[duppi]

Attach

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Microsoft Windows 7 Ultimate
Boot Device: DeviceHarddiskVolume1
Install Date: 05.01.2010 20:01:29
System Uptime: 16.03.2010 7:26:52 (0 hours ago)

Motherboard: ASUSTeK Computer INC. | | M2N68
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ | AM2 | 2200/200mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) — 30 GiB total, 13,622 GiB free.
D: is FIXED (NTFS) — 45 GiB total, 14,749 GiB free.
E: is CDROM ()
F: is FIXED (NTFS) — 47 GiB total, 19,951 GiB free.
G: is FIXED (NTFS) — 885 GiB total, 299,287 GiB free.

==== Disabled Device Manager Items =============

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: Null
Device ID: ROOTLEGACY_NULL000
Manufacturer:
Name: Null
PNP Device ID: ROOTLEGACY_NULL000
Service: Null

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Сетевой контроллер NVIDIA nForce
Device ID: PCIVEN_10DE&DEV_054C&SUBSYS_82B31043&REV_A23&267A616A&0&50
Manufacturer: NVIDIA
Name: Сетевой контроллер NVIDIA nForce
PNP Device ID: PCIVEN_10DE&DEV_054C&SUBSYS_82B31043&REV_A23&267A616A&0&50
Service: NVENETFD

==== System Restore Points ===================

RP57: 15.03.2010 13:42:10 — Removed SUPERAntiSpyware Free Edition

==== Installed Programs ======================

µTorrent
2007 Microsoft Office Suite Service Pack 2 (SP2)
7-Zip 9.10 beta
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.2 — Russian
Adobe Shockwave Player 11.5
AIMP2
AIMP2: Audio Tools
AnVir Task Manager
Apollo Audio DVD Creator 1.2.55
Ashampoo Burning Studio 9.10
CCleaner
CyberLink PowerDVD 9
Dr.Web Security Space 5.0 (x86)
FastStone Image Viewer 4.1 Beta
foobar2000 v1.0 (Complex Ideas)
Google Talk (remove only)
Google Toolbar for Internet Explorer
HijackThis 2.0.2
ICE Book Reader Professional v8.10.2a Russian
Java(TM) 6 Update 17
Media Player Classic — Home Cinema v. 1.3.1489.0 x86
Medieval CUE Splitter
Microsoft Office Профессиональный 2007
Microsoft Office Access MUI (Russian) 2007
Microsoft Office Excel 2007 Help Обновление (KB963678)
Microsoft Office Excel MUI (Russian) 2007
Microsoft Office Outlook 2007 Help Обновление (KB963677)
Microsoft Office Outlook MUI (Russian) 2007
Microsoft Office Powerpoint 2007 Help Обновление (KB963669)
Microsoft Office PowerPoint MUI (Russian) 2007
Microsoft Office Professional 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Russian) 2007
Microsoft Office Proof (Ukrainian) 2007
Microsoft Office Proofing (Russian) 2007
Microsoft Office Publisher MUI (Russian) 2007
Microsoft Office Shared MUI (Russian) 2007
Microsoft Office Word 2007 Help Обновление (KB963665)
Microsoft Office Word MUI (Russian) 2007
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.17
Monkey’s Audio
NVIDIA Display Control Panel
NVIDIA Drivers
Opera 10.10
Paragon Partition Manager 9.0 Professional
PerfectDisk 10 Professional
PVSonyDll
Reg Organizer 5.0
Revo 5.1
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB969679)
Security Update for Microsoft Office Excel 2007 (KB969682)
Security Update for Microsoft Office PowerPoint 2007 (KB957789)
Security Update for Microsoft Office Publisher 2007 (KB969693)
Security Update for Microsoft Office system 2007 (KB969613)
Security Update for Microsoft Office Word 2007 (KB969604)
Skype™ 4.1
Total Commander 7.04 PowerPack
True Launch Bar

UltraISO Premium V9.35
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office Outlook 2007 (KB969907)
Update for Outlook 2007 Junk Email Filter (kb971933)
VLC media player 1.0.3-rc
VUPlayer
WinImage
WinRAR archiver
Wondershare PDF to Word (Build 1.0.1.4)
Wondershare PDF to Word 1.0.1.4
Zoom Player (remove only)
Zoom Player Russian language (remove only)

==== End Of File ===========================

[duppi]

Добрый день!
Пострадали оба браузера, Opera и IE. Кэш и кукисы чистил, программно и вручную. Помимо этого, USD и JD, не могут нормально работать. Обращался к автору USD, он проверял лог, сообщив, что проблема не в его продукте, отправил на поиски заразы.
Спасибо за быстрый ответ!
=======================
DDS

DDS (Ver_09-12-01.01) — NTFSx86
Run by Duppi at 7:47:43,11 on 16.03.2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate 6.1.7600.0.1251.7.1049.18.2047.1096 [GMT 3:00]

AV: Spy Emergency *On-access scanning disabled* (Updated) {82117492-906E-4b02-A33A-84D42A2DD907}
SP: Spy Emergency *disabled* (Updated) {82117492-906E-4b02-A33A-84D42A2DD907}

============== Running Processes ===============

C:Windowssystem32wininit.exe
C:Windowssystem32lsm.exe
C:Windowssystem32svchost.exe -k DcomLaunch
C:Windowssystem32nvvsvc.exe
C:Windowssystem32svchost.exe -k RPCSS
C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted
C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted
C:Windowssystem32svchost.exe -k netsvcs
C:Windowssystem32svchost.exe -k LocalService
C:Windowssystem32nvvsvc.exe
C:Windowssystem32svchost.exe -k NetworkService
C:WindowsSystem32spoolsv.exe
C:Windowssystem32svchost.exe -k LocalServiceNoNetwork
C:Program FilesCommon FilesDoctor WebScanning Enginedwengine.exe
C:PROGRA~1DrWebspidernt.exe
C:WindowsSystem32svchost.exe -k secsvcs
C:Windowssystem32SearchIndexer.exe
C:Windowssystem32taskhost.exe
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:WindowsSystem32Revo51Task.exe
C:Program FilesDrWebspideragent.exe
C:Program FilesDrWebSpIDerMl.exe
C:Program FilesDrWebspiderui.exe
C:Program FilesAnVir Task ManagerAnVir.exe
C:Windowssystem32wuauclt.exe
C:Program FilesGoogleGoogle Talkgoogletalk.exe
C:Program FilesJavajre6binjavaw.exe
F:Program FilesUSDownloader135USDownloader.exe
C:Program FilesOperaopera.exe
C:WindowsSystem32svchost.exe -k WerSvcGroup
C:Windowssystem32SearchProtocolHost.exe
C:Windowssystem32SearchFilterHost.exe
C:UsersDuppiDesktopdds.scr
C:Windowssystem32conhost.exe
C:Windowssystem32wbemwmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} — c:program filesgooglegoogle toolbarGoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} — c:program filesgooglegoogletoolbarnotifier5.4.4525.1752swg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} — c:program filesjavajre6binjp2ssv.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} — c:program filesgooglegoogle toolbarGoogleToolbar_32.dll
uRun: [googletalk] «c:program filesanvir task managerAnVir.exe»
uRun: [Google Talk] «c:program filesgooglegoogle talkgoogletalk.exe»
mRun: [Revo51TaskbarApp] c:windowssystem32Revo51Task.exe
mRun: [SpIDerAgent] «c:program filesdrwebSpIDerAgent.exe»
mRun: [SpIDerMail] «c:program filesdrwebspiderml.exe»
mRun: [SpIDerNT] c:progra~1drwebspiderui.exe /agent
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: &Экспорт в Microsoft Excel — c:progra~1micros~3office12EXCEL.EXE/3000
IE: Google ВикиКомментарии… — c:program filesgooglegoogle toolbarcomponentGoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
IE: Проверить ссылку Dr.Web — http://www.drweb.com/online/drweb-online-ru.html
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} — {FF059E31-CC5A-4E2E-BF3B-96E929D65503} — c:progra~1micros~3office12REFIEBAR.DLL
LSP: c:program filesdrwebdrwebsp.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} — hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} — hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} — hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} — hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
TCP: {252D05AC-F332-4BAB-9100-AD5C96B176DB} = 192.168.1.1
TCP: {676F888E-939A-4AD0-9336-6A68D1090F4F} = 192.168.100.2,212.188.4.10
TCP: {769567C9-E3C0-4324-A015-2CC8A100B73B} = 192.168.100.2,212.188.4.10
Handler: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — c:progra~1common~1skypeSKYPE4~1.DLL

============= SERVICES / DRIVERS ===============

R0 hotcore3;hotcore3;c:windowssystem32drivershotcore3.sys [2010-1-6 39472]
R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2010/01/06 19:07:00];c:program filescyberlinkpowerdvd900.fcl [2009-2-28 87536]
R2 DrWebEngine;Dr.Web Scanning Engine (DrWebEngine);c:program filescommon filesdoctor webscanning enginedwengine.exe [2009-9-22 869688]
R2 SPIDER;SpIDer Guard File System Monitor;c:progra~1drwebspider.sys [2009-8-17 306464]
R2 SPIDERNT;SpIDer Guard for Windows;c:progra~1drwebspidernt.exe [2009-8-17 231328]
R3 REVO51;REVO51;c:windowssystem32driversrevo51.sys [2010-1-5 144008]
R3 USB_RNDIS_51;ZTE USB Remote NDIS Device Driver;c:windowssystem32driversusb8023.sys [2009-7-14 15872]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet — NDIS 6.0;c:windowssystem32driversb57nd60x.sys [2009-7-14 229888]
S3 c2wts;Claims to Windows Token Service;c:program fileswindows identity foundationv3.5c2wtshost.exe [2009-12-17 13080]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;f:program filesadawareportableappadawareAAWService.exe [2010-2-4 1229232]

=============== Created Last 30 ================

2010-03-15 17:17:16 0 d

---

w- c:program filestrend micro
2010-03-15 14:21:00 0 d

---

w- c:program filescommon filesPC Tools
2010-03-15 12:15:28 95024 —-a-w- c:windowssystem32driversSBREDrv.sys
2010-03-15 06:52:28 15880 —-a-w- c:windowssystem32lsdelete.exe
2010-03-15 06:13:48 0 d

---

w- c:programdataLavasoft
2010-03-12 13:30:41 31 —-a-w- c:windowsidc.ini
2010-03-12 13:30:41 167 —-a-w- c:windowsusdthank.ini
2010-03-07 15:07:52 0 d

---

w- c:program filesfoobar2000 v1.0
2010-02-24 05:16:49 641536 —-a-w- c:windowssystem32CPFilters.dll
2010-02-24 05:16:49 204288 —-a-w- c:windowssystem32MSNP.ax
2010-02-24 05:16:48 417792 —-a-w- c:windowssystem32msdri.dll
2010-02-24 05:16:47 465408 —-a-w- c:windowssystem32psisdecd.dll
2010-02-24 05:16:32 2048 —-a-w- c:windowssystem32tzres.dll
2010-02-22 13:09:46 0 —ha-w- c:windowssystem32driversMsft_User_WpdMtpDr_01_09_00.Wdf
2010-02-18 09:24:02 0 d

---

w- c:program filesWondershare
2010-02-18 09:13:40 0 d

---

w- C:Temp

==================== Find3M ====================

2010-03-06 06:08:48 676416 —-a-w- c:windowssystem32perfh019.dat
2010-03-06 06:08:48 129682 —-a-w- c:windowssystem32perfc019.dat
2010-02-24 06:16:06 181632

---

w- c:windowssystem32MpSigStub.exe
2010-02-17 15:26:24 107000 —-a-w- c:windowssystem32driversdwprot.sys
2010-01-18 23:29:31 85504 —-a-w- c:windowssystem32secproc_ssp_isv.dll
2010-01-18 23:29:31 85504 —-a-w- c:windowssystem32secproc_ssp.dll
2010-01-18 23:29:31 365568 —-a-w- c:windowssystem32secproc_isv.dll
2010-01-18 23:29:30 369152 —-a-w- c:windowssystem32secproc.dll
2010-01-18 23:28:33 324608 —-a-w- c:windowssystem32RMActivate_isv.exe
2010-01-18 23:28:33 277504 —-a-w- c:windowssystem32RMActivate_ssp_isv.exe
2010-01-18 23:28:30 320512 —-a-w- c:windowssystem32RMActivate.exe
2010-01-18 23:28:30 280064 —-a-w- c:windowssystem32RMActivate_ssp.exe
2010-01-11 19:18:00 962664 —-a-w- c:windowssystem32nvsvc.dll
2010-01-11 19:18:00 13679720 —-a-w- c:windowssystem32nvcpl.dll
2010-01-11 19:18:00 129640 —-a-w- c:windowssystem32nvvsvc.exe
2010-01-11 19:18:00 110696 —-a-w- c:windowssystem32nvmctray.dll
2010-01-06 16:03:05 505128 —-a-w- c:windowssystem32msvcp71.dll
2010-01-06 16:03:05 353576 —-a-w- c:windowssystem32msvcr71.dll
2010-01-06 16:03:05 29480 —-a-w- c:windowssystem32msxml3a.dll
2009-12-21 16:26:14 411368 —-a-w- c:windowssystem32deploytk.dll
2009-12-20 22:22:50 14590464 —-a-w- c:windowssystem32wmploc.dll
2009-12-20 22:22:48 8582656 —-a-w- c:windowssystem32spwizimg.dll
2009-12-20 22:22:43 859648 —-a-w- c:windowssystem32OobeFldr.dll
2009-12-20 22:22:42 756224 —-a-w- c:windowssystem32imagesp1.dll
2009-12-20 22:22:41 25567232 —-a-w- c:windowssystem32imageres.dll
2009-12-20 22:22:32 902656 —-a-w- c:windowssystem32fontext.dll
2009-12-20 22:22:31 6564864 —-a-w- c:windowssystem32DDORes.dll
2009-12-19 09:02:55 977920 —-a-w- c:windowssystem32wininet.dll
2009-12-19 09:02:52 12288 —-a-w- c:windowssystem32tsbyuv.dll
2009-12-19 09:02:48 1328640 —-a-w- c:windowssystem32quartz.dll
2009-12-19 09:02:46 22016 —-a-w- c:windowssystem32msyuv.dll
2009-12-19 09:02:45 31744 —-a-w- c:windowssystem32msvidc32.dll
2009-12-19 09:02:45 13312 —-a-w- c:windowssystem32msrle32.dll
2009-12-19 09:02:40 84480 —-a-w- c:windowssystem32mciavi32.dll
2009-12-19 09:02:39 50176 —-a-w- c:windowssystem32iyuv_32.dll
2009-12-19 09:02:01 91648 —-a-w- c:windowssystem32avifil32.dll
2009-12-18 10:18:14 2912256 —-a-w- c:windowsexplorer.exe
2009-12-17 20:00:49 11776 —-a-w- c:windowssystem32rsatclient.dll
2009-12-17 19:58:45 541184 —-a-w- c:windowssystem32kerberos.dll
2009-12-17 19:57:40 303104 —-a-w- c:windowssystem32msinfo32.exe
2009-12-17 19:57:08 1033728 —-a-w- c:windowssystem32mstsc.exe
2009-12-17 19:56:53 205312 —-a-w- c:windowssystem32efscore.dll
2009-12-17 19:56:38 544256 —-a-w- c:windowssystem32cscsvc.dll
2009-12-17 19:55:51 2702336 —-a-w- c:windowssystem32mstscax.dll
2009-12-17 19:55:51 152064 —-a-w- c:windowssystem32rdpdd.dll
2009-12-17 19:55:17 498688 —-a-w- c:windowssystem32iphlpsvc.dll
2009-12-17 19:55:01 8192 —-a-w- c:windowssystem32spwmp.dll
2009-12-17 19:55:01 4096 —-a-w- c:windowssystem32dxmasf.dll
2009-12-17 19:54:27 1003520 —-a-w- c:windowssystem32cryptui.dll
2009-12-17 19:53:55 268800 —-a-w- c:windowssystem32Wldap32.dll
2009-12-17 19:53:21 28672 —-a-w- c:windowssystem32dnscacheugc.exe
2009-12-17 19:53:21 132608 —-a-w- c:windowssystem32dnsrslvr.dll
2009-12-17 19:51:47 1152000 —-a-w- c:windowssystem32crypt32.dll
2009-12-17 19:50:03 86528 —-a-w- c:windowssystem32isoburn.exe
2009-12-17 19:48:11 768000 —-a-w- c:windowssystem32localspl.dll
2009-12-17 19:48:11 66048 —-a-w- c:windowssystem32PrintBrmUi.exe
2009-12-17 19:48:11 492032 —-a-w- c:windowssystem32win32spl.dll
2009-12-17 19:48:11 316416 —-a-w- c:windowssystem32spoolsv.exe
2009-12-17 19:47:25 1037312 —-a-w- c:windowssystem32lsasrv.dll
2009-12-17 19:45:08 3177984 —-a-w- c:windowssystem32mf.dll
2009-12-17 19:44:38 582656 —-a-w- c:windowssystem32gpprefcl.dll
2009-12-17 19:43:33 91136 —-a-w- c:windowssystem32dot3api.dll
2009-12-17 19:43:33 82432 —-a-w- c:windowssystem32dot3cfg.dll
2009-12-17 19:43:33 47104 —-a-w- c:windowssystem32dot3dlg.dll
2009-12-17 19:43:33 214016 —-a-w- c:windowssystem32dot3svc.dll
2009-12-17 19:43:33 115200 —-a-w- c:windowssystem32dot3msm.dll
2009-12-17 19:43:02 1025536 —-a-w- c:windowssystem32VSSVC.exe
2009-12-17 19:41:58 1286128 —-a-w- c:windowssystem32ntdll.dll
2009-12-17 19:41:29 220160 —-a-w- c:windowssystem32schannel.dll
2009-12-17 19:41:14 40960 —-a-w- c:windowssystem32wwanprotdim.dll
2009-12-17 19:40:59 488448 —-a-w- c:windowssystem32evr.dll
2009-12-17 19:40:44 668160 —-a-w- c:windowssystem32autochk.exe
2009-12-17 19:40:29 49152 —-a-w- c:windowssystem32taskhost.exe
2009-12-17 19:39:28 453120 —-a-w- c:windowssystem32vds.exe
2009-12-17 19:38:42 473088 —-a-w- c:windowssystem32audiosrv.dll
2009-12-17 19:38:42 442880 —-a-w- c:windowssystem32AUDIOKSE.dll
2009-12-17 19:38:42 374784 —-a-w- c:windowssystem32AudioEng.dll
2009-12-17 19:37:42 547840 —-a-w- c:windowssystem32PortableDeviceApi.dll
2009-12-17 19:37:27 257024 —-a-w- c:windowssystem32msv1_0.dll
2009-12-17 19:37:01 571904 —-a-w- c:windowssystem32oleaut32.dll
2009-12-17 19:36:31 563712 —-a-w- c:windowssystem32netlogon.dll
2009-12-17 19:36:17 56320 —-a-w- c:windowssystem32vsstrace.dll
2009-12-17 19:36:17 1124352 —-a-w- c:windowssystem32vssapi.dll
2009-12-17 19:36:02 264704 —-a-w- c:windowssystem32dxdiag.exe
2009-12-17 19:36:02 210432 —-a-w- c:windowssystem32dxdiagn.dll
2009-12-17 19:33:35 175616 —-a-w- c:windowssystem32scecli.dll
2009-12-17 19:33:06 318976 —-a-w- c:windowssystem32drvstore.dll
2009-12-17 19:32:37 34816 —-a-w- c:windowssystem32msasn1.dll
2009-12-17 19:31:11 507568 —-a-w- c:windowssystem32winload.exe
2009-12-17 19:31:11 442920 —-a-w- c:windowssystem32winresume.exe
2009-12-17 19:31:11 1320960 —-a-w- c:windowssystem32CertEnroll.dll
2009-12-17 19:26:26 138240 —-a-w- c:windowssystem32rdpendp.dll
2009-12-17 19:26:10 199168 —-a-w- c:windowssystem32onex.dll
2009-12-17 19:26:10 1111552 —-a-w- c:windowssystem32onexui.dll
2009-12-17 19:25:40 70656 —-a-w- c:windowssystem32fontsub.dll
2009-12-17 19:25:40 293888 —-a-w- c:windowssystem32atmfd.dll
2009-12-17 19:25:40 108544 —-a-w- c:windowssystem32t2embed.dll
2009-12-17 19:24:55 205824 —-a-w- c:windowssystem32framedynos.dll
2009-12-17 19:24:55 202752 —-a-w- c:windowssystem32framedyn.dll
2009-12-17 19:23:50 793600 —-a-w- c:windowssystem32vmsal.exe
2009-06-10 21:26:35 9633792 —sha-r- c:windowsfontsStaticCache.dat
2009-07-14 01:14:45 396800 —sha-w- c:windowswinsxsx86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86cWinMail.exe

============= FINISH: 7:48:40,53 ===============

[Автор]

Сообщения