مشکل بسته شدن بعضی پنجره ها

یه مدتیه که وقتی task manager رو باز میکنم یا باز نمیشه یا بعد از چند ثانیه بسته میشه! همین اتفاق برای همه

mediaplayer ها هم میوفته!

چیکار کنم؟!

کد:

---

http://forum.p30world.com/showthread.php?t=485336

---

دوست عزیز همه این کار هایی که تو این صفحه گفته بود انجام دادم بازم این مشکل رو دارم ... مهم تر از همه وقتی میخوام یه ویدئو ببینم یا ویدئو رو کانورت کنم قطع میشه... تسک منیجر هم همینطور ...

در ضمن تا الان با برنامه های Hit Man Pro 7 و Malwarebyte و SuperAntiSpyware و RRT اسکن کردم و هر چی گفت رو پاک کردم ولی مشکلم هنوز حل نشده...

---------- Post added at 01:56 PM ---------- Previous post was at 01:53 PM ----------

این اتفاق دیروز افتاده و در مورد اون لاگ هایی که گفته بودید قرار بدید هم من برنامه rkill رو دانلود کردم ولی وقتی اجراش میکردم بسته میشد...

همه اون برنامه ها به شما يه فايل لاگ مي دن كه شما بايد اونها رو اينجا بزاريد



همچنين برنامه dds رو كه از بقيه مهمتره اجرا نكرديد

کد:

---

http://forum.p30world.com/showpost.php?p=6076172&postcount=9

---

خوب من که الان اون برنامه هارو بستم فایل لاگشو از کجا بیارم؟!

در ضمن اون برنامه های rkill و dds رو هم اجرا می کنم هیچ اتفاقی نمیفته!

این هم لوگ ها:

  محتوای مخفی: لوگ برنامه SUPERAntiSpyware 

SUPERAntiSpyware Scan Log

کد:

---

http://www.superantispyware.com

---

Generated 09/09/2011 at 08:43 PM

Application Version : 5.0.1118

Core Rules Database Version : 7665
Trace Rules Database Version: 5477

Scan type : Quick Scan
Total Scan Time : 00:19:26

Operating System Information
Windows 7 Enterprise 32-bit (Build 6.01.7600)
UAC Off - Administrator

Memory items scanned : 741
Memory threats detected : 0
Registry items scanned : 30403
Registry threats detected : 0
File items scanned : 11177
File threats detected : 389

Adware.Tracking Cookie
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@1.sharkadnetwork[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@101teengirls[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@101teengirls[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@122.2o7[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@2o7[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@2o7[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@a1.interclick[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@accounts.google[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@accounts.youtube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.ad-srv[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.server.adweb[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.wsod[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[10].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[7].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[8].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.yieldmanager[9].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad.zanox[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad2.adfarm1.adition[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ad4.adfarm1.adition[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adbrite[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adbrite[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adecn[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adfarm1.adition[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adinterax[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adinterax[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adnet.seemorgh[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.ad4game[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.ad4game[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.ad4game[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.adgoto[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.adk2[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.adk2[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.basal[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.----------[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.carocean.co[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.carocean.co[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.crakmedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.creative-serving[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.depositfiles[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.fling[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.fulldls[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.glispa[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.imvisible[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.intergi[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.neptunepinkfloyd.co[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.neudesicmediagroup[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.ookla[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.persianwhois[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.pointroll[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.pointroll[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.pubmatic[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.thefrisky[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.thegauntlet[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.watchmygf[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ads.whaleads[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adserver.adreactor[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adserver.adreactor[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adserver.adtechus[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adserver.adtechus[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adserver.hardsextube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adserver.nsadev[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adtech[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adtech[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adultadworld[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adultadworld[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adultfriendfinder[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adultfriendfinder[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertise.aftabteam[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertise.aftabteam[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertising[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertising[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertising[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertising[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertising[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@advertstream[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adviva[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adxpansion[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adxpansion[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adxpose[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@adxpose[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@alphaporno[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@alphaporno[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@analytics.rogersmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@apmebf[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@apmebf[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@apmebf[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@apmebf[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@apmebf[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ar.atwola[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@at.atwola[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@at.atwola[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@atdmt[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@atdmt[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@atrack.allposters[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@banners.facebookofsex[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@banners.mennation[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@bmuk.burstnet[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@bravenet[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@bs.serving-sys[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@bs.serving-sys[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@bullporn[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@burstnet[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@c.gigcount[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@c.gigcount[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@cafeserial[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@casalemedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@casalemedia[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@chitika[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@chordfind[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@click.mediadome[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@click.splinky[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@clickfuse[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@clickfuse[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@clickfuse[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@clickfuse[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@clickha[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@clicksor[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@collective-media[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@collective-media[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[7].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[8].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@content.yieldmanager[9].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@counter1.sextracker[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@counters.gigya[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@cracked[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@dev.hardsextube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@directporntube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@dmtracker[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@dmtracker[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@doubleclick[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@doubleclick[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@doubleclick[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@doubleclick[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@doubleclick[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@eaeacom.112.2o7[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@eas.apm.emediate[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@edocfind[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@emediate.apmmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@emediate.apmmedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@emmawatsonnakedbathgrim.typepad[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ero-advertising[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@facebookofsex[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fakecelebrityporno[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[11].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[7].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[8].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fastclick[9].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@femalefirst.co[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@findherdifferences[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@findsubtitles[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@firstsextube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@focusin.ads.targetnet[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@freshxxxtube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fuckassonline[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fuckfamily[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@fuckfamily[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@galleries.adult-empire[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@goldporntube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@gostats[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@gotgayporn[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@hardsextube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@harrenmedianetwork[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@hentaicounter[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@hot-----tube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@hotclick.persianblog[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ice.112.2o7[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ice.112.2o7[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@imrworldwide[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@imrworldwide[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@imrworldwide[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@in.getclicky[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@in.getclicky[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@in.getclicky[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@insightexpressai[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@interclick[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@invitemedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@invitemedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@invitemedia[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@jahanclick[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@landing.hitfarm[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@legolas-media[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@lfstmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@lfstmedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@lfstmedia[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@lucidmedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@m1.webstats.motigo[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@m1.webstats.motigo[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[7].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@media6degrees[8].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediabrandsww[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediabrandsww[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediabrandsww[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediabrandsww[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafiresearch[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafiresearch[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[7].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediafire[9].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediaplex[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediaplex[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mediaservices-d.openxenterprise[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@microsoftsto.112.2o7[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@microsoftsto.112.2o7[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@microsoftwindows.112.2o7[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mm.chitika[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@momsextube[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@momsextube[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mscracks[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mycounter.tinycounter[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@myroitracking[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@mysexgames[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@naked[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@optimize.indieclick[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@overture[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@partypoker[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@pointroll[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@pointroll[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@porndad[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@pornhub[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@----[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@publishers.w00tmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@publishers.w00tmedia[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@questionmarket[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@questionmarket[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@r1-ads.ace.advertising[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@realmedia.com[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@realmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@realmedia[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@revenue[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@revsci[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@revsci[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@rogersmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@rts.pgmediaserve[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ru4[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ru4[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@ru4[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@rudesexcartoons[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@server.cpmstar[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@server.cpmstar[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@serving-sys[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@serving-sys[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@serving-sys[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexfinder[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexgamefun[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexgames[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexintheuk[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexstarstv[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sextracker[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sextube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexxxtape[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexybeautycelebrities.blogspot[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexyfuckgames[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexygames[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexyjameshetfield[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexymileycyrus[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sexysinfulcomics[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@smartadserver[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@smartadserver[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@smartadserver[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@smartadserver[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@smartadserver[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@specificclick[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@specificclick[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@spylog[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@spylog[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@stat.onestat[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[5].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[6].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[7].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@statcounter[8].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@static.sunporno[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@sunporno[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tacoda.at.atwola[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tacoda.at.atwola[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@teenburg[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@teenchat[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@teensexyvirgins[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@top-people.starmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@toplist[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@toplist[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@toplist[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@topsexywomen[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tracking.gameforge[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tracking.mlsat02[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@traffic-stock[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@trafficholder[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tribalfusion[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tribalfusion[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@tribalfusion[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@user.lucidmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@user.lucidmedia[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@viacom.adbureau[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@viacom.adbureau[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@vodafonebranding.solution.weborama[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@weborama[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.avrillavignesextape[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.bullporn[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.burstnet[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.clickha[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.clickkon[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.fakecelebrityporno[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.findsubtitles[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.firstsextube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.fpctraffic2[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.fucking1[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.googleadservices[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.googleadservices[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.gotgayporn[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.hot-----tube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.mediafiresearch[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.mediafiresearch[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.mediafiresearch[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.mediafire[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.mediafire[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.porndad[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.----[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.sexgamefun[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.sexscanner[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.sextube[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.sexxxtape[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.teenchat[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.teensexyvirgins[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www.windowsmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www5.addfreestats[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www5.addfreestats[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@www6.addfreestats[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@xiti[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@xiti[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@xm.xtendmedia[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@xm.xtendmedia[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@xm.xtendmedia[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@yadro[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@yadro[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@yadro[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@yieldmanager[1].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@yieldmanager[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@zedo[2].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@zedo[3].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\pars@zedo[4].txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\D31K0J16.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\D0DL6PUD.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\QIW23J02.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\S8374ZMC.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\HEO734X0.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\SGIQ12U9.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\LNN0Z6CM.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\OISXE8AK.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\1MPPLBAN.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\L2VFF1PC.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\ZDSAYUHN.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\BR9ODSXX.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\15BJ4E3U.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\I0S2B2LH.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\PXFC0FP9.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\RJWI2GF8.txt
C:\Users\PARS\AppData\Roaming\Microsoft\Windows\Co okies\XOOEPIQ7.txt

Trojan.Agent/Gen-Falprod[RE]
C:\WINDOWS\SYSTEM32\CTFMONU.DLL

  محتوای مخفی: لوگ اسکن با برنامه Malwarebyte's Anti Malware 

Malwarebytes' Anti-Malware 1.51.1.1800

کد:

---

www.malwarebytes.org

---

Database version: 7035

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

9/9/2011 7:56:44 PM
mbam-log-2011-09-09 (19-56-43).txt

Scan type: Quick scan
Objects scanned: 150164
Time elapsed: 7 minute(s), 7 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 3
Registry Values Infected: 1
Registry Data Items Infected: 3
Folders Infected: 9
Files Infected: 10

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
c:\Users\PARS\AppData\Local\KBDadb.dll (Trojan.Agent.U) -> Delete on reboot.

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\AdTools, Inc. (Adware.AdTools) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run\Bkizakusadiy (Trojan.Agent.U) -> Value: Bkizakusadiy -> Delete on reboot.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
c:\program files\funwebproducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\2.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\3.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\4.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\5.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\6.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\7.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Files Infected:
c:\Users\PARS\AppData\Roaming\Adobe\plugs\kb872303 1.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\Temp\0.123780243121898 06.exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\Temp\0.290294446519503 2.exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\Temp\0.541577769226777 1.exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\Temp\0.671143042397038 5.exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\Temp\0.779900016475509 4.exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\Temp\0.553524987919292 .exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
c:\Windows\Tasks\{810401e2-dde0-454e-b0e2-aa89c9e5967c}.job (Trojan.FraudPack) -> Quarantined and deleted successfully.
c:\Users\PARS\AppData\Local\KBDadb.dll (Trojan.Agent.U) -> Delete on reboot.
c:\program files\funwebproducts\Installr\1.bin\F3EZSETP.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.

---------- Post added at 02:51 PM ---------- Previous post was at 02:51 PM ----------

لوگ برنامه Hit Man Pro رو نتونستم پیدا کنم.

mbam بخشی زیادی از آلودگی رو تشخیص داده ، و پاک کرده ،

DDS ضروری هست ، بدون DDS نمیشه سعی کنید اجرا کنید ( تاریخ بوجود اومدن مشکل هم باید بگید )

TDS کیلر هم جزو ضروری هاست ،

در ضمن الان میتونید [ برای مشاهده لینک ، با نام کاربری خود وارد شوید یا ثبت نام کنید ] (1.45 رو اجرا کنید احتمال تعمییر ویندوز هست ، اگر رفع نشد یا لاگ DDS رو نتوسنتید بذارید یا باید ادامه راه حل هارو کاملا شانسی بریم احتمال حذف کامل آلودگی هم مشخص نیست یا میتونید ویندوز جدید نصب کنید. ( فقط نکات نصب ویندوز جدید رو در نظر داشته باشید تا چند بار کاری نشه )

هرچقدر از سیف مد فعالیت کنید بهتره.

نقل قول:

---

من برنامه rkill رو دانلود کردم ولی وقتی اجراش میکردم بسته میشد...

---

به جاي rkill از يكي از اينها استفاده كنيد

کد:

---

http://download.bleepingcomputer.com/grinler/iExplore.exe

---

کد:

---

http://download.bleepingcomputer.com/grinler/WiNlOgOn.exe

---

کد:

---

http://download.bleepingcomputer.com/grinler/uSeRiNiT.exe

---

بعد از اجرا سعي كنيد دوباره dds رو اجرا كنيد

دوست عزیز بعد از اجرا کردن همه اینا یه صفحه DOS باز میشه که بعد از چند ثانیه بدون هیچ اتفاقی بسته میشه...

نمیدونم واقعا چیکار کنم :41: