مشکل بسته شدن بعضی پنجره ها

[Muradin]

یه مدتیه که وقتی task manager رو باز میکنم یا باز نمیشه یا بعد از چند ثانیه بسته میشه! همین اتفاق برای همه

mediaplayer ها هم میوفته!

چیکار کنم؟!

[jax2]

برای مشاهده محتوا ، لطفا وارد شوید یا ثبت نام کنید

[Muradin]

دوست عزیز همه این کار هایی که تو این صفحه گفته بود انجام دادم بازم این مشکل رو دارم ... مهم تر از همه وقتی میخوام یه ویدئو ببینم یا ویدئو رو کانورت کنم قطع میشه... تسک منیجر هم همینطور ...

[Muradin]

در ضمن تا الان با برنامه های Hit Man Pro 7 و Malwarebyte و SuperAntiSpyware و RRT اسکن کردم و هر چی گفت رو پاک کردم ولی مشکلم هنوز حل نشده...

---------- Post added at 01:56 PM ---------- Previous post was at 01:53 PM ----------

این اتفاق دیروز افتاده و در مورد اون لاگ هایی که گفته بودید قرار بدید هم من برنامه rkill رو دانلود کردم ولی وقتی اجراش میکردم بسته میشد...

[MrGee]

همه اون برنامه ها به شما يه فايل لاگ مي دن كه شما بايد اونها رو اينجا بزاريد



همچنين برنامه dds رو كه از بقيه مهمتره اجرا نكرديد

برای مشاهده محتوا ، لطفا وارد شوید یا ثبت نام کنید

[Muradin]

خوب من که الان اون برنامه هارو بستم فایل لاگشو از کجا بیارم؟!

در ضمن اون برنامه های rkill و dds رو هم اجرا می کنم هیچ اتفاقی نمیفته!

[Muradin]

این هم لوگ ها:

  محتوای مخفی: لوگ برنامه SUPERAntiSpyware 

SUPERAntiSpyware Scan Log

برای مشاهده محتوا ، لطفا وارد شوید یا ثبت نام کنید

Generated 09/09/2011 at 08:43 PM

Application Version : 5.0.1118

Core Rules Database Version : 7665
Trace Rules Database Version: 5477

Scan type : Quick Scan
Total Scan Time : 0026

Operating System Information
Windows 7 Enterprise 32-bit (Build 6.01.7600)
UAC Off - Administrator

Memory items scanned : 741
Memory threats detected : 0
Registry items scanned : 30403
Registry threats detected : 0
File items scanned : 11177
File threats detected : 389

Adware.Tracking Cookie
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@1.sharkadnetwork[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@101teengirls[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@101teengirls[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@122.2o7[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@2o7[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@2o7[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@a1.interclick[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@accounts.google[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@accounts.youtube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.ad-srv[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.server.adweb[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.wsod[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[10].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[7].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[8].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[9].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.zanox[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad2.adfarm1.adition[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad4.adfarm1.adition[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adbrite[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adbrite[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adecn[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adfarm1.adition[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adinterax[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adinterax[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adnet.seemorgh[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.ad4game[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.ad4game[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.ad4game[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.adgoto[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.adk2[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.adk2[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.basal[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.----------[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.carocean.co[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.carocean.co[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.crakmedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.creative-serving[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.depositfiles[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.fling[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.fulldls[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.glispa[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.imvisible[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.intergi[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.neptunepinkfloyd.co[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.neudesicmediagroup[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.ookla[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.persianwhois[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.pointroll[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.pointroll[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.pubmatic[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.thefrisky[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.thegauntlet[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.watchmygf[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.whaleads[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adserver.adreactor[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adserver.adreactor[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adserver.adtechus[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adserver.adtechus[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adserver.hardsextube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adserver.nsadev[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adtech[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adtech[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adultadworld[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adultadworld[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adultfriendfinder[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adultfriendfinder[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertise.aftabteam[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertise.aftabteam[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertising[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertising[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertising[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertising[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertising[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertstream[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adviva[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adxpansion[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adxpansion[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adxpose[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adxpose[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@alphaporno[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@alphaporno[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@analytics.rogersmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@apmebf[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@apmebf[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@apmebf[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@apmebf[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@apmebf[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ar.atwola[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@at.atwola[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@at.atwola[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@atdmt[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@atdmt[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@atrack.allposters[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@banners.facebookofsex[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@banners.mennation[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@bmuk.burstnet[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@bravenet[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@bs.serving-sys[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@bs.serving-sys[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@bullporn[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@burstnet[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@c.gigcount[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@c.gigcount[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@cafeserial[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@casalemedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@casalemedia[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@chitika[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@chordfind[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@click.mediadome[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@click.splinky[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@clickfuse[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@clickfuse[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@clickfuse[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@clickfuse[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@clickha[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@clicksor[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@collective-media[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@collective-media[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[7].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[8].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[9].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@counter1.sextracker[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@counters.gigya[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@cracked[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@dev.hardsextube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@directporntube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@dmtracker[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@dmtracker[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@doubleclick[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@doubleclick[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@doubleclick[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@doubleclick[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@doubleclick[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@eaeacom.112.2o7[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@eas.apm.emediate[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@edocfind[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@emediate.apmmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@emediate.apmmedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@emmawatsonnakedbathgrim.typepad[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ero-advertising[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@facebookofsex[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fakecelebrityporno[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[11].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[7].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[8].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[9].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@femalefirst.co[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@findherdifferences[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@findsubtitles[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@firstsextube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@focusin.ads.targetnet[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@freshxxxtube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fuckassonline[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fuckfamily[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fuckfamily[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@galleries.adult-empire[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@goldporntube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@gostats[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@gotgayporn[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@hardsextube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@harrenmedianetwork[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@hentaicounter[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@hot-----tube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@hotclick.persianblog[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ice.112.2o7[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ice.112.2o7[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@imrworldwide[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@imrworldwide[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@imrworldwide[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@in.getclicky[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@in.getclicky[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@in.getclicky[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@insightexpressai[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@interclick[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@invitemedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@invitemedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@invitemedia[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@jahanclick[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@landing.hitfarm[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@legolas-media[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@lfstmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@lfstmedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@lfstmedia[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@lucidmedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@m1.webstats.motigo[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@m1.webstats.motigo[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[7].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[8].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediabrandsww[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediabrandsww[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediabrandsww[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediabrandsww[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafiresearch[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafiresearch[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[7].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[9].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediaplex[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediaplex[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediaservices-d.openxenterprise[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@microsoftsto.112.2o7[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@microsoftsto.112.2o7[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@microsoftwindows.112.2o7[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mm.chitika[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@momsextube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@momsextube[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mscracks[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mycounter.tinycounter[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@myroitracking[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mysexgames[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@naked[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@optimize.indieclick[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@overture[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@partypoker[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@pointroll[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@pointroll[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@porndad[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@pornhub[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@----[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@publishers.w00tmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@publishers.w00tmedia[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@questionmarket[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@questionmarket[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@r1-ads.ace.advertising[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@realmedia.com[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@realmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@realmedia[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@revenue[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@revsci[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@revsci[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@rogersmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@rts.pgmediaserve[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ru4[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ru4[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ru4[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@rudesexcartoons[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@server.cpmstar[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@server.cpmstar[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@serving-sys[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@serving-sys[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@serving-sys[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexfinder[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexgamefun[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexgames[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexintheuk[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexstarstv[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sextracker[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sextube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexxxtape[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexybeautycelebrities.blogspot[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexyfuckgames[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexygames[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexyjameshetfield[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexymileycyrus[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexysinfulcomics[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@smartadserver[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@smartadserver[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@smartadserver[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@smartadserver[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@smartadserver[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@specificclick[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@specificclick[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@spylog[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@spylog[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@stat.onestat[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[7].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[8].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@static.sunporno[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sunporno[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tacoda.at.atwola[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tacoda.at.atwola[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@teenburg[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@teenchat[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@teensexyvirgins[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@top-people.starmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@toplist[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@toplist[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@toplist[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@topsexywomen[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tracking.gameforge[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tracking.mlsat02[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@traffic-stock[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@trafficholder[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tribalfusion[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tribalfusion[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tribalfusion[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@user.lucidmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@user.lucidmedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@viacom.adbureau[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@viacom.adbureau[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@vodafonebranding.solution.weborama[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@weborama[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.avrillavignesextape[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.bullporn[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.burstnet[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.clickha[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.clickkon[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.fakecelebrityporno[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.findsubtitles[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.firstsextube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.fpctraffic2[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.fucking1[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.googleadservices[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.googleadservices[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.gotgayporn[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.hot-----tube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.mediafiresearch[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.mediafiresearch[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.mediafiresearch[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.mediafire[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.mediafire[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.porndad[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.----[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.sexgamefun[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.sexscanner[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.sextube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.sexxxtape[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.teenchat[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.teensexyvirgins[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.windowsmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www5.addfreestats[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www5.addfreestats[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www6.addfreestats[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@xiti[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@xiti[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@xm.xtendmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@xm.xtendmedia[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@xm.xtendmedia[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@yadro[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@yadro[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@yadro[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@yieldmanager[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@yieldmanager[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@zedo[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@zedo[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@zedo[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\D31K0J16.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\D0DL6PUD.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\QIW23J02.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\S8374ZMC.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\HEO734X0.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\SGIQ12U9.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\LNN0Z6CM.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\OISXE8AK.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\1MPPLBAN.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\L2VFF1PC.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\ZDSAYUHN.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\BR9ODSXX.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\15BJ4E3U.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\I0S2B2LH.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\PXFC0FP9.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\RJWI2GF8.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\XOOEPIQ7.txt

Trojan.Agent/Gen-Falprod[RE]
C:\WINDOWS\SYSTEM32\CTFMONU.DLL

  محتوای مخفی: لوگ اسکن با برنامه Malwarebyte's Anti Malware 

Malwarebytes' Anti-Malware 1.51.1.1800

برای مشاهده محتوا ، لطفا وارد شوید یا ثبت نام کنید

Database version: 7035

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

9/9/2011 7:56:44 PM
mbam-log-2011-09-09 (19-56-43).txt

Scan type: Quick scan
Objects scanned: 150164
Time elapsed: 7 minute(s), 7 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 3
Registry Values Infected: 1
Registry Data Items Infected: 3
Folders Infected: 9
Files Infected: 10

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
c:\Users\PARS\AppData\Local\KBDadb.dll (Trojan.Agent.U) -> Delete on reboot.

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\AdTools, Inc. (Adware.AdTools) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run\Bkizakusadiy (Trojan.Agent.U) -> Value: Bkizakusadiy -> Delete on reboot.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
c:\program files\funwebproducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\2.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\3.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\4.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\5.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\6.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\7.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Files Infected:
c:\Users\PARS\AppData\Roaming\Adobe\plugs\kb872303 1.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\Temp\0.123780243121898 06.exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\Temp\0.290294446519503 2.exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\Temp\0.541577769226777 1.exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\Temp\0.671143042397038 5.exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\Temp\0.779900016475509 4.exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\Temp\0.553524987919292 .exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
c:\Windows\Tasks\{810401e2-dde0-454e-b0e2-aa89c9e5967c}.job (Trojan.FraudPack) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\KBDadb.dll (Trojan.Agent.U) -> Delete on reboot.
c:\program files\funwebproducts\Installr\1.bin\F3EZSETP.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.

---------- Post added at 02:51 PM ---------- Previous post was at 02:51 PM ----------

لوگ برنامه Hit Man Pro رو نتونستم پیدا کنم.

[Dr Hannibal]

mbam بخشی زیادی از آلودگی رو تشخیص داده ، و پاک کرده ،

DDS ضروری هست ، بدون DDS نمیشه سعی کنید اجرا کنید ( تاریخ بوجود اومدن مشکل هم باید بگید )

TDS کیلر هم جزو ضروری هاست ،

در ضمن الان میتونید [ برای مشاهده لینک ، با نام کاربری خود وارد شوید یا ثبت نام کنید ] (1.45 رو اجرا کنید احتمال تعمییر ویندوز هست ، اگر رفع نشد یا لاگ DDS رو نتوسنتید بذارید یا باید ادامه راه حل هارو کاملا شانسی بریم احتمال حذف کامل آلودگی هم مشخص نیست یا میتونید ویندوز جدید نصب کنید. ( فقط نکات نصب ویندوز جدید رو در نظر داشته باشید تا چند بار کاری نشه )

هرچقدر از سیف مد فعالیت کنید بهتره.

[MrGee]

من برنامه rkill رو دانلود کردم ولی وقتی اجراش میکردم بسته میشد...

به جاي rkill از يكي از اينها استفاده كنيد

برای مشاهده محتوا ، لطفا وارد شوید یا ثبت نام کنید

برای مشاهده محتوا ، لطفا وارد شوید یا ثبت نام کنید

برای مشاهده محتوا ، لطفا وارد شوید یا ثبت نام کنید

بعد از اجرا سعي كنيد دوباره dds رو اجرا كنيد

[Muradin]

دوست عزیز بعد از اجرا کردن همه اینا یه صفحه DOS باز میشه که بعد از چند ثانیه بدون هیچ اتفاقی بسته میشه...

نمیدونم واقعا چیکار کنم