- This topic has 1 ответ, 2 участника, and was last updated 16 years, 7 months назад by
.
-
Сообщения
-
- Темы:532
- Сообщений:1553
- ☆☆☆☆☆
Первое,спасибо большое за программу,информер она удалила.только вот после удаления программы время не поменялось почему-то,объясните пожалуйста!
а вот сам log
ComboFix 08-11-17.03 — Administrator 2008-11-18 18:10:46.1 — FAT32x86
Microsoft Windows XP Professional 5.1.2600.3.1251.1.1033.18.768 [GMT 3:00]
Running from: c:documents and settingsAdministratorDesktopComboFix.exeWARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.c:documents and settingsAdministratorLocal SettingsTemporary Internet Files0EB9F12C_6E6B_4c03_AEBA_8C04CFA98AA4.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files15913497_F86C_4218_8817_F50940D1E1B2.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files29887DDE_00B9_4011_9CF7_59511F1ECC1B.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files2A665EDD_5758_480c_8366_66DFC5F23877.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files35B7DFFA_884F_4fbc_8E60_DA601BDC7BF7.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files362FD6E8_8CDA_4c2a_A8AA-BDA22B321711.jpg
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files3DF04940_9866_4241_A998_0CDDFAFD147A.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files426500D7_0FF3_426c_828D_065DBAEA0581.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files478BD4AE_2691_438d_BDCA_3485DC022700.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files5C6C645F_BAA8_4149_BFEB_2031230FF0FD.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files61EA7D69_19D4_421a_A899_0DF4D58CD119.jpg
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files777FDAFB_83CF_4960_AA71_4E5D7BCD8E57.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files8DA878D5_E80B_4721_B75A_17EFFAF1A700.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet Files98F6DF79_7171_452d_9C26_C0193E12DBDF.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet FilesA2B240D6_0386_419e_91C5_3F7D90437CD0.jpg
c:documents and settingsAdministratorLocal SettingsTemporary Internet FilesC75CEF8D_5AF4_4563_8594_C45A45E14E63.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet FilesE21285C1_40E6_435c_A69F_3387E7BD89CB.gif
c:documents and settingsAdministratorLocal SettingsTemporary Internet FilesE9A4D648_ED73_4ea7_88B2_18332DBA4F3E.jpg
c:windowssystem32rqulib.dll
F:install.exe.
((((((((((((((((((((((((( Files Created from 2008-10-18 to 2008-11-18 )))))))))))))))))))))))))))))))
.2008-11-18 18:06 . 2008-11-18 18:06
d
c:windowsLastGood
2008-11-18 16:04 . 2008-11-18 16:04 335 —a
c:windowsnsreg.dat
2008-11-18 16:03 . 2008-11-18 16:03 7,144 —a
c:windowsmozver.dat
2008-11-13 23:55 . 2008-11-13 23:55d
c:documents and settingsAdministratorApplication DataMra
2008-11-13 23:43 . 2008-11-13 23:44d
c:program filesMail.Ru
2008-11-04 13:22 . 2008-11-04 13:22d
c:documents and settingsAdministratorApplication DataFastStone
2008-11-04 13:21 . 2008-11-04 13:21d
c:program filesFastStone Image Viewer
2008-11-01 08:31 . 2008-11-01 08:31d
c:documents and settingsAll UsersApplication DataESET
2008-10-31 22:39 . 2008-10-31 22:39d—hs—- C:Recycled
2008-10-29 19:31 . 2008-10-29 19:31d
c:documents and settingsAll UsersApplication DataAlawarWrapper
2008-10-29 19:31 . 2008-10-29 19:31d
c:documents and settingsAdministratorApplication DataMy Games
2008-10-29 18:58 . 2008-10-29 18:58d
c:documents and settingsAdministratorDoctorWeb
2008-10-29 18:11 . 2008-10-29 18:11 77,824 —a
c:windowssystem32DRWEBSP.DLL
2008-10-29 17:53 . 2008-10-29 17:53d
c:program filesdr Web
2008-10-29 17:36 . 2008-10-29 17:36d
c:program filesWinamp
2008-10-29 17:34 . 2003-06-19 01:31 17,920 —a
c:windowssystem32mdimon.dll
2008-10-29 17:34 . 2008-10-29 17:34 382 —a
c:windowsODBC.INI
2008-10-29 17:33 . 2008-10-29 17:34d
c:windowsSHELLNEW
2008-10-29 17:33 . 2008-10-29 17:33d
c:program filesMicrosoft.NET
2008-10-29 17:22 . 2008-10-29 17:22 8,192 —a
c:windowsREGLOCS.OLD
2008-10-29 17:14 . 2001-08-17 09:48 12,160 —a
c:windowssystem32driversmouhid.sys
2008-10-29 17:14 . 2008-04-13 20:15 10,368 —a
c:windowssystem32drivershidusb.sys
2008-10-29 11:14 . 2008-10-29 11:14d
c:windowssrchasst
2008-10-29 11:13 . 2008-10-29 11:13d
c:windowssystem32ru-ru
2008-10-29 11:13 . 2008-10-29 11:13d
c:windowssystem32oobe
2008-10-29 11:13 . 2008-10-29 11:13d
c:windowssystem321049
2008-10-29 11:13 . 2001-12-05 12:00 65,536 —a
c:windowssystem32WMErrRUS.dll
2008-10-29 11:13 . 2001-12-05 12:00 36,388 —a
c:windowsWMPrfRUS.prx
2008-10-29 11:09 . 2008-10-29 11:09d
c:windowssystem32XPSViewer
2008-10-29 11:09 . 2008-10-29 11:09d
c:program filesReference Assemblies
2008-10-29 11:09 . 2008-10-29 11:09d
c:program filesMSBuild
2008-10-29 11:08 . 2007-03-23 13:07 1,683,280
c:windowssystem32XpsSvcs.dll
2008-10-29 11:08 . 2007-03-23 13:07 1,683,280
c:windowssystem32dllcacheXpsSvcs.dll
2008-10-29 11:08 . 2007-03-23 03:25 677,376
c:windowssystem32dllcachePrintFilterPipelineSvc.exe
2008-10-29 11:08 . 2007-03-23 13:07 583,504
c:windowssystem32XPSSHHDR.dll
2008-10-29 11:08 . 2007-03-23 13:07 583,504
c:windowssystem32dllcacheXPSSHHDR.dll
2008-10-29 11:08 . 2007-03-23 03:25 124,928
c:windowssystem32prntvpt.dll
2008-10-29 11:08 . 2007-03-23 03:24 28,160
c:windowssystem32dllcacheFilterPipelinePrintProc.dll
2008-10-29 11:08 . 2006-06-29 20:07 22,752 —a
c:windowssystem32spupdsvc.exe
2008-10-29 11:08 . 2006-06-29 20:07 14,048
c:windowssystem32spmsg2.dll
2008-10-29 11:06 . 2008-10-29 11:06d—s—- c:windowssystem32Microsoft
2008-10-29 11:06 . 2008-10-29 11:06d—hs—- c:documents and settingsNetworkService
2008-10-29 11:06 . 2008-10-29 11:06d—hs—- c:documents and settingsLocalService
2008-10-29 11:06 . 2008-10-29 11:05d
c:documents and settingsAdministratorApplication DataNotepad2
2008-10-29 11:06 . 2008-10-29 11:06d
c:documents and settingsAdministrator
2008-10-29 11:05 . 2008-10-29 11:04d
c:windowssystem32configsystemprofilensk6EC.tmp
2008-10-29 11:05 . 2008-10-29 11:04d
c:windowssystem32configsystemprofilensa6EA.tmp
2008-10-29 11:05 . 2008-10-29 11:05d
c:program filesNotepad2
2008-10-29 11:05 . 2008-04-14 12:00 69,120 —a
c:windowsnotepad1.exe
2008-10-29 11:04 . 2008-10-29 11:04d
c:windowssystem32Adobe
2008-10-29 11:03 . 2008-10-29 11:03d
c:windowsPCHEALTH
2008-10-29 11:02 . 2008-10-29 11:02d
c:windowssystem32URTTemp
2008-10-29 11:01 . 2008-10-29 11:01d
c:program filesCommon FilesAdobe
2008-10-29 11:01 . 2008-10-29 11:01d
c:program files7-Zip
2008-10-29 11:01 . 2008-10-29 11:01 717,296 —a
c:windowssystem32driverssptd.sys
2008-10-29 11:00 . 2008-10-29 11:00d
c:windowssystem32dllcache
2008-10-29 11:00 . 2008-10-29 11:00 316,640 —a
c:windowsWMSysPr9.prx
2008-10-29 11:00 . 2008-10-29 11:00 23,392 —a
c:windowssystem32nscompat.tlb
2008-10-29 11:00 . 2008-10-29 11:00 16,832 —a
c:windowssystem32amcompat.tlb
2008-10-29 11:00 . 2008-10-29 11:00 2,577 —a
c:windowssystem32CONFIG.NT
2008-10-29 11:00 . 2008-10-29 11:00 0 —a
c:windowscontrol.ini.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-29 07:57
d
w c:program filesWindows Media Connect 2
.((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»c:windowssystem32ctfmon.exe» [2008-04-14 15360][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2006-09-24 7626752]
«NvMediaCenter»=»c:windowssystem32NvMcTray.dll» [2006-09-24 86016]
«LTMSG»=»LTMSG.exe» [2003-07-14 c:windowsltmsg.exe][HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»c:windowssystem32CTFMON.EXE» [2008-04-14 15360][HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRunOnce]
«vista_sound_register.inf»=»setupapi.dll» [2008-04-14 c:windowssystem32setupapi.dll]
«aero_cursor_register.inf»=»setupapi.dll» [2008-04-14 c:windowssystem32setupapi.dll]
«nltide_3″=»advpack.dll» [2008-04-23 c:windowssystem32advpack.dll][HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem]
«DisableStatusMessages»= 0 (0x0)[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionpoliciesexplorer]
«NoSMHelp»= 1 (0x1)
«ForceClassicControlPanel»= 1 (0x1)
«NoResolveTrack»= 1 (0x1)
«NoResolveSearch»= 1 (0x1)
«NoSMConfigurePrograms»= 1 (0x1)[HKEY_USERS.defaultsoftwaremicrosoftwindowscurrentversionpoliciesexplorer]
«NoSMHelp»= 1 (0x1)
«ForceClassicControlPanel»= 1 (0x1)
«NoResolveTrack»= 1 (0x1)
«NoResolveSearch»= 1 (0x1)
«NoSMConfigurePrograms»= 1 (0x1)[HKLM~servicessharedaccessparametersfirewallpolicystandardprofile]
«EnableFirewall»= 0 (0x0)
«DisableUnicastResponsesToMulticastBroadcast»= 0 (0x0)[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«c:\WINDOWS\Network Diagnostic\xpnetdiag.exe»=
«c:\WINDOWS\system32\sessmgr.exe»=R0 VIDEX32;VIDEX32;c:windowssystem32driversVIDEX32.sys [4/23/2008 7:25:55 PM 9216]
R4 epfwtdir;epfwtdir;c:windowssystem32DRIVERSepfwtdir.sys []*Newly Created Service* — CATCHME
*Newly Created Service* — PROCEXP90
.
— — — — ORPHANS REMOVED — — — —BHO-{F4A245AD-640B-4FA7-9343-18D511A153AE} — c:windowssystem32rqulib.dll
HKLM-Run-Cmaudio — cmicnfg.cpl
HKLM-Run-nwiz — nwiz.exe
MSConfigStartUp-DrWebAgentUI — c:program filesDrWeb AV-Deskdrwagnui.exe
MSConfigStartUp-SpIDerMail — c:program filesDrWeb AV-Deskspiderml.exe
MSConfigStartUp-SpIDerNT — c:progra~1DRWEBA~1spiderui.exe**************************************************************************
catchme 0.3.1367 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-18 18:11:55
Windows 5.1.2600 Service Pack 3 FAT NTAPIscanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0**************************************************************************
.
Completion time: 2008-11-18 18:12:22
ComboFix-quarantined-files.txt 2008-11-18 15:12:22Pre-Run: 6 531 194 880 bytes free
Post-Run: 6,557,884,416 bytes free160
Здравствуйте, добро пожаловать на Spyware-ru форум.
Удалите Combofix. Прочитайте следующее: Как правильно удалить combofix с компьютера.
после удаления программы время не поменялось почему-то,объясните пожалуйста!
Или вы уже выполнили описанную выше процедуру ?
В чём проблема с временем ?
- Для ответа в этой теме необходимо авторизоваться.
