- Темы:532
- Сообщений:1553
- ☆☆☆☆☆
🙂 Вот, пожалуйста:
DDS (Ver_09-02-01.01) — NTFSx86
Run by Новый пользователь at 20:15:28,35 on 14.02.2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.3.1251.7.1049.18.3327.2862 [GMT 3:00]
AV: avast! antivirus 4.8.1335 [VPS 090213-0] *On-access scanning enabled* (Updated)
============== Running Processes ===============
C:WINDOWSsystem32svchost -k DcomLaunch
svchost.exe
C:WINDOWSSystem32svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesMarvell61xxApache2binApache.exe
C:WINDOWSsystem32nvsvc32.exe
C:Program FilesMarvell61xxApache2binApache.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:Program FilesAdobeReader 8.0ReaderReader_sl.exe
C:WINDOWSRTHDCPL.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:Program FilesSamsungEmoDioSMSTray.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:WINDOWSsystem32wuauclt.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesSpybot — Search & DestroyTeaTimer.exe
C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE
C:Documents and SettingsНовый пользовательРабочий столdds.scr
============== Pseudo HJT Report ===============
uStart Page = http://www.mail.ru
uURLSearchHooks: Спутник@Mail.Ru: {09900de8-1dca-443f-9243-26ff581438af} — c:program filesmail.rusputnikMailRuSputnik.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} — c:program filescommon filesadobeacrobatactivexAcroIEHelper.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} — c:progra~1spybot~1SDHelper.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} — c:progra~1micros~2office12GRA8E1~1.DLL
BHO: MailRuBHO Class: {8984b388-a5bb-4df7-b274-77b879e179db} — c:program filesmail.rusputnikMailRuSputnik.dll
BHO: {9D64F819-9380-8473-DAB2-702FCB3D7A3E} — No File
TB: Rambler-Ассистент: {468cd8a9-7c25-45fa-969e-3d925c689dc4} — c:program filesrambler assistantramblertoolbarU1.dll
TB: Спутник@Mail.Ru: {09900de8-1dca-443f-9243-26ff581438af} — c:program filesmail.rusputnikMailRuSputnik.dll
EB: Groove Folder Synchronization: {2a541ae1-5bf6-4665-a8a3-cfa9672e4291} — c:progra~1micros~2office12GRA8E1~1.DLL
uRun: [NBJ] «c:program filesaheadnero backitupNBJ.exe»
uRun: [ctfmon.exe] c:windowssystem32ctfmon.exe
uRun: [SpybotSD TeaTimer] c:program filesspybot — search & destroyTeaTimer.exe
mRun: [Adobe Reader Speed Launcher] «c:program filesadobereader 8.0readerReader_sl.exe»
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [NvCplDaemon] RUNDLL32.EXE c:windowssystem32NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:windowssystem32NvMcTray.dll,NvTaskbarInit
mRun: [GrooveMonitor] «c:program filesmicrosoft officeoffice12GrooveMonitor.exe»
mRun: [NeroFilterCheck] c:windowssystem32NeroCheck.exe
mRun: [SMSTray] c:program filessamsungemodioSMSTray.exe
mRun: [avast!] c:progra~1alwils~1avast4ashDisp.exe
mRunOnce: [SpybotSnD] «c:program filesspybot — search & destroySpybotSD.exe» /autocheck
dRun: [CTFMON.EXE] c:windowssystem32CTFMON.EXE
dRunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartupFolder: c:docume~1bd24~15d29~14a66~160c2~1onenot~1.lnk — c:program filesmicrosoft officeoffice12ONENOTEM.EXE
IE: &Экспорт в Microsoft Excel — c:progra~1micros~2office12EXCEL.EXE/3000
IE: Добавить в Rambler-Закладки — c:program filesrambler assistantramblertoolbarU1.dll/zakladki.htm
IE: Найти в интернете — c:program filesmail.rusputnikMailRuSputnik.dll/282
IE: Найти в словарях — c:program filesmail.rusputnikMailRuSputnik.dll/283
IE: Найти с помощью Рамблера — c:program filesrambler assistantramblertoolbarU1.dll/search.htm
IE: Перевести с помощью словарей Рамблера — c:program filesrambler assistantramblertoolbarU1.dll/dic.htm
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} — c:program filesmessengermsmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} — {48E73304-E1D6-4330-914C-F5F514E3486C} — c:progra~1micros~2office12ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} — {FF059E31-CC5A-4E2E-BF3B-96E929D65503} — c:progra~1micros~2office12REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} — {53707962-6F74-2D53-2644-206D7942484F} — c:progra~1spybot~1SDHelper.dll
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} — hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} — hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
Handler: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — c:progra~1micros~2office12GR99D3~1.DLL
SSODL: WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — c:windowssystem32WPDShServiceObj.dll
SEH: ShellHook Class: {88485281-8b4b-4f8d-9ede-82e29a064277} — c:progra~1markanyconten~1MACSMA~1.DLL
================= FIREFOX ===================
FF — ProfilePath — c:docume~1bd24~1applic~1mozillafirefoxprofilesupyxeysc.default
FF — prefs.js: browser.search.selectedEngine — Rambler
FF — prefs.js: browser.startup.homepage — hxxp://www.rambler.ru/ri6
FF — plugin: c:program filesk-lite codec packrealbrowserpluginsnppl3260.dll
FF — plugin: c:program filesk-lite codec packrealbrowserpluginsnprpjplug.dll
FF — plugin: e:real alternativebrowserpluginsnppl3260.dll
FF — plugin: e:real alternativebrowserpluginsnprpjplug.dll
============= SERVICES / DRIVERS ===============
R0 mv61xx;mv61xx;c:windowssystem32driversmv61xx.sys [2007-6-15 143256]
R1 appdrv01;Application Driver (01);c:windowssystem32driversappdrv01.sys [2008-12-9 2915944]
R1 aswSP;avast! Self Protection;c:windowssystem32driversaswSP.sys [2009-2-8 114768]
R2 aswFsBlk;aswFsBlk;c:windowssystem32driversaswFsBlk.sys [2009-2-8 20560]
R2 avast! Antivirus;avast! Antivirus;c:program filesalwil softwareavast4ashServ.exe [2009-2-8 138680]
R2 MRUWebService;MRU Web Service;c:program filesmarvell61xxapache2binApache.exe [2007-5-23 20539]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:windowssystem32driversl151x86.sys [2008-7-1 36864]
R3 avast! Mail Scanner;avast! Mail Scanner;c:program filesalwil softwareavast4ashMaiSv.exe [2009-2-8 254040]
R3 avast! Web Scanner;avast! Web Scanner;c:program filesalwil softwareavast4ashWebSv.exe [2009-2-8 352920]
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:windowssystem32appdrvrem01.exe svc —> c:windowssystem32appdrvrem01.exe svc [?]
S3 Marvell RAID;Marvell RAID Event Agent;c:program filesmarvell61xxsvcmvraidsvc.exe [2007-6-12 61440]
S3 PciCon;PciCon;??d:pcicon.sys —> d:PciCon.sys [?]
=============== Created Last 30 ================
2009-02-08 17:48 69,632 a
c:docume~1bd24~1applic~1bpfeed.dll
2009-02-06 21:52
c:docume~1alluse~1applic~1Kaspersky Lab Setup Files
==================== Find3M ====================
2008-12-21 02:03 826,368 a
c:windowssystem32wininet.dll
2008-12-09 13:19 304,528 a
c:windowssystem32appdrvrem01.exe
2008-12-05 15:14 1,036,387 a
C:wrar35b2.exe
2006-06-23 17:48 32,768 a—-r— c:windowsinfUpdateUSB.exe
============= FINISH: 20:15:36,84 ===============
Я не знаю, видно ли это по логу, но когда спайбот сканирует, то выдает каждый раз одну ошибку, которую не может исправить, потому что она в системе: spyware
