проблема все таки не решена

ljana12

Активный пользователь
Сообщения
175
Реакции
22
Баллы
248
Значит експлорер открывает папку мои документы
а второй файл вообще не открывается....

опции отправить файл у меня нету, так же как и реанализ...
 

regist

гоняюсь за туманом
Ассоциация VN/VIP
VIP
Разработчик
Сообщения
12,348
Реакции
5,973
Баллы
998
ljana12, заходит на этот сайт https://www.virustotal.com/ru/ нажимаете кнопку Выбрать файл.

и дальше действуете по инструкции

Добавлено через 1 минуту 31 секунду
вместо Reanalyse наверно будет написано Повторить анализ.
 

ljana12

Активный пользователь
Сообщения
175
Реакции
22
Баллы
248
???

а зачем мне еще раз проверять эти файлы?

я проверила второй файл и появилось сообщение, что файл уже проверялся....

а где находятся опции отправить файл и повторить анализ?
 

ljana12

Активный пользователь
Сообщения
175
Реакции
22
Баллы
248
с вторым файлом проблем нету
а вот с первым - експлорером да:

McAfee-GW-Edition Heuristic.BehavesLike.Win32.Suspicious-BAY.O

что теперь?
 

akok

Команда форума
Администратор
Сообщения
17,827
Реакции
13,528
Баллы
2,203
Да ничего, это ложное срабатывание.
 

akok

Команда форума
Администратор
Сообщения
17,827
Реакции
13,528
Баллы
2,203
Активного заражения не видно, давайте тему перенесем по назначению к спецам по Windows.

++ сразу прикрепите минидампы
"%systemroot%\Minidump\ - будут тут
 

ljana12

Активный пользователь
Сообщения
175
Реакции
22
Баллы
248
сегодня сделала проверку диска

Checking file system on C:
The type of the file system is NTFS.
Volume label is System.


A disk check has been scheduled.
Windows will now check the disk.
Read failure with status 0xc0000185 at offset 0xc2c80000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0xc2c81000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0xc2c81000 for 0x1000 bytes.
Deleted corrupt attribute list entry
with type code 128 in file 45504.
Unable to find child frs 0xb204 with sequence number 0xc3.
Deleted corrupt attribute list entry
with type code 128 in file 45504.
Unable to find child frs 0xb206 with sequence number 0xd9.
The attributes with same type code 0x80 but different instance tags
0x0 and 0x0 have non-contiguous VCN numbers 0x466 and 0x8d7
respectively in file 0xb1c0.
The attribute of type 0x80 and instance tag 0x0 in file 0xb1c0
has allocated length of 0x1cb0000 instead of 0xed0000.
Deleted corrupt attribute list entry
with type code 128 in file 45504.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x16300000000b1f3. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 45555.
Unable to locate attribute with instance tag 0x0 and segment
reference 0xdb00000000b29e. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 45726.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x29000000000b483. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46211.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x24800000000b882. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 47234.
Read failure with status 0xc0000185 at offset 0xc2c81000 for 0x1000 bytes.
File record segment 45572 is unreadable.
Read failure with status 0xc0000185 at offset 0xc2c81000 for 0x1000 bytes.
File record segment 45573 is unreadable.
Read failure with status 0xc0000185 at offset 0xc2c81000 for 0x1000 bytes.
File record segment 45574 is unreadable.
Read failure with status 0xc0000185 at offset 0xc2c81000 for 0x1000 bytes.
File record segment 45575 is unreadable.
Read failure with status 0xc0000185 at offset 0xc2c81000 for 0x1000 bytes.
Deleted corrupt attribute list entry
with type code 128 in file 56425.
Unable to find child frs 0xb207 with sequence number 0xce.
The attributes with same type code 0x80 but different instance tags
0x0 and 0x0 have non-contiguous VCN numbers 0xa0c2 and 0xaafb
respectively in file 0xdc69.
The attribute of type 0x80 and instance tag 0x0 in file 0xdc69
has allocated length of 0xbf0e000 instead of 0xb08e000.
Deleted corrupt attribute list entry
with type code 128 in file 56425.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x63e0000000050e7. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 20711.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x20000000054e4. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 21732.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x29e000000005526. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 21798.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x7c0000000082c1. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 33473.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x42000000008382. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 33666.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x2b000000008384. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 33668.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x213000000008429. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 33833.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x34b000000009360. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 37728.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x8c0000000093a8. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 37800.
Unable to locate attribute with instance tag 0x0 and segment
reference 0xca00000000a2ae. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 41646.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x21d00000000b262. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 45666.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x1a600000000b26b. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 45675.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x8f00000000b2b0. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 45744.
Unable to locate attribute with instance tag 0x0 and segment
reference 0xb600000000b2f2. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 45810.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x3df00000000b323. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 45859.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x44600000000b326. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 45862.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x38a00000000b5f5. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46581.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x4e100000000b645. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46661.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x2cd00000000b654. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46676.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x44600000000b687. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46727.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x1eb00000000b6df. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46815.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x47700000000b760. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46944.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x27000000000b8ba. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 47290.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x27100000000bb54. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 47956.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x6100000000cb59. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 52057.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x4a00000000cde2. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 52706.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x1900000000d0a3. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 53411.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x4500000000d0a7. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 53415.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x8800000000d0be. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 53438.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x4300000000d0c4. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 53444.
Unable to locate attribute with instance tag 0x0 and segment
reference 0xcc00000000d0cb. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 53451.
Unable to locate attribute with instance tag 0x0 and segment
reference 0xf900000000d0d9. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 53465.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x9f00000000d0e4. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 53476.
Unable to locate attribute with instance tag 0x0 and segment
reference 0xa100000000d14d. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 53581.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x16700000000d189. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 53641.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x2b00000000d1d2. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 53714.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x1500000000d20d. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 53773.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x9c00000000dbd3. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 56275.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x2d00000000e310. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 58128.
Unable to locate attribute with instance tag 0x0 and segment
reference 0xa800000000e3ab. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 58283.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x7400000000e3ac. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 58284.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x2c00000000e3b1. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 58289.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x5400000000e3b2. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 58290.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x3900000000e3b3. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 58291.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x3400000000e3fa. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 58362.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x2e00000000e6bf. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 59071.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x4300000000e6c0. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 59072.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x4200000000e850. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 59472.
Deleting orphan file record segment 20711.
Deleting orphan file record segment 21732.
Deleting orphan file record segment 21798.
Deleting orphan file record segment 33473.
Deleting orphan file record segment 33666.
Deleting orphan file record segment 33668.
Deleting orphan file record segment 33833.
Deleting orphan file record segment 37728.
Deleting orphan file record segment 37800.
Deleting orphan file record segment 41646.
Deleting orphan file record segment 45555.
Deleting orphan file record segment 45666.
Deleting orphan file record segment 45675.
Deleting orphan file record segment 45744.
Deleting orphan file record segment 45810.
Deleting orphan file record segment 45859.
Deleting orphan file record segment 45862.
Deleting orphan file record segment 46581.
Deleting orphan file record segment 46661.
Deleting orphan file record segment 46676.
Deleting orphan file record segment 46727.
Deleting orphan file record segment 46815.
Deleting orphan file record segment 46944.
Deleting orphan file record segment 47290.
Deleting orphan file record segment 47956.
Deleting orphan file record segment 52057.
Deleting orphan file record segment 52706.
Deleting orphan file record segment 53411.
Deleting orphan file record segment 53415.
Deleting orphan file record segment 53438.
Deleting orphan file record segment 53444.
Deleting orphan file record segment 53451.
Deleting orphan file record segment 53465.
Deleting orphan file record segment 53476.
Deleting orphan file record segment 53581.
Deleting orphan file record segment 53641.
Deleting orphan file record segment 53714.
Deleting orphan file record segment 53773.
Deleting orphan file record segment 56275.
Read failure with status 0xc0000185 at offset 0xc2c81000 for 0x400 bytes.
Read failure with status 0xc0000185 at offset 0xc2c81800 for 0x400 bytes.
Read failure with status 0xc0000185 at offset 0x75b298000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x75b297000 for 0xe000 bytes.
Read failure with status 0xc0000185 at offset 0x75b298000 for 0x1000 bytes.
The multi-sector header signature for VCN 0x1 of index $I30
in file 0x3e63 is incorrect.
78 01 07 00 a8 f4 12 00 ab b5 43 86 00 00 00 00 x.........C.....
0c 00 00 00 00 00 00 00 28 00 00 00 b8 09 00 00 ........(.......
Correcting error in index $I30 for file 15971.
The index bitmap $I30 in file 0x3e63 is incorrect.
Correcting error in index $I30 for file 15971.
The down pointer of current index entry with length 0x70 is invalid.
78 3e 00 00 00 00 01 00 70 00 58 00 01 00 00 00 x>......p.X.....
63 3e 00 00 00 00 01 00 a6 a0 5e 20 bf 65 cd 01 c>........^ .e..
d6 b2 21 e7 54 81 cd 01 d6 b2 21 e7 54 81 cd 01 ..!.T.....!.T...
a6 a0 5e 20 bf 65 cd 01 00 60 00 00 00 00 00 00 ..^ .e...`......
04 52 00 00 00 00 00 00 20 20 00 00 00 00 00 00 .R...... ......
0b 02 53 00 56 00 43 00 48 00 4f 00 53 00 7e 00 ..S.V.C.H.O.S.~.
31 00 2e 00 50 00 46 00 ff ff ff ff ff ff ff ff 1...P.F.........
1c 98 00 00 00 00 06 00 70 00 58 00 01 00 00 00 ........p.X.....
Sorting index $I30 in file 15971.
Cleaning up minor inconsistencies on the drive.
CHKDSK is recovering lost files.
Recovering orphaned file SETUP.EXE-347313F4.pf (4884) into directory file 15971.
Recovering orphaned file SPIDER~1.PF (15839) into directory file 15971.
Recovering orphaned file SPIDER.EXE-2D998CA6.pf (15839) into directory file 15971.
Recovering orphaned file SVCHOST.EXE-3530F672.pf (15992) into directory file 15971.
Recoverin
Добавлено через 15 минут 31 секунду
http://www.getsysteminfo.com/read.php?file=19383eb4d0b6a193411d53fe4bc5c978

в папке минидапм ничего нету
 
Последнее редактирование модератором:

Кирилл

Команда форума
Администратор
Сообщения
13,827
Реакции
6,169
Баллы
913
ljana12, этот жесткий диск имеет ошибки.
Давайте тест Victoria 4.46b Win.(инструкция...)
Скрин результата покажите.
 

ljana12

Активный пользователь
Сообщения
175
Реакции
22
Баллы
248
комп здох...

после теста виктории накрылся комп...
появилось сообщение на черном экране Reboot and Select proper Boot device....

:(
 

orderman

Ветеран
Сообщения
1,198
Реакции
1,378
Баллы
643
Попробуйте при выключенном питании передернуть шлейфы HDD.
Вы при тесте Викторией пользовались режимом Write? Если да, то вы похоже удалили все данные :(
 
Последнее редактирование:

Кирилл

Команда форума
Администратор
Сообщения
13,827
Реакции
6,169
Баллы
913
ljana12, сколько по времени делался тест?
 

ljana12

Активный пользователь
Сообщения
175
Реакции
22
Баллы
248
первую часть делала как написано 5 минут
а вторая часть длилась минут так 15 и потом сообщение об ошибке появилось
комп за секунду пошел на перезагрузку и все...
 

Кирилл

Команда форума
Администратор
Сообщения
13,827
Реакции
6,169
Баллы
913
ljana12, Ляна...
Внимание: при тестировании в режиме write - информация стирается!
Ну читать же сначала надо :(
Ставьте виндовс как я вам говорил-фото будем восстанавливать.
 
Последнее редактирование:

ljana12

Активный пользователь
Сообщения
175
Реакции
22
Баллы
248
ну ничего себе!!! я в шоке!!!
сейчас записываю образ...


Установила систему-отсутствуют некоторые драйвера...
 
Последнее редактирование модератором:

Кирилл

Команда форума
Администратор
Сообщения
13,827
Реакции
6,169
Баллы
913
Перейдите по этой ссылке
Выберите вкладку "загрузить" и скачайте все драйвера для вашей операционной системы,установите.

Добавлено через 5 минут 41 секунду
Скачайте программу WinDirStat отсюда ,запустите.
Когда анализ вашего дискового пространства завершится сделайте скрин и покажите.
Посмотрим осталось ли что нибудь от прежних файлов.
 

ljana12

Активный пользователь
Сообщения
175
Реакции
22
Баллы
248
значит поставила виндовс, но не получилось подключиться к нету
нету драйверов
- етернет-контроллер:
PCI\VEN_1969&DEV_2062&SUBSYS_81521019&REV_C1
PCI\VEN_1969&DEV_2062&SUBSYS_81521019
PCI\VEN_1969&DEV_2062&CC_020000
PCI\VEN_1969&DEV_2062&CC_0200

- пси-контроллер симпл комуникейшинс:
PCI\VEN_8086&DEV_1C3A&SUBSYS_7B971019&REV_04
PCI\VEN_8086&DEV_1C3A&SUBSYS_7B971019
PCI\VEN_8086&DEV_1C3A&CC_078000
PCI\VEN_8086&DEV_1C3A&CC_0780

- см-контроллер шины:
PCI\VEN_8086&DEV_1C22&SUBSYS_7B971019&REV_05
PCI\VEN_8086&DEV_1C22&SUBSYS_7B971019
PCI\VEN_8086&DEV_1C22&CC_0C0500
PCI\VEN_8086&DEV_1C22&CC_0C05


вчера пробовала искать каждый драйвер по отдельности, но так и ничего не нашла...

Добавлено через 2 минуты 33 секунды
с первой ссылкой чего-то не то, там статья о материнке... и слова загрузить не нашла...
 
Сверху Снизу