F:\zkmaltgozh.bat CHR DefaultSearchURL: http://websearch.toolksearchbook.info/?l=1&q={searchTerms}&pid=1925&r=2014/01/24&hid=7681195583601598804&lg=EN&cc=BG&unqvl=46 CHR Extension: (Flash Saving) - C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dlbemabjbfhjcccahjioenmkgimjbbkd [2014-01-24] CHR Extension: (greatasAver) - C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\igohhfdccdkmbbcelcndidigpkchhckl [2014-01-24] CHR Extension: (greatasAver) - C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kfionklchdegfdbcechclmjgjdfafgel [2014-01-24] CHR Extension: (SNT) - C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\omicblbfnpcnnjhhcjghnhocodindnej [2014-01-24] 2014-01-27 22:55 - 2014-01-27 22:55 - 00000000 ____D C:\Program Files\PC Drivers HeadQuarters 2014-01-25 21:42 - 2014-01-25 21:42 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\McAfee 2014-01-24 16:57 - 2014-01-26 21:37 - 00000000 ____D C:\Program Files\Surftastic 2014-01-24 16:52 - 2014-01-27 11:57 - 00000000 ____D C:\Program Files\GS-Enabler 2014-01-24 16:51 - 2014-01-29 15:15 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\greatsaveer 2014-01-24 16:51 - 2014-01-26 21:36 - 00000000 ____D C:\Program Files\greatsaveer 2014-01-24 16:51 - 2014-01-24 16:54 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\d10e2a6e89411d37 2014-01-24 16:51 - 2014-01-24 16:51 - 00000000 ____D C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Torch 2014-01-24 16:51 - 2014-01-24 16:51 - 00000000 ____D C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Google 2014-01-24 16:51 - 2014-01-24 16:51 - 00000000 ____D C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Comodo 2014-01-24 16:51 - 2014-01-24 16:51 - 00000000 ____D C:\Documents and Settings\SUPPORT_388945a0 2014-01-24 16:50 - 2014-01-24 16:53 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\InstallMate 2014-01-29 15:15 - 2014-01-24 16:51 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\greatsaveer 2014-01-27 22:55 - 2014-01-27 22:55 - 00000000 ____D C:\Program Files\PC Drivers HeadQuarters 2014-01-27 11:57 - 2014-01-24 16:52 - 00000000 ____D C:\Program Files\GS-Enabler 2014-01-26 21:37 - 2014-01-24 16:57 - 00000000 ____D C:\Program Files\Surftastic 2014-01-26 21:36 - 2014-01-24 16:51 - 00000000 ____D C:\Program Files\greatsaveer 2014-01-25 21:42 - 2014-01-25 21:42 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\McAfee 2014-01-24 16:53 - 2014-01-24 16:50 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\InstallMate ***************** CHR DefaultSearchURL: http://websearch.toolksearchbook.info/?l=1&q={searchTerms}&pid=1925&r=2014/01/24&hid=7681195583601598804&lg=EN&cc=BG&unqvl=46 ==> The Chrome "Settings" can be used to fix the entry. C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dlbemabjbfhjcccahjioenmkgimjbbkd => Moved successfully. C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\igohhfdccdkmbbcelcndidigpkchhckl => Moved successfully. C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kfionklchdegfdbcechclmjgjdfafgel => Moved successfully. C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\omicblbfnpcnnjhhcjghnhocodindnej => Moved successfully. C:\Program Files\PC Drivers HeadQuarters => Moved successfully. C:\Documents and Settings\All Users\Application Data\McAfee => Moved successfully. C:\Program Files\Surftastic => Moved successfully. "C:\Program Files\GS-Enabler" => File/Directory not found. C:\Documents and Settings\All Users\Application Data\greatsaveer => Moved successfully. C:\Program Files\greatsaveer => Moved successfully. C:\Documents and Settings\All Users\Application Data\d10e2a6e89411d37 => Moved successfully. C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Torch => Moved successfully. C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Google => Moved successfully. C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Comodo => Moved successfully. C:\Documents and Settings\SUPPORT_388945a0 => Moved successfully. C:\Documents and Settings\All Users\Application Data\InstallMate => Moved successfully. "C:\Documents and Settings\All Users\Application Data\greatsaveer" => File/Directory not found. "C:\Program Files\PC Drivers HeadQuarters" => File/Directory not found. "C:\Program Files\GS-Enabler" => File/Directory not found. "C:\Program Files\Surftastic" => File/Directory not found. "C:\Program Files\greatsaveer" => File/Directory not found. "C:\Documents and Settings\All Users\Application Data\McAfee" => File/Directory not found. "C:\Documents and Settings\All Users\Application Data\InstallMate" => File/Directory not found. ==== End of Fixlog ====

C:\Documents and Settings\Valentin\Desktop\HAMeb_check.exe 01.02.2014 Ј. at 10:54:18,92 Account active No Local Group Memberships ~~ Checking profile list ~~ No HelpAssistant profile in registry ~~ Checking for HelpAssistant directories ~~ HelpAssistant ~~ Checking mbr ~~ Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net device: opened successfully user: MBR read successfully called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll nvata.sys kernel: MBR read successfully user & kernel MBR OK ~~ Checking for termsrv32.dll ~~ termsrv32.dll was not found HKEY_LOCAL_MACHINE\system\currentcontrolset\services\termservice\parameters ServiceDll REG_EXPAND_SZ %SystemRoot%\System32\termsrv.dll ~~ Checking firewall ports ~~ [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile\GloballyOpenPorts\List] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] ~~ EOF ~~

Ами маалко по добре е.Но компа пак си зацепва доста,когато пусна клип във вбокс или ютубе направо не може да се гледа накъсва постоянно (не е от интернета) сега свалих аваст и ще я пусна да сканира нз какво да правя вече...Ето ти дневниците от ФРСТ Addition.txt FRST.txt

# AdwCleaner v3.018 - Report created 30/01/2014 at 12:51:42# Updated 28/01/2014 by Xplode# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)# Username : Valentin - VALKATA-6620512# Running from : C:\Documents and Settings\Valentin\Desktop\adwcleaner.exe# Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\Documents and Settings\All Users\Application Data\apnFolder Deleted : C:\Documents and Settings\All Users\Application Data\AskPartnerNetworkFolder Deleted : C:\Program Files\AskPartnerNetworkFolder Deleted : C:\Program Files\Apps HatFolder Deleted : C:\Documents and Settings\Valentin\Local Settings\Application Data\torchFolder Deleted : C:\Documents and Settings\Valentin\Local Settings\Application Data\Apps HatFolder Deleted : C:\Documents and Settings\Valentin\Application Data\optimizer proFile Deleted : C:\Documents and Settings\Valentin\Desktop\Optimizer Pro.lnkFile Deleted : C:\WINDOWS\Tasks\Apps Hat-chromeinstaller.jobFile Deleted : C:\WINDOWS\Tasks\Apps Hat-codedownloader.jobFile Deleted : C:\WINDOWS\Tasks\Apps Hat-enabler.jobFile Deleted : C:\WINDOWS\Tasks\Apps Hat-firefoxinstaller.jobFile Deleted : C:\WINDOWS\Tasks\Apps Hat-updater.job ***** [ Shortcuts ] ***** Shortcut Disinfected : C:\Documents and Settings\Valentin\Start Menu\Programs\AppsHat\Uninstall.lnk ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466856659}Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}Key Deleted : HKCU\Software\AskPartnerNetworkKey Deleted : HKCU\Software\SoftonicKey Deleted : HKCU\Software\SomotoKey Deleted : HKCU\Software\WebplayerKey Deleted : HKCU\Software\Apps HatKey Deleted : HKLM\Software\AskPartnerNetworkKey Deleted : HKLM\Software\Apps HatKey Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Optimizer Pro_is1 ***** [ Browsers ] ***** -\\ Internet Explorer v6.0.2900.5512 -\\ Google Chrome v32.0.1700.102 [ File : C:\Documents and Settings\Valentin\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ] Deleted : homepageDeleted : icon_urlDeleted : search_urlDeleted : keyword ************************* AdwCleaner[R0].txt - [3053 octets] - [30/01/2014 12:50:20]AdwCleaner[s0].txt - [2965 octets] - [30/01/2014 12:51:42] ########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [3025 octets] ##########

Дано е това 01292014_223824.rar

май стана сега.... съжалявам обаче компа ми е толкова бавен чеееее е страшно.... Extras.Txt OTL.Txt

Виж тези Extras.Txt OTL.Txt

След края на сканирането ми изкарва само OTL.txt прикрепям ти го.Не знам защо Extras.txt. не ми го изкарва и на десктопа го няма OTL.Txt

Ето тези са дневниците в предния коментар не бях сложил отметки на фаиловете преди да дам remove selected на Malwarebytes Anti-Malware 1mbam-log-2014-01-29 (14-54-57).txt Addition.txt FRST.txt

Стана! След като сканирах с Malwarebytes Anti-Malware натиснах на show results и дадох remove selected компа се рстартира и след това сканирах пак със ФРСТ и ти прикрепям новите дневници. mbam-log-2014-01-29 (13-58-44).txt Addition.txt FRST.txt

ето фаила.Мисля че правя всичко както трябва просто компа е много зле прикачвам ти и снимки да видиш какво ми се показва след рестарта и след като дам ОК на грешките които ти прикачвам си тръгва нормално.Пробвах да преинсталирам уиндоуса като форматирах целия хард но пак не се оправи постоянно забива не мога да си сваля антивирусна.възможно ли е след преинсталацията да съм го заразил пак със нещо или просто е такав вирус които не се оправя и със преинсталация? Fixlog.txt

Ето пак дневниците от ФРСТ Addition.txt FRST.txt

не става пак се затваря браузера