Удаление вирусов и троянов. Защита компьютера. › Помощь в удалении вирусов, троянов, рекламы и других зловредов › у меня появился порно баннер на рабочем столе
- This topic has 1 ответ, 2 участника, and was last updated 15 years, 10 months назад by 
Admin.
 
- 
		АвторСообщения
 - 
		
			
				
7 января, 2010 в 4:56 пп #17724
Аноним
Гость- Темы:532
 - Сообщений:1553
 - ☆☆☆☆☆
 
info.txt logfile of random’s system information tool 1.06 2010-01-07 19:45:33
======Uninstall list======
—>.
—>C:Program FilesDivXDivXConverterUninstall.exe /CONVERTER
—>C:Program FilesNeroNero 7nerouninstallUNNERO.exe /UNINSTALL
—>MsiExec /X{74224F8D-4A17-4816-9EDB-7BB854DE532C}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
ACDSee 10 Photo Manager—>MsiExec.exe /I{119E769A-C45B-47E1-A43C-14581D6058F9}
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)—>MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Photoshop 7.0 Русская версия—>C:PROGRA~1UNWISE.EXE C:PROGRA~1INSTALL.LOG
Adobe Reader 8 — Russian—>MsiExec.exe /I{AC76BA86-7AD7-1049-7B44-A81200000003}
Battle Realms Demo—>MsiExec.exe /I{61D6D0CD-3EC3-4240-8895-DF63C40B607E}
BitPim 1.0.6—>»C:Program FilesBitPimunins000.exe»
Canon Camera Access Library—>»C:Program FilesCommon FilesCanonUIW1.0.0.0Uninst.exe» «C:Program FilesCanonCALUninst.ini»
Canon Camera Support Core Library—>»C:Program FilesCommon FilesCanonUIW1.0.0.0Uninst.exe» «C:Program FilesCanonCSCLIBUninst.ini»
Canon Camera Window DC_DV 5 for ZoomBrowser EX—>»C:Program FilesCommon FilesCanonUIW1.0.0.0Uninst.exe» «C:Program FilesCanonCameraWindowCameraWindowDVCUninst.ini»
Canon Camera Window DC_DV 6 for ZoomBrowser EX—>»C:Program FilesCommon FilesCanonUIW1.0.0.0Uninst.exe» «C:Program FilesCanonCameraWindowCameraWindowDVC6Uninst.ini»
Canon Camera Window MC 6 for ZoomBrowser EX—>»C:Program FilesCommon FilesCanonUIW1.0.0.0Uninst.exe» «C:Program FilesCanonCameraWindowCameraWindowMCUninst.ini»
Canon G.726 WMP-Decoder—>»C:Program FilesCommon FilesCanonUIW1.0.0.0Uninst.exe» «C:Program FilesCanonG726DecoderG726DecUnInstall.ini»
Canon MovieEdit Task for ZoomBrowser EX—>»C:Program FilesCommon FilesCanonUIW1.0.0.0Uninst.exe» «C:Program FilesCanonZoomBrowser EXProgramMVWUninst.ini»
Canon RAW Image Task for ZoomBrowser EX—>»C:Program FilesCommon FilesCanonUIW1.0.0.0Uninst.exe» «C:Program FilesCanonRAW Image TaskUninst.ini»
Canon RemoteCapture Task for ZoomBrowser EX—>»C:Program FilesCommon FilesCanonUIW1.0.0.0Uninst.exe» «C:Program FilesCanonCameraWindowRemoteCaptureTask DCUninst.ini»
CheMax 10.2—>»C:Program FilesCheMaxunins000.exe»
Crazy Frog Racer—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime 9 1Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{168F84BF-07B8-495B-B35C-6844A0CF5C28}setup.exe» -l0x19
Diablo II — Lord of Destruction—>»C:Program FilesDiablo II — Lord of Destructionunins000.exe»
DivX Codec—>C:Program FilesDivXDivXCodecUninstall.exe /CODEC
DivX Converter—>C:Program FilesDivXDivXConverterUninstall.exe /CONVERTER
DivX Player—>C:Program FilesDivXDivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters—>C:Program FilesDivXDivXDSFiltersUninstall.exe /DSFILTERS
DivX Plus Web Player—>C:Program FilesDivXDivXWebPlayerUninstall.exe /PLUGIN
Download Master version 5.5.14.1175—>»C:Program FilesDownload Masterunins000.exe»
EA Download Manager—>C:Program FilesElectronic ArtsEADMUninstall.exe
ffdshow (remove only)—>»C:Program Filesffdshowuninstall.exe»
Google Chrome—>»C:Program FilesGoogleChromeApplication3.0.195.38Installersetup.exe» —uninstall —system-level
Google Toolbar for Internet Explorer—>»C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarManager_0E996B068B56FCA2.exe» /uninstall
Google Toolbar for Internet Explorer—>MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper—>MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
High Definition Audio Driver Package — KB888111—>»C:WINDOWS$NtUninstallKB888111WXPSP2$spuninstspuninst.exe»
HijackThis 2.0.2—>»C:Program Filestrend microHijackThis.exe» /uninstall
HiJackThis—>MsiExec.exe /X{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}
ICQ Toolbar—>C:Program FilesICQ6ToolbarICQUnToolbar.exe
ICQ6.5—>»C:Program FilesInstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
Karaoke GALAXY player—>C:PROGRA~1KARAOK~1PlayerUNWISE.EXE C:PROGRA~1KARAOK~1PlayerINSTALL.LOG
Lernout & Hauspie TruVoice for Microsoft Agent—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFcgminst.inf, RemoveCgram
Lineage II The 2nd Throne — Gracia 1.0.5—>»C:Program Files4GAMELineageIIunins000.exe»
Lineage II—>C:Program FilesInstallShield Installation Information{076A6FD8-EE45-4A83-B3C9-C7C34E7CAFDD}setup.exe -runfromtemp -l0x0009 -removeonly
LOST PLANET COLONIES—>C:GamesLPLANCLNunwise.exe
LOST PLANET COLONIES—>C:GamesLPLANCLNUNWISE.EXE C:GamesLPLANCLNINSTALL.LOG
Magic Gooddy—>C:Program FilesMagic GooddyCMPSETUPUNINSTAL.EXE MG_0001
McAfee Security Scan—>»C:Program FilesMcAfee Security Scanuninstall.exe»
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Agent 1.5—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFagtinst.inf, RemoveAgent
Microsoft Command & Control Engine—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFmscnc.inf, Uninstall
Microsoft Games for Windows — LIVE Redistributable—>MsiExec.exe /X{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}
Microsoft Speech API 3.0—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFspchapi.inf, Uninstall
Microsoft Speech Lexicon—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFmslex.inf, Uninstall
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.21022—>MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Mozilla Firefox (3.5.6)—>C:Program FilesMozilla Firefoxuninstallhelper.exe
Nero 7 Ultra Edition—>MsiExec.exe /I{06051216-B116-443E-AE37-2A5B10E61049}
NVIDIA Drivers—>C:WINDOWSsystem32nvuninst.exe UninstallGUI
NVIDIA PhysX v8.04.25—>MsiExec.exe /X{74224F8D-4A17-4816-9EDB-7BB854DE532C}
OpenAL—>»C:Program FilesOpenALoalinst.exe» /U
Panda Antivirus + Firewall 2008—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{98032D6F-3EE6-4646-B68C-40BF012AC89B}SETUP.exe» -l0x19 -removeonly
Perfect World 1.4.1.2271 Ярость Богов—>»C:Program FilesAstrum NivalPerfect Worldunins000.exe»
Perfect World 1.4.1.2271 Ярость Богов—>»C:Program FilesAstrum NivalPerfect Worldunins000.exe»
PerfectPvP 1.8—>C:Program FilesAstrum NivalPerfect WorldUninstall.exe
Prototype—>»C:Program FilesPrototypeunins000.exe»
QuickTime Alternative 1.42—>»C:Program FilesQuickTime Alternativeunins000.exe»
Real Alternative 1.32—>»C:Program FilesReal Alternativeunins000.exe»
Realtek High Definition Audio Driver—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}Setup.exe» -l0x19 -removeonly
SAMSUNG Mobile Composite Device Software—>C:WINDOWSsystem32Samsung_USB_Drivers6SSBCUninstall.exe
SAMSUNG Mobile Modem Driver Set—>C:WINDOWSsystem32Samsung_USB_Drivers3SSCDUninstall.exe
Samsung Mobile phone USB driver Software—>C:WINDOWSsystem32Samsung_USB_Drivers5SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software—>C:WINDOWSsystem32Samsung_USB_Drivers1SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software—>C:WINDOWSsystem32Samsung_USB_Drivers2SSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer—>»C:Program FilesInstallShield Installation Information{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}setup.exe» -runfromtemp -l0x0019 -removeonly
Samsung PC Studio 3—>»C:Program FilesInstallShield Installation Information{C4A4722E-79F9-417C-BD72-8D359A090C97}setup.exe» -runfromtemp -l0x0019 -removeonly
Ski Alpin 2006—>»C:Program FilesSki Alpin 2006unins000.exe»
Skype™ 4.1—>MsiExec.exe /I{5C474A83-A45F-470C-9AC8-2BD1C251BF9A}
SPORE™—>»C:Program FilesInstallShield Installation Information{9DF0196F-B6B8-4C3A-8790-DE42AA530101}SPORESetup.exe» -runfromtemp -l0x0019 -removeonly
Total Commander 7.02a Final—>»C:Program FilesTotal Commanderunins000.exe»
VC80CRTRedist — 8.0.50727.4053—>MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}
Warcraft II Battle.net Edition—>C:WINDOWSIsUninst.exe -f»C:GAMESTRIADAWarcraft II Battle.net EditionUninst.isu»
Warcraft III Frozen Throne—>C:WINDOWSIsUninst.exe -f»C:GAMESTRIADAWarcraft III Frozen ThroneUninst.isu»
Winamp (remove only)—>»C:Program FilesWinampUninstWA.exe»
Xvid 1.1.3 final uninstall—>»C:Program FilesXvidunins000.exe»
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
Корпорация Э.Л.И.Т.А—>C:Program FilesInstallShield Installation Information{0BC6C354-F509-40D6-A3AA-7CB618EEBEA2}setup.exe -runfromtemp -l0x0019 -removeonly
Обновление безопасности для Windows XP (KB923789)—>C:WINDOWSsystem32MacroMedFlashgenuinst.exe C:WINDOWSsystem32MacroMedFlashKB923789.inf
Пакет драйверов Windows — Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)—>C:PROGRA~1DIFX7B44739871F4D539FA473F57A832EA4B6A59EF06DPInst.exe /d /u C:WINDOWSsystem32DRVSTOREamdk8_A8D26169E6EDA9205D39A3918FEA7EFFFE870B0Aamdk8.inf
Пакет драйверов Windows — MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0)—>C:PROGRA~1DIFX7B44739871F4D539FA473F57A832EA4B6A59EF06DPInst.exe /u C:WINDOWSsystem32DRVSTOREshpacm_18A9B92ED8DEDC602E49E767FA4BE98A30525207shpacm.inf
Пакет драйверов Windows — MobileTop (sshpusb) USB (02/23/2007 2.5.0.0)—>C:PROGRA~1DIFX7B44739871F4D539FA473F57A832EA4B6A59EF06DPInst.exe /u C:WINDOWSsystem32DRVSTOREshpusb_558D416BCEB984F35885804D3E1A9C3773F1B17Cshpusb.inf
Профессиональный выпуск Microsoft Office 2000—>MsiExec.exe /I{00010419-78E1-11D2-B60F-006097C998E7}
Яндекс.Бар 4.3 для Internet Explorer—>MsiExec.exe /X{2B9C002D-F3C1-4F8A-B29A-7F9E9B473D4D}======Security center information======
AV: Panda Antivirus + Firewall 2008
FW: Panda Antivirus 2008 Personal Firewall======System event log======
Computer Name: HOME
Event Code: 7035
Message: Служба «Службы терминалов» успешно отправила управляющий элемент «запустить».Record Number: 5390
Source Name: Service Control Manager
Time Written: 20091209180050.000000+180
Event Type: информация
User: NT AUTHORITYSYSTEMComputer Name: HOME
Event Code: 7036
Message: Служба «Служба Google Update (gupdate1ca70f6d723b42c)» перешла в состояние Остановлена.Record Number: 5389
Source Name: Service Control Manager
Time Written: 20091209180034.000000+180
Event Type: информация
User:Computer Name: HOME
Event Code: 2
Message: Device identified.Record Number: 5388
Source Name: nvata
Time Written: 20091209180005.000000+180
Event Type: информация
User:Computer Name: HOME
Event Code: 2
Message: Device identified.Record Number: 5387
Source Name: nvata
Time Written: 20091209180005.000000+180
Event Type: информация
User:Computer Name: HOME
Event Code: 7036
Message: Служба «Диспетчер подключений удаленного доступа» перешла в состояние Работает.Record Number: 5386
Source Name: Service Control Manager
Time Written: 20091209180003.000000+180
Event Type: информация
User:=====Application event log=====
Computer Name: HOME
Event Code: 0
Message:
Record Number: 1649
Source Name: gupdate1ca70f6d723b42c
Time Written: 20100104184755.000000+180
Event Type: информация
User:Computer Name: HOME
Event Code: 1800
Message: Служба центра обеспечения безопасности Windows запущена.Record Number: 1648
Source Name: SecurityCenter
Time Written: 20100104184720.000000+180
Event Type: информация
User:Computer Name: HOME
Event Code: 0
Message:
Record Number: 1647
Source Name: ICQ Service
Time Written: 20100104184719.000000+180
Event Type: информация
User:Computer Name: HOME
Event Code: 0
Message:
Record Number: 1646
Source Name: gupdate1ca70f6d723b42c
Time Written: 20100104184719.000000+180
Event Type: информация
User:Computer Name: HOME
Event Code: 4000
Message: The Panda Anti-virus Service has started successfully.Record Number: 1645
Source Name: Sentinel
Time Written: 20100104184717.000000+180
Event Type: информация
User:======Environment variables======
«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008;C:Program FilesSamsungSamsung PC Studio 3;C:Program FilesCommon FilesDivX Shared
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=15
«PROCESSOR_IDENTIFIER»=x86 Family 15 Model 107 Stepping 2, AuthenticAMD
«PROCESSOR_REVISION»=6b02
«NUMBER_OF_PROCESSORS»=2
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMPLogfile of random’s system information tool 1.06 (written by random/random)
Run by ыыфыы at 2010-01-07 19:33:57
Microsoft Windows XP Professional Service Pack 2
System drive C: has 34 GB (43%) free of 78 GB
Total RAM: 2047 MB (71% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:45:31, on 07.01.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008pavsrv51.exe
C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008AVENGINE.EXE
C:WINDOWSsystem32svchost.exe
C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008TPSrv.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesICQ6ToolbarICQ Service.exe
C:WINDOWSsystem32nvsvc32.exe
C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008PsCtrls.exe
C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008PavFnSvr.exe
C:Program FilesCommon FilesPanda SoftwarePavShldpavprsrv.exe
c:program filespanda securitypanda antivirus + firewall 2008firewallPSHOST.EXE
C:WINDOWSExplorer.EXE
C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008PsImSvc.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesCanonCALCALMAIN.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008ApvxdWin.exe
C:WINDOWSRTHDCPL.EXE
C:WINDOWSsystem32ctfmon.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesDownload Masterdmaster.exe
C:Program FilesMcAfee Security Scan1.0.150SSScheduler.exe
C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008WebProxy.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:WINDOWSsystem32wbemwmiapsrv.exe
C:Documents and SettingsыыфыыРабочий столRSIT.exe
C:Program Filestrend microыыфыы.exe
C:Program FilesMcAfee Security Scan1.0.150McUICnt.exe
C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008avciman.exe
C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008psimreal.exeR0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40488
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: Helper_bho — {71E59D37-D7FC-4ED6-BC1D-D13BE02FE6C5} — C:WINDOWSsystem32im.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.4.4525.1752swg.dll
O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — C:Program FilesDownload Masterdmbar.dll
O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [APVXDWIN] «C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008APVXDWIN.EXE» /s
O4 — HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [swg] «C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe»
O4 — HKCU..Run: [EA Core] «C:Program FilesElectronic ArtsEADMCore.exe» -silent
O4 — HKCU..Run: [Skype] «C:Program FilesSkypePhoneSkype.exe» /nosplash /minimized
O4 — HKCU..Run: [Download Master] C:Program FilesDownload Masterdmaster.exe -autorun
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: McAfee Security Scan.lnk = ?
O4 — Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O8 — Extra context menu item: Передать на удаленную закачку DM — C:Program FilesDownload Masterremdown.htm
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe (file missing)
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe (file missing)
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O17 — HKLMSystemCCSServicesTcpip..{8DC08AAE-8046-4B12-8356-66C96B8502C5}: NameServer = 78.25.155.1 78.25.154.254
O23 — Service: Canon Camera Access Library 8 (CCALib8) — Canon Inc. — C:Program FilesCanonCALCALMAIN.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба Google Update (gupdate1ca70f6d723b42c) (gupdate1ca70f6d723b42c) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: ICQ Service — Unknown owner — C:Program FilesICQ6ToolbarICQ Service.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Panda Software Controller — Panda Software International — C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008PsCtrls.exe
O23 — Service: Panda Function Service (PAVFNSVR) — Panda Software International — C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008PavFnSvr.exe
O23 — Service: Panda Process Protection Service (PavPrSrv) — Panda Software — C:Program FilesCommon FilesPanda SoftwarePavShldpavprsrv.exe
O23 — Service: Panda anti-virus service (PAVSRV) — Panda Software International — C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008pavsrv51.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Panda Host Service (PSHost) — Panda Software International — c:program filespanda securitypanda antivirus + firewall 2008firewallPSHOST.EXE
O23 — Service: Panda IManager Service (PSIMSVC) — Panda Software International — C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008PsImSvc.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Panda TPSrv (TPSrv) — Panda Software International — C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008TPSrv.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 9225 bytes======Scheduled tasks folder======
C:WINDOWStasksGoogleUpdateTaskMachineCore.job
C:WINDOWStasksGoogleUpdateTaskMachineUA.job
C:WINDOWStasksWindowsCheck.job======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-22 62080][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{71E59D37-D7FC-4ED6-BC1D-D13BE02FE6C5}]
Helper_bho Class — C:WINDOWSsystem32im.dll [2009-07-02 155648][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2009-04-16 158208][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-01-05 263280][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.4.4525.1752swg.dll [2009-12-06 764912][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2009-06-09 963320]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2009-12-22 8716040]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — C:Program FilesDownload Masterdmbar.dll [2007-11-26 180224]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-01-05 263280][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2008-01-08 8523776]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2008-01-08 81920]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-07-05 16380416]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«APVXDWIN»=C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008APVXDWIN.EXE [2007-10-04 455984]
«NeroFilterCheck»=C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-01-11 39792][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-18 15360]
«swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-10-17 68856]
«EA Core»=C:Program FilesElectronic ArtsEADMCore.exe -silent []
«Skype»=C:Program FilesSkypePhoneSkype.exe [2009-10-09 25626408]
«Download Master»=C:Program FilesDownload Masterdmaster.exe [2009-10-02 3779072]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
McAfee Security Scan.lnk — C:Program FilesMcAfee Security Scan1.0.150SSScheduler.exe
Microsoft Office.lnk — C:Program FilesMicrosoft OfficeOfficeOSA9.EXE[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyavldr]
C:WINDOWSsystem32avldr.dll [2007-02-15 50736][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworknm]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworknm.sys]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesICQ6.5ICQ.exe»=»C:Program FilesICQ6.5ICQ.exe:*:Enabled:ICQ6»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{61a00b8e-b3c6-11de-afa4-806d6172696f}]
shellAutoRuncommand — E:Run.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{61d03b1c-b54a-11de-a49d-00241d0061ec}]
shellAutoRuncommand — RECYCLERS-1-5-21-1482476501-1644491937-682003330-1013wmg32.exe
shellopencommand — RECYCLERS-1-5-21-1482476501-1644491937-682003330-1013wmg32.exe======File associations======
.js — open — C:PROGRA~1PANDAS~1PANDAA~1PAVSCRIP.EXE «%1» %*
.vbs — open — C:PROGRA~1PANDAS~1PANDAA~1PAVSCRIP.EXE «%1» %*======List of files/folders created in the last 1 months======
2010-01-07 19:33:57 —-D—- C:rsit
2010-01-07 19:33:57 —-D—- C:Program Filestrend micro
2010-01-05 19:04:01 —-D—- C:Program FilesTrendMicro
2010-01-05 18:54:38 —-D—- C:Documents and SettingsыыфыыApplication DataOpera
2010-01-05 18:54:38 —-D—- C:Documents and SettingsAll UsersApplication DataYandex
2010-01-05 18:51:16 —-D—- C:Documents and SettingsыыфыыApplication DataHelp
2010-01-05 17:27:51 —-D—- C:WINDOWSsystem32appmgmt
2010-01-04 20:36:56 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup Files
2010-01-04 18:34:33 —-D—- C:Downloads
2010-01-04 18:34:15 —-D—- C:Documents and SettingsыыфыыApplication DataDownload Master
2010-01-04 18:33:37 —-D—- C:Program FilesDownload Master
2009-12-28 16:41:48 —-D—- C:Program FilesWarcraft III
2009-12-26 16:35:56 —-D—- C:Program FilesNival Online
2009-12-25 18:05:57 —-D—- C:WINDOWSsystem32xlive
2009-12-25 17:46:43 —-D—- C:WINDOWSsystem32AGEIA
2009-12-25 17:46:43 —-D—- C:Program FilesAGEIA Technologies
2009-12-25 17:46:31 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2009-12-25 17:46:10 —-RA—- C:WINDOWSsystem32tmp63.tmp
2009-12-25 17:46:10 —-RA—- C:WINDOWSsystem32tmp62.tmp
2009-12-25 17:46:10 —-D—- C:Program FilesOpenAL
2009-12-25 17:45:28 —-A—- C:WINDOWSsystem32xmlinst.exe
2009-12-25 17:45:28 —-A—- C:WINDOWSsystem32wrap_oal.dll
2009-12-25 17:45:27 —-A—- C:WINDOWSsystem32vp6vfw.dll
2009-12-25 17:45:27 —-A—- C:WINDOWSsystem32vp6install.exe
2009-12-25 17:45:27 —-A—- C:WINDOWSsystem32Vb5db.dll
2009-12-25 17:45:26 —-A—- C:WINDOWSsystem32OpenAL32.dll
2009-12-25 17:45:26 —-A—- C:WINDOWSsystem32msxml4a.dll
2009-12-25 17:45:26 —-A—- C:WINDOWSsystem32msxml3a.dll
2009-12-25 17:45:26 —-A—- C:WINDOWSsystem32msvcr80.dll
2009-12-25 17:45:26 —-A—- C:WINDOWSsystem32msvcr71d.dll
2009-12-25 17:45:26 —-A—- C:WINDOWSsystem32msvcr70d.dll
2009-12-25 17:45:25 —-A—- C:WINDOWSsystem32msvcp80.dll
2009-12-25 17:45:25 —-A—- C:WINDOWSsystem32msvcp71d.dll
2009-12-25 17:45:25 —-A—- C:WINDOWSsystem32msvcp70d.dll
2009-12-25 17:45:25 —-A—- C:WINDOWSsystem32Msvcp60d.dll
2009-12-25 17:45:23 —-A—- C:WINDOWSsystem32msvcm80.dll
2009-12-25 17:45:23 —-A—- C:WINDOWSsystem32msvci70d.dll
2009-12-25 17:45:23 —-A—- C:WINDOWSsystem32mfcm80u.dll
2009-12-25 17:45:23 —-A—- C:WINDOWSsystem32mfcm80.dll
2009-12-25 17:45:23 —-A—- C:WINDOWSsystem32mfc80u.dll
2009-12-25 17:45:22 —-A—- C:WINDOWSsystem32mfc80.dll
2009-12-25 17:45:22 —-A—- C:WINDOWSsystem32MFC71u.dll
2009-12-25 17:45:22 —-A—- C:WINDOWSsystem32mfc71.dll
2009-12-25 17:45:22 —-A—- C:WINDOWSsystem32eax.dll
2009-12-25 17:45:22 —-A—- C:WINDOWSsystem32Cc3250mt.dll
2009-12-25 17:45:22 —-A—- C:WINDOWSsystem32Borlndmm.dll
2009-12-25 17:45:21 —-D—- C:Games
2009-12-25 17:45:21 —-A—- C:WINDOWSsystem32xmltok.dll
2009-12-25 17:45:21 —-A—- C:WINDOWSsystem32xmlparse.dll
2009-12-20 21:17:12 —-D—- C:Program FilesAstrum Nival
2009-12-20 21:15:01 —-D—- C:Program Filespw78
2009-12-11 21:31:06 —-D—- C:Documents and SettingsыыфыыApplication DataMedia Player Classic
2009-12-11 21:25:06 —-D—- C:Program FilesuTorrent
2009-12-11 21:22:57 —-D—- C:Documents and SettingsыыфыыApplication DatauTorrent
2009-12-09 18:03:51 —-A—- C:WINDOWSIsUninst.exe======List of files/folders modified in the last 1 months======
2010-01-07 19:44:22 —-D—- C:WINDOWSTemp
2010-01-07 19:41:08 —-D—- C:WINDOWSsystem32drivers
2010-01-07 19:34:16 —-D—- C:WINDOWSPrefetch
2010-01-07 19:33:57 —-RD—- C:Program Files
2010-01-07 19:33:36 —-D—- C:Documents and SettingsыыфыыApplication DataSkype
2010-01-07 19:31:54 —-D—- C:Program FilesMozilla Firefox
2010-01-07 19:31:20 —-D—- C:WINDOWSsystem32CatRoot2
2010-01-07 19:31:05 —-D—- C:WINDOWSsystem32
2010-01-07 19:29:55 —-A—- C:WINDOWSSchedLgU.Txt
2010-01-05 19:18:46 —-D—- C:Documents and Settings
2010-01-05 19:04:10 —-SHD—- C:WINDOWSInstaller
2010-01-05 18:54:39 —-D—- C:Documents and SettingsыыфыыApplication DataYandex
2010-01-05 14:24:36 —-A—- C:WINDOWSOEWABLog.txt
2010-01-04 17:51:02 —-SD—- C:WINDOWSTasks
2010-01-01 18:02:39 —-D—- C:WINDOWS
2009-12-28 17:33:13 —-A—- C:WINDOWSWar3Unin.exe
2009-12-27 22:30:35 —-A—- C:WINDOWSNeroDigital.ini
2009-12-25 18:06:13 —-HD—- C:WINDOWSinf
2009-12-25 18:06:03 —-D—- C:WINDOWSsystem32DirectX
2009-12-25 18:05:57 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2009-12-25 17:47:35 —-D—- C:Program Filesdirectx
2009-12-25 17:47:06 —-DC—- C:WINDOWSsystem32DRVSTORE
2009-12-25 17:47:01 —-D—- C:WINDOWSsystem32CatRoot
2009-12-25 17:46:31 —-D—- C:Program FilesCommon Files
2009-12-25 17:45:49 —-D—- C:WINDOWSWinSxS
2009-12-25 17:45:36 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-12-11 21:31:10 —-D—- C:Documents and SettingsыыфыыApplication DataDivX
2009-12-11 14:56:44 —-SD—- C:Documents and SettingsыыфыыApplication DataMicrosoft
2009-12-11 14:44:26 —-A—- C:WINDOWSwinamp.ini======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK8;Драйвер AMD процессора; C:WINDOWSsystem32DRIVERSAmdK8.sys [2006-06-18 43520]
R1 APPFLT;App Filter Plugin; ??C:WINDOWSsystem32DriversAPPFLT.SYS []
R1 DSAFLT;DSA Filter Plugin; ??C:WINDOWSsystem32DriversDSAFLT.SYS []
R1 FNETMON;NetMon Filter Plugin; ??C:WINDOWSsystem32Driversfnetmon.SYS []
R1 IDSFLT;Ids Filter Plugin; ??C:WINDOWSsystem32DriversIDSFLT.SYS []
R1 NETFLTDI;Panda Net Driver [TDI Layer]; ??C:WINDOWSsystem32DriversNETFLTDI.SYS []
R1 ShldDrv;Panda File Shield Driver; C:WINDOWSSystem32DRIVERSShlDrv51.sys [2007-05-23 38968]
R1 SMSFLT;SMS Filter Plugin; ??C:WINDOWSsystem32DriversSMSFLT.SYS []
R1 StarOpen;StarOpen; C:WINDOWSsystem32driversStarOpen.sys [2006-07-24 5632]
R1 uzm0njk2;AVZ-RK Kernel Driver; ??C:WINDOWSsystem32Driversuzm0njk2.sys []
R1 WNMFLT;Wifi Monitor Filter Plugin; ??C:WINDOWSsystem32DriversWNMFLT.SYS []
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2004-08-18 12032]
R2 cpoint;Panda CPoint Driver; C:WINDOWSsystem32Driverscpoint.sys [2007-06-08 24760]
R2 DgiVecp;Team MFP Comm Driver; C:WINDOWSSystem32DriversDgiVecp.sys [2005-03-14 41984]
R2 PAVDRV;pavdrv; C:WINDOWSsystem32DRIVERSpavdrv51.sys [2007-09-28 83896]
R2 PavProc;Panda Process Protection Driver; ??C:WINDOWSsystem32DRIVERSPavProc.sys []
R3 AvFlt;Antivirus Filter Driver; C:WINDOWSsystem32driversav5flt.sys []
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-01-07 138752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2007-07-18 4547584]
R3 NETIMFLT01050097;PANDA NDIS IM Filter Miniport v1.5.0.97; C:WINDOWSsystem32DRIVERSnetimflt.sys [2007-11-19 143160]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2008-01-08 7434336]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:WINDOWSsystem32DRIVERSNVENETFD.sys [2006-11-27 58368]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:WINDOWSsystem32DRIVERSnvnetbus.sys [2006-11-27 19968]
R3 PavSRK.sys;PavSRK.sys; ??C:WINDOWSsystem32PavSRK.sys []
R3 PavTPK.sys;PavTPK.sys; ??C:WINDOWSsystem32PavTPK.sys []
R3 RMSPPPOE;WAN Miniport (PPP over Ethernet Protocol); C:WINDOWSsystem32DRIVERSRMSPPPOE.SYS [2006-10-01 31424]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-18 26624]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-18 57600]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2004-08-18 17024]
S3 gdrv;gdrv; ??C:WINDOWSgdrv.sys []
S3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2004-08-18 9600]
S3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2007-07-11 12160]
S3 npkcrypt;npkcrypt; ??C:Program Files4GAMELineageIIsystemnpkcrypt.sys []
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2004-08-03 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2004-08-03 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-03 26496]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 CCALib8;Canon Camera Access Library 8; C:Program FilesCanonCALCALMAIN.exe [2005-09-30 96341]
R2 ICQ Service;ICQ Service; C:Program FilesICQ6ToolbarICQ Service.exe [2009-06-09 222968]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2008-01-08 155716]
R2 Panda Software Controller;Panda Software Controller; C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008PsCtrls.exe [2007-07-12 169264]
R2 PAVFNSVR;Panda Function Service; C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008PavFnSvr.exe [2007-07-12 173360]
R2 PavPrSrv;Panda Process Protection Service; C:Program FilesCommon FilesPanda SoftwarePavShldpavprsrv.exe [2007-06-14 63024]
R2 PAVSRV;Panda anti-virus service; C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008pavsrv51.exe [2007-09-28 148272]
R2 PSHost;Panda Host Service; c:program filespanda securitypanda antivirus + firewall 2008firewallPSHOST.EXE [2007-04-04 226864]
R2 PSIMSVC;Panda IManager Service; C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008PsImSvc.exe [2007-05-24 108592]
R2 TPSrv;Panda TPSrv; C:Program FilesPanda SecurityPanda Antivirus + Firewall 2008TPSrv.exe [2007-10-24 406832]
S2 gupdate1ca70f6d723b42c;Служба Google Update (gupdate1ca70f6d723b42c); C:Program FilesGoogleUpdateGoogleUpdate.exe [2009-11-29 133104]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv1.1.4322aspnet_state.exe [2003-02-20 32768]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-10-20 182768]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-03 69632]
EOF
8 января, 2010 в 7:26 пп #27777Здравствуйте, добро пожаловать на Spyware-ru форум.
Скачайте OTM by OldTimer кликнув по этой ссылке.
Запустите OTM и в большое поле ввода (заголовок этого поля выделен желтым цветом) скопируйте следующий текст.:reg
[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{71E59D37-D7FC-4ED6-BC1D-D13BE02FE6C5}]
[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{61d03b1c-b54a-11de-a49d-00241d0061ec}]
:files
C:WINDOWStasksWindowsCheck.job
:Commands
[emptytemp]
[Reboot]Проверьте вставленный скрипт, если слева перед директивами появились пробелы, то удалите их, скрипт должен выглядеть так же как в сообщении. Кликните по кнопке MoveIt!. В процессе работы возможна перезагрузка компьютера.
По-завершении работы программы должен будет показан лог. Если лог не будет показан, то его можно найти в папке C:_OTMMovedFiles.Вставьте в ваше ответное сообщение содержимое этого лога. И приложите свежий RSIT лог.
 - 
		АвторСообщения
 
- Для ответа в этой теме необходимо авторизоваться.
 
