- This topic has 1 ответ, 2 участника, and was last updated 16 years, 3 months назад by
.
-
Сообщения
-
Буду рад если и мне поможите.
Запустил предложенный вами скрипт. Вирус вроде удалился — но куча блокировок системы осталось.
Вот лог RSIT:
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Pavel at 2009-07-08 20:33:50
Microsoft Windows XP Professional Service Pack 2
System drive C: has 6 GB (37%) free of 15 GB
Total RAM: 959 MB (31% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:33:53, on 08.07.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesAviraAntiVir Desktopsched.exe
C:WINDOWSExplorer.EXE
C:Program FilesGoogleUpdate1.2.183.7GoogleCrashHandler.exe
C:Program FilesAviraAntiVir Desktopavgnt.exe
C:Program FilesJavajre6binjusched.exe
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesSony EricssonSony Ericsson PC SuiteSEPCSuite.exe
C:Program FilesDownload Masterdmaster.exe
C:Program FilesQIP Infiuminfium.exe
C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
C:Program FilesAviraAntiVir Desktopavguard.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:WINDOWSsystem32HPZipm12.exe
C:Program FilesSamsung ElectronicsSec16eAgentSec16eAgent.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesSamsung ElectronicsSec16eAgentSec16eCHK.exe
C:Program Filesteamworkbintomcat6.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesMozilla Firefox 3.1 Beta 2firefox.exe
C:Documents and SettingsPavelРабочий столRSIT.exe
C:Program FilesTrend MicroHijackThisPavel.exeR0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://cb.vtb24.ru/login.asp
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page =
R1 — HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://www.macromedia.com/shockwave/download/triggerpages_mmcom/default.html
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = http=127.0.0.1:5757
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = local
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O1 — Hosts: 89.111.185.51 guardian-admin.ipi-manager.ru
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: Google Gears Helper — {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} — C:Program FilesGoogleGoogle GearsInternet Explorer .5.23.0gears.dll
O2 — BHO: FlashFXP Helper for Internet Explorer — {E5A1691B-D188-4419-AD02-90002030B8EE} — C:PROGRA~1FlashFXPIEFlash.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — C:Program FilesDownload Masterdmbar.dll
O4 — HKLM..Run: [avgnt] «C:Program FilesAviraAntiVir Desktopavgnt.exe» /min
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [GrooveMonitor] «C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe»
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [Sony Ericsson PC Suite] «C:Program FilesSony EricssonSony Ericsson PC SuiteSEPCSuite.exe» /systray /nologon
O4 — HKCU..Run: [uTorrent] «C:Program FilesuTorrentutorrent.exe»
O4 — HKCU..Run: [Download Master] C:Program FilesDownload Masterdmaster.exe -autorun
O4 — HKCU..Run: [Infium] «C:Program FilesQIP Infiuminfium.exe» /autorun
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: E&xport to Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O8 — Extra context menu item: Передать на удаленную закачку DM — C:Program FilesDownload Masterremdown.htm
O9 — Extra button: (no name) — {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} — C:Program FilesGoogleGoogle GearsInternet Explorer .5.23.0gears.dll
O9 — Extra ‘Tools’ menuitem: &Настройки Gears — {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} — C:Program FilesGoogleGoogle GearsInternet Explorer .5.23.0gears.dll
O9 — Extra button: Send to OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: S&end to OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O10 — Unknown file in Winsock LSP: c:windowssystem32winhelper.dll
O10 — Unknown file in Winsock LSP: c:windowssystem32winhelper.dll
O20 — AppInit_DLLs: C:PROGRA~1GoogleGoogle Desktop SearchGoogleDesktopNetwork3.dll
O23 — Service: Acronis Scheduler2 Service (AcrSch2Svc) — Acronis — C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 — Service: Adobe LM Service — Adobe Systems — C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 — Service: Avira AntiVir Scheduler (AntiVirSchedulerService) — Avira GmbH — C:Program FilesAviraAntiVir Desktopsched.exe
O23 — Service: Avira AntiVir Guard (AntiVirService) — Avira GmbH — C:Program FilesAviraAntiVir Desktopavguard.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Google Update Service (gupdate1c9f1b6d4b29006) (gupdate1c9f1b6d4b29006) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Pml Driver HPZ12 — HP — C:WINDOWSsystem32HPZipm12.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Sec16e service agent (Sec16eService) — Samsung Electronics — C:Program Files\Samsung ElectronicsSec16eAgentSec16eAgent.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Teamwork-8080 (teamwork8080) — Apache Software Foundation — C:Program Filesteamworkbintomcat6.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 8567 bytes======Scheduled tasks folder======
C:WINDOWStasksGoogleUpdateTaskMachineCore.job
C:WINDOWStasksGoogleUpdateTaskMachineUA.job
C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1343024091-1592454029-839522115-1003.job
C:WINDOWStasksvtigerCRM Email Reminder.job
C:WINDOWStasksvtigerCRM Notification Scheduler.job
C:WINDOWStasks{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL [2006-10-27 2210608][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2009-04-16 158208][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2009-06-21 35840][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53}]
Google Gears Helper — C:Program FilesGoogleGoogle GearsInternet Explorer .5.23.0gears.dll [2009-06-09 2097152][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E5A1691B-D188-4419-AD02-90002030B8EE}]
FlashFXP Helper for Internet Explorer — C:PROGRA~1FlashFXPIEFlash.dll [2005-05-04 191096][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-06-21 73728][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — C:Program FilesDownload Masterdmbar.dll [2007-11-26 180224][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«avgnt»=C:Program FilesAviraAntiVir Desktopavgnt.exe [2009-03-02 209153]
«SunJavaUpdateSched»=C:Program FilesJavajre6binjusched.exe [2009-06-21 148888]
«GrooveMonitor»=C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2006-10-27 31016][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-17 15360]
«Sony Ericsson PC Suite»=C:Program FilesSony EricssonSony Ericsson PC SuiteSEPCSuite.exe [2008-07-02 393216]
«uTorrent»=C:Program FilesuTorrentutorrent.exe [2009-02-10 270128]
«Download Master»=C:Program FilesDownload Masterdmaster.exe [2009-05-06 3777536]
«Infium»=C:Program FilesQIP Infiuminfium.exe [2009-03-25 5245440][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAudioDeck]
C:Program FilesVIAudioiSBADeckADeck.exe [2005-09-06 450560][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregISUSScheduler]
C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe [2004-06-16 81920][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSkype]
C:Program FilesSkypePhoneSkype.exe [2007-02-09 25388584][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupreguTorrent]
C:Program FilesuTorrentutorrent.exe [2009-02-10 270128][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregwinupdate.exe]
C:WINDOWSsystem32winupdate.exe [][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregµTorrent]
C:Program FilesuTorrentutorrent.exe [2009-02-10 270128][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Adobe Reader Speed Launch.lnk]
C:PROGRA~1AdobeACROBA~1.0ReaderREADER~1.EXE [][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»C:PROGRA~1GoogleGoogle Desktop SearchGoogleDesktopNetwork3.dll»[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL [2006-10-27 2210608][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«DisableTaskMgr»=1[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoSetActiveDesktop»=1
«NoActiveDesktopChanges»=1[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoSetActiveDesktop»=
«NoActiveDesktopChanges»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesFlashFXPflashfxp.exe»=»C:Program FilesFlashFXPflashfxp.exe:*:Enabled:FlashFXP v3»
«C:Program FilesIVT CorporationBlueSoleilBlueSoleil.exe»=»C:Program FilesIVT CorporationBlueSoleilBlueSoleil.exe:*:Enabled:BlueSoleil»
«C:Program FilesuTorrentutorrent.exe»=»C:Program FilesuTorrentutorrent.exe:*:Enabled:µTorrent»
«C:Program FilesD-LinkInstallation WizardInstallationWizard.exe»=»C:Program FilesD-LinkInstallation WizardInstallationWizard.exe:*:Enabled:Installation Wizard»
«C:Program FilesAOLActive Virus Shieldavp.exe»=»C:Program FilesAOLActive Virus Shieldavp.exe:*:Enabled:Active Virus Shield»
«C:Program FilesK-Lite Codec PackMedia Player Classicmplayerc.exe»=»C:Program FilesK-Lite Codec PackMedia Player Classicmplayerc.exe:*:Enabled:Media Player Classic»
«C:Program FilesMozilla Firefoxfirefox.exe»=»C:Program FilesMozilla Firefoxfirefox.exe:*:Enabled:Firefox»
«C:Program FilesQIPqip.exe»=»C:Program FilesQIPqip.exe:*:Enabled:Quiet Internet Pager»
«C:Program FilesGoogleGoogle Talkgoogletalk.exe»=»C:Program FilesGoogleGoogle Talkgoogletalk.exe:*:Enabled:Google Talk»
«C:Program FilesQIPinfiuminfium.exe»=»C:Program FilesQIPinfiuminfium.exe:*:Enabled:QIP Infium Beta»
«C:Program FilesLast.fmLastFM.exe»=»C:Program FilesLast.fmLastFM.exe:*:Enabled:Last.fm»
«C:Program FilesSoulseekslsk.exe»=»C:Program FilesSoulseekslsk.exe:*:Enabled:SoulSeek»
«C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup FilesKaspersky Internet Security 7.0.1.325Russiansetup.exe»=»C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup FilesKaspersky Internet Security 7.0.1.325Russiansetup.exe:*:Enabled:Программа установки Kaspersky Internet Security 7.0»
«C:Program FilesIntuwaveSharedmRouterRuntimemRouterRuntime.exe»=»C:Program FilesIntuwaveSharedmRouterRuntimemRouterRuntime.exe:*:Enabled:mRouterRuntime Module»
«C:Program FilesSony EricssonUpdate ServiceUpdate Service.exe»=»C:Program FilesSony EricssonUpdate ServiceUpdate Service.exe:*:Enabled:Update Service»
«C:Program FilesSony EricssonUpdate Service ProUSP.exe»=»C:Program FilesSony EricssonUpdate Service ProUSP.exe:*:Enabled:USP»
«C:Program FilesITTerritoryKopKopclient.exe»=»C:Program FilesITTerritoryKopKopclient.exe:*:Enabled:Хранители силы»
«C:Program FilesCyberLinkPowerDVDPowerDVD.exe»=»C:Program FilesCyberLinkPowerDVDPowerDVD.exe:*:Enabled:CyberLink PowerDVD»
«C:Program FilesHPDigital Imagingbinhpqscnvw.exe»=»C:Program FilesHPDigital Imagingbinhpqscnvw.exe:*:Enabled:hpqscnvw.exe»
«C:Program FilesHPDigital Imagingbinhpqkygrp.exe»=»C:Program FilesHPDigital Imagingbinhpqkygrp.exe:*:Enabled:hpqkygrp.exe»
«C:Program FilesHPDigital Imagingbinhpqnrs08.exe»=»C:Program FilesHPDigital Imagingbinhpqnrs08.exe:*:Enabled:hpqnrs08.exe»
«C:Program FilesVisicronVZOchatVZOchat.exe»=»C:Program FilesVisicronVZOchatVZOchat.exe:*:Enabled:VZOchat»
«C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE»=»C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE»=»C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE:*:Enabled:Microsoft Office Groove»
«C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE»=»C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE:*:Enabled:Microsoft Office OneNote»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype. The whole world can talk for free.»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesFlashFXPflashfxp.exe»=»C:Program FilesFlashFXPflashfxp.exe:*:Enabled:FlashFXP v3»
«C:Program FilesCyberLinkPowerDVDPowerDVD.exe»=»C:Program FilesCyberLinkPowerDVDPowerDVD.exe:*:Enabled:CyberLink PowerDVD»[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{0005467f-da1e-11dc-bb8e-000272b00026}]
shellAutoRuncommand — I:
shellopencommand — rundll32.exe .\dhcpsapl.dll,InstallM[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{00de64df-7b26-11dc-acd4-000272b00026}]
shellAutocommand — J:tel.xls.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{06558165-7345-11dd-b9ea-0013d3a99dab}]
shellAutoRuncommand — yg.cmd
shellexplorecommand — yg.cmd
shellopencommand — yg.cmd[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{1c7bd821-d958-11dc-bb8c-000272b00026}]
shellAutocommand — I:tel.xls.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{2a4b4ca1-1e9e-11de-954a-0013d3a99dab}]
shellAutoRuncommand — F:
shellopencommand — rundll32.exe .\wrclass.dll,InstallM[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{2b331005-d3dc-11db-aca7-000272b00026}]
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycledctfmon.exe
shellOpen(&0)command — I:Recycledctfmon.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{3f32cf95-ff80-11db-acb6-000272b00026}]
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycledctfmon.exe
shellOpen(&0)command — I:Recycledctfmon.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{4df2989b-8d2f-11dc-acda-000272b00026}]
shellAutocommand — SHE.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL recycledsys.exeE.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{57354ab1-f0e3-11dc-bb96-000272b00026}]
shellAutocommand — I:tel.xls.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{790c2546-5ee5-11dd-b9e9-0013d3a99dab}]
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{81eb61e1-cce8-11dc-bb8b-000272b00026}]
shellAutocommand — tel.xls.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{81eb61ea-cce8-11dc-bb8b-000272b00026}]
shellAutocommand — J:tel.xls.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{851a101e-d88c-11db-acaa-000272b00026}]
shellAutocommand — infrom.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL infrom.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{8990db6a-3ba2-11de-954f-0013d3a99dab}]
shellAutoRuncommand — F:AutoInstall.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{9037d870-09ec-11dc-acb8-000272b00026}]
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycledctfmon.exe
shellOpen(&0)command — I:Recycledctfmon.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{930d1ac7-f813-11dc-bb98-000272b00026}]
shellAutocommand — I:tel.xls.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{930d1b02-f813-11dc-bb98-000272b00026}]
shellAutoRuncommand — I:ekugb3.bat
shellexplorecommand — I:ekugb3.bat
shellopencommand — I:ekugb3.bat[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{9f220361-dfc7-11dc-bb90-000272b00026}]
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{a6233ec0-ec34-11db-acb1-000272b00026}]
shellAutocommand — I:tel.xls.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{aec7b2c2-969a-11dc-acdc-000272b00026}]
shellAutoRuncommand — I:cl.bat
shellexplorecommand — I:cl.bat
shellopencommand — I:cl.bat[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{d541fcdb-9e63-11dc-acde-000272b00026}]
shellAutoRuncommand — I:
shellexplorecommand — I:RECYCLERINFO.exe
shellopencommand — I:RECYCLERINFO.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{dcfc5a53-4090-11de-9550-0013d3a99dab}]
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL p.exe
shelldefaultcommand — p.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{dcfc5ae7-4090-11de-9550-0013d3a99dab}]
shellAutoRuncommand — F:setupSNK.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{de3ea927-a1a9-11dc-acde-000272b00026}]
shellAutocommand — J:tel.xls.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{df11c572-a998-11dc-acdf-000272b00026}]
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycledctfmon.exe
shellOpen(&0)command — Recycledctfmon.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{ee520feb-732f-11dc-acce-000272b00026}]
shellAutoRuncommand — F:yg.cmd
shellexplorecommand — F:yg.cmd
shellopencommand — F:yg.cmd[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{ff05469b-f8aa-11db-acb6-000272b00026}]
shellAutoRuncommand — I:LaunchU3.exe -a[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{ff05469c-f8aa-11db-acb6-000272b00026}]
shellAutoRuncommand — J:PortableAppsPortableAppsMenuPortableAppsMenu.exe======List of files/folders created in the last 1 months======
2009-07-08 20:14:34 —-D—- C:_OTM
2009-07-08 20:12:10 —-D—- C:rsit
2009-07-08 19:59:23 —-D—- C:Program FilesClearProg
2009-07-08 19:45:24 —-D—- C:Program FilesCCleaner
2009-07-08 19:37:39 —-D—- C:Program FilesTrend Micro
2009-07-08 06:48:32 —-A—- C:WINDOWSsystem32winhelper.dll
2009-07-06 21:11:33 —-A—- C:WINDOWSsystem32VModes.exe
2009-06-23 15:39:21 —-A—- C:WINDOWSsystem32msonpmon.dll
2009-06-23 15:35:35 —-D—- C:Program FilesMicrosoft Works
2009-06-23 15:35:20 —-D—- C:Program FilesMSBuild
2009-06-23 15:34:47 —-D—- C:Program FilesCommon FilesDESIGNER
2009-06-23 15:33:48 —-D—- C:Program FilesMicrosoft.NET
2009-06-23 15:27:49 —-D—- C:Documents and SettingsAll UsersApplication DataMicrosoft Help
2009-06-23 15:26:40 —-RHD—- C:MSOCache
2009-06-22 19:21:31 —-A—- C:WINDOWSsystem32MSIVXfmwvojnbsbhdrxuswbprdradjecbrnpn.dll
2009-06-21 22:57:26 —-D—- C:Documents and SettingsPavelApplication Datavlc
2009-06-21 22:48:33 —-D—- C:Program FilesFLV Player
2009-06-21 15:42:28 —-D—- C:Program FilesJRE
2009-06-21 15:37:03 —-A—- C:WINDOWSsystem32javaws.exe
2009-06-21 15:37:03 —-A—- C:WINDOWSsystem32javaw.exe
2009-06-21 15:37:03 —-A—- C:WINDOWSsystem32java.exe
2009-06-18 06:13:35 —-D—- C:Program Filesteamwork
2009-06-12 23:44:04 —-D—- C:Documents and SettingsPavelApplication DataBalsamiqMockupsForDesktop.EDE15CF69E11F7F7D45B5430C7D37CC6C3545E3C.1
2009-06-12 23:43:57 —-D—- C:Program FilesBalsamiq Mockups
2009-06-12 23:37:49 —-D—- C:Program FilesCommon FilesAdobe AIR======List of files/folders modified in the last 1 months======
2009-07-08 20:30:41 —-D—- C:Documents and SettingsPavelApplication DatauTorrent
2009-07-08 20:25:51 —-D—- C:Program FilesMozilla Firefox 3.1 Beta 2
2009-07-08 20:24:33 —-D—- C:WINDOWS
2009-07-08 20:18:13 —-D—- C:WINDOWSTemp
2009-07-08 20:18:10 —-D—- C:WINDOWSsystem32CatRoot2
2009-07-08 20:14:44 —-D—- C:WINDOWSsystem32
2009-07-08 20:06:00 —-N—- C:WINDOWSSchedLgU.Txt
2009-07-08 19:59:23 —-RD—- C:Program Files
2009-07-08 19:55:24 —-SHD—- C:WINDOWSInstaller
2009-07-08 19:55:06 —-D—- C:WINDOWSHelp
2009-07-08 19:53:42 —-HD—- C:Config.Msi
2009-07-08 19:53:42 —-D—- C:WINDOWSsystem32Setup
2009-07-08 19:53:42 —-D—- C:Program FilesCommon Files
2009-07-08 19:48:00 —-D—- C:WINDOWSDebug
2009-07-08 19:31:58 —-D—- C:WINDOWSPrefetch
2009-07-08 17:38:31 —-D—- C:Program FilesJIRA-Enterprise-3.13.3
2009-07-08 17:24:14 —-ASH—- C:boot.ini
2009-07-08 17:24:14 —-A—- C:WINDOWSwin.ini
2009-07-08 17:24:14 —-A—- C:WINDOWSsystem.ini
2009-07-08 16:19:16 —-D—- C:WINDOWSsystem32drivers
2009-07-07 21:27:46 —-D—- C:Documents and SettingsPavelApplication DataSkype
2009-07-07 15:25:11 —-D—- C:Program FilesMozilla Firefox
2009-07-06 21:13:09 —-HD—- C:WINDOWSinf
2009-07-06 21:13:09 —-D—- C:WINDOWSsystem32CatRoot
2009-07-06 21:13:07 —-HD—- C:Program FilesInstallShield Installation Information
2009-07-06 20:35:12 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-07-06 19:47:17 —-SD—- C:Documents and SettingsPavelApplication DataMicrosoft
2009-07-06 14:35:17 —-D—- C:Documents and SettingsPavelApplication DataAdobe
2009-07-06 14:35:17 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2009-07-04 03:55:49 —-SHD—- C:RECYCLER
2009-07-01 19:57:22 —-D—- C:Program FilesDownload Master
2009-06-30 19:52:50 —-SD—- C:WINDOWSTasks
2009-06-29 22:24:37 —-A—- C:WINDOWSNeroDigital.ini
2009-06-24 21:29:41 —-D—- C:Documents and SettingsPavelApplication Datadvdcss
2009-06-23 15:42:24 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2009-06-23 15:41:59 —-D—- C:WINDOWSSHELLNEW
2009-06-23 15:35:03 —-D—- C:Program FilesMicrosoft Office
2009-06-23 15:34:08 —-RSD—- C:WINDOWSFonts
2009-06-23 15:32:47 —-D—- C:WINDOWSpchealth
2009-06-21 15:42:27 —-D—- C:Program FilesOpenOffice.org 3
2009-06-21 15:36:46 —-A—- C:WINDOWSsystem32deploytk.dll
2009-06-21 15:36:42 —-D—- C:Program FilesJava
2009-06-20 23:35:23 —-DC—- C:WINDOWSsystem32DRVSTORE
2009-06-20 18:53:31 —-D—- C:Program FilesGoogle
2009-06-17 20:09:58 —-A—- C:WINDOWSiproconf.INI
2009-06-17 10:26:23 —-D—- C:Program FilesQIP
2009-06-16 09:53:00 —-D—- C:Program FilesMozilla Firefox 3
2009-06-15 23:18:05 —-D—- C:Documents and Settings
2009-06-15 14:10:00 —-D—- C:Program FilesNotepad++
2009-06-12 22:12:20 —-D—- C:Documents and SettingsPavelApplication DataFileZilla======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK8;AMD Processor Driver; C:WINDOWSsystem32DRIVERSAmdK8.sys [2005-03-09 36352]
R1 avgio;avgio; ??C:Program FilesAviraAntiVir Desktopavgio.sys []
R1 avipbb;avipbb; C:WINDOWSsystem32DRIVERSavipbb.sys [2009-03-30 96104]
R1 Ext2fs;Ext2fs; C:WINDOWSsystem32DRIVERSext2fs.sys [2008-01-20 179584]
R1 IfsMount;IfsMount; C:WINDOWSsystem32DRIVERSifsmount.sys [2007-12-29 49536]
R1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2004-08-17 14848]
R1 ssmdrv;ssmdrv; C:WINDOWSsystem32DRIVERSssmdrv.sys [2009-06-09 28520]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2001-10-20 12032]
R2 {95808DC4-FA4A-4C74-92FE-5B863F82066B};{95808DC4-FA4A-4C74-92FE-5B863F82066B}; ??C:Program FilesCyberLinkPowerDVD 00.fcl []
R2 avgntflt;avgntflt; C:WINDOWSsystem32DRIVERSavgntflt.sys [2009-03-24 55640]
R2 tifsfilter;Acronis TrueImage FS Filter; C:WINDOWSsystem32DRIVERStifsfilt.sys [2006-11-20 28096]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:WINDOWSsystem32DRIVERSfetnd5b.sys [2004-04-15 42496]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2001-10-20 9600]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-20 12160]
R3 pfc;Padus ASPI Shell; C:WINDOWSsystem32driverspfc.sys [2005-11-03 10368]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WINDOWSSystem32DriversRootMdm.sys [2001-10-20 5888]
R3 usbaudio;Аудио драйвер USB (WDM); C:WINDOWSsystem32driversusbaudio.sys [2004-08-03 59264]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-03 31616]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-03 26624]
R3 usbhub;Драйвер стандартного концентратора USB (Microsoft); C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-03 57600]
R3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2004-08-04 25856]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2004-08-03 20480]
R3 usbvideo;USB-видеоустройство (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2004-08-03 78464]
R3 VComm;Virtual Serial port driver; C:WINDOWSsystem32DRIVERSVComm.sys [2004-10-19 61312]
R3 VcommMgr;Bluetooth VComm Manager Service; C:WINDOWSSystem32DriversVcommMgr.sys [2004-11-05 82148]
R3 viagfx;viagfx; C:WINDOWSsystem32DRIVERSvtmini.sys [2005-12-27 247040]
R3 VIAudio;Vinyl AC’97 Audio Controller (WDM); C:WINDOWSsystem32driversvinyl97.sys [2005-08-03 202112]
S3 AKSIFDH;Aladdin IFD Handler; C:WINDOWSsystem32DRIVERSaksifdh.sys [2006-01-22 90346]
S3 AKSUP;AKSUP; C:WINDOWSsystem32driversaksup.sys [2006-01-22 34406]
S3 ASPI;Advanced SCSI Programming Interface Driver; ??C:WINDOWSSystem32DRIVERSASPI32.sys []
S3 BlueletAudio;Bluetooth Audio Service; C:WINDOWSsystem32DRIVERSblueletaudio.sys [2004-10-19 20096]
S3 BT;Bluetooth PAN Network Adapter; C:WINDOWSsystem32DRIVERSbtnetdrv.sys [2004-09-21 10804]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:WINDOWSSystem32Driversbtcusb.sys [2004-12-01 22488]
S3 BthEnum;Драйвер блока запроса Bluetooth; C:WINDOWSsystem32DRIVERSBthEnum.sys [2004-08-04 17024]
S3 BTHidEnum;Bluetooth HID Enumerator; C:WINDOWSsystem32DRIVERSvbtenum.sys [2004-09-21 11604]
S3 BthPan;Bluetooth Device (Personal Area Network); C:WINDOWSsystem32DRIVERSbthpan.sys [2004-08-04 100992]
S3 BTHPORT;Драйвер порта Bluetooth; C:WINDOWSSystem32DriversBTHport.sys [2004-08-17 274688]
S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:WINDOWSSystem32DriversBTHUSB.sys [2004-08-04 18944]
S3 C7xxUSB;Samsung CMC7xx USB Network Driver; C:WINDOWSsystem32DRIVERSC7xUSBX3.sys [2008-06-26 35840]
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2004-08-04 17024]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSfetnd5.sys [2001-08-18 27165]
S3 FilterService;UVC Filter Service; C:WINDOWSsystem32DRIVERSlvuvcflt.sys []
S3 ggflt;SEMC USB Flash Driver Filter; C:WINDOWSsystem32DRIVERSggflt.sys [2008-06-04 13352]
S3 ggsemc;SEMC USB Flash Driver; C:WINDOWSsystem32DRIVERSggsemc.sys [2008-06-04 21672]
S3 GMSIPCI;GMSIPCI; ??H:INSTALLGMSIPCI.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2005-10-28 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2005-10-28 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2005-10-28 21568]
S3 LVRS;Logitech RightSound Filter Driver; C:WINDOWSsystem32DRIVERSlvrs.sys []
S3 LVUSBSta;Logitech USB Monitor Filter; C:WINDOWSsystem32driversLVUSBSta.sys []
S3 LVUVC;Logitech QuickCam E3500(UVC); C:WINDOWSsystem32DRIVERSlvuvc.sys []
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2004-08-04 10880]
S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:WINDOWSsystem32DRIVERSrfcomm.sys [2004-08-04 59648]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:WINDOWSsystem32DRIVERSs116bus.sys [2007-04-03 83336]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:WINDOWSsystem32DRIVERSs116mdfl.sys [2007-04-03 15112]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:WINDOWSsystem32DRIVERSs116mdm.sys [2007-04-03 108680]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:WINDOWSsystem32DRIVERSs116mgmt.sys [2007-04-03 100488]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:WINDOWSsystem32DRIVERSs116nd5.sys [2007-04-03 23176]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:WINDOWSsystem32DRIVERSs116obex.sys [2007-04-03 98696]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:WINDOWSsystem32DRIVERSs116unic.sys [2007-04-03 99080]
S3 s3017bus;Sony Ericsson Device 3017 driver (WDM); C:WINDOWSsystem32DRIVERSs3017bus.sys [2007-12-10 83880]
S3 s3017mdfl;Sony Ericsson Device 3017 USB WMC Modem Filter; C:WINDOWSsystem32DRIVERSs3017mdfl.sys [2007-12-10 15016]
S3 s3017mdm;Sony Ericsson Device 3017 USB WMC Modem Driver; C:WINDOWSsystem32DRIVERSs3017mdm.sys [2007-12-10 110632]
S3 s3017mgmt;Sony Ericsson Device 3017 USB WMC Device Management Drivers (WDM); C:WINDOWSsystem32DRIVERSs3017mgmt.sys [2007-12-10 104616]
S3 s3017nd5;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (NDIS); C:WINDOWSsystem32DRIVERSs3017nd5.sys [2007-12-10 25512]
S3 s3017obex;Sony Ericsson Device 3017 USB WMC OBEX Interface; C:WINDOWSsystem32DRIVERSs3017obex.sys [2007-12-10 100648]
S3 s3017unic;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (WDM); C:WINDOWSsystem32DRIVERSs3017unic.sys [2007-12-10 110120]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2004-08-04 15360]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2004-08-03 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-03 26496]
S3 Wdf01000;Wdf01000; C:WINDOWSsystem32DRIVERSWdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:WINDOWSSystem32Driverswpdusb.sys [2005-01-28 18944]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2004-08-04 19328]
S4 dwshd;dwshd; C:WINDOWSSystem32driversdwshd.sys []
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
S4 sr;Драйвер фильтра восстановления системы; C:WINDOWSsystem32DRIVERSsr.sys [2004-08-17 73472]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2006-11-20 122880]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:Program FilesAviraAntiVir Desktopsched.exe [2009-06-09 108289]
R2 AntiVirService;Avira AntiVir Guard; C:Program FilesAviraAntiVir Desktopavguard.exe [2009-06-09 185089]
R2 BthServ;Bluetooth Support Service; C:WINDOWSsystem32svchost.exe [2004-08-17 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2009-06-21 152984]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-20 322120]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSsystem32HPZipm12.exe [2005-03-14 69632]
R2 Sec16eService;Sec16e service agent; C:Program Files\Samsung ElectronicsSec16eAgentSec16eAgent.exe [2008-06-21 20480]
R2 teamwork8080;Teamwork-8080; C:Program Filesteamworkbintomcat6.exe [2009-06-05 57344]
R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912]
S2 gupdate1c9f1b6d4b29006;Google Update Service (gupdate1c9f1b6d4b29006); C:Program FilesGoogleUpdateGoogleUpdate.exe [2009-02-11 133104]
S3 Adobe LM Service;Adobe LM Service; C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe [2007-05-15 72704]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv1.1.4322aspnet_state.exe [2004-07-15 32768]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
EOF
Здравствуйте, добро пожаловать на Spyware-ru форум.
Ваш компьютер так же заражён autorun.inf трояном.
Прочитайте эту инструкцию Flash_Disinfector ещё одно оружие против autorun.inf троянов.* Отключите ваш антивирус.
* Скачайте и запустите Flash_Disinfector.
* По требованию программы вставьте ваш флэш диск или подключите другие внешние устройства хранения информации.Примечание: запускайте программу столько раз, сколько нужно чтобы очистить все ваши подключаемые диски.
Прочитайте описание программы Malwarebytes Anti-malware (MBAM).
Скачайте и выполните сканирование вашего компьютера. Удалите всё что будет найдено. В конце работы будет показан лог.Жду от вас MBAM лог + свежий RSIT лог.
- Для ответа в этой теме необходимо авторизоваться.
