- This topic has 1 ответ, 2 участника, and was last updated 15 years, 11 months назад by
.
-
Сообщения
-
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Мюллер at 2009-11-13 07:21:44
Microsoft® Windows Vista™ Home Premium Service Pack 1
System drive C: has 7 GB (7%) free of 100 GB
Total RAM: 3326 MB (70% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:21:46, on 13.11.2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: NormalRunning processes:
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Windowssystem32taskeng.exe
C:WindowsRtHDVCpl.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
C:Program FilesAlwil SoftwareAvast4ashDisp.exe
C:Program FilesHPHP Software UpdatehpwuSchd2.exe
C:Program FilesNokiaNokia PC Suite 6LaunchApplication.exe
C:Program FilesAd MuncherAdMunch.exe
C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe
C:Windowsehomeehtray.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Windowsehomeehmsas.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticCCC.exe
C:UsersМюллерAppDataLocalGoogleChromeApplicationchrome.exe
C:UsersМюллерAppDataLocalGoogleChromeApplicationchrome.exe
C:UsersМюллерAppDataLocalGoogleChromeApplicationchrome.exe
C:UsersМюллерAppDataLocalGoogleChromeApplicationchrome.exe
C:UsersМюллерAppDataLocalGoogleChromeApplicationchrome.exe
C:UsersМюллерDesktopRSIT.exe
C:Program Filestrend microМюллер.exeR0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.rambler.ru/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.rambler.ru/ra/
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 — URLSearchHook: Rambler-Ассистент — {468CD8A9-7C25-45FA-969E-3D925C689DC4} — C:Program FilesRambler AssistantramblertoolbarU5950.dll
O1 — Hosts: ::1 localhost
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll
O3 — Toolbar: Rambler-Ассистент — {468CD8A9-7C25-45FA-969E-3D925C689DC4} — C:Program FilesRambler AssistantramblertoolbarU5950.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O4 — HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 — HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 — HKLM..Run: [StartCCC] «C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe»
O4 — HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 — HKLM..Run: [PCSuiteTrayApplication] C:Program FilesNokiaNokia PC Suite 6LaunchApplication.exe -startup
O4 — HKLM..Run: [Ad Muncher] C:Program FilesAd MuncherAdMunch.exe /bt
O4 — HKCU..Run: [Google Update] «C:UsersМюллерAppDataLocalGoogleUpdateGoogleUpdate.exe» /c
O4 — HKCU..Run: [uTorrent] «C:Program FilesuTorrentuTorrent.exe»
O4 — HKCU..Run: [NevoDRM] «C:ИгрыNevoDRMNevoDRM.exe»
O4 — HKCU..Run: [SUPERAntiSpyware] C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe
O4 — HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exe
O4 — HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe
O4 — HKUSS-1-5-18..Run: [Nokia.PCSync] C:Program FilesNokiaNokia PC Suite 6PcSync2.exe /NoDialog (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [Nokia.PCSync] C:Program FilesNokiaNokia PC Suite 6PcSync2.exe /NoDialog (User ‘Default user’)
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: Add to Google Photos Screensa&ver — res://C:Windowssystem32GPhotos.scr/200
O8 — Extra context menu item: Block frame with Ad Muncher — http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=333N582O&id=menu_ie_frame
O8 — Extra context menu item: Block image with Ad Muncher — http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=333N582O&id=menu_ie_image
O8 — Extra context menu item: Block link with Ad Muncher — http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=333N582O&id=menu_ie_link
O8 — Extra context menu item: Don’t filter page with Ad Muncher — http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=333N582O&id=menu_ie_exclude
O8 — Extra context menu item: Report page to the Ad Muncher developers — http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=333N582O&id=menu_ie_report
O8 — Extra context menu item: Добавить в Rambler-Закладки — res://C:Program FilesRambler AssistantramblertoolbarU5950.dll/zakladki.htm
O8 — Extra context menu item: Найти с помощью Рамблера — res://C:Program FilesRambler AssistantramblertoolbarU5950.dll/search.htm
O8 — Extra context menu item: Перевести с помощью словарей Рамблера — res://C:Program FilesRambler AssistantramblertoolbarU5950.dll/dic.htm
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O12 — Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 — HKLMSystemCCSServicesTcpip..{C5312F4D-1C7B-4C93-AC51-0C6E3A207659}: NameServer = 10.42.100.12 10.42.100.14
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:Program FilesMicrosoft OfficeOffice12GrooveSystemServices.dll
O20 — Winlogon Notify: !SASWinLogon — C:Program FilesSUPERAntiSpywareSASWINLO.dll
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: Ati External Event Utility — ATI Technologies Inc. — C:Windowssystem32Ati2evxx.exe
O23 — Service: avast! Antivirus — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: @dfsrres.dll,-101 (DFSR) — Корпорация Майкрософт — C:Windowssystem32DFSR.exe
O23 — Service: Google Updater Service (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Marvell RAID Event Agent (Marvell RAID) — Unknown owner — C:Program FilesMarvell61xxsvcmvraidsvc.exe
O23 — Service: MRU Web Service (MRUWebService) — Apache Software Foundation — C:Program FilesMarvell61xxApache2binApache.exe
O23 — Service: PnkBstrA — Unknown owner — C:Windowssystem32PnkBstrA.exe
O23 — Service: ServiceLayer — Nokia. — C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 — Service: @%systemroot%system32SearchIndexer.exe,-103 (WSearch) — Корпорация Майкрософт — C:Windowssystem32SearchIndexer.exe—
End of file — 8030 bytes======Scheduled tasks folder======
C:WindowstasksGoogleUpdateTaskUserS-1-5-21-1019601049-4187624012-3535808926-1000Core.job
C:WindowstasksGoogleUpdateTaskUserS-1-5-21-1019601049-4187624012-3535808926-1000UA.job======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx [2001-03-02 37808][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2007-08-24 2212224][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{468CD8A9-7C25-45FA-969E-3D925C689DC4} — Rambler-Ассистент — C:Program FilesRambler AssistantramblertoolbarU5950.dll [2008-12-09 845296]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2009-07-24 5586208][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«Windows Defender»=C:Program FilesWindows DefenderMSASCui.exe [2008-01-21 1008184]
«RtHDVCpl»=C:WindowsRtHDVCpl.exe [2007-03-23 4423680]
«StartCCC»=C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2008-01-21 61440]
«avast!»=C:PROGRA~1ALWILS~1Avast4ashDisp.exe [2009-02-06 81000]
«HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2006-12-10 49152]
«PCSuiteTrayApplication»=C:Program FilesNokiaNokia PC Suite 6LaunchApplication.exe [2007-06-18 271360]
«Ad Muncher»=C:Program FilesAd MuncherAdMunch.exe [2007-01-18 751616][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«Google Update»=C:UsersМюллерAppDataLocalGoogleUpdateGoogleUpdate.exe [2009-08-10 133104]
«uTorrent»=C:Program FilesuTorrentuTorrent.exe [2009-09-05 288048]
«NevoDRM»=C:ИгрыNevoDRMNevoDRM.exe [2008-12-11 41984]
«SUPERAntiSpyware»=C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe [2009-09-15 1998576]
«ehTray.exe»=C:WindowsehomeehTray.exe [2008-01-21 125952]
«WMPNSCFG»=C:Program FilesWindows Media PlayerWMPNSCFG.exe [2008-01-21 202240][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregehTray.exe]
C:WindowsehomeehTray.exe [2008-01-21 125952][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregGrooveMonitor]
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2007-08-24 33648][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregPCSuiteTrayApplication]
C:Program FilesNokiaNokia PC Suite 6LaunchApplication.exe [2007-06-18 271360][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSteam]
C:Program FilesSteamSteam.exe [2009-03-22 1410296][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregWindows Mobile-based device management]
C:WindowsWindowsMobilewmdSync.exe [2008-01-21 215552][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregWMPNSCFG]
C:Program FilesWindows Media PlayerWMPNSCFG.exe [2008-01-21 202240][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:PROGRA~1HPDIGITA~1binhpqtra08.exe [2007-01-02 210520][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Users^Мюллер^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MarvellTrayStartup.lnk]
C:PROGRA~1Marvell61xxtrayRaidTray.bat [2008-09-26 143][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Users^Мюллер^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Вырезка экрана и программа запуска для OneNote 2007.lnk]
C:PROGRA~1MICROS~2Office12ONENOTEM.EXE [2007-08-24 101784][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotify!SASWinLogon]
C:Program FilesSUPERAntiSpywareSASWINLO.dll [2009-09-03 548352][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2007-08-24 2212224]
«{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}»=C:Program FilesSUPERAntiSpywareSASSEH.DLL [2008-05-13 77824]
«{AEB6717E-7E19-11d0-97EE-00C04FD91972}»= [][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«EnableLUA»=0
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«EnableUIADesktopToggle»=0[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDrives»=0[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDrives»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
======List of files/folders created in the last 1 months======
2009-11-09 16:35:41 —-A—- C:WindowsNCLogConfig.ini
2009-11-08 15:15:12 —-D—- C:UsersМюллерAppDataRoamingMedia Player Classic
2009-11-08 15:14:40 —-A—- C:Windowssystem32rmoc3260.dll
2009-11-08 15:14:40 —-A—- C:Windowssystem32pndx5032.dll
2009-11-08 15:14:40 —-A—- C:Windowssystem32pndx5016.dll
2009-11-08 15:14:40 —-A—- C:Windowssystem32pncrt.dll
2009-11-08 15:14:39 —-A—- C:Windowssystem32unrar.dll
2009-11-08 15:14:38 —-A—- C:Windowsavisplitter.ini
2009-11-08 15:14:37 —-A—- C:Windowssystem32yv12vfw.dll
2009-11-08 15:14:37 —-A—- C:Windowssystem32xvidvfw.dll
2009-11-08 15:14:37 —-A—- C:Windowssystem32xvidcore.dll
2009-11-08 15:14:36 —-A—- C:Windowssystem32qt-dx331.dll
2009-11-08 15:14:36 —-A—- C:Windowssystem32dpl100.dll
2009-11-08 15:14:36 —-A—- C:Windowssystem32divx.dll
2009-11-08 15:14:35 —-A—- C:Windowssystem32pthreadGC2.dll
2009-11-08 15:14:35 —-A—- C:Windowssystem32ff_vfw.dll.manifest
2009-11-08 15:14:35 —-A—- C:Windowssystem32ff_vfw.dll
2009-11-08 15:14:33 —-D—- C:UsersМюллерAppDataRoamingReal
2009-11-08 15:14:33 —-D—- C:ProgramDataReal
2009-11-08 15:14:33 —-D—- C:Program FilesK-Lite Codec Pack
2009-11-08 12:10:38 —-A—- C:Windowssystem32regsvr32.exe.log
2009-11-06 06:04:14 —-D—- C:ProgramDataAvery
2009-11-06 06:04:14 —-D—- C:Program FilesAvery Dennison
2009-11-06 05:49:26 —-A—- C:Program FilesEU_ru_DP5_DL.exe
2009-10-31 09:18:18 —-SD—- C:ComboFix
2009-10-30 20:15:23 —-D—- C:Program FilesCommon FilesPX Storage Engine
2009-10-30 20:07:54 —-D—- C:Windowssystem32IOSUBSYS
2009-10-30 20:07:47 —-D—- C:Program FilesGoogle
2009-10-28 06:50:05 —-A—- C:Program Filespicasa3-setup.exe
2009-10-14 05:56:02 —-A—- C:Program FilesXLVIEWER.EXE======List of files/folders modified in the last 1 months======
2009-11-13 07:21:46 —-D—- C:WindowsPrefetch
2009-11-13 07:21:44 —-D—- C:Program Filestrend micro
2009-11-13 07:00:17 —-SHD—- C:System Volume Information
2009-11-13 06:20:21 —-D—- C:WindowsSystem32
2009-11-13 06:20:21 —-D—- C:Windowsinf
2009-11-13 06:20:21 —-A—- C:Windowssystem32PerfStringBackup.INI
2009-11-13 06:19:49 —-D—- C:Windowstemp
2009-11-13 06:18:48 —-D—- C:UsersМюллерAppDataRoaminguTorrent
2009-11-09 16:39:51 —-D—- C:UsersМюллерAppDataRoamingImage Zone Express
2009-11-09 16:35:41 —-D—- C:Windows
2009-11-09 13:20:25 —-D—- C:ProgramDataMicrosoft Help
2009-11-08 15:15:07 —-RD—- C:Фильмы
2009-11-08 15:14:33 —-RD—- C:Program Files
2009-11-08 15:14:33 —-D—- C:ProgramData
2009-11-06 06:04:18 —-HD—- C:Program FilesInstallShield Installation Information
2009-11-06 06:04:16 —-SHD—- C:WindowsInstaller
2009-11-06 06:04:16 —-D—- C:Config.Msi
2009-11-06 06:04:14 —-RSD—- C:WindowsFonts
2009-11-04 10:21:12 —-D—- C:Windowssystem32catroot2
2009-11-04 09:23:43 —-A—- C:Windowssystem32PnkBstrB.exe
2009-11-04 09:22:32 —-D—- C:Program FilesSteam
2009-11-04 07:59:27 —-D—- C:WindowsTasks
2009-11-04 07:59:27 —-D—- C:Windowssystem32Tasks
2009-11-01 10:39:23 —-A—- C:Windowswin.ini
2009-11-01 10:29:29 —-D—- C:Incomplete
2009-10-31 09:18:22 —-D—- C:Windowssystem32ru-RU
2009-10-31 09:18:20 —-D—- C:WindowsERDNT
2009-10-31 09:18:18 —-D—- C:Windowssystem32drivers
2009-10-30 20:15:23 —-D—- C:Program FilesCommon Files
2009-10-17 05:25:41 —-D—- C:Downloads
2009-10-17 05:25:19 —-D—- C:FileLists
2009-10-14 05:57:34 —-D—- C:Program FilesMicrosoft Office======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 aswRdr;aswRdr; C:Windowssystem32driversaswRdr.sys [2009-02-06 23152]
R1 aswSP;avast! Self Protection; C:Windowssystem32driversaswSP.sys [2009-02-06 114768]
R1 aswTdi;avast! Network Shield Support; C:Windowssystem32driversaswTdi.sys [2009-02-06 51376]
R1 SASDIFSV;SASDIFSV; ??C:Program FilesSUPERAntiSpywareSASDIFSV.SYS [2009-09-15 9968]
R1 SASKUTIL;SASKUTIL; ??C:Program FilesSUPERAntiSpywareSASKUTIL.sys [2009-09-15 74480]
R2 aswFsBlk;aswFsBlk; C:Windowssystem32DRIVERSaswFsBlk.sys [2009-02-06 20560]
R2 aswMonFlt;aswMonFlt; C:Windowssystem32DRIVERSaswMonFlt.sys [2009-02-06 51792]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller; C:Windowssystem32DRIVERSl160x86.sys [2007-12-17 46592]
R3 atikmdag;atikmdag; C:Windowssystem32DRIVERSatikmdag.sys [2008-02-26 3520512]
R3 HdAudAddService;Драйвер функции UAA для службы High Definition Audio (Microsoft), версия 1.1; C:Windowssystem32driversHdAudio.sys [2006-11-02 235520]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:Windowssystem32driversRTKVHDA.sys [2007-03-26 1761696]
R3 MTsensor;ATK0110 ACPI UTILITY; C:Windowssystem32DRIVERSASACPI.sys [2006-10-19 7680]
R3 SASENUM;SASENUM; ??C:Program FilesSUPERAntiSpywareSASENUM.SYS [2009-09-15 7408]
S3 BthEnum;Драйвер блока запроса Bluetooth; C:Windowssystem32DRIVERSBthEnum.sys [2008-01-21 19456]
S3 BthPan;Устройства Bluetooth (личной сети); C:Windowssystem32DRIVERSbthpan.sys [2008-01-21 92160]
S3 BTHPORT;Драйвер порта Bluetooth; C:WindowsSystem32DriversBTHport.sys [2008-01-21 219648]
S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:WindowsSystem32DriversBTHUSB.sys [2008-01-21 29184]
S3 catchme;catchme; ??C:Users1F06~1AppDataLocalTempcatchme.sys []
S3 Dot4;Драйвер MS IEEE-1284.4; C:Windowssystem32DRIVERSDot4.sys [2008-01-21 131584]
S3 Dot4Print;Драйвер класса принтеров для IEEE-1284.4; C:Windowssystem32DRIVERSDot4Prt.sys [2008-01-21 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:Windowssystem32DRIVERSdot4usb.sys [2008-01-21 36864]
S3 drmkaud;Звуковой дешифратор DRM ядра системы; C:Windowssystem32driversdrmkaud.sys [2008-01-21 5632]
S3 MODEMCSA;Устройство фильтрации потока Unimodem; C:Windowssystem32driversMODEMCSA.sys [2008-01-21 18432]
S3 MSKSSRV;Представитель служб потоков Microsoft; C:Windowssystem32driversMSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Посредник синхронизации потоков Microsoft; C:Windowssystem32driversMSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Представитель диспетчера качества потоков Microsoft; C:Windowssystem32driversMSPQM.sys [2008-01-21 5504]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:Windowssystem32driversMSTEE.sys [2008-01-21 6016]
S3 nmwcd;Nokia USB Phone Parent; C:Windowssystem32driversnmwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; C:Windowssystem32driversnmwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; C:Windowssystem32driversnmwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; C:Windowssystem32driversnmwcdcm.sys [2007-02-22 12288]
S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:Windowssystem32DRIVERSrfcomm.sys [2008-01-21 49664]
S3 usb_rndisx;Адаптер USB RNDIS; C:Windowssystem32DRIVERSusb8023x.sys [2008-01-21 15872]
S3 usbscan;Драйвер USB-сканера; C:Windowssystem32DRIVERSusbscan.sys [2008-01-21 35328]
S3 WUDFRd;WUDFRd; C:Windowssystem32DRIVERSWUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:Windowssystem32driverserrdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:Windowssystem32driversmegasr.sys [2008-01-21 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:Windowssystem32driverswmiacpi.sys [2008-01-21 11264]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2009-02-06 18752]
R2 Ati External Event Utility;Ati External Event Utility; C:Windowssystem32Ati2evxx.exe [2008-02-26 655360]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2009-02-06 138680]
R2 BthServ;@%SystemRoot%System32bthserv.dll,-101; C:Windowssystem32svchost.exe [2008-01-21 21504]
R2 hpqddsvc;Служба HP CUE DeviceDiscovery; C:Windowssystem32svchost.exe [2008-01-21 21504]
R2 Marvell RAID;Marvell RAID Event Agent; C:Program FilesMarvell61xxsvcmvraidsvc.exe [2007-06-12 61440]
R2 Net Driver HPZ12;Net Driver HPZ12; C:WindowsSystem32svchost.exe [2008-01-21 21504]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WindowsSystem32svchost.exe [2008-01-21 21504]
R2 PnkBstrA;PnkBstrA; C:Windowssystem32PnkBstrA.exe [2009-08-04 75064]
R2 RapiMgr;@%windir%WindowsMobilerapimgr.dll,-104; C:Windowssystem32svchost.exe [2008-01-21 21504]
R2 WcesComm;@%windir%WindowsMobilewcescomm.dll,-40079; C:Windowssystem32svchost.exe [2008-01-21 21504]
R3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2009-02-06 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2009-02-06 352920]
R3 hpqcxs08;hpqcxs08; C:Windowssystem32svchost.exe [2008-01-21 21504]
R3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2007-06-15 300544]
S2 MRUWebService;MRU Web Service; C:Program FilesMarvell61xxApache2binApache.exe [2007-05-23 20539]
S3 gusvc;Google Updater Service; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2008-11-20 136120]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-03 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2007-08-24 68464]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
EOF
Здравствуйте, добро пожаловать на Spyware-ru форум.
Выполним дополнительную проверку.
Скачайте программу Combofix. Закройте все открытые окна и запустите эту программу.
После выполнения будет создан лог файл, пожалуйста вставьте его в ваш ответ.
- Для ответа в этой теме необходимо авторизоваться.
