- This topic has 1 ответ, 2 участника, and was last updated 16 years назад by
.
-
Сообщения
-
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Пользователь at 2009-10-21 18:23:49
Microsoft Windows XP Professional Service Pack 2
System drive C: has 34 GB (44%) free of 76 GB
Total RAM: 255 MB (13% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:24:01, on 21/10/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:WINDOWSExplorer.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSSOUNDMAN.EXE
C:Program FilesJavajre1.6.0_01binjusched.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:WINDOWSTempwpv871255703227.exe
C:Program FilesMessengermsmsgs.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Documents and SettingsПользовательApplication Dataseres.exe
C:Documents and SettingsПользовательApplication Datasvcst.exe
C:Documents and SettingsПользовательApplication DataQlikworldRSSReaderRSSReader.exe
C:WINDOWSsystem32restorer64_a.exe
C:Documents and SettingsПользовательrestorer64_a.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:INSTALLCachemanXPCachemanXP.exe
C:Program FilesAheadInCDInCDsrv.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:WINDOWSsystem32wscntfy.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:WINDOWSsystem32wuauclt.exe
C:Documents and SettingsПользовательРабочий столRSIT.exe
C:Program Filestrend microПользователь.exeR1 — HKCUSoftwareMicrosoftInternet ExplorerMain,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://search.bearshare.com/intl/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Nnueee
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: BearShare MediaBar — {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} — C:Program FilesBearShare ApplicationsBearShare MediaBarBSMediaBar.dll (file missing)
R3 — URLSearchHook: Yahoo! Toolbar — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — (no file)
F2 — REG:system.ini: Shell=Explorer.exe rundll32.exe cpcp.cpo bef0regiiav
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — C:PROGRA~1SkypePhoneIEPluginSKYPEI~1.DLL
O2 — BHO: UrlHelper Class — {6D023EBF-70B8-45A6-9ED5-556515FA0FE4} — C:Program FilesBearShare ApplicationsBearShare MediaBarBearShareIEHelper.dll (file missing)
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_01binssv.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.3.4501.1418swg.dll
O2 — BHO: NavHelper Class — {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} — C:Program FilesNavExcelNavHelperv2.0.4dNHelper.dll
O2 — BHO: Google Dictionary Compression sdch — {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_B7C5AC242193BB3E.dll
O3 — Toolbar: BearShare MediaBar — {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} — C:Program FilesBearShare ApplicationsBearShare MediaBarBSMediaBar.dll (file missing)
O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O4 — HKLM..Run: [AnimatedWallpaper] C:Program Files3d Animated WallpaperAnimWallpaper.exe
O4 — HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 — HKLM..Run: [NeroCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [InCD] C:Program FilesAheadInCDInCD.exe
O4 — HKLM..Run: [BO1HelperStartUp] C:PROGRA~1BUTTER~1BO1HEL~1.EXE /partner BO1
O4 — HKLM..Run: [AQ3HelperStartUp] C:PROGRA~1AQUATI~1AQ3HEL~1.EXE /partner AQ3
O4 — HKLM..Run: [navapp] C:Program FilesNavExcelNavHelperv2.0.4dnavapp.exe
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre1.6.0_01binjusched.exe»
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 — HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 — HKLM..Run: [Malwarebytes Anti-Malware (reboot)] «C:Program FilesMalwarebytes’ Anti-Malwarembam.exe» /runcleanupscript
O4 — HKLM..Run: [sysgif32] C:WINDOWSTempwpv871255703227.exe
O4 — HKLM..Run: [restorer64_a] C:WINDOWSsystem32restorer64_a.exe
O4 — HKLM..Run: [Regedit32] C:WINDOWSsystem32regedit.exe
O4 — HKCU..Run: [MSMSGS] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [swg] «C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe»
O4 — HKCU..Run: [MyWebSearch Email Plugin] C:PROGRA~1MYWEBS~1bar1.binmwsoemon.exe
O4 — HKCU..Run: [restorer64_a] C:Documents and SettingsIieuciaaoaeurestorer64_a.exe
O4 — HKCU..Run: [mserv] C:Documents and SettingsIieuciaaoaeuApplication Dataseres.exe
O4 — HKCU..Run: [svchost] C:Documents and SettingsIieuciaaoaeuApplication Datasvcst.exe
O4 — HKCU..Run: [RssReader] «C:Documents and SettingsIieuciaaoaeuApplication DataQlikworldRSSReaderRSSReader.exe» /Autostart
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O8 — Extra context menu item: E&xport to Microsoft Excel — res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_01binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_01binssv.dll
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:PROGRA~1SkypePhoneIEPluginSKYPEI~1.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O16 — DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) — http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1205860494953
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 — HKLMSystemCCSServicesTcpip..{F432F95C-1D24-4F32-9C05-6998392EE3A6}: NameServer = 87.246.135.130
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: avast! Antivirus — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: CachemanXP (CachemanXPService) — OuterTechnologies — C:INSTALLCachemanXPCachemanXP.exe
O23 — Service: ?o?iae niauoee (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Neo?aa COM caiene eiiiaeo-aeneia IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: InCD Helper (InCDsrv) — AHEAD Software — C:Program FilesAheadInCDInCDsrv.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: My Web Search Service (MyWebSearchService) — Unknown owner — C:PROGRA~1MYWEBS~1bar1.binmwssvc.exe (file missing)
O23 — Service: NNServ — Unknown owner — C:Program FilesNewDotNetnnrun.exe (file missing)
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Aeniao?a? naaina ni?aaee aey oaaeaiiiai ?aai?aai noiea (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Nia?o-ea?ou (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: ?o?iaeu e iiiaauaiey i?iecaiaeoaeuiinoe (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Oaiaaia eiie?iaaiea oiia (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Aaaioa? i?iecaiaeoaeuiinoe WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe
O24 — Desktop Component 0: (no name) — http://www.mobilais.lv/pics/376.jpg
O24 — Desktop Component 1: (no name) — http://c3.one.lv/res/images/title-icons/profile-o.gif—
End of file — 10514 bytes======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-22 62080][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) — C:PROGRA~1SkypePhoneIEPluginSKYPEI~1.DLL [2007-01-12 726568][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{6D023EBF-70B8-45A6-9ED5-556515FA0FE4}]
UrlHelper Class — C:Program FilesBearShare ApplicationsBearShare MediaBarBearShareIEHelper.dll [][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_01binssv.dll [2007-03-14 501400][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2009-09-21 256112][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.3.4501.1418swg.dll [2009-10-02 762864][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C1E58A84-95B3-4630-B8C2-D06B77B7A0FC}]
NavHelper Class — C:Program FilesNavExcelNavHelperv2.0.4dNHelper.dll [2004-12-08 151552][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_B7C5AC242193BB3E.dll [2009-09-21 458736][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} — BearShare MediaBar — C:Program FilesBearShare ApplicationsBearShare MediaBarBSMediaBar.dll []
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2009-09-21 256112][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«AnimatedWallpaper»=C:Program Files3d Animated WallpaperAnimWallpaper.exe []
«SoundMan»=C:WINDOWSSOUNDMAN.EXE [2004-01-09 65536]
«NeroCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«InCD»=C:Program FilesAheadInCDInCD.exe [2003-10-14 1224754]
«BO1HelperStartUp»=C:PROGRA~1BUTTER~1BO1HEL~1.EXE /partner BO1 []
«AQ3HelperStartUp»=C:PROGRA~1AQUATI~1AQ3HEL~1.EXE /partner AQ3 []
«navapp»=C:Program FilesNavExcelNavHelperv2.0.4dnavapp.exe []
«SunJavaUpdateSched»=C:Program FilesJavajre1.6.0_01binjusched.exe [2007-03-14 83608]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-01-11 39792]
«KernelFaultCheck»=C:WINDOWSsystem32dumprep 0 -k []
«avast!»=C:PROGRA~1ALWILS~1Avast4ashDisp.exe [2009-09-15 81000]
«Malwarebytes Anti-Malware (reboot)»=C:Program FilesMalwarebytes’ Anti-Malwarembam.exe /runcleanupscript []
«sysgif32″=C:WINDOWSTempwpv871255703227.exe [2009-10-21 21504]
«restorer64_a»=C:WINDOWSsystem32restorer64_a.exe [2009-10-21 58729]
«Regedit32″=C:WINDOWSsystem32regedit.exe [][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«MSMSGS»=C:Program FilesMessengermsmsgs.exe [2004-10-13 1694208]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2004-08-17 15360]
«swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-03-29 39408]
«MyWebSearch Email Plugin»=C:PROGRA~1MYWEBS~1bar1.binmwsoemon.exe []
«restorer64_a»=C:Documents and SettingsПользовательrestorer64_a.exe [2009-10-21 58729]
«mserv»=C:Documents and SettingsПользовательApplication Dataseres.exe [2009-10-21 45056]
«svchost»=C:Documents and SettingsПользовательApplication Datasvcst.exe [2009-10-21 45056]
«RssReader»=C:Documents and SettingsПользовательApplication DataQlikworldRSSReaderRSSReader.exe [2007-09-21 1878016]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Adobe Gamma Loader.exe.lnk — C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
Microsoft Office.lnk — C:Program FilesMicrosoft OfficeOffice10OSA.EXEC:Documents and SettingsПользовательГлавное менюПрограммыАвтозагрузка
zavupd32.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=FF000000[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesMessengermsmsgs.exe»=»C:Program FilesMessengermsmsgs.exe:*:Enabled:Windows Messenger»
«C:Program Filesutorrentutorrent.exe»=»C:Program Filesutorrentutorrent.exe:*:Enabled:µTorrent»
«C:Program FilesBearShareBearShare.exe»=»C:Program FilesBearShareBearShare.exe:*:Enabled:BearShare»
«C:Documents and SettingsПользовательРабочий столutorrent.exe»=»C:Documents and SettingsПользовательРабочий столutorrent.exe:*:Enabled:µTorrent»
«C:Program FilesBearShare ApplicationsBearShareBearShare.exe»=»C:Program FilesBearShare ApplicationsBearShareBearShare.exe:*:Enabled:BearShare»
«C:Program FilesIVT CorporationBlueSoleilBlueSoleil.exe»=»C:Program FilesIVT CorporationBlueSoleilBlueSoleil.exe:*:Enabled:BlueSoleil»
«C:Program FilesDC++DCPlusPlus.exe»=»C:Program FilesDC++DCPlusPlus.exe:*:Enabled:DC++»
«C:Program FilesRevConnectDCPlusPlus.exe»=»C:Program FilesRevConnectDCPlusPlus.exe:*:Enabled:DC++»
«C:Program FilesTeam17 Software LtdWorms FortsWF.exe»=»C:Program FilesTeam17 Software LtdWorms FortsWF.exe:*:Enabled:WF»
«C:Program FilesBitTorrent++BT++.exe»=»C:Program FilesBitTorrent++BT++.exe:*:Enabled:BT++»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesCS Source Русский Спецназhl2.exe»=»C:Program FilesCS Source Русский Спецназhl2.exe:*:Enabled:hl2»
«C:Program FilesCounter-Strike 1.6hl.exe»=»C:Program FilesCounter-Strike 1.6hl.exe:*:Disabled:Half-Life Launcher»
«C:Program FilesCounter-Strike Sourcehl2.exe»=»C:Program FilesCounter-Strike Sourcehl2.exe:*:Disabled:hl2»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»
«C:WINDOWSTempwpv861255703227.exe»=»C:WINDOWSTempwpv861255703227.exe:*:Enabled:services»
«C:WINDOWSTempwpv451255703227.exe»=»C:WINDOWSTempwpv451255703227.exe:*:Enabled:services»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»======List of files/folders created in the last 1 months======
2009-10-21 18:18:46 —-A—- C:Documents and SettingsПользовательApplication Datalizkavd.exe
2009-10-21 17:58:18 —-A—- C:Documents and SettingsПользовательApplication Datasvcst.exe
2009-10-21 17:58:12 —-A—- C:Documents and SettingsПользовательApplication Dataseres.exe
2009-10-21 17:57:11 —-A—- C:WINDOWSsystem32restorer64_a.exe
2009-10-21 17:39:47 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2009-10-21 17:05:52 —-D—- C:Program Filestrend micro
2009-10-21 17:05:45 —-D—- C:rsit
2009-10-21 15:58:20 —-D—- C:Documents and SettingsПользовательApplication DataMalwarebytes
2009-10-21 15:57:57 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-10-20 20:39:21 —-A—- C:WINDOWSgamo.com
2009-10-20 20:39:21 —-A—- C:Program FilesCommon Filesrogepedo.vbs
2009-10-20 20:39:20 —-A—- C:Program FilesCommon Filesfedes.com
2009-10-20 20:39:18 —-A—- C:Documents and SettingsAll UsersApplication Dataapegyq.vbs
2009-10-20 20:39:17 —-A—- C:Documents and SettingsПользовательApplication Datajyjedoheg.exe
2009-10-20 18:53:35 —-A—- C:WINDOWSsystem32aswBoot.exe
2009-10-20 18:53:28 —-D—- C:Program FilesAlwil Software
2009-10-17 13:11:44 —-A—- C:WINDOWSsystem32d3dx10_40.dll
2009-10-17 13:11:44 —-A—- C:WINDOWSsystem32D3DCompiler_40.dll
2009-10-17 13:11:43 —-A—- C:WINDOWSsystem32D3DX9_40.dll
2009-10-17 13:11:42 —-A—- C:WINDOWSsystem32XAudio2_3.dll
2009-10-17 13:11:42 —-A—- C:WINDOWSsystem32XAPOFX1_2.dll
2009-10-17 13:11:41 —-A—- C:WINDOWSsystem32XAPOFX1_1.dll
2009-10-17 13:11:41 —-A—- C:WINDOWSsystem32xactengine3_3.dll
2009-10-17 13:11:41 —-A—- C:WINDOWSsystem32X3DAudio1_5.dll
2009-10-17 13:11:40 —-A—- C:WINDOWSsystem32XAudio2_2.dll
2009-10-17 13:11:40 —-A—- C:WINDOWSsystem32xactengine3_2.dll
2009-10-17 13:11:39 —-A—- C:WINDOWSsystem32D3DX9_39.dll
2009-10-17 13:11:39 —-A—- C:WINDOWSsystem32d3dx10_39.dll
2009-10-17 13:11:39 —-A—- C:WINDOWSsystem32D3DCompiler_39.dll
2009-10-17 13:11:38 —-A—- C:WINDOWSsystem32XAudio2_1.dll
2009-10-17 13:11:38 —-A—- C:WINDOWSsystem32XAPOFX1_0.dll
2009-10-17 13:11:37 —-A—- C:WINDOWSsystem32xactengine3_1.dll
2009-10-17 13:11:37 —-A—- C:WINDOWSsystem32X3DAudio1_4.dll
2009-10-17 13:11:36 —-A—- C:WINDOWSsystem32d3dx10_38.dll
2009-10-17 13:11:36 —-A—- C:WINDOWSsystem32D3DCompiler_38.dll
2009-10-17 13:11:35 —-A—- C:WINDOWSsystem32D3DX9_38.dll
2009-10-17 13:11:34 —-A—- C:WINDOWSsystem32XAudio2_0.dll
2009-10-17 13:11:34 —-A—- C:WINDOWSsystem32xactengine3_0.dll
2009-10-17 13:11:33 —-A—- C:WINDOWSsystem32X3DAudio1_3.dll
2009-10-17 13:11:33 —-A—- C:WINDOWSsystem32d3dx10_37.dll
2009-10-17 13:11:33 —-A—- C:WINDOWSsystem32D3DCompiler_37.dll
2009-10-17 13:11:31 —-A—- C:WINDOWSsystem32xactengine2_10.dll
2009-10-17 13:11:30 —-A—- C:WINDOWSsystem32d3dx9_36.dll
2009-10-17 13:11:30 —-A—- C:WINDOWSsystem32d3dx10_36.dll
2009-10-17 13:11:30 —-A—- C:WINDOWSsystem32D3DCompiler_36.dll
2009-10-17 13:11:29 —-A—- C:WINDOWSsystem32xactengine2_9.dll
2009-10-17 13:11:28 —-A—- C:WINDOWSsystem32d3dx9_35.dll
2009-10-17 13:11:28 —-A—- C:WINDOWSsystem32d3dx10_35.dll
2009-10-17 13:11:28 —-A—- C:WINDOWSsystem32D3DCompiler_35.dll
2009-10-17 13:11:27 —-A—- C:WINDOWSsystem32xactengine2_8.dll
2009-10-17 13:11:27 —-A—- C:WINDOWSsystem32X3DAudio1_2.dll
2009-10-17 13:11:26 —-A—- C:WINDOWSsystem32d3dx9_34.dll
2009-10-17 13:11:26 —-A—- C:WINDOWSsystem32d3dx10_34.dll
2009-10-17 13:11:26 —-A—- C:WINDOWSsystem32D3DCompiler_34.dll
2009-10-17 13:11:24 —-A—- C:WINDOWSsystem32xactengine2_7.dll
2009-10-17 13:11:23 —-A—- C:WINDOWSsystem32d3dx10_33.dll
2009-10-17 13:11:23 —-A—- C:WINDOWSsystem32D3DCompiler_33.dll
2009-10-17 13:11:21 —-A—- C:WINDOWSsystem32d3dx9_33.dll
2009-10-17 13:10:52 —-D—- C:WINDOWSLogs
2009-10-17 13:02:43 —-D—- C:Program FilesDisney Interactive Studios
2009-09-26 11:20:12 —-D—- C:Program FilesGTA San Andreas
2009-09-26 11:04:06 —-D—- C:Program FilesRockstar Games
2009-09-26 09:23:33 —-A—- C:error.txt
2009-09-25 18:25:11 —-D—- C:SKACENO
2009-09-25 18:25:10 —-D—- C:ZAKONCENNIE TORENTI======List of files/folders modified in the last 1 months======
2009-10-21 18:22:46 —-D—- C:Program FilesMozilla Firefox
2009-10-21 18:21:28 —-D—- C:WINDOWSTemp
2009-10-21 18:17:06 —-D—- C:WINDOWS
2009-10-21 18:17:06 —-D—- C:Program FilesCommon Files
2009-10-21 18:17:06 —-D—- C:Program Files
2009-10-21 18:16:31 —-A—- C:WINDOWSSchedLgU.Txt
2009-10-21 18:15:20 —-D—- C:WINDOWSsystem32drivers
2009-10-21 18:13:37 —-SHD—- C:WINDOWSInstaller
2009-10-21 18:10:45 —-D—- C:Program FilesNorton Security Scan
2009-10-21 18:10:45 —-D—- C:Documents and SettingsAll UsersApplication DataNorton
2009-10-21 18:10:37 —-SD—- C:WINDOWSTasks
2009-10-21 17:57:11 —-D—- C:WINDOWSsystem32
2009-10-21 17:25:27 —-HD—- C:Program FilesInstallShield Installation Information
2009-10-21 16:30:38 —-D—- C:Program FilesInternet Explorer
2009-10-21 15:36:35 —-D—- C:WINDOWSsystem32CatRoot2
2009-10-21 13:23:45 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-10-20 22:05:53 —-A—- C:WINDOWSSystem.ini
2009-10-20 21:41:55 —-D—- C:WINDOWSMinidump
2009-10-20 20:53:26 —-D—- C:WINDOWSsystem32config
2009-10-20 20:41:58 —-D—- C:WINDOWSPrefetch
2009-10-20 14:53:20 —-D—- C:Documents and SettingsПользовательApplication DatauTorrent
2009-10-17 13:11:47 —-D—- C:WINDOWSsystem32DirectX
2009-10-17 13:11:44 —-HD—- C:WINDOWSinf
2009-10-17 10:10:59 —-D—- C:Torent
2009-10-09 18:01:22 —-D—- C:Program FilesCommon FilesSymantec Shared======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2009-09-15 27408]
R1 aswSP;avast! Self Protection; C:WINDOWSsystem32driversaswSP.sys [2009-09-15 114768]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2009-09-15 52368]
R1 InCDPass;InCDPass; C:WINDOWSSystem32DRIVERSInCDPass.sys [2003-10-14 28688]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2004-08-17 40448]
R1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2004-08-17 14848]
R1 prodrv06;StarForce Protection Environment Driver v6; C:WINDOWSSystem32driversprodrv06.sys [2003-07-15 51264]
R2 Aspi32;Aspi32; C:WINDOWSSystem32driversaspi32.sys [2007-09-17 16512]
R2 aswFsBlk;aswFsBlk; C:WINDOWSsystem32DRIVERSaswFsBlk.sys [2009-09-15 20560]
R2 aswMon2;avast! Standard Shield Support; C:WINDOWSsystem32driversaswMon2.sys [2009-09-15 94160]
R2 SetupNT;SetupNT; C:WINDOWSsystem32SetupNT.sys [2000-10-25 3000]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:WINDOWSsystem32driversALCXSENS.SYS [2003-12-12 391424]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2004-01-10 601100]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2009-09-15 23152]
R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2001-08-17 9600]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSRTL8139.SYS [2004-08-04 20992]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-03 31616]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-04 26624]
R3 usbhub;Драйвер стандартного концентратора USB (Microsoft); C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-04 57600]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2004-08-04 20480]
R4 InCDfs;InCD File System; C:WINDOWSsystem32driversInCDfs.sys [2003-10-14 88352]
S3 BlueletAudio;Bluetooth Audio Service; C:WINDOWSsystem32DRIVERSblueletaudio.sys [2004-10-19 20096]
S3 BT;Bluetooth PAN Network Adapter; C:WINDOWSsystem32DRIVERSbtnetdrv.sys [2004-09-21 10804]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:WINDOWSSystem32Driversbtcusb.sys [2005-01-17 23000]
S3 BTHidEnum;Bluetooth HID Enumerator; C:WINDOWSsystem32DRIVERSvbtenum.sys [2005-01-13 12500]
S3 BTNetFilter;Bluetooth Network Filter; ??C:WINDOWSsystem32driversBTNetFilter.sys []
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2004-08-04 17024]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2004-08-04 10880]
S3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2004-08-04 1897408]
S3 pcouffin;VSO Software pcouffin; C:WINDOWSSystem32Driverspcouffin.sys [2008-03-27 47360]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WINDOWSSystem32DriversRootMdm.sys [2001-10-20 5888]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2004-08-04 11136]
S3 SONYPVU1;Драйвер Sony USB фильтра (SONYPVU1); C:WINDOWSsystem32DRIVERSSONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2004-08-04 15360]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-04 26496]
S3 VComm;Virtual Serial port driver; C:WINDOWSsystem32DRIVERSVComm.sys [2004-10-19 61312]
S3 VcommMgr;Bluetooth VComm Manager Service; C:WINDOWSSystem32DriversVcommMgr.sys [2004-11-05 82148]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2004-08-04 19328]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2009-09-15 18752]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2009-09-15 138680]
R2 CachemanXPService;CachemanXP; C:INSTALLCachemanXPCachemanXP.exe [2004-02-20 201728]
R2 InCDsrv;InCD Helper; C:Program FilesAheadInCDInCDsrv.exe [2003-10-14 778292]
R3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2009-09-15 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2009-09-15 352920]
S2 MyWebSearchService;My Web Search Service; C:PROGRA~1MYWEBS~1bar1.binmwssvc.exe []
S2 NNServ;NNServ; C:Program FilesNewDotNetnnrun.exe C:Program FilesNewDotNetnncore.dll ServiceStart []
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-06-01 182768]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2004-08-17 14336]
EOF
Здравствуйте, добро пожаловать на Spyware-ru форум.
Скачайте программу Combofix. Закройте все открытые окна и запустите эту программу.
После выполнения будет создан лог файл, пожалуйста вставьте его в ваш ответ.Примечание: перед использованием Combofix обязательно установите Recovery console. Как это сделать будет описано на странице, ссылку на которую я привёл выше.
- Для ответа в этой теме необходимо авторизоваться.
