Перестал обновляться Нод32

This topic has 5 ответов, 2 участника, and was last updated 15 years назад by Helper.

Просмотр 6 сообщений - с 1 по 6 (из 6 всего)

Автор

Сообщения
18 июня, 2010 в 6:13 дп #18371
88
Participant
- Темы:7
- Сообщений:24
Перестал обновляться лицензионный Нод32. Пишет произошла ошибка при загрузке файлов обновления. что это? Вирус? Как бороться?
18 июня, 2010 в 7:35 дп #29701
88
Participant
- Темы:7
- Сообщений:24
Сделала, как рекомендуют. Вот результат.

Logfile of random’s system information tool 1.06 (written by random/random)
Run by 1 at 2010-06-18 11:33:18
Microsoft Windows XP Professional Service Pack 3
System drive C: has 20 GB (66%) free of 30 GB
Total RAM: 383 MB (31% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:33:31, on 18.06.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:Program FilesESETESET NOD32 Antivirusegui.exe
C:Program FilesCommon FilesNikonMonitorNkMonitor.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesHPDigital Imagingbinhpqtra08.exe
C:WINDOWSsystem32sistray.exe
C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe
C:Program FilesESETESET NOD32 Antivirusekrn.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32wscntfy.exe
C:Program FilesHPDigital ImagingbinhpqSTE08.exe
C:Program FilesOperaopera.exe
D:Program FilesRSIT.exe
C:Program Filestrend micro1.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40316
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
F2 — REG:system.ini: UserInit=C:WINDOWSSYSTEM32Userinit.exe,\?globalrootsystemrootsystem328rCVJ2I.exe,\?globalrootsystemrootsystem32XdssLB6.exe,\?globalrootsystemrootsystem32G4gDwDl.exe,\?globalrootsystemrootsystem32WiO5mkm.exe,
O2 — BHO: HP Print Enhancer — {0347C33E-8762-4905-BF09-768834316C61} — C:Program FilesHPSmart Web Printinghpswp_printenhancer.dll
O2 — BHO: HP Print Clips — {053F9267-DC04-4294-A72C-58F732D338C0} — C:Program FilesHPSmart Web Printinghpswp_framework.dll
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.2.4204.1700swg.dll
O2 — BHO: Google Dictionary Compression sdch — {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_B7C5AC242193BB3E.dll
O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [SkyTel] SkyTel.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 — HKLM..Run: [egui] «C:Program FilesESETESET NOD32 Antivirusegui.exe» /hide /waitservice
O4 — HKLM..Run: [ArcSoft Connection Service] C:Program FilesCommon FilesArcSoftConnection ServiceBinACDaemon.exe
O4 — HKLM..Run: [Nikon Transfer Monitor] C:Program FilesCommon FilesNikonMonitorNkMonitor.exe
O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [swg] «C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe»
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exe
O4 — Global Startup: Utility Tray.lnk = C:WINDOWSsystem32sistray.exe
O4 — Global Startup: Ускоренный запуск Adobe Reader.lnk = C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Google Sidewiki… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 — Extra button: Альбом клипов HP — {58ECB495-38F0-49cb-A538-10282ABF65E7} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 — Extra button: Расширенный выбор HP — {700259D7-1666-479a-93B1-3250410481E8} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O17 — HKLMSystemCCSServicesTcpip..{9929AFD7-A871-4379-BB43-3B69CF54309E}: NameServer = 78.36.171.200 212.48.193.36
O23 — Service: ArcSoft Connect Daemon (ACDaemon) — ArcSoft Inc. — C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe
O23 — Service: Eset HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe
O23 — Service: Eset Service (ekrn) — ESET — C:Program FilesESETESET NOD32 Antivirusekrn.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба Google Update (gupdate) (gupdate) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 8089 bytes

======Scheduled tasks folder======

C:WINDOWStasksGoogleUpdateTaskMachineCore.job
C:WINDOWStasksGoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer — C:Program FilesHPSmart Web Printinghpswp_printenhancer.dll [2007-03-02 1298024]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips — C:Program FilesHPSmart Web Printinghpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-06-07 256112]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.2.4204.1700swg.dll [2010-06-07 761840]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_B7C5AC242193BB3E.dll [2010-06-07 458736]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-06-07 256112]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-09-19 16844800]
«SkyTel»=C:WINDOWSSkyTel.EXE [2007-08-03 1826816]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«SiSPower»=SiSPower.dll,ModeAgent []
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2005-01-12 32768]
«HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2007-03-11 49152]
«egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe [2009-10-07 1461080]
«ArcSoft Connection Service»=C:Program FilesCommon FilesArcSoftConnection ServiceBinACDaemon.exe [2010-03-18 207360]
«Nikon Transfer Monitor»=C:Program FilesCommon FilesNikonMonitorNkMonitor.exe [2009-09-15 479232]
«KernelFaultCheck»=C:WINDOWSsystem32dumprep 0 -k []

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-06-09 15360]
«swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2010-06-07 39408]

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
HP Digital Imaging Monitor.lnk — C:Program FilesHPDigital Imagingbinhpqtra08.exe
Utility Tray.lnk — C:WINDOWSsystem32sistray.exe
Ускоренный запуск Adobe Reader.lnk — C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
C:WINDOWSsystem32WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=
«HonorAutoRunSetting»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2010-06-18 11:29:56 —-A—- C:Program FilesCommon Fileskeylog.txt
2010-06-17 05:39:28 —-A—- C:WINDOWSsystem324VEq2VM.exe
2010-06-17 05:38:33 —-A—- C:WINDOWSsystem32WiO5mkm.exe
2010-06-17 05:38:06 —-A—- C:WINDOWSsystem32G4gDwDl.exe
2010-06-16 00:05:15 —-A—- C:WINDOWSsystem32apexchanger.exe
2010-06-16 00:03:15 —-D—- C:Program FilesApex Video Converter Pro
2010-06-16 00:03:15 —-D—- C:Apex
2010-06-15 23:19:45 —-D—- C:Program FilesCommon FilesAVSMedia
2010-06-15 23:19:24 —-A—- C:WINDOWSsystem32msxml3a.dll
2010-06-15 21:50:17 —-D—- C:Program Filesmp3DirectCut
2010-06-11 21:35:23 —-D—- C:Documents and Settings1Application DataXilisoft Corporation
2010-06-11 03:03:26 —-HDC—- C:WINDOWS$NtUninstallKB980218$
2010-06-11 03:03:14 —-HDC—- C:WINDOWS$NtUninstallKB980195$
2010-06-11 03:03:08 —-HDC—- C:WINDOWS$NtUninstallKB979559$
2010-06-11 03:01:07 —-HDC—- C:WINDOWS$NtUninstallKB978695_WM9$
2010-06-11 03:00:56 —-HDC—- C:WINDOWS$NtUninstallKB979482$
2010-06-11 03:00:50 —-HDC—- C:WINDOWS$NtUninstallKB975562$
2010-06-11 03:00:36 —-D—- C:WINDOWSie8updates
2010-06-10 21:27:16 —-D—- C:Movavi files
2010-06-10 20:37:42 —-D—- C:Program FilesMovavi Видео Конвертер 8
2010-06-10 12:17:09 —-D—- C:Documents and Settings1Application DataMOVAVI
2010-06-09 06:22:05 —-HDC—- C:WINDOWS$NtUninstallKB970430$
2010-06-09 06:21:38 —-HDC—- C:WINDOWS$NtUninstallKB971737$
2010-06-09 05:37:34 —-A—- C:WINDOWSsystem32MRT.exe
2010-06-09 05:36:18 —-D—- C:WINDOWSWBEM
2010-06-09 05:33:27 —-HDC—- C:WINDOWSie8
2010-06-07 14:46:32 —-D—- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
2010-06-07 05:31:38 —-HDC—- C:WINDOWS$NtUninstallKB952954$
2010-06-07 05:31:31 —-HDC—- C:WINDOWS$NtUninstallKB959426$
2010-06-07 05:31:18 —-HDC—- C:WINDOWS$NtUninstallKB960859$
2010-06-07 05:31:00 —-HDC—- C:WINDOWS$NtUninstallKB974318$
2010-06-07 05:30:52 —-HDC—- C:WINDOWS$NtUninstallKB951978$
2010-06-07 05:30:44 —-HDC—- C:WINDOWS$NtUninstallKB969059$
2010-06-07 05:30:37 —-HDC—- C:WINDOWS$NtUninstallKB981349$
2010-06-07 05:30:27 —-HDC—- C:WINDOWS$NtUninstallKB950974$
2010-06-07 05:30:21 —-HDC—- C:WINDOWS$NtUninstallKB975713$
2010-06-07 05:30:14 —-HDC—- C:WINDOWS$NtUninstallKB971657$
2010-06-07 05:30:05 —-HDC—- C:WINDOWS$NtUninstallKB978338$
2010-06-07 05:29:58 —-HDC—- C:WINDOWS$NtUninstallKB974112$
2010-06-07 05:29:52 —-HDC—- C:WINDOWS$NtUninstallKB961501$
2010-06-07 05:29:45 —-HDC—- C:WINDOWS$NtUninstallKB975025$
2010-06-07 05:29:29 —-HDC—- C:WINDOWS$NtUninstallKB952004$
2010-06-07 05:29:22 —-HDC—- C:WINDOWS$NtUninstallKB974571$
2010-06-07 05:29:15 —-HDC—- C:WINDOWS$NtUninstallKB975560$
2010-06-07 05:29:04 —-HDC—- C:WINDOWS$NtUninstallKB973507$
2010-06-07 05:28:57 —-HDC—- C:WINDOWS$NtUninstallKB977816$
2010-06-07 05:28:23 —-HDC—- C:WINDOWS$NtUninstallKB980182$
2010-06-07 05:27:27 —-HDC—- C:WINDOWS$NtUninstallKB974392$
2010-06-07 05:25:35 —-HDC—- C:WINDOWS$NtUninstallKB977914$
2010-06-07 05:23:54 —-HDC—- C:WINDOWS$NtUninstallKB951748$
2010-06-07 05:23:37 —-HDC—- C:WINDOWS$NtUninstallKB978542$
2010-06-07 05:23:24 —-HDC—- C:WINDOWS$NtUninstallKB956802$
2010-06-07 05:22:52 —-HDC—- C:WINDOWS$NtUninstallKB975467$
2010-06-07 05:21:39 —-HDC—- C:WINDOWS$NtUninstallKB968389$
2010-06-06 18:19:24 —-D—- C:Documents and SettingsAll UsersApplication DataGoogle
2010-06-06 18:14:16 —-A—- C:WINDOWSavisplitter.ini
2010-06-06 18:13:55 —-A—- C:WINDOWSsystem32yv12vfw.dll
2010-06-06 18:13:40 —-A—- C:WINDOWSsystem32ff_vfw.dll.manifest
2010-06-06 18:13:40 —-A—- C:WINDOWSsystem32ff_vfw.dll
2010-06-06 18:13:31 —-D—- C:Program FilesK-Lite Codec Pack
2010-06-06 17:23:28 —-HDC—- C:WINDOWS$NtUninstallKB978262$
2010-06-06 17:23:11 —-HDC—- C:WINDOWS$NtUninstallKB951376-v2$
2010-06-06 17:22:54 —-HDC—- C:WINDOWS$NtUninstallKB946648$
2010-06-06 17:22:37 —-HDC—- C:WINDOWS$NtUninstallKB956803$
2010-06-06 17:22:20 —-HDC—- C:WINDOWS$NtUninstallKB971468$
2010-06-06 17:21:59 —-HDC—- C:WINDOWS$NtUninstallKB979683$
2010-06-06 17:21:42 —-HDC—- C:WINDOWS$NtUninstallKB958869$
2010-06-06 17:21:25 —-HDC—- C:WINDOWS$NtUninstallKB980232$
2010-06-06 17:21:04 —-HDC—- C:WINDOWS$NtUninstallKB955759$
2010-06-06 17:20:46 —-HDC—- C:WINDOWS$NtUninstallKB968816_WM9$
2010-06-06 17:20:30 —-HDC—- C:WINDOWS$NtUninstallKB978037$
2010-06-06 17:20:13 —-HDC—- C:WINDOWS$NtUninstallKB954155_WM9$
2010-06-06 17:19:57 —-HDC—- C:WINDOWS$NtUninstallKB960225$
2010-06-06 17:19:28 —-HDC—- C:WINDOWS$NtUninstallKB956572$
2010-06-06 17:19:08 —-HDC—- C:WINDOWS$NtUninstallKB956844$
2010-06-06 17:18:48 —-HDC—- C:WINDOWS$NtUninstallKB973904$
2010-06-06 17:18:25 —-HDC—- C:WINDOWS$NtUninstallKB967715$
2010-06-06 17:18:06 —-HDC—- C:WINDOWS$NtUninstallKB970238$
2010-06-06 17:17:45 —-HDC—- C:WINDOWS$NtUninstallKB978706$
2010-06-06 17:17:23 —-HDC—- C:WINDOWS$NtUninstallKB960803$
2010-06-06 17:17:06 —-HDC—- C:WINDOWS$NtUninstallKB973815$
2010-06-06 17:16:42 —-HDC—- C:WINDOWS$NtUninstallKB969947$
2010-06-06 16:22:49 —-D—- C:FlashVideos
2010-06-06 08:15:39 —-HDC—- C:WINDOWS$NtUninstallKB972270$
2010-06-06 08:15:31 —-HDC—- C:WINDOWS$NtUninstallKB956744$
2010-06-06 08:15:20 —-HDC—- C:WINDOWS$NtUninstallKB973869$
2010-06-06 08:15:07 —-HDC—- C:WINDOWS$NtUninstallKB941569$
2010-06-06 08:14:28 —-HDC—- C:WINDOWS$NtUninstallKB973687$
2010-06-06 08:14:19 —-HDC—- C:WINDOWS$NtUninstallKB950762$
2010-06-06 08:14:09 —-HDC—- C:WINDOWS$NtUninstallKB981793$
2010-06-06 08:13:59 —-HDC—- C:WINDOWS$NtUninstallKB978601$
2010-06-06 08:13:52 —-HDC—- C:WINDOWS$NtUninstallKB952287$
2010-06-06 08:13:36 —-HDC—- C:WINDOWS$NtUninstallKB973540_WM9$
2010-06-06 08:13:30 —-HDC—- C:WINDOWS$NtUninstallKB950760$
2010-06-06 08:13:22 —-HDC—- C:WINDOWS$NtUninstallKB952069_WM9$
2010-06-06 08:13:13 —-HDC—- C:WINDOWS$NtUninstallKB979309$
2010-06-06 08:13:05 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2010-06-06 08:12:23 —-HDC—- C:WINDOWS$NtUninstallKB955069$
2010-06-06 08:11:51 —-D—- C:Program FilesMSXML 4.0
2010-06-06 08:11:31 —-HDC—- C:WINDOWS$NtUninstallKB923561$
2010-06-06 08:10:52 —-HDC—- C:WINDOWS$NtUninstallKB971961$
2010-06-05 08:29:12 —-HDC—- C:WINDOWS$NtUninstallKB975561$
2010-06-04 23:32:50 —-D—- C:WINDOWSsystem32PreInstall
2010-06-04 23:32:48 —-N—- C:WINDOWSsystem32spmsg.dll
2010-06-04 23:32:47 —-A—- C:WINDOWSsystem32spupdsvc.exe
2010-06-04 23:32:45 —-HDC—- C:WINDOWS$NtUninstallKB898461$
2010-06-04 23:32:45 —-HD—- C:WINDOWS$hf_mig$
2010-06-04 22:08:19 —-D—- C:WINDOWSMinidump
2010-06-03 06:38:42 —-D—- C:WINDOWSsystem32SoftwareDistribution
2010-06-02 09:08:50 —-D—- C:Documents and Settings1Application DataMalwarebytes
2010-06-02 09:08:31 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2010-05-31 01:31:49 —-D—- C:Program Filestrend micro
2010-05-31 01:31:47 —-D—- C:rsit
2010-05-31 00:45:58 —-D—- C:WINDOWSsystem32appmgmt
2010-05-30 22:15:10 —-A—- C:SAFEBOOT_REPAIR.TXT
2010-05-30 17:10:58 —-D—- C:Documents and Settings1Application DataHelp
2010-05-27 23:55:59 —-D—- C:Program FilesQuickTime
2010-05-27 22:58:36 —-D—- C:32788R22FWJFW(2)
2010-05-27 22:35:36 —-D—- C:WINDOWSpss
2010-05-26 21:00:24 —-D—- C:Program FilesCommon FilesSysAware Soft
2010-05-23 23:05:18 —-A—- C:WINDOWSViewNX.INI
2010-05-23 22:52:06 —-D—- C:Documents and Settings1Application DataApple Computer
2010-05-23 22:46:32 —-D—- C:Documents and Settings1Application DataNikon
2010-05-23 22:41:49 —-D—- C:Documents and SettingsAll UsersApplication DataSync Schema
2010-05-23 22:40:45 —-D—- C:Program FilesCommon Filesmuvee Technologies
2010-05-23 22:40:32 —-D—- C:Program FilesCommon FilesNikon
2010-05-23 22:40:32 —-D—- C:Documents and SettingsAll UsersApplication DataNikon
2010-05-23 22:40:24 —-D—- C:Program FilesNikon
2010-05-23 22:38:54 —-D—- C:Documents and SettingsAll UsersApplication DataUltima_T15
2010-05-23 22:38:54 —-D—- C:Documents and SettingsAll UsersApplication DataSpeech Enhancer
2010-05-23 22:38:54 —-D—- C:Documents and SettingsAll UsersApplication DataEnterNHelp
2010-05-23 22:34:11 —-HD—- C:Documents and SettingsAll UsersApplication DataArcSoft
2010-05-23 22:32:59 —-D—- C:Program FilesCommon FilesArcSoft
2010-05-23 22:32:59 —-D—- C:Program FilesArcSoft
2010-05-23 22:29:44 —-D—- C:Documents and Settings1Application DataArcSoft
2010-05-23 13:45:26 —-D—- C:Program FilesVirtualDub
2010-05-22 07:17:22 —-D—- C:FlashAudio
2010-05-22 02:09:52 —-A—- C:WINDOWSsystem32xvidvfw.dll
2010-05-22 02:09:50 —-A—- C:WINDOWSsystem32xvidcore.dll
2010-05-21 19:30:43 —-A—- C:WINDOWSsystem32ptpusb.dll
2010-05-21 19:30:41 —-A—- C:WINDOWSsystem32ptpusd.dll

======List of files/folders modified in the last 1 months======

2010-06-18 11:29:56 —-RD—- C:Program FilesCommon Files
2010-06-18 11:28:22 —-D—- C:WINDOWSTemp
2010-06-18 11:26:50 —-D—- C:WINDOWSsystem32drivers
2010-06-18 11:26:50 —-D—- C:WINDOWSPrefetch
2010-06-18 11:26:10 —-A—- C:WINDOWSSchedLgU.Txt
2010-06-18 11:12:00 —-D—- C:WINDOWSsystem32CatRoot2
2010-06-18 10:50:58 —-D—- C:WINDOWSsystem32config
2010-06-18 10:50:47 —-D—- C:WINDOWSsystem32wbem
2010-06-18 10:50:46 —-D—- C:WINDOWSRegistration
2010-06-18 10:50:35 —-D—- C:WINDOWS
2010-06-18 10:50:31 —-HD—- C:Config.Msi
2010-06-18 10:50:30 —-SHD—- C:WINDOWSInstaller
2010-06-18 09:27:57 —-D—- C:WINDOWSsystem32
2010-06-17 22:47:49 —-D—- C:Program FilesMozilla Firefox
2010-06-17 15:19:41 —-SHD—- C:System Volume Information
2010-06-17 15:19:41 —-D—- C:WINDOWSsystem32Restore
2010-06-16 22:27:02 —-A—- C:WINDOWSNeroDigital.ini
2010-06-16 00:03:15 —-RD—- C:Program Files
2010-06-14 22:37:40 —-D—- C:Program Filestotalcmd
2010-06-14 22:32:15 —-A—- C:WINDOWSntbtlog.txt
2010-06-11 21:58:01 —-D—- C:Program FilesXilisoft
2010-06-11 21:32:39 —-A—- C:WINDOWSIE4 Error Log.txt
2010-06-11 03:03:29 —-HD—- C:WINDOWSinf
2010-06-11 03:03:28 —-RSHDC—- C:WINDOWSsystem32dllcache
2010-06-11 03:03:23 —-A—- C:WINDOWSimsins.BAK
2010-06-11 03:02:52 —-D—- C:Program FilesInternet Explorer
2010-06-10 23:45:21 —-SD—- C:Documents and Settings1Application DataMicrosoft
2010-06-10 23:22:55 —-D—- C:Documents and SettingsAll UsersApplication Dataxml_param
2010-06-09 16:02:23 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-06-09 06:05:14 —-D—- C:WINDOWSsystem32ru-ru
2010-06-09 06:05:13 —-D—- C:WINDOWSHelp
2010-06-09 05:37:35 —-D—- C:WINDOWSDebug
2010-06-09 05:36:08 —-D—- C:WINDOWSMedia
2010-06-07 17:34:17 —-D—- C:Program FilesGoogle
2010-06-07 14:49:05 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2010-06-07 14:46:56 —-SD—- C:WINDOWSTasks
2010-06-07 05:23:41 —-D—- C:Program FilesOutlook Express
2010-06-06 17:45:12 —-D—- C:WINDOWSAppPatch
2010-06-06 17:22:56 —-D—- C:Program FilesMessenger
2010-06-06 17:21:42 —-D—- C:WINDOWSWinSxS
2010-06-05 08:29:19 —-D—- C:Program FilesMovie Maker
2010-06-03 06:38:59 —-D—- C:WINDOWSSoftwareDistribution
2010-06-02 09:47:25 —-D—- C:WINDOWSime
2010-05-30 22:26:33 —-D—- C:Documents and Settings
2010-05-30 17:12:07 —-SH—- C:boot.ini
2010-05-30 17:12:07 —-A—- C:WINDOWSwin.ini
2010-05-30 17:12:07 —-A—- C:WINDOWSsystem.ini
2010-05-30 10:41:14 —-D—- C:Documents and Settings1Application DataYandex
2010-05-27 23:55:50 —-D—- C:Program FilesOpera
2010-05-25 22:58:26 —-HD—- C:Program FilesInstallShield Installation Information
2010-05-23 22:38:47 —-A—- C:WINDOWSsystem32ATL71.DLL
2010-05-23 22:38:40 —-D—- C:Program FilesCommon FilesInstallShield
2010-05-23 22:29:17 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2010-05-22 23:21:51 —-A—- C:WINDOWSsystem32ASPRTMM1.DLL

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 easdrv;easdrv; C:WINDOWSsystem32DRIVERSeasdrv.sys [2009-10-07 54184]
R1 epfwtdir;epfwtdir; C:WINDOWSsystem32DRIVERSepfwtdir.sys [2009-10-07 35168]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-06-09 40704]
R1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-14 14720]
R1 SiSkp;SiSkp; C:WINDOWSsystem32DRIVERSsrvkp.sys [2008-12-03 19072]
R1 uzezmjy3;AVZ-RK Kernel Driver; ??C:WINDOWSsystem32Driversuzezmjy3.sys []
R2 eamon;EAMON; C:WINDOWSsystem32DRIVERSeamon.sys [2009-10-07 40824]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-06-09 144384]
R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2007-03-08 49920]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2007-03-08 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2007-03-08 21568]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2007-09-19 4617728]
R3 MTsensor;ATK0100 ACPI UTILITY; C:WINDOWSsystem32DRIVERSATKACPI.sys [2007-08-24 5760]
R3 SiS315;SiS315; C:WINDOWSsystem32DRIVERSsisgrp.sys [2008-12-03 324096]
R3 SiSGbeXP;SiS191/SiS190 Ethernet Device NDIS 5.1 Driver; C:WINDOWSsystem32DRIVERSSiSGbeXP.sys [2006-12-20 41600]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-14 32128]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-06-09 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-06-09 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-06-09 17152]
R3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
R3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
R3 WsAudio_DeviceS(1);WsAudio_DeviceS(1); C:WINDOWSsystem32driversWsAudio_DeviceS(1).sys [2009-12-04 25704]
R3 WsAudio_DeviceS(2);WsAudio_DeviceS(2); C:WINDOWSsystem32driversWsAudio_DeviceS(2).sys [2009-12-04 25704]
R3 WsAudio_DeviceS(3);WsAudio_DeviceS(3); C:WINDOWSsystem32driversWsAudio_DeviceS(3).sys [2009-12-04 25704]
R3 WsAudio_DeviceS(4);WsAudio_DeviceS(4); C:WINDOWSsystem32driversWsAudio_DeviceS(4).sys [2009-12-04 25704]
R3 WsAudio_DeviceS(5);WsAudio_DeviceS(5); C:WINDOWSsystem32driversWsAudio_DeviceS(5).sys [2009-12-04 25704]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
S3 utezmjy3;AVZ Kernel Driver; ??C:WINDOWSsystem32Driversutezmjy3.sys []
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe [2010-03-18 113152]
R2 ekrn;Eset Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2009-10-07 472280]
R2 hpqddsvc;Служба HP CUE DeviceDiscovery; C:WINDOWSsystem32svchost.exe [2008-06-09 14336]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-20 322120]
R2 Net Driver HPZ12;Net Driver HPZ12; C:WINDOWSSystem32svchost.exe [2008-06-09 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSSystem32svchost.exe [2008-06-09 14336]
R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912]
R3 hpqcxs08;hpqcxs08; C:WINDOWSsystem32svchost.exe [2008-06-09 14336]
S2 gupdate;Служба Google Update (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-02-16 135664]
S3 EhttpSrv;Eset HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2009-10-07 20680]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2010-06-07 182768]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]

EOF
18 июня, 2010 в 4:34 пп #29702
Helper
Participant
- Темы:19
- Сообщений:712
Здравствуйте,добро пожаловать на форум!
Запустите HijackThis, для этого кликните Пуск, Выполнить, введите
```
C:Program Filestrend micro1.exe
```
и нажмите Enter.
Откроется главное меню программы HijackThis.
Кликните по кнопке Do a system scan only.
Далее отметьте галочкой (слева) следующие строки, если они присутствуют:
```
F2 - REG:system.ini: UserInit=C:WINDOWSSYSTEM32Userinit.exe,\?globalrootsystemrootsystem328rCVJ2I.exe,\?globalrootsystemrootsystem32XdssLB6.exe,\?globalrootsystemrootsystem32G4gDwDl.exe,\?globalrootsystemrootsystem32WiO5mkm.exe,
```
Закройте все запущенные программы (включая InternetExplorer) и окна Windows.
Кликните по кнопке Fix checked и подтвердите свои действия выбрав YES.
Перезагрузите компьютер.
Скачайте OTM by OldTimer или с зеркала и сохраните на рабочий стол.
Запустите OTM (в ОС Windows Vista необходимо запускать через правую кн. мыши от имени администратора)
временно выключите антивирус, firewall и другое защитное программное обеспечение. Выделите и скопируйте текст ниже (Ctrl+C)
```
:Processes

explorer.exe



:Services



:Files

C:Program FilesCommon Fileskeylog.txt

C:WINDOWSsystem324VEq2VM.exe

C:WINDOWSsystem32WiO5mkm.exe

C:WINDOWSsystem32G4gDwDl.exe



:Reg



:Commands

[purity]

[emptytemp]

[start explorer]

[Reboot]
```
В OTM под панелью «Paste Instructions for Items to be Moved» (под желтой панелью) вставьте скопированный текст и нажмите кнопку «MoveIt!».

Компьютер перезагрузится.
Прочитайте описание программы Malwarebytes Anti-malware (MBAM).
Скачайте и выполните сканирование вашего компьютера. Удалите всё что будет найдено. В конце работы будет показан лог. Вставьте его в ваш ответ и приложите свежий RSIT лог.
18 июня, 2010 в 8:10 пп #29703
88
Participant
- Темы:7
- Сообщений:24
Malwarebytes’ Anti-Malware 1.46
http://www.malwarebytes.org

Версия базы данных: 4213

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

19.06.2010 0:06:35
mbam-log-2010-06-19 (00-06-35).txt

Тип сканирования: Полное сканирование (A:|C:|D:|E:|)
Просканированные объекты: 177909
Времени прошло: 28 минут, 15 секунд

Зараженные процессы в памяти: 0
Зараженные модули в памяти: 0
Зараженные ключи в реестре: 0
Зараженные параметры в реестре: 204
Объекты реестра заражены: 0
Зараженные папки: 0
Зараженные файлы: 0

Зараженные процессы в памяти:
(Вредоносных программ не обнаружено)

Зараженные модули в памяти:
(Вредоносных программ не обнаружено)

Зараженные ключи в реестре:
(Вредоносных программ не обнаружено)

Зараженные параметры в реестре:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftoption_1 (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESOFTWAREMicrosoftoption_2 (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESOFTWAREMicrosoftoption_3 (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes128.111.48.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes128.130.56.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes128.130.60.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes139.91.222.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes141.202.248.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes149.101.225.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes150.70.93.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes155.35.248.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes162.40.10.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes165.160.15.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes166.70.98.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes174.120.184.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes174.120.185.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes174.120.186.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes174.133.38.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes18.85.2.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes188.40.74.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes188.93.8.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes192.150.94.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.0.6.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.1.193.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.110.109.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.17.85.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.193.194.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.24.237.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.66.251.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.69.114.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.71.68.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes194.0.200.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes194.109.142.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes194.112.106.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes194.206.126.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes194.33.180.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.137.160.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.146.235.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.2.240.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.210.42.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.55.72.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.64.225.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.70.37.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes198.6.49.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes199.203.243.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes203.160.188.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes204.14.90.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes205.178.145.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes205.227.136.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes206.204.52.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes207.44.154.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes207.44.254.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes207.46.18.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes207.46.20.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes207.46.232.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes207.66.0.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes208.43.44.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes208.43.71.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes208.79.250.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.124.55.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.157.69.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.160.22.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.216.46.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.51.167.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.62.112.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.62.68.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.87.209.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes212.47.219.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes212.67.88.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes212.72.62.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes212.8.79.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes213.133.34.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes213.171.218.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes213.198.89.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes213.220.100.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes213.31.172.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.10.192.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.12.145.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.239.122.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.246.90.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.49.88.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.49.94.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.55.183.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.99.133.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes217.106.234.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes217.16.16.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes217.170.21.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes217.174.103.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes38.113.1.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.14.249.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.146.210.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.146.66.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.189.194.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.213.110.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.67.184.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.75.163.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.75.216.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes63.85.36.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.128.133.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.13.134.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.202.189.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.246.4.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.41.142.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.41.151.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.66.190.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.78.182.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes65.175.38.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes65.55.184.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes65.55.240.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes66.223.50.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes66.249.17.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes66.77.70.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.134.208.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.15.103.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.15.231.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.19.34.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.192.135.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.225.206.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.227.172.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes68.177.102.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes69.162.79.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes69.18.148.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes69.20.104.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes69.57.142.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes69.93.226.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes70.84.211.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes72.232.246.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes72.3.254.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes72.32.125.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes72.32.149.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes72.32.70.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.125.77.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.208.158.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.208.20.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.50.0.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.52.233.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.53.201.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.53.70.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.54.130.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.54.139.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.54.46.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.55.40.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.55.74.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.86.125.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.86.232.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes75.125.185.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes75.125.189.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes75.125.212.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes75.125.29.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes75.125.43.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes75.125.82.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes78.108.86.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes78.137.164.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes78.47.87.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes79.125.5.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes80.153.193.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes80.190.130.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes80.190.154.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes80.237.132.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes80.86.107.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes81.176.66.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes81.176.67.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes81.177.31.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes81.24.35.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes82.117.238.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes82.151.107.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes82.165.103.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes82.98.86.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes83.102.130.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes83.202.175.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes83.222.23.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes83.222.31.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes83.223.117.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes84.40.30.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes85.12.57.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes85.17.210.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes85.214.106.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes85.255.19.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes85.31.222.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.106.242.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.106.254.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.230.79.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.238.48.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.242.72.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.242.74.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.242.75.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.242.79.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes88.221.119.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes89.108.66.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes89.111.176.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes89.202.149.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes89.202.157.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes90.156.159.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes90.183.101.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes91.121.97.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes91.199.212.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes91.209.196.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes92.123.155.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes92.53.106.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes93.184.71.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes93.191.13.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes94.23.206.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes94.236.0.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes95.140.225.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.

Объекты реестра заражены:
(Вредоносных программ не обнаружено)

Зараженные папки:
(Вредоносных программ не обнаружено)

Зараженные файлы:
(Вредоносных программ не обнаружено)
18 июня, 2010 в 8:11 пп #29704
88
Participant
- Темы:7
- Сообщений:24
И еще вот это.

Logfile of random’s system information tool 1.06 (written by random/random)
Run by 1 at 2010-06-19 00:08:33
Microsoft Windows XP Professional Service Pack 3
System drive C: has 19 GB (64%) free of 30 GB
Total RAM: 383 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0:08:41, on 19.06.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:Program FilesCommon FilesArcSoftConnection ServiceBinACDaemon.exe
C:Program FilesCommon FilesNikonMonitorNkMonitor.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesCommon FilesArcSoftConnection ServiceBinArcCon.ac
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesHPDigital Imagingbinhpqtra08.exe
C:WINDOWSsystem32sistray.exe
C:Program FilesHPDigital ImagingbinhpqSTE08.exe
C:Program FilesOperaopera.exe
D:Program FilesRSIT.exe
C:Program Filestrend micro1.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40316
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
F2 — REG:system.ini: UserInit=C:WINDOWSSYSTEM32Userinit.exe,\?globalrootsystemrootsystem328rCVJ2I.exe,\?globalrootsystemrootsystem32XdssLB6.exe,\?globalrootsystemrootsystem32G4gDwDl.exe,\?globalrootsystemrootsystem32WiO5mkm.exe,
O2 — BHO: HP Print Enhancer — {0347C33E-8762-4905-BF09-768834316C61} — C:Program FilesHPSmart Web Printinghpswp_printenhancer.dll
O2 — BHO: HP Print Clips — {053F9267-DC04-4294-A72C-58F732D338C0} — C:Program FilesHPSmart Web Printinghpswp_framework.dll
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.2.4204.1700swg.dll
O2 — BHO: Google Dictionary Compression sdch — {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_B7C5AC242193BB3E.dll
O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [SkyTel] SkyTel.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 — HKLM..Run: [ArcSoft Connection Service] C:Program FilesCommon FilesArcSoftConnection ServiceBinACDaemon.exe
O4 — HKLM..Run: [Nikon Transfer Monitor] C:Program FilesCommon FilesNikonMonitorNkMonitor.exe
O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [swg] «C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe»
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exe
O4 — Global Startup: Utility Tray.lnk = C:WINDOWSsystem32sistray.exe
O4 — Global Startup: Ускоренный запуск Adobe Reader.lnk = C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Google Sidewiki… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 — Extra button: Альбом клипов HP — {58ECB495-38F0-49cb-A538-10282ABF65E7} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 — Extra button: Расширенный выбор HP — {700259D7-1666-479a-93B1-3250410481E8} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O17 — HKLMSystemCCSServicesTcpip..{9929AFD7-A871-4379-BB43-3B69CF54309E}: NameServer = 78.36.171.200 212.48.193.36
O23 — Service: ArcSoft Connect Daemon (ACDaemon) — ArcSoft Inc. — C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба Google Update (gupdate) (gupdate) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 7791 bytes

======Scheduled tasks folder======

C:WINDOWStasksGoogleUpdateTaskMachineCore.job
C:WINDOWStasksGoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer — C:Program FilesHPSmart Web Printinghpswp_printenhancer.dll [2007-03-02 1298024]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips — C:Program FilesHPSmart Web Printinghpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-06-07 256112]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.2.4204.1700swg.dll [2010-06-07 761840]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_B7C5AC242193BB3E.dll [2010-06-07 458736]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-06-07 256112]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-09-19 16844800]
«SkyTel»=C:WINDOWSSkyTel.EXE [2007-08-03 1826816]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«SiSPower»=SiSPower.dll,ModeAgent []
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2005-01-12 32768]
«HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2007-03-11 49152]
«ArcSoft Connection Service»=C:Program FilesCommon FilesArcSoftConnection ServiceBinACDaemon.exe [2010-03-18 207360]
«Nikon Transfer Monitor»=C:Program FilesCommon FilesNikonMonitorNkMonitor.exe [2009-09-15 479232]
«KernelFaultCheck»=C:WINDOWSsystem32dumprep 0 -k []

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-06-09 15360]
«swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2010-06-07 39408]

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
HP Digital Imaging Monitor.lnk — C:Program FilesHPDigital Imagingbinhpqtra08.exe
Utility Tray.lnk — C:WINDOWSsystem32sistray.exe
Ускоренный запуск Adobe Reader.lnk — C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
C:WINDOWSsystem32WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=
«HonorAutoRunSetting»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2010-06-18 23:20:16 —-A—- C:WINDOWSsystem32cam9NnG.exe
2010-06-18 22:30:56 —-A—- C:WINDOWSsystem32MUOXhxQ.exe
2010-06-18 21:46:57 —-A—- C:WINDOWSsystem32oEXRVat.exe
2010-06-18 21:38:43 —-A—- C:WINDOWSsystem32MHWDGA9.exe
2010-06-18 21:07:04 —-A—- C:WINDOWSsystem32i5REoQy.exe
2010-06-18 20:05:10 —-A—- C:WINDOWSsystem32GpVepYv.exe
2010-06-16 00:05:15 —-A—- C:WINDOWSsystem32apexchanger.exe
2010-06-16 00:03:15 —-D—- C:Program FilesApex Video Converter Pro
2010-06-16 00:03:15 —-D—- C:Apex
2010-06-15 23:19:45 —-D—- C:Program FilesCommon FilesAVSMedia
2010-06-15 23:19:24 —-A—- C:WINDOWSsystem32msxml3a.dll
2010-06-15 21:50:17 —-D—- C:Program Filesmp3DirectCut
2010-06-11 21:35:23 —-D—- C:Documents and Settings1Application DataXilisoft Corporation
2010-06-11 03:03:26 —-HDC—- C:WINDOWS$NtUninstallKB980218$
2010-06-11 03:03:14 —-HDC—- C:WINDOWS$NtUninstallKB980195$
2010-06-11 03:03:08 —-HDC—- C:WINDOWS$NtUninstallKB979559$
2010-06-11 03:01:07 —-HDC—- C:WINDOWS$NtUninstallKB978695_WM9$
2010-06-11 03:00:56 —-HDC—- C:WINDOWS$NtUninstallKB979482$
2010-06-11 03:00:50 —-HDC—- C:WINDOWS$NtUninstallKB975562$
2010-06-11 03:00:36 —-D—- C:WINDOWSie8updates
2010-06-10 21:27:16 —-D—- C:Movavi files
2010-06-10 20:37:42 —-D—- C:Program FilesMovavi Видео Конвертер 8
2010-06-10 12:17:09 —-D—- C:Documents and Settings1Application DataMOVAVI
2010-06-09 06:22:05 —-HDC—- C:WINDOWS$NtUninstallKB970430$
2010-06-09 06:21:38 —-HDC—- C:WINDOWS$NtUninstallKB971737$
2010-06-09 05:37:34 —-A—- C:WINDOWSsystem32MRT.exe
2010-06-09 05:36:18 —-D—- C:WINDOWSWBEM
2010-06-09 05:33:27 —-HDC—- C:WINDOWSie8
2010-06-07 14:46:32 —-D—- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
2010-06-07 05:31:38 —-HDC—- C:WINDOWS$NtUninstallKB952954$
2010-06-07 05:31:31 —-HDC—- C:WINDOWS$NtUninstallKB959426$
2010-06-07 05:31:18 —-HDC—- C:WINDOWS$NtUninstallKB960859$
2010-06-07 05:31:00 —-HDC—- C:WINDOWS$NtUninstallKB974318$
2010-06-07 05:30:52 —-HDC—- C:WINDOWS$NtUninstallKB951978$
2010-06-07 05:30:44 —-HDC—- C:WINDOWS$NtUninstallKB969059$
2010-06-07 05:30:37 —-HDC—- C:WINDOWS$NtUninstallKB981349$
2010-06-07 05:30:27 —-HDC—- C:WINDOWS$NtUninstallKB950974$
2010-06-07 05:30:21 —-HDC—- C:WINDOWS$NtUninstallKB975713$
2010-06-07 05:30:14 —-HDC—- C:WINDOWS$NtUninstallKB971657$
2010-06-07 05:30:05 —-HDC—- C:WINDOWS$NtUninstallKB978338$
2010-06-07 05:29:58 —-HDC—- C:WINDOWS$NtUninstallKB974112$
2010-06-07 05:29:52 —-HDC—- C:WINDOWS$NtUninstallKB961501$
2010-06-07 05:29:45 —-HDC—- C:WINDOWS$NtUninstallKB975025$
2010-06-07 05:29:29 —-HDC—- C:WINDOWS$NtUninstallKB952004$
2010-06-07 05:29:22 —-HDC—- C:WINDOWS$NtUninstallKB974571$
2010-06-07 05:29:15 —-HDC—- C:WINDOWS$NtUninstallKB975560$
2010-06-07 05:29:04 —-HDC—- C:WINDOWS$NtUninstallKB973507$
2010-06-07 05:28:57 —-HDC—- C:WINDOWS$NtUninstallKB977816$
2010-06-07 05:28:23 —-HDC—- C:WINDOWS$NtUninstallKB980182$
2010-06-07 05:27:27 —-HDC—- C:WINDOWS$NtUninstallKB974392$
2010-06-07 05:25:35 —-HDC—- C:WINDOWS$NtUninstallKB977914$
2010-06-07 05:23:54 —-HDC—- C:WINDOWS$NtUninstallKB951748$
2010-06-07 05:23:37 —-HDC—- C:WINDOWS$NtUninstallKB978542$
2010-06-07 05:23:24 —-HDC—- C:WINDOWS$NtUninstallKB956802$
2010-06-07 05:22:52 —-HDC—- C:WINDOWS$NtUninstallKB975467$
2010-06-07 05:21:39 —-HDC—- C:WINDOWS$NtUninstallKB968389$
2010-06-06 18:19:24 —-D—- C:Documents and SettingsAll UsersApplication DataGoogle
2010-06-06 18:14:16 —-A—- C:WINDOWSavisplitter.ini
2010-06-06 18:13:55 —-A—- C:WINDOWSsystem32yv12vfw.dll
2010-06-06 18:13:40 —-A—- C:WINDOWSsystem32ff_vfw.dll.manifest
2010-06-06 18:13:40 —-A—- C:WINDOWSsystem32ff_vfw.dll
2010-06-06 18:13:31 —-D—- C:Program FilesK-Lite Codec Pack
2010-06-06 17:23:28 —-HDC—- C:WINDOWS$NtUninstallKB978262$
2010-06-06 17:23:11 —-HDC—- C:WINDOWS$NtUninstallKB951376-v2$
2010-06-06 17:22:54 —-HDC—- C:WINDOWS$NtUninstallKB946648$
2010-06-06 17:22:37 —-HDC—- C:WINDOWS$NtUninstallKB956803$
2010-06-06 17:22:20 —-HDC—- C:WINDOWS$NtUninstallKB971468$
2010-06-06 17:21:59 —-HDC—- C:WINDOWS$NtUninstallKB979683$
2010-06-06 17:21:42 —-HDC—- C:WINDOWS$NtUninstallKB958869$
2010-06-06 17:21:25 —-HDC—- C:WINDOWS$NtUninstallKB980232$
2010-06-06 17:21:04 —-HDC—- C:WINDOWS$NtUninstallKB955759$
2010-06-06 17:20:46 —-HDC—- C:WINDOWS$NtUninstallKB968816_WM9$
2010-06-06 17:20:30 —-HDC—- C:WINDOWS$NtUninstallKB978037$
2010-06-06 17:20:13 —-HDC—- C:WINDOWS$NtUninstallKB954155_WM9$
2010-06-06 17:19:57 —-HDC—- C:WINDOWS$NtUninstallKB960225$
2010-06-06 17:19:28 —-HDC—- C:WINDOWS$NtUninstallKB956572$
2010-06-06 17:19:08 —-HDC—- C:WINDOWS$NtUninstallKB956844$
2010-06-06 17:18:48 —-HDC—- C:WINDOWS$NtUninstallKB973904$
2010-06-06 17:18:25 —-HDC—- C:WINDOWS$NtUninstallKB967715$
2010-06-06 17:18:06 —-HDC—- C:WINDOWS$NtUninstallKB970238$
2010-06-06 17:17:45 —-HDC—- C:WINDOWS$NtUninstallKB978706$
2010-06-06 17:17:23 —-HDC—- C:WINDOWS$NtUninstallKB960803$
2010-06-06 17:17:06 —-HDC—- C:WINDOWS$NtUninstallKB973815$
2010-06-06 17:16:42 —-HDC—- C:WINDOWS$NtUninstallKB969947$
2010-06-06 16:22:49 —-D—- C:FlashVideos
2010-06-06 08:15:39 —-HDC—- C:WINDOWS$NtUninstallKB972270$
2010-06-06 08:15:31 —-HDC—- C:WINDOWS$NtUninstallKB956744$
2010-06-06 08:15:20 —-HDC—- C:WINDOWS$NtUninstallKB973869$
2010-06-06 08:15:07 —-HDC—- C:WINDOWS$NtUninstallKB941569$
2010-06-06 08:14:28 —-HDC—- C:WINDOWS$NtUninstallKB973687$
2010-06-06 08:14:19 —-HDC—- C:WINDOWS$NtUninstallKB950762$
2010-06-06 08:14:09 —-HDC—- C:WINDOWS$NtUninstallKB981793$
2010-06-06 08:13:59 —-HDC—- C:WINDOWS$NtUninstallKB978601$
2010-06-06 08:13:52 —-HDC—- C:WINDOWS$NtUninstallKB952287$
2010-06-06 08:13:36 —-HDC—- C:WINDOWS$NtUninstallKB973540_WM9$
2010-06-06 08:13:30 —-HDC—- C:WINDOWS$NtUninstallKB950760$
2010-06-06 08:13:22 —-HDC—- C:WINDOWS$NtUninstallKB952069_WM9$
2010-06-06 08:13:13 —-HDC—- C:WINDOWS$NtUninstallKB979309$
2010-06-06 08:13:05 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2010-06-06 08:12:23 —-HDC—- C:WINDOWS$NtUninstallKB955069$
2010-06-06 08:11:51 —-D—- C:Program FilesMSXML 4.0
2010-06-06 08:11:31 —-HDC—- C:WINDOWS$NtUninstallKB923561$
2010-06-06 08:10:52 —-HDC—- C:WINDOWS$NtUninstallKB971961$
2010-06-05 08:29:12 —-HDC—- C:WINDOWS$NtUninstallKB975561$
2010-06-04 23:32:50 —-D—- C:WINDOWSsystem32PreInstall
2010-06-04 23:32:48 —-N—- C:WINDOWSsystem32spmsg.dll
2010-06-04 23:32:47 —-A—- C:WINDOWSsystem32spupdsvc.exe
2010-06-04 23:32:45 —-HDC—- C:WINDOWS$NtUninstallKB898461$
2010-06-04 23:32:45 —-HD—- C:WINDOWS$hf_mig$
2010-06-04 22:08:19 —-D—- C:WINDOWSMinidump
2010-06-03 06:38:42 —-D—- C:WINDOWSsystem32SoftwareDistribution
2010-06-02 09:08:50 —-D—- C:Documents and Settings1Application DataMalwarebytes
2010-06-02 09:08:31 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2010-05-31 01:31:49 —-D—- C:Program Filestrend micro
2010-05-31 01:31:47 —-D—- C:rsit
2010-05-31 00:45:58 —-D—- C:WINDOWSsystem32appmgmt
2010-05-30 22:15:10 —-A—- C:SAFEBOOT_REPAIR.TXT
2010-05-30 17:10:58 —-D—- C:Documents and Settings1Application DataHelp
2010-05-27 23:55:59 —-D—- C:Program FilesQuickTime
2010-05-27 22:58:36 —-D—- C:32788R22FWJFW(2)
2010-05-27 22:35:36 —-D—- C:WINDOWSpss
2010-05-26 21:00:24 —-D—- C:Program FilesCommon FilesSysAware Soft
2010-05-23 23:05:18 —-A—- C:WINDOWSViewNX.INI
2010-05-23 22:52:06 —-D—- C:Documents and Settings1Application DataApple Computer
2010-05-23 22:46:32 —-D—- C:Documents and Settings1Application DataNikon
2010-05-23 22:41:49 —-D—- C:Documents and SettingsAll UsersApplication DataSync Schema
2010-05-23 22:40:45 —-D—- C:Program FilesCommon Filesmuvee Technologies
2010-05-23 22:40:32 —-D—- C:Program FilesCommon FilesNikon
2010-05-23 22:40:32 —-D—- C:Documents and SettingsAll UsersApplication DataNikon
2010-05-23 22:40:24 —-D—- C:Program FilesNikon
2010-05-23 22:38:54 —-D—- C:Documents and SettingsAll UsersApplication DataUltima_T15
2010-05-23 22:38:54 —-D—- C:Documents and SettingsAll UsersApplication DataSpeech Enhancer
2010-05-23 22:38:54 —-D—- C:Documents and SettingsAll UsersApplication DataEnterNHelp
2010-05-23 22:34:11 —-HD—- C:Documents and SettingsAll UsersApplication DataArcSoft
2010-05-23 22:32:59 —-D—- C:Program FilesCommon FilesArcSoft
2010-05-23 22:32:59 —-D—- C:Program FilesArcSoft
2010-05-23 22:29:44 —-D—- C:Documents and Settings1Application DataArcSoft
2010-05-23 13:45:26 —-D—- C:Program FilesVirtualDub
2010-05-22 07:17:22 —-D—- C:FlashAudio
2010-05-22 02:09:52 —-A—- C:WINDOWSsystem32xvidvfw.dll
2010-05-22 02:09:50 —-A—- C:WINDOWSsystem32xvidcore.dll
2010-05-21 19:30:43 —-A—- C:WINDOWSsystem32ptpusb.dll
2010-05-21 19:30:41 —-A—- C:WINDOWSsystem32ptpusd.dll

======List of files/folders modified in the last 1 months======

2010-06-18 23:34:24 —-D—- C:WINDOWSTemp
2010-06-18 23:32:56 —-SHD—- C:WINDOWSInstaller
2010-06-18 23:32:56 —-HD—- C:Config.Msi
2010-06-18 23:32:56 —-D—- C:WINDOWS
2010-06-18 23:32:51 —-D—- C:WINDOWSsystem32
2010-06-18 23:32:48 —-D—- C:WINDOWSsystem32drivers
2010-06-18 23:31:55 —-A—- C:WINDOWSSchedLgU.Txt
2010-06-18 23:23:14 —-RD—- C:Program FilesCommon Files
2010-06-18 23:22:45 —-D—- C:WINDOWSPrefetch
2010-06-18 22:26:10 —-RD—- C:Program Files
2010-06-18 22:19:02 —-HD—- C:WINDOWSinf
2010-06-18 22:16:09 —-D—- C:WINDOWSsystem32CatRoot2
2010-06-18 21:46:27 —-D—- C:Program FilesMozilla Firefox
2010-06-18 10:50:58 —-D—- C:WINDOWSsystem32config
2010-06-18 10:50:47 —-D—- C:WINDOWSsystem32wbem
2010-06-18 10:50:46 —-D—- C:WINDOWSRegistration
2010-06-17 15:19:41 —-SHD—- C:System Volume Information
2010-06-17 15:19:41 —-D—- C:WINDOWSsystem32Restore
2010-06-16 22:27:02 —-A—- C:WINDOWSNeroDigital.ini
2010-06-14 22:37:40 —-D—- C:Program Filestotalcmd
2010-06-14 22:32:15 —-A—- C:WINDOWSntbtlog.txt
2010-06-11 21:58:01 —-D—- C:Program FilesXilisoft
2010-06-11 21:32:39 —-A—- C:WINDOWSIE4 Error Log.txt
2010-06-11 03:03:28 —-RSHDC—- C:WINDOWSsystem32dllcache
2010-06-11 03:03:23 —-A—- C:WINDOWSimsins.BAK
2010-06-11 03:02:52 —-D—- C:Program FilesInternet Explorer
2010-06-10 23:45:21 —-SD—- C:Documents and Settings1Application DataMicrosoft
2010-06-10 23:22:55 —-D—- C:Documents and SettingsAll UsersApplication Dataxml_param
2010-06-09 16:02:23 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-06-09 06:05:14 —-D—- C:WINDOWSsystem32ru-ru
2010-06-09 06:05:13 —-D—- C:WINDOWSHelp
2010-06-09 05:37:35 —-D—- C:WINDOWSDebug
2010-06-09 05:36:08 —-D—- C:WINDOWSMedia
2010-06-07 17:34:17 —-D—- C:Program FilesGoogle
2010-06-07 14:49:05 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2010-06-07 14:46:56 —-SD—- C:WINDOWSTasks
2010-06-07 05:23:41 —-D—- C:Program FilesOutlook Express
2010-06-06 17:45:12 —-D—- C:WINDOWSAppPatch
2010-06-06 17:22:56 —-D—- C:Program FilesMessenger
2010-06-06 17:21:42 —-D—- C:WINDOWSWinSxS
2010-06-05 08:29:19 —-D—- C:Program FilesMovie Maker
2010-06-03 06:38:59 —-D—- C:WINDOWSSoftwareDistribution
2010-06-02 09:47:25 —-D—- C:WINDOWSime
2010-05-30 22:26:33 —-D—- C:Documents and Settings
2010-05-30 17:12:07 —-SH—- C:boot.ini
2010-05-30 17:12:07 —-A—- C:WINDOWSwin.ini
2010-05-30 17:12:07 —-A—- C:WINDOWSsystem.ini
2010-05-30 10:41:14 —-D—- C:Documents and Settings1Application DataYandex
2010-05-27 23:55:50 —-D—- C:Program FilesOpera
2010-05-25 22:58:26 —-HD—- C:Program FilesInstallShield Installation Information
2010-05-23 22:38:47 —-A—- C:WINDOWSsystem32ATL71.DLL
2010-05-23 22:38:40 —-D—- C:Program FilesCommon FilesInstallShield
2010-05-23 22:29:17 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2010-05-22 23:21:51 —-A—- C:WINDOWSsystem32ASPRTMM1.DLL

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-06-09 40704]
R1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-14 14720]
R1 SiSkp;SiSkp; C:WINDOWSsystem32DRIVERSsrvkp.sys [2008-12-03 19072]
R1 uzezmjy3;AVZ-RK Kernel Driver; ??C:WINDOWSsystem32Driversuzezmjy3.sys []
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-06-09 144384]
R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2007-03-08 49920]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2007-03-08 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2007-03-08 21568]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2007-09-19 4617728]
R3 MTsensor;ATK0100 ACPI UTILITY; C:WINDOWSsystem32DRIVERSATKACPI.sys [2007-08-24 5760]
R3 SiS315;SiS315; C:WINDOWSsystem32DRIVERSsisgrp.sys [2008-12-03 324096]
R3 SiSGbeXP;SiS191/SiS190 Ethernet Device NDIS 5.1 Driver; C:WINDOWSsystem32DRIVERSSiSGbeXP.sys [2006-12-20 41600]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-14 32128]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-06-09 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-06-09 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-06-09 17152]
R3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
R3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
R3 WsAudio_DeviceS(1);WsAudio_DeviceS(1); C:WINDOWSsystem32driversWsAudio_DeviceS(1).sys [2009-12-04 25704]
R3 WsAudio_DeviceS(2);WsAudio_DeviceS(2); C:WINDOWSsystem32driversWsAudio_DeviceS(2).sys [2009-12-04 25704]
R3 WsAudio_DeviceS(3);WsAudio_DeviceS(3); C:WINDOWSsystem32driversWsAudio_DeviceS(3).sys [2009-12-04 25704]
R3 WsAudio_DeviceS(4);WsAudio_DeviceS(4); C:WINDOWSsystem32driversWsAudio_DeviceS(4).sys [2009-12-04 25704]
R3 WsAudio_DeviceS(5);WsAudio_DeviceS(5); C:WINDOWSsystem32driversWsAudio_DeviceS(5).sys [2009-12-04 25704]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
S3 utezmjy3;AVZ Kernel Driver; ??C:WINDOWSsystem32Driversutezmjy3.sys []
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe [2010-03-18 113152]
R2 hpqddsvc;Служба HP CUE DeviceDiscovery; C:WINDOWSsystem32svchost.exe [2008-06-09 14336]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-20 322120]
R2 Net Driver HPZ12;Net Driver HPZ12; C:WINDOWSSystem32svchost.exe [2008-06-09 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSSystem32svchost.exe [2008-06-09 14336]
R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912]
R3 hpqcxs08;hpqcxs08; C:WINDOWSsystem32svchost.exe [2008-06-09 14336]
S2 gupdate;Служба Google Update (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-02-16 135664]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2010-06-07 182768]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]

EOF
19 июня, 2010 в 1:46 пп #29705
Helper
Participant
- Темы:19
- Сообщений:712
Скачайте это:
http://gjf.hotbox.ru/mink.pif
Временно выключите антивирус, firewall и другое защитное программное обеспечение. Выделите и скопируйте текст ниже (Ctrl+C)Выполните скрипт:
```
begin

SearchRootkit(true, true);

SetAVZGuardStatus(True);

DeleteFile('C:WINDOWSsystem32GpVepYv.exe');

DeleteFile('C:WINDOWSsystem32i5REoQy.exe');

DeleteFile('C:WINDOWSsystem32MHWDGA9.exe');

DeleteFile('C:WINDOWSsystem32oEXRVat.exe');

DeleteFile('C:WINDOWSsystem32MUOXhxQ.exe');

DeleteFile('C:WINDOWSsystem32cam9NnG.exe');

RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SoftwareMicrosoftWindows NTCurrentVersionWinlogon','Userinit','C:WINDOWSsystem32userinit.exe,');

BC_ImportDeletedList;

ExecuteSysClean;

BC_Activate;

RebootWindows(true);

end.
```
После этого ПК перезагрузится-повторите логи RSIT.Нод уже обновляется?
Как выполнить скрипт:
Запустите скачанный файл.
Скопируйте скрипт.
нажмите Файл => Выполнить скрипт.
В появившемся окошке программы нажать правую кнопку мыши и нажать Вставить.
Нажать в AVZ кнопку — Запустить.
Автор

Сообщения

Просмотр 6 сообщений - с 1 по 6 (из 6 всего)

Для ответа в этой теме необходимо авторизоваться.

Перестал обновляться Нод32

Добро пожаловать

Поиск

Последние темы

СПАЙВАРЕ РУ

Нужна помощь?

Ссылки