Посмотрите отчет plz

[Katerina535]

Нахватала вирусов! Посоветовали Combofix.
Комп все равно выдает переодические глюки! Что делать? Отчет прилагаю!

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:programdataMicrosoftNetworkDownloaderqmgr0.dat
c:programdataMicrosoftNetworkDownloaderqmgr1.dat
c:windowslsass.exe
c:windowsmsa.exe
c:windowssystem3241.exe
c:windowssystem32helper32.dll
c:windowssystem32IS15.exe
c:windowssystem32lowsec
c:windowssystem32lowseclocal.ds
c:windowssystem32lowsecuser.ds
c:windowssystem32lowsecuser.ds.lll
c:windowssystem32sdra64.exe
c:windowssystem32smss32.exe
c:windowssystem32sshnas21.dll
c:windowssystem32winlogon32.exe
c:windowsTasks{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
c:windowsTasks{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

---

BITS: Possible infected sites

---

hxxp://soft.export.yandex.ru
hxxp://plugininput.com
Infected copy of c:windowssystem32DRIVERSnvstor32.sys was found and disinfected
Restored copy from — Kitty ate it :p
.
((((((((((((((((((((((((( Files Created from 2009-12-15 to 2010-01-15 )))))))))))))))))))))))))))))))
.

2010-01-15 10:19 . 2010-01-15 10:21

---

d

---

w- c:usersКатеринаAppDataLocaltemp
2010-01-15 10:19 . 2010-01-15 10:19

---

d

---

w- c:usersDefaultAppDataLocaltemp
2010-01-15 09:01 . 2010-01-15 09:01 296960 —-a-w- c:windowsodbn0.exe
2010-01-15 09:00 . 2010-01-15 09:00 680 —-a-w- c:usersКатеринаAppDataLocald3d9caps.dat
2010-01-15 08:27 . 2010-01-15 08:27

---

d

---

w- c:windowsSun
2010-01-14 08:54 . 2010-01-15 09:05

---

d

---

w- c:programdataKaspersky Lab
2010-01-14 08:54 . 2010-01-14 08:54

---

d

---

w- c:program filesKaspersky Lab
2010-01-13 06:02 . 2009-10-19 13:38 156672 —-a-w- c:windowssystem32t2embed.dll
2010-01-13 06:02 . 2009-10-19 13:35 72704 —-a-w- c:windowssystem32fontsub.dll
2010-01-08 08:19 . 2010-01-08 08:19

---

d

---

w- c:program filesPhotodex Presenter
2010-01-08 08:08 . 2010-01-08 08:08

---

d

---

w- c:program filesPhotodex
2010-01-05 13:56 . 2010-01-05 13:56

---

d

---

w- c:usersКатеринаAppDataRoamingNetscape
2010-01-05 13:55 . 2010-01-15 08:15

---

d

---

w- c:usersКатеринаAppDataRoamingPhotodex
2010-01-05 07:53 . 2010-01-05 07:53

---

d

---

w- c:usersКатеринаAppDataRoamingOpera
2009-12-26 12:38 . 2009-12-26 12:38

---

d

---

w- c:usersКатеринаAppDataRoamingCanon
2009-12-16 15:13 . 2009-12-16 15:13

---

d

---

w- c:program filesWindows Portable Devices

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-15 10:22 . 2009-09-19 12:57 2883584 —sha-w- c:usersКатеринаNTUSER.DAT
2010-01-15 10:20 . 2009-08-20 18:17 45056 —-a-w- c:windowssystem32acovcnt.exe
2010-01-15 10:19 . 2008-04-13 23:55 12 —-a-w- c:windowsbthservsdp.dat
2010-01-15 10:19 . 2008-01-21 05:44 653312 —-a-w- c:windowssystem32perfh019.dat
2010-01-15 10:19 . 2008-01-21 05:44 125800 —-a-w- c:windowssystem32perfc019.dat
2010-01-15 09:57 . 2009-12-14 05:31

---

d

---

w- c:program filesESET
2010-01-15 09:23 . 2009-11-21 13:44

---

d

---

w- c:usersКатеринаAppDataRoamingSkype
2010-01-15 09:00 . 2010-01-15 09:00 680 —-a-w- c:usersКатеринаAppDataLocald3d9caps.dat
2010-01-15 08:15 . 2010-01-05 13:55

---

d

---

w- c:usersКатеринаAppDataRoamingPhotodex
2010-01-15 07:54 . 2010-01-08 08:19 131072 —-a-w- c:usersКатеринаAppDataRoamingNetscapePluginsnpPxPlay.dll
2010-01-15 07:54 . 2010-01-08 08:19 131072 —-a-w- c:usersКатеринаAppDataRoamingMozillaPluginsnpPxPlay.dll
2010-01-15 06:35 . 2009-11-21 13:47

---

d

---

w- c:usersКатеринаAppDataRoamingskypePM
2010-01-14 08:56 . 2009-12-02 09:04

---

d

---

w- c:usersКатеринаAppDataRoaminguTorrent
2010-01-14 08:40 . 2009-11-23 16:06

---

d

---

w- c:program filesYandex
2010-01-14 08:40 . 2009-11-23 16:06

---

d

---

w- c:usersКатеринаAppDataRoamingYandex
2010-01-14 08:40 . 2009-11-23 16:06

---

d

---

w- c:programdataYandex
2010-01-14 06:18 . 2006-11-02 11:18

---

d

---

w- c:program filesWindows Mail
2010-01-11 10:15 . 2009-10-01 16:48

---

d

---

w- c:usersКатеринаAppDataRoamingAdobe
2010-01-05 13:56 . 2010-01-05 13:56

---

d

---

w- c:usersКатеринаAppDataRoamingNetscape
2010-01-05 13:56 . 2009-10-29 04:14

---

d

---

w- c:usersКатеринаAppDataRoamingMozilla
2010-01-05 07:53 . 2010-01-05 07:53

---

d

---

w- c:usersКатеринаAppDataRoamingOpera
2010-01-02 14:05 . 2009-09-19 20:02 32156 —-a-w- c:programdatanvModes.dat
2009-12-26 12:38 . 2009-12-26 12:38

---

d

---

w- c:usersКатеринаAppDataRoamingCanon
2009-12-26 11:25 . 2009-09-19 12:58

---

d

---

w- c:program filesCommon FilesAdobe
2009-12-16 15:12 . 2006-11-02 10:25 665600 —-a-w- c:windowsinfdrvindex.dat
2009-12-16 15:12 . 2009-12-16 15:12 0 —ha-w- c:windowssystem32driversMsft_User_WpdMtpDr_01_07_00.Wdf
2009-12-16 15:12 . 2009-12-16 15:12 0 —ha-w- c:windowssystem32driversMsft_User_WpdFs_01_07_00.Wdf
2009-12-16 08:19 . 2009-09-19 12:57

---

d-s—w- c:usersКатеринаAppDataRoamingMicrosoft
2009-12-14 18:37 . 2009-08-20 18:16

---

d

---

w- c:programdataNVIDIA
2009-12-14 18:31 . 2006-11-02 12:37

---

d

---

w- c:program filesWindows Calendar
2009-12-14 18:31 . 2006-11-02 12:37

---

d

---

w- c:program filesWindows Sidebar
2009-12-14 18:31 . 2006-11-02 12:37

---

d

---

w- c:program filesWindows Collaboration
2009-12-14 18:31 . 2006-11-02 12:37

---

d

---

w- c:program filesWindows Journal
2009-12-14 18:31 . 2006-11-02 12:37

---

d

---

w- c:program filesWindows Photo Gallery
2009-12-14 18:31 . 2006-11-02 12:37

---

d

---

w- c:program filesWindows Defender
2009-12-14 07:28 . 2009-08-20 17:53

---

d

---

w- c:program filesGoogle
2009-12-13 15:22 . 2009-12-13 15:22 132096 —sha-r- c:windowssystem32csrstub7.dll
2009-12-12 07:45 . 2009-10-01 17:10

---

d

---

w- c:usersКатеринаAppDataRoamingReal
2009-12-10 14:39 . 2009-12-10 14:39

---

d

---

w- c:programdataWindowsSearch
2009-12-08 06:54 . 2009-12-08 06:54

---

d

---

w- c:program filesMicrosoft CAPICOM 2.1.0.2
2009-12-06 12:14 . 2009-12-06 12:14

---

d

---

w- c:programdataInstallShield
2009-12-06 12:14 . 2009-12-06 12:14

---

d

---

w- c:usersКатеринаAppDataRoamingScanSoft
2009-12-06 12:14 . 2009-12-06 12:13

---

d

---

w- c:programdataScanSoft
2009-12-06 12:13 . 2009-12-06 12:13

---

d

---

w- c:program filesCommon FilesScanSoft Shared
2009-12-06 12:13 . 2009-12-06 12:13

---

d

---

w- c:program filesScanSoft
2009-12-06 12:12 . 2009-12-06 12:12

---

d

---

w- c:program filesCommon FilesCANON
2009-12-06 12:12 . 2009-12-06 12:07

---

d

---

w- c:program filesCanon
2009-12-06 12:10 . 2009-12-06 12:10

---

d—h—w- c:programdataCanonBJ
2009-12-06 12:08 . 2009-12-06 12:08

---

d—h—w- c:program filesCanonBJ
2009-12-03 17:31 . 2009-12-03 17:31

---

d

---

w- c:program filesGabest
2009-12-02 09:05 . 2009-12-02 09:05

---

d

---

w- c:program filesuTorrent
2009-11-26 08:41 . 2009-11-26 08:41

---

d

---

w- c:usersКатеринаAppDataRoamingNik Software
2009-11-26 08:38 . 2009-11-26 08:38

---

d

---

w- c:usersКатеринаAppDataRoamingImagenomic
2009-11-26 08:35 . 2009-11-26 08:35 2004 —-a-w- c:windowsRegistratione10f24f0-652e-11dd-ad8b-0800200c9a66.dll
2009-11-26 08:25 . 2009-11-26 08:25

---

d

---

w- c:program filesImagenomic
2009-11-25 12:55 . 2009-11-23 14:18

---

d

---

w- c:program filesMicrosoft Silverlight
2009-11-24 14:48 . 2009-11-24 14:48

---

d

---

w- c:program filesFocus Magic
2009-11-24 14:43 . 2009-11-24 14:43

---

d

---

w- c:program filesAKVIS
2009-11-24 14:41 . 2009-11-24 14:41

---

d

---

w- c:program filesLightMachine
2009-11-23 14:18 . 2009-09-19 13:03

---

d

---

w- c:program filesMicrosoft
2009-11-23 14:17 . 2009-09-19 13:02

---

d

---

w- c:program filesWindows Live
2009-11-22 10:55 . 2009-11-22 10:55 411368 —-a-w- c:windowssystem32deploytk.dll
2009-11-22 10:55 . 2009-11-22 10:55

---

d

---

w- c:program filesJava
2009-11-21 13:47 . 2009-11-21 13:47 56 —ha-w- c:programdataezsidmv.dat
2009-11-21 13:43 . 2009-11-21 13:43

---

d

---

r- c:program filesSkype
2009-11-21 13:43 . 2009-11-21 13:43

---

d

---

w- c:program filesCommon FilesSkype
2009-11-21 13:43 . 2009-11-21 13:43

---

d

---

w- c:programdataSkype
2009-11-21 08:56 . 2009-11-21 08:56 147767 —-a-w- c:windowsCurvemeister_3 Uninstaller.exe
2009-11-21 08:56 . 2009-11-21 08:56

---

d

---

w- c:programdataCurvemeister.com
2009-11-21 08:56 . 2009-11-21 08:56

---

d

---

w- c:program filesCurvemeister.com
2009-11-21 08:56 . 2009-11-21 08:56

---

d

---

w- c:program filesCommon FilesThraex Software
2009-11-21 08:52 . 2009-11-21 08:52

---

d

---

w- c:program filesPhotoZoom Pro 3
2009-11-21 08:51 . 2009-11-21 08:51

---

d

---

w- c:program filesFocalBlade
2009-11-21 08:43 . 2009-11-21 08:43

---

d

---

w- c:usersКатеринаAppDataRoamingWinRAR
2009-11-21 08:39 . 2009-11-21 08:39

---

d

---

w- c:program filesPocketRAR
2009-11-21 06:40 . 2009-12-09 08:38 916480 —-a-w- c:windowssystem32wininet.dll
2009-11-21 06:34 . 2009-12-09 08:38 71680 —-a-w- c:windowssystem32iesetup.dll
2009-11-21 06:34 . 2009-12-09 08:38 109056 —-a-w- c:windowssystem32iesysprep.dll
2009-11-21 04:59 . 2009-12-09 08:38 133632 —-a-w- c:windowssystem32ieUnatt.exe
2009-11-09 12:31 . 2009-12-09 10:55 24064 —-a-w- c:windowssystem32nshhttp.dll
2009-11-09 12:30 . 2009-12-09 10:55 30720 —-a-w- c:windowssystem32httpapi.dll
2009-11-09 10:36 . 2009-12-09 10:55 411648 —-a-w- c:windowssystem32drivershttp.sys
2009-11-07 14:13 . 2009-09-19 12:57 109344 —-a-w- c:usersКатеринаAppDataLocalGDIPFONTCACHEV1.DAT
2009-11-02 17:42 . 2009-10-29 11:39 195456

---

w- c:windowssystem32MpSigStub.exe
2009-11-01 16:56 . 2009-11-01 16:56 4608 —-a-w- c:windowssystem32w95inf32.dll
2009-11-01 16:56 . 2009-11-01 16:56 2272 —-a-w- c:windowssystem32w95inf16.dll
2009-10-29 09:17 . 2009-11-25 11:46 2048 —-a-w- c:windowssystem32tzres.dll
2009-10-28 17:58 . 2009-10-28 17:58 79144 —-a-w- c:programdataApple ComputerInstaller CacheiTunes 9.0.2.25SetupAdmin.exe
2009-10-01 18:04 . 2009-10-01 16:51 56 —sh—r- c:windowsSystem324E73FC0B10.sys
2009-10-01 18:04 . 2009-10-01 16:51 1890 —sha-w- c:windowsSystem32KGyGaAvL.sys
2009-08-21 04:48 . 2009-08-21 04:48 8192 —sha-w- c:windowsUsersDefaultNTUSER.DAT
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorershelliconoverlayidentifiersADSMOverlayIcon1]
@=»{A8D448F4-0431-45AC-9F5E-E1B434AB2249}»
[HKEY_CLASSES_ROOTCLSID{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 13:08 143360 —-a-w- c:program filesASUSASUS Data Security ManagerShlExtx86OverlayIconShlExt1.dll

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«Sidebar»=»c:program filesWindows Sidebarsidebar.exe» [2009-04-11 1233920]
«msnmsgr»=»c:program filesWindows LiveMessengermsnmsgr.exe» [2009-07-26 3883840]
«Skype»=»c:program filesSkypePhoneSkype.exe» [2009-10-09 25623336]
«WMPNSCFG»=»c:program filesWindows Media PlayerWMPNSCFG.exe» [2008-01-21 202240]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«Windows Defender»=»c:program filesWindows DefenderMSASCui.exe» [2008-01-21 1008184]
«UpdateLBPShortCut»=»c:program filesCyberLinkLabelPrintMUITransferMUIStartMenu.exe» [2009-05-19 222504]
«CLMLServer»=»c:program filesCyberLinkPower2GoCLMLSvc.exe» [2008-07-18 104936]
«UpdateP2GoShortCut»=»c:program filesCyberLinkPower2GoMUITransferMUIStartMenu.exe» [2008-12-03 218408]
«NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2009-04-16 13605408]
«NvMediaCenter»=»c:windowssystem32NvMcTray.dll» [2009-04-16 92704]
«RtHDVCpl»=»c:program filesRealtekAudioHDARtHDVCpl.exe» [2009-03-24 7289376]
«ETDWare»=»c:program filesElantechETDCtrl.exe» [2009-04-21 540576]
«HControlUser»=»c:program filesASUSATK HotkeyHControlUser.exe» [2008-08-18 98304]
«ATKOSD2″=»c:program filesASUSATKOSD2ATKOSD2.exe» [2009-03-04 8392704]
«AmIcoSinglun»=»c:program filesAmIcoSingLunAmIcoSinglun.exe» [2008-09-30 237568]
«Wireless Console 3″=»c:program filesASUSWireless Console 3wcourier.exe» [2009-04-17 1593344]
«ATKMEDIA»=»c:program filesASUSATK MediaDMedia.exe» [2009-04-20 159744]
«ASUS Camera ScreenSaver»=»c:windowsAsScrProlog.exe» [2009-08-20 47672]
«ACMON»=»c:program filesASUSSplendidACMON.exe» [2008-09-30 851968]
«ADSMTray»=»c:program filesASUSASUS Data Security ManagerADSMTray.exe» [2008-03-31 266240]
«QuickTime Task»=»c:program filesK-Lite Codec PackQuickTimeQTTask.exe» [2009-09-04 417792]
«iTunesHelper»=»c:program filesiTunesiTunesHelper.exe» [2009-10-28 141600]
«SunJavaUpdateSched»=»c:program filesJavajre6binjusched.exe» [2009-11-22 149280]
«SSBkgdUpdate»=»c:program filesCommon FilesScansoft SharedSSBkgdUpdateSSBkgdupdate.exe» [2006-10-25 210472]
«OpwareSE4″=»c:program filesScanSoftOmniPageSE4OpwareSE4.exe» [2007-02-04 79400]
«Skytel»=»c:program filesRealtekAudioHDASkytel.exe» [2009-03-24 1833504]
«Adobe Reader Speed Launcher»=»c:program filesAdobeReader 9.0ReaderReader_sl.exe» [2009-10-03 35696]
«Adobe ARM»=»c:program filesCommon FilesAdobeARM1.0AdobeARM.exe» [2009-09-04 935288]

c:usersЉ вҐаЁ­ AppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
Punto Switcher.lnk — c:program filesYandexPunto Switcherpunto.exe [2009-11-23 831272]

c:programdataMicrosoftWindowsStart MenuProgramsStartup
Adobe Gamma Loader.lnk — c:program filesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe [2009-11-1 113664]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem]
«EnableUIADesktopToggle»= 0 (0x0)

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinDefend]
@=»Service»

[HKLM~startupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FancyStart daemon.lnk]
path=c:programdataMicrosoftWindowsStart MenuProgramsStartupFancyStart daemon.lnk
backup=c:windowspssFancyStart daemon.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregCanonMyPrinter]
2007-04-03 16:50 1603152 —-a-w- c:program filesCanonMyPrinterBJMYPRT.EXE

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregCanonSolutionMenu]
2007-04-03 16:00 644696 —-a-w- c:program filesCanonSolutionMenuCNSLMAIN.EXE

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregodbny0]
2010-01-15 09:01 296960 —-a-w- c:windowsodbn0.exe

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerSvc]
«VistaSp2″=hex(b):b4,e4,e6,75,ec,7c,ca,01

R2 SRS_VolSync_Service;SRS Volume Sync Service;c:program filesSRS LabsSRS Premium SoundSRS_VolSync.exe [07.04.2009 9:04 70880]
R3 ETD;ELAN PS/2 Port Input Device;c:windowsSystem32driversETD.sys [21.04.2009 13:43 90112]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:windowsSystem32driversnvhda32v.sys [22.01.2009 10:43 52768]
R3 SRS_PremiumSound_Service;SRS Labs Premium Sound;c:windowsSystem32driversSRS_PremiumSound_i386.sys [20.08.2009 21:13 233128]
S3 FontCache;Служба кэша шрифтов Windows;c:windowssystem32svchost.exe -k LocalServiceAndNoImpersonation [21.01.2008 5:23 21504]
S3 fssfltr;FssFltr;c:windowsSystem32driversfssfltr.sys [23.11.2009 17:18 54632]
S3 fsssvc;Служба семейной безопасности Windows Live;c:program filesWindows LiveFamily Safetyfsssvc.exe [05.08.2009 22:48 704864]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionsvchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contents of the ‘Scheduled Tasks’ folder
.
.

---

Supplementary Scan

---

.
uStart Page = hxxp://www.yandex.ru?clid=41279
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
uInternet Settings,ProxyOverride = *.local
IE: &Экспорт в Microsoft Excel — c:progra~1MICROS~2Office12EXCEL.EXE/3000
IE: Add to Google Photos Screensa&ver — c:windowssystem32GPhotos.scr/200
Trusted Zone: google.commail
FF — ProfilePath — c:usersКатеринаAppDataRoamingMozillaFirefoxProfilesazf6rmxa.default
FF — prefs.js: browser.search.defaulturl — hxxp://www.bing.com/search?FORM=IEFM1&q=
FF — prefs.js: browser.startup.homepage — hxxp://www.gmail.com/
FF — prefs.js: keyword.URL — hxxp://www.bing.com/search?FORM=IEFM1&q=
FF — component: c:program filesMozilla Firefoxextensions{B13721C7-F507-4982-B2E5-502A71474FED}componentsNPComponent.dll
FF — plugin: c:program filesGooglePicasa3npPicasa3.dll
FF — plugin: c:program filesK-Lite Codec PackRealbrowserpluginsnppl3260.dll
FF — plugin: c:program filesK-Lite Codec PackRealbrowserpluginsnprpjplug.dll
FF — plugin: c:program filesMicrosoftOffice LivenpOLW.dll
FF — plugin: c:program filesWindows LivePhoto GalleryNPWLPG.dll
FF — HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} — c:windowsMicrosoft.NETFrameworkv3.5Windows Presentation FoundationDotNetAssistantExtension
.
— — — — ORPHANS REMOVED — — — —

HKLM-Run-smss32.exe — c:windowssystem32smss32.exe
MSConfigStartUp-BMIMZMHMFM — c:usersКатеринаAppDataLocalTempc.exe
MSConfigStartUp-CorelDRAW Graphics Suite 11b — c:program filesCorelCorel Graphics 12LanguagesENProgramsRegistration.exe
MSConfigStartUp-CyberMania — c:program filesESETCyberMania.exe
MSConfigStartUp-DisableS3S4 — c:DisableS3S4.cmd
MSConfigStartUp-Google Update — c:usersКатеринаAppDataLocalGoogleUpdateGoogleUpdate.exe
MSConfigStartUp-LosAlamos — c:windowssystem32sshnas21.dll
MSConfigStartUp-lsass — c:windowslsass.exe
MSConfigStartUp-WS9E3IQBKY — c:usersКатеринаAppDataLocalTempb.exe
MSConfigStartUp-ZagrebLand — c:usersF98B~1AppDataLocalTempb.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-15 13:21
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

C:ADSM_PData_0150

[Автор]

Сообщения