- This topic has 18 ответов, 3 участника, and was last updated 16 years, 4 months назад by
.
-
Сообщения
-
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Юрий at 2009-05-07 21:00:34
Microsoft® Windows Vista™ Ultimate Service Pack 1
System drive C: has 48 GB (20%) free of 238 GB
Total RAM: 2046 MB (65% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:01:21, on 07.05.2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: NormalRunning processes:
C:Windowssystem32Dwm.exe
C:Windowssystem32taskeng.exe
C:WindowsExplorer.EXE
C:Windowssystem32conime.exe
C:WindowsRtHDVCpl.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:Program FilesA4TechMouseAmoumain.exe
C:WindowsSystem32rundll32.exe
C:Program FilesAdobeReader 8.0Readerreader_sl.exe
C:Program FilesESETnod32kui.exe
C:WindowsWindowsMobilewmdSync.exe
C:Program FilesJavajre6binjusched.exe
C:Windowsehomeehtray.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Program FilesMedia KeyMagicKey.exe
C:Program FilesMedia KeyOSD.exe
C:Windowsehomeehmsas.exe
C:Программы установкиduckRSIT.exe
C:Program Filestrend microЮрий.exeR1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40488
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O1 — Hosts: ::1 localhost
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: RealPlayer Download and Record Plugin for Internet Explorer — {3049C3E9-B461-4BC5-8870-4C09146192CA} — C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll
O2 — BHO: FieryAds advertising module v1.5.0 — {CF272101-7F6E-4CF2-9453-B4C5D2FC32C0} — C:PROGRA~1FieryAdsFieryAds.dll (file missing)
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O4 — HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeQTTask.exe» -atboottime
O4 — HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [LanguageShortcut] «C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe»
O4 — HKLM..Run: [Lingvo Launcher] «C:Program FilesABBYY Lingvo 12Lvagent.exe» /STARTUP
O4 — HKLM..Run: [TkBellExe] «C:Program FilesCommon FilesRealUpdate_OBrealsched.exe» -osboot
O4 — HKLM..Run: [WheelMouse] C:Program FilesA4TechMouseAmoumain.exe
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:Windowssystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:Windowssystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [nod32kui] «C:Program FilesEsetnod32kui.exe» /WAITSERVICE
O4 — HKLM..Run: [Windows Mobile-based device management] %windir%WindowsMobilewmdSync.exe
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [WinPatrol Russian v.2] C:Program FilesBillP StudiosWinPatrolwinpatrol.exe
O4 — HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exe
O4 — HKCU..Run: [AGEIA PhysX SysTray] C:Program FilesAGEIA TechnologiesbinTrayIcon.exe
O4 — HKCU..Run: [msnmsgr] «C:Program FilesWindows LiveMessengermsnmsgr.exe» /background
O4 — HKCU..Run: [QIP.Online] C:Program FilesQIP.Onlineqiponline.exe auto_start
O4 — HKCU..Run: [DAEMON Tools Lite] «C:Program FilesDAEMON Tools Litedaemon.exe» -autorun
O4 — HKCU..Run: [AlcoholAutomount] «C:Program FilesAlcohol SoftAlcohol 120axcmd.exe» /automount
O4 — HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe
O4 — HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘NETWORK SERVICE’)
O4 — Startup: ubisoft register.lnk = C:Program FilesUbi SoftRegisterschedule.exe
O4 — Startup: Вырезка экрана и программа запуска для OneNote 2007.lnk = C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE
O4 — Global Startup: Media Key.lnk = C:Program FilesMedia KeyMagicKey.exe
O8 — Extra context menu item: &Перевести с помощью ABBYY Lingvo… — res://C:Program FilesABBYY Lingvo 12Lingvo.exe/3000
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O13 — Gopher Prefix:
O16 — DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) — http://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:Program FilesMicrosoft OfficeOffice12GrooveSystemServices.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O22 — SharedTaskScheduler: Windows DreamScene — {E31004D1-A431-41B8-826F-E902F9D95C81} — C:WindowsSystem32DreamScene.dll
O23 — Service: NBService — Nero AG — C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — C:Program FilesEsetnod32krn.exe
O23 — Service: NVIDIA Display Driver Service (nvsvc) — NVIDIA Corporation — C:Windowssystem32nvvsvc.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared filesRichVideo.exe
O23 — Service: ServiceLayer — Nokia. — C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Rocket Division Software — C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe—
End of file — 7743 bytes======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer — C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll [2008-06-26 308856][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2007-08-24 2212224][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{CF272101-7F6E-4CF2-9453-B4C5D2FC32C0}]
FieryAds advertising module v1.5.0 — C:PROGRA~1FieryAdsFieryAds.dll [][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2009-03-09 35840][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2008-12-09 958200][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RtHDVCpl»=C:WindowsRtHDVCpl.exe [2007-01-18 4349952]
«QuickTime Task»=C:Program FilesQuickTimeQTTask.exe [2007-06-29 286720]
«NeroFilterCheck»=C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2005-12-07 30208]
«LanguageShortcut»=C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe [2006-05-18 49152]
«»= []
«Lingvo Launcher»=C:Program FilesABBYY Lingvo 12Lvagent.exe [2006-12-14 258048]
«TkBellExe»=C:Program FilesCommon FilesRealUpdate_OBrealsched.exe [2008-06-26 185896]
«WheelMouse»=C:Program FilesA4TechMouseAmoumain.exe [2007-02-10 241664]
«NvCplDaemon»=C:Windowssystem32NvCpl.dll [2008-09-17 13580832]
«NvMediaCenter»=C:Windowssystem32NvMcTray.dll [2008-09-17 92704]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-10-15 39792]
«nod32kui»=C:Program FilesEsetnod32kui.exe [2008-12-20 949376]
«Windows Mobile-based device management»=C:WindowsWindowsMobilewmdSync.exe [2008-01-21 215552]
«SunJavaUpdateSched»=C:Program FilesJavajre6binjusched.exe [2009-03-09 148888]
«WinPatrol Russian v.2″=C:Program FilesBillP StudiosWinPatrolwinpatrol.exe [2007-08-06 292152][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ehTray.exe»=C:WindowsehomeehTray.exe [2008-01-21 125952]
«AGEIA PhysX SysTray»=C:Program FilesAGEIA TechnologiesbinTrayIcon.exe []
«msnmsgr»=C:Program FilesWindows LiveMessengermsnmsgr.exe /background []
«QIP.Online»=C:Program FilesQIP.Onlineqiponline.exe auto_start []
«DAEMON Tools Lite»=C:Program FilesDAEMON Tools Litedaemon.exe [2008-12-10 216520]
«AlcoholAutomount»=C:Program FilesAlcohol SoftAlcohol 120axcmd.exe [2009-03-17 203928]
«WMPNSCFG»=C:Program FilesWindows Media PlayerWMPNSCFG.exe [2008-01-21 202240][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe Reader Speed Launcher]
C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-10-15 39792][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdVantage]
C:Program FilesAdVantageAdVantage.exe [][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregBigDog303]
C:WindowsVM303_STI.EXE [2006-01-24 61440][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregGrooveMonitor]
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2007-08-24 33648][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregMsnMsgr]
C:Program FilesWindows LiveMessengerMsnMsgr.Exe /background [][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregWindows Defender]
C:Program FilesWindows DefenderMSASCui.exe [2008-01-21 1008184][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregXerox PanelMgr]
C:WindowsXeroxPanelMgrSSMMgr.exe [2007-03-22 524288]C:ProgramDataMicrosoftWindowsStart MenuProgramsStartup
Media Key.lnk — C:Program FilesMedia KeyMagicKey.exeC:UsersЮрийAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
ubisoft register.lnk — C:Program FilesUbi SoftRegisterschedule.exe
Вырезка экрана и программа запуска для OneNote 2007.lnk — C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionexplorerSharedTaskScheduler]
Windows DreamScene — {E31004D1-A431-41B8-826F-E902F9D95C81} — C:WindowsSystem32DreamScene.dll [2007-07-20 233888][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2007-08-24 2212224][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«EnableLUA»=0
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«EnableUIADesktopToggle»=0[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveAutoRun»=FFFFFFFF
«NoDriveTypeAutoRun»=36[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{87d7b0a3-1fd5-11de-9861-001bb97660ba}]
shellAutoRuncommand — F:autorun.exe======List of files/folders created in the last 1 months======
2009-05-07 20:57:04 —-D—- C:Avenger
2009-05-07 20:57:04 —-A—- C:avenger.txt
2009-05-07 02:01:09 —-D—- C:rsit
2009-05-06 23:38:47 —-D—- C:UsersЮрийAppDataRoamingMalwarebytes
2009-05-04 22:20:10 —-D—- C:WindowsERDNT
2009-05-04 21:55:05 —-D—- C:UsersЮрийAppDataRoamingWinPatrol
2009-05-04 21:54:58 —-D—- C:Program FilesBillP Studios
2009-05-04 12:49:59 —-A—- C:Windowsntbtlog.txt
2009-05-04 12:41:20 —-D—- C:Program Filestrend micro
2009-05-04 11:22:15 —-D—- C:ProgramDataMalwarebytes
2009-05-04 11:22:15 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-05-02 19:41:51 —-RHD—- C:UsersЮрийAppDataRoamingSecuROM
2009-05-02 19:40:34 —-D—- C:Windowssystem32AGEIA
2009-05-02 19:40:34 —-D—- C:Program FilesAGEIA Technologies
2009-05-02 19:40:27 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2009-05-02 19:08:52 —-D—- C:Program FilesSacred 2 — Fallen Angel
2009-05-01 23:36:48 —-D—- C:Program FilesStardock
2009-04-27 13:21:15 —-D—- C:Program FilesQuickyPlaeyr
2009-04-25 00:28:43 —-D—- C:Program FilesCommon FilesSkype
2009-04-25 00:28:41 —-RD—- C:Program FilesSkype
2009-04-24 01:47:55 —-A—- C:WindowsSCUnin.exe
2009-04-24 01:47:18 —-D—- C:Program FilesStarcraft
2009-04-22 19:33:51 —-D—- C:UsersЮрийAppDataRoamingMy Games
2009-04-18 20:51:13 —-D—- C:Program FilesAlien Shooter
2009-04-18 19:33:35 —-D—- C:Program FilesReflexiveArcade
2009-04-15 23:06:29 —-A—- C:Windowssystem32winhttp.dll
2009-04-15 23:06:26 —-A—- C:Windowssystem32xolehlp.dll
2009-04-15 23:06:26 —-A—- C:Windowssystem32msdtcprx.dll
2009-04-15 23:06:17 —-A—- C:Windowssystem32rpcss.dll
2009-04-15 23:06:17 —-A—- C:Windowssystem32ntkrnlpa.exe
2009-04-15 23:06:16 —-A—- C:Windowssystem32ntoskrnl.exe
2009-04-15 23:06:15 —-A—- C:Windowssystem32printfilterpipelinesvc.exe
2009-04-15 23:06:14 —-A—- C:Windowssystem32sdohlp.dll
2009-04-15 23:06:14 —-A—- C:Windowssystem32printfilterpipelineprxy.dll
2009-04-15 23:06:14 —-A—- C:Windowssystem32iasrecst.dll
2009-04-15 23:06:14 —-A—- C:Windowssystem32iashost.exe
2009-04-15 23:06:14 —-A—- C:Windowssystem32iasdatastore.dll
2009-04-15 23:06:14 —-A—- C:Windowssystem32iasads.dll
2009-04-15 23:06:10 —-A—- C:Windowssystem32lsasrv.dll
2009-04-15 23:06:10 —-A—- C:Windowssystem32kernel32.dll
2009-04-15 23:06:09 —-A—- C:Windowssystem32secur32.dll
2009-04-15 23:06:09 —-A—- C:Windowssystem32apilogen.dll
2009-04-15 23:06:09 —-A—- C:Windowssystem32amxread.dll
2009-04-15 23:06:03 —-A—- C:Windowssystem32mshtml.dll
2009-04-15 23:06:02 —-A—- C:Windowssystem32ieframe.dll
2009-04-15 23:06:01 —-A—- C:Windowssystem32urlmon.dll
2009-04-15 23:06:00 —-A—- C:Windowssystem32wininet.dll
2009-04-15 23:06:00 —-A—- C:Windowssystem32msfeeds.dll
2009-04-15 23:06:00 —-A—- C:Windowssystem32iertutil.dll
2009-04-15 23:06:00 —-A—- C:Windowssystem32iedkcs32.dll
2009-04-15 23:05:59 —-A—- C:Windowssystem32occache.dll
2009-04-15 23:05:59 —-A—- C:Windowssystem32ieaksie.dll
2009-04-15 23:05:58 —-A—- C:Windowssystem32ieUnatt.exe
2009-04-15 23:05:58 —-A—- C:Windowssystem32ieencode.dll
2009-04-15 23:05:57 —-A—- C:Windowssystem32mstime.dll
2009-04-15 23:05:56 —-A—- C:Windowssystem32jsproxy.dll
2009-04-10 23:11:25 —-D—- C:ProgramDataPOP3Profiles======List of files/folders modified in the last 1 months======
2009-05-07 21:00:44 —-D—- C:WindowsTemp
2009-05-07 20:59:08 —-D—- C:WindowsPrefetch
2009-05-07 20:57:56 —-D—- C:Program FilesMozilla Firefox
2009-05-07 20:57:07 —-D—- C:WindowsSystem32
2009-05-07 20:57:07 —-D—- C:Windows
2009-05-07 20:57:04 —-D—- C:Windowssystem32drivers
2009-05-07 20:51:08 —-D—- C:Program FilesPowerArchiver
2009-05-07 19:35:00 —-SHD—- C:System Volume Information
2009-05-07 18:35:43 —-D—- C:UsersЮрийAppDataRoaminguTorrent
2009-05-07 14:18:32 —-D—- C:UsersЮрийAppDataRoamingSkype
2009-05-07 14:08:29 —-D—- C:UsersЮрийAppDataRoamingskypePM
2009-05-07 13:34:30 —-D—- C:Windowsinf
2009-05-07 13:34:30 —-A—- C:Windowssystem32PerfStringBackup.INI
2009-05-07 02:58:50 —-D—- C:Program FilesRising Force Online
2009-05-07 01:55:42 —-AD—- C:Program Files
2009-05-07 01:53:49 —-HD—- C:ProgramData
2009-05-07 01:48:47 —-RSHD—- C:RECYCLER
2009-05-05 16:56:53 —-HD—- C:Windowssystem32GroupPolicy
2009-05-04 22:25:00 —-D—- C:Программы установки
2009-05-04 21:39:46 —-D—- C:Windowssystem32catroot2
2009-05-04 21:21:56 —-RD—- C:Users
2009-05-04 20:35:46 —-D—- C:Windowssystem32Tools
2009-05-04 18:51:06 —-SHD—- C:WindowsInstaller
2009-05-04 18:51:05 —-D—- C:Windowswinsxs
2009-05-04 10:38:30 —-D—- C:WindowsLogs
2009-05-04 10:10:52 —-RSD—- C:Windowsassembly
2009-05-03 09:25:03 —-D—- C:UsersЮрийAppDataRoamingICQ
2009-05-02 19:41:50 —-A—- C:Windowssystem32CmdLineExt.dll
2009-05-02 19:40:58 —-D—- C:Windowssystem32catroot
2009-05-02 19:40:27 —-D—- C:Program FilesCommon Files
2009-05-02 19:38:12 —-D—- C:Program FilesCommon Filesmicrosoft shared
2009-05-02 10:21:51 —-D—- C:Program FilesFieryAds
2009-05-01 23:37:46 —-D—- C:WindowsMicrosoft.NET
2009-04-28 00:32:27 —-RSD—- C:WindowsFonts
2009-04-27 23:34:02 —-D—- C:Program FilesLineage II
2009-04-26 17:37:13 —-A—- C:WindowsNeroDigital.ini
2009-04-25 00:28:55 —-D—- C:Windowssystem32Tasks
2009-04-25 00:28:43 —-D—- C:ProgramDataSkype
2009-04-23 00:46:27 —-HD—- C:Program FilesInstallShield Installation Information
2009-04-16 12:13:12 —-D—- C:Windowssystem32wbem
2009-04-16 12:13:12 —-D—- C:Program FilesWindows Mail
2009-04-16 12:13:09 —-D—- C:Windowssystem32manifeststore
2009-04-16 12:13:09 —-D—- C:WindowsAppPatch
2009-04-16 12:13:07 —-D—- C:Program FilesInternet Explorer
2009-04-16 03:04:23 —-D—- C:ProgramDataMicrosoft Help
2009-04-11 14:08:40 —-D—- C:Program FilesUbisoft
2009-04-08 21:34:37 —-D—- C:Program FilesCommon FilesYandex======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Amfilter;A4Tech Mouse Filter Driver; C:Windowssystem32DRIVERSAmfilter.sys [2007-01-24 8704]
R1 cdrbsdrv;cdrbsdrv; C:Windowssystem32driverscdrbsdrv.sys [2008-11-16 33408]
R1 CSC;Offline Files Driver; C:Windowssystem32driverscsc.sys [2008-01-21 350720]
R1 nod32drv;nod32drv; C:Windowssystem32driversnod32drv.sys [2008-12-20 15424]
R1 prodrv06;StarForce Protection Environment Driver v6; C:WindowsSystem32driversprodrv06.sys [2004-08-09 53920]
R2 AMON;AMON; C:Windowssystem32driversamon.sys [2008-12-20 512096]
R2 atksgt;atksgt; C:Windowssystem32DRIVERSatksgt.sys [2008-12-03 278728]
R2 lirsgt;lirsgt; C:Windowssystem32DRIVERSlirsgt.sys [2008-12-03 25416]
R2 SSPORT;SSPORT; ??C:Windowssystem32DriversSSPORT.sys [2006-11-22 5120]
R3 FStarForce;FStarForce; C:Windowssystem32DRIVERSFStarForce.sys [2008-10-24 9216]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:Windowssystem32driversRTKVHDA.sys [2007-01-18 1729632]
R3 kbfiltr;Keyboard Filter; C:Windowssystem32DRIVERSKBFILTER.SYS [2002-07-11 12856]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:Windowssystem32DRIVERSnvmfdx32.sys [2007-11-18 1040544]
R3 nvlddmkm;nvlddmkm; C:Windowssystem32DRIVERSnvlddmkm.sys [2008-09-17 7379872]
S2 DgiVecp;DgiVecp; ??C:Windowssystem32DriversDgiVecp.sys [2006-06-11 41984]
S3 a9hkd2vk;a9hkd2vk; C:Windowssystem32driversa9hkd2vk.sys []
S3 Amusbprt;A4Tech HID-compliant Mouse Driver; C:Windowssystem32DRIVERSAmusbprt.sys [2007-02-10 13824]
S3 ax9v7opk;ax9v7opk; C:Windowssystem32driversax9v7opk.sys []
S3 drmkaud;Звуковой дешифратор DRM ядра системы; C:Windowssystem32driversdrmkaud.sys [2008-01-21 5632]
S3 GMSIPCI;GMSIPCI; ??D:INSTALLGMSIPCI.SYS []
S3 HdAudAddService;Драйвер функции UAA для службы High Definition Audio (Microsoft), версия 1.1; C:Windowssystem32driversHdAudio.sys [2006-11-02 235520]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:Windowssystem32DRIVERSk750bus.sys [2005-02-11 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:Windowssystem32DRIVERSk750mdfl.sys [2005-02-11 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:Windowssystem32DRIVERSk750mdm.sys [2005-02-11 89872]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:Windowssystem32DRIVERSk750mgmt.sys [2005-03-11 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:Windowssystem32DRIVERSk750obex.sys [2005-02-11 79488]
S3 KMWDFilter;KMWDFilter; ??C:WindowsSystem32DriversKMWDFilter.SYS [2007-03-29 17024]
S3 MSKSSRV;Представитель служб потоков Microsoft; C:Windowssystem32driversMSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Посредник синхронизации потоков Microsoft; C:Windowssystem32driversMSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Представитель диспетчера качества потоков Microsoft; C:Windowssystem32driversMSPQM.sys [2008-01-21 5504]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:Windowssystem32driversMSTEE.sys [2008-01-21 6016]
S3 npkcrypt;npkcrypt; ??C:Program FilesLineage2systemnpkcrypt.sys [2005-03-31 21442]
S3 NTACCESS;NTACCESS; ??D:NTACCESS.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:Windowssystem32DRIVERSpccsmcfd.sys [2007-09-17 21632]
S3 SetupNTGLM7X;SetupNTGLM7X; ??D:NTGLM7X.sys []
S3 upperdev;upperdev; C:Windowssystem32DRIVERSusbser_lowerflt.sys []
S3 winusb;WinUSB Service; C:Windowssystem32DRIVERSwinusb.sys [2008-01-21 31616]
S3 WUDFRd;WUDFRd; C:Windowssystem32DRIVERSWUDFRd.sys [2008-01-21 83328]
S3 ZSMC303;VIMICRO USB PC Camera (VC0303); C:WindowsSystem32DriversusbVM303.sys [2006-02-23 391300]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:Windowssystem32driverserrdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:Windowssystem32driversmegasr.sys [2008-01-21 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:Windowssystem32driverswmiacpi.sys [2008-01-21 11264]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 CscService;@%systemroot%system32cscsvc.dll,-200; C:WindowsSystem32svchost.exe [2008-01-21 21504]
R2 NOD32krn;NOD32 Kernel Service; C:Program FilesEsetnod32krn.exe [2008-12-20 552064]
R2 nvsvc;NVIDIA Display Driver Service; C:Windowssystem32nvvsvc.exe [2008-09-17 196608]
R2 RapiMgr;@%windir%WindowsMobilerapimgr.dll,-104; C:Windowssystem32svchost.exe [2008-01-21 21504]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared filesRichVideo.exe [2005-08-08 167936]
R2 StarWindServiceAE;StarWind AE Service; C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe [2007-05-28 275968]
R2 WcesComm;@%windir%WindowsMobilewcescomm.dll,-40079; C:Windowssystem32svchost.exe [2008-01-21 21504]
S3 AppMgmt;@appmgmts.dll,-3250; C:Windowssystem32svchost.exe [2008-01-21 21504]
S3 Fax;@%systemroot%system32fxsresm.dll,-118; C:Windowssystem32fxssvc.exe [2008-01-21 523776]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2007-08-24 68464]
S3 NBService;NBService; C:Program FilesNeroNero 7Nero BackItUpNBService.exe [2006-11-10 774144]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2008-05-30 572416]
S3 UmRdpService;@%SystemRoot%system32umrdp.dll,-1000; C:WindowsSystem32svchost.exe [2008-01-21 21504]
S3 wbengine;@%systemroot%system32wbengine.exe,-104; C:Windowssystem32wbengine.exe [2008-01-21 917504]
EOF
Проверьте ещё ваш компьютер используя Kaspersky Online Scanner, для этого кликните по этой ссылке.
Результаты сканирования вставьте в ваш ответ и сообщите, как работает компьютер ?Работает просто прекрасно, проверил всевозможными антиками, ничего не выдает больше, днем запущу касперским просканить диски, надеюсь и он будет молчать)
Спасибо вам огромное за помощь)Рад вам помочь 🙂
Несколько завершающих действий.
1. Обновите ваши программы.
Зайдите на сайт update.microsoft.com и обновите Windows.2. Удалите все программы, которые вы использовали в процессе лечения, в случае необходимости, вы всегда сможете скачать их заново. Удаление их необходимо по-причине того, что они содержат компоненты, которые вирусы и трояны могут использовать в плохих целях.
Удалите RSIT, Avenger и другие скачанные вами сканеры и небольшие утилиты, а так же все файлы и каталоги который были созданы в процессе лечения компьютера.
3. Подойдите к защите вашего компьютера более серьёзно.
Большинство троянов и вирусов разработаны для поражения Internet Explorer`а, поэтому рекомендую установить и использовать Оперу или Firefox.
4. И несколько дополнительных советов.
Запустите ваш антивирус и проверьте состояние автоматической защиты. Включите, если она выключена.
Не забывайте обновлять Windows, ваши программы и особенно ваш антивирус.
Не посещайте незнакомые сайты, очень внимательно относитесь к файлам скаченным с Интернета.
Всего доброго!
- Для ответа в этой теме необходимо авторизоваться.
