- This topic has 5 ответов, 2 участника, and was last updated 15 years, 9 months назад by
.
-
Сообщения
-
При включении компьютера вылезает баннер, который невозможно закрыть. Помогите, плиз.
log.txt
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Admin at 2010-01-14 14:51:25
Microsoft Windows XP Professional Service Pack 2
System drive D: has 10 GB (24%) free of 40 GB
Total RAM: 446 MB (12% free)HijackThis download failed
======Scheduled tasks folder======
D:WINDOWStasksGoogle Software Updater.job
D:WINDOWStasksGoogleUpdateTaskMachineCore.job
D:WINDOWStasksGoogleUpdateTaskMachineUA.job======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — D:Program FilesJavajre1.6.0_03binssv.dll [2007-09-25 501136][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — d:program filesmail.rusputnikMailRuSputnik.dll [2009-03-31 680624][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — D:84A5~1DOWNLO~1dmiehlp.dll [2009-04-16 158208][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — D:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2009-09-10 256112][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — D:Program FilesGoogleGoogleToolbarNotifier5.3.4501.1418swg.dll [2009-09-21 762864][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{b4efb02b-cd4a-44b9-b5d9-aa486cdffab6}]
Radio W Toolbar — D:Program FilesRadio_WtbRad1.dll [2009-11-03 2166296][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch — D:Program FilesGoogleGoogle ToolbarComponentfastsearch_B7C5AC242193BB3E.dll [2009-09-10 458736][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — d:program filesmail.rusputnikMailRuSputnik.dll [2009-03-31 680624]
{468CD8A9-7C25-45FA-969E-3D925C689DC4} — Rambler-Ассистент — D:Program FilesRambler AssistantramblertoolbarU0.dll [2009-03-16 849392]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — D:Program FilesYandexYandexBarIEyndbar.dll [2009-07-24 5586208]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — D:ШараDownload Masterdmbar.dll [2007-11-26 180224]
{b4efb02b-cd4a-44b9-b5d9-aa486cdffab6} — Radio W Toolbar — D:Program FilesRadio_WtbRad1.dll [2009-11-03 2166296]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — D:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2009-09-10 256112][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=D:WINDOWSRTHDCPL.EXE [2007-11-06 16855552]
«Alcmtr»=D:WINDOWSALCMTR.EXE [2005-05-03 69632]
«UnlockerAssistant»=D:Program FilesUnlockerUnlockerAssistant.exe [2006-09-07 15872]
«TuneUp»=D:Program FilesCommon FilesSystem Internals 32bitsTuneUp.exe [2009-04-01 194048]
«BMISR»=D:Program FilesKYEWebMateBM.exe [2008-08-19 208896]
«MAgent»=D:Program FilesMail.RuAgentMAgent.exe [2009-03-31 6210744]
«actx.exe»=D:Program FilesMegaFonMultiFonactx.exe [2009-05-27 5458432]
«plugin»=D:Program Filesplugin.exe [2010-01-12 336896][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«VistaIcon»=D:Program FilesVistaDriveIconVistaDrv.exe [2007-07-02 132608]D:Documents and SettingsAdminГлавное менюПрограммыАвтозагрузка
avz.exe.lnk — C:avz4avz.exe
Punto Switcher.lnk — D:Program FilesYandexPunto Switcherpunto.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
D:WINDOWSsystem32Ati2evxx.dll [2007-08-22 122880][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — D:WINDOWSsystem32wpdshserviceobj.dll [2007-06-18 133632][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoSharedDocuments»=1
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{088f1528-0f37-11de-a065-0016d41dce52}]
shellAutoRuncommand — wscript.exe ..vbs
shellopencommand — wscript.exe ..vbs[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5e498884-f79b-11de-a0cd-0016d41dce52}]
shellAutoRuncommand — F:AutoRun.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5e498887-f79b-11de-a0cd-0016d41dce52}]
shellAutoRuncommand — F:AutoRun.exe======List of files/folders created in the last 1 months======
2010-01-14 14:47:20 —-D—- D:Program Filestrend micro
2010-01-14 14:47:17 —-D—- D:rsit
2010-01-13 15:44:12 —-D—- D:WINDOWSMinidump
2010-01-12 23:17:10 —-A—- D:WINDOWSsystem32netprotocol.dll
2010-01-12 23:16:38 —-A—- D:Program Filesplugin.exe
2010-01-02 15:44:37 —-A—- D:WINDOWSModemLog_HUAWEI Mobile Connect — 3G Modem.txt
2010-01-02 15:42:19 —-D—- D:Documents and SettingsAdminApplication DataMegaFon
2010-01-02 15:39:45 —-D—- D:Program FilesMegaFon
2010-01-02 15:37:59 —-D—- D:Program FilesMegaFon Internet
2010-01-02 13:29:01 —-A—- D:WINDOWSModemLog_SAMSUNG Mobile Modem.txt======List of files/folders modified in the last 1 months======
2010-01-14 14:47:20 —-RD—- D:Program Files
2010-01-14 14:40:33 —-D—- D:WINDOWSsystem32CatRoot2
2010-01-14 14:21:59 —-D—- D:Program FilesMozilla Firefox
2010-01-14 14:19:16 —-D—- D:WINDOWSsystem32drivers
2010-01-14 14:12:41 —-D—- D:WINDOWSsystem32
2010-01-14 14:12:41 —-A—- D:WINDOWSsystem32PerfStringBackup.INI
2010-01-13 15:50:06 —-D—- D:WINDOWSTemp
2010-01-13 15:49:48 —-SD—- D:WINDOWSTasks
2010-01-13 15:48:45 —-A—- D:WINDOWSSchedLgU.Txt
2010-01-13 15:44:12 —-D—- D:WINDOWS
2010-01-13 15:43:17 —-D—- D:Program FilesUnlocker
2010-01-06 22:17:21 —-D—- D:Documents and Settings
2010-01-02 15:39:55 —-SHD—- D:WINDOWSInstaller
2010-01-02 15:38:24 —-HD—- D:WINDOWSinf
2009-12-29 12:39:43 —-D—- D:Program FilesICQ6.5
2009-12-28 18:36:10 —-D—- D:WINDOWSsystem32LogFiles
2009-12-23 09:58:22 —-D—- D:WINDOWSnetwork diagnostic
2009-12-19 23:28:30 —-D—- D:Program FilesGoogle======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 StarOpen;StarOpen; D:WINDOWSsystem32driversStarOpen.sys [2006-07-24 5632]
R1 uzm3njqy;AVZ-RK Kernel Driver; ??D:WINDOWSsystem32Driversuzm3njqy.sys []
R1 WmiAcpi;Интерфейс управления для ACPI Microsoft Windows; D:WINDOWSsystem32DRIVERSwmiacpi.sys [2007-12-22 8832]
R2 Hardlock;Hardlock; ??D:WINDOWSsystem32drivershardlock.sys []
R2 rspndr;Ответчик обнаружения топологии уровня связи; D:WINDOWSsystem32DRIVERSrspndr.sys [2006-12-04 62336]
R3 ati2mtag;ati2mtag; D:WINDOWSsystem32DRIVERSati2mtag.sys [2007-08-22 2417664]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); D:WINDOWSsystem32DRIVERSCmBatt.sys [2007-12-22 14080]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; D:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-12-26 138752]
R3 hidusb;Драйвер класса HID Microsoft; D:WINDOWSsystem32DRIVERShidusb.sys [2004-08-18 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); D:WINDOWSsystem32driversRtkHDAud.sys [2007-11-14 4625408]
R3 mouhid;Драйвер мыши HID; D:WINDOWSsystem32DRIVERSmouhid.sys [2004-08-18 12160]
R3 ReallusionVirtualAudio;Reallusion Virtual Audio; D:WINDOWSsystem32DRIVERSRLVrtAuCbl.sys [2007-03-19 31616]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; D:WINDOWSsystem32DRIVERSRtnicxp.sys [2007-07-12 96384]
R3 sdbus;sdbus; D:WINDOWSsystem32DRIVERSsdbus.sys [2007-12-21 78720]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; D:WINDOWSsystem32DRIVERSusbehci.sys [2007-12-21 30208]
R3 usbhub;USB2 концентратор; D:WINDOWSsystem32DRIVERSusbhub.sys [2007-12-21 59392]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; D:WINDOWSsystem32DRIVERSusbohci.sys [2007-12-21 17152]
R3 USBSTOR;Драйвер запоминающих устройств для USB; D:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2007-12-21 26496]
S1 kbdhid;Драйвер клавиатуры HID; D:WINDOWSsystem32DRIVERSkbdhid.sys [2007-12-21 14848]
S3 AR5211;Atheros Wireless Network Adapter Service; D:WINDOWSsystem32DRIVERSar5211.sys [2007-07-26 547904]
S3 BthEnum;Драйвер блока запроса Bluetooth; D:WINDOWSsystem32DRIVERSBthEnum.sys [2007-12-21 17024]
S3 BTHMODEM;Драйвер для устройства связи по последовательному каналу Bluetooth; D:WINDOWSsystem32DRIVERSbthmodem.sys [2007-12-21 38016]
S3 BthPan;Bluetooth Device (Personal Area Network); D:WINDOWSsystem32DRIVERSbthpan.sys [2007-12-21 100992]
S3 BTHPORT;Драйвер порта Bluetooth; D:WINDOWSSystem32DriversBTHport.sys [2007-12-21 274688]
S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; D:WINDOWSSystem32DriversBTHUSB.sys [2007-12-21 18944]
S3 CCDECODE;Closed Caption декодер; D:WINDOWSsystem32DRIVERSCCDECODE.sys [2007-12-21 17024]
S3 dot4;Драйвер MS IEEE-1284.4; D:WINDOWSsystem32DRIVERSDot4.sys [2007-12-21 207360]
S3 Dot4Print;Драйвер класса принтеров для IEEE-1284.4; D:WINDOWSsystem32DRIVERSDot4Prt.sys [2001-08-17 12928]
S3 dot4usb;Dot4USB фильтр Dot4USB Filter; D:WINDOWSsystem32DRIVERSdot4usb.sys [2001-10-19 23936]
S3 HidBth;Минипорт Bluetooth HID Microsoft; D:WINDOWSsystem32DRIVERShidbth.sys [2007-12-21 25728]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; D:WINDOWSsystem32DRIVERSewusbmdm.sys [2009-06-22 102528]
S3 hwusbdev;Huawei DataCard USB PNP Device; D:WINDOWSsystem32DRIVERSewusbdev.sys [2009-06-22 100480]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; D:WINDOWSsystem32driversMSTEE.sys [2007-12-21 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; D:WINDOWSsystem32DRIVERSNABTSFEC.sys [2007-12-21 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; D:WINDOWSsystem32DRIVERSNdisIP.sys [2007-12-21 10880]
S3 nmwcd;Nokia USB Phone Parent; D:WINDOWSsystem32driversnmwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; D:WINDOWSsystem32driversnmwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; D:WINDOWSsystem32driversnmwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; D:WINDOWSsystem32driversnmwcdcm.sys [2007-02-22 12288]
S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); D:WINDOWSsystem32DRIVERSrfcomm.sys [2007-12-21 59648]
S3 SLIP;BDA Slip De-Framer; D:WINDOWSsystem32DRIVERSSLIP.sys [2007-12-21 11136]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); D:WINDOWSsystem32DRIVERSsscdbus.sys [2007-07-03 80552]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; D:WINDOWSsystem32DRIVERSsscdmdfl.sys [2007-07-03 11944]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; D:WINDOWSsystem32DRIVERSsscdmdm.sys [2007-07-03 106792]
S3 streamip;BDA IPSink; D:WINDOWSsystem32DRIVERSStreamIP.sys [2007-12-21 15360]
S3 usbaudio;Аудио драйвер USB (WDM); D:WINDOWSsystem32driversusbaudio.sys [2007-12-21 60032]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); D:WINDOWSsystem32DRIVERSusbccgp.sys [2007-12-21 31616]
S3 usbvideo;USB Video Device (WDM); D:WINDOWSSystem32Driversusbvideo.sys [2007-12-21 121856]
S3 WSTCODEC;World Standard Teletext кодек; D:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2007-12-21 19328]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; D:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-15 82688]
S4 IntelIde;IntelIde; D:WINDOWSsystem32driversIntelIde.sys []======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Ati HotKey Poller;Ati HotKey Poller; D:WINDOWSsystem32Ati2evxx.exe [2007-08-22 487424]
R2 BthServ;Bluetooth Support Service; D:WINDOWSsystem32svchost.exe [2004-08-18 14336]
R2 Netprotocol;Network Protocol Driver; D:WINDOWSsystem32svchost.exe [2004-08-18 14336]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; D:WINDOWSsystem32svchost.exe [2004-08-18 14336]
S2 gupdate1ca11487274e964;Служба Google Update (gupdate1ca11487274e964); D:Program FilesGoogleUpdateGoogleUpdate.exe [2009-07-30 133104]
S2 gusvc;Google Software Updater; D:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-07-30 190448]
S3 Adobe LM Service;Adobe LM Service; D:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe [2009-04-30 72704]
S3 aspnet_state;ASP.NET State Service; D:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; D:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2009-03-12 654848]
S3 odserv;Microsoft Office Diagnostics Service; D:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; D:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; D:Program FilesPC Connectivity SolutionServiceLayer.exe [2007-03-26 292864]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; D:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
EOF
info.txt
info.txt logfile of random’s system information tool 1.06 2010-01-14 14:51:28
======Uninstall list======
—>msiexec /package {90120000-0016-0000-0000-0000000FF1CE} /uninstall {C5060182-C90D-4314-9AE9-5C0DCF8FD1EF}
—>msiexec /package {90120000-001B-0000-0000-0000000FF1CE} /uninstall {3520B304-0EF8-475D-8C52-47ABCCC75FC6}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 D:WINDOWSINFPCHealth.inf
Adobe AIR—>d:Program FilesCommon FilesAdobe AIRVersions1.0ResourcesAdobe AIR Updater.exe -arp:uninstall
Adobe AIR—>MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Anchor Service CS3—>MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3—>MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Camera Raw 4.0—>MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps—>MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color — Photoshop Specific—>MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings—>MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Extra Settings—>MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings—>MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings—>MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3—>MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Flash Player 10 ActiveX—>D:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>D:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Fonts All—>MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Linguistics CS3—>MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files—>MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS2—>msiexec /I {236BB7C4-4419-42FD-0419-1E257A25E34D}
Adobe Photoshop CS3—>D:Program FilesCommon FilesAdobeInstallers719d6f144d0c086a0dfa7ff76bb9ac1Setup.exe
Adobe Photoshop CS3—>MsiExec.exe /I{3D7E3EC9-46CF-4359-9289-39CE01DFB82F}
Adobe Setup—>MsiExec.exe /I{FF11004C-F42A-4A31-9BCF-7F5C8FDBE53C}
Adobe Type Support—>MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3—>MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client—>MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin—>MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3—>MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
Atheros for Acer Driver 5.3.0.67_Foxconn Installation Program—>D:Program FilesInstallShield Installation Information{F70D5D8C-C1AF-40B3-9E47-3BB5F19EEA3A}setup.exe -runfromtemp -l0x0009 -removeonly
ATI Display Driver—>rundll32 D:WINDOWSsystem32atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Ccleaner 2.03.532—>»D:Program FilesCcleanerunins000.exe»
CrazyTalk Cam Suite—>D:Program FilesInstallShield Installation Information{D1504C77-1B19-4AF0-8DEC-946666123B55}setup.exe -runfromtemp -l0x0019 -removeonly /remove
DC.NETBYNET—>»D:WINDOWSDC.NETBYNETuninstall.exe» «/U:D:Program FilesNETBYNETDC.NETBYNET v3.0Uninstalluninstall.xml»
Diablo II — Lord of Destruction—>»D:Program FilesDiablo II — Lord of Destructionunins000.exe»
Digital Photo Navigator 1.5—>RunDll32 D:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «D:Program FilesInstallShield Installation Information{CF9CD37C-E29A-11D5-AE3D-005004B8E30C}setup.EXE» -l0x9
DivX Player—>D:WINDOWSunvise32.exe D:Program FilesDivXDivX Playeruninstal.log
Download Master version 5.5.13.1173—>»D:ШараDownload Masterunins000.exe»
Foxit Reader 2.2 — DJ Mogarych’s pack—>»D:Program FilesFoxit Readerunins000.exe»
Google Chrome—>»D:Program FilesGoogleChromeApplication3.0.195.38Installersetup.exe» —uninstall —system-level
Google Toolbar for Internet Explorer—>»D:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarManager_E582EA556D8DE101.exe» /uninstall
Google Toolbar for Internet Explorer—>MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper—>MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Планета Земля—>MsiExec.exe /X{C084BC61-E537-11DE-8616-005056806466}
Icon Restore 1.0—>D:WINDOWSunins000.exe
ICQ6.5—>»D:Program FilesInstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
Java(TM) 6 Update 3—>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
K-Lite Mega Codec Pack 3.6.2—>»D:Program FilesK-Lite Codec Packunins000.exe»
Light Alloy 4.3—>D:Program FilesLight Alloyuninst.exe
Mail.Ru Агент 5.4 (сборка 2647, для всех пользователей)—>D:Program FilesMail.RuAgentmagentsetup.exe -uninstalllm
Mail.Ru Спутник 2.0.1.90—>d:program filesmail.rusputnikSputnikInstaller.exe -uninstall
MegaFon Internet—>D:Program FilesMegaFon Internetuninst.exe
Microsoft .NET Framework 1.1 Russian Language Pack—>MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1—>MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Office Excel 2007—>»D:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall EXCEL /dll OSETUP.DLL
Microsoft Office Excel 2007—>MsiExec.exe /X{90120000-0016-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Russian) 2007—>MsiExec.exe /X{90120000-0016-0419-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007—>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007—>MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2007—>MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2007—>MsiExec.exe /X{90120000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2007—>MsiExec.exe /X{90120000-002C-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Word 2007—>»D:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall WORD /dll OSETUP.DLL
Microsoft Office Word 2007—>MsiExec.exe /X{90120000-001B-0000-0000-0000000FF1CE}
Microsoft Office Word MUI (Russian) 2007—>MsiExec.exe /X{90120000-001B-0419-0000-0000000FF1CE}
Microsoft User-Mode Driver Framework Feature Pack 1.5—>»D:WINDOWS$NtUninstallWudf01005$spuninstspuninst.exe»
ModernForex—>D:Program FilesFxClubModernForexuninstall.exe
Mozilla Firefox (3.5.5)—>D:Program FilesMozilla Firefoxuninstallhelper.exe
MSXML 4.0 SP2 (KB936181)—>MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 6.0 Parser (KB933579)—>MsiExec.exe /I{8FCE7820-08DF-4663-AF5B-B190EF387C4B}
MultiFon—>MsiExec.exe /I{19CE7CCB-79B3-4522-B23D-2ECABA1C98FC}
NETBYNET DC—>»D:Program FilesNETBYNETDCunins000.exe»
NETBYNET TV-Player—>»D:Program FilesNETBYNETTVunins000.exe»
Nokia Connectivity Cable Driver—>MsiExec.exe /X{972B1D9B-0EAD-49E8-B7D6-3B83FD5665B1}
Nokia PC Suite—>D:Documents and SettingsAll UsersApplication DataInstallations{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}Nokia_PC_Suite_683_rel_14_1_EA.exe /LANG=»1049″
Nokia PC Suite—>MsiExec.exe /I{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}
Paint.NET v3.20—>rundll32.exe advpack.dll,LaunchINFSection D:WINDOWSINFPaintDN.inf,Uninstall
PC Connectivity Solution—>MsiExec.exe /I{066D65EA-ED53-44E4-A96A-F81B6E409D2E}
PDF Settings—>MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PowerCinema NE for Everio—>RunDll32 D:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «D:Program FilesInstallShield Installation Information{39CEE1F2-12B6-4C50-9131-04BFCA110578}setup.exe» -uninstall
PowerDirector Express—>RunDll32 D:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «D:Program FilesInstallShield Installation Information{EDE721EC-870A-11D8-9D75-000129760D75}setup.exe» -uninst
PowerDVD—>RunDll32 D:PROGRA~1COMMON~1INSTAL~1Engine6INTEL3~1ctor.dll,LaunchSetup «D:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}Setup.exe» -uninstall
PowerProducer—>RunDll32 D:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «D:Program FilesInstallShield Installation Information{B7A0CE06-068E-11D6-97FD-0050BACBF861}setup.exe» -uninstall
Punto Switcher 3.1—>D:Program FilesYandexPunto Switcheruninstall.exe
Radio_W Toolbar—>D:PROGRA~1Radio_WUNWISE.EXE /U D:PROGRA~1Radio_WINSTALL.LOG
Rambler-Ассистент—>»D:Program FilesRambler Assistantuninstall.exe»
Realtek High Definition Audio Driver—>RtlUpd.exe -r -m
Remove DivX Pro Codec—>D:WINDOWSunvise32.exe D:Program FilesDivXDivX Pro CodecUninstalDivXProCodec.log
SAMSUNG Mobile Modem Driver Set—>D:WINDOWSsystem32Samsung_USB_Drivers3SSCDUninstall.exe
Samsung Mobile phone USB driver Software—>D:WINDOWSsystem32Samsung_USB_Drivers5SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software—>D:WINDOWSsystem32Samsung_USB_Drivers1SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software—>D:WINDOWSsystem32Samsung_USB_Drivers2SSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer—>»D:Program FilesInstallShield Installation Information{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}setup.exe» -runfromtemp -l0x0019 -removeonly
Samsung PC Studio 3—>»D:Program FilesInstallShield Installation Information{C4A4722E-79F9-417C-BD72-8D359A090C97}setup.exe» -runfromtemp -l0x0019 -removeonly
Samsung Samples Installer—>»D:Program FilesInstallShield Installation Information{7AC15160-A49B-4A89-B181-D4619C025FFF}setup.exe» -runfromtemp -l0x0019 -removeonly
Skype™ 4.1—>MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
TIOnline—>»D:ШараTIOnlineuninstall.exe»
Umnee Downloader 1.0—>»D:WINDOWSunins001.exe»
Umnee Downloader—>msiexec /qb /x {975CBD22-E7CA-99B7-6B99-B98AFCA2CE61}
Umnee Downloader—>MsiExec.exe /I{975CBD22-E7CA-99B7-6B99-B98AFCA2CE61}
Unlocker 1.8.5—>D:Program FilesUnlockeruninst.exe
WebMate—>»D:Program FilesInstallShield Installation Information{19E3AD4A-73A5-413F-ABCF-852551C912A1}setup.exe» -runfromtemp -l0x0019 -removeonly
Windows Driver Package — Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1)—>D:PROGRA~1DIFXD6ACC4BE676423A2B130B78A4B627FC457D98997dpinst.exe /u D:WINDOWSsystem32DRVSTOREpccswpddri_039E7E24575DBAE6A389611AF28F4EB97729D33Epccswpddriver.inf
Windows Driver Package — Nokia Modem (02/15/2007 3.1)—>D:PROGRA~1DIFXD6ACC4BE676423A2B130B78A4B627FC457D98997dpinst.exe /u D:WINDOWSsystem32DRVSTOREpccs_bluet_8B37DC72918CCD58A6EC20373AF6242B037A293Bpccs_bluetooth.inf
Windows Internet Explorer 8—>»D:WINDOWSie8spuninstspuninst.exe»
Woff 2.0—>»D:Documents and SettingsAll UsersApplication DataWoff2unins000.exe»
Zuma Deluxe! 1.0—>D:WINDOWSiun6002.exe «D:irunin.ini»
Zuma Deluxe—>»D:Program FilesZuma DeluxeReflexiveArcadeunins000.exe»
Архиватор WinRAR—>D:Program FilesWinRARuninstall.exe
Пакет драйверов Windows — Nokia Modem (11/03/2006 6.82.0.1)—>D:PROGRA~1DIFX270581355A767BF1dpinst.exe /u D:WINDOWSsystem32DRVSTOREnokbtmdm_4EFFAAE27A08EDFDE145390033D8EF099DA65567nokbtmdm.inf
Программа обновлений Google—>»D:Program FilesGoogleGoogle UpdaterGoogleUpdater.exe» -uninstall
Сократ Персональный 4.1—>RunDll32 D:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1ctor.dll,LaunchSetup «D:Program FilesInstallShield Installation Information{9CD789E2-B7CE-11D5-B7E9-00A0C9449F99}setup.exe»
Соло на Клавиатуре 8.8—>»D:Program FilesSolo8Uninstall.exe» «D:Program FilesSolo8install.log»
Яндекс.Бар 4.2 для Internet Explorer—>MsiExec.exe /X{6740F9E3-1353-47DD-9765-BA49FC4C3479}======Hosts File======
127.0.0.1 mpa.one.microsoft.com
======System event log======
Computer Name: MICROSOF-A57D70
Event Code: 45062
Message: CRT invalid display typeRecord Number: 11688
Source Name: ati2mtag
Time Written: 20091113083645.000000+180
Event Type: ошибка
User:Computer Name: MICROSOF-A57D70
Event Code: 45062
Message: CRT invalid display typeRecord Number: 11687
Source Name: ati2mtag
Time Written: 20091113083645.000000+180
Event Type: ошибка
User:Computer Name: MICROSOF-A57D70
Event Code: 4201
Message: Система обнаружила, что сетевой адаптер DEVICETCPIP_{7A787FBF-D90B-4C5A-9AEC-52EA3E559CB8} был подключен к сети,
и инициировала нормальную работу через этот сетевой адаптер.Record Number: 11686
Source Name: Tcpip
Time Written: 20091113052806.000000+180
Event Type: информация
User:Computer Name: MICROSOF-A57D70
Event Code: 7036
Message: Служба «Служба загрузки изображений (WIA)» перешла в состояние Работает.Record Number: 11685
Source Name: Service Control Manager
Time Written: 20091113052800.000000+180
Event Type: информация
User:Computer Name: MICROSOF-A57D70
Event Code: 45062
Message: CRT invalid display typeRecord Number: 11684
Source Name: ati2mtag
Time Written: 20091113052800.000000+180
Event Type: ошибка
User:=====Application event log=====
Computer Name: MICROSOF-A57D70
Event Code: 11707
Message: Product: Umnee Downloader — Installation completed successfully.Record Number: 172
Source Name: MsiInstaller
Time Written: 20090409111221.000000+240
Event Type: информация
User: MICROSOF-A57D70AdminComputer Name: MICROSOF-A57D70
Event Code: 11707
Message: Product: Adobe AIR — Installation completed successfully.Record Number: 171
Source Name: MsiInstaller
Time Written: 20090409111104.000000+240
Event Type: информация
User: MICROSOF-A57D70AdminComputer Name: MICROSOF-A57D70
Event Code: 4097
Message: Приложение D:Program FilesK-Lite Codec PackMedia Player Classicmplayerc.exe вызвало ошибку
Ошибка в 05/04/2009 @ 17:32:37.609
Вызвано исключение c0000094 по адресу 01F749EB (MpegSplitter)Record Number: 170
Source Name: DrWatson
Time Written: 20090405173237.000000+240
Event Type: информация
User:Computer Name: MICROSOF-A57D70
Event Code: 4097
Message: Приложение D:Program FilesK-Lite Codec PackMedia Player Classicmplayerc.exe вызвало ошибку
Ошибка в 05/04/2009 @ 17:32:35.921
Вызвано исключение c0000094 по адресу 01F749EB (MpegSplitter)Record Number: 169
Source Name: DrWatson
Time Written: 20090405173235.000000+240
Event Type: информация
User:Computer Name: MICROSOF-A57D70
Event Code: 4097
Message: Приложение D:Program FilesK-Lite Codec PackMedia Player Classicmplayerc.exe вызвало ошибку
Ошибка в 05/04/2009 @ 17:31:58.203
Вызвано исключение c0000094 по адресу 01F749EB (MpegSplitter)Record Number: 168
Source Name: DrWatson
Time Written: 20090405173158.000000+240
Event Type: информация
User:======Environment variables======
«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=D:Program FilesPC Connectivity Solution;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;D:Program FilesSamsungSamsung PC Studio 3
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=15
«PROCESSOR_IDENTIFIER»=x86 Family 15 Model 76 Stepping 2, AuthenticAMD
«PROCESSOR_REVISION»=4c02
«NUMBER_OF_PROCESSORS»=1
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP
«cdrom»=E:
EOF
Здравствуйте, добро пожаловать на Spyware-ru форум.
Скачайте OTM by OldTimer кликнув по этой ссылке.
Запустите OTM и в большое поле ввода (заголовок этого поля выделен желтым цветом) скопируйте следующий текст.:services
Netprotocol
:reg
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
"plugin"=-
[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{088f1528-0f37-11de-a065-0016d41dce52}]
[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5e498884-f79b-11de-a0cd-0016d41dce52}]
[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5e498887-f79b-11de-a0cd-0016d41dce52}]
:files
D:WINDOWSsystem32netprotocol.dll
D:Program Filesplugin.exe
:Commands
[emptytemp]
[Reboot]Проверьте вставленный скрипт, если слева перед директивами появились пробелы, то удалите их, скрипт должен выглядеть так же как в сообщении. Кликните по кнопке MoveIt!. В процессе работы возможна перезагрузка компьютера.
По-завершении работы программы должен будет показан лог. Если лог не будет показан, то его можно найти в папке C:_OTMMovedFiles.Вставьте в ваше ответное сообщение содержимое этого лога. И приложите свежий RSIT лог.
All processes killed
========== SERVICES/DRIVERS ==========
Error: No service named Netprotocol was found to stop!
No service named Netprotocol was found to delete!
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun\plugin deleted successfully.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{088f1528-0f37-11de-a065-0016d41dce52} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{088f1528-0f37-11de-a065-0016d41dce52} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5e498884-f79b-11de-a0cd-0016d41dce52} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{5e498884-f79b-11de-a0cd-0016d41dce52} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5e498887-f79b-11de-a0cd-0016d41dce52} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{5e498887-f79b-11de-a0cd-0016d41dce52} not found.
========== FILES ==========
DllUnregisterServer procedure not found in D:WINDOWSsystem32netprotocol.dll
D:WINDOWSsystem32netprotocol.dll moved successfully.
D:Program Filesplugin.exe moved successfully.
========== COMMANDS ==========[EMPTYTEMP]
User: Admin
->Temp folder emptied: 69770746 bytes
->Temporary Internet Files folder emptied: 67679538 bytes
->Java cache emptied: 32268 bytes
->FireFox cache emptied: 98820376 bytes
->Google Chrome cache emptied: 6013663 bytesUser: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytesUser: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 18411408 bytesUser: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2114294 bytes
%systemroot%System32 .tmp files removed: 5709 bytes
%systemroot%System32dllcache .tmp files removed: 0 bytes
%systemroot%System32drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%system32configsystemprofileLocal SettingsTemp folder emptied: 0 bytes
%systemroot%system32configsystemprofileLocal SettingsTemporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytesTotal Files Cleaned = 251,00 mb
OTM by OldTimer — Version 3.1.5.0 log created on 01142010_191453
Files moved on Reboot…
Registry entries deleted on Reboot…
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Admin at 2010-01-14 19:25:12
Microsoft Windows XP Professional Service Pack 2
System drive D: has 10 GB (25%) free of 40 GB
Total RAM: 446 MB (31% free)HijackThis download failed
======Scheduled tasks folder======
D:WINDOWStasksGoogle Software Updater.job
D:WINDOWStasksGoogleUpdateTaskMachineCore.job
D:WINDOWStasksGoogleUpdateTaskMachineUA.job======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — D:Program FilesJavajre1.6.0_03binssv.dll [2007-09-25 501136][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — d:program filesmail.rusputnikMailRuSputnik.dll [2009-03-31 680624][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — D:84A5~1DOWNLO~1dmiehlp.dll [2009-04-16 158208][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — D:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2009-09-10 256112][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — D:Program FilesGoogleGoogleToolbarNotifier5.3.4501.1418swg.dll [2009-09-21 762864][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{b4efb02b-cd4a-44b9-b5d9-aa486cdffab6}]
Radio W Toolbar — D:Program FilesRadio_WtbRad1.dll [2009-11-03 2166296][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch — D:Program FilesGoogleGoogle ToolbarComponentfastsearch_B7C5AC242193BB3E.dll [2009-09-10 458736][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — d:program filesmail.rusputnikMailRuSputnik.dll [2009-03-31 680624]
{468CD8A9-7C25-45FA-969E-3D925C689DC4} — Rambler-Ассистент — D:Program FilesRambler AssistantramblertoolbarU0.dll [2009-03-16 849392]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — D:Program FilesYandexYandexBarIEyndbar.dll [2009-07-24 5586208]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — D:ШараDownload Masterdmbar.dll [2007-11-26 180224]
{b4efb02b-cd4a-44b9-b5d9-aa486cdffab6} — Radio W Toolbar — D:Program FilesRadio_WtbRad1.dll [2009-11-03 2166296]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — D:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2009-09-10 256112][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=D:WINDOWSRTHDCPL.EXE [2007-11-06 16855552]
«Alcmtr»=D:WINDOWSALCMTR.EXE [2005-05-03 69632]
«UnlockerAssistant»=D:Program FilesUnlockerUnlockerAssistant.exe [2006-09-07 15872]
«TuneUp»=D:Program FilesCommon FilesSystem Internals 32bitsTuneUp.exe [2009-04-01 194048]
«BMISR»=D:Program FilesKYEWebMateBM.exe [2008-08-19 208896]
«MAgent»=D:Program FilesMail.RuAgentMAgent.exe [2009-03-31 6210744]
«actx.exe»=D:Program FilesMegaFonMultiFonactx.exe [2009-05-27 5458432][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«VistaIcon»=D:Program FilesVistaDriveIconVistaDrv.exe [2007-07-02 132608]D:Documents and SettingsAdminГлавное менюПрограммыАвтозагрузка
avz.exe.lnk — C:avz4avz.exe
Punto Switcher.lnk — D:Program FilesYandexPunto Switcherpunto.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
D:WINDOWSsystem32Ati2evxx.dll [2007-08-22 122880][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — D:WINDOWSsystem32wpdshserviceobj.dll [2007-06-18 133632][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoSharedDocuments»=1
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»======List of files/folders created in the last 1 months======
2010-01-14 19:09:10 —-D—- D:_OTM
2010-01-14 14:47:20 —-D—- D:Program Filestrend micro
2010-01-14 14:47:17 —-D—- D:rsit
2010-01-13 15:44:12 —-D—- D:WINDOWSMinidump
2010-01-12 23:17:10 —-A—- D:WINDOWSsystem32netprotocol.dll
2010-01-02 15:44:37 —-A—- D:WINDOWSModemLog_HUAWEI Mobile Connect — 3G Modem.txt
2010-01-02 15:42:19 —-D—- D:Documents and SettingsAdminApplication DataMegaFon
2010-01-02 15:39:45 —-D—- D:Program FilesMegaFon
2010-01-02 15:37:59 —-D—- D:Program FilesMegaFon Internet
2010-01-02 13:29:01 —-A—- D:WINDOWSModemLog_SAMSUNG Mobile Modem.txt======List of files/folders modified in the last 1 months======
2010-01-14 19:22:17 —-D—- D:WINDOWSTemp
2010-01-14 19:22:03 —-SD—- D:WINDOWSTasks
2010-01-14 19:17:14 —-D—- D:WINDOWSsystem32
2010-01-14 19:17:14 —-A—- D:WINDOWSsystem32PerfStringBackup.INI
2010-01-14 19:15:56 —-D—- D:WINDOWS
2010-01-14 19:14:56 —-RD—- D:Program Files
2010-01-14 14:44:57 —-D—- D:WINDOWSsystem32drivers
2010-01-14 14:40:33 —-D—- D:WINDOWSsystem32CatRoot2
2010-01-14 14:21:59 —-D—- D:Program FilesMozilla Firefox
2010-01-13 15:48:45 —-A—- D:WINDOWSSchedLgU.Txt
2010-01-13 15:43:17 —-D—- D:Program FilesUnlocker
2010-01-06 22:17:21 —-D—- D:Documents and Settings
2010-01-02 15:39:55 —-SHD—- D:WINDOWSInstaller
2010-01-02 15:38:24 —-HD—- D:WINDOWSinf
2009-12-29 12:39:43 —-D—- D:Program FilesICQ6.5
2009-12-28 18:36:10 —-D—- D:WINDOWSsystem32LogFiles
2009-12-23 09:58:22 —-D—- D:WINDOWSnetwork diagnostic
2009-12-19 23:28:30 —-D—- D:Program FilesGoogle======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 StarOpen;StarOpen; D:WINDOWSsystem32driversStarOpen.sys [2006-07-24 5632]
R1 uzm3njqy;AVZ-RK Kernel Driver; ??D:WINDOWSsystem32Driversuzm3njqy.sys []
R1 WmiAcpi;Интерфейс управления для ACPI Microsoft Windows; D:WINDOWSsystem32DRIVERSwmiacpi.sys [2007-12-22 8832]
R2 Hardlock;Hardlock; ??D:WINDOWSsystem32drivershardlock.sys []
R2 rspndr;Ответчик обнаружения топологии уровня связи; D:WINDOWSsystem32DRIVERSrspndr.sys [2006-12-04 62336]
R3 ati2mtag;ati2mtag; D:WINDOWSsystem32DRIVERSati2mtag.sys [2007-08-22 2417664]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); D:WINDOWSsystem32DRIVERSCmBatt.sys [2007-12-22 14080]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; D:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-12-26 138752]
R3 hidusb;Драйвер класса HID Microsoft; D:WINDOWSsystem32DRIVERShidusb.sys [2004-08-18 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); D:WINDOWSsystem32driversRtkHDAud.sys [2007-11-14 4625408]
R3 mouhid;Драйвер мыши HID; D:WINDOWSsystem32DRIVERSmouhid.sys [2004-08-18 12160]
R3 ReallusionVirtualAudio;Reallusion Virtual Audio; D:WINDOWSsystem32DRIVERSRLVrtAuCbl.sys [2007-03-19 31616]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; D:WINDOWSsystem32DRIVERSRtnicxp.sys [2007-07-12 96384]
R3 sdbus;sdbus; D:WINDOWSsystem32DRIVERSsdbus.sys [2007-12-21 78720]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; D:WINDOWSsystem32DRIVERSusbehci.sys [2007-12-21 30208]
R3 usbhub;USB2 концентратор; D:WINDOWSsystem32DRIVERSusbhub.sys [2007-12-21 59392]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; D:WINDOWSsystem32DRIVERSusbohci.sys [2007-12-21 17152]
R3 USBSTOR;Драйвер запоминающих устройств для USB; D:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2007-12-21 26496]
S1 kbdhid;Драйвер клавиатуры HID; D:WINDOWSsystem32DRIVERSkbdhid.sys [2007-12-21 14848]
S3 AR5211;Atheros Wireless Network Adapter Service; D:WINDOWSsystem32DRIVERSar5211.sys [2007-07-26 547904]
S3 BthEnum;Драйвер блока запроса Bluetooth; D:WINDOWSsystem32DRIVERSBthEnum.sys [2007-12-21 17024]
S3 BTHMODEM;Драйвер для устройства связи по последовательному каналу Bluetooth; D:WINDOWSsystem32DRIVERSbthmodem.sys [2007-12-21 38016]
S3 BthPan;Bluetooth Device (Personal Area Network); D:WINDOWSsystem32DRIVERSbthpan.sys [2007-12-21 100992]
S3 BTHPORT;Драйвер порта Bluetooth; D:WINDOWSSystem32DriversBTHport.sys [2007-12-21 274688]
S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; D:WINDOWSSystem32DriversBTHUSB.sys [2007-12-21 18944]
S3 CCDECODE;Closed Caption декодер; D:WINDOWSsystem32DRIVERSCCDECODE.sys [2007-12-21 17024]
S3 dot4;Драйвер MS IEEE-1284.4; D:WINDOWSsystem32DRIVERSDot4.sys [2007-12-21 207360]
S3 Dot4Print;Драйвер класса принтеров для IEEE-1284.4; D:WINDOWSsystem32DRIVERSDot4Prt.sys [2001-08-17 12928]
S3 dot4usb;Dot4USB фильтр Dot4USB Filter; D:WINDOWSsystem32DRIVERSdot4usb.sys [2001-10-19 23936]
S3 HidBth;Минипорт Bluetooth HID Microsoft; D:WINDOWSsystem32DRIVERShidbth.sys [2007-12-21 25728]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; D:WINDOWSsystem32DRIVERSewusbmdm.sys [2009-06-22 102528]
S3 hwusbdev;Huawei DataCard USB PNP Device; D:WINDOWSsystem32DRIVERSewusbdev.sys [2009-06-22 100480]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; D:WINDOWSsystem32driversMSTEE.sys [2007-12-21 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; D:WINDOWSsystem32DRIVERSNABTSFEC.sys [2007-12-21 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; D:WINDOWSsystem32DRIVERSNdisIP.sys [2007-12-21 10880]
S3 nmwcd;Nokia USB Phone Parent; D:WINDOWSsystem32driversnmwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; D:WINDOWSsystem32driversnmwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; D:WINDOWSsystem32driversnmwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; D:WINDOWSsystem32driversnmwcdcm.sys [2007-02-22 12288]
S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); D:WINDOWSsystem32DRIVERSrfcomm.sys [2007-12-21 59648]
S3 SLIP;BDA Slip De-Framer; D:WINDOWSsystem32DRIVERSSLIP.sys [2007-12-21 11136]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); D:WINDOWSsystem32DRIVERSsscdbus.sys [2007-07-03 80552]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; D:WINDOWSsystem32DRIVERSsscdmdfl.sys [2007-07-03 11944]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; D:WINDOWSsystem32DRIVERSsscdmdm.sys [2007-07-03 106792]
S3 streamip;BDA IPSink; D:WINDOWSsystem32DRIVERSStreamIP.sys [2007-12-21 15360]
S3 usbaudio;Аудио драйвер USB (WDM); D:WINDOWSsystem32driversusbaudio.sys [2007-12-21 60032]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); D:WINDOWSsystem32DRIVERSusbccgp.sys [2007-12-21 31616]
S3 usbvideo;USB Video Device (WDM); D:WINDOWSSystem32Driversusbvideo.sys [2007-12-21 121856]
S3 WSTCODEC;World Standard Teletext кодек; D:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2007-12-21 19328]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; D:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-15 82688]
S4 IntelIde;IntelIde; D:WINDOWSsystem32driversIntelIde.sys []======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Ati HotKey Poller;Ati HotKey Poller; D:WINDOWSsystem32Ati2evxx.exe [2007-08-22 487424]
R2 BthServ;Bluetooth Support Service; D:WINDOWSsystem32svchost.exe [2004-08-18 14336]
R2 Netprotocol;Network Protocol Driver; D:WINDOWSsystem32svchost.exe [2004-08-18 14336]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; D:WINDOWSsystem32svchost.exe [2004-08-18 14336]
S2 gupdate1ca11487274e964;Служба Google Update (gupdate1ca11487274e964); D:Program FilesGoogleUpdateGoogleUpdate.exe [2009-07-30 133104]
S2 gusvc;Google Software Updater; D:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-07-30 190448]
S3 Adobe LM Service;Adobe LM Service; D:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe [2009-04-30 72704]
S3 aspnet_state;ASP.NET State Service; D:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; D:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2009-03-12 654848]
S3 odserv;Microsoft Office Diagnostics Service; D:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; D:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; D:Program FilesPC Connectivity SolutionServiceLayer.exe [2007-03-26 292864]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; D:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
EOF
Скачайте программу Combofix. Закройте все открытые окна и запустите эту программу.
После выполнения будет создан лог файл, пожалуйста вставьте его в ваш ответ.Примечание: перед использованием Combofix обязательно установите Recovery console. Как это сделать будет описано на странице, ссылку на которую я привёл выше.
- Для ответа в этой теме необходимо авторизоваться.
