несанкциорированно перезагружается компьютер

[olegamber]

Уважаемые товарищи. Прошу оказать содействие в очистке компьютера, При работе в браузере mozblla firefox систематически перезагружается компьтер.Проверил программой GMER. Лог скопировал и прилагаю.

 

Gmer:

GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2015-08-16 13:47:24
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-2 ST3160211AS rev.3.AAE 149,05GB
Running: hun99trg.exe; Driver: C:\Users\11\AppData\Local\Temp\axldqpow.sys


---- System - GMER 2.1 ----

SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwAdjustPrivilegesToken [0x91447AC6]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwClose [0x91448298]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwConnectPort [0x914486C0]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwCreateFile [0x9144C48C]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwCreateNamedPipeFile [0x9144798C]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwCreateSymbolicLinkObject [0x9144976E]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwCreateThread [0x9144803C]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwDebugActiveProcess [0x914491A0]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwDeviceIoControlFile [0x91448492]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwDuplicateObject [0x91449BB0]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwFsControlFile [0x91448344]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwLoadDriver [0x91449232]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwOpenFile [0x9144C2D0]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwOpenProcess [0x91447CF6]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwOpenSection [0x91449798]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwOpenThread [0x91447BF8]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwQueueApcThread [0x914494C6]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwReplaceKey [0x91446E5C]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwRequestWaitReplyPort [0x91449026]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwRestoreKey [0x91446FBE]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwResumeThread [0x91449A84]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwSaveKey [0x91446C5E]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwSecureConnectPort [0x91448582]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwSetContextThread [0x9144813C]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwSetSecurityObject [0x9144932C]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwSetSystemInformation [0x914497C2]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwSuspendProcess [0x914498A6]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwSuspendThread [0x91449962]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwSystemDebugControl [0x914490CC]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwTerminateProcess [0x91447E90]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwTerminateThread [0x91447DE6]
SSDT            \SystemRoot\system32\DRIVERS\klif.sys                                                                                                                                                                                                                                                             ZwWriteVirtualMemory [0x91447F70]

---- Devices - GMER 2.1 ----

AttachedDevice  \Driver\tdx \Device\Tcp                                                                                                                                                                                                                                                                           kl1.sys
AttachedDevice  \Driver\tdx \Device\Udp                                                                                                                                                                                                                                                                           kl1.sys
AttachedDevice  \Driver\tdx \Device\RawIp                                                                                                                                                                                                                                                                         kl1.sys
AttachedDevice  \FileSystem\fastfat \Fat                                                                                                                                                                                                                                                                          fltmgr.sys

---- Registry - GMER 2.1 ----

Reg             HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@"\4C\4=\4=\0045\4;\4L\4=\4K\49\4 \0000\0044\0040\4?\4B\0045\4@\4 \0M\0i\0c\0r\0o\0s\0o\0f\0t\0 \0T\0e\0r\0e\0d\0o                                                                               1?
Reg             HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\20\0044\0040\4?\4B\0045\4@\4 \0M\0i\0c\0r\0o\0s\0o\0f\0t\0 \0I\0S\0A\0T\0A\0P                                                                                                                  1?2?
Reg             HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\32\4>\4=\4B\4@\4>\4;\4;\0045\4@\4 \0A\0t\0h\0e\0r\0o\0s\0 \0L\0001\0 \0G\0i\0g\0a\0b\0i\0t\0 \0E\0t\0h\0e\0r\0n\0e\0t\0 \0001\0000\0/\0001\0000\0000\0/\0001\0000\0000\0000\0B\0a\0s\0e\0-\0T  1?
Reg             HKLM\SYSTEM\ControlSet002\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@"\4C\4=\4=\0045\4;\4L\4=\4K\49\4 \0000\0044\0040\4?\4B\0045\4@\4 \0M\0i\0c\0r\0o\0s\0o\0f\0t\0 \0T\0e\0r\0e\0d\0o                                                                                   1?
Reg             HKLM\SYSTEM\ControlSet002\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\20\0044\0040\4?\4B\0045\4@\4 \0M\0i\0c\0r\0o\0s\0o\0f\0t\0 \0I\0S\0A\0T\0A\0P                                                                                                                      1?2?
Reg             HKLM\SYSTEM\ControlSet002\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\32\4>\4=\4B\4@\4>\4;\4;\0045\4@\4 \0A\0t\0h\0e\0r\0o\0s\0 \0L\0001\0 \0G\0i\0g\0a\0b\0i\0t\0 \0E\0t\0h\0e\0r\0n\0e\0t\0 \0001\0000\0/\0001\0000\0000\0/\0001\0000\0000\0000\0B\0a\0s\0e\0-\0T      1?
Reg             HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack@LastHeartBeatTime                                                                                                                                                                                                            0x08 0x62 0x99 0x0F ...
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\Module\Microsoft.NET/Framework/v2.0.50727/mscorwks.dll                                                                                                                                                                       
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\Module\Microsoft.NET/Framework/v2.0.50727/mscorwks.dll@\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe                                                                                       0xEA 0xA2 0x79 0x5D ...
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\Module\Microsoft.NET/Framework/v2.0.50727/mscorwks.dll@\Device\HarddiskVolume1\Windows\System32\sdiagnhost.exe                                                                                                               0xC2 0xF0 0xE6 0xC7 ...
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\Module\Microsoft.NET/Framework/v2.0.50727/mscorwks.dll@\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe                                                                                            0xD1 0x3D 0x6C 0xC8 ...
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\Module\Microsoft.NET/Framework/v4.0.30319/clr.dll                                                                                                                                                                            
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\Module\Microsoft.NET/Framework/v4.0.30319/clr.dll@\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe                                                                                            0x6F 0x3E 0xA9 0x5D ...
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\Module\Microsoft.NET/Framework/v4.0.30319/clr.dll@\Device\HarddiskVolume1\Windows\System32\msiexec.exe                                                                                                                       0x0F 0x53 0x3F 0xD5 ...
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\Module\Microsoft.NET/Framework/v4.0.30319/clr.dll@\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe                                                                                                0xAB 0x90 0x0C 0x83 ...
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\Module\Microsoft.NET/Framework/v4.0.30319/clr.dll@\Device\HarddiskVolume1\Windows\System32\CompatTelRunner.exe                                                                                                               0xF7 0xF6 0x9E 0xB2 ...
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active                                                                                                                                                                                                                
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active@A2824A80                                                                                                                                                                                                       49

---- EOF - GMER 2.1 ----

 

 

Сообщение от модератора Mark D. Pearlstone

Отчёт спрятан под спойлер

 

[Mark D. Pearlstone]

Порядок оформления запроса о помощи