- This topic has 1 ответ, 2 участника, and was last updated 16 years, 4 months назад by
.
-
Сообщения
-
Здравствуйте!После загрузки системы сразу же появляется окно Internet Explorer’а(не используется вовсе) со скриптом такого содержания:
—
False
True
True
True
True
False
True
False
True
False False
False
False
1000
5 mail.exampleserver.com username Zu1BYW1W8wl23w8W+16EIg== False 0 600000
44
81
138
255
255
255
-32000
-32000
160
45
true
640000
100 0
в автозагрузке обнаруживаею «новинку»- config.xml,который я всеми известными мне способами удаляю!!!
После следующей загрузки-повторяется вновь и вновь.
Основным антивиром установлен NOD32 4.0.68.0
после появления заразы просканировал AVZ,Sryware Doctor,Malwarebytes’ Anti-Malware,SpyBot…найдено множество бяк,но по данной проблеме-результат-нольLogfile of random’s system information tool 1.06 (written by random/random)
Run by Администратор at 2009-05-18 05:25:55
Microsoft Windows XP Professional Service Pack 3
System drive C: has 9 GB (50%) free of 18 GB
Total RAM: 1535 MB (53% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:26:10, on 18.05.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSExplorer.EXE
C:WINDOWSRTHDCPL.EXE
C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe
C:Program FilesAcronisTrueImageTimounterMonitor.exe
C:Program FilesATI TechnologiesATI.ACEcli.exe
C:Program FilesESETESET NOD32 Antivirusegui.exe
C:Program FilesSpyware DoctorpctsTray.exe
C:Program FilesCommon FilesCanopus SharedProCoder 2KernelPNXSERVR.exe
C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:Program FilesAcronisTrueImageTrueImageMonitor.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesSpybot — Search & DestroyTeaTimer.exe
C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузкаFreeMeter.exe
C:Program FilesTotal CommanderTotalcmd.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
C:WINDOWSATKKBService.exe
C:Program FilesESETESET NOD32 Antivirusekrn.exe
C:WINDOWSsystem32PnkBstrA.exe
C:WINDOWSsystem32PnkBstrB.exe
C:Program FilesSpyware DoctorpctsAuxs.exe
C:Program FilesSpyware DoctorpctsSvc.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesSpyware DoctorTFEngineTFService.exe
C:WINDOWSSystem32alg.exe
C:Program FilesATI TechnologiesATI.ACEcli.exe
C:Program FilesATI TechnologiesATI.ACEcli.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:WINDOWSsystem32DllHost.exe
E:distrAntivirusesRSIT.exe
C:WINDOWSsystem32wbemwmiprvse.exe
C:Program Filestrend microАдминистратор.exeR0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
R3 — URLSearchHook: IsoBuster Toolbar — {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} — C:Program FilesIsoBustertbIsoB.dll
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O3 — Toolbar: IsoBuster Toolbar — {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} — C:Program FilesIsoBustertbIsoB.dll
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Acronis Scheduler2 Service] «C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe»
O4 — HKLM..Run: [AcronisTimounterMonitor] C:Program FilesAcronisTrueImageTimounterMonitor.exe
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [ATICCC] «C:Program FilesATI TechnologiesATI.ACEcli.exe» runtime -Delay
O4 — HKLM..Run: [egui] «C:Program FilesESETESET NOD32 Antivirusegui.exe» /hide /waitservice
O4 — HKLM..Run: [ISTray] «C:Program FilesSpyware DoctorpctsTray.exe»
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [NexusServer] «C:Program FilesCommon FilesCanopus SharedProCoder 2KernelPNXSERVR.exe» -SelfLaunch
O4 — HKLM..Run: [PDVD8LanguageShortcut] «C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe»
O4 — HKLM..Run: [RemoteControl8] «C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe»
O4 — HKLM..Run: [TkBellExe] «C:Program FilesCommon FilesRealUpdate_OBrealsched.exe» -osboot
O4 — HKLM..Run: [TrueImageMonitor.exe] C:Program FilesAcronisTrueImageTrueImageMonitor.exe
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [MSMSGS] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKCU..Run: [NBJ] «C:Program FilesAheadNero BackItUpNBJ.exe»
O4 — HKCU..Run: [SpybotSD TeaTimer] C:Program FilesSpybot — Search & DestroyTeaTimer.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: Total Commander.lnk = C:Program FilesTotal CommanderTotalcmd.exe
O4 — Global Startup: config.xml
O4 — Global Startup: FreeMeter.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: (no name) — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — (no file)
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O18 — Protocol: linkscanner — {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} — (no file)
O23 — Service: Acronis Scheduler2 Service (AcrSch2Svc) — Acronis — C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 — Service: Adobe LM Service — Adobe Systems — C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATK Keyboard Service (ATKKeyboardService) — ASUSTeK COMPUTER INC. — C:WINDOWSATKKBService.exe
O23 — Service: ESET HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe
O23 — Service: ESET Service (ekrn) — ESET — C:Program FilesESETESET NOD32 Antivirusekrn.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
O23 — Service: PnkBstrB — Unknown owner — C:WINDOWSsystem32PnkBstrB.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared filesRichVideo.exe (file missing)
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: PC Tools Auxiliary Service (sdAuxService) — PC Tools — C:Program FilesSpyware DoctorpctsAuxs.exe
O23 — Service: PC Tools Security Service (sdCoreService) — PC Tools — C:Program FilesSpyware DoctorpctsSvc.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: ThreatFire — PC Tools — C:Program FilesSpyware DoctorTFEngineTFService.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe
O24 — Desktop Component 0: (no name) — http://imagegen.last.fm/greybox/recenttracks/cahta.gif—
End of file — 8719 bytes======Scheduled tasks folder======
C:WINDOWStasksAppleSoftwareUpdate.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2005-09-24 63136][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} — IsoBuster Toolbar — C:Program FilesIsoBustertbIsoB.dll [2008-06-04 1542168][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2005-05-25 14477312]
«Acronis Scheduler2 Service»=C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe [2006-07-24 126976]
«AcronisTimounterMonitor»=C:Program FilesAcronisTrueImageTimounterMonitor.exe [2006-08-14 1863606]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«ATICCC»=C:Program FilesATI TechnologiesATI.ACEcli.exe [2006-01-02 45056]
«egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe [2008-11-10 1980200]
«ISTray»=C:Program FilesSpyware DoctorpctsTray.exe [2008-12-08 1173384]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2009-03-31 6210744]
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2006-01-12 155648]
«NexusServer»=C:Program FilesCommon FilesCanopus SharedProCoder 2KernelPNXSERVR.exe [2004-04-28 188416]
«PDVD8LanguageShortcut»=C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe [2007-12-14 50472]
«RemoteControl8″=C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe [2008-03-20 83240]
«TkBellExe»=C:Program FilesCommon FilesRealUpdate_OBrealsched.exe [2009-03-29 185896]
«TrueImageMonitor.exe»=C:Program FilesAcronisTrueImageTrueImageMonitor.exe [2006-08-14 1123324][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
«MSMSGS»=C:Program FilesMessengermsmsgs.exe [2008-04-14 1695232]
«NBJ»=C:Program FilesAheadNero BackItUpNBJ.exe [2006-09-15 2048000]
«SpybotSD TeaTimer»=C:Program FilesSpybot — Search & DestroyTeaTimer.exe [2009-03-05 2260480]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
config.xml
FreeMeter.exeC:Documents and SettingsАдминистраторГлавное менюПрограммыАвтозагрузка
Total Commander.lnk — C:Program FilesTotal CommanderTotalcmd.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2006-03-17 61440][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa]
«authentication packages»=msv1_0
relog_ap[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalsdauxservice]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalsdcoreservice]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworksdauxservice]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworksdcoreservice]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=255[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesCyberLinkPowerDVD8PowerDVD8.exe»=»C:Program FilesCyberLinkPowerDVD8PowerDVD8.exe:*:Enabled:CyberLink PowerDVD 8.0»
«C:Program FilesTotal CommanderTotalcmd.exe»=»C:Program FilesTotal CommanderTotalcmd.exe:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesQIP Infiuminfium.exe»=»C:Program FilesQIP Infiuminfium.exe:*:Enabled:QIP Infium»
«C:WINDOWSsystem32PnkBstrA.exe»=»C:WINDOWSsystem32PnkBstrA.exe:*:Enabled:PnkBstrA»
«C:WINDOWSsystem32PnkBstrB.exe»=»C:WINDOWSsystem32PnkBstrB.exe:*:Enabled:PnkBstrB»
«C:Program FilesEasy CD-DA Extractor 12ezcddax.exe»=»C:Program FilesEasy CD-DA Extractor 12ezcddax.exe:*:Disabled:Easy CD-DA Extractor»
«C:Program FilesMail.RuAgentmagent.exe»=»C:Program FilesMail.RuAgentmagent.exe:*:Enabled:Mail.Ru Агент»
«C:Program FilesExact Audio CopyEAC.exe»=»C:Program FilesExact Audio CopyEAC.exe:*:Enabled:Exact Audio Copy»
«C:WINDOWSsystem32sessmgr.exe»=»C:WINDOWSsystem32sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019»
«C:Program FilesK-Lite Codec PackFiltersac3config.exe»=»C:Program FilesK-Lite Codec PackFiltersac3config.exe:*:Enabled:AC3Filter»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesCyberLinkPowerDVD8PowerDVD8.exe»=»C:Program FilesCyberLinkPowerDVD8PowerDVD8.exe:*:Enabled:CyberLink PowerDVD 8.0»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»======List of files/folders created in the last 1 months======
2009-05-18 02:52:51 —-D—- C:backup
2009-05-17 23:14:55 —-D—- C:Program FilesSpybot — Search & Destroy
2009-05-17 23:14:55 —-D—- C:Documents and SettingsAll UsersApplication DataSpybot — Search & Destroy
2009-05-17 21:27:57 —-D—- C:Program FilesWinUtilities
2009-05-17 14:09:58 —-D—- C:rsit
2009-05-17 14:09:58 —-D—- C:Program Filestrend micro
2009-05-17 12:38:13 —-HD—- C:Autorun.inf
2009-05-17 12:32:34 —-D—- C:Program FilesAutorunRemover
2009-05-17 11:09:00 —-D—- C:Documents and SettingsАдминистраторApplication DataMalwarebytes
2009-05-17 11:08:47 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-05-17 11:08:46 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-05-16 19:31:02 —-D—- C:Program FilesCommon FilesPC Tools
2009-05-16 19:30:48 —-D—- C:Program FilesSpyware Doctor
2009-05-16 19:30:48 —-D—- C:Documents and SettingsАдминистраторApplication DataPC Tools
2009-05-16 19:30:48 —-D—- C:Documents and SettingsAll UsersApplication DataPC Tools
2009-05-10 18:22:34 —-A—- C:WINDOWSsystem32ptpusb.dll
2009-05-10 18:22:33 —-A—- C:WINDOWSsystem32ptpusd.dll
2009-05-10 04:59:11 —-D—- C:Program FileseMule
2009-05-10 04:24:25 —-D—- C:Program FilesPeerGuardian2
2009-05-02 23:19:28 —-D—- C:Program FilesMicrosoft Silverlight
2009-05-02 10:05:05 —-D—- C:DVDVolume
2009-05-02 09:30:08 —-D—- C:Program FilesDVDlabPro2
2009-04-24 07:57:42 —-D—- C:Program FilesABBYY Lingvo x3
2009-04-24 07:57:42 —-D—- C:Documents and SettingsAll UsersApplication DataABBYY
2009-04-24 07:53:58 —-D—- C:temp
2009-04-24 07:19:15 —-D—- C:Program FilesFLAC
2009-04-23 09:53:34 —-D—- C:Program FilesIsoBuster
2009-04-23 09:53:34 —-D—- C:Program FilesConduit
2009-04-23 09:53:31 —-D—- C:Program FilesSmart Projects
2009-04-23 09:40:15 —-D—- C:Program FilesSlySoft======List of files/folders modified in the last 1 months======
2009-05-18 05:25:57 —-D—- C:WINDOWSTemp
2009-05-18 05:23:51 —-D—- C:WINDOWSPrefetch
2009-05-18 05:07:10 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2009-05-18 04:57:47 —-D—- C:Program FilesMozilla Firefox
2009-05-18 04:55:59 —-D—- C:WINDOWSsystem32drivers
2009-05-18 04:55:50 —-D—- C:WINDOWSsystem32Lang
2009-05-18 04:54:07 —-A—- C:WINDOWSSchedLgU.Txt
2009-05-18 04:54:06 —-D—- C:WINDOWSsystem32CatRoot2
2009-05-18 04:08:13 —-SH—- C:boot.ini
2009-05-18 04:08:13 —-A—- C:WINDOWSwin.ini
2009-05-18 04:08:13 —-A—- C:WINDOWSsystem.ini
2009-05-18 04:08:11 —-D—- C:WINDOWSpss
2009-05-18 03:07:18 —-AD—- C:WINDOWS
2009-05-17 23:14:55 —-RD—- C:Program Files
2009-05-17 21:28:17 —-D—- C:WINDOWSsystem32
2009-05-17 20:03:49 —-A—- C:WINDOWSNeroDigital.ini
2009-05-17 13:51:57 —-D—- C:Documents and SettingsАдминистраторApplication DatauTorrent
2009-05-17 13:50:52 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-05-17 13:50:47 —-D—- C:Program FilesInternet Explorer
2009-05-17 12:15:22 —-SHD—- C:WINDOWSInstaller
2009-05-17 12:13:33 —-SD—- C:Documents and SettingsАдминистраторApplication DataMicrosoft
2009-05-16 19:31:02 —-D—- C:Program FilesCommon Files
2009-05-16 18:42:53 —-D—- C:WINDOWSHelp
2009-05-16 17:51:04 —-A—- C:WINDOWSimsins.BAK
2009-05-16 17:51:02 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-05-16 17:50:59 —-D—- C:WINDOWSsystem32inetsrv
2009-05-13 18:44:04 —-D—- C:Documents and SettingsАдминистраторApplication Datafoobar2000
2009-05-11 10:00:10 —-D—- C:Program FilesMonkey’s Audio
2009-05-07 11:16:29 —-A—- C:WINDOWSsystem32MRT.exe
2009-05-06 19:50:52 —-HD—- C:WINDOWSinf
2009-05-01 16:51:39 —-D—- C:Program FilesESET
2009-04-24 08:38:12 —-HD—- C:Program FilesInstallShield Installation Information
2009-04-24 08:36:43 —-D—- C:WINDOWSWinSxS
2009-04-24 08:36:36 —-RSD—- C:WINDOWSFonts======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 asuskbnt;Enhanced Display Driver Helper Service; C:WINDOWSsystem32driversatkkbnt.sys [2005-10-18 11008]
R1 ehdrv;ehdrv; C:WINDOWSsystem32DRIVERSehdrv.sys [2008-11-10 104456]
R1 epfwtdir;epfwtdir; C:WINDOWSsystem32DRIVERSepfwtdir.sys [2008-11-10 92168]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-14 40704]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; ??C:Program FilesUltraISOdriversISODrive.sys []
R1 pctgntdi;pctgntdi; ??C:WINDOWSsystem32driverspctgntdi.sys []
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2004-08-18 12032]
R2 eamon;eamon; C:WINDOWSsystem32DRIVERSeamon.sys [2008-11-10 110600]
R2 EIO;EIO; ??C:WINDOWSsystem32driversEIO.sys []
R2 hardlock;hardlock; ??C:WINDOWSsystem32drivershardlock.sys []
R2 Haspnt;Haspnt; ??C:WINDOWSsystem32driversHaspnt.sys []
R2 tifsfilter;Acronis True Image FS Filter; C:WINDOWSsystem32DRIVERStifsfilt.sys [2009-01-13 32288]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2006-03-17 1520640]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2005-05-25 3134976]
R3 MTsensor;ATK0110 ACPI UTILITY; C:WINDOWSsystem32DRIVERSASACPI.sys [2004-08-14 5810]
R3 pcouffin;VSO Software pcouffin; C:WINDOWSSystem32Driverspcouffin.sys [2009-04-11 47360]
R3 pctplsg;pctplsg; ??C:WINDOWSsystem32driverspctplsg.sys []
R3 pfc;Padus ASPI Shell; C:WINDOWSsystem32driverspfc.sys [2005-11-02 10368]
R3 TfNetMon;TfNetMon; ??C:WINDOWSsystem32driversTfNetMon.sys []
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-13 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-13 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:WINDOWSsystem32DRIVERSyk51x86.sys [2005-05-06 232064]
S3 a016bus;Sony Ericsson Device A016 driver (WDM); C:WINDOWSsystem32DRIVERSa016bus.sys [2008-01-18 83880]
S3 a016mdfl;Sony Ericsson Device A016 USB WMC Modeme Filter; C:WINDOWSsystem32DRIVERSa016mdfl.sys [2008-01-18 15016]
S3 a016mdm;Sony Ericsson Device A016 USB WMC Modem Driver; C:WINDOWSsystem32DRIVERSa016mdm.sys [2008-01-18 110504]
S3 a016mgmt;Sony Ericsson Device A016 USB WMC Device Management Drivers (WDM); C:WINDOWSsystem32DRIVERSa016mgmt.sys [2008-01-18 104488]
S3 a016obex;Sony Ericsson Device A016 USB WMC OBEX Interface; C:WINDOWSsystem32DRIVERSa016obex.sys [2008-01-18 100648]
S3 ad34s4g4;ad34s4g4; C:WINDOWSsystem32driversad34s4g4.sys []
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-13 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
S3 vaxscsi;vaxscsi; C:WINDOWSSystem32Driversvaxscsi.sys [2009-01-05 223128]
S3 WpdUsb;WpdUsb; C:WINDOWSsystem32DRIVERSwpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2006-07-24 204800]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2006-03-17 405504]
R2 ATKKeyboardService;ATK Keyboard Service; C:WINDOWSATKKBService.exe [2006-04-10 241664]
R2 ekrn;ESET Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2008-11-10 711240]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2009-02-11 66872]
R2 PnkBstrB;PnkBstrB; C:WINDOWSsystem32PnkBstrB.exe [2009-02-11 107832]
R2 sdAuxService;PC Tools Auxiliary Service; C:Program FilesSpyware DoctorpctsAuxs.exe [2009-01-07 348752]
R2 sdCoreService;PC Tools Security Service; C:Program FilesSpyware DoctorpctsSvc.exe [2009-01-21 1095560]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
R3 ThreatFire;ThreatFire; C:Program FilesSpyware DoctorTFEngineTFService.exe [2009-05-16 70944]
S2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared filesRichVideo.exe []
S3 Adobe LM Service;Adobe LM Service; C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe [2008-12-21 72704]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 EhttpSrv;ESET HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2008-11-10 20680]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-11-03 914944]
EOF
огромная просьба помочь ❓ наверняка,кто-нибудь уже сталкивался с этой штукой!))спасибо
- Для ответа в этой теме необходимо авторизоваться.
