не работает антивирус, диспечер задач и тд.

[SERT]

У меня такая же проблема(( не работает антивирус, диспечер задач и тд.
вот лог из комбофикса

ComboFix 09-06-07.05 — Серёга 08.06.2009 14:32.1 — NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.2046.1453 [GMT 4:00]
Running from: c:documents and settingsСерёгаРабочий столComboFix.exe
AV: Антивирус Касперского *On-access scanning disabled* (Outdated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
ADS — WINDOWS: deleted 24 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:windowsAppPatchCustom{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb
c:windowssystem32BReWErS.dll
c:windowssystem32tmp12.tmp
c:windowssystem32tmp13.tmp
c:windowssystem32tmp14.tmp
c:windowssystem32tmp15.tmp
c:windowssystem32tmp32.tmp
c:windowssystem32tmp37.tmp
c:windowssystem32tmp38.tmp

.
((((((((((((((((((((((((( Files Created from 2009-05-08 to 2009-06-08 )))))))))))))))))))))))))))))))
.

2009-06-08 09:10 . 2009-06-08 09:10

---

d

---

w- c:program filesControl for XP
2009-06-08 08:55 . 2009-06-08 08:55

---

d—h—w- c:windowssystem32GroupPolicy
2009-06-08 07:55 . 2009-06-08 08:09

---

d

---

w- c:program filesDrWeb AV-Desk
2009-06-08 07:35 . 2009-06-08 10:14

---

d

---

w- c:program filesVirtual CD v9
2009-06-06 09:46 . 2009-06-06 19:19

---

d

---

w- c:program filesApexDC++
2009-06-04 08:47 . 2009-06-04 08:47

---

d

---

w- c:documents and settings!5@Q30
2009-06-01 12:05 . 2009-06-01 12:05

---

d

---

w- c:windowsAC54E5443E42443CA91DA00A6974C592.TMP
2009-05-28 04:46 . 2008-04-15 12:00 6656 -c—a-w- c:windowssystem32dllcachec_is2022.dll
2009-05-28 04:46 . 2008-04-15 12:00 6656 —-a-w- c:windowssystem32c_is2022.dll
2009-05-28 04:42 . 2001-08-18 02:36 8704 -c—a-w- c:windowssystem32dllcachekbdjpn.dll
2009-05-28 04:42 . 2001-08-18 02:36 8704 —-a-w- c:windowssystem32kbdjpn.dll
2009-05-28 04:42 . 2001-08-18 02:36 8192 -c—a-w- c:windowssystem32dllcachekbdkor.dll
2009-05-28 04:42 . 2001-08-18 02:36 8192 —-a-w- c:windowssystem32kbdkor.dll
2009-05-28 04:42 . 2001-08-17 18:55 6144 -c—a-w- c:windowssystem32dllcachekbd101c.dll
2009-05-28 04:42 . 2001-08-17 18:55 6144 —-a-w- c:windowssystem32kbd101c.dll
2009-05-28 04:42 . 2001-08-17 18:55 5632 -c—a-w- c:windowssystem32dllcachekbd103.dll
2009-05-28 04:42 . 2001-08-17 18:55 5632 —-a-w- c:windowssystem32kbd103.dll
2009-05-28 04:42 . 2001-08-17 18:55 6144 -c—a-w- c:windowssystem32dllcachekbd101b.dll
2009-05-28 04:42 . 2001-08-17 18:55 6144 —-a-w- c:windowssystem32kbd101b.dll
2009-05-28 04:42 . 2008-04-14 17:39 6144 -c—a-w- c:windowssystem32dllcachekbd106.dll
2009-05-28 04:42 . 2008-04-14 17:39 6144 —-a-w- c:windowssystem32kbd106.dll
2009-05-26 15:00 . 2009-05-26 15:00

---

d

---

w- c:program filesDVDVIDEOSOFT
2009-05-21 18:01 . 2009-05-25 14:15

---

d

---

w- c:program filesBV72
2009-05-17 12:11 . 2009-05-17 12:11

---

d

---

w- c:program filesDelphi 10 Lite
2009-05-17 10:05 . 2009-05-17 10:05

---

d

---

w- c:program filesWinCustomize
2009-05-17 10:05 . 2000-05-17 05:52 187392 —-a-w- c:windowssystem32JPGUtils.dll
2009-05-17 08:21 . 2009-05-17 08:21 1571840 -c—a-w- c:windowssystem32dllcacheSfcFiles.dll
2009-05-17 07:53 . 2009-05-17 07:53

---

d

---

w- c:documents and settingsAll UsersApplication DataPMB Files
2009-05-17 07:49 . 2009-05-17 07:49

---

d

---

w- c:program filesPando Networks

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-08 10:14 . 2008-06-18 09:40

---

d—h—w- c:program filesInstallShield Installation Information
2009-06-08 09:57 . 2008-08-12 08:32

---

d

---

w- c:program filesSteam
2009-06-08 03:38 . 2009-04-08 11:04

---

d

---

w- c:program filesABBYY FineReader 9.0
2009-06-07 18:51 . 2008-06-18 10:00 564056 —sha-w- c:windowssystem32driversfidbox.idx
2009-06-07 18:51 . 2008-06-18 10:00 41334304 —sha-w- c:windowssystem32driversfidbox.dat
2009-06-07 18:51 . 2008-06-18 10:00 3060000 —sha-w- c:windowssystem32driversfidbox2.dat
2009-06-07 18:51 . 2008-06-18 10:00 294212 —sha-w- c:windowssystem32driversfidbox2.idx
2009-06-07 12:21 . 2008-06-18 10:00

---

d

---

w- c:documents and settingsAll UsersApplication DataKaspersky Lab
2009-06-03 06:09 . 2008-07-20 09:04

---

d

---

w- c:program filesCommon FilesAdobe
2009-06-01 14:47 . 2008-08-24 12:27

---

d

---

w- c:program filesDAEMON Tools Pro
2009-06-01 12:05 . 2008-06-21 08:11

---

d

---

w- c:program filesCommon FilesWise Installation Wizard
2009-05-31 06:52 . 2008-11-12 16:27

---

d

---

w- c:documents and settingsAll UsersApplication DataTrackMania
2009-05-30 12:22 . 2008-07-17 08:08

---

d—a-w- c:documents and settingsAll UsersApplication DataTEMP
2009-05-23 17:36 . 2008-06-18 10:32 189072 —-a-w- c:windowssystem32PnkBstrB.exe
2009-05-23 17:27 . 2008-06-18 10:32 138920 —-a-w- c:windowssystem32driversPnkBstrK.sys
2009-05-20 18:00 . 2008-06-18 10:00 94643 —-a-w- c:windowssystem32driversklick.dat
2009-05-20 18:00 . 2008-06-18 10:00 105395 —-a-w- c:windowssystem32driversklin.dat
2009-05-17 10:50 . 2008-07-04 06:43

---

d

---

w- c:program filesJava
2009-05-17 10:36 . 2008-06-18 09:49

---

d

---

w- c:documents and settingsAll UsersApplication DataMicrosoft Help
2009-05-17 10:07 . 2009-01-18 08:37 4094976 —-a-w- c:windowssystem32logonuiX.exe
2009-05-17 08:21 . 2004-08-17 14:04 1571840 —-a-w- c:windowssystem32SfcFiles.dll
2009-05-17 08:21 . 2004-08-17 14:04 219648 —-a-w- c:windowssystem32uxtheme.dll
2009-05-12 06:57 . 2009-05-03 11:44

---

d

---

w- c:program filesGRETECH
2009-05-07 13:30 . 2006-12-31 22:43

---

d

---

w- c:program filesOpera
2009-05-06 08:59 . 2008-07-15 08:12

---

d

---

w- c:program filesQIP
2009-05-05 08:43 . 2008-10-21 16:16

---

d

---

w- c:documents and settingsAll UsersApplication DataVMware
2009-05-05 08:43 . 2001-10-20 12:00 81634 —-a-w- c:windowssystem32perfc019.dat
2009-05-05 08:43 . 2001-10-20 12:00 481250 —-a-w- c:windowssystem32perfh019.dat
2009-05-05 03:34 . 2008-10-21 16:21

---

d

---

w- c:documents and settingsLocalServiceApplication DataVMware
2009-05-04 10:50 . 2008-06-21 08:11

---

d

---

w- c:program filesAGEIA Technologies
2009-05-02 06:01 . 2009-05-02 06:01

---

d

---

w- c:program filesDownload Master
2009-04-30 12:24 . 2009-01-03 11:41 96 —ha-w- c:windowssystem32HsInfo.dat
2009-04-28 09:17 . 2009-04-07 13:22

---

d

---

w- c:program filesAviSynth 2.5
2009-04-28 09:01 . 2009-04-28 09:01

---

d

---

w- c:program filesCucusoft
2009-04-28 09:00 . 2009-04-28 09:00

---

d

---

w- c:program filesCommon FilesDownload Manager
2009-04-25 11:36 . 2009-04-25 11:36

---

d

---

w- c:program filesBDE
2009-04-20 16:22 . 2004-08-03 21:14 361344 —-a-w- c:windowssystem32driversTCPIP.SYS
2009-04-20 16:22 . 2008-11-16 17:52 361344 —-a-w- c:windowssystem32driversTCPIP.SYS.ORIGINAL
2009-04-20 15:09 . 2009-04-20 15:09

---

d

---

w- c:program filesRS SoftX
2009-04-20 14:20 . 2009-04-20 14:19

---

d

---

w- c:documents and settingsAll UsersApplication DataTages
2009-04-20 13:45 . 2007-01-02 16:29 279712 —-a-w- c:windowssystem32driversatksgt.sys
2009-04-20 13:45 . 2007-01-02 16:29 25888 —-a-w- c:windowssystem32driverslirsgt.sys
2009-04-17 15:30 . 2009-04-17 15:30

---

d

---

w- c:program filesCommon Filesxing shared
2009-04-17 15:30 . 2009-04-17 15:30

---

d

---

w- c:program filesCommon FilesReal
2009-04-17 15:30 . 2009-04-17 15:30

---

d

---

w- c:program filesReal
2009-04-09 11:53 . 2009-04-20 15:18 1131520 —-a-w- c:windowssystem32Rsxhelp.exe
2009-04-09 11:07 . 2009-04-20 15:18 1332224 —-a-w- c:windowssystem32rsxpm.dll
2009-04-08 05:41 . 2009-04-20 15:18 56832 —-a-w- c:windowssystem32rsxlibb.dll
2009-04-08 05:41 . 2009-04-20 15:18 43008 —-a-w- c:windowssystem32rsxliba.dll
2009-04-08 05:41 . 2009-04-20 15:18 91648 —-a-w- c:windowssystem32rsxhelpsys.dll
2009-04-08 05:40 . 2009-04-20 15:18 604672 —-a-w- c:windowssystem32rsxfsys.dll
2009-03-28 16:06 . 2007-01-01 16:42 115432 —-a-w- c:windowssystem32OpenAL32.dll
2009-03-26 19:17 . 2008-10-11 17:33 2719888 —-a-w- c:documents and settingsLocalServiceLocal SettingsApplication DataFontCache3.0.0.0.dat
2009-03-19 14:21 . 2008-06-18 10:32 75064 —-a-w- c:windowssystem32PnkBstrA.exe
2009-03-19 10:42 . 2008-12-26 08:55 410984 —-a-w- c:windowssystem32deploytk.dll
2009-03-11 15:28 . 2009-03-11 15:26 1332064 —-a-w- C:con_c14.exe
2008-03-09 03:25 . 2008-06-24 14:06 236 —ha-w- c:program filesCommon Filesdx.reg
2006-01-05 20:06 . 2003-05-16 12:36 1730968 —-a-w- c:program filesdaemon403-x64.exe
2006-01-05 20:06 . 2003-05-16 12:36 1439128 —-a-w- c:program filesdaemon403-x86.exe
2008-12-27 14:33 . 2008-12-27 14:33 952 —sha-w- c:windowssystem32KGyGaAvL.sys
.

---

Sigcheck

---

[-] 2007-10-30 16:53 360832 64798ECFA43D78C7178375FCDD16D8C8 c:windows$hf_mig$KB941644SP2QFEtcpip.sys
[-] 2008-12-05 19:06 360064 48C1B8A5B0D6E0150DD076F6FF86D6E1 c:windows$NtServicePackUninstall$tcpip.sys
[7] 2008-04-13 21:50 361344 93EA8D04EC73A85DB02EB8805988F733 c:windowsServicePackFilesi386TCPIP.SYS
[-] 2009-04-20 16:22 361344 21AB43BCA039B88B1D7F62EEC3F5CF32 c:windowssystem32dllcacheTCPIP.SYS
[-] 2009-04-20 16:22 361344 21AB43BCA039B88B1D7F62EEC3F5CF32 c:windowssystem32driversTCPIP.SYS

[7] 2004-08-17 14:04 1548288 01C8786B1DDB91D5D40044DED8864EDC c:windows$NtServicePackUninstall$sfcfiles.dll
[7] 2008-04-14 18:40 1571840 4379CA978CB35BB2458156B2B6CB35DF c:windowsServicePackFilesi386sfcfiles.dll
[-] 2009-05-17 08:21 1571840 FFD0DA548DA5C944392FA02981D2416F c:windowssystem32SfcFiles.dll
[-] 2009-05-17 08:21 1571840 FFD0DA548DA5C944392FA02981D2416F c:windowssystem32dllcacheSfcFiles.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE~Browser Helper Objects{95289393-33EA-4F8D-B952-483415B9C955}]
2008-12-30 12:56 131072 —-a-w- c:documents and settingsСерёгаApplication DataMicrosoftInternet Explorerqipsearchbar.dll

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»c:windowssystem32ctfmon.exe» [2008-04-14 15360]
«BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=»c:program filesCommon FilesNeroLibNMBgMonitor.exe» [2007-09-20 271656]
«Nokia.PCSync»=»c:program filesNokiaNokia PC Suite 6PCSync2.exe» [2008-03-26 1306624]
«PC Suite Tray»=»c:program filesNokiaNokia PC Suite 6PCSuite.exe» [2008-03-28 1148928]
«Steam»=»c:program filessteamsteam.exe» [2009-06-08 1287416]
«ISUSPM»=»c:program filesCommon FilesInstallShieldUpdateServiceisuspm.exe» [2006-09-10 295856]
«MSMSGS»=»c:program filesMessengermsmsgs.exe» [2008-04-14 1768960]
«DAEMON Tools Pro Agent»=»c:program filesDAEMON Tools ProDTProAgent.exe» [2009-01-26 228808]
«AlcoholAutomount»=»c:program filesAlcohol SoftAlcohol 120axcmd.exe» [2008-11-23 203720]
«PanelApp»=»c:documents and settingsСерёгаLocal SettingsApplication DataResearchNowPanelAppPanelApp.exe» [2007-01-24 100864]
«CursorXP»=»c:program filesCursorXPCursorXP.exe» [2005-01-19 128000]
«QIP2005″=»c:program filesQIPqip.exe» [2009-02-12 3276288]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«LanguageShortcut»=»c:program filesCyberLinkPowerDVDLanguageLanguage.exe» [2006-12-05 124464]
«GrooveMonitor»=»c:program filesMicrosoft OfficeOffice12GrooveMonitor.exe» [2006-10-26 108840]
«NeroFilterCheck»=»c:program filesCommon FilesNeroLibNeroCheck.exe» [2007-03-01 230960]
«NBKeyScan»=»c:program filesNeroNero8Nero BackItUpNBKeyScan.exe» [2007-09-20 1910056]
«MAgent»=»c:program filesMail.RuAgentMAgent.exe» [2009-01-24 5603000]
«Sony Ericsson PC Suite»=»c:program filesSony EricssonMobile2Application LauncherApplication Launcher.exe» [2007-03-27 667648]
«NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2008-12-02 13680640]
«wmagent.exe»=»c:program filesWebMoney Agentwmagent.exe» [2008-10-01 209376]
«NvMediaCenter»=»c:windowssystem32NvMcTray.dll» [2008-12-02 86016]
«TkBellExe»=»c:program filesCommon FilesRealUpdate_OBrealsched.exe» [2009-04-17 258093]
«LogonStudio»=»c:program filesWinCustomizeLogonStudiologonstudio.exe» [2005-09-07 1056819]
«nwiz»=»nwiz.exe» — c:windowssystem32nwiz.exe [2008-12-02 1727008]

[HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»c:windowssystem32CTFMON.EXE» [2008-04-14 15360]

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionpoliciessystem]
«DisableTaskMgr»= 1 (0x1)
«DisableRegistryTools»= 1 (0x1)

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciesexplorer]
«NoChangeAnimation»= 0 (0x0)

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwinlogon]
«UIHost»=»c:windowssystem32logonuiX.exe»

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]
@=»Driver»

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity center]
«AntiVirusDisableNotify»=dword:00000001
«UpdatesDisableNotify»=dword:00000001
«AntiVirusOverride»=dword:00000001
«FirewallOverride»=dword:00000001
«UacDisableNotify»=dword:00000001

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoringKasperskyAntiVirus]
«DisableMonitoring»=dword:00000001

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerSvc]
«AntiVirusOverride»=dword:00000001
«AntiVirusDisableNotify»=dword:00000001
«FirewallDisableNotify»=dword:00000001
«FirewallOverride»=dword:00000001
«UpdatesDisableNotify»=dword:00000001
«UacDisableNotify»=dword:00000001

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofile]
«EnableFirewall»= 0 (0x0)

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«%windir%\system32\sessmgr.exe»=
«c:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE»=
«c:\Program Files\Microsoft Office\Office12\GROOVE.EXE»=
«c:\Program Files\Microsoft Office\Office12\ONENOTE.EXE»=
«c:\WINDOWS\system32\PnkBstrA.exe»=
«c:\WINDOWS\system32\PnkBstrB.exe»=
«c:\Program Files\BitComet\BitComet.exe»=
«e:\GAMES\CSS\hl2.exe»=
«c:\Program Files\Mail.Ru\Agent\magent.exe»=
«c:\Program Files\QIP\qip.exe»=
«c:\Hamachi\hamachi.exe»=
«c:\Program Files\Sun\xVM VirtualBox\VirtualBox.exe»=
«c:\Program Files\uTorrent 1.7.5 для J-Torrent.ru\uTorrent.exe»=
«c:\Program Files\Opera\Opera.exe»=
«c:\Documents and Settings\Серёга\Рабочий стол\portal-client\utorrent.exe»=
«e:\GAMES\TmNationsForever\TmForever.exe»=
«c:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe»=
«c:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe»=
«e:\GAMES\GTA 4\Grand Theft Auto IV\LaunchGTAIV.exe»=
«%windir%\Network Diagnostic\xpnetdiag.exe»=
«e:\GAMES\GTA 4\Grand Theft Auto IV\GTAIV.exe»=
«c:\ijji\ENGLISH\u_gunz.exe»=
«e:\GAMES\CS 1.6 COOL 2009\CS 1.6 COOL 2009\hl.exe»=
«c:\ICQ6.5\ICQ.exe»=
«e:\GAMES\Counter-Strike Source v34 No Steam\hl2.exe»=
«e:\GAMES\COD4MW\iw3mp.exe»=
«c:\Program Files\HLSW\hlsw.exe»=
«e:\GAMES\XTCS CS 1.6\cstrike.exe»=
«c:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe»=
«c:\Program Files\uTorrent\uTorrent.exe»=
«e:\GAMES\COD4MW\iw3mp1.exe»=
«e:\GAMES\Burnout Paradise\BurnoutLauncher.exe»=
«e:\GAMES\Burnout Paradise\BurnoutConfigTool.exe»=
«e:\GAMES\Burnout Paradise\BurnoutParadise.exe»=
«c:\Program Files\WebMoney\WebMoney.exe»=
«c:\WINDOWS\system32\dpvsetup.exe»=
«e:\GAMES\CS1.6\czero.exe»=
«e:\GAMES\CS1.6\hlds.exe»=
«e:\GAMES\CS1.6\hl.exe»=
«e:\GAMES\XTCS CS 1.6\hlds.exe»=
«e:\GAMES\CS 1.6 COOL 2009\CS 1.6 COOL 2009\hlds.exe»=
«e:\GAMES\HAWX\HAWX.exe»=
«c:\Program Files\DC++\DCPlusPlus.exe»=
«e:\GAMES\реквием\starter.exe»=
«c:\Documents and Settings\Серёга\Рабочий стол\NRPG_20RatioMaster\NRPG RatioMaster.exe»=
«c:\Documents and Settings\Серёга\Мои документы\teeworlds-0.5.1-win32\teeworlds_srv.exe»=
«c:\Program Files\Pando Networks\Media Booster\PMB.exe»=
«e:\css\hl2.exe»=
«c:\Program Files\ApexDC++\ApexDC.exe»=
«c:\Program Files\Common Files\Real\Update_OB\realsched.exe»=
«c:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe»=
«c:\Program Files\CyberLink\PowerDVD\Language\Language.exe»=
«c:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe»=
«c:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe»=
«c:\program files\steam\steam.exe»=
«c:\Documents and Settings\Серёга\Local Settings\Application Data\ResearchNow\PanelApp\PanelApp.exe»=

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileGloballyOpenPortsList]
«9364:TCP»= 9364:TCP:BitComet 9364 TCP
«9364:UDP»= 9364:UDP:BitComet 9364 UDP
«56262:TCP»= 56262:TCP:Pando Media Booster
«56262:UDP»= 56262:UDP:Pando Media Booster

R0 BootScreen;BootScreen;SystemRoot\SystemRootSystem32driversvidstub.sys —> SystemRoot\SystemRootSystem32driversvidstub.sys [?]
R0 klbg;Kaspersky Lab Boot Guard Driver;c:windowssystem32driversklbg.sys [29.01.2008 18:29 33808]
R1 VBoxDrv;VirtualBox Service;c:windowssystem32driversVBoxDrv.sys [03.08.2008 23:31 54896]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;c:program filesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [27.10.2008 18:03 759072]
R3 abp470n5;abp470n5;??c:windowssystem32driversogpfjn.sys —> c:windowssystem32driversogpfjn.sys [?]
R3 c65013264;C-Media CM6501 Like Sound UDAX Interface;c:windowssystem32driversc6501.sys [18.06.2008 13:31 1310720]
R3 FStarForce;FStarForce;c:windowssystem32driversFStarForce.sys [10.11.2008 19:01 8192]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:windowssystem32driversklim5.sys [30.04.2008 19:06 24592]
S2 AODService;AODService;c:program filesAMDOverDriveAODAssist —> c:program filesAMDOverDriveAODAssist [?]
S2 MySQL5;MySQL5;»i:мускулbinmysqld-nt» —defaults-file=»i:мускулmy.ini» MySQL5 —> i:мускулbinmysqld-nt [?]
S3 BTCAMDRV;Mobiola Web Camera driver;c:windowssystem32driversBTCamDrv.sys [13.02.2009 19:29 219264]
S3 PanelSvc;PanelSvc;c:program filesResearchNowPanelAppPanelSvc.exe [09.11.2007 12:45 77312]
S3 PRODIGY;PRODIGY;c:windowssystem32driversprodigy.sys [25.11.2008 18:13 32377]
S3 VBoxTAP;VirtualBox TAP Adapter;c:windowssystem32driversVBoxTAP.sys [12.10.2008 12:09 47152]
S4 mchInjDrv;mchInjDrv;??c:docume~15A22~1LOCALS~1Tempmc218C.tmp —> c:docume~15A22~1LOCALS~1Tempmc218C.tmp [?]

— Other Services/Drivers In Memory —

*NewlyCreated* — APPMGMT
.
Contents of the ‘Scheduled Tasks’ folder
.
— — — — ORPHANS REMOVED — — — —

HKLM-Run-C6501Sound — c6501.cpl
SafeBoot-procexp90.Sys

.

---

Supplementary Scan

---

.
uStart Page = start.qip.ru
uDefault_Search_URL = hxxp://search.qip.ru
uSearchURL,(Default) = hxxp://search.qip.ru/search?query=%s&from=IE
IE: &Экспорт в Microsoft Excel — c:progra~1MICROS~2Office12EXCEL.EXE/3000
IE: Download all links using BitComet — c:program filesBitCometBitComet.exe/AddAllLink.htm
IE: Download all videos using BitComet — c:program filesBitCometBitComet.exe/AddVideo.htm
IE: Download link using &BitComet — c:program filesBitCometBitComet.exe/AddLink.htm
IE: Закачать ВСЕ при помощи Download Master — c:program filesDownload Masterdmieall.htm
IE: Закачать при помощи Download Master — c:program filesDownload Masterdmie.htm
IE: Заполнить формы — file://c:program filesSiber SystemsAI RoboFormRoboFormComFillForms.html
IE: Настроить Меню — file://c:program filesSiber SystemsAI RoboFormRoboFormComCustomizeIEMenu.html
IE: Сохранить формы — file://c:program filesSiber SystemsAI RoboFormRoboFormComSavePass.html
IE: Тулбар RoboForm — file://c:program filesSiber SystemsAI RoboFormRoboFormComShowToolbar.html
IE: {{7558B7E5-7B26-4201-BEDB-00D5FF534523} — c:program filesMail.RuAgentmagent.exe
IE: {{8DAE90AD-4583-4977-9DD4-4360F7A45C74} — c:program filesDownload Masterdmaster.exe
TCP: {77023E2B-BB55-4820-ACFE-AFEE6993C18A} = 213.135.97.163
TCP: {A05586F6-E25C-4E68-8790-026091B56A73} = 213.135.97.131 195.128.128.1
FF — ProfilePath — c:documents and settingsСерёгаApplication DataMozillaFirefoxProfiles9pjd30hi.default
FF — prefs.js: browser.search.selectedEngine — DAEMON Search
FF — prefs.js: browser.startup.homepage — hxxp://start.qip.ru
FF — prefs.js: keyword.URL — hxxp://search.qip.ru/search?from=FF&query=
FF — component: c:documents and settingsСерёгаLocal SettingsApplication DataResearchNowPanelAppffcomponentsFFoxAddinStub.dll
FF — plugin: c:program filesMozilla FirefoxpluginsnpPandoWebInst.dll
FF — plugin: c:program filesOperaprogrampluginsNpindeo.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-08 14:34
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2009-06-08 14:37
ComboFix-quarantined-files.txt 2009-06-08 10:37

Pre-Run: 1 391 235 072 байт свободно
Post-Run: 1 568 759 808 байт свободно

Current=2 Default=2 Failed=1 LastKnownGood=3 Sets=1,2,3,4,5
315 — E O F — 2008-06-22 06:11

[Admin]

Здравствуйте, добро пожаловать на Spyware-ru форум.

Откройте блокнот (Кликните Пуск, Выполнить, в строке ввода введите notepad и нажмите Enter) и вставьте в него следующий текст:

Driver::

abp470n5

mchInjDrv



Registry::

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionpoliciessystem]

"DisableTaskMgr"=0

"DisableRegistryTools"=0



File::

c:windowssystem32driversogpfjn.sys

Запишите получившийся файл на ваш рабочий стол под именем CFScript
Далее перетащите получившийся файл на иконку Combofix, как показано на картинке ниже.

Сombofix запуститься и выполнит процедуры описанные в созданном нами файле.
По результатам работы Combofix будет создан новый лог, его и вставьте в свой следующий ответ.

[Автор]

Сообщения