ошибка о zpx2.exe вылазиет, и страница не загружается

This topic has 1 ответ, 2 участника, and was last updated 16 years, 2 months назад by Admin.

Просмотр 2 сообщений - с 1 по 2 (из 2 всего)

Автор

Сообщения
9 марта, 2009 в 11:16 дп #16386
denibessono
Participant
- Темы:1
- Сообщений:1
ошибка о zpx2.exe вылазиет, и страница не загружается, когда захожу на видеораздел любой группы в контакте.ру

Это результаты проверки RSIT

info.txt logfile of random’s system information tool 1.05 2009-03-09 13:53:39

======Uninstall list======

—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{88E5FCB8-5F25-11D5-B16F-0800460222F0}setup.exe» -l0x9 UNINSTALL
—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{D76298C2-E532-4A11-BCFF-76F3F19DA84D}setup.exe» UNINSTALL
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
Adobe AIR—>MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Help Center 1.0—>MsiExec.exe /I{E9787678-1033-0000-8E67-000000000001}
Adobe Media Player—>MsiExec.exe /X{9455959E-D588-EFAE-329C-F66CC797F32A}
ASUSDVD XP—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}Setup.exe.exe» -uninstall
avast! Antivirus—>C:Program FilesAlwil SoftwareAvast4aswRunDll.exe «C:Program FilesAlwil SoftwareAvast4Setupsetiface.dll»,RunSetup
CCleaner (remove only)—>»C:Program FilesCCleaneruninst.exe»
Download Master version 5.5.9.1157—>»C:Program FilesDownload Masterunins000.exe»
Guitar Pro 5.0—>»C:Program FilesGuitar Pro 5unins000.exe»
HijackThis 2.0.2—>»C:Program Filestrend microHijackThis.exe» /uninstall
K-Lite Codec Pack 3.1.0 Full—>»C:Program FilesK-Lite Codec Packunins000.exe»
L&H TTS3000 Russian—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSRUR.inf, Uninstall
Lernout & Hauspie TruVoice American English TTS Engine—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFtv_enua.inf, Uninstall
Linksys Wireless-G PCI Network Adapter with SpeedBooster—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{EAE4A00B-D290-4B65-8287-B82A80FC0619}setup.exe» -l0x9
Malwarebytes’ Anti-Malware—>»C:Program FilesMalwarebytes’ Anti-Malwareunins000.exe»
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5—>»C:WINDOWS$NtUninstallWdf01005$spuninstspuninst.exe»
Microsoft Office — профессиональный выпуск версии 2003—>MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
Microsoft Text-to-Speech Engine 4.0 (English)—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFmsTTSf22.inf, Uninstall
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
MuzLand Tuner—>C:Program FilesMuzLand TunerUninstal.exe
NVIDIA Drivers—>C:WINDOWSsystem32nvudisp.exe UninstallGUI
OpenMG Secure Module 4.4.00—>C:PROGRA~1COMMON~1INSTAL~1Driver9INTEL3~1IDriver.exe /M{CFB17307-B244-4EAD-AE8E-CDAF440477C2} UNINSTALL
PROMT Express 7 ERRE Try-Buy—>MsiExec.exe /I{5324B96C-B837-44D5-A9B7-4EACBF82DF64}
QuickTime—>C:WINDOWSunvise32qt.exe C:WINDOWSsystem32QuickTimeUninstall.log
Real Alternative 1.49—>»C:Program FilesReal Alternativeunins000.exe»
Realtek AC’97 Audio—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{FB08F381-6533-4108-B7DD-039E11FBC27E}setup.exe» -l0x19 -removeonly
SiSAGP driver—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{DC226AC9-0314-496C-BE6A-B6A132628466}setup.exe» -l0x19
Total Commander (Remove or Repair)—>c:Totalcmdtcuninst.exe
VKLife 1.7.2—>»C:Program FilesVKLifeunins000.exe»
VKMusic 2.07—>»C:Program FilesVKMusic 2unins000.exe»
Windows Installer 3.1 (KB893803)—>»C:WINDOWS$MSI31Uninstall_KB893803v2$spuninstspuninst.exe»
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe

======Security center information======

AV: Doctor Web Anti-Virus
AV: avast! antivirus 4.8.1335 [VPS 090308-0]

System event log

Computer Name: ART-ROCK
Event Code: 7
Message: Неверный блок на устройстве DeviceCdRom0.

Record Number: 26244
Source Name: Cdrom
Time Written: 20090227173025.000000+180
Event Type: ошибка
User:

Computer Name: ART-ROCK
Event Code: 7
Message: Неверный блок на устройстве DeviceCdRom0.

Record Number: 26243
Source Name: Cdrom
Time Written: 20090227173023.000000+180
Event Type: ошибка
User:

Computer Name: ART-ROCK
Event Code: 7
Message: Неверный блок на устройстве DeviceCdRom0.

Record Number: 26242
Source Name: Cdrom
Time Written: 20090227173021.000000+180
Event Type: ошибка
User:

Computer Name: ART-ROCK
Event Code: 7
Message: Неверный блок на устройстве DeviceCdRom0.

Record Number: 26241
Source Name: Cdrom
Time Written: 20090227173018.000000+180
Event Type: ошибка
User:

Computer Name: ART-ROCK
Event Code: 7
Message: Неверный блок на устройстве DeviceCdRom0.

Record Number: 26240
Source Name: Cdrom
Time Written: 20090227173016.000000+180
Event Type: ошибка
User:

Application event log

Computer Name: ART-ROCK
Event Code: 1800
Message: Служба центра обеспечения безопасности Windows запущена.

Record Number: 2530
Source Name: SecurityCenter
Time Written: 20090226191545.000000+180
Event Type: информация
User:

Computer Name: ART-ROCK
Event Code: 11707
Message: Приложение: Антивирус Касперского 2009 — Установка успешно завершена.

Record Number: 2529
Source Name: MsiInstaller
Time Written: 20090226191240.000000+180
Event Type: информация
User: ART-ROCKRadiohead

Computer Name: ART-ROCK
Event Code: 2002
Message:
Record Number: 2528
Source Name: EAPOL
Time Written: 20090226190559.000000+180
Event Type: информация
User:

Computer Name: ART-ROCK
Event Code: 2003
Message:
Record Number: 2527
Source Name: EAPOL
Time Written: 20090226190559.000000+180
Event Type: информация
User:

Computer Name: ART-ROCK
Event Code: 1800
Message: Служба центра обеспечения безопасности Windows запущена.

Record Number: 2526
Source Name: SecurityCenter
Time Written: 20090226190559.000000+180
Event Type: информация
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesCommon FilesTeleca Shared;C:Program FilesSamsungSamsung PC Studio 3
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=15
«PROCESSOR_IDENTIFIER»=x86 Family 15 Model 2 Stepping 4, GenuineIntel
«PROCESSOR_REVISION»=0204
«NUMBER_OF_PROCESSORS»=1
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP

EOF

Logfile of random’s system information tool 1.05 (written by random/random)
Run by Radiohead at 2009-03-09 13:52:51
Microsoft Windows XP Professional Service Pack 2
System drive C: has 832 MB (27%) free of 3 GB
Total RAM: 255 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:53:04, on 09.03.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32nvsvc32.exe
C:Program FilesLinksys Wireless-G PCI Network Adapter with SpeedBoosterWLService.exe
C:Program FilesLinksys Wireless-G PCI Network Adapter with SpeedBoosterWMP54GSv1_1.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:WINDOWSsystem32ctfmon.exe
C:Documents and SettingsRadioheadГлавное менюПрограммыАвтозагрузкаLoadMem.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
D:DownloadsПрограммыMyIE33rusMyIEMyIE.exe
C:WINDOWSInfzpx2.exe
C:Program FilesDownload Masterdmaster.exe
D:DownloadsПрограммыRSIT.exe
C:Program Filestrend microRadiohead.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = http=127.0.0.1:8600;ftp=192.168.0.1:8001;https=192.168.0.1:8001;gopher=192.168.0.1:8001;socks=192.168.0.1:8001
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — Default URLSearchHook is missing
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: BP Data Feeder — {9D64F819-9380-8473-DAB2-702FCB3D7A3E} — (no file)
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — S-1-5-18 Startup: LoadMem.exe (User ‘SYSTEM’)
O4 — .DEFAULT Startup: LoadMem.exe (User ‘Default user’)
O4 — Startup: LoadMem.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe (file missing)
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe (file missing)
O23 — Service: Adobe LM Service — Unknown owner — C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe (file missing)
O23 — Service: avast! iAVS4 Control Service (aswupdsv) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: avast! Antivirus (avast! antivirus) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner (avast! mail scanner) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner (avast! web scanner) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: Фоновая интеллектуальная служба передачи (BITS) (BITS) — Unknown owner — C:WINDOWS
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: MSCSPTISRV — Unknown owner — C:Program FilesCommon FilesSony SharedAVLibMSCSPTISRV.exe (file missing)
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: PACSPTISVR — Unknown owner — C:Program FilesCommon FilesSony SharedAVLibPACSPTISVR.exe (file missing)
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Sony SPTI Service (SPTISRV) — Unknown owner — C:Program FilesCommon FilesSony SharedAVLibSPTISRV.exe (file missing)
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Windows Security Guard (winsecguard) — Unknown owner — C:WINDOWSInfzpx2.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe
O23 — Service: WMP54GSSVC — GEMTEKS — C:Program FilesLinksys Wireless-G PCI Network Adapter with SpeedBoosterWLService.exe
O23 — Service: Автоматическое обновление (wuauserv) — Unknown owner — C:WINDOWS

—
End of file — 6425 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2008-10-24 157696]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9D64F819-9380-8473-DAB2-702FCB3D7A3E}]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2006-10-22 7700480]
«avast!»=C:PROGRA~1ALWILS~1Avast4ashDisp.exe [2009-02-06 81000]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-17 15360]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregavast!]
C:PROGRA~1ALWILS~1Avast4ashDisp.exe [2009-02-06 81000]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregDownload Master]
C:Program FilesDownload Masterdmaster.exe [2009-02-06 3769856]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupreginetchk]
C:DOCUME~1RADIOH~1LOCALS~1Tempms1236548943.exe work []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregiPlusAgent2]
C:Program Filesiriveririver plus 2iAgent2.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregLoad]
C:WINDOWSrundl132.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregMSMSGS]
C:Program FilesMessengermsmsgs.exe /background []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNvCplDaemon]
C:WINDOWSsystem32NvCpl.dll [2006-10-22 7700480]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNvMediaCenter]
C:WINDOWSsystem32NvMcTray.dll [2006-10-22 86016]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregnwiz]
nwiz.exe /install []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregQuickTime Task]
C:Program FilesQuickTimeqttask.exe -atboottime []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRSD_HDDThermo]
D:ДИСТрDistrHDD ThermometerHDD Thermometer.exe [2008-03-30 215040]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRun]
C:WINDOWSrundl132.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregservices]
C:WINDOWSservices.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSony Ericsson PC Suite]
C:Program FilesSony EricssonMobile2Application LauncherApplication Launcher.exe /startoptions []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSoundMan]
C:WINDOWSSOUNDMAN.EXE [2006-03-02 577536]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSpIDerAgent]
C:Program FilesDrWebSpIDerAgent.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSpIDerGate]
C:Program FilesDrWebspidergate.exe -autorun []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSpIDerMail]
C:Program FilesDrWebspiderml.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSpIDerNT]
C:PROGRA~1DrWebspiderui.exe /agent []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSsAAD.exe]
C:PROGRA~1SonySONICS~1SsAAD.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregswg]
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupreguserfaultcheck]
C:WINDOWSsystem32dumprep 0 -u []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^Radiohead^Главное меню^Программы^Автозагрузка^Adobe Gamma.lnk]
C:PROGRA~1COMMON~1AdobeCALIBR~1ADOBEG~1.EXE []

C:Documents and SettingsRadioheadГлавное менюПрограммыАвтозагрузка
LoadMem.exe

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetcontrolsecurityproviders]
«SecurityProviders»=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, digeste.dll

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«EnableLUA»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«D:Новая папкаGamesQ3quake3.exe.exe»=»D:Новая папкаGamesQ3quake3.exe.exe:*:Enabled:quake3.exe»
«D:Новая папкаGamesQ3quake3.exe»=»D:Новая папкаGamesQ3quake3.exe:*:Enabled:quake3»
«D:PES 2008PES2008.exe»=»D:PES 2008PES2008.exe:*:Enabled:Pro Evolution Soccer 2008»
«G:gqhhbf.pif»=»G:gqhhbf.pif:*:Enabled:ipsec»
«C:Documents and SettingsRadioheadГлавное менюПрограммыАвтозагрузкаLoadMem.exe»=»C:Documents and SettingsRadioheadГлавное менюПрограммыАвтозагрузкаLoadMem.exe:*:Enabled:ipsec»
«C:Program FilesWinampwinamp.exe»=»C:Program FilesWinampwinamp.exe:*:Enabled:ipsec»
«C:WINDOWSExplorer.exe»=»C:WINDOWSExplorer.exe:*:Enabled:ipsec»
«C:Program FilesPRMT6PRMTXPrmtX.exe»=»C:Program FilesPRMT6PRMTXPrmtX.exe:*:Enabled:ipsec»
«C:Program FilesLight AlloyLA.exe»=»C:Program FilesLight AlloyLA.exe:*:Enabled:ipsec»
«C:Documents and SettingsRadioheadРабочий столFreeMem.exe»=»C:Documents and SettingsRadioheadРабочий столFreeMem.exe:*:Enabled:ipsec»
«D:Новый курс гитаристаГ И Т А Р АЭффекты26gfxbox26fxbox.exe»=»D:Новый курс гитаристаГ И Т А Р АЭффекты26gfxbox26fxbox.exe:*:Enabled:ipsec»
«C:Program FilesASUSTekASUSDVD XPPowerDVD.exe»=»C:Program FilesASUSTekASUSDVD XPPowerDVD.exe:*:Enabled:ipsec»
«G:xspdqs.exe»=»G:xspdqs.exe:*:Enabled:ipsec»
«C:Documents and SettingsRadioheadРабочий столcrystalpro.exe»=»C:Documents and SettingsRadioheadРабочий столcrystalpro.exe:*:Enabled:ipsec»
«D:Physics Deluxelauncher.exe»=»D:Physics Deluxelauncher.exe:*:Enabled:ipsec»
«C:WINDOWSsystem32netsh.exe»=»C:WINDOWSsystem32netsh.exe:*:Enabled:ipsec»
«D:ДИСТрDistrRegisterCcleanerccsetup126.exe»=»D:ДИСТрDistrRegisterCcleanerccsetup126.exe:*:Enabled:ipsec»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{00db4298-6e01-11dd-9cca-0014bf76463e}]
shellAutoRuncommand — G:d.com
shellexplorecommand — G:d.com
shellopencommand — G:d.com

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{1c357e2e-84bc-11dd-9cfb-0014bf76463e}]
shellAutoRuncommand — G:ntde1ect.com
shellexplorecommand — G:ntde1ect.com
shellopencommand — G:ntde1ect.com

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{1c357e2f-84bc-11dd-9cfb-0014bf76463e}]
shellAutoRuncommand — G:RESTORES-1-5-21-1482476501-1644491937-682003330-1013ise32.exe
shellopencommand — G:RESTORES-1-5-21-1482476501-1644491937-682003330-1013ise32.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{1c357e30-84bc-11dd-9cfb-0014bf76463e}]
shellAutoRuncommand — I:RESTORES-1-5-21-1482476501-1644491937-682003330-1013ise32.exe
shellopencommand — I:RESTORES-1-5-21-1482476501-1644491937-682003330-1013ise32.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{1f034196-f9f5-11dd-9db8-b9ed5563d1a1}]
shellAutoPLAycommand — G:uknjm.pif
shellAutoRuncommand — G:uknjm.pif
shellExploRecommand — G:uknjm.pif
shelloPeNcommand — G:uknjm.pif

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{41b7b6d7-ba53-11dd-9d76-8f03afce8ca6}]
shellAutoRuncommand — G:xspdqs.exe
shellexplorecommand — G:xspdqs.exe
shellopencommand — G:xspdqs.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5fd853a0-b6ed-11dd-9d6f-b44f3ca688a1}]
shellAutoRuncommand — G:xspdqs.exe
shellexplorecommand — G:xspdqs.exe
shellopencommand — G:xspdqs.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{61063242-c142-11dd-9d80-9a0fb1522ca1}]
shellAutoRuncommand — xspdqs.exe
shellexplorecommand — xspdqs.exe
shellopencommand — xspdqs.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{64f648f2-bcf2-11db-9bb8-af6d45c2c8a1}]
shellAutoRuncommand — G:semo2x.exe
shellexplorecommand — G:semo2x.exe
shellopencommand — G:semo2x.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{65f2165c-bafa-11dd-9d77-8cafece2aba1}]
shellAutoRuncommand — H:xspdqs.exe
shellexplorecommand — H:xspdqs.exe
shellopencommand — H:xspdqs.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{6f83c88c-75ea-11dd-9cd4-0014bf76463e}]
shellAutoRuncommand — G:ntde1ect.com
shellexplorecommand — G:ntde1ect.com
shellopencommand — G:ntde1ect.com

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{7c4739ca-acd9-11dd-9d57-926043c817a0}]
shellAutoRuncommand — G:xspdqs.exe
shellexplorecommand — G:xspdqs.exe
shellopencommand — G:xspdqs.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{82149350-010e-11de-9dc4-84d47c7e08a1}]
shellAutoRuncommand — G:xspdqs.exe
shellexplorecommand — G:xspdqs.exe
shellopencommand — G:xspdqs.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{983281a4-54f1-11dd-9caa-0014bf76463e}]
shellAutoRuncommand — G:RECYCLERS-1-5-21-1482476501-1644491937-682003330-1013winse32.exe
shellopencommand — G:RECYCLERS-1-5-21-1482476501-1644491937-682003330-1013winse32.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{9fcfa694-cb2a-11db-9bd0-c094a2abcea1}]
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Boot.exe e
shellOpencommand — G:Boot.exe e

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{a3437156-7cff-11dd-9ce7-0014bf76463e}]
shellAutoRuncommand — ylr.exe
shellexplorecommand — ylr.exe
shellopencommand — ylr.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{b244e7ce-59bf-11dd-9cb1-0014bf76463e}]
shellAutoRuncommand — H:hct8ybw.bat
shellexplorecommand — H:hct8ybw.bat
shellopencommand — H:hct8ybw.bat

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{c0abcc46-2194-11dd-9c3b-cdd536a922a0}]
shellAutoRuncommand — 0hct8ybw.bat
shellexplorecommand — 0hct8ybw.bat
shellopencommand — 0hct8ybw.bat

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{c6ac129e-ba06-11dd-9d74-e8efd4c1f2a6}]
shellAutoRuncommand — G:xspdqs.exe
shellexplorecommand — G:xspdqs.exe
shellopencommand — G:xspdqs.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{d89a5096-015c-11dd-9c04-df73e86729a1}]
shellAutoRuncommand — G:setupss.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{e6e8e9cc-f617-11dd-9db2-8509b372fba6}]
shellAuToplAycommand — G:gqhhbf.pif
shellAutoRuncommand — G:gqhhbf.pif
shelleXPlOrEcommand — G:gqhhbf.pif
shelloPEncommand — G:gqhhbf.pif

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{eca0e42d-b31c-11dd-9d66-0014bf76463e}]
shellAutoRuncommand — G:xspdqs.exe
shellexplorecommand — G:xspdqs.exe
shellopencommand — G:xspdqs.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{f8c15160-25da-11dd-9c43-81405ceebba1}]
shellAutoRuncommand — G:ntde1ect.com
shellexplorecommand — G:ntde1ect.com
shellopencommand — G:ntde1ect.com

======File associations======

.js — open — C:WINDOWSsystem32WScript.exe «%1» %*
.vbs — open — C:WINDOWSsystem32WScript.exe «%1» %*

======List of files/folders created in the last 1 months======

2009-03-09 13:52:51 —-D—- C:rsit
2009-03-09 13:24:04 —-RASHD—- C:autorun.inf
2009-03-09 12:06:32 —-D—- C:Program Filestrend micro
2009-03-09 11:51:52 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2009-03-09 10:56:09 —-D—- C:Documents and SettingsRadioheadApplication DataMalwarebytes
2009-03-09 10:55:49 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-03-09 10:55:47 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-03-09 03:16:41 —-D—- C:Program FilesCCleaner
2009-03-09 02:57:34 —-SHD—- C:RECYCLER
2009-03-09 01:38:51 —-A—- C:WINDOWSsystem32aswBoot.exe
2009-03-08 20:43:08 —-D—- C:Program FilesCommon Files{6EA9B29A-C801-4F76-805F-E41ACF9ED16Z}
2009-03-08 17:00:28 —-D—- C:Documents and SettingsRadioheadApplication Dataanv62
2009-03-08 16:47:09 —-D—- C:Documents and SettingsRadioheadApplication DataanvC4
2009-03-08 16:25:19 —-D—- C:Documents and SettingsRadioheadApplication DataanvA
2009-03-08 10:06:19 —-D—- C:Program FilesVKMusic 2
2009-03-07 18:54:50 —-A—- C:WINDOWSsystem32OLE2SYS2.DLL
2009-03-07 18:54:35 —-A—- C:WINDOWS3dftp.ini
2009-03-07 18:54:34 —-A—- C:WINDOWSsystem32SocketX.DLL
2009-03-07 18:54:34 —-A—- C:WINDOWSsystem323dftp.dll
2009-03-07 18:54:33 —-D—- C:Program Files3D-FTP
2009-03-07 17:41:47 —-HD—- C:WINDOWSPIF
2009-03-07 14:57:10 —-D—- C:Program FilesVKLife
2009-03-06 18:04:50 —-D—- C:Downloads
2009-03-06 18:04:40 —-D—- C:Documents and SettingsRadioheadApplication DataDownload Master
2009-03-06 18:04:19 —-D—- C:Program FilesDownload Master
2009-03-05 21:15:00 —-D—- C:Program FilesAdobe Media Player
2009-03-05 21:09:38 —-D—- C:Documents and SettingsRadioheadApplication DataAdobe
2009-03-05 21:09:26 —-D—- C:Documents and SettingsAll UsersApplication DataGoogle
2009-03-01 15:19:20 —-D—- C:Program Filesiriverter
2009-02-26 22:29:01 —-D—- C:Documents and SettingsAll UsersApplication DataDoctor Web
2009-02-26 22:29:00 —-D—- C:Program FilesDrWeb
2009-02-26 22:23:40 —-HDC—- C:WINDOWS$MSI31Uninstall_KB893803v2$
2009-02-25 22:59:14 —-D—- C:Documents and SettingsRadioheadApplication DataCrayon Physics Deluxe

======List of files/folders modified in the last 1 months======

2009-03-09 13:52:58 —-D—- C:WINDOWSPrefetch
2009-03-09 13:40:46 —-D—- C:WINDOWSTemp
2009-03-09 13:28:38 —-D—- C:WINDOWS
2009-03-09 13:24:56 —-N—- C:WINDOWSSchedLgU.Txt
2009-03-09 13:24:55 —-D—- C:WINDOWSsystem32CatRoot2
2009-03-09 13:24:03 —-D—- C:WINDOWSsystem32
2009-03-09 13:10:06 —-SD—- C:WINDOWSDownloaded Program Files
2009-03-09 12:06:32 —-RD—- C:Program Files
2009-03-09 11:54:07 —-D—- C:WINDOWSsystem32drivers
2009-03-09 11:41:57 —-D—- C:Program FilesInternet Explorer
2009-03-09 02:56:54 —-D—- C:Program FilesCommon Files
2009-03-09 01:44:09 —-SH—- C:boot.ini
2009-03-09 01:44:09 —-A—- C:WINDOWSwin.ini
2009-03-09 01:44:09 —-A—- C:WINDOWSsystem.ini
2009-03-09 01:39:40 —-D—- C:WINDOWSsystem32config
2009-03-09 01:37:15 —-SHD—- C:WINDOWSInstaller
2009-03-09 01:36:47 —-SD—- C:WINDOWSTasks
2009-03-08 23:10:35 —-HD—- C:WINDOWSinf
2009-03-08 23:06:04 —-D—- C:WINDOWSsystem32Macromed
2009-03-08 18:00:06 —-A—- C:WINDOWSwinamp.ini
2009-03-08 16:53:48 —-D—- C:WINDOWSsecurity
2009-03-08 16:20:07 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-03-06 16:07:34 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-03-05 21:15:36 —-HD—- C:WINDOWS$hf_mig$
2009-03-05 21:15:04 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2009-03-05 21:05:50 —-SD—- C:Documents and SettingsRadioheadApplication DataMicrosoft
2009-02-27 20:49:56 —-D—- C:WINDOWSRegistration
2009-02-27 20:48:41 —-D—- C:WINDOWSsystem32NtmsData
2009-02-26 23:36:52 —-D—- C:Totalcmd
2009-02-26 23:36:52 —-D—- C:Program Filesxerox
2009-02-26 23:36:52 —-D—- C:Program FilesWinRAR
2009-02-26 23:36:48 —-D—- C:Program FilesWinamp
2009-02-26 23:36:47 —-HD—- C:Program FilesUninstall Information
2009-02-26 23:36:47 —-D—- C:Program FilesRealtek AC97
2009-02-26 23:36:43 —-D—- C:Program FilesReal Alternative
2009-02-26 23:36:43 —-D—- C:Program FilesQuickTime
2009-02-26 23:36:40 —-D—- C:Program FilesPRMT6
2009-02-26 23:36:40 —-D—- C:Program FilesOnline Services
2009-02-26 23:36:38 —-D—- C:Program FilesNimoCodec Pack
2009-02-26 23:36:38 —-D—- C:Program FilesMuzLand Tuner
2009-02-26 23:36:37 —-D—- C:Program FilesMicrosoft.NET
2009-02-26 23:36:15 —-D—- C:Program FilesMicrosoft Office
2009-02-26 23:36:12 —-D—- C:Program FilesLight Alloy
2009-02-26 23:36:10 —-D—- C:Program FilesK-Lite Codec Pack
2009-02-26 23:36:10 —-D—- C:Program Filesiriver
2009-02-26 23:36:07 —-D—- C:Program FilesGuitar Pro 5
2009-02-26 23:36:06 —-D—- C:Program FilesGuitar Pro 4
2009-02-26 23:36:06 —-D—- C:Program FilesDivX
2009-02-26 23:36:06 —-D—- C:Program FilesCyberLink
2009-02-26 23:35:55 —-D—- C:Program FilesASUSTek
2009-02-26 23:35:55 —-D—- C:HENDRIX
2009-02-19 22:58:27 —-A—- C:WINDOWSXLMSoft.ini
2009-02-17 19:40:21 —-D—- C:Program FilesWindows Media Player
2009-02-17 19:38:23 —-D—- C:Program FilesLinksys Wireless-G PCI Network Adapter with SpeedBooster

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversaavmker4.sys [2009-02-06 26944]
R1 aswsp;avast! Self Protection; C:WINDOWSsystem32driversaswsp.sys [2009-02-06 114768]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2009-02-06 51376]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2004-08-17 40448]
R2 aswfsblk;aswFsBlk; C:WINDOWSsystem32DRIVERSaswFsBlk.sys [2009-02-06 20560]
R2 aswmon2;avast! Standard Shield Support; C:WINDOWSsystem32driversaswmon2.sys [2009-02-06 94032]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2006-05-19 3965056]
R3 aswrdr;aswRdr; C:WINDOWSsystem32driversaswrdr.sys [2009-02-06 23152]
R3 BCM43XX;Linksys Wireless-G PCI Network Adapter Driver; C:WINDOWSsystem32DRIVERSbcmwl5.sys [2004-10-28 369024]
R3 GTNDIS5;GTNDIS5 NDIS Protocol Driver; ??C:WINDOWSsystem32GTNDIS5.SYS []
R3 ms_mpu401;Драйвер UART Microsoft MPU-401 MIDI; C:WINDOWSsystem32driversmsmpu401.sys [2001-08-18 2944]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2006-10-22 3994624]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WINDOWSSystem32DriversRootMdm.sys [2001-10-20 5888]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-03 26624]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-03 57600]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2004-08-03 17024]
S3 abp470n5;abp470n5; ??C:WINDOWSsystem32driverspjlvr.sys []
S3 BCM42RLY;BCM42RLY; ??C:WINDOWSSystem32BCM42RLY.SYS []
S3 ComFiltr;Panda Anti-Dialer; ??C:WINDOWSsystem32DRIVERSCOMFiltr.sys []
S3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2001-08-17 9600]
S3 motccgp;Motorola USB Composite Device Driver; C:WINDOWSsystem32DRIVERSmotccgp.sys [2007-06-18 17920]
S3 motccgpfl;MotCcgpFlService; C:WINDOWSsystem32DRIVERSmotccgpfl.sys [2007-01-22 7680]
S3 MotDev;Motorola Inc. USB Device; C:WINDOWSsystem32DRIVERSmotodrv.sys [2007-05-07 42112]
S3 motmodem;Motorola USB CDC ACM Driver; C:WINDOWSsystem32DRIVERSmotmodem.sys [2007-06-18 23680]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSRTL8139.SYS [2004-08-04 20992]
S3 sea1bus;Sony Ericsson Device 0A1 driver (WDM); C:WINDOWSsystem32DRIVERSsea1bus.sys [2007-02-08 61536]
S3 sea1mdfl;Sony Ericsson Device 0A1 USB WMC Modem Filter; C:WINDOWSsystem32DRIVERSsea1mdfl.sys [2007-02-08 9360]
S3 sea1mdm;Sony Ericsson Device 0A1 USB WMC Modem Driver; C:WINDOWSsystem32DRIVERSsea1mdm.sys [2007-02-08 97088]
S3 sea1mgmt;Sony Ericsson Device 0A1 USB WMC Device Management Drivers (WDM); C:WINDOWSsystem32DRIVERSsea1mgmt.sys [2007-02-08 88624]
S3 sea1nd5;Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (NDIS); C:WINDOWSsystem32DRIVERSsea1nd5.sys [2007-02-08 18704]
S3 sea1obex;Sony Ericsson Device 0A1 USB WMC OBEX Interface; C:WINDOWSsystem32DRIVERSsea1obex.sys [2007-02-08 86432]
S3 sea1unic;Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (WDM); C:WINDOWSsystem32DRIVERSsea1unic.sys [2007-02-08 90800]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-03 31616]
S3 usbser;Motorola USB Modem Driver; C:WINDOWSsystem32DRIVERSusbser.sys [2004-08-03 25600]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-03 26496]
S3 W700bus;Sony Ericsson W700 Driver driver (WDM); C:WINDOWSsystem32DRIVERSW700bus.sys [2006-02-19 61536]
S3 W700mdfl;Sony Ericsson W700 USB WMC Modem Filter; C:WINDOWSsystem32DRIVERSW700mdfl.sys [2008-11-24 9264]
S3 W700mdm;Sony Ericsson W700 USB WMC Modem Driver; C:WINDOWSsystem32DRIVERSW700mdm.sys [2008-11-24 97056]
S3 W700mgmt;Sony Ericsson W700 USB WMC Device Management Drivers (WDM); C:WINDOWSsystem32DRIVERSW700mgmt.sys [2008-11-24 88560]
S3 W700obex;Sony Ericsson W700 USB WMC OBEX Interface; C:WINDOWSsystem32DRIVERSW700obex.sys [2008-11-24 86368]
S3 Wdf01000;Wdf01000; C:WINDOWSsystem32DRIVERSWdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:WINDOWSSystem32Driverswpdusb.sys [2005-01-28 18944]
S4 dwshd;dwshd; C:WINDOWSSystem32driversdwshd.sys []
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
S4 sr;Драйвер фильтра восстановления системы; C:WINDOWSsystem32DRIVERSsr.sys [2004-08-17 73472]
S4 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2001-10-20 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswupdsv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2009-02-06 18752]
R2 avast! antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2009-02-06 138680]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2006-10-22 159810]
R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912]
R2 winsecguard;Windows Security Guard; C:WINDOWSInfzpx2.exe [2009-03-08 331776]
R3 avast! mail scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2009-02-06 254040]
R3 avast! web scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2009-02-06 352920]
S2 WMP54GSSVC;WMP54GSSVC; C:Program FilesLinksys Wireless-G PCI Network Adapter with SpeedBoosterWLService.exe [2005-07-04 53307]
S3 Adobe LM Service;Adobe LM Service; C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe []
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe [2005-11-14 143360]
S3 MSCSPTISRV;MSCSPTISRV; C:Program FilesCommon FilesSony SharedAVLibMSCSPTISRV.exe []
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 166960]
S3 PACSPTISVR;PACSPTISVR; C:Program FilesCommon FilesSony SharedAVLibPACSPTISVR.exe []
S3 SPTISRV;Sony SPTI Service; C:Program FilesCommon FilesSony SharedAVLibSPTISRV.exe []

EOF
11 марта, 2009 в 3:29 пп #22504
Admin
Keymaster
- Темы:40
- Сообщений:5676
Здравствуйте, добро пожаловать на Spyware-ru форум.

Скачайте OTMoveIt3 by OldTimer кликнув по этой ссылке.
Запустите OTMoveIt3 и в большое поле ввода (заголовок этого поля выделен желтым цветом) скопируйте следующий текст.
```
:Processes

explorer.exe



:reg

[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9D64F819-9380-8473-DAB2-702FCB3D7A3E}]

[-HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupreginetchk]

[-HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregLoad]

[-HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRun]

[-HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregservices]



[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetcontrolsecurityproviders]

"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"



[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{00db4298-6e01-11dd-9cca-0014bf76463e}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{1c357e2e-84bc-11dd-9cfb-0014bf76463e}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{1c357e2f-84bc-11dd-9cfb-0014bf76463e}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{1c357e30-84bc-11dd-9cfb-0014bf76463e}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{1f034196-f9f5-11dd-9db8-b9ed5563d1a1}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{41b7b6d7-ba53-11dd-9d76-8f03afce8ca6}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5fd853a0-b6ed-11dd-9d6f-b44f3ca688a1}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{61063242-c142-11dd-9d80-9a0fb1522ca1}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{64f648f2-bcf2-11db-9bb8-af6d45c2c8a1}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{65f2165c-bafa-11dd-9d77-8cafece2aba1}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{6f83c88c-75ea-11dd-9cd4-0014bf76463e}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{7c4739ca-acd9-11dd-9d57-926043c817a0}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{82149350-010e-11de-9dc4-84d47c7e08a1}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{983281a4-54f1-11dd-9caa-0014bf76463e}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{9fcfa694-cb2a-11db-9bd0-c094a2abcea1}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{a3437156-7cff-11dd-9ce7-0014bf76463e}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{b244e7ce-59bf-11dd-9cb1-0014bf76463e}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{c0abcc46-2194-11dd-9c3b-cdd536a922a0}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{c6ac129e-ba06-11dd-9d74-e8efd4c1f2a6}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{d89a5096-015c-11dd-9c04-df73e86729a1}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{e6e8e9cc-f617-11dd-9db2-8509b372fba6}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{eca0e42d-b31c-11dd-9d66-0014bf76463e}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{f8c15160-25da-11dd-9c43-81405ceebba1}]



:files

G:d.com

G:ntde1ect.com

G:xspdqs.exe

G:gqhhbf.pif

H:hct8ybw.bat

G:Boot.exe e

G:RECYCLERS-1-5-21-1482476501-1644491937-682003330-1013

G:uknjm.pif

I:RESTORES-1-5-21-1482476501-1644491937-682003330-1013

G:RESTORES-1-5-21-1482476501-1644491937-682003330-1013

C:Documents and SettingsRadioheadГлавное менюПрограммыАвтозагрузкаLoadMem.exe



:Commands

[emptytemp]

[start explorer]

[Reboot]
```
Проверьте вставленный скрипт, если слева перед директивами появились пробелы, то удалите их, скрипт должен выглядеть так же как в сообщении. Кликните по кнопке MoveIt!. В процессе работы возможна перезагрузка компьютера.
По-завершении работы программы должен будет показан лог. Если лог не будет показан, то его можно найти в папке C:_OTMoveItMovedFiles.

Скачайте программу Avenger кликнув по этой ссылке и распакуйте её на Рабочий стол.
Запустите Avenger, при это убедитесь что стоит галочка в пункте «Scan for rootkits» и нет галочки в пункте «Automatically disable any rootkits found». Уберите или поставьте галочки в случае необходимости. Скопируйте ниже приведённый текст в Input script Box:
```
Drivers to delete:

winsecguard



Files to delete:

C:WINDOWSInfzpx2.exe
```
Кликните Execute. Появится запрос о подтверждении ваших действий, нажмите Yes.
Avenger запуститься. В процессе работы возможны несколько перезагрузок компьютера.
По-окончании работы будет показан лог, пожалуйста вставьте его в ваш ответ.

Запустите HijackThis, для этого кликните Пуск, Выполнить, введите
```
C:Program Filestrend microRadiohead.exe
```
и нажмите Enter.
Кликните по кнопке Do a system scan only.
Далее отметьте галочкой (слева) следующую строку, если она присутствует:
```
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = http=127.0.0.1:8600;ftp=192.168.0.1:8001;https=192.168.0.1:8001;gopher=192.168.0.1:8001;socks=192.168.0.1:8001
```
Закройте все запущенные программы (включая InternetExplorer) и окна Windows.
Кликните по кнопке Fix checked и подтвердите свои действия выбрав YES.
Перезагрузите компьютер.

Жду от вас:
— OTMoveIt лог
— Avenger лог
— свежий RSIT лог
Автор

Сообщения

Просмотр 2 сообщений - с 1 по 2 (из 2 всего)

Для ответа в этой теме необходимо авторизоваться.

ошибка о zpx2.exe вылазиет, и страница не загружается

Добро пожаловать

Поиск

Последние темы

СПАЙВАРЕ РУ

Нужна помощь?

Ссылки