ВЫСКАКИВАЮТ ОКНА

[mashamyrlyk]

ЗДРАВСТВУЙТЕ!У НАС ТАКАЯ ПРОБЛЕМА В ПОСЛЕДНЕЕ ВРЕМЯ ВЫСКАКИВАЮТ ОКНА НО НЕ С РЕКЛАМОЙ А ТУДА КУДА ЗАХОДИМ НАПИСАНО AVAST И ИНФОРМАЦИЯ АВАСТ ЭТО НАШ ТИПО АНТИВИРУС НА ДНЯХ Я СКАЧАЛА ПРОГУ И КИНУЛА НА КОМП И ЗАХОТЕЛА ОТКРЫТЬ ВЫДАЛО ЧТО ОБНАРУЖЕН ТРОЯН ВОБЩЕМ ПОПЫТАЛАСЬ ЗАПУСТИТЬ АНТИВИРУС НАШЛИСЬ ЧЕРВИ И ЧЕТО ЕЩЕ НО НЕ УДАЛЯЛИСЬ И ДО СИХ ПОР ВЫСКАКУЮТ ОКНА ЧТО ДЕЛАТЬ?
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Сергей at 2010-04-25 14:44:15
Microsoft Windows XP Professional Service Pack 2
System drive C: has 93 GB (61%) free of 153 GB
Total RAM: 1022 MB (34% free)

======Scheduled tasks folder======

C:WINDOWStasks{FE54D718-DAA2-4B3B-9523-78AB847EC095}_USER_Сергей.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — c:program filesmail.rusputnikMailRuSputnik.dll [2010-04-14 1115320]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class — C:Documents and SettingsСергейApplication DataMicrosoftInternet Explorerqipsearchbar.dll [2009-02-10 119808]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{B4806C1A-FE8A-4008-9DA3-8CEDB6E82C10}]
TBSB03223 Class — C:Program FilesWebMoney Advisorwmadvisor.dll [2008-09-05 2409472]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{FF284F5C-7CF9-4682-8701-D467C1DBB99F} — PROMT — C:Program FilesPRMT6PRMTIEprmtie.dll [2007-07-19 454656]
{3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} — WebMoney Advisor — C:Program FilesWebMoney Advisorwmadvisor.dll [2008-09-05 2409472]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — c:program filesmail.rusputnikMailRuSputnik.dll [2010-04-14 1115320]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«SigmatelSysTrayApp»=sttray.exe []
«Sony Ericsson PC Suite»=C:Program FilesSony EricssonMobile2Application LauncherApplication Launcher.exe [2007-05-28 528384]
«Adobe Photo Downloader»=C:Program FilesAdobePhotoshop Album Starter Edition3.0Appsapdproxy.exe [2005-06-06 57344]
«PCSuiteTrayApplication»=C:Program FilesNokiaNokia PC Suite 6LaunchApplication.exe [2007-06-18 271360]
«avast!»=C:PROGRA~1ALWILS~1Avast4ashDisp.exe [2009-08-17 81000]
«HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2006-02-19 49152]
«QuickTime Task»=C:Program FilesQuickTimeqttask.exe [2007-05-04 77824]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2010-04-14 9077952]
«Guard.Mail.ru.gui»=C:Program FilesMail.RuGuardGuardMailRu.exe [2010-04-14 563392]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2004-08-17 15360]
«AnVir Task Manager»=C:Program FilesAnVir Task ManagerAnVir.exe [2009-04-09 2664672]

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
InterVideo WinCinema Manager.lnk — C:Program FilesInterVideoCommonBinWinCinemaMgr.exe
LUMIX Simple Viewer.lnk — C:Program FilesPanasonicLUMIXSimpleViewerPhLeAutoRun.exe
Adobe Reader Speed Launch.lnk — C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
Adobe Reader — Schnellstart.lnk — C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2006-10-04 90112]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesInterVideoWinDVD4PRWinDVD.exe»=»C:Program FilesInterVideoWinDVD4PRWinDVD.exe:*:Enabled:WinDVD»
«C:Program FilesHPDigital ImagingBINHPQTRA08.EXE»=»C:Program FilesHPDigital ImagingBINHPQTRA08.EXE:*:Enabled:hpqtra08.exe»
«C:Program FilesHPDigital ImagingBINHPQSTE08.EXE»=»C:Program FilesHPDigital ImagingBINHPQSTE08.EXE:*:Enabled:hpqste08.exe»
«C:Program FilesHPDigital ImagingBINhpofxm08.exe»=»C:Program FilesHPDigital ImagingBINhpofxm08.exe:*:Enabled:hpofxm08.exe»
«C:Program FilesHPDigital ImagingBINhposfx08.exe»=»C:Program FilesHPDigital ImagingBINhposfx08.exe:*:Enabled:hposfx08.exe»
«C:Program FilesHPDigital ImagingBINhposid01.exe»=»C:Program FilesHPDigital ImagingBINhposid01.exe:*:Enabled:hposid01.exe»
«C:Program FilesHPDigital ImagingBINhpqscnvw.exe»=»C:Program FilesHPDigital ImagingBINhpqscnvw.exe:*:Enabled:hpqscnvw.exe»
«C:Program FilesHPDigital ImagingBINhpqkygrp.exe»=»C:Program FilesHPDigital ImagingBINhpqkygrp.exe:*:Enabled:hpqkygrp.exe»
«C:Program FilesHPDigital ImagingBINhpqCopy.exe»=»C:Program FilesHPDigital ImagingBINhpqCopy.exe:*:Enabled:hpqcopy.exe»
«C:Program FilesHPDigital ImagingBINhpfccopy.exe»=»C:Program FilesHPDigital ImagingBINhpfccopy.exe:*:Enabled:hpfccopy.exe»
«C:Program FilesHPDigital ImagingBINhpzwiz01.exe»=»C:Program FilesHPDigital ImagingBINhpzwiz01.exe:*:Enabled:hpzwiz01.exe»
«C:Program FilesHPDigital ImagingBINhpoews01.exe»=»C:Program FilesHPDigital ImagingBINhpoews01.exe:*:Enabled:hpoews01.exe»
«C:Program FilesHPDigital ImagingBINhpqnrs08.exe»=»C:Program FilesHPDigital ImagingBINhpqnrs08.exe:*:Enabled:hpqnrs08.exe»
«C:Program FilesQIPqip.exe»=»C:Program FilesQIPqip.exe:*:Enabled:Quiet Internet Pager»
«C:Program FilesMail.RuSputnikSputnikFlashPlayer.exe»=»C:Program FilesMail.RuSputnikSputnikFlashPlayer.exe:*:Enabled:Sputnik@Mail.Ru flash player»
«C:Program FilesMail.RuSputnikSputnikHelper.exe»=»C:Program FilesMail.RuSputnikSputnikHelper.exe:*:Enabled:Sputnik@Mail.Ru helper object»
«C:Program FilesMail.RuAgentmagent.exe»=»C:Program FilesMail.RuAgentmagent.exe:*:Enabled:Mail.Ru Агент»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2E]
shellAutoRuncommand — E:AutoRun.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2F]
shellAutoRuncommand — F:AutoRun.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{04673432-c782-11dd-972d-a30c648bc1ca}]
shellAutoRuncommand — D:setup.exe AUTORUN=1

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{31e16823-532a-11de-b682-0019d11725c7}]
shellAutoRuncommand — F:AutoRun.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{641a09c4-4f7f-11de-915f-e3f52de6ea34}]
shellAutoRuncommand — F:AutoRun.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{98493318-c578-11de-b860-0019d11725c7}]
shellAutoRuncommand — nahmkm.exe
shellexplorecommand — nahmkm.exe
shellopencommand — nahmkm.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{aac961e0-6333-11de-b6cb-0019d11725c7}]
shellAutoRuncommand — E:AutoRun.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{eb298858-d4d8-11dd-8f4d-806d6172696f}]
shellAutoRuncommand — D:RUSSIANERREsetup.exe

======List of files/folders created in the last 1 months======

2010-04-25 14:44:15 —-D—- C:rsit
2010-04-25 14:44:15 —-D—- C:Program Filestrend micro
2010-04-24 16:44:29 —-A—- C:uh3jl3k2.exe
2010-04-14 18:42:55 —-D—- C:Documents and SettingsСергейApplication DataMra
2010-04-14 18:42:46 —-D—- C:Program FilesMail.Ru
2010-04-12 16:14:06 —-D—- C:Program FilesStamina
2010-04-07 12:43:26 —-SHD—- C:FOUND.043
2010-04-05 19:41:12 —-SHD—- C:FOUND.042
2010-04-04 17:14:14 —-SHD—- C:FOUND.041

======List of files/folders modified in the last 1 months======

2010-04-25 14:23:36 —-A—- C:WINDOWSModemLog_HUAWEI Mobile Connect — 3G Modem #2.txt
2010-04-24 21:36:34 —-A—- C:WINDOWSSchedLgU.Txt
2010-04-24 21:17:54 —-A—- C:WINDOWSModemLog_HUAWEI Mobile Connect — 3G Modem.txt
2010-04-11 18:35:18 —-A—- C:WINDOWSwinamp.ini
2010-04-10 14:33:28 —-A—- C:WINDOWSsumgame.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2009-08-17 26944]
R1 aswSP;avast! Self Protection; C:WINDOWSsystem32driversaswSP.sys [2009-08-17 114768]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2009-08-17 51376]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2004-08-17 40448]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2001-10-20 12032]
R2 aswFsBlk;aswFsBlk; C:WINDOWSsystem32DRIVERSaswFsBlk.sys [2009-08-17 20560]
R2 aswMon2;avast! Standard Shield Support; C:WINDOWSsystem32driversaswMon2.sys [2009-08-17 94160]
R3 Afc;PPdus ASPI Shell; C:WINDOWSsystem32driversAfc.sys [2005-02-23 11776]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2009-08-17 23152]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2006-10-04 1754624]
R3 E100B;Intel(R) PRO Network Connection Driver; C:WINDOWSsystem32DRIVERSe100b325.sys [2006-01-12 163328]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-01-07 138752]
R3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:WINDOWSsystem32DRIVERSewusbmdm.sys [2008-03-17 101376]
R3 pfc;Padus ASPI Shell; C:WINDOWSsystem32driverspfc.sys [2003-09-20 21248]
R3 sfng32;Sonic Focus Plugin for Sigmatel HDA; C:WINDOWSsystem32driverssfng32.sys [2005-12-02 41728]
R3 smbusp;Intel(R) SMBus 2.0 Driver; C:WINDOWSsystem32DRIVERSintelsmb.sys [2005-03-15 21248]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:WINDOWSsystem32driverssthda.sys [2006-06-15 1179784]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-03 31616]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-03 26624]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-03 57600]
R3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2004-08-03 20480]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2006-04-12 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2006-04-12 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2006-04-12 21568]
S3 NAL;Nal Service ; ??C:WINDOWSsystem32Driversiqvw32.sys []
S3 nmwcd;Nokia USB Phone Parent; C:WINDOWSsystem32driversnmwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; C:WINDOWSsystem32driversnmwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; C:WINDOWSsystem32driversnmwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; C:WINDOWSsystem32driversnmwcdcm.sys [2007-02-22 12288]
S3 s616bus;Sony Ericsson Device 616 driver (WDM); C:WINDOWSsystem32DRIVERSs616bus.sys [2007-04-03 83208]
S3 s616mdfl;Sony Ericsson Device 616 USB WMC Modem Filter; C:WINDOWSsystem32DRIVERSs616mdfl.sys [2007-04-03 15112]
S3 s616mdm;Sony Ericsson Device 616 USB WMC Modem Driver; C:WINDOWSsystem32DRIVERSs616mdm.sys [2007-04-03 108680]
S3 s616mgmt;Sony Ericsson Device 616 USB WMC Device Management Drivers (WDM); C:WINDOWSsystem32DRIVERSs616mgmt.sys [2007-04-03 100360]
S3 s616nd5;Sony Ericsson Device 616 USB Ethernet Emulation SEMC616 (NDIS); C:WINDOWSsystem32DRIVERSs616nd5.sys [2007-04-03 23176]
S3 s616obex;Sony Ericsson Device 616 USB WMC OBEX Interface; C:WINDOWSsystem32DRIVERSs616obex.sys [2007-04-03 98568]
S3 s616unic;Sony Ericsson Device 616 USB Ethernet Emulation SEMC616 (WDM); C:WINDOWSsystem32DRIVERSs616unic.sys [2007-04-03 99080]
S3 s716bus;Sony Ericsson Device 716 driver (WDM); C:WINDOWSsystem32DRIVERSs716bus.sys [2007-06-29 83208]
S3 s716mdfl;Sony Ericsson Device 716 USB WMC Modem Filter; C:WINDOWSsystem32DRIVERSs716mdfl.sys [2007-06-29 15112]
S3 s716mdm;Sony Ericsson Device 716 USB WMC Modem Driver; C:WINDOWSsystem32DRIVERSs716mdm.sys [2007-06-29 108552]
S3 s716mgmt;Sony Ericsson Device 716 USB WMC Device Management Drivers (WDM); C:WINDOWSsystem32DRIVERSs716mgmt.sys [2007-06-29 100360]
S3 s716nd5;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (NDIS); C:WINDOWSsystem32DRIVERSs716nd5.sys [2007-04-04 23176]
S3 s716obex;Sony Ericsson Device 716 USB WMC OBEX Interface; C:WINDOWSsystem32DRIVERSs716obex.sys [2007-06-29 98568]
S3 s716unic;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (WDM); C:WINDOWSsystem32DRIVERSs716unic.sys [2007-04-04 98952]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2004-08-03 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2004-08-03 15104]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2009-08-17 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2006-10-04 425984]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2009-08-17 138680]
R2 Guard.Mail.ru;Guard.Mail.ru; C:Program FilesMail.RuGuardGuardMailRu.exe [2010-04-14 563392]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSsystem32HPZipm12.exe [2006-03-03 69632]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2009-08-17 352920]
R3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2007-06-15 300544]
S2 PowerManager;Power Manager; C:WINDOWSsvchost.exe []
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2009-08-17 254040]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe [2005-11-14 69632]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]

---

EOF

---

[Автор]

Сообщения