- This topic has 1 ответ, 2 участника, and was last updated 14 years, 9 months назад by
.
-
Сообщения
-
Virus Win32/Olmarik trojan .Pomogite pliz .
Ne rabotaet restore date,administrator tools.
Spasibo bol’woeLogfile of random’s system information tool 1.08 (written by random/random)
Run by Yulia Burley at 2010-08-12 20:15:28
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 5 GB (31%) free of 16 GB
Total RAM: 1015 MB (17% free)======Scheduled tasks folder======
C:WINDOWStasksAd-Aware Update (Weekly).job
C:WINDOWStasksAt1.job
C:WINDOWStasksAt10.job
C:WINDOWStasksAt11.job
C:WINDOWStasksAt12.job
C:WINDOWStasksAt13.job
C:WINDOWStasksAt14.job
C:WINDOWStasksAt15.job
C:WINDOWStasksAt16.job
C:WINDOWStasksAt17.job
C:WINDOWStasksAt18.job
C:WINDOWStasksAt19.job
C:WINDOWStasksAt2.job
C:WINDOWStasksAt20.job
C:WINDOWStasksAt21.job
C:WINDOWStasksAt22.job
C:WINDOWStasksAt23.job
C:WINDOWStasksAt24.job
C:WINDOWStasksAt3.job
C:WINDOWStasksAt4.job
C:WINDOWStasksAt5.job
C:WINDOWStasksAt6.job
C:WINDOWStasksAt7.job
C:WINDOWStasksAt8.job
C:WINDOWStasksAt9.job
C:WINDOWStasksGoogleUpdateTaskMachineCore1cab679238a1852.job
C:WINDOWStasksGoogleUpdateTaskMachineCore1cac6c3a7aed73a.job
C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-2584204344-571161320-1454716298-1006Core.job
C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-2584204344-571161320-1454716298-1006UA.job
C:WINDOWStasksNwmxpmftd.job
C:WINDOWStasksScheduled Update for Ask Toolbar.job======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper — C:Program FilesYahoo!CompanionInstallscpnyt.dll [2009-09-19 1172280][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A9BA40A1-74F1-52BD-F431-00B15A2C8953}]
C:WINDOWSsystem32lkm3m.dll — C:WINDOWSsystem32lkm3m.dll [2010-04-13 20000][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} — Yahoo! Toolbar — C:Program FilesYahoo!CompanionInstallscpnyt.dll [2009-09-19 1172280]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-08-04 278192][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«HotKeysCmds»=C:WINDOWSsystem32hkcmd.exe [2010-08-12 31232]
«Persistence»=C:WINDOWSsystem32igfxpers.exe [2010-08-12 31232]
«IDTSysTrayApp»=C:WINDOWSsystem32sttray.exe [2010-08-12 31232]
«SysTrayApp»=C:Program FilesIDTWDMsttray.exe [2010-08-12 31232]
«AESTFltr»=c:windowssystem32aestfltr .exe [2010-08-12 31232]
«SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2010-08-12 31232]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2010-08-12 31232]
«HP Mobile Broadband»=c:SWsetupHPQWWANHPMobileBroadband.exe [2010-08-12 31232]
«hpWirelessAssistant»=C:Program FilesHewlett-PackardHP Wireless AssistantHPWAMain.exe [2010-08-12 31232]
«KernelFaultCheck»=C:WINDOWSsystem32dumprep 0 -k []
«SunJavaUpdateSched»=C:Program FilesJavajre1.6.0_06binjusched.exe [2010-08-12 31232]
«egui»=C:Program FilesESETESET Smart Securityegui.exe [2010-08-12 31232]
«Antirun»=C:Program FilesAntirunantirun.exe [2010-08-12 31232]
«cctray»=C:Program FilesCACA Internet Security Suitecasc.exe [2010-08-12 31232][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2010-08-12 31232]
«swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-05-27 39408]
«AdobeUpdater»=C:Program FilesCommon FilesAdobeUpdater5AdobeUpdater.exe [2010-08-12 31232]
«wuauclt1ac.exe»=C:DOCUME~1YULIAB~1.PC1LOCALS~1Tempwuauclt1ac.exe [2010-08-12 31232]
«Google Update»=C:Documents and SettingsYulia Burley.PC121319685224Local SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2010-08-12 31232]C:Documents and SettingsAll UsersStart MenuProgramsStartup
Bluetooth.lnk — C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
McAfee Security Scan Plus.lnk — C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
C:WINDOWSsystem32igfxdev.dll [2008-02-15 208896][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyPFW]
C:WINDOWSsystem32UmxWnp.Dll [2009-03-27 79368][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-19 133632][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionexplorerSharedTaskScheduler]
hasiufhiusdfjdhfudd — {A9BA40A1-74F1-52BD-F431-00B15A2C8953} — C:WINDOWSsystem32lkm3m.dll [2010-04-13 20000][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa]
«notification packages»=scecli
mstsine.dll[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalLavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkLavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«DisableTaskMgr»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=1
«NoDriveTypeAutoRun»=255[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesCommon FilesAOLLoaderaolload.exe»=»C:Program FilesCommon FilesAOLLoaderaolload.exe:*:Enabled:AOL Loader»
«C:Program FilesSkypePlugin ManagerskypePM.exe»=»C:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»======List of files/folders created in the last 3 months======
2010-08-12 20:15:29 —-D—- C:Program Filestrend micro
2010-08-12 20:15:28 —-D—- C:rsit
2010-08-12 20:05:27 —-D—- C:WINDOWSLastGood
2010-08-06 20:25:54 —-RASH—- C:MSDOS.SYS
2010-08-06 20:25:54 —-RASH—- C:IO.SYS
2010-08-06 18:31:51 —-A—- C:WINDOWSsystem32MRT.exe
2010-08-06 17:47:06 —-A—- C:WINDOWSsystem32Isafprod.dll
2010-08-06 17:47:05 —-A—- C:WINDOWSsystem32Vetredir.dll
2010-08-06 17:47:05 —-A—- C:WINDOWSsystem32Isafeif.dll
2010-08-06 17:41:24 —-D—- C:Program FilesCA
2010-08-06 08:38:39 —-A—- C:caisslog.txt
2010-08-06 08:38:36 —-D—- C:Documents and SettingsAll UsersApplication DataCA
2010-08-05 05:20:55 —-HDC—- C:WINDOWS$NtUninstallKB980218$
2010-08-05 05:19:59 —-HDC—- C:WINDOWS$NtUninstallKB980195$
2010-08-05 05:19:26 —-HDC—- C:WINDOWS$NtUninstallKB981793$
2010-08-04 13:39:30 —-HDC—- C:WINDOWS$NtUninstallKB2229593$
2010-08-04 13:16:08 —-HDC—- C:WINDOWS$NtUninstallKB2286198$
2010-08-04 13:09:53 —-HDC—- C:WINDOWS$NtUninstallKB979559$
2010-08-04 13:08:41 —-HDC—- C:WINDOWS$NtUninstallKB978695_WM9$
2010-08-04 13:05:44 —-HDC—- C:WINDOWS$NtUninstallKB978542$
2010-08-04 13:04:35 —-HDC—- C:WINDOWS$NtUninstallKB979482$
2010-08-04 13:03:24 —-HDC—- C:WINDOWS$NtUninstallKB975562$
2010-08-04 13:02:50 —-D—- C:WINDOWSie8updates
2010-06-24 21:36:37 —-ASH—- C:hiberfil.sys
2010-06-24 21:24:45 —-A—- C:WINDOWSntbtlog.txt
2010-06-24 20:52:47 —-D—- C:Program FilesAntirun
2010-06-24 20:25:21 —-D—- C:Documents and SettingsYulia Burley.PC121319685224Application DataESET
2010-06-08 10:33:07 —-HDC—- C:WINDOWS$NtUninstallKB979683$
2010-06-08 10:32:25 —-HDC—- C:WINDOWS$NtUninstallKB980232$
2010-06-08 10:30:32 —-HDC—- C:WINDOWS$NtUninstallKB978338$
2010-06-08 10:29:18 —-HDC—- C:WINDOWS$NtUninstallKB977816$======List of files/folders modified in the last 3 months======
2010-08-12 20:16:04 —-D—- C:WINDOWSTemp
2010-08-12 20:15:38 —-A—- C:feed.txt
2010-08-12 20:15:29 —-RD—- C:Program Files
2010-08-12 20:10:18 —-D—- C:WINDOWSsystem32
2010-08-12 20:10:18 —-D—- C:WINDOWS
2010-08-12 20:07:21 —-SD—- C:WINDOWSTasks
2010-08-12 20:05:49 —-A—- C:WINDOWSsystem32aestfltr .exe
2010-08-12 20:05:45 —-A—- C:WINDOWSsystem32igfxpers.exe
2010-08-12 20:05:41 —-A—- C:WINDOWSsystem32ctfmon.exe
2010-08-12 20:05:29 —-HD—- C:WINDOWSinf
2010-08-12 20:05:27 —-D—- C:WINDOWSsystem32CatRoot2
2010-08-12 20:02:16 —-A—- C:WINDOWSSchedLgU.Txt
2010-08-12 20:01:27 —-A—- C:WINDOWSsystem32sttray.exe
2010-08-12 20:01:25 —-A—- C:WINDOWSsystem32hkcmd.exe
2010-08-12 19:57:54 —-HD—- C:WINDOWS$hf_mig$
2010-08-12 19:41:24 —-D—- C:WINDOWSPrefetch
2010-08-06 18:32:18 —-D—- C:WINDOWSDebug
2010-08-06 17:49:48 —-SHD—- C:WINDOWSInstaller
2010-08-06 17:49:48 —-D—- C:Config.Msi
2010-08-06 17:49:47 —-D—- C:WINDOWSWinSxS
2010-08-06 17:47:54 —-D—- C:WINDOWSsystem32drivers
2010-08-05 05:22:22 —-D—- C:Program FilesInternet Explorer
2010-08-05 05:20:58 —-RSHD—- C:WINDOWSsystem32dllcache
2010-08-05 05:20:46 —-A—- C:WINDOWSimsins.BAK
2010-08-04 13:51:18 —-D—- C:WINDOWSMicrosoft.NET
2010-08-04 13:51:14 —-RSD—- C:WINDOWSassembly
2010-08-04 13:42:39 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-08-04 13:05:56 —-D—- C:Program FilesOutlook Express
2010-07-26 23:30:35 —-A—- C:WINDOWSsystem32shell32.dll
2010-06-24 21:38:47 —-A—- C:WINDOWSsystem32aestfltr.exe
2010-06-24 21:28:59 —-SHD—- C:RECYCLER
2010-06-24 21:25:24 —-D—- C:Documents and Settings
2010-06-24 20:07:49 —-D—- C:Program FilesESET
2010-06-24 20:07:49 —-D—- C:Documents and SettingsAll UsersApplication DataESET
2010-06-08 14:14:34 —-RASH—- C:boot.ini
2010-06-08 14:14:34 —-A—- C:WINDOWSwin.ini
2010-06-08 14:14:34 —-A—- C:WINDOWSsystem.ini
2010-06-08 14:13:02 —-D—- C:WINDOWSpss
2010-06-08 10:41:56 —-SHD—- C:System Volume Information
2010-05-15 18:56:47 —-A—- C:WINDOWSOEWABLog.txt
2010-05-15 18:42:11 —-D—- C:Documents and SettingsYulia Burley.PC121319685224Application DataskypePM
2010-05-14 11:17:11 —-D—- C:Program FilesMcAfee Security Scan======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 KmxAMRT;KmxAMRT; C:WINDOWSsystem32DRIVERSKmxAMRT.sys [2009-12-23 132088]
R0 KmxStart;KmxStart; C:WINDOWSSystem32DRIVERSkmxstart.sys [2009-06-08 108024]
R0 ohci1394;OHCI Compliant IEEE 1394 Host Controller; C:WINDOWSsystem32DRIVERSohci1394.sys [2008-04-14 61696]
R1 ehdrv;ehdrv; C:WINDOWSsystem32DRIVERSehdrv.sys [2010-03-24 114984]
R1 epfwtdi;epfwtdi; C:WINDOWSsystem32DRIVERSepfwtdi.sys [2010-03-24 55232]
R1 intelppm;Intel Processor Driver; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-14 36352]
R1 KmxAgent;KmxAgent; C:WINDOWSSystem32DRIVERSkmxagent.sys [2009-12-23 78840]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:WINDOWSsystem32DRIVERSwmiacpi.sys [2008-04-14 8832]
R2 eamon;eamon; C:WINDOWSsystem32DRIVERSeamon.sys [2010-03-24 139192]
R2 epfw;epfw; C:WINDOWSsystem32DRIVERSepfw.sys [2010-03-24 134488]
R3 AESTAud;AE Audio Service; C:WINDOWSsystem32driversAESTAud.sys [2008-08-28 112128]
R3 BCM43XX;??????? ???????? ???????? Broadcom 802.11; C:WINDOWSsystem32DRIVERSbcmwl5.sys [2008-12-19 1294200]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:WINDOWSsystem32DRIVERSbtport.sys [2008-02-04 37160]
R3 BTKRNL;Bluetooth Bus Enumerator; C:WINDOWSsystem32DRIVERSbtkrnl.sys [2008-07-24 991656]
R3 Epfwndis;Eset Personal Firewall; C:WINDOWSsystem32DRIVERSEpfwndis.sys [2010-03-24 32584]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Microsoft HID Class Driver; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:WINDOWSsystem32DRIVERSigxpmp32.sys [2008-02-15 5854752]
R3 KmxCfg;KmxCfg; C:WINDOWSSystem32DRIVERSkmxcfg.sys [2009-09-30 239608]
R3 mouhid;Mouse HID Driver; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-08-17 12160]
R3 STHDA;IDT High Definition Audio CODEC; C:WINDOWSsystem32driverssthda.sys [2008-08-29 1388980]
R3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2008-07-31 230464]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-14 32128]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-14 20608]
R3 usbvideo;USB Video Device (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2008-04-14 121984]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:WINDOWSsystem32DRIVERSyk51x86.sys [2008-06-27 289024]
S0 apmzpa;apmzpa; C:WINDOWSsystem32driversapmzpa.sys []
S2 avgntflt;avgntflt; ??C:WINDOWSSYSTEM32driversavgntflt.sys []
S3 Arp1394;1394 ARP Client Protocol; C:WINDOWSsystem32DRIVERSarp1394.sys [2008-04-14 60800]
S3 btaudio;Bluetooth Audio Device; C:WINDOWSsystem32driversbtaudio.sys [2008-05-30 534568]
S3 BTWDNDIS;Bluetooth LAN Access Server; C:WINDOWSsystem32DRIVERSbtwdndis.sys [2008-07-24 156816]
S3 btwhid;btwhid; C:WINDOWSsystem32DRIVERSbtwhid.sys [2008-03-10 57384]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:WINDOWSSystem32Driversbtwusb.sys [2008-07-24 47272]
S3 CCDECODE;Closed Caption Decoder; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-14 17024]
S3 diskchk;diskchk; ??C:WINDOWSsystem32diskchk.sys []
S3 KmxAMVet;KmxAMVet; ??C:WINDOWSsystem32DriversKmxAMVet.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:WINDOWSsystem32driversMSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-14 10880]
S3 NIC1394;1394 Net Driver; C:WINDOWSsystem32DRIVERSnic1394.sys [2008-04-14 61824]
S3 pcidisk;pcidisk; ??C:WINDOWSsystem32pcidisk.sys []
S3 sdbus;sdbus; C:WINDOWSsystem32DRIVERSsdbus.sys [2008-04-14 79232]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-14 15232]
S3 usbscan;USB Scanner Driver; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 WSTCODEC;World Standard Teletext Codec; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2006-09-29 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-29 82944]
S4 agp440;Intel AGP Bus Filter; C:WINDOWSsystem32DRIVERSagp440.sys [2008-04-14 42368]
S4 agpCPQ;Compaq AGP Bus Filter; C:WINDOWSsystem32DRIVERSagpCPQ.sys [2008-04-14 44928]
S4 alim1541;ALI AGP Bus Filter; C:WINDOWSsystem32DRIVERSalim1541.sys [2008-04-14 42752]
S4 amdagp;AMD AGP Bus Filter Driver; C:WINDOWSsystem32DRIVERSamdagp.sys [2008-04-14 43008]
S4 cbidf;cbidf; C:WINDOWSsystem32DRIVERScbidf2k.sys [2001-08-17 13952]
S4 sisagp;SIS AGP Bus Filter; C:WINDOWSsystem32DRIVERSsisagp.sys [2008-04-14 40960]
S4 viaagp;VIA AGP Bus Filter; C:WINDOWSsystem32DRIVERSviaagp.sys [2008-04-14 42240]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 btwdins;Bluetooth Service; C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe [2008-07-30 346720]
R2 CAISafe;CAISafe; C:Program FilesCACA Internet Security SuiteCA Anti-Virus Plusisafe.exe [2010-03-20 212992]
R2 ccSchedulerSVC;CA Common Scheduler Service; C:Program FilesCACA Internet Security Suiteccschedulersvc.exe [2010-04-06 206160]
R2 ekrn;ESET Service; C:Program FilesESETESET Smart Securityekrn.exe [2010-03-24 810120]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:Program FilesLavasoftAd-AwareAAWService.exe [2009-05-28 1314704]
R2 STacSV;Audio Service; C:Program FilesIDTWDMSTacSV.exe [2008-08-29 237667]
R2 UmxAgent;HIPS Event Manager; C:Program FilesCASharedComponentsHIPSEngineUmxAgent.exe [2009-08-04 887288]
R2 UmxCfg;HIPS Configuration Interpreter; C:Program FilesCASharedComponentsHIPSEngineUmxCfg.exe [2009-07-13 760664]
R2 UmxPol;HIPS Policy Manager; C:Program FilesCASharedComponentsHIPSEngineUmxPol.exe [2009-07-27 227832]
R2 YahooAUService;Yahoo! Updater; C:Program FilesYahoo!SoftwareUpdateYahooAUService.exe [2008-11-09 602392]
R3 CaCCProvSP;CaCCProvSP; C:Program FilesCACA Internet Security Suiteccprovsp.exe [2010-04-06 251216]
R3 hpqwmiex;hpqwmiex; C:Program FilesHewlett-PackardSharedhpqwmiex.exe [2008-04-16 165192]
S2 6to4;Network Security; C:WINDOWSSystem32svchost.exe [2008-04-14 14336]
S2 gupdate;?????? Google Update (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-03-07 135664]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:Program FilesESETESET Smart SecurityEHttpSrv.exe [2010-03-24 33560]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 getPlusHelper;getPlus(R) Helper; C:WINDOWSSystem32svchost.exe [2008-04-14 14336]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2010-03-07 182768]
S3 IDriverT;InstallDriver Table Manager; c:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:Program FilesMcAfee Security Scan2.0.181McCHSvc.exe [2010-01-15 227232]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-10-19 913408]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]
EOF
Здравствуйте. 🙂
Скачайте ComboFix
Сделайте его лог, прикрепите его.
Cкачайте Gmer . Запустите программу. После автоматической экспресс-проверки, отметьте галочкой все жесткие диски и нажмите на кнопку Scan. После окончания проверки сохраните его лог (нажмите на кнопку Save) под каким хотите именем, например Gmer.log и прикрепите лог сюда.
- Для ответа в этой теме необходимо авторизоваться.
