- This topic has 2 ответа, 2 участника, and was last updated 15 years, 9 months назад by
.
-
Сообщения
-
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Администратор at 2010-01-15 21:56:46
Microsoft Windows XP Professional Service Pack 2
System drive C: has 546 MB (1%) free of 60 GB
Total RAM: 2047 MB (69% free)======Scheduled tasks folder======
C:WINDOWStasksNorton Internet Security — Запустить осмотр всей системы — Администратор.job
C:WINDOWStasksNorton Security Scan for Администратор.job
C:WINDOWStasksUser_Feed_Synchronization-{E7A2EE03-498F-407B-8930-62EE879064BD}.job
C:WINDOWStasksWindowsCheck.job======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2008-06-11 75128][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
C:Program FilesCommon FilesSymantec SharedcoSharedBrowser2.5coIEPlg.dll [2008-02-06 349552][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention — C:PROGRA~1COMMON~1SYMANT~1IDSIPSBHO.dll [2010-02-13 116088][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class — C:Documents and SettingsАдминистраторApplication DataMicrosoftInternet Explorerqipsearchbar.dll [2009-02-10 119808][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — c:program filesgooglegoogletoolbar1.dll [2009-06-21 720896][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — &Google — c:program filesgooglegoogletoolbar1.dll [2009-06-21 720896]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQ Toolbar — D:GameICQToolbartoolbaru.dll [2005-01-19 446464]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} — Show Norton Toolbar — C:Program FilesCommon FilesSymantec SharedcoSharedBrowser2.5CoIEPlg.dll [2008-02-06 349552]
Locked[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2008-10-07 13574144]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2008-10-07 86016]
«A399BB»=C:WINDOWSsystem3236D110A399BB.EXE [2009-06-11 1513696]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2008-06-12 34672]
«LiveMonitor»=C:Program FilesMSILive Update 3LMonitor.exe [2008-04-30 498176]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2008-12-26 18081280]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2008-06-19 57344]
«BluetoothAuthenticationAgent»=bthprops.cpl,,BluetoothAuthenticationAgent []
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«DrWebScheduler»=C:Program FilesDrWeb for Windowsdrwebscd.exe [2002-05-06 111104]
«OfficeGuard RegChecker»=C:Program FilesKaspersky LabKaspersky Anti-Virus Personal Proogrc.exe [2001-09-12 24576]
«AVPCC»=C:Program FilesKaspersky LabKaspersky Anti-Virus Personal Proavpcc.exe [2002-03-07 471040]
«ccApp»=C:Program FilesCommon FilesSymantec SharedccApp.exe [2008-01-25 51048]
«osCheck»=C:Program FilesNorton Internet SecurityosCheck.exe [2008-02-07 718704][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-18 15360]
«VisualTaskTips»=C:Program FilesVisualTaskTipsVisualTaskTips.exe [2007-07-02 36864]
«DAEMON Tools»=C:Program FilesDAEMON Toolsdaemon.exe [2006-11-12 157592]
«NBJ»=D:Documents and SettingsАдминистраторNero BackItUpNBJ.exe [2005-10-11 1961984]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Ashampoo AntiVirus Service.lnk — C:Program FilesAshampooAshampoo AntiVirusGuardGui.exe
InterVideo WinCinema Manager.lnk — D:CommonBinWinCinemaMgr.exe
Kaspersky Anti-Hacker.lnk — D:GameKaspersky Anti-HackerKAVPF.exe
Microsoft Office.lnk — C:Program FilesMicrosoft OfficeOfficeOSA9.EXEC:Documents and SettingsАдминистраторГлавное менюПрограммыАвтозагрузка
ЎЎЎЎЎЎ.lnk — C:WINDOWSsystem3236D110A399BB.EXE[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32wpdshserviceobj.dll [2007-06-18 133632]
UPnPMonitor — {e57ce738-33e8-4c51-8354-bb4de9d215d1} — C:WINDOWSsystem32upnpui.dll [2004-08-18 239616][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa]
«authentication packages»=msv1_0
nwprovau[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalPEVSystemStart]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalprocexp90.Sys]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkPEVSystemStart]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkprocexp90.Sys]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=323
«NoDriveAutoRun»=67108863[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesWheelmanBinariesWheelman.exe»=»C:Program FilesWheelmanBinariesWheelman.exe:*:Enabled:Wheelman»
«C:Program FilesNight CommandoMOHAA.EXE»=»C:Program FilesNight CommandoMOHAA.EXE:*:Enabled:Medal of Honor Allied Assault»
«D:GameICQLiteICQLite.exe»=»D:GameICQLiteICQLite.exe:*:Enabled:ICQ Lite»
«D:Gamemiranda32.exe»=»D:Gamemiranda32.exe:*:Enabled:Miranda IM»
«D:Left4Deadhl2.exe»=»D:Left4Deadhl2.exe:*:Enabled:hl2»
«D:bfvietnam.exe»=»D:bfvietnam.exe:*:Enabled:bfvietnam»
«D:BF1942_w32ded.exe»=»D:BF1942_w32ded.exe:*:Enabled:BF1942_w32ded»
«D:DVD7WinDVD.exe»=»D:DVD7WinDVD.exe:*:Enabled:WinDVD»
«D:GamesIronManIronMan.exe»=»D:GamesIronManIronMan.exe:*:Enabled:A2M Game Engine»
«C:WINDOWSsystem32usmtmigwiz.exe»=»C:WINDOWSsystem32usmtmigwiz.exe:*:Enabled:Мастер переноса файлов и параметров»
«C:WINDOWSsystem32mmc.exe»=»C:WINDOWSsystem32mmc.exe:*:Disabled:Консоль управления (MMC)»
«D:QIPqip.exe»=»D:QIPqip.exe:*:Enabled:Quiet Internet Pager»
«C:Program FilesICQLiteicq.exe»=»C:Program FilesICQLiteicq.exe:*:Enabled:ICQ Lite»
«D:Program FilesGameSpy ArcadeAphex.exe»=»D:Program FilesGameSpy ArcadeAphex.exe:*:Enabled:GameSpy Arcade 1.08»
«C:Program FilesQIPqip.exe»=»C:Program FilesQIPqip.exe:*:Enabled:Quiet Internet Pager»
«C:Program FilesMyProxyMyProxy.exe»=»C:Program FilesMyProxyMyProxy.exe:LocalSubNet:Enabled:MyProxy»
«D:GamesInstinktinstinct.exe»=»D:GamesInstinktinstinct.exe:*:Enabled:ds2main»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesICQLiteicq.exe»=»C:Program FilesICQLiteicq.exe:*:Enabled:ICQ Lite»[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2G]
shellAutoRuncommand — G:AutoRun.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{0c10ad5e-e18e-11de-8e1f-002421205ad3}]
shellAutoRuncommand — G:AutoRun.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{22f21f68-e18d-11de-8e1e-002421205ad3}]
shellAutoRuncommand — F:AutoRun.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{22f21f6b-e18d-11de-8e1e-002421205ad3}]
shellAutoRuncommand — G:AutoRun.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{3aaff7d9-fdf1-11de-8e99-a227b50724e8}]
shell1command — N:Notepad.exe
shell2command — N:Notepad.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Notepad.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{3e2e2496-fb1b-11de-8e8f-dd5594f674ac}]
shellAutoRuncommand — G:AutoRun.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{48f29939-fd2e-11de-8e96-fc2b99dcfe09}]
shell1command — N:Notepad.exe
shell2command — N:Notepad.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Notepad.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{ad4b6d68-5853-11de-8c43-002421205ad3}]
shellAutoRuncommand — wscript.exe ..vbs
shellopencommand — wscript.exe ..vbs[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{ce7ce364-747d-11de-8cc6-002421205ad3}]
shell1command — F:Notepad.exe
shell2command — F:Notepad.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Notepad.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{ecbfd4b8-59eb-11de-8c4b-002421205ad3}]
shell1command — F:Notepad.exe
shell2command — F:Notepad.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Notepad.exe======File associations======
.reg — open —
======List of files/folders created in the last 1 months======
2010-02-13 20:48:06 —-D—- C:Documents and SettingsАдминистраторApplication DataSymantec
2010-02-13 20:40:49 —-D—- C:Program FilesNorton Internet Security
2010-02-13 20:38:56 —-A—- C:WINDOWSsystem32S32EVNT1.DLL
2010-02-13 20:37:10 —-D—- C:Program FilesSymantec
2010-02-13 20:37:10 —-D—- C:Documents and SettingsAll UsersApplication DataSymantec
2010-02-13 20:34:48 —-D—- C:Program FilesCommon FilesSymantec Shared
2010-01-15 21:42:23 —-D—- C:Program Filestrend micro
2010-01-15 21:42:12 —-D—- C:rsit
2010-01-15 21:15:38 —-A—- C:WINDOWSPEV.exe
2010-01-15 21:15:38 —-A—- C:WINDOWSNIRCMD.exe
2010-01-15 21:15:38 —-A—- C:WINDOWSMBR.exe
2010-01-15 21:15:37 —-A—- C:WINDOWSzip.exe
2010-01-15 21:15:37 —-A—- C:WINDOWSSWXCACLS.exe
2010-01-15 21:15:37 —-A—- C:WINDOWSSWSC.exe
2010-01-15 21:15:37 —-A—- C:WINDOWSSWREG.exe
2010-01-15 21:15:37 —-A—- C:WINDOWSsed.exe
2010-01-15 21:15:37 —-A—- C:WINDOWSgrep.exe
2010-01-15 21:15:22 —-D—- C:WINDOWSERDNT
2010-01-15 21:13:29 —-SD—- C:ComboFix
2010-01-15 21:10:38 —-D—- C:Qoobox
2010-01-14 22:37:21 —-D—- C:Program FilesNorton Security Scan
2010-01-14 22:37:21 —-D—- C:Documents and SettingsAll UsersApplication DataNorton
2010-01-14 22:37:16 —-D—- C:Program FilesNortonInstaller
2010-01-14 22:37:16 —-D—- C:Documents and SettingsAll UsersApplication DataNortonInstaller
2010-01-14 20:07:59 —-HDC—- C:WINDOWS$NtUninstallKB957097$
2010-01-14 20:07:38 —-HDC—- C:WINDOWS$NtUninstallKB970238$
2010-01-14 18:33:44 —-D—- C:WINDOWSsystem32Adobe
2010-01-14 10:53:54 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2010-01-14 10:53:40 —-HDC—- C:WINDOWS$NtUninstallKB954154_WM11$
2010-01-14 10:53:11 —-HDC—- C:WINDOWS$NtUninstallKB923561$
2010-01-14 01:13:24 —-D—- C:Documents and SettingsАдминистраторApplication DataAVG8
2010-01-13 16:20:31 —-HDC—- C:WINDOWS$NtUninstallKB951376-v2$
2010-01-13 16:20:19 —-HDC—- C:WINDOWS$NtUninstallKB959426$
2010-01-13 16:20:07 —-HDC—- C:WINDOWS$NtUninstallKB956803$
2010-01-13 16:19:56 —-HDC—- C:WINDOWS$NtUninstallKB960859$
2010-01-13 16:19:48 —-HDC—- C:WINDOWS$NtUninstallKB958869$
2010-01-13 16:19:38 —-HDC—- C:WINDOWS$NtUninstallKB954155_WM9$
2010-01-13 16:19:31 —-HDC—- C:WINDOWS$NtUninstallKB955759$
2010-01-13 16:19:21 —-HDC—- C:WINDOWS$NtUninstallKB974318$
2010-01-13 16:19:11 —-HDC—- C:WINDOWS$NtUninstallKB969059$
2010-01-13 16:19:01 —-HDC—- C:WINDOWS$NtUninstallKB950974$
2010-01-13 16:18:52 —-HDC—- C:WINDOWS$NtUninstallKB971557$
2010-01-13 16:18:43 —-HDC—- C:WINDOWS$NtUninstallKB974112$
2010-01-13 16:18:35 —-HDC—- C:WINDOWS$NtUninstallKB956844$
2010-01-13 16:18:26 —-HDC—- C:WINDOWS$NtUninstallKB961501$
2010-01-13 16:18:18 —-HDC—- C:WINDOWS$NtUninstallKB971633$
2010-01-13 16:18:10 —-HDC—- C:WINDOWS$NtUninstallKB973869$
2010-01-13 16:17:59 —-HDC—- C:WINDOWS$NtUninstallKB952004$
2010-01-13 16:17:50 —-HDC—- C:WINDOWS$NtUninstallKB941569$
2010-01-13 16:17:18 —-HDC—- C:WINDOWS$NtUninstallKB973687$
2010-01-13 16:17:11 —-HDC—- C:WINDOWS$NtUninstallKB950762$
2010-01-13 16:17:00 —-HDC—- C:WINDOWS$NtUninstallKB973904$
2010-01-13 16:11:00 —-A—- C:log.tmp
2010-01-13 16:10:39 —-D—- C:Program FilesAshampoo
2010-01-13 04:05:25 —-HDC—- C:WINDOWS$NtUninstallKB958687$
2010-01-13 03:56:19 —-HDC—- C:WINDOWS$NtUninstallKB951748$
2010-01-13 03:26:50 —-HDC—- C:WINDOWS$NtUninstallKB960803$
2010-01-13 03:26:45 —-HDC—- C:WINDOWS$NtUninstallKB973815$
2010-01-13 03:26:36 —-HDC—- C:WINDOWS$NtUninstallKB971032$
2010-01-13 03:26:29 —-HDC—- C:WINDOWS$NtUninstallKB956802$
2010-01-07 02:28:50 —-A—- C:WINDOWSModemLog_HUAWEI Mobile Connect — 3G Modem #4.txt
2010-01-07 02:18:52 —-HDC—- C:WINDOWS$NtUninstallKB943460$
2010-01-06 03:25:46 —-HDC—- C:WINDOWS$NtUninstallKB957095$
2010-01-06 03:25:40 —-HDC—- C:WINDOWS$NtUninstallKB973346$
2010-01-06 03:25:33 —-HDC—- C:WINDOWS$NtUninstallKB938464-v2$
2010-01-06 03:15:44 —-D—- C:Documents and SettingsАдминистраторApplication DataDurbetsel 6.3
2010-01-06 03:15:41 —-D—- C:Documents and SettingsAll UsersApplication Data{1729E7CE-2606-403C-B929-0DB21FE0139A}
2010-01-06 03:15:39 —-D—- C:Program FilesКарточная игра в дурака 6.2
2010-01-01 17:37:22 —-D—- C:Program FilesQIP
2009-12-29 15:17:00 —-HD—- C:WINDOWSPIF
2009-12-29 03:14:59 —-HDC—- C:WINDOWS$NtUninstallKB937894$
2009-12-29 03:14:54 —-HDC—- C:WINDOWS$NtUninstallKB941644$
2009-12-29 03:14:49 —-HDC—- C:WINDOWS$NtUninstallKB946026$
2009-12-29 03:14:44 —-HDC—- C:WINDOWS$NtUninstallKB948590$
2009-12-29 03:14:39 —-HDC—- C:WINDOWS$NtUninstallKB943485$
2009-12-29 03:14:33 —-HDC—- C:WINDOWS$NtUninstallKB945553$
2009-12-29 03:14:28 —-HDC—- C:WINDOWS$NtUninstallKB943055$
2009-12-29 03:14:22 —-HDC—- C:WINDOWS$NtUninstallKB944653$
2009-12-29 02:37:46 —-D—- C:Documents and SettingsАдминистраторApplication DataMyProxy
2009-12-28 03:14:58 —-D—- C:Program FilesCommon FilesICQ
2009-12-28 03:14:48 —-D—- C:Documents and SettingsAll UsersApplication DataICQ
2009-12-28 03:11:31 —-D—- C:Documents and SettingsАдминистраторApplication Dataicq
2009-12-28 03:11:24 —-D—- C:Program FilesICQLite
2009-12-27 18:26:32 —-HDC—- C:WINDOWS$NtUninstallKB960225$
2009-12-27 16:33:15 —-D—- C:Documents and SettingsАдминистраторApplication DataYandex
2009-12-27 16:33:12 —-D—- C:Documents and SettingsАдминистраторApplication DataMozilla
2009-12-27 16:32:55 —-D—- C:Program FilesMozilla Firefox======List of files/folders modified in the last 1 months======
2010-02-13 21:06:14 —-D—- C:WINDOWSPrefetch
2010-01-15 22:00:47 —-A—- C:WINDOWSModemLog_HUAWEI Mobile Connect — 3G Modem #2.txt
2010-01-15 21:43:44 —-D—- C:WINDOWSTemp
2010-01-15 21:42:23 —-RD—- C:Program Files
2010-01-15 21:42:21 —-D—- C:WINDOWSsystem32CatRoot2
2010-01-15 21:15:44 —-A—- C:WINDOWSSchedLgU.Txt
2010-01-15 21:15:38 —-D—- C:WINDOWS
2010-01-15 17:03:44 —-HD—- C:WINDOWSsystem32 48343
2010-01-15 16:44:02 —-D—- C:WINDOWSsystem32
2010-01-14 22:37:36 —-SD—- C:WINDOWSTasks
2010-01-14 22:37:21 —-D—- C:WINDOWSsystem32drivers
2010-01-14 20:21:58 —-A—- C:WINDOWSModemLog_Стандартный модем 9600 bps.txt
2010-01-14 20:08:06 —-HD—- C:WINDOWSinf
2010-01-14 20:08:01 —-RSHDC—- C:WINDOWSsystem32dllcache
2010-01-14 20:07:53 —-HD—- C:WINDOWS$hf_mig$
2010-01-14 20:07:49 —-A—- C:WINDOWSimsins.BAK
2010-01-14 19:59:51 —-D—- C:STALSTCS
2010-01-14 19:50:25 —-HD—- C:Program FilesInstallShield Installation Information
2010-01-14 19:50:24 —-D—- C:Program FilesCommon Files
2010-01-14 01:19:28 —-SHD—- C:WINDOWSInstaller
2010-01-14 00:29:09 —-A—- C:WINDOWSModemLog_HUAWEI Mobile Connect — 3G Modem.txt
2010-01-13 22:15:33 —-D—- C:Program FilesMegaFon Internet
2010-01-13 17:54:39 —-D—- C:Program FilesDAEMON Tools
2010-01-13 16:21:37 —-D—- C:WINDOWSAppPatch
2010-01-13 16:19:48 —-D—- C:WINDOWSWinSxS
2010-01-13 16:10:44 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2010-01-13 13:31:00 —-D—- C:Program FilesInternet Explorer
2010-01-13 03:28:35 —-D—- C:WINDOWSsystem32Setup
2010-01-13 03:10:58 —-A—- C:WINDOWSNeroDigital.ini
2010-01-11 16:53:48 —-SD—- C:Documents and SettingsАдминистраторApplication DataMicrosoft
2010-01-10 17:57:36 —-D—- C:WINDOWSsystem32NtmsData
2010-01-08 23:43:48 —-A—- C:WINDOWSavisplitter.INI
2010-01-08 09:10:23 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-01-08 09:00:52 —-D—- C:Program FilesEA Games
2010-01-08 09:00:44 —-D—- C:WINDOWSsystem32appmgmt
2010-01-08 08:56:34 —-A—- C:WINDOWSsystem32fecdced0_s.dll
2010-01-03 19:40:02 —-A—- C:WINDOWSwcx_ftp.ini
2010-01-02 13:23:07 —-SHD—- C:RECYCLER
2009-12-31 02:04:40 —-A—- C:WINDOWSsystem.ini
2009-12-28 02:47:40 —-A—- C:WINDOWSsystem32PnkBstrB.exe
2009-12-26 12:06:28 —-HD—- C:WINDOWSsystem32GroupPolicy
2009-12-21 20:09:19 —-D—- C:WINDOWSnetwork diagnostic
2009-12-21 20:09:11 —-D—- C:WINDOWSsystem32CatRoot
2009-12-21 16:29:44 —-D—- C:WINDOWSsystem32config
2009-12-21 16:29:33 —-D—- C:WINDOWSsystem32wbem
2009-12-21 16:29:33 —-D—- C:WINDOWSRegistration
2009-12-21 01:09:37 —-D—- C:WINDOWSie8updates
2009-12-17 16:45:13 —-A—- C:WINDOWSModemLog_HUAWEI Mobile Connect — 3G Modem #3.txt======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 drwebnet;SpIDer Guard boot hook driver for Windows NT; C:WINDOWSsystem32driversdrwebnet.sys [2002-05-06 5200]
R1 eeCtrl;Symantec Eraser Control driver; ??C:Program FilesCommon FilesSymantec SharedEENGINEeeCtrl.sys []
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2007-10-12 40448]
R1 Klif;Klif; C:WINDOWSSystem32driversklif.sys [2006-05-18 139024]
R1 Klmc;Klmc; C:WINDOWSSystem32driversklmc.sys [2006-05-18 14771]
R1 SPBBCDrv;SPBBCDrv; ??C:Program FilesCommon FilesSymantec SharedSPBBCSPBBCDrv.sys []
R1 SRTSPX;SRTSPX; C:WINDOWSSystem32DriversSRTSPX.SYS [2008-01-31 43696]
R1 StarOpen;StarOpen; C:WINDOWSsystem32driversStarOpen.sys [2006-07-24 5632]
R1 SYMTDI;SYMTDI; C:WINDOWSSystem32DriversSYMTDI.SYS [2008-02-05 188464]
R2 avpg;avpg; ??C:PROGRA~1COMMON~1KASPER~1avpg.sys []
R2 CO_Mon;CO_Mon; ??C:WINDOWSsystem32driversCO_Mon.sys []
R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS-совместимый транспортный протокол; C:WINDOWSsystem32DRIVERSnwlnkipx.sys [2004-08-18 88448]
R2 NwlnkNb;NWLink NetBIOS; C:WINDOWSsystem32DRIVERSnwlnknb.sys [2004-08-18 63232]
R2 NwlnkSpx;Протокол NWLink SPX/SPXII; C:WINDOWSsystem32DRIVERSnwlnkspx.sys [2004-08-18 55936]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2006-12-04 62336]
R3 AshAvScan;AshAvScan; C:WINDOWSsystem32DRIVERSAshAvScan.sys [2007-04-16 7168]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; ??C:Program FilesCommon FilesSymantec SharedEENGINEEraserUtilRebootDrv.sys []
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-12-26 138752]
R3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:WINDOWSsystem32DRIVERSewusbmdm.sys [2009-06-22 102528]
R3 hwusbdev;Huawei DataCard USB PNP Device; C:WINDOWSsystem32DRIVERSewusbdev.sys [2009-06-22 100480]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2008-12-26 4968448]
R3 NAVENG;NAVENG; ??C:PROGRA~1COMMON~1SYMANT~1VIRUSD~120080122.037NAVENG.SYS []
R3 NAVEX15;NAVEX15; ??C:PROGRA~1COMMON~1SYMANT~1VIRUSD~120080122.037NAVEX15.SYS []
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2008-10-07 6133856]
R3 NWRDR;NetWare Rdr; C:WINDOWSsystem32DRIVERSnwrdr.sys [2007-11-28 163456]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WINDOWSSystem32DriversRootMdm.sys [2004-08-18 5888]
R3 SRTSP;SRTSP; C:WINDOWSSystem32DriversSRTSP.SYS [2008-01-31 279088]
R3 SYMDNS;SYMDNS; C:WINDOWSSystem32DriversSYMDNS.SYS [2008-02-05 13616]
R3 SymEvent;SymEvent; ??C:WINDOWSsystem32DriversSYMEVENT.SYS []
R3 SYMFW;SYMFW; C:WINDOWSSystem32DriversSYMFW.SYS [2008-02-05 96432]
R3 SYMIDS;SYMIDS; C:WINDOWSSystem32DriversSYMIDS.SYS [2008-02-05 38576]
R3 SYMIDSCO;SYMIDSCO; ??C:PROGRA~1COMMON~1SYMANT~1SymcDataipsdefs20071204.002SymIDSCo.sys []
R3 SymIMMP;SymIMMP; C:WINDOWSsystem32DRIVERSSymIM.sys [2008-02-06 31408]
R3 SYMNDIS;SYMNDIS; C:WINDOWSSystem32DriversSYMNDIS.SYS [2008-02-05 37424]
R3 SYMREDRV;SYMREDRV; C:WINDOWSSystem32DriversSYMREDRV.SYS [2008-02-05 22320]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-03 31616]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2006-10-23 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2007-04-09 59392]
R3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-18 26496]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2006-10-23 20608]
S2 SPIDER;SpIDer FS Monitor for Windows NT; ??C:Program FilesDrWeb for Windowsspider.sys []
S3 BthEnum;Драйвер блока запроса Bluetooth; C:WINDOWSsystem32DRIVERSBthEnum.sys [2004-08-03 17024]
S3 BTHMODEM;Драйвер связи для модема Bluetooth; C:WINDOWSsystem32DRIVERSbthmodem.sys [2004-08-03 38016]
S3 BthPan;Bluetooth Device (Personal Area Network); C:WINDOWSsystem32DRIVERSbthpan.sys [2004-08-03 100992]
S3 BTHPORT;Драйвер порта Bluetooth; C:WINDOWSSystem32DriversBTHport.sys [2008-06-14 272512]
S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:WINDOWSSystem32DriversBTHUSB.sys [2004-08-03 18944]
S3 GMSIPCI;GMSIPCI; ??E:INSTALLGMSIPCI.SYS []
S3 MotoSwitchService;MotoSwitch Service; C:WINDOWSsystem32DRIVERSmotswch.sys []
S3 MSICPL;MSICPL; ??E:install4MSICPL.sys []
S3 NTACCESS;NTACCESS; ??E:NTACCESS.sys []
S3 P2k;Motorola USB Device; C:WINDOWSsystem32DRIVERSP2k.sys []
S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:WINDOWSsystem32DRIVERSrfcomm.sys [2004-08-03 59648]
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2008-09-25 115328]
S3 SetupNTGLM7X;SetupNTGLM7X; ??E:NTGLM7X.sys []
S3 SRTSPL;SRTSPL; C:WINDOWSSystem32DriversSRTSPL.SYS [2008-01-31 317616]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:WINDOWSsystem32DRIVERSss_bus.sys [2005-08-30 58320]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:WINDOWSsystem32DRIVERSss_mdfl.sys [2005-08-30 8304]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:WINDOWSsystem32DRIVERSss_mdm.sys [2005-08-30 94000]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:WINDOWSsystem32DRIVERSSymIM.sys [2008-02-06 31408]
S3 usbaudio;Аудио драйвер USB (WDM); C:WINDOWSsystem32driversusbaudio.sys [2007-04-10 60032]
S3 usbser;Motorola USB Modem Driver; C:WINDOWSsystem32DRIVERSusbser.sys [2004-08-03 25600]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2007-06-18 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2007-06-18 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
S4 sptd;sptd; C:WINDOWSSystem32Driverssptd.sys [2009-06-13 646392]
S4 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2004-08-18 12032]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Automatic LiveUpdate Scheduler;Планировщик автоматического запуска LiveUpdate; C:Program FilesSymantecLiveUpdateAluSchedulerSvc.exe [2008-02-09 238968]
R2 avGuard;avGuard Service; C:Program FilesAshampooAshampoo AntiVirusashAvSrv.exe [2008-02-07 566608]
R2 BthServ;Bluetooth Support Service; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]
R2 ccEvtMgr;Symantec Event Manager; C:Program FilesCommon FilesSymantec SharedccSvcHst.exe [2008-01-25 149864]
R2 ccSetMgr;Symantec Settings Manager; C:Program FilesCommon FilesSymantec SharedccSvcHst.exe [2008-01-25 149864]
R2 CLTNetCnService;Symantec Lic NetConnect service; C:Program FilesCommon FilesSymantec SharedccSvcHst.exe [2008-01-25 149864]
R2 GoogleUpdateBeta;Google Update Service; C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdateBeta.exe [2009-12-16 53248]
R2 LiveUpdate Notice;LiveUpdate Notice; C:Program FilesCommon FilesSymantec SharedccSvcHst.exe [2008-01-25 149864]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe [2008-09-24 935208]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2008-10-07 163908]
R2 NWCWorkstation;Клиент для сетей NetWare; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]
R2 NwSapAgent;Агент SAP; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2009-06-13 66872]
R3 Symantec Core LC;Symantec Core LC; C:PROGRA~1COMMON~1SYMANT~1CCPD-LCsymlcsvc.exe [2010-02-13 1245064]
S2 AVPCC;AVP Control Centre Service; C:Program FilesKaspersky LabKaspersky Anti-Virus Personal Proavpcc.exe [2002-03-07 471040]
S2 KAVMonitorService;KAV Monitor Service; C:Program FilesKaspersky LabKaspersky Anti-Virus Personal Proavpm.exe [2002-03-11 516160]
S2 sfrem02;FrontLine Drivers Auto Removal (v2); C:WINDOWSsystem32sfrem02.exe [2006-05-11 358008]
S2 spidernt;SpIDer Guard for Windows NT; C:Program FilesDrWeb for Windowsspidernt.exe []
S3 comHost;COM Host; C:Program FilesCommon FilesSymantec SharedVAScannercomHost.exe [2007-08-22 55640]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe [2004-10-22 73728]
S3 kavsvc;Kaspersky Anti-Virus Service; C:Program FilesKaspersky LabKaspersky Anti-Virus Personalkavsvc.exe [2006-05-18 1024106]
S3 LiveUpdate;LiveUpdate; C:Program FilesSymantecLiveUpdateLuComServer_3_4.EXE [2008-02-09 3220856]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]
EOF
Здравствуйте, добро пожаловать на Spyware-ru форум.
Судя по логу, у вас установлено несколько антивирусных программ. Вам необходимо оставить только одну!
Скачайте OTM by OldTimer кликнув по этой ссылке.
Запустите OTM и в большое поле ввода (заголовок этого поля выделен желтым цветом) скопируйте следующий текст.:reg
[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{3aaff7d9-fdf1-11de-8e99-a227b50724e8}]
[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{3e2e2496-fb1b-11de-8e8f-dd5594f674ac}]
[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{48f29939-fd2e-11de-8e96-fc2b99dcfe09}]
[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{ad4b6d68-5853-11de-8c43-002421205ad3}]
[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{ce7ce364-747d-11de-8cc6-002421205ad3}]
[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{ecbfd4b8-59eb-11de-8c4b-002421205ad3}]
:files
C:WINDOWStasksWindowsCheck.job
C:Documents and SettingsАдминистраторГлавное менюПрограммыАвтозагрузкаЎЎЎЎЎЎ.lnk
C:WINDOWSsystem3236D110A399BB.EXE
:Commands
[emptytemp]
[Reboot]Проверьте вставленный скрипт, если слева перед директивами появились пробелы, то удалите их, скрипт должен выглядеть так же как в сообщении. Кликните по кнопке MoveIt!. В процессе работы возможна перезагрузка компьютера.
По-завершении работы программы должен будет показан лог. Если лог не будет показан, то его можно найти в папке C:_OTMMovedFiles.Вставьте в ваше ответное сообщение содержимое этого лога. И приложите свежий RSIT лог.
- Для ответа в этой теме необходимо авторизоваться.
