- This topic has 1 ответ, 2 участника, and was last updated 15 years, 9 months назад by
.
-
Сообщения
-
ребята помогите не периодично всплывает окно с рекламой есть кнопка закрыть , но когда на неё нажимаеш появляется таймер 60сек приходится ждать
Logfile of random’s system information tool 1.06 (written by random/random)
Run by жека at 2010-01-21 15:04:07
Microsoft Windows XP Professional Service Pack 3
System drive C: has 40 GB (64%) free of 62 GB
Total RAM: 2046 MB (53% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:04:08, on 21.01.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesLavasoftAd-AwareAAWService.exe
C:WINDOWSsystem32Ati2evxx.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program FilesICQ6ToolbarICQ Service.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesLavasoftAd-AwareAAWTray.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesDAEMON Tools Litedaemon.exe
C:Program FilesPRMT8PRMTEDEDLauncher.exe
C:Program FilesCommon FilesYandexYupdateyupdate.exe
C:Program FilesDownload Masterdmaster.exe
C:Program FilesSteamSteam.exe
C:Program FilesICQ6.5ICQ.exe
C:Program FilesPRMT8PRMTEDprmedsvr.exe
C:Documents and SettingsжекаМои документыDownloadsReal DesktopReal DesktopReal Desktop.exe
C:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
C:Program FilesIObitAdvanced SystemCare 3AWC.exe
C:Program FilesSpyware Process Detectorspd320.exe
C:Program FilesOperaopera.exe
C:WINDOWSexplorer.exe
C:DownloadsПрограммыRSIT.exe
C:Program Filestrend microжека.exeR1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://home.sweetim.com
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: BS Player Toolbar — {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} — C:Program FilesBS_PlayertbBS_1.dll
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
F2 — REG:system.ini: Shell=explorer.exe rundll32.exe bxwjh
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Ask.com Toolbar BHO — {D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O2 — BHO: BS Player Toolbar — {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} — C:Program FilesBS_PlayertbBS_1.dll
O3 — Toolbar: BS Player Toolbar — {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} — C:Program FilesBS_PlayertbBS_1.dll
O3 — Toolbar: Ask.com Toolbar — {D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll
O3 — Toolbar: DAEMON Tools Toolbar — {32099AAC-C132-4136-9E9A-4E364A424E17} — C:Program FilesDAEMON Tools ToolbarDTToolbar.dll
O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — C:Program FilesDownload Masterdmbar.dll
O4 — HKLM..Run: [StartCCC] «C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe» MSRun
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Ad-Watch] C:Program FilesLavasoftAd-AwareAAWTray.exe
O4 — HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [amd_dc_opt] C:Program FilesAMDDual-Core Optimizeramd_dc_opt.exe
O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [DAEMON Tools Lite] «C:Program FilesDAEMON Tools Litedaemon.exe» -autorun
O4 — HKCU..Run: [EDLauncher] C:Program FilesPRMT8PRMTEDEDLauncher.exe
O4 — HKCU..Run: [Yupdate!] «C:Program FilesCommon FilesYandexYupdateyupdate.exe»
O4 — HKCU..Run: [Download Master] C:Program FilesDownload Masterdmaster.exe -autorun
O4 — HKCU..Run: [Steam] «C:Program FilesSteamSteam.exe» -silent
O4 — HKCU..Run: [ICQ] «C:Program FilesICQ6.5ICQ.exe» silent
O4 — HKCU..Run: [Real Desktop] «C:Documents and SettingsжекаМои документыDownloadsReal DesktopReal DesktopReal Desktop.exe»
O4 — HKCU..Run: [Advanced SystemCare 3] «C:Program FilesIObitAdvanced SystemCare 3AWC.exe» /startup
O4 — HKCU..Run: [spdetector3] C:Program FilesSpyware Process Detectorspd320.exe TRAY
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE8_01] regsvr32 /s /n /i:u shell32 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [IE8_01] regsvr32 /s /n /i:u shell32 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [IE8_01] regsvr32 /s /n /i:u shell32 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [IE8_01] regsvr32 /s /n /i:u shell32 (User ‘Default user’)
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O8 — Extra context menu item: Передать на удаленную закачку DM — C:Program FilesDownload Masterremdown.htm
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O17 — HKLMSystemCCSServicesTcpip..{203E384F-6549-455C-A685-B242FBD7762D}: NameServer = 213.179.249.131 213.179.249.132
O17 — HKLMSystemCCSServicesTcpip..{5632EF50-7BB7-4119-BE13-CEC48C2857B9}: NameServer = 64.102.255.44,128.107.241.185
O17 — HKLMSystemCS1ServicesTcpip..{203E384F-6549-455C-A685-B242FBD7762D}: NameServer = 213.179.249.131 213.179.249.132
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — C:WINDOWSsystem32ati2sgag.exe
O23 — Service: avast! Antivirus — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: Bonjour Service — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: ICQ Service — Unknown owner — C:Program FilesICQ6ToolbarICQ Service.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Lavasoft Ad-Aware Service — Lavasoft — C:Program FilesLavasoftAd-AwareAAWService.exe
O23 — Service: nProtect GameGuard Service (npggsvc) — Unknown owner — C:WINDOWSsystem32GameMon.des.exe (file missing)
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 10031 bytes======Scheduled tasks folder======
C:WINDOWStasksAd-Aware Update (Weekly).job
C:WINDOWStasksAppleSoftwareUpdate.job
C:WINDOWStasksAWC AutoSweep.job
C:WINDOWStasksScheduled Update for Ask Toolbar.job
C:WINDOWStasksUser_Feed_Synchronization-{7B05A21C-19E4-47D6-A48C-08AAFAA4CE3A}.job======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-22 62080][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2009-04-16 158208][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask.com Toolbar — C:Program FilesAsk.comGenericAskToolbar.dll [2009-02-26 809864][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2008-12-05 41368][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2008-12-05 73728][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player Toolbar — C:Program FilesBS_PlayertbBS_1.dll [2010-01-09 2166296][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} — BS Player Toolbar — C:Program FilesBS_PlayertbBS_1.dll [2010-01-09 2166296]
{D4027C7F-154A-4066-A1AD-4243D8127440} — Ask.com Toolbar — C:Program FilesAsk.comGenericAskToolbar.dll [2009-02-26 809864]
{32099AAC-C132-4136-9E9A-4E364A424E17} — DAEMON Tools Toolbar — C:Program FilesDAEMON Tools ToolbarDTToolbar.dll [2008-12-10 929224]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2008-12-09 958200]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2008-10-16 1578248]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — C:Program FilesDownload Masterdmbar.dll [2007-11-26 180224][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«StartCCC»=C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2009-08-13 98304]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2009-05-21 17881600]
«Ad-Watch»=C:Program FilesLavasoftAd-AwareAAWTray.exe [2010-01-10 520024]
«avast!»=C:PROGRA~1ALWILS~1Avast4ashDisp.exe [2009-11-25 81000]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2007-05-11 40048]
«amd_dc_opt»=C:Program FilesAMDDual-Core Optimizeramd_dc_opt.exe [2008-07-22 77824]
«KernelFaultCheck»=C:WINDOWSsystem32dumprep 0 -k [][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2009-06-08 37376]
«DAEMON Tools Lite»=C:Program FilesDAEMON Tools Litedaemon.exe [2008-12-29 687560]
«EDLauncher»=C:Program FilesPRMT8PRMTEDEDLauncher.exe [2007-03-14 118784]
«Yupdate!»=C:Program FilesCommon FilesYandexYupdateyupdate.exe [2008-10-20 479496]
«Download Master»=C:Program FilesDownload Masterdmaster.exe [2009-12-18 3778560]
«Steam»=C:Program FilesSteamSteam.exe [2009-01-06 1217808]
«ICQ»=C:Program FilesICQ6.5ICQ.exe [2009-11-16 172792]
«Real Desktop»=C:Documents and SettingsжекаМои документыDownloadsReal DesktopReal DesktopReal Desktop.exe [2010-01-17 7405568]
«Advanced SystemCare 3″=C:Program FilesIObitAdvanced SystemCare 3AWC.exe [2009-11-04 2334856]
«spdetector3″=C:Program FilesSpyware Process Detectorspd320.exe [2009-11-04 397824][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2009-08-14 155648][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
C:WINDOWSsystem32WgaLogon.dll [2009-03-10 265096][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
0aMCPClient — {F5DF91F9-15E9-416B-A7C3-7519B11ECBFC}
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32wpdshserviceobj.dll [2007-06-18 133632][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalLavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkLavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworknm]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworknm.sys]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«InstallVisualStyle»=C:WINDOWSResourcesThemesZuneZune.msstyles
«InstallTheme»=C:WINDOWSResourcesThemesZune.theme[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=
«NoResolveSearch»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesBonjourmDNSResponder.exe»=»C:Program FilesBonjourmDNSResponder.exe:*:Enabled:Bonjour»
«C:Program FilesICQ6.5ICQ.exe»=»C:Program FilesICQ6.5ICQ.exe:*:Enabled:ICQ6»
«C:Program FilesSteamSteam.exe»=»C:Program FilesSteamSteam.exe:*:Enabled:Steam»
«D:gamesValveOrangeBoxhl2.exe»=»D:gamesValveOrangeBoxhl2.exe:*:Enabled:hl2»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesOperaopera.exe»=»C:Program FilesOperaopera.exe:*:Enabled:Opera Internet Browser»
«D:gamesEidosBatman Arkham AsylumBinariesShippingPC-BmGame.exe»=»D:gamesEidosBatman Arkham AsylumBinariesShippingPC-BmGame.exe:*:Enabled:Batman: Arkham Asylum»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»======List of files/folders created in the last 1 months======
2010-01-21 14:54:30 —-D—- C:Program Filestrend micro
2010-01-21 14:54:29 —-D—- C:rsit
2010-01-21 14:21:27 —-A—- C:logit.txt
2010-01-21 13:39:18 —-D—- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
2010-01-21 13:39:03 —-D—- C:WINDOWSLastGood
2010-01-20 15:43:38 —-D—- C:WINDOWSsystem32LogFiles
2010-01-20 13:58:16 —-D—- C:Program FilesCommon FilesINCA Shared
2010-01-19 00:38:30 —-D—- C:Program FilesSBaGen
2010-01-18 16:21:16 —-D—- C:Program FilesASTRA32
2010-01-18 16:15:25 —-D—- C:Program FilesLavalys
2010-01-18 14:10:35 —-D—- C:Documents and SettingsжекаApplication DataAIMP
2010-01-18 14:09:55 —-D—- C:Program FilesAIMP2
2010-01-18 13:02:12 —-D—- C:Program FilesVirusTotalUploader2
2010-01-18 13:00:43 —-D—- C:Program FilesSpyware Process Detector
2010-01-18 12:24:19 —-D—- C:Documents and SettingsжекаApplication DataIObit
2010-01-18 12:24:18 —-D—- C:Program FilesIObit
2010-01-18 09:43:35 —-D—- C:Program FilesBases-09
2010-01-17 16:39:55 —-D—- C:Documents and SettingsжекаApplication DataFieryAds
2010-01-17 16:39:54 —-D—- C:Documents and SettingsжекаApplication DataCMedia
2010-01-17 16:30:44 —-D—- C:Program FilesTalisman 3
2010-01-17 16:03:16 —-D—- C:Program Files1C
2010-01-17 16:03:15 —-RA—- C:WINDOWSsystem32tmp195.tmp
2010-01-17 16:03:15 —-RA—- C:WINDOWSsystem32tmp194.tmp
2010-01-17 14:35:44 —-A—- C:WINDOWSsystem32lsdelete.exe
2010-01-17 13:27:19 —-D—- C:Documents and SettingsжекаApplication DataReal Desktop
2010-01-14 18:49:06 —-D—- C:Documents and SettingsжекаApplication DataCrayon Physics Deluxe
2010-01-14 18:37:59 —-A—- C:WINDOWSsystem32zlib1.dll
2010-01-14 18:37:59 —-A—- C:WINDOWSsystem32vorbisfile.dll
2010-01-14 18:37:58 —-A—- C:WINDOWSsystem32vorbis.dll
2010-01-14 18:37:58 —-A—- C:WINDOWSsystem32ogg.dll
2010-01-14 18:37:58 —-A—- C:WINDOWSsystem32ode.dll
2010-01-14 18:37:58 —-A—- C:WINDOWSsystem32libtheora.dll
2010-01-14 18:37:58 —-A—- C:WINDOWSsystem32libpng13.dll
2010-01-14 18:37:58 —-A—- C:WINDOWSsystem32alut.dll
2010-01-14 11:33:57 —-D—- C:WINDOWSRegisteredPackages
2010-01-14 11:32:26 —-A—- C:WINDOWSsystem32psisdecd.dll
2010-01-14 11:31:56 —-A—- C:WINDOWSsystem32dxdllreg.exe
2010-01-13 14:16:02 —-HDC—- C:WINDOWS$NtUninstallKB955759$
2010-01-13 14:15:56 —-HDC—- C:WINDOWS$NtUninstallKB972270$
2010-01-13 12:46:16 —-D—- C:WINDOWSsystem32AGEIA
2010-01-13 12:46:16 —-D—- C:Program FilesAGEIA Technologies
2010-01-13 12:46:05 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2010-01-13 12:44:53 —-D—- C:Program FilesAMD
2010-01-12 10:12:14 —-D—- C:Program FilesOsmos
2010-01-12 09:08:06 —-D—- C:Documents and SettingsAll UsersApplication DataCodemasters
2010-01-12 08:48:45 —-A—- C:WINDOWSsystem32mkl_vml_p4.dll
2010-01-12 08:48:44 —-A—- C:WINDOWSsystem32mkl_vml_p3.dll
2010-01-12 08:48:44 —-A—- C:WINDOWSsystem32mkl_vml_def.dll
2010-01-12 08:48:44 —-A—- C:WINDOWSsystem32mkl_p4.dll
2010-01-12 08:48:44 —-A—- C:WINDOWSsystem32mkl_p3.dll
2010-01-12 08:48:44 —-A—- C:WINDOWSsystem32mkl_lapack64.dll
2010-01-12 08:48:44 —-A—- C:WINDOWSsystem32mkl_lapack32.dll
2010-01-12 08:48:44 —-A—- C:WINDOWSsystem32mkl_def.dll
2010-01-12 08:48:43 —-D—- C:Program FilesBRS
2010-01-12 08:48:43 —-A—- C:WINDOWSsystem32rapture3d_oal.dll
2010-01-12 08:48:43 —-A—- C:WINDOWSsystem32libguide40.dll
2010-01-12 08:47:54 —-RA—- C:WINDOWSsystem32tmp591.tmp
2010-01-12 08:47:54 —-RA—- C:WINDOWSsystem32tmp590.tmp
2010-01-12 08:47:54 —-D—- C:Program FilesOpenAL
2010-01-12 08:47:54 —-A—- C:WINDOWSsystem32wrap_oal.dll
2010-01-12 08:47:54 —-A—- C:WINDOWSsystem32OpenAL32.dll
2010-01-12 08:47:52 —-A—- C:WINDOWSsystem32XAudio2_5.dll
2010-01-12 08:47:52 —-A—- C:WINDOWSsystem32xactengine3_5.dll
2010-01-12 08:47:52 —-A—- C:WINDOWSsystem32d3dcsx_42.dll
2010-01-12 08:47:52 —-A—- C:WINDOWSsystem32D3DCompiler_42.dll
2010-01-12 08:47:51 —-A—- C:WINDOWSsystem32d3dx11_42.dll
2010-01-12 08:47:51 —-A—- C:WINDOWSsystem32d3dx10_42.dll
2010-01-12 08:47:50 —-A—- C:WINDOWSsystem32D3DX9_42.dll
2010-01-11 20:34:50 —-D—- C:Program FilesuTorrent
2010-01-11 20:34:48 —-D—- C:Documents and SettingsжекаApplication DatauTorrent
2010-01-10 00:09:22 —-A—- C:WINDOWSUkrInfo.ini
2010-01-10 00:09:22 —-A—- C:WINDOWSmjmcontrol.ini
2010-01-09 19:00:28 —-HDC—- C:WINDOWS$NtUninstallKB970430$
2010-01-09 19:00:22 —-HDC—- C:WINDOWS$NtUninstallKB971737$
2010-01-09 13:45:44 —-D—- C:Documents and SettingsAll UsersApplication DataIntenium
2010-01-09 13:45:16 —-D—- C:Documents and SettingsAll UsersApplication DataAlawarWrapper
2010-01-09 13:44:48 —-D—- C:Program FilesAlawar.ru
2010-01-08 18:39:07 —-SHD—- C:RECYCLER
2010-01-08 18:38:04 —-D—- C:Program FilesWindows Sidebar
2010-01-08 18:37:29 —-HDC—- C:WINDOWS$NtServicePackUninstallNLSDownlevelMapping$
2010-01-08 18:03:39 —-D—- C:Program FilesIcy Christmas Screensaver
2010-01-08 17:47:04 —-D—- C:WINDOWSsystem32appmgmt
2010-01-08 16:10:51 —-HDC—- C:WINDOWS$NtUninstallKB960859$
2010-01-08 16:09:23 —-HDC—- C:WINDOWS$NtUninstallKB958869$
2010-01-08 16:09:19 —-HDC—- C:WINDOWS$NtUninstallKB976098-v2$
2010-01-08 16:09:18 —-D—- C:WINDOWSsystem32KB905474
2010-01-08 16:09:12 —-HDC—- C:WINDOWS$NtUninstallKB974318$
2010-01-08 16:09:08 —-HDC—- C:WINDOWS$NtUninstallKB969059$
2010-01-08 16:09:05 —-HDC—- C:WINDOWS$NtUninstallKB968816_WM9$
2010-01-08 16:09:02 —-HDC—- C:WINDOWS$NtUninstallKB961371-v2$
2010-01-08 16:08:59 —-HDC—- C:WINDOWS$NtUninstallKB971657$
2010-01-08 16:08:56 —-HDC—- C:WINDOWS$NtUninstallKB971557$
2010-01-08 16:08:53 —-HDC—- C:WINDOWS$NtUninstallKB954155_WM9$
2010-01-08 16:08:50 —-HDC—- C:WINDOWS$NtUninstallKB956744$
2010-01-08 16:08:47 —-HDC—- C:WINDOWS$NtUninstallKB974112$
2010-01-08 16:08:31 —-HDC—- C:WINDOWS$NtUninstallKB956844$
2010-01-08 16:08:27 —-HDC—- C:WINDOWS$NtUninstallKB961501$
2010-01-08 16:08:24 —-HDC—- C:WINDOWS$NtUninstallKB971633$
2010-01-08 16:08:15 —-HDC—- C:WINDOWS$NtUninstallKB973869$
2010-01-08 16:08:11 —-HDC—- C:WINDOWS$NtUninstallKB975025$
2010-01-08 16:08:08 —-HDC—- C:WINDOWS$NtUninstallKB974571$
2010-01-08 16:08:05 —-HDC—- C:WINDOWS$NtUninstallKB973507$
2010-01-08 16:07:56 —-HDC—- C:WINDOWS$NtUninstallKB973687$
2010-01-08 16:07:51 —-HDC—- C:WINDOWS$NtUninstallKB973354$
2010-01-08 16:07:48 —-HDC—- C:WINDOWS$NtUninstallKB973904$
2010-01-08 16:07:40 —-HDC—- C:WINDOWS$NtUninstallKB973540_WM9$
2010-01-08 16:07:37 —-HDC—- C:WINDOWS$NtUninstallKB974392$
2010-01-08 16:07:14 —-HDC—- C:WINDOWS$NtUninstallKB970238$
2010-01-08 16:07:10 —-HDC—- C:WINDOWS$NtUninstallKB971486$
2010-01-08 16:07:06 —-HDC—- C:WINDOWS$NtUninstallKB973815$
2010-01-08 16:07:03 —-D—- C:WINDOWSie8updates
2010-01-08 16:07:00 —-HDC—- C:WINDOWS$NtUninstallKB973525$
2010-01-08 16:06:23 —-A—- C:WINDOWSsystem32MRT.exe
2010-01-08 16:06:13 —-HDC—- C:WINDOWS$NtUninstallKB975467$
2010-01-08 16:06:09 —-HDC—- C:WINDOWS$NtUninstallKB968389$
2010-01-08 16:06:04 —-HDC—- C:WINDOWS$NtUninstallKB969947$
2010-01-08 16:06:04 —-HD—- C:WINDOWS$hf_mig$======List of files/folders modified in the last 1 months======
2010-01-21 14:54:40 —-D—- C:WINDOWSPrefetch
2010-01-21 14:54:30 —-RD—- C:Program Files
2010-01-21 13:49:01 —-D—- C:WINDOWSTemp
2010-01-21 13:41:04 —-D—- C:Program FilesSteam
2010-01-21 13:40:58 —-D—- C:Program FilesMozilla Firefox
2010-01-21 13:40:57 —-SD—- C:WINDOWSTasks
2010-01-21 13:39:17 —-D—- C:WINDOWSsystem32dllcache
2010-01-21 13:39:17 —-D—- C:WINDOWS
2010-01-21 13:39:17 —-AD—- C:WINDOWSsystem32
2010-01-21 13:39:04 —-HD—- C:WINDOWSinf
2010-01-21 13:39:03 —-D—- C:WINDOWSsystem32CatRoot2
2010-01-20 21:17:26 —-A—- C:WINDOWSSchedLgU.Txt
2010-01-20 20:03:16 —-SHD—- C:WINDOWSInstaller
2010-01-20 20:02:33 —-D—- C:Documents and Settings
2010-01-20 18:16:25 —-D—- C:WINDOWSsystem32drivers
2010-01-20 13:58:16 —-D—- C:Program FilesCommon Files
2010-01-19 00:39:30 —-A—- C:Documents and SettingsжекаApplication Databurnaware.ini
2010-01-18 13:15:06 —-D—- C:Program FilesArtMoney
2010-01-18 12:49:06 —-D—- C:Program FilesBS_Player
2010-01-17 16:03:14 —-D—- C:WINDOWSsystem32DirectX
2010-01-17 16:02:55 —-RSD—- C:WINDOWSassembly
2010-01-17 12:34:17 —-D—- C:Documents and SettingsжекаApplication DataICQ
2010-01-16 19:35:52 —-D—- C:Downloads
2010-01-14 17:29:09 —-D—- C:Program FilesOpera
2010-01-13 14:19:40 —-D—- C:WINDOWSAppPatch
2010-01-13 14:16:00 —-A—- C:WINDOWSimsins.BAK
2010-01-13 14:14:47 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-01-13 12:45:00 —-RSH—- C:boot.ini
2010-01-13 12:32:43 —-HD—- C:Program FilesInstallShield Installation Information
2010-01-10 16:07:29 —-D—- C:Documents and SettingsжекаApplication DataBSplayer
2010-01-10 12:39:59 —-DC—- C:WINDOWSsystem32DRVSTORE
2010-01-10 01:03:43 —-D—- C:Program FilesIDoser v4
2010-01-10 00:19:07 —-A—- C:WINDOWSwin.ini
2010-01-08 18:38:14 —-RSD—- C:WINDOWSFonts
2010-01-08 18:36:29 —-D—- C:WINDOWSWinSxS
2010-01-08 17:47:17 —-D—- C:Program FilesStardock
2010-01-08 17:47:15 —-D—- C:Program FilesCommon Filesstardock
2010-01-08 16:31:10 —-D—- C:WINDOWSMicrosoft.NET
2010-01-08 16:08:42 —-D—- C:Program FilesInternet Explorer
2010-01-08 16:07:53 —-D—- C:Program FilesOutlook Express
2010-01-08 16:06:24 —-D—- C:WINDOWSDebug======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:WINDOWSsystem32driversaswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2009-11-25 48560]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; ??C:Program FilesUltraISOdriversISODrive.sys []
R2 ASTRA32;ASTRA32 Kernel Driver 5.2.1.0; ??C:Program FilesASTRA32ASTRA32.sys []
R2 aswFsBlk;aswFsBlk; C:WINDOWSsystem32DRIVERSaswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; C:WINDOWSsystem32driversaswMon2.sys [2009-11-25 94160]
R2 exFat;exFat; C:WINDOWSsystem32driversexFat.sys [2009-01-28 133632]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-10-11 62848]
R2 spd3ssl;Spyware * Process * Detector v3.20; ??C:Program FilesSpyware Process Detectorspd320.sys []
R3 AmdLLD;AMD Low Level Device Driver; C:WINDOWSsystem32DRIVERSAmdLLD.sys [2007-06-29 34304]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2009-11-25 23120]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2009-08-14 4485632]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2009-06-02 5085184]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2009-06-08 12160]
R3 RTHDMIAzAudService;Service for HDMI; C:WINDOWSsystem32driversRtKHDMI.sys [2009-05-20 3733760]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2009-07-28 143360]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-04-15 17152]
R3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
S3 al8mb02g;al8mb02g; C:WINDOWSsystem32driversal8mb02g.sys []
S3 Ambfilt;Ambfilt; C:WINDOWSsystem32driversAmbfilt.sys [2008-08-05 1684736]
S3 Monfilt;Monfilt; C:WINDOWSsystem32driversMonfilt.sys [2006-01-04 1389056]
S3 npkcrypt;npkcrypt; ??D:Новая папкаНовая папкаAsterius.ru + патчи для всех серверовsystemnpkcrypt.sys []
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2007-06-18 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2007-06-18 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2009-11-25 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2009-08-14 602112]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2009-11-25 138680]
R2 Bonjour Service;Bonjour Service; C:Program FilesBonjourmDNSResponder.exe [2008-12-12 238888]
R2 ICQ Service;ICQ Service; C:Program FilesICQ6ToolbarICQ Service.exe [2008-10-19 222456]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:Program FilesLavasoftAd-AwareAAWService.exe [2010-01-10 1028432]
R3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2009-11-25 352920]
S2 ATI Smart;ATI Smart; C:WINDOWSsystem32ati2sgag.exe [2009-08-13 593920]
S3 aspnet_state;Служба состояний ASP.NET; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 npggsvc;nProtect GameGuard Service; C:WINDOWSsystem32GameMon.des [2009-11-03 3414888]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2008-12-05 152984]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]
EOF
Здравствуйте, добро пожаловать на Spyware-ru форум.
Запустите HijackThis, для этого кликните Пуск, Выполнить, введите
C:Program Filestrend microжека.exeи нажмите Enter.
Откроется главное меню программы HijackThis.
Кликните по кнопке Do a system scan only.
Далее отметьте галочкой (слева) следующие строки, если они присутствуют:F2 - REG:system.ini: Shell=explorer.exe rundll32.exe bxwjhЗакройте все запущенные программы (включая InternetExplorer) и окна Windows.
Кликните по кнопке Fix checked и подтвердите свои действия выбрав YES.
Перезагрузите компьютер.Жду от вас свежий RSIT лог.
- Для ответа в этой теме необходимо авторизоваться.
