Нельзя войти в контакт

[Аноним]

Ну помогите же! Здравствуйте. Моя сестра не может войти ВКонтакт, хотя ей и новый пароль прислали,и я сама в блокноте удалила все записи про контакт, сама добавила 127.0.0.1 localhost, ничего не помогло. На главной странице Яндекс есть странное сообщение 2 ВКонтакте.
Помогите разобраться!!!
P.S: Только пишите более понятно, я особо не понимаю в этом.

ComboFix 09-09-04.02 — Feya 06.09.2009 14:43.3.2 — NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.2046.1531 [GMT 4:00]
Running from: c:documents and settingsFeyaРабочий столЛАРИСАComboFix.exe
AV: Антивирус Касперского *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
AV: Doctor Web Anti-Virus *On-access scanning disabled* (Updated) {3454C8F1-ECBC-4180-A6F4-04632FBA762B}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:documents and settingsAll UsersApplication DataMicrosoftNetworkDownloaderqmgr0.dat
c:documents and settingsAll UsersApplication DataMicrosoftNetworkDownloaderqmgr1.dat
c:windowsInstaller43981a.msi
c:windowsInstaller439851.msi
c:windowsInstaller439858.msi
c:windowsInstaller664fa.msi
c:windowsInstaller66500.msi
c:windowsInstaller66506.msi

---

BITS: Possible infected sites

---

hxxp://soft.export.yandex.ru
.
((((((((((((((((((((((((( Files Created from 2009-08-06 to 2009-09-06 )))))))))))))))))))))))))))))))
.

2009-09-05 13:13 . 2009-09-05 13:13

---

d

---

w- c:windowssystem32wbemRepository
2009-09-04 10:33 . 2009-09-04 10:33 4096 —-a-w- c:windowsd3dx.dat
2009-09-04 10:33 . 2009-09-04 10:33

---

d

---

w- c:documents and settingsFeyaApplication DataWildfire
2009-09-01 10:41 . 2009-09-01 12:33

---

d

---

w- c:documents and settingsFeyaLocal SettingsApplication DataInstaller3088
2009-08-30 07:13 . 2009-08-30 07:13

---

d

---

w- c:documents and settingsFeyaLocal SettingsApplication DataHelp
2009-08-29 11:40 . 2009-08-29 11:40

---

d

---

w- c:documents and settingsFeyaLocal SettingsApplication DataDownloaded Installations
2009-08-29 11:38 . 2009-08-29 11:38

---

d

---

w- c:documents and settingsAll UsersApplication DataPC Suite
2009-08-29 11:38 . 2009-08-29 11:38

---

d

---

w- c:documents and settingsFeyaApplication DataPC Suite
2009-08-29 11:37 . 2007-05-02 12:31 90624 —-a-w- c:windowssystem32nmwcdcls.dll
2009-08-29 11:36 . 2007-09-17 11:53 21632 —-a-w- c:windowssystem32driverspccsmcfd.sys
2009-08-29 11:36 . 2009-03-20 06:01 90112 —-a-w- c:windowssystem32driversss_bbus.sys
2009-08-29 11:36 . 2009-03-20 06:01 14976 —-a-w- c:windowssystem32driversss_bmdfl.sys
2009-08-29 11:36 . 2009-03-20 06:01 121856 —-a-w- c:windowssystem32driversss_bmdm.sys
2009-08-29 11:36 . 2009-03-20 06:01 12160 —-a-w- c:windowssystem32driversss_bcmnt.sys
2009-08-29 11:36 . 2009-03-20 06:01 12160 —-a-w- c:windowssystem32driversss_bcm.sys
2009-08-29 11:36 . 2009-03-20 06:01 12160 —-a-w- c:windowssystem32driversss_bwhnt.sys
2009-08-29 11:36 . 2009-03-20 06:01 12160 —-a-w- c:windowssystem32driversss_bwh.sys
2009-08-29 11:36 . 2009-03-31 05:39 36608 —-a-w- c:windowssystem32FsUsbExDisk.Sys
2009-08-29 11:36 . 2009-03-31 05:39 233472 —-a-w- c:windowssystem32FsUsbExService.Exe
2009-08-29 11:36 . 2009-03-31 05:39 110592 —-a-w- c:windowssystem32FsUsbExDevice.Dll
2009-08-29 11:36 . 2009-08-29 11:36

---

d

---

w- c:documents and settingsFeyaApplication DataSamsung
2009-08-29 11:35 . 2009-08-29 11:35

---

d

---

w- c:program filesMarkAny
2009-08-29 11:35 . 2009-09-04 03:49

---

d

---

w- c:program filesPC Connectivity Solution
2009-08-29 11:35 . 2009-08-29 11:37

---

d

---

w- c:program filesSamsung
2009-08-29 07:24 . 2009-08-29 08:01 94643 —-a-w- c:windowssystem32driversklick.dat
2009-08-29 07:24 . 2009-08-29 08:01 105395 —-a-w- c:windowssystem32driversklin.dat
2009-08-29 07:23 . 2009-09-06 10:48 409632 —sha-w- c:windowssystem32driversfidbox2.dat
2009-08-29 07:23 . 2009-09-06 10:48 3515936 —sha-w- c:windowssystem32driversfidbox.dat
2009-08-29 07:23 . 2009-09-06 10:41

---

d

---

w- c:documents and settingsAll UsersApplication DataKaspersky Lab
2009-08-29 06:59 . 2009-08-29 06:59

---

d

---

w- c:program filesESET
2009-08-26 07:55 . 2009-08-26 08:33

---

d

---

w- c:program filestrend micro
2009-08-26 07:55 . 2009-08-26 07:56

---

d

---

w- C:rsit
2009-08-25 14:05 . 2009-08-25 14:05

---

d

---

w- c:documents and settingsFeyaDoctorWeb
2009-08-20 13:08 . 2009-08-20 13:08

---

d

---

w- c:program filesBukaSoft
2009-08-19 07:49 . 2009-08-19 07:49

---

d

---

w- c:program filesAncient Castle 3D Screensaver
2009-08-16 14:48 . 2009-08-28 05:49

---

d

---

w- c:documents and settingsFeyaLocal SettingsApplication DataTemp
2009-08-16 14:48 . 2009-08-16 14:48

---

d

---

w- c:documents and settingsNetworkServiceLocal SettingsApplication DataGoogle
2009-08-16 14:29 . 2009-08-16 14:29

---

d

---

w- c:documents and settingsLocalServiceLocal SettingsApplication DataGoogle
2009-08-16 14:29 . 2009-09-04 05:32

---

d

---

w- c:documents and settingsFeyaLocal SettingsApplication DataGoogle
2009-08-16 14:21 . 2009-08-20 13:06

---

d

---

w- c:documents and settingsAll UsersApplication DataGoogle Updater
2009-08-16 14:21 . 2009-09-04 05:32

---

d

---

w- c:program filesGoogle
2009-08-13 06:50 . 2009-07-10 13:28 1315328 -c—-w- c:windowssystem32dllcachemsoe.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-06 10:48 . 2009-08-29 07:23 3528 —sha-w- c:windowssystem32driversfidbox2.idx
2009-09-06 10:48 . 2009-08-29 07:23 29596 —sha-w- c:windowssystem32driversfidbox.idx
2009-09-06 06:41 . 2009-07-28 15:59

---

d

---

w- c:documents and settingsFeyaApplication DataWinamp
2009-09-05 13:12 . 2009-07-16 16:23

---

d

---

w- c:program filesNeed For Speed Hot Pursuit 2
2009-09-05 13:12 . 2009-07-14 17:07

---

d—h—w- c:program filesInstallShield Installation Information
2009-09-04 03:35 . 2009-09-04 03:35 1606 —-a-w- c:windowssystem32PerfStringBackup.TMP
2009-09-04 03:35 . 2003-05-29 13:00 49874 —-a-w- c:windowssystem32perfc019.dat
2009-09-04 03:35 . 2003-05-29 13:00 347124 —-a-w- c:windowssystem32perfh019.dat
2009-09-03 13:01 . 2009-07-18 07:09

---

d

---

w- c:documents and settingsFeyaApplication DataYaChatData
2009-08-29 08:01 . 2008-01-29 14:29 33808 —-a-w- c:windowssystem32driversklbg.sys
2009-08-29 06:51 . 2009-07-16 16:02

---

d

---

w- c:program filesKaspersky Lab
2009-08-25 18:53 . 2009-07-29 08:31

---

d

---

w- c:program filesMalwarebytes’ Anti-Malware
2009-08-23 05:25 . 2009-07-28 15:59

---

d

---

w- c:program filesWinamp
2009-08-07 07:29 . 2009-07-16 15:34

---

d

---

w- c:program filesFlash Player Pro
2009-08-05 13:29 . 2009-07-16 15:47

---

d

---

w- c:program fileseMule
2009-08-05 09:01 . 2004-08-17 13:04 204800 —-a-w- c:windowssystem32mswebdvd.dll
2009-08-03 09:36 . 2009-07-29 08:31 38160 —-a-w- c:windowssystem32driversmbamswissarmy.sys
2009-08-03 09:36 . 2009-07-29 08:31 19096 —-a-w- c:windowssystem32driversmbam.sys
2009-08-01 03:34 . 2009-08-01 03:34 604488 —-a-w- c:windowssystem32TUProgSt.exe
2009-08-01 03:33 . 2009-08-01 03:33 361288 —-a-w- c:windowssystem32TuneUpDefragService.exe
2009-08-01 03:33 . 2009-08-01 03:33

---

d

---

w- c:documents and settingsFeyaApplication DataTuneUp Software
2009-08-01 03:33 . 2009-08-01 03:33

---

d

---

w- c:program filesTuneUp Utilities 2009
2009-08-01 03:33 . 2009-08-01 03:33

---

d

---

w- c:documents and settingsAll UsersApplication DataTuneUp Software
2009-07-31 18:45 . 2009-07-15 06:53

---

d

---

w- c:documents and settingsAll UsersApplication DataKaspersky Lab Setup Files
2009-07-31 17:07 . 2009-07-30 18:15

---

d

---

w- c:documents and settingsAll UsersApplication DataDoctor Web
2009-07-30 11:03 . 2009-07-14 17:07

---

d

---

w- c:program filesCommon FilesInstallShield
2009-07-29 11:28 . 2009-07-29 11:28

---

d

---

w- c:program filesMSXML 4.0
2009-07-29 08:32 . 2009-07-29 08:32

---

d

---

w- c:documents and settingsFeyaApplication DataMalwarebytes
2009-07-29 08:31 . 2009-07-29 08:31

---

d

---

w- c:documents and settingsAll UsersApplication DataMalwarebytes
2009-07-28 16:22 . 2009-07-28 16:22

---

d

---

w- c:documents and settingsFeyaApplication DataNero
2009-07-28 16:21 . 2009-07-28 16:19

---

d

---

w- c:program filesCommon FilesNero
2009-07-28 16:19 . 2009-07-28 16:19

---

d

---

w- c:documents and settingsAll UsersApplication DataNero
2009-07-28 16:19 . 2009-07-28 16:19

---

d

---

w- c:program filesNero
2009-07-28 16:08 . 2009-07-28 16:08

---

d

---

w- c:documents and settingsAll UsersApplication DataAdobe Systems
2009-07-28 16:06 . 2009-07-28 16:06

---

d

---

w- c:program filesCommon FilesAdobe Systems Shared
2009-07-28 16:05 . 2009-07-16 15:36

---

d

---

w- c:program filesCommon FilesAdobe
2009-07-28 16:04 . 2009-07-28 16:03

---

d—a-w- c:documents and settingsAll UsersApplication DataTEMP
2009-07-28 16:03 . 2009-07-28 16:02

---

d

---

w- c:program filesPDF to Word
2009-07-28 15:47 . 2009-07-16 10:17

---

d

---

w- c:documents and settingsFeyaApplication DataYandex
2009-07-28 15:38 . 2009-07-14 16:48 31704 —-a-w- c:documents and settingsFeyaLocal SettingsApplication DataGDIPFONTCACHEV1.DAT
2009-07-28 15:30 . 2009-07-28 15:30 0 —-a-w- c:windowsnsreg.dat
2009-07-28 15:27 . 2009-07-16 15:45

---

d

---

w- c:program filesAhead
2009-07-28 15:26 . 2009-07-15 16:00

---

d

---

w- c:program filesCommon FilesACD Systems
2009-07-28 15:22 . 2009-07-16 15:27

---

d

---

w- c:documents and settingsAll UsersApplication DataMicrosoft Help
2009-07-18 07:08 . 2009-07-16 10:17

---

d

---

w- c:program filesYandex
2009-07-17 19:03 . 2004-08-17 13:04 58880 —-a-w- c:windowssystem32atl.dll
2009-07-17 10:26 . 2009-07-17 10:26

---

d

---

w- c:documents and settingsFeyaApplication DataMedia Player Classic
2009-07-16 17:15 . 2009-07-16 17:15

---

d

---

w- c:documents and settingsFeyaApplication DataFastStone
2009-07-16 17:15 . 2009-07-16 17:15

---

d

---

w- c:program filesFSImgViewer
2009-07-16 16:27 . 2009-07-16 16:27

---

d

---

w- c:documents and settingsAll UsersApplication DataFLEXnet
2009-07-16 16:22 . 2009-07-16 16:22 642 —-a-w- c:windowseReg.dat
2009-07-16 15:47 . 2009-07-16 15:46

---

d

---

w- c:program filesLClock
2009-07-16 15:37 . 2009-07-16 15:37

---

d

---

w- c:program filesCommon FilesMacrovision Shared
2009-07-16 15:34 . 2009-07-16 15:34

---

d

---

w- c:documents and settingsAll UsersApplication DataApple Computer
2009-07-16 15:34 . 2009-07-16 15:34

---

d

---

w- c:program filesQuickTime Alternative
2009-07-16 15:34 . 2009-07-16 15:34

---

d

---

w- c:program filesReal Alternative
2009-07-16 15:34 . 2009-07-16 15:34

---

d

---

w- c:program filesK-Lite Codec Pack
2009-07-16 15:34 . 2009-07-16 15:34

---

d

---

w- c:program filesPocketDivXEncoder
2009-07-16 15:34 . 2009-07-16 15:34

---

d

---

w- c:program filesNo1 DVD Ripper
2009-07-16 15:33 . 2009-07-16 15:33

---

d

---

w- c:program filesVLC
2009-07-16 15:33 . 2009-07-16 15:33

---

d

---

w- c:program filesThe KMPlayer
2009-07-16 15:33 . 2009-07-16 15:33

---

d

---

w- c:program filesMicrosoft Works
2009-07-16 10:43 . 2009-07-16 10:43

---

d

---

w- c:documents and settingsAll UsersApplication DataESET
2009-07-16 10:42 . 2009-07-16 10:42

---

d

---

w- c:program files%temp&
2009-07-15 16:09 . 2009-07-15 16:09 209 —-a-w- c:program filesPatchWise.log
2009-07-15 16:02 . 2009-07-15 16:02

---

d

---

w- c:documents and settingsFeyaApplication DataACD Systems
2009-07-15 16:00 . 2009-07-15 16:00

---

d

---

w- c:program filesACD Systems
2009-07-15 15:48 . 2009-07-15 15:48

---

d

---

w- c:program filesCyberLink
2009-07-15 07:48 . 2009-08-01 03:34 29000 —-a-w- c:windowssystem32uxtuneup.dll
2009-07-15 06:31 . 2009-07-15 06:31 3 —-a-w- c:program filesCommon Filestime.cv
2009-07-15 06:31 . 2009-07-15 06:31

---

d

---

w- c:program filesJava
2009-07-14 17:07 . 2009-07-14 17:07

---

d

---

w- c:program filesRealtek
2009-07-14 17:07 . 2009-07-14 17:07 315392 —-a-w- c:windowsHideWin.exe
2009-07-14 17:06 . 2009-07-14 17:06

---

d

---

w- c:program filesDIFX
2009-07-14 17:06 . 2009-07-14 17:06

---

d

---

w- c:documents and settingsFeyaApplication DataInstallShield
2009-07-14 17:05 . 2009-07-14 17:05

---

d

---

w- c:program filesYahoo!
2009-07-14 17:05 . 2009-07-14 17:05 15600 —-a-w- c:windowsgdrv.sys
2009-07-14 16:43 . 2009-07-14 16:43

---

d

---

w- c:program filesmicrosoft frontpage
2009-07-14 16:40 . 2009-07-14 16:40 22564 —-a-w- c:windowssystem32emptyregdb.dat
2009-07-12 08:21 . 2004-08-17 13:04 233472 —-a-w- c:windowssystem32wmpdxm.dll
2009-06-26 16:51 . 2004-08-17 13:04 667136

---

w- c:windowssystem32wininet.dll
2009-06-26 16:50 . 2004-08-17 13:04 81920 —-a-w- c:windowssystem32ieencode.dll
2009-06-25 08:27 . 2004-08-17 13:04 54272 —-a-w- c:windowssystem32wdigest.dll
2009-06-25 08:27 . 2004-08-17 13:04 56832 —-a-w- c:windowssystem32secur32.dll
2009-06-25 08:27 . 2004-08-17 13:04 147456 —-a-w- c:windowssystem32schannel.dll
2009-06-25 08:27 . 2004-08-17 13:04 136192 —-a-w- c:windowssystem32msv1_0.dll
2009-06-25 08:27 . 2004-08-17 13:04 732160 —-a-w- c:windowssystem32lsasrv.dll
2009-06-25 08:27 . 2004-08-17 13:04 301568 —-a-w- c:windowssystem32kerberos.dll
2009-06-24 11:18 . 2004-08-03 19:59 92928 —-a-w- c:windowssystem32driversksecdd.sys
2009-06-16 14:40 . 2004-08-17 13:04 119808 —-a-w- c:windowssystem32t2embed.dll
2009-06-16 14:40 . 2003-05-29 13:00 81920 —-a-w- c:windowssystem32fontsub.dll
2009-06-15 10:45 . 2004-08-17 13:05 79872 —-a-w- c:windowssystem32telnet.exe
2009-06-15 10:45 . 2004-08-17 13:05 80896 —-a-w- c:windowssystem32tlntsess.exe
2009-06-11 20:00 . 2009-06-11 20:00 55808 —-a-w- c:windowssystem32DevCon.exe
2009-06-11 20:00 . 2009-06-11 20:00 545 —-a-w- c:windowsUc.pif
2009-06-11 20:00 . 2009-06-11 20:00 545 —-a-w- c:windowsRar.pif
2009-06-11 20:00 . 2009-06-11 20:00 545 —-a-w- c:windowsPkzip.pif
2009-06-11 20:00 . 2009-06-11 20:00 545 —-a-w- c:windowsPkunzip.pif
2009-06-11 20:00 . 2009-06-11 20:00 545 —-a-w- c:windowsLha.pif
2009-06-11 20:00 . 2009-06-11 20:00 545 —-a-w- c:windowsArj.pif
.

((((((((((((((((((((((((((((( SnapShot@2009-08-29_07.08.37 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-08-29 11:36 . 2009-01-15 07:11 12160 c:windowssystem32Samsung_USB_Drivers7i386ssecwhnt.sys
+ 2009-08-29 11:36 . 2009-01-15 07:11 25856 c:windowssystem32Samsung_USB_Drivers7i386ssecnd5.sys
+ 2009-08-29 11:36 . 2009-01-15 07:11 14976 c:windowssystem32Samsung_USB_Drivers7i386ssecmdfl.sys
+ 2009-08-29 11:36 . 2009-01-15 07:11 10624 c:windowssystem32Samsung_USB_Drivers7i386sseccrnt.sys
+ 2009-08-29 11:36 . 2009-01-15 07:11 12160 c:windowssystem32Samsung_USB_Drivers7i386sseccmnt.sys
+ 2009-08-29 11:36 . 2009-01-15 07:11 86528 c:windowssystem32Samsung_USB_Drivers7i386ssecbus.sys
+ 2009-08-29 11:36 . 2007-07-05 08:38 73728 c:windowssystem32Samsung_USB_Drivers6_oldSSBCUninstall.exe
+ 2009-08-29 11:36 . 2007-07-05 08:38 12160 c:windowssystem32Samsung_USB_Drivers6_oldi386ssbcwhnt.sys
+ 2009-08-29 11:36 . 2007-07-05 08:38 14848 c:windowssystem32Samsung_USB_Drivers6_oldi386ssbcmdfl.sys
+ 2009-08-29 11:36 . 2007-07-05 08:38 12160 c:windowssystem32Samsung_USB_Drivers6_oldi386ssbccmnt.sys
+ 2009-08-29 11:36 . 2007-07-05 08:38 83328 c:windowssystem32Samsung_USB_Drivers6_oldi386ssbcbus.sys
+ 2009-08-29 11:36 . 2009-03-20 06:01 73728 c:windowssystem32Samsung_USB_Drivers6SS_BUninstall.exe
+ 2009-08-29 11:36 . 2009-03-20 06:01 12160 c:windowssystem32Samsung_USB_Drivers6i386ss_bwhnt.sys
+ 2009-08-29 11:36 . 2009-03-20 06:01 98560 c:windowssystem32Samsung_USB_Drivers6i386ss_bserd.sys
+ 2009-08-29 11:36 . 2009-03-20 06:01 14976 c:windowssystem32Samsung_USB_Drivers6i386ss_bmdfl.sys
+ 2009-08-29 11:36 . 2009-03-20 06:01 12160 c:windowssystem32Samsung_USB_Drivers6i386ss_bcmnt.sys
+ 2009-08-29 11:36 . 2009-03-20 06:01 90112 c:windowssystem32Samsung_USB_Drivers6i386ss_bbus.sys
+ 2009-07-16 15:48 . 2009-02-25 06:13 74240 c:windowssystem32Samsung_USB_Drivers5SSSDUninstall.exe
+ 2009-07-16 15:48 . 2009-02-25 06:13 12160 c:windowssystem32Samsung_USB_Drivers5i386sssdwhnt.sys
— 2009-07-16 15:48 . 2007-07-05 08:37 12160 c:windowssystem32Samsung_USB_Drivers5i386sssdwhnt.sys
+ 2009-07-16 15:48 . 2009-02-25 06:13 14976 c:windowssystem32Samsung_USB_Drivers5i386sssdmdfl.sys
— 2009-07-16 15:48 . 2007-07-05 08:37 12160 c:windowssystem32Samsung_USB_Drivers5i386sssdcmnt.sys
+ 2009-07-16 15:48 . 2009-02-25 06:13 12160 c:windowssystem32Samsung_USB_Drivers5i386sssdcmnt.sys
+ 2009-07-16 15:48 . 2009-02-25 06:13 87296 c:windowssystem32Samsung_USB_Drivers5i386sssdbus.sys
+ 2003-05-29 13:00 . 2009-09-04 03:35 40380 c:windowssystem32perfc009.dat
+ 2009-09-04 03:49 . 2008-01-14 14:39 25600 c:windowssystem32DRVSTOREshpusb_558D416BCEB984F35885804D3E1A9C3773F1B17Ci386SHPUSB.sys
+ 2009-09-04 03:49 . 2008-01-14 14:39 30208 c:windowssystem32DRVSTOREshpacm_18A9B92ED8DEDC602E49E767FA4BE98A30525207i386SHPACM.sys
+ 2009-09-04 03:49 . 2007-09-17 11:53 21632 c:windowssystem32DRVSTOREpccsmcfd_4A1E30386F4D0DEC8F5DF262CFBD8845EEBAB175pccsmcfd.sys
+ 2009-09-04 03:50 . 2007-05-02 12:31 12288 c:windowssystem32DRVSTOREnmwcdsam2k_880D94EACF26DB5FF04E2A3B3A16959D5F0A0274nmwcdsacm.sys
+ 2009-09-04 03:50 . 2007-05-02 12:31 12288 c:windowssystem32DRVSTOREnmwcdsacj_880D94EACF26DB5FF04E2A3B3A16959D5F0A0274nmwcdsacj.sys
+ 2009-09-04 03:50 . 2007-05-02 12:31 90624 c:windowssystem32DRVSTOREnmwcdsa_880D94EACF26DB5FF04E2A3B3A16959D5F0A0274nmwcdcls.dll
+ 2008-04-25 14:21 . 2008-04-25 14:21 26964 c:windowssystem32driversklopp.dat
+ 2008-03-25 16:07 . 2008-03-25 16:07 24592 c:windowssystem32driversklim5.sys
+ 2009-08-29 07:09 . 2008-10-16 10:09 51224 c:windowssystem32dllcachecachewuauclt.exe
+ 2009-08-29 07:09 . 2008-04-14 16:11 13824 c:windowssystem32dllcachecachewscntfy.exe
+ 2009-08-29 07:09 . 2008-04-14 16:10 82432 c:windowssystem32dllcachecachews2_32.dll
+ 2009-08-29 07:09 . 2008-04-14 16:11 26624 c:windowssystem32dllcachecacheuserinit.exe
+ 2009-08-29 07:09 . 2008-04-14 16:11 14336 c:windowssystem32dllcachecachesvchost.exe
+ 2009-08-29 07:09 . 2008-04-14 16:10 71680 c:windowssystem32dllcachecachessdpsrv.dll
+ 2009-08-29 07:09 . 2008-04-14 16:11 57856 c:windowssystem32dllcachecachespoolsv.exe
+ 2009-08-29 07:09 . 2008-04-14 16:10 59904 c:windowssystem32dllcachecacheregsvc.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 88576 c:windowssystem32dllcachecacherasauto.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 17408 c:windowssystem32dllcachecachepowrprof.dll
+ 2009-08-29 07:09 . 2005-01-28 09:44 25088 c:windowssystem32dllcachecacheMsPMSNSv.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 33792 c:windowssystem32dllcachecachemsgsvc.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 13312 c:windowssystem32dllcachecachelsass.exe
+ 2009-08-29 07:09 . 2008-04-14 16:10 22016 c:windowssystem32dllcachecachelpk.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 19968 c:windowssystem32dllcachecachelinkinfo.dll
+ 2009-08-29 07:09 . 2008-04-14 15:47 24832 c:windowssystem32dllcachecachekbdclass.sys
+ 2009-08-29 07:09 . 2008-04-13 18:53 36608 c:windowssystem32dllcachecacheip6fw.sys
+ 2009-08-29 07:09 . 2008-04-14 16:10 56320 c:windowssystem32dllcachecacheeventlog.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 15360 c:windowssystem32dllcachecachectfmon.exe
+ 2009-08-29 07:09 . 2008-04-14 16:10 62464 c:windowssystem32dllcachecachecryptsvc.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 77824 c:windowssystem32dllcachecachebrowser.dll
+ 2009-08-29 07:09 . 2008-04-13 18:57 14336 c:windowssystem32dllcachecacheasyncmac.sys
+ 2009-08-29 07:09 . 2003-05-29 13:00 11776 c:windowssystem32dllcachecacheacpiec.sys
— 2009-07-14 16:45 . 2009-08-08 11:43 32768 c:windowssystem32configsystemprofileLocal SettingsHistoryHistory.IE5index.dat
+ 2009-07-14 16:45 . 2009-09-05 13:15 32768 c:windowssystem32configsystemprofileLocal SettingsHistoryHistory.IE5index.dat
+ 2009-07-14 16:45 . 2009-09-05 13:15 16384 c:windowssystem32configsystemprofileCookiesindex.dat
— 2009-07-14 16:45 . 2009-08-08 11:43 16384 c:windowssystem32configsystemprofileCookiesindex.dat
+ 2009-08-29 11:35 . 2009-09-04 03:48 69632 c:windowsInstaller{F193FC0E-9E18-40FC-A974-509A1BDD240A}NewShortcut2_01C721FC513240DBAFA32CDD8E8EF44C.exe
+ 2009-08-29 11:35 . 2009-09-04 03:48 69632 c:windowsInstaller{F193FC0E-9E18-40FC-A974-509A1BDD240A}NewShortcut1_BC83074A2A3E40719890F014C2201AB8.exe
+ 2009-08-29 11:35 . 2009-09-04 03:48 57344 c:windowsInstaller{F193FC0E-9E18-40FC-A974-509A1BDD240A}ARPPRODUCTICON.exe
+ 2009-08-29 11:36 . 2009-09-04 03:49 10134 c:windowsInstaller{AC599724-5755-48C1-ABE7-ABB857652930}ARPPRODUCTICON.exe
+ 2009-09-04 03:49 . 2008-01-14 14:39 6656 c:windowssystem32DRVSTOREshpacm_18A9B92ED8DEDC602E49E767FA4BE98A30525207i386SHPACMFilter.sys
+ 2009-09-04 03:50 . 2007-05-02 12:31 8320 c:windowssystem32DRVSTOREnmwcdsac_880D94EACF26DB5FF04E2A3B3A16959D5F0A0274nmwcdsac.sys
+ 2007-10-25 13:26 . 2007-10-25 13:26 5632 c:windowssystem32driversStarOpen.sys
+ 2009-08-29 07:09 . 2008-04-14 16:10 5120 c:windowssystem32dllcachecachesfc.dll
+ 2009-08-29 07:09 . 2003-05-29 13:00 2944 c:windowssystem32dllcachecachenull.sys
+ 2009-08-29 07:09 . 2003-05-29 13:00 4224 c:windowssystem32dllcachecachebeep.sys
+ 2009-08-29 11:37 . 2009-09-04 03:50 3262 c:windowsInstaller{7E84FAC8-C518-40F9-9807-7455301D6D25}ARPPRODUCTICON.exe
+ 2009-08-29 11:36 . 2009-03-09 11:20 103936 c:windowssystem32Samsung_USB_Drivers7SSECUninstall.exe
+ 2009-08-29 11:36 . 2009-01-15 07:11 109312 c:windowssystem32Samsung_USB_Drivers7i386ssecunic.sys
+ 2009-08-29 11:36 . 2009-01-15 07:11 104192 c:windowssystem32Samsung_USB_Drivers7i386ssecobex.sys
+ 2009-08-29 11:36 . 2009-01-15 07:11 108032 c:windowssystem32Samsung_USB_Drivers7i386ssecmgmt.sys
+ 2009-08-29 11:36 . 2009-01-15 07:11 114304 c:windowssystem32Samsung_USB_Drivers7i386ssecmdm.sys
+ 2009-08-29 11:36 . 2007-07-05 08:38 109696 c:windowssystem32Samsung_USB_Drivers6_oldi386ssbcmdm.sys
+ 2009-08-29 11:36 . 2009-03-20 06:01 121856 c:windowssystem32Samsung_USB_Drivers6i386ss_bmdm.sys
+ 2009-07-16 15:48 . 2009-02-25 06:13 106368 c:windowssystem32Samsung_USB_Drivers5i386sssdobex.sys
+ 2009-07-16 15:48 . 2009-02-25 06:13 110208 c:windowssystem32Samsung_USB_Drivers5i386sssdmgmt.sys
+ 2009-07-16 15:48 . 2009-02-25 06:13 115968 c:windowssystem32Samsung_USB_Drivers5i386sssdmdm.sys
+ 2009-09-01 12:32 . 2009-09-05 13:13 113780 c:windowssystem32Restorerstrlog.dat
+ 2003-05-29 13:00 . 2009-09-04 03:35 312184 c:windowssystem32perfh009.dat
+ 2008-04-25 14:22 . 2008-04-25 14:22 206088 c:windowssystem32klogon.dll
+ 2009-09-04 03:49 . 2008-03-06 07:14 831048 c:windowssystem32DRVSTOREpccswpddri_CAEB6BB34654D5A4CAB32D7967078BA417F01F05WudfUpdate_01005.dll
+ 2009-09-04 03:49 . 2008-03-06 07:19 534016 c:windowssystem32DRVSTOREpccswpddri_CAEB6BB34654D5A4CAB32D7967078BA417F01F05PCCSWpdDriver.dll
+ 2009-09-04 03:50 . 2007-05-02 12:32 135680 c:windowssystem32DRVSTOREnmwcdsa_880D94EACF26DB5FF04E2A3B3A16959D5F0A0274nmwcdsa.sys
+ 2009-08-29 07:23 . 2009-08-29 08:01 213520 c:windowssystem32driversklif.sys
+ 2008-04-16 10:23 . 2008-04-16 10:23 112144 c:windowssystem32driverskl1.sys
+ 2009-08-29 07:09 . 2008-04-14 16:10 129024 c:windowssystem32dllcachecachexmlprov.dll
+ 2009-08-29 07:09 . 2008-04-14 16:11 509440 c:windowssystem32dllcachecachewinlogon.exe
+ 2009-08-29 07:09 . 2009-06-26 16:51 667136 c:windowssystem32dllcachecachewininet.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 579072 c:windowssystem32dllcachecacheuser32.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 186368 c:windowssystem32dllcachecacheupnphost.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 295936 c:windowssystem32dllcachecachetermsrv.dll
+ 2009-08-29 07:09 . 2008-06-20 11:51 361600 c:windowssystem32dllcachecachetcpip.sys
+ 2009-08-29 07:09 . 2008-04-14 16:10 249856 c:windowssystem32dllcachecachetapisrv.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 171008 c:windowssystem32dllcachecachesrsvc.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 135680 c:windowssystem32dllcachecacheshsvcs.dll
+ 2009-08-29 07:09 . 2009-02-09 11:25 111104 c:windowssystem32dllcachecacheservices.exe
+ 2009-08-29 07:09 . 2008-04-14 16:10 193024 c:windowssystem32dllcachecacheschedsvc.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 184832 c:windowssystem32dllcachecachescecli.dll
+ 2009-08-29 07:09 . 2009-02-09 10:54 401408 c:windowssystem32dllcachecacherpcss.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 409088 c:windowssystem32dllcachecacheqmgr.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 436736 c:windowssystem32dllcachecachentmssvc.dll
+ 2009-08-29 07:09 . 2008-04-13 19:15 574976 c:windowssystem32dllcachecachentfs.sys
+ 2009-08-29 07:09 . 2008-04-14 16:10 198144 c:windowssystem32dllcachecachenetman.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 407040 c:windowssystem32dllcachecachenetlogon.dll
+ 2009-08-29 07:09 . 2008-04-13 19:20 182656 c:windowssystem32dllcachecachendis.sys
+ 2009-08-29 07:09 . 2008-06-20 17:48 247296 c:windowssystem32dllcachecachemswsock.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 927504 c:windowssystem32dllcachecachemfc40u.dll
+ 2009-08-29 07:09 . 2009-03-21 14:09 995840 c:windowssystem32dllcachecachekernel32.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 110080 c:windowssystem32dllcachecacheimm32.dll
+ 2009-08-29 07:09 . 2008-07-07 20:29 253952 c:windowssystem32dllcachecachees.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 797696 c:windowssystem32dllcachecachecomres.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 617472 c:windowssystem32dllcachecachecomctl32.dll
+ 2009-08-29 07:09 . 2008-04-13 16:39 142592 c:windowssystem32dllcachecacheaec.sys
+ 2009-08-29 11:34 . 2009-08-29 11:34 249856 c:windowssystem32configsystemprofilentuser.dat
+ 2009-08-29 11:35 . 2009-08-29 11:35 1230336 c:windowsWinSxSx86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8damsxml4.dll
+ 2009-08-29 07:09 . 2009-02-09 11:25 2147328 c:windowssystem32dllcachecachentoskrnl.exe
+ 2009-08-29 07:09 . 2009-02-09 11:26 2025984 c:windowssystem32dllcachecachentkrnlpa.exe
+ 2009-08-29 07:09 . 2009-07-18 16:04 3090432 c:windowssystem32dllcachecachemshtml.dll
+ 2009-08-29 07:09 . 2008-04-14 16:10 1034240 c:windowssystem32dllcachecacheexplorer.exe
+ 2009-08-29 07:24 . 2009-08-29 07:24 2514432 c:windowsInstallerdcb04.msi
.
— Snapshot reset to current date —
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
«{91397D20-1446-11D4-8AF4-0040CA1127B6}»= «c:program filesYandexYandexBarIEyndbar.dll» [2009-07-13 5458720]
«{893AE660-AE80-4dd0-9959-24D2337C04E8}»= «c:program filesYandexOnlineyndminibar.dll» [2009-06-17 210728]

[HKEY_CLASSES_ROOTclsid{91397d20-1446-11d4-8af4-0040ca1127b6}]
[HKEY_CLASSES_ROOTYandex.Toolbar.1]
[HKEY_CLASSES_ROOTTypeLib{91397D13-1446-11D4-8AF4-0040CA1127B6}]
[HKEY_CLASSES_ROOTYandex.Toolbar]

[HKEY_CLASSES_ROOTclsid{893ae660-ae80-4dd0-9959-24d2337c04e8}]
[HKEY_CLASSES_ROOTYandexSearch.Toolbar.1]
[HKEY_CLASSES_ROOTTypeLib{893AE653-AE80-4dd0-9959-24D2337C04E8}]
[HKEY_CLASSES_ROOTYandex.Search]

[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerToolbarWebbrowser]
«{91397D20-1446-11D4-8AF4-0040CA1127B6}»= «c:program filesYandexYandexBarIEyndbar.dll» [2009-07-13 5458720]
«{893AE660-AE80-4DD0-9959-24D2337C04E8}»= «c:program filesYandexOnlineyndminibar.dll» [2009-06-17 210728]

[HKEY_CLASSES_ROOTclsid{91397d20-1446-11d4-8af4-0040ca1127b6}]
[HKEY_CLASSES_ROOTYandex.Toolbar.1]
[HKEY_CLASSES_ROOTTypeLib{91397D13-1446-11D4-8AF4-0040CA1127B6}]
[HKEY_CLASSES_ROOTYandex.Toolbar]

[HKEY_CLASSES_ROOTclsid{893ae660-ae80-4dd0-9959-24d2337c04e8}]
[HKEY_CLASSES_ROOTYandexSearch.Toolbar.1]
[HKEY_CLASSES_ROOTTypeLib{893AE653-AE80-4dd0-9959-24D2337C04E8}]
[HKEY_CLASSES_ROOTYandex.Search]

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«LClock»=»c:program filesLClockLClock.exe» [2007-12-14 86016]
«YandexOnline»=»c:program filesYandexOnlineonline.exe» [2009-06-22 2558728]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2008-05-16 13529088]
«NvMediaCenter»=»c:windowssystem32NvMcTray.dll» [2008-05-16 86016]
«LanguageShortcut»=»c:program filesCyberLinkPowerDVDLanguageLanguage.exe» [2006-04-13 49152]
«WinampAgent»=»c:program filesWinampwinampa.exe» [2009-07-01 37888]
«RemoteControl»=»c:program filesCyberLinkPowerDVDPDVDServ.exe» [2005-12-07 30208]
«NeroFilterCheck»=»c:program filesCommon FilesNeroLibNeroCheck.exe» [2007-03-01 153136]
«RTHDCPL»=»RTHDCPL.EXE» — c:windowsRTHDCPL.exe [2007-09-03 16841216]
«nwiz»=»nwiz.exe» — c:windowssystem32nwiz.exe [2008-05-16 1630208]

[HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»c:windowssystem32CTFMON.EXE» [2008-04-14 15360]

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionrun-]
«swg»=c:program filesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
«BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=»c:program filesCommon FilesNeroLibNMBgMonitor.exe»

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionrun-]
«DriverCD»=I:Run.exe
«NBKeyScan»=»c:program filesNeroNero8Nero BackItUpNBKeyScan.exe»
«AVP»=»c:program filesKaspersky LabKaspersky Anti-Virus 2009avp.exe»

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoringKasperskyAntiVirus]
«DisableMonitoring»=dword:00000001

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«%windir%\system32\sessmgr.exe»=
«c:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 2009\Russian\setup.exe»=
«c:\Program Files\eMule\emule.exe»=
«%windir%\Network Diagnostic\xpnetdiag.exe»=
«c:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE»=

R0 klbg;Kaspersky Lab Boot Guard Driver;c:windowssystem32driversklbg.sys [29.01.2008 18:29 33808]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:windowssystem32TUProgSt.exe [01.08.2009 7:34 604488]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:windowssystem32driversklim5.sys [25.03.2008 20:07 24592]
S2 gupdate1ca1e7df9c3f116;Служба Google Update (gupdate1ca1e7df9c3f116);c:program filesGoogleUpdateGoogleUpdate.exe [16.08.2009 18:29 133104]

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSvchost — NetSvcs
UxTuneUp
.
Contents of the ‘Scheduled Tasks’ folder

2009-09-06 c:windowsTasks1-Click Maintenance.job
— c:program filesTuneUp Utilities 2009OneClickStarter.exe [2009-07-16 06:30]

2009-09-06 c:windowsTasksGoogle Software Updater.job
— c:program filesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-08-16 14:21]

2009-09-06 c:windowsTasksGoogleUpdateTaskMachineCore.job
— c:program filesGoogleUpdateGoogleUpdate.exe [2009-08-16 14:29]

2009-09-06 c:windowsTasksGoogleUpdateTaskMachineUA.job
— c:program filesGoogleUpdateGoogleUpdate.exe [2009-08-16 14:29]
.
.

---

Supplementary Scan

---

.
uStart Page = hxxp://www.yandex.ru/?clid=40316
mStart Page = hxxp://www.yahoo.com
uInternet Settings,ProxyOverride = *.local
IE: &Экспорт в Microsoft Excel — c:progra~1MICROS~3Office12EXCEL.EXE/3000
TCP: {4C6D821C-D23D-467B-8AF7-6165C2AD9B1A} = 77.40.0.2,77.40.0.3
FF — ProfilePath — c:documents and settingsFeyaApplication DataMozillaFirefoxProfileshawo1apz.default
FF — prefs.js: browser.startup.homepage — hxxp://www.yandex.ru/?clid=21979
FF — plugin: c:program filesGoogleGoogle Updater2.4.1636.7222npCIDetect13.dll
FF — plugin: c:program filesGoogleUpdate1.2.183.7npGoogleOneClick8.dll
FF — plugin: c:program filesK-Lite Codec PackRealbrowserpluginsnppl3260.dll
FF — plugin: c:program filesK-Lite Codec PackRealbrowserpluginsnprpjplug.dll

—- FIREFOX POLICIES —-
FF — user.js: network.http.max-connections-per-server — 6
FF — user.js: network.http.max-persistent-connections-per-server — 3
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-06 14:50
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.

---

DLLs Loaded Under Running Processes

---

— — — — — — — > ‘winlogon.exe'(144)
c:windowssystem32klogon.dll

— — — — — — — > ‘explorer.exe'(3236)
c:program filesLClockLC.dll
.

---

Other Running Processes

---

.
c:program filesNeroNero8Nero BackItUpNBService.exe
c:windowssystem32nvsvc32.exe
c:program filesCyberLinkShared filesRichVideo.exe
c:windowssystem32wdfmgr.exe
c:windowssystem32wscntfy.exe
c:windowssystem32rundll32.exe
c:program filesYandexOnlineyachatyachat.exe
.
**************************************************************************
.
Completion time: 2009-09-06 14:51 — machine was rebooted
ComboFix-quarantined-files.txt 2009-09-06 10:51
ComboFix2.txt 2009-08-29 07:19
ComboFix3.txt 2009-08-29 07:10

Pre-Run: 64 838 434 816 байт свободно
Post-Run: 65 210 736 640 байт свободно

422 — E O F — 2009-08-26 08:44

[Admin]

Здравствуйте, добро пожаловать на Spyware-ru форум.

Проверим ещё одной программой.
Скачайте программу Combofix. Закройте все открытые окна и запустите эту программу.
После выполнения будет создан лог файл, пожалуйста вставьте его в ваш ответ.

Примечание: перед использованием Combofix обязательно установите Recovery console. Как это сделать будет описано на странице, ссылку на которую я привёл выше.

[Автор]

Сообщения