Вирус отключающий интернет — такая же проблема

[Onil]

Здрасте. У меня такая же проблема что описано в начале системы. Вроде вирусы я нашел это два файла:
C:DOCUME~1KsiroNLOCALS~1TempWER8b84.dir00svchost.exe.mdmp
C:DOCUME~1KsiroNLOCALS~1TempWER8b84.dir00appcompat.txt
они после перезагрузки выдают ошибку. И винда за крывает программу Generic Host Processfor win32 Services.
Я проделал все как тут было описанно выше вот логи:
ComboFix 09-09-14.02 — onil 15.09.2009 20:27.2.2 — NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1251.7.1049.18.2047.1598 [GMT 5:00]
Running from: c:documents and settingsonilРабочий столComboFix.exe
Command switches used :: c:documents and settingsonilРабочий столCFScript.txt
AV: Антивирус Касперского *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.

((((((((((((((((((((((((( Files Created from 2009-08-15 to 2009-09-15 )))))))))))))))))))))))))))))))
.

2009-09-15 14:02 . 2009-09-15 14:12

---

d

---

w- c:program filestrend micro
2009-09-15 14:02 . 2009-09-15 14:02

---

d

---

w- C:rsit
2009-09-15 09:51 . 2009-09-15 09:51

---

d

---

w- c:documents and settingsAll UsersApplication DataGRETECH
2009-09-15 09:51 . 2009-09-15 09:51

---

d

---

w- c:documents and settingsonilApplication DataGRETECH
2009-09-15 09:51 . 2009-09-15 09:51

---

d

---

w- c:program filesGRETECH
2009-09-15 09:30 . 2009-09-15 09:30

---

d

---

w- c:documents and settingsonilLocal SettingsApplication DataScansoft
2009-09-15 07:08 . 1997-10-14 00:19 11776 —-a-w- c:windowssystem32pmsbfn32.dll
2009-09-15 07:07 . 2009-09-15 07:08

---

d

---

w- c:program filesCommon FilesPDFView
2009-09-15 07:07 . 2009-09-15 07:07

---

d

---

w- c:windowssystem32Color
2009-09-15 07:07 . 2009-09-15 07:07

---

d

---

w- c:program filesNewSoft
2009-09-15 07:07 . 2009-09-15 07:07

---

d

---

w- c:documents and settingsAll UsersApplication DataInstallShield
2009-09-15 07:07 . 2009-09-15 07:07

---

d

---

w- c:documents and settingsonilApplication DataScanSoft
2009-09-15 07:06 . 2009-09-15 07:06

---

d

---

w- c:documents and settingsAll UsersApplication DataScanSoft
2009-09-15 07:06 . 2009-09-15 07:06

---

d

---

w- c:program filesCommon FilesScanSoft Shared
2009-09-15 07:05 . 2009-09-15 07:05

---

d

---

w- c:program filesScanSoft
2009-09-15 07:05 . 2005-06-10 08:39 53248 —-a-w- c:windowssystem32CNAS0MMK.DLL
2009-09-15 07:05 . 2004-08-03 18:01 25856 -c—a-w- c:windowssystem32dllcacheusbprint.sys
2009-09-15 07:05 . 2004-08-03 18:01 25856 —-a-w- c:windowssystem32driversusbprint.sys
2009-09-15 07:04 . 2007-04-23 06:05 81920 —-a-w- c:windowssystem32CNCLSI31.DLL
2009-09-15 07:04 . 2007-04-23 06:05 106496 —-a-w- c:windowssystem32CNCLSD31.DLL
2009-09-15 07:04 . 2007-04-23 06:05 77824 —-a-w- c:windowssystem32CNCLSC31.DLL
2009-09-15 07:04 . 2007-04-23 06:05 77824 —-a-w- c:windowssystem32CNCLST31.DLL
2009-09-15 07:04 . 2007-04-23 06:05 98304 —-a-w- c:windowssystem32CNCLSU31.DLL
2009-09-15 07:04 . 2007-04-23 06:06 49152 —-a-w- c:windowssystem32cncilsc.dll
2009-09-15 07:04 . 2007-04-23 06:05 73728 —-a-w- c:windowssystem32CNCL4010.DLL
2009-09-15 07:04 . 2007-04-23 06:05 208896 —-a-w- c:windowssystem32CNCC4010.DLL
2009-09-15 07:04 . 2007-04-23 06:05 69632 —-a-w- c:windowssystem32CNCI4010.DLL
2009-09-15 07:04 . 2004-08-03 17:58 15104 -c—a-w- c:windowssystem32dllcacheusbscan.sys
2009-09-15 07:04 . 2004-08-03 17:58 15104 —-a-w- c:windowssystem32driversusbscan.sys
2009-09-15 07:03 . 2009-09-15 07:03

---

d

---

w- c:program filesCanon
2009-09-15 07:02 . 2009-09-15 07:02

---

d—h—w- c:windowssystem32CanonMF Uninstaller Information
2009-09-15 07:02 . 2009-09-15 07:02

---

d

---

w- C:CanonMF
2009-09-15 04:58 . 2009-09-15 04:58

---

d

---

w- c:documents and settingsAll UsersApplication DatanView_Profiles
2009-09-15 03:32 . 2008-02-07 12:10

---

d

---

w- C:ckis

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-15 15:34 . 2009-09-14 14:37 550176 —sha-w- c:windowssystem32driversfidbox.dat
2009-09-15 15:33 . 2009-09-14 14:37 85280 —sha-w- c:windowssystem32driversfidbox2.dat
2009-09-15 15:26 . 2009-09-14 15:17

---

d

---

w- c:program filesUNIPAY
2009-09-15 15:25 . 2009-09-14 14:37 32 —sha-w- c:windowssystem32driversfidbox.idx
2009-09-15 15:21 . 2003-08-17 23:00 49750 —-a-w- c:windowssystem32perfc019.dat
2009-09-15 15:21 . 2003-08-17 23:00 346690 —-a-w- c:windowssystem32perfh019.dat
2009-09-15 15:16 . 2009-09-14 14:37 9728 —sha-w- c:windowssystem32driversfidbox2.idx
2009-09-15 15:09 . 2009-09-14 14:37

---

d

---

w- c:documents and settingsAll UsersApplication DataKaspersky Lab
2009-09-15 08:59 . 2009-09-14 14:33

---

d—h—w- c:program filesInstallShield Installation Information
2009-09-15 07:06 . 2009-09-14 14:33

---

d

---

w- c:program filesCommon FilesInstallShield
2009-09-15 04:59 . 2009-09-14 14:27 42168 —-a-w- c:documents and settingsonilLocal SettingsApplication DataGDIPFONTCACHEV1.DAT
2009-09-15 03:40 . 2009-09-14 15:03

---

d

---

w- c:program filesTrojan Remover
2009-09-14 20:58 . 2007-10-31 10:41 112144 —-a-w- c:windowssystem32driverskl1.sys
2009-09-14 20:57 . 2009-09-14 14:37 95259 —-a-w- c:windowssystem32driversklick.dat
2009-09-14 20:57 . 2009-09-14 14:37 107547 —-a-w- c:windowssystem32driversklin.dat
2009-09-14 19:09 . 2009-09-14 15:06

---

d

---

w- c:documents and settingsonilApplication DataAIMP
2009-09-14 15:29 . 2009-09-14 15:29

---

d

---

w- c:documents and settingsonilApplication DataMedia Player Classic
2009-09-14 15:14 . 2009-09-14 15:14

---

d

---

w- c:program filesDivX
2009-09-14 15:10 . 2009-09-14 15:10

---

d

---

w- c:program filesMicrosoft.NET
2009-09-14 15:08 . 2009-09-14 15:08

---

d

---

w- c:documents and settingsAll UsersApplication DataCyberLink
2009-09-14 15:08 . 2009-09-14 15:07

---

d

---

w- c:program filesCyberLink
2009-09-14 15:06 . 2009-09-14 15:06

---

d

---

w- c:documents and settingsAll UsersApplication DataApple Computer
2009-09-14 15:06 . 2009-09-14 15:06

---

d

---

w- c:program filesK-Lite Codec Pack
2009-09-14 15:06 . 2009-09-14 15:06

---

d

---

w- c:program filesAIMP2
2009-09-14 15:03 . 2009-09-14 15:03

---

d

---

w- c:documents and settingsAll UsersApplication DataSimply Super Software
2009-09-14 15:03 . 2009-09-14 15:03

---

d

---

w- c:documents and settingsonilApplication DataSimply Super Software
2009-09-14 14:49 . 2009-09-14 14:49

---

d

---

w- c:program filesAtheros
2009-09-14 14:49 . 2009-09-14 14:49

---

d

---

w- c:documents and settingsAll UsersApplication DataAtheros
2009-09-14 14:49 . 2009-09-14 14:44

---

d

---

w- c:program filesASUS
2009-09-14 14:46 . 2009-09-14 14:33

---

d

---

w- c:program filesRealtek
2009-09-14 14:44 . 2009-09-14 14:44

---

d

---

w- c:program filesATKGFNEX
2009-09-14 14:43 . 2009-09-14 14:43

---

d

---

w- c:documents and settingsonilApplication DataInstallShield
2009-09-14 14:37 . 2009-09-14 14:37

---

d

---

w- c:program filesKaspersky Lab
2009-09-14 14:23 . 2009-09-14 14:23

---

d

---

w- c:program filesmicrosoft frontpage
2009-09-14 14:20 . 2009-09-14 14:20 22564 —-a-w- c:windowssystem32emptyregdb.dat
.

((((((((((((((((((((((((((((( SnapShot@2009-09-15_15.15.14 )))))))))))))))))))))))))))))))))))))))))
.
— 2003-08-17 23:00 . 2009-09-15 15:13 40326 c:windowssystem32perfc009.dat
+ 2003-08-17 23:00 . 2009-09-15 15:21 40326 c:windowssystem32perfc009.dat
+ 2003-08-17 23:00 . 2009-09-15 15:21 311938 c:windowssystem32perfh009.dat
— 2003-08-17 23:00 . 2009-09-15 15:13 311938 c:windowssystem32perfh009.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2009-04-15 13750272]
«NvMediaCenter»=»c:windowssystem32NvMcTray.dll» [2009-04-15 86016]
«MsgTranAgt»=»c:program filesASUSATK HotkeyMsgTranAgt.exe» [2008-08-18 117304]
«HControlUser»=»c:program filesASUSATK HotkeyHControlUser.exe» [2008-08-18 98304]
«ATKHOTKEY»=»c:program filesASUSATK HotkeyHControl.exe» [2009-03-20 174648]
«ATKMEDIA»=»c:program filesASUSATK MediaDMedia.exe» [2009-04-20 159744]
«ATKOSD2″=»c:program filesASUSATKOSD2ATKOSD2.exe» [2009-03-04 8392704]
«Power4Gear»=»c:program filesASUSPower4 GearBatteryLife.exe» [2009-03-03 92728]
«ACMON»=»c:program filesASUSSplendidACMON.exe» [2008-09-30 851968]
«TrojanScanner»=»c:program filesTrojan RemoverTrjscan.exe» [2009-03-30 1213320]
«RemoteControl»=»c:program filesCyberLinkPowerDVDPDVDServ.exe» [2005-12-07 30208]
«LanguageShortcut»=»c:program filesCyberLinkPowerDVDLanguageLanguage.exe» [2006-04-13 49152]
«SSBkgdUpdate»=»c:program filesCommon FilesScansoft SharedSSBkgdUpdateSSBkgdupdate.exe» [2006-09-28 185896]
«OpwareSE4″=»c:program filesScanSoftOmniPageSE4.0OpwareSE4.exe» [2006-10-11 75304]
«nwiz»=»nwiz.exe» — c:windowssystem32nwiz.exe [2009-04-15 1657376]
«RTHDCPL»=»RTHDCPL.EXE» — c:windowsRTHDCPL.EXE [2009-03-27 17567744]

[HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»c:windowssystem32CTFMON.EXE» [2003-08-17 15360]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity center]
«UpdatesDisableNotify»=dword:00000001

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoringKasperskyAntiVirus]
«DisableMonitoring»=dword:00000001

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofile]
«EnableFirewall»= 0 (0x0)

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«%windir%\system32\sessmgr.exe»=

R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:windowssystem32driversklim5.sys [13.12.2007 15:28 24592]
S3 Ambfilt;Ambfilt;c:windowssystem32driversAmbfilt.sys [14.09.2009 19:33 1684736]
.
.

---

Supplementary Scan

---

.
uStart Page = about:blank
IE: &Экспорт в Microsoft Excel — c:progra~1MICROS~2OFFICE11EXCEL.EXE/3000
TCP: {3C87ABA8-0708-422D-BEC8-127CF458A9B5} = 192.168.10.209 192.168.10.209
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-15 20:33
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.

---

DLLs Loaded Under Running Processes

---

— — — — — — — > ‘winlogon.exe'(656)
c:program filesKaspersky LabKaspersky Anti-Virus 7.0miscr3.dll
c:windowssystem32klogon.dll

— — — — — — — > ‘lsass.exe'(712)
c:program filesKaspersky LabKaspersky Anti-Virus 7.0dnsq.dll
c:program filesKaspersky LabKaspersky Anti-Virus 7.0miscr3.dll
c:program filesKaspersky LabKaspersky Anti-Virus 7.0fssync.dll

— — — — — — — > ‘explorer.exe'(952)
c:program filesScanSoftOmniPageSE4.0OpHookSE4.dll
c:program filesKaspersky LabKaspersky Anti-Virus 7.0miscr3.dll
c:program filesKaspersky LabKaspersky Anti-Virus 7.0fssync.dll
c:program filesKaspersky LabKaspersky Anti-Virus 7.0scrchpg.dll
c:windowssystem32msi.dll
.
Completion time: 2009-09-15 20:35
ComboFix-quarantined-files.txt 2009-09-15 15:35
ComboFix2.txt 2009-09-15 15:16

Pre-Run: 21 218 332 672 байт свободно
Post-Run: 21 183 250 432 байт свободно

161

это после первой операции а вот второй:
ComboFix 09-09-14.02 — onil 15.09.2009 20:41.3.2 — NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1251.7.1049.18.2047.1592 [GMT 5:00]
Running from: c:documents and settingsonilРабочий столComboFix.exe
Command switches used :: c:documents and settingsonilРабочий столCFScript.txt
AV: Антивирус Касперского *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.

((((((((((((((((((((((((( Files Created from 2009-08-15 to 2009-09-15 )))))))))))))))))))))))))))))))
.

2009-09-15 14:02 . 2009-09-15 14:12

---

d

---

w- c:program filestrend micro
2009-09-15 14:02 . 2009-09-15 14:02

---

d

---

w- C:rsit
2009-09-15 09:51 . 2009-09-15 09:51

---

d

---

w- c:documents and settingsAll UsersApplication DataGRETECH
2009-09-15 09:51 . 2009-09-15 09:51

---

d

---

w- c:documents and settingsonilApplication DataGRETECH
2009-09-15 09:51 . 2009-09-15 09:51

---

d

---

w- c:program filesGRETECH
2009-09-15 09:30 . 2009-09-15 09:30

---

d

---

w- c:documents and settingsonilLocal SettingsApplication DataScansoft
2009-09-15 07:08 . 1997-10-14 00:19 11776 —-a-w- c:windowssystem32pmsbfn32.dll
2009-09-15 07:07 . 2009-09-15 07:08

---

d

---

w- c:program filesCommon FilesPDFView
2009-09-15 07:07 . 2009-09-15 07:07

---

d

---

w- c:windowssystem32Color
2009-09-15 07:07 . 2009-09-15 07:07

---

d

---

w- c:program filesNewSoft
2009-09-15 07:07 . 2009-09-15 07:07

---

d

---

w- c:documents and settingsAll UsersApplication DataInstallShield
2009-09-15 07:07 . 2009-09-15 07:07

---

d

---

w- c:documents and settingsonilApplication DataScanSoft
2009-09-15 07:06 . 2009-09-15 07:06

---

d

---

w- c:documents and settingsAll UsersApplication DataScanSoft
2009-09-15 07:06 . 2009-09-15 07:06

---

d

---

w- c:program filesCommon FilesScanSoft Shared
2009-09-15 07:05 . 2009-09-15 07:05

---

d

---

w- c:program filesScanSoft
2009-09-15 07:05 . 2005-06-10 08:39 53248 —-a-w- c:windowssystem32CNAS0MMK.DLL
2009-09-15 07:05 . 2004-08-03 18:01 25856 -c—a-w- c:windowssystem32dllcacheusbprint.sys
2009-09-15 07:05 . 2004-08-03 18:01 25856 —-a-w- c:windowssystem32driversusbprint.sys
2009-09-15 07:04 . 2007-04-23 06:05 81920 —-a-w- c:windowssystem32CNCLSI31.DLL
2009-09-15 07:04 . 2007-04-23 06:05 106496 —-a-w- c:windowssystem32CNCLSD31.DLL
2009-09-15 07:04 . 2007-04-23 06:05 77824 —-a-w- c:windowssystem32CNCLSC31.DLL
2009-09-15 07:04 . 2007-04-23 06:05 77824 —-a-w- c:windowssystem32CNCLST31.DLL
2009-09-15 07:04 . 2007-04-23 06:05 98304 —-a-w- c:windowssystem32CNCLSU31.DLL
2009-09-15 07:04 . 2007-04-23 06:06 49152 —-a-w- c:windowssystem32cncilsc.dll
2009-09-15 07:04 . 2007-04-23 06:05 73728 —-a-w- c:windowssystem32CNCL4010.DLL
2009-09-15 07:04 . 2007-04-23 06:05 208896 —-a-w- c:windowssystem32CNCC4010.DLL
2009-09-15 07:04 . 2007-04-23 06:05 69632 —-a-w- c:windowssystem32CNCI4010.DLL
2009-09-15 07:04 . 2004-08-03 17:58 15104 -c—a-w- c:windowssystem32dllcacheusbscan.sys
2009-09-15 07:04 . 2004-08-03 17:58 15104 —-a-w- c:windowssystem32driversusbscan.sys
2009-09-15 07:03 . 2009-09-15 07:03

---

d

---

w- c:program filesCanon
2009-09-15 07:02 . 2009-09-15 07:02

---

d—h—w- c:windowssystem32CanonMF Uninstaller Information
2009-09-15 07:02 . 2009-09-15 07:02

---

d

---

w- C:CanonMF
2009-09-15 04:58 . 2009-09-15 04:58

---

d

---

w- c:documents and settingsAll UsersApplication DatanView_Profiles
2009-09-15 03:32 . 2008-02-07 12:10

---

d

---

w- C:ckis

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-15 15:47 . 2009-09-14 15:17

---

d

---

w- c:program filesUNIPAY
2009-09-15 15:47 . 2009-09-14 14:37 100384 —sha-w- c:windowssystem32driversfidbox.dat
2009-09-15 15:47 . 2009-09-14 14:37 32 —sha-w- c:windowssystem32driversfidbox.idx
2009-09-15 15:46 . 2009-09-14 14:37 89632 —sha-w- c:windowssystem32driversfidbox2.dat
2009-09-15 15:21 . 2003-08-17 23:00 49750 —-a-w- c:windowssystem32perfc019.dat
2009-09-15 15:21 . 2003-08-17 23:00 346690 —-a-w- c:windowssystem32perfh019.dat
2009-09-15 15:16 . 2009-09-14 14:37 9728 —sha-w- c:windowssystem32driversfidbox2.idx
2009-09-15 15:09 . 2009-09-14 14:37

---

d

---

w- c:documents and settingsAll UsersApplication DataKaspersky Lab
2009-09-15 08:59 . 2009-09-14 14:33

---

d—h—w- c:program filesInstallShield Installation Information
2009-09-15 07:06 . 2009-09-14 14:33

---

d

---

w- c:program filesCommon FilesInstallShield
2009-09-15 04:59 . 2009-09-14 14:27 42168 —-a-w- c:documents and settingsonilLocal SettingsApplication DataGDIPFONTCACHEV1.DAT
2009-09-15 03:40 . 2009-09-14 15:03

---

d

---

w- c:program filesTrojan Remover
2009-09-14 20:58 . 2007-10-31 10:41 112144 —-a-w- c:windowssystem32driverskl1.sys
2009-09-14 20:57 . 2009-09-14 14:37 95259 —-a-w- c:windowssystem32driversklick.dat
2009-09-14 20:57 . 2009-09-14 14:37 107547 —-a-w- c:windowssystem32driversklin.dat
2009-09-14 19:09 . 2009-09-14 15:06

---

d

---

w- c:documents and settingsonilApplication DataAIMP
2009-09-14 15:29 . 2009-09-14 15:29

---

d

---

w- c:documents and settingsonilApplication DataMedia Player Classic
2009-09-14 15:14 . 2009-09-14 15:14

---

d

---

w- c:program filesDivX
2009-09-14 15:10 . 2009-09-14 15:10

---

d

---

w- c:program filesMicrosoft.NET
2009-09-14 15:08 . 2009-09-14 15:08

---

d

---

w- c:documents and settingsAll UsersApplication DataCyberLink
2009-09-14 15:08 . 2009-09-14 15:07

---

d

---

w- c:program filesCyberLink
2009-09-14 15:06 . 2009-09-14 15:06

---

d

---

w- c:documents and settingsAll UsersApplication DataApple Computer
2009-09-14 15:06 . 2009-09-14 15:06

---

d

---

w- c:program filesK-Lite Codec Pack
2009-09-14 15:06 . 2009-09-14 15:06

---

d

---

w- c:program filesAIMP2
2009-09-14 15:03 . 2009-09-14 15:03

---

d

---

w- c:documents and settingsAll UsersApplication DataSimply Super Software
2009-09-14 15:03 . 2009-09-14 15:03

---

d

---

w- c:documents and settingsonilApplication DataSimply Super Software
2009-09-14 14:49 . 2009-09-14 14:49

---

d

---

w- c:program filesAtheros
2009-09-14 14:49 . 2009-09-14 14:49

---

d

---

w- c:documents and settingsAll UsersApplication DataAtheros
2009-09-14 14:49 . 2009-09-14 14:44

---

d

---

w- c:program filesASUS
2009-09-14 14:46 . 2009-09-14 14:33

---

d

---

w- c:program filesRealtek
2009-09-14 14:44 . 2009-09-14 14:44

---

d

---

w- c:program filesATKGFNEX
2009-09-14 14:43 . 2009-09-14 14:43

---

d

---

w- c:documents and settingsonilApplication DataInstallShield
2009-09-14 14:37 . 2009-09-14 14:37

---

d

---

w- c:program filesKaspersky Lab
2009-09-14 14:23 . 2009-09-14 14:23

---

d

---

w- c:program filesmicrosoft frontpage
2009-09-14 14:20 . 2009-09-14 14:20 22564 —-a-w- c:windowssystem32emptyregdb.dat
.

((((((((((((((((((((((((((((( SnapShot@2009-09-15_15.15.14 )))))))))))))))))))))))))))))))))))))))))
.
— 2003-08-17 23:00 . 2009-09-15 15:13 40326 c:windowssystem32perfc009.dat
+ 2003-08-17 23:00 . 2009-09-15 15:21 40326 c:windowssystem32perfc009.dat
+ 2003-08-17 23:00 . 2009-09-15 15:21 311938 c:windowssystem32perfh009.dat
— 2003-08-17 23:00 . 2009-09-15 15:13 311938 c:windowssystem32perfh009.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2009-04-15 13750272]
«NvMediaCenter»=»c:windowssystem32NvMcTray.dll» [2009-04-15 86016]
«MsgTranAgt»=»c:program filesASUSATK HotkeyMsgTranAgt.exe» [2008-08-18 117304]
«HControlUser»=»c:program filesASUSATK HotkeyHControlUser.exe» [2008-08-18 98304]
«ATKHOTKEY»=»c:program filesASUSATK HotkeyHControl.exe» [2009-03-20 174648]
«ATKMEDIA»=»c:program filesASUSATK MediaDMedia.exe» [2009-04-20 159744]
«ATKOSD2″=»c:program filesASUSATKOSD2ATKOSD2.exe» [2009-03-04 8392704]
«Power4Gear»=»c:program filesASUSPower4 GearBatteryLife.exe» [2009-03-03 92728]
«ACMON»=»c:program filesASUSSplendidACMON.exe» [2008-09-30 851968]
«TrojanScanner»=»c:program filesTrojan RemoverTrjscan.exe» [2009-03-30 1213320]
«RemoteControl»=»c:program filesCyberLinkPowerDVDPDVDServ.exe» [2005-12-07 30208]
«LanguageShortcut»=»c:program filesCyberLinkPowerDVDLanguageLanguage.exe» [2006-04-13 49152]
«SSBkgdUpdate»=»c:program filesCommon FilesScansoft SharedSSBkgdUpdateSSBkgdupdate.exe» [2006-09-28 185896]
«OpwareSE4″=»c:program filesScanSoftOmniPageSE4.0OpwareSE4.exe» [2006-10-11 75304]
«nwiz»=»nwiz.exe» — c:windowssystem32nwiz.exe [2009-04-15 1657376]
«RTHDCPL»=»RTHDCPL.EXE» — c:windowsRTHDCPL.EXE [2009-03-27 17567744]

[HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»c:windowssystem32CTFMON.EXE» [2003-08-17 15360]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity center]
«UpdatesDisableNotify»=dword:00000001

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoringKasperskyAntiVirus]
«DisableMonitoring»=dword:00000001

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofile]
«EnableFirewall»= 0 (0x0)

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«%windir%\system32\sessmgr.exe»=

R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:windowssystem32driversklim5.sys [13.12.2007 15:28 24592]
S3 Ambfilt;Ambfilt;c:windowssystem32driversAmbfilt.sys [14.09.2009 19:33 1684736]
.
.

---

Supplementary Scan

---

.
uStart Page = about:blank
IE: &Экспорт в Microsoft Excel — c:progra~1MICROS~2OFFICE11EXCEL.EXE/3000
TCP: {3C87ABA8-0708-422D-BEC8-127CF458A9B5} = 192.168.10.209 192.168.10.209
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-15 20:47
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.

---

DLLs Loaded Under Running Processes

---

— — — — — — — > ‘winlogon.exe'(656)
c:program filesKaspersky LabKaspersky Anti-Virus 7.0miscr3.dll
c:windowssystem32klogon.dll

— — — — — — — > ‘lsass.exe'(712)
c:program filesKaspersky LabKaspersky Anti-Virus 7.0dnsq.dll
c:program filesKaspersky LabKaspersky Anti-Virus 7.0miscr3.dll
c:program filesKaspersky LabKaspersky Anti-Virus 7.0fssync.dll

— — — — — — — > ‘explorer.exe'(3372)
c:program filesScanSoftOmniPageSE4.0OpHookSE4.dll
c:program filesKaspersky LabKaspersky Anti-Virus 7.0miscr3.dll
c:program filesKaspersky LabKaspersky Anti-Virus 7.0fssync.dll
c:program filesKaspersky LabKaspersky Anti-Virus 7.0scrchpg.dll
c:windowssystem32msi.dll
.
Completion time: 2009-09-15 20:49
ComboFix-quarantined-files.txt 2009-09-15 15:48
ComboFix2.txt 2009-09-15 15:35
ComboFix3.txt 2009-09-15 15:16

Pre-Run: 21 186 043 904 байт свободно
Post-Run: 21 171 269 632 байт свободно

162

Прошу помочь а то если честно надоело уже 4 раза винду грохал и все равно такая байда. Почти все антивирусы испробовал ничто не помогает.

[Onil]

Выше указанные действия не помогли прошу помочь в проблеме ! Как можно скорее. Очень мешает работе !

[Admin]

Здравствуйте, добро пожаловать на Spyware-ru форум.

уже 4 раза винду грохал и все равно такая байда.

И сразу после переустановки Windows проблема возникает снова ?

[Автор]

Сообщения