Созданные ответы форума
-
Сообщения
-
ComboFix 09-09-03.02 — User 07.09.2009 16:49.1.2 — NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.1023.599 [GMT 4:00]
Running from: z:downloadsComboFix.exe
AV: avast! antivirus 4.8.1351 [VPS 090906-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Kaspersky Internet Security *On-access scanning disabled* (Outdated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.c:documents and settingsUserLocal SettingsTemporary Internet FilesEB9F12C_6E6B_4c03_AEBA_8C04CFA98AA4.gif
c:documents and settingsUserLocal SettingsTemporary Internet Files15913497_F86C_4218_8817_F50940D1E1B2.gif
c:documents and settingsUserLocal SettingsTemporary Internet Files29887DDE_00B9_4011_9CF7_59511F1ECC1B.gif
c:documents and settingsUserLocal SettingsTemporary Internet Files2A665EDD_5758_480c_8366_66DFC5F23877.gif
c:documents and settingsUserLocal SettingsTemporary Internet Files35B7DFFA_884F_4fbc_8E60_DA601BDC7BF7.gif
c:documents and settingsUserLocal SettingsTemporary Internet Files362FD6E8_8CDA_4c2a_A8AA-BDA22B321711.jpg
c:documents and settingsUserLocal SettingsTemporary Internet Files3DF04940_9866_4241_A998_0CDDFAFD147A.gif
c:documents and settingsUserLocal SettingsTemporary Internet Files426500D7_0FF3_426c_828D_065DBAEA0581.gif
c:documents and settingsUserLocal SettingsTemporary Internet Files478BD4AE_2691_438d_BDCA_3485DC022700.gif
c:documents and settingsUserLocal SettingsTemporary Internet Files5C6C645F_BAA8_4149_BFEB_2031230FF0FD.gif
c:documents and settingsUserLocal SettingsTemporary Internet Files61EA7D69_19D4_421a_A899_0DF4D58CD119.jpg
c:documents and settingsUserLocal SettingsTemporary Internet Files777FDAFB_83CF_4960_AA71_4E5D7BCD8E57.gif
c:documents and settingsUserLocal SettingsTemporary Internet Files8DA878D5_E80B_4721_B75A_17EFFAF1A700.gif
c:documents and settingsUserLocal SettingsTemporary Internet Files98F6DF79_7171_452d_9C26_C0193E12DBDF.gif
c:documents and settingsUserLocal SettingsTemporary Internet FilesA2B240D6_0386_419e_91C5_3F7D90437CD0.jpg
c:documents and settingsUserLocal SettingsTemporary Internet FilesC75CEF8D_5AF4_4563_8594_C45A45E14E63.gif
c:documents and settingsUserLocal SettingsTemporary Internet FilesE21285C1_40E6_435c_A69F_3387E7BD89CB.gif
c:documents and settingsUserLocal SettingsTemporary Internet FilesE9A4D648_ED73_4ea7_88B2_18332DBA4F3E.jpg
c:program filesMail.RuAgentMradllnewmrasearch.dll
c:program filesMyCentria
c:program filesMyCentriaFirefoxadcentria.uid
c:program filesMyCentriaFirefoxadcentria.xml
c:windows1022nzt-a-vi95s50e.ocx
c:windows104345zoj6629.bin
c:windows10550not-a9virus60cz.exe
c:windows105z6spa9bot6ad.cpl
c:windows106195irus109z.bin
c:windows11629hackto5l1fz.cpl
c:windows1169spyzare5021.ocx
c:windows117zspa9se15975.cpl
c:windows11858z9y6ad5.ocx
c:windows119fadzware9259.exe
c:windows12b2t9zeat3517.dll
c:windows12z15s9ambot1b5.ocx
c:windows1335ztr9j737.bin
c:windows13391not5azvirus4389.bin
c:windows13590hackt5o94z7.cpl
c:windows13z5spamb9t1dd.bin
c:windows14005sp9m5oz473.exe
c:windows14103z5rus394.dll
c:windows141059irusz57.bin
c:windows14595t5ojz80.bin
c:windows14878t59j3ze.bin
c:windows14cfdzwnloa5er14339.bin
c:windows1543zp942.dll
c:windows1559parse250z.cpl
c:windows15825wor9z58.exe
c:windows15907worm5za.bin
c:windows15909spaz9ot15d.cpl
c:windows1613s5zwar92913.cpl
c:windows162539roj2ze.ocx
c:windows16254spambot7z89.exe
c:windows16870not-a9vzruscd5.bin
c:windows17591no9-a-ziru54.dll
c:windows17926spam5ot6bz.cpl
c:windows17z79troj7195.cpl
c:windows18510zack59ol9.cpl
c:windows18539wo9z465.ocx
c:windows185dbackdooz949.cpl
c:windows189z4virus775.bin
c:windows189zsp516f.exe
c:windows19150wzrm5985.bin
c:windows19462w5rm14cz.dll
c:windows19607s9y59z.dll
c:windows19645spy64bz.exe
c:windows1965zt9oj29f.exe
c:windows19771vi9u53ze.dll
c:windows19918s5ambot32z.ocx
c:windows19950s95zbot17c.cpl
c:windows1996zvi9us55b.dll
c:windows19z28w95m27a.exe
c:windows1a37z9i5f514.ocx
c:windows1abbzddw5re25449.dll
c:windows1b9d5parse26z0.exe
c:windows1c5fsteal9z43.bin
c:windows1c6zbackdo9r8415.exe
c:windows1ce9azdwa5e7359.ocx
c:windows1z0919ot-a-viru5124.bin
c:windows1z2cd9wnloader3235.bin
c:windows1z35troj6f9.cpl
c:windows20856no9za-virus60a.dll
c:windows20z12t5oj4eb9.bin
c:windows2149not-a-v5ruz758.ocx
c:windows22408za9ktoo574e.dll
c:windows225829ot-a-vzrus646.dll
c:windows22f9backd5or164z.bin
c:windows231115pambot199z.dll
c:windows231z9hacktool529.cpl
c:windows234359i5us15z.ocx
c:windows23757tr9j2z3.dll
c:windows23z29h9ckto5l46c.cpl
c:windows24212vz59s45a.exe
c:windows24344not-a9vizus575.exe
c:windows24359virus6z19.ocx
c:windows244adownl9ade5z479.ocx
c:windows251bthzef894.bin
c:windows251zbac9door2790.ocx
c:windows2539th9zat293005.exe
c:windows256395ealz352.dll
c:windows2590z5roj9a6.dll
c:windows25918hackzoo91625.dll
c:windows267959cktool60z.dll
c:windows26906hz9ktool5a5.exe
c:windows269305orm7z6.exe
c:windows269505ir9s547z.exe
c:windows26e45parse194z.cpl
c:windows2719downzo5der795.ocx
c:windows27219zot-a-v9ru549d.ocx
c:windows275szy9605.dll
c:windows27z39spambot151.exe
c:windows2821wzr951c.ocx
c:windows28823sp5m9otze6.ocx
c:windows28959za5bot1de.bin
c:windows28d7thzef9579.cpl
c:windows29172hac9toolz5f.exe
c:windows29476nzt-5-virus249.exe
c:windows2970hzckto5l1ce.exe
c:windows2999zhac5toola9.ocx
c:windows2a485teaz3198.bin
c:windows2bf09pzware1554.exe
c:windows2c2dszeal595.bin
c:windows2d895hrea924z47.ocx
c:windows2e459dd5arez336.cpl
c:windows2e51adzw9re1249.ocx
c:windows2f9dthi5f2305z.exe
c:windows2fzcs5eal1949.ocx
c:windows2z66spywa59780.dll
c:windows3014t5iz92955.bin
c:windows30154tr9j4bbz.exe
c:windows301989orm538z.ocx
c:windows304zthie924145.exe
c:windows30534ha9ktzol2c8.cpl
c:windows30928spyz56.dll
c:windows3095backdooz596.cpl
c:windows3110zv9rus657.cpl
c:windows311z89py5cb.bin
c:windows31ebdownl5a9er19z.exe
c:windows323175iru9c1z.dll
c:windows3354spz19b.bin
c:windows3526wz9m723.ocx
c:windows355v9r56z4.ocx
c:windows3594spywarz2405.exe
c:windows35e5virz99.bin
c:windows35z7viru9205.ocx
c:windows3682ste5l1592z.dll
c:windows3688troz595.dll
c:windows36zfdow9loader17875.cpl
c:windows37b5stezl5095.cpl
c:windows37z2downloade95309.cpl
c:windows3903threat53547z.dll
c:windows39d6thrzat59410.exe
c:windows3a879tza53113.exe
c:windows3b5z9ir88.cpl
c:windows3c42sp59se308z.cpl
c:windows3c59vir9z03.cpl
c:windows3e50dzw9loader898.exe
c:windows3e5zvir3095.cpl
c:windows3ed5t9izf563.dll
c:windows3f58sparsez914.ocx
c:windows3z09viru57f9.bin
c:windows3z261spa9bo5653.exe
c:windows3z8b5ownl9ader3140.bin
c:windows3zd0a5dwar9122.bin
c:windows4059spy395z.exe
c:windows405cs5ealz0719.cpl
c:windows40edthizf1905.ocx
c:windows4112downz9a5er276.ocx
c:windows4445wzrm955.dll
c:windows4556spa5sz2499.exe
c:windows464z95r465.exe
c:windows4773v9ru572z.cpl
c:windows4859spywar51014z.cpl
c:windows48c89tea51035z.ocx
c:windows4945thzef922.ocx
c:windows4953sparsz23.cpl
c:windows4979vzr2500.ocx
c:windows4988backdozr27185.dll
c:windows4995s5yz59.exe
c:windows499dbaczdoor22815.bin
c:windows4a325p9ware1z52.exe
c:windows4aaathrea9475z.cpl
c:windows4aeadd9a5e226z.cpl
c:windows4b0zvir7959.ocx
c:windows4c5t59ef9z3.exe
c:windows4e4z5parse3940.cpl
c:windows4f92s5eaz2868.bin
c:windows4f9as5ealz999.exe
c:windows4faezown5oader1591.cpl
c:windows4zabthre9t5995.exe
c:windows5031spzmbot39b.cpl
c:windows5080sparse2z559.bin
c:windows50a6backdooz1952.dll
c:windows511abackdz5r2729.ocx
c:windows511cspzrs92373.dll
c:windows5149downloaderz305.dll
c:windows515czir1529.ocx
c:windows52259viruz2f9.dll
c:windows529zvi9us265.bin
c:windows52z36h9cktoolb3.exe
c:windows52zebackdoor5594.cpl
c:windows5356tzr9at220895.dll
c:windows5381threaz97378.cpl
c:windows5385szeal2921.exe
c:windows538at9ief9z8.bin
c:windows545eaddw9re9z8.cpl
c:windows549hacktozl561.cpl
c:windows54fcthr9at301z0.bin
c:windows54z29ddware3165.cpl
c:windows550zpywa5e28229.ocx
c:windows5533sparze29465.cpl
c:windows5545addwa5e2999z.ocx
c:windows5554thief29z6.bin
c:windows5556sp9mbo57z.ocx
c:windows55696viruz55a.dll
c:windows5598szambot9d.cpl
c:windows56147troj59z9.bin
c:windows56777spzm9ot67b.cpl
c:windows57143zp9mbot235.cpl
c:windows572cza95door1096.dll
c:windows57d9spywaze2828.dll
c:windows57downloader2759z.bin
c:windows582cdownloazer31289.ocx
c:windows589fz5dware485.ocx
c:windows589z7troj163.ocx
c:windows590s9y51z.dll
c:windows590z9spy1b8.cpl
c:windows59563hacktool9fz.dll
c:windows59593wzrm2c5.ocx
c:windows599zspars5908.bin
c:windows59a9szyware1752.ocx
c:windows59a9tzre9t24555.exe
c:windows59ad5warez033.dll
c:windows59adbackdo5z3011.exe
c:windows59d9threat5794z.ocx
c:windows59e1backdooz2946.exe
c:windows59z4steal325.exe
c:windows59z54wo9m415.cpl
c:windows59zdthie5639.cpl
c:windows5a00spywa9ez74.ocx
c:windows5a0bsz9al2116.bin
c:windows5aa9tzi9f7355.dll
c:windows5ab5addware559z.bin
c:windows5b58thiefz990.dll
c:windows5b59threat2436z.ocx
c:windows5be7b9ckdo5rz175.exe
c:windows5c05threatz43879.exe
c:windows5c455ownloaderz394.cpl
c:windows5c98thrzat39050.dll
c:windows5c99azdw5re818.exe
c:windows5cba9kdoorz0.bin
c:windows5d74downloz9er902.exe
c:windows5e3abzckdoor23995.ocx
c:windows5e4cspywa9e3z5.exe
c:windows5z77thie5922.cpl
c:windows5z96threat31652.ocx
c:windows5zb9threat39704.ocx
c:windows5zf5sp9ware2917.bin
c:windows6093t9reaz5895.dll
c:windows60a9backdozr2251.exe
c:windows63adt5i9f274z.exe
c:windows6509s9ambot15z.ocx
c:windows652evir95z.bin
c:windows654dthrea54z79.ocx
c:windows6559zorm15e.bin
c:windows6599threat1465z5.dll
c:windows66b85pywaze399.bin
c:windows66z3spy9are565.bin
c:windows67dz95arse30.ocx
c:windows684d9tezl1054.ocx
c:windows6932hazkt5ol33d9.bin
c:windows6937z9arse1945.cpl
c:windows6950thrzat98055.bin
c:windows69c5backdoorz552.cpl
c:windows69cfb5ckdooz901.bin
c:windows6afcz59ware1450.dll
c:windows6b6t5z9at8562.ocx
c:windows6ca5d5w9lzader1879.exe
c:windows6d035i956z.bin
c:windows6d15thief13z99.dll
c:windows6dz2spars514199.exe
c:windows6e7dadd9are254z.dll
c:windows6ez59teal2747.dll
c:windows6f58spyware292z.bin
c:windows6fzd9ir516.bin
c:windows6z339o5m471.cpl
c:windows6z57backdoor1691.bin
c:windows6zacsp5rs92819.ocx
c:windows7009stezl55479.dll
c:windows7093zirus25.cpl
c:windows720fspywz5e17059.cpl
c:windows72d5st9al2962z.cpl
c:windows72evz53096.cpl
c:windows7459szy28f.ocx
c:windows74z29or54b1.ocx
c:windows752cbackdzor2964.ocx
c:windows7547hacktozl399.exe
c:windows7561spars92z53.exe
c:windows7578sp9warez735.exe
c:windows75z1spyware991.cpl
c:windows765csparse1294z.ocx
c:windows78z6threa99957.bin
c:windows793szarse4345.ocx
c:windows79azspywar51950.cpl
c:windows7a0thrzat56194.dll
c:windows7ac0th9ezt59537.ocx
c:windows7d21thief5z79.dll
c:windows7d5bspywarz9739.ocx
c:windows7db5addw9ze9975.dll
c:windows7f18zddw9re552.exe
c:windows7ff9stezl31095.ocx
c:windows7z075p94b.ocx
c:windows7z655ack9oor1328.ocx
c:windows853zv9rus3c8.exe
c:windows86z55py97.ocx
c:windows8959z9y41e.dll
c:windows8a0ad59are2z98.dll
c:windows9059ir3091z.ocx
c:windows90d8viz2551.bin
c:windows912zha5ktool7e9.bin
c:windows919sparse2z59.cpl
c:windows92050zpy245.ocx
c:windows9224not-a-zir5s5d.bin
c:windows9249viru5784z.dll
c:windows9259downloader5355z.ocx
c:windows927z9tro52ee.ocx
c:windows93z02not-a-viru5301.dll
c:windows94057not-a-vz5us479.cpl
c:windows942z9rus2605.cpl
c:windows9450viz2790.cpl
c:windows94557szy16.exe
c:windows94646spazb5t5e8.cpl
c:windows9482s5amb9t56dz.ocx
c:windows9525not-azv9rus283.exe
c:windows9578zworm5.dll
c:windows958cthreat3z297.cpl
c:windows959bviz216.bin
c:windows96252hacktool2bz.ocx
c:windows9659zparse1452.dll
c:windows9668wo9m354z.cpl
c:windows96z6tro9565.exe
c:windows9712ha95tool6zc.dll
c:windows98495irzs30f.exe
c:windows986sp95zd.ocx
c:windows987225pamzot7b7.exe
c:windows987zbackdoor28755.exe
c:windows9882vzrus59e.cpl
c:windows9898notza-v9rus24c5.dll
c:windows99643zot-a-viru57aa.exe
c:windows99z795rm677.bin
c:windows9f15sparsez83.exe
c:windows9z80worm35f.cpl
c:windows9z95spy975.ocx
c:windowsc92vz96915.cpl
c:windowse81downloazer935.ocx
c:windowsef85parsez549.cpl
c:windowsf5bdow9lozder577.cpl
c:windowsfz6thief95335.cpl
c:windowssystem3210526spy998z.cpl
c:windowssystem32105backdo9rz920.cpl
c:windowssystem3210785not-a-vzrus6a09.bin
c:windowssystem321092bazkd5or1978.cpl
c:windowssystem3210954sza5bot72f.dll
c:windowssystem32109815iruz5299.dll
c:windowssystem32111dsteal5695z.cpl
c:windowssystem321157sparse1929z.ocx
c:windowssystem3211595not-z-viru95a6.ocx
c:windowssystem32116z9wor52b.ocx
c:windowssystem3211908zot-a-vir59320.exe
c:windowssystem3211975spy9z4.cpl
c:windowssystem321199backdozr5616.bin
c:windowssystem3211c8down9zader25775.exe
c:windowssystem3211d3vi93z475.dll
c:windowssystem3212455spam9zt226.bin
c:windowssystem3212963tro5z7d.dll
c:windowssystem321299z5roj21e.exe
c:windowssystem3212fa95rz164.bin
c:windowssystem3213305spazbo553d9.dll
c:windowssystem32136et5rea91z680.dll
c:windowssystem3213742zi9us695.bin
c:windowssystem32137z6spy3539.cpl
c:windowssystem3213d9s9a5sez198.cpl
c:windowssystem3215338z9rm595.bin
c:windowssystem3215455s9z9d.exe
c:windowssystem321549h9cktozl15.ocx
c:windowssystem3215889zi5us311.exe
c:windowssystem32160ad9z5loader2249.cpl
c:windowssystem3216498spzmbo975b5.dll
c:windowssystem32164z5ha9ktool157.dll
c:windowssystem321655doz9loader1041.bin
c:windowssystem321655znot-a-5irus93.cpl
c:windowssystem3216711hz9ktoo5361.ocx
c:windowssystem32168559acktool5z3.cpl
c:windowssystem3217251spy9z5.bin
c:windowssystem3217260spz590.dll
c:windowssystem3217835spamboz55e9.ocx
c:windowssystem321797t9oj75dz.dll
c:windowssystem3218678hac9tzol3b45.bin
c:windowssystem3218750hackto9l349z.dll
c:windowssystem32190z6not-a-9irus3105.bin
c:windowssystem3219119sp52fz.exe
c:windowssystem3219395not-a-vizus704.cpl
c:windowssystem3219449zir5sfa.bin
c:windowssystem3219662s9ambot755z.exe
c:windowssystem32198aad59arez578.bin
c:windowssystem32199zsteal2152.cpl
c:windowssystem3219z21spamb5t5f0.dll
c:windowssystem321a5295reat13953z.ocx
c:windowssystem321b7d9ackdo5z556.cpl
c:windowssystem321e6fszyware25975.ocx
c:windowssystem321f62spzware94545.ocx
c:windowssystem321z260troj905.ocx
c:windowssystem321z282t5o9331.cpl
c:windowssystem321z3059roj329.exe
c:windowssystem321z599spy936.cpl
c:windowssystem321z799virus7d35.dll
c:windowssystem321z847ha59tool4b7.exe
c:windowssystem321z891s5y2a4.ocx
c:windowssystem321z959worm939.ocx
c:windowssystem321zc8spy95re2189.bin
c:windowssystem322024sp9ware145z.dll
c:windowssystem32205z2s95mbot355.exe
c:windowssystem3220909sp95boz83.cpl
c:windowssystem32209185zo94fe.exe
c:windowssystem32209z6spy555.ocx
c:windowssystem32212659pzmbot75.ocx
c:windowssystem322137zhacktool953.bin
c:windowssystem3221439sza95ot66c.exe
c:windowssystem3221z98worm4599.ocx
c:windowssystem3221z9thi5f916.cpl
c:windowssystem3222290not-a9v5rusz9c.exe
c:windowssystem32225z5virus559.exe
c:windowssystem3222b9thief55z9.ocx
c:windowssystem3222z36hac9tool54.ocx
c:windowssystem32231955r9jez.bin
c:windowssystem3223416hacktzo9555.bin
c:windowssystem322358zirus219.bin
c:windowssystem3223912zr9j225.ocx
c:windowssystem3223974spambzt3e85.ocx
c:windowssystem32239baddwar59z16.ocx
c:windowssystem3223e0spzware9115.bin
c:windowssystem3223e1zp9rse1956.exe
c:windowssystem32241949pzmb5t507.bin
c:windowssystem322423z9r5j2c1.ocx
c:windowssystem3224450zp9mbot508.cpl
c:windowssystem32251bsparsz13739.bin
c:windowssystem32252095izus510.bin
c:windowssystem322521z95eat24655.ocx
c:windowssystem322525do9nlozder2062.cpl
c:windowssystem322536thrzat22928.dll
c:windowssystem32255dstez52996.dll
c:windowssystem3225629n9t-5-virus2cz.dll
c:windowssystem32256ezhre9521853.dll
c:windowssystem322580zpa95e2385.exe
c:windowssystem3225za9hreat7753.ocx
c:windowssystem322694t5rea99444z.cpl
c:windowssystem32272859iruz350.cpl
c:windowssystem322744noz-a-v9r5s514.exe
c:windowssystem3227709spz5359.exe
c:windowssystem322791vi51z95.ocx
c:windowssystem3227z55spy7a99.bin
c:windowssystem322801759t-a-virusdz.dll
c:windowssystem3228150hzcktool2a29.exe
c:windowssystem3228260tr9j35z5.cpl
c:windowssystem3228479not-a-9iruz4cd5.bin
c:windowssystem32291905pamboz437.cpl
c:windowssystem32293zhreat85335.exe
c:windowssystem3229413ziru5bc.ocx
c:windowssystem3229519spy29z5.ocx
c:windowssystem3229523vir9z6e85.cpl
c:windowssystem32295cthreat2456z.ocx
c:windowssystem32296faddzare1567.cpl
c:windowssystem3229843wzrm159.cpl
c:windowssystem3229899zpy59c.dll
c:windowssystem3229z37s9y5e8.dll
c:windowssystem322a48dow59oadzr765.exe
c:windowssystem322ab2d59nloazer2657.dll
c:windowssystem322b53bac9zoor2949.exe
c:windowssystem322bc9t5zeat29538.dll
c:windowssystem322c4aaddw9re17z5.cpl
c:windowssystem322czbs5eal31499.ocx
c:windowssystem322dz9spyw5re9061.ocx
c:windowssystem322ec29pazse5647.ocx
c:windowssystem322z858spam5ot69e.bin
c:windowssystem322z8avir9253.ocx
c:windowssystem322z911w5rm49e.ocx
c:windowssystem322z990s5y147.ocx
c:windowssystem322za0backdo9r552.cpl
c:windowssystem322zaes5ars960.bin
c:windowssystem323015troz489.dll
c:windowssystem32302365roz97a.cpl
c:windowssystem3230599spz57f.dll
c:windowssystem3230b0viz2539.bin
c:windowssystem3231139h5zf128.exe
c:windowssystem3231239z5rus655.exe
c:windowssystem3231399not9a-5zrus6c7.dll
c:windowssystem32314z55acktoo927b.bin
c:windowssystem323156downloaz9r220.bin
c:windowssystem3231872not9z5virus371.bin
c:windowssystem3231935h9cktooza3.dll
c:windowssystem3231959viruz7d4.ocx
c:windowssystem3231975wormza5.cpl
c:windowssystem323199virz9465.cpl
c:windowssystem323259vzr529.dll
c:windowssystem32335fthizf5249.dll
c:windowssystem32338859oz179.bin
c:windowssystem323392addwarez656.dll
c:windowssystem3235530spazbot5d9.exe
c:windowssystem3235831w9rm1bz.exe
c:windowssystem323712s5y9aze715.cpl
c:windowssystem323888zddware1559.bin
c:windowssystem3239c1v5r2z86.dll
c:windowssystem323b3c9py5are1z74.bin
c:windowssystem323ba4spars960z5.cpl
c:windowssystem323bfathr5at2z198.cpl
c:windowssystem323e41do9nloazer14865.exe
c:windowssystem323edcsza5se2913.ocx
c:windowssystem323fb9addwarez52.dll
c:windowssystem323fd0thrza956952.cpl
c:windowssystem323z68downl9a5er2945.exe
c:windowssystem323zc55ddw9re922.bin
c:windowssystem3242d55pyware2z09.dll
c:windowssystem32435ethi9f1354z.exe
c:windowssystem324548no5za-9irus4b0.bin
c:windowssystem324575spambot91z.cpl
c:windowssystem324590threat5698z.dll
c:windowssystem3245afsteaz2379.bin
c:windowssystem3246edadd5are3z98.ocx
c:windowssystem324714ad5wzre12859.exe
c:windowssystem324754zpars931935.exe
c:windowssystem3247z5spy9are1737.exe
c:windowssystem32485ath9ef288z.cpl
c:windowssystem324886not9a-virus565z.exe
c:windowssystem324888spam9otz45.ocx
c:windowssystem3248a095ckzoor1602.dll
c:windowssystem3248a1a9dwzre5236.exe
c:windowssystem3248b9vi996z5.ocx
c:windowssystem32491daddware503z.dll
c:windowssystem324938v5z461.exe
c:windowssystem324965vzr425.cpl
c:windowssystem3249b5zp5rse2381.ocx
c:windowssystem3249d05hrea929475z.cpl
c:windowssystem3249dd5oznloader3014.dll
c:windowssystem324b44ba5kdoor29z2.bin
c:windowssystem324d3a9zr29005.ocx
c:windowssystem324d9bthiez21465.dll
c:windowssystem324dzspywar53944.bin
c:windowssystem324ff8s9zrse2935.exe
c:windowssystem324z39st5al932.cpl
c:windowssystem324z3at59eat8930.dll
c:windowssystem324z56spy7e79.dll
c:windowssystem324z5v9r25135.cpl
c:windowssystem324z9a5hief1749.cpl
c:windowssystem324zfds95rse2655.bin
c:windowssystem32503eba5kzo9r2563.cpl
c:windowssystem3250a9ir299z.ocx
c:windowssystem325113zs9y5c.bin
c:windowssystem325130z9irus4b8.ocx
c:windowssystem325157addwarez955.cpl
c:windowssystem325199backzoo9834.exe
c:windowssystem3251z0vir99065.cpl
c:windowssystem3252046tro9z4a.exe
c:windowssystem3252265sp9mbzt9d.dll
c:windowssystem3252634trojzd9.dll
c:windowssystem325266thizf9.dll
c:windowssystem32529b5ddware1377z.bin
c:windowssystem3252ez5ackd9or92.bin
c:windowssystem325320not-a-viruszc59.exe
c:windowssystem3253882zpy1bb9.dll
c:windowssystem3253cesp5waze29289.dll
c:windowssystem325459troj9z.cpl
c:windowssystem3254afste9lz469.ocx
c:windowssystem3254fzbackdoor2197.exe
c:windowssystem3255015spyz659.bin
c:windowssystem32550969zy4c2.cpl
c:windowssystem32551fzownloader9611.cpl
c:windowssystem3255715hzck9ool514.exe
c:windowssystem3255c6vir3129z.ocx
c:windowssystem3255d59hief9z.bin
c:windowssystem3255zeth9e5t21126.exe
c:windowssystem32562espar9z1583.bin
c:windowssystem325634hackto9l2ez.exe
c:windowssystem32563wo5z290.exe
c:windowssystem32568virzs6b59.ocx
c:windowssystem3256acdown5oa9er1z54.dll
c:windowssystem32575zvir9205.ocx
c:windowssystem3257ecd9wnlzade51756.bin
c:windowssystem3258085spy79z.ocx
c:windowssystem32585downl9zder1676.dll
c:windowssystem3258647sp9mzot4ba.cpl
c:windowssystem325904adzware1550.bin
c:windowssystem325906addware134z.exe
c:windowssystem32591z7troj77.ocx
c:windowssystem32593z9troj392.ocx
c:windowssystem325940tz59at21352.exe
c:windowssystem325954zddware1547.ocx
c:windowssystem32595dbackdooz554.cpl
c:windowssystem3259815p9z66.exe
c:windowssystem32598eaddwzre122.cpl
c:windowssystem32599fadzware932.cpl
c:windowssystem32599sp5759z.exe
c:windowssystem3259z5spa9se3050.ocx
c:windowssystem325a72thief2z98.exe
c:windowssystem325cdcspyzare2592.ocx
c:windowssystem325df8bazkd9or350.ocx
c:windowssystem325e9cvir597z.exe
c:windowssystem325ea5spyw9re2z23.cpl
c:windowssystem325ef2sparse9z48.bin
c:windowssystem325ezs9arse319.dll
c:windowssystem325fd0thie5z895.ocx
c:windowssystem325z50spar9e1265.cpl
c:windowssystem325z59addware1717.cpl
c:windowssystem3260059zwnloader819.ocx
c:windowssystem326006z9ckdoo52178.ocx
c:windowssystem326090t9i5f2084z.dll
c:windowssystem326095addware15z0.dll
c:windowssystem3260fbackdoo953z9.dll
c:windowssystem3260z5vi92994.bin
c:windowssystem326189backdoor85z.ocx
c:windowssystem326189thi5z900.exe
c:windowssystem3261faz59rse2349.ocx
c:windowssystem326390spyware2553z.ocx
c:windowssystem3263bet5reaz19250.ocx
c:windowssystem326449z9y5ef.dll
c:windowssystem326453s9arse2024z.exe
c:windowssystem32650bdownl9adez254.ocx
c:windowssystem326575zp9rse825.exe
c:windowssystem3265z2downloade59135.exe
c:windowssystem326706tro959z.dll
c:windowssystem326754sp9rsez005.ocx
c:windowssystem3267ecba5kzoor960.ocx
c:windowssystem3267z39t5al2988.cpl
c:windowssystem326813t9r5at32529z.bin
c:windowssystem326935zot-a-virus999.cpl
c:windowssystem326967virz519b.cpl
c:windowssystem3269cedown5zader295.dll
c:windowssystem326b11t9r5at18005z.exe
c:windowssystem326be59pyware197z.exe
c:windowssystem326c8zdownloader1295.bin
c:windowssystem326ced9hz5f323.exe
c:windowssystem326d5zdown95ader1909.bin
c:windowssystem326d79st9al2596z.cpl
c:windowssystem326d90sparse35z9.ocx
c:windowssystem326d9cszywar5995.bin
c:windowssystem326ea1back9o5r269z.bin
c:windowssystem326f58addwzr91975.dll
c:windowssystem326f8fspyw9re1054z.exe
c:windowssystem326z2fba95door740.ocx
c:windowssystem326z9eb5ck9oor1562.bin
c:windowssystem3270a6z9dware1775.ocx
c:windowssystem327108not-5-zirusb59.exe
c:windowssystem32711h9cz5ool19a.bin
c:windowssystem3271aes59rse565z.ocx
c:windowssystem32724ste9l1915z.dll
c:windowssystem327253backd9or176z.cpl
c:windowssystem327435s9eal3059z.exe
c:windowssystem32756z9py16c.ocx
c:windowssystem3275z9addwar57669.cpl
c:windowssystem3276075pyware1z39.dll
c:windowssystem327627add5ar9z40.exe
c:windowssystem3276559pambot5z1.cpl
c:windowssystem32769adowzloader3576.ocx
c:windowssystem3277abspy9az52054.bin
c:windowssystem3277esp5wa9z665.dll
c:windowssystem3277faaddw9r5z829.bin
c:windowssystem327896no9za-virus52e.cpl
c:windowssystem32790bsp5rze970.bin
c:windowssystem327952th95f3034z.dll
c:windowssystem3279bab5ckdooz2535.exe
c:windowssystem327ce1thiez9595.exe
c:windowssystem327d4abaz5door96.exe
c:windowssystem327e465h9ef2z87.cpl
c:windowssystem327z155pa9bot42f.bin
c:windowssystem327z99spy754.ocx
c:windowssystem327za2sparse1559.bin
c:windowssystem328142t9ojdz5.dll
c:windowssystem328332viru5z09.exe
c:windowssystem328559za5kto9l6f9.ocx
c:windowssystem328592nzt-a-virus9805.dll
c:windowssystem32866spaz9ot295.cpl
c:windowssystem328691s9z4565.ocx
c:windowssystem328959spy35z.cpl
c:windowssystem328z779py55.bin
c:windowssystem329140not-a-ziru56b1.cpl
c:windowssystem32916795irzs135.cpl
c:windowssystem3291959zycf.dll
c:windowssystem3292z32spy514.ocx
c:windowssystem3292z83troj568.cpl
c:windowssystem3293515hacktoo55abz.exe
c:windowssystem329355irz933.cpl
c:windowssystem3293590not-a-vzrus7c9.bin
c:windowssystem32935etzreat985.bin
c:windowssystem3294429ozm455.exe
c:windowssystem329453sp519dz.bin
c:windowssystem329555not-a-v9r5s52z.cpl
c:windowssystem329556spyware28z3.exe
c:windowssystem3295578troj5ze.bin
c:windowssystem329573th5eaz13654.cpl
c:windowssystem3295b4vir2051z.bin
c:windowssystem3295b5zir58.cpl
c:windowssystem3295e9threat25z.cpl
c:windowssystem3295z60spy5b5.exe
c:windowssystem3296701spamb5z3cb.cpl
c:windowssystem329745spyzare3153.dll
c:windowssystem32979zth5ef2641.exe
c:windowssystem3299058zirus567.ocx
c:windowssystem329916vzru9145.cpl
c:windowssystem3299355troj2za5.ocx
c:windowssystem329965not9z-vi5us31.ocx
c:windowssystem329986h5cktozl7f1.cpl
c:windowssystem329aathrea52z580.bin
c:windowssystem329advi5z6689.cpl
c:windowssystem329aft5reat19z94.exe
c:windowssystem329cfspyzare1596.cpl
c:windowssystem329f50threa526z85.exe
c:windowssystem329fd4ba5zdoor3159.bin
c:windowssystem32a54ztea9869.cpl
c:windowssystem32a835ownlz9der212.ocx
c:windowssystem32ealregsnapshot1.reg
c:windowssystem32eeazownloa9er2925.cpl
c:windowssystem32ngaj85y4.exe
c:windowssystem32z0318ha95tool445.dll
c:windowssystem32z2172troj975.ocx
c:windowssystem32z262t9reat109135.ocx
c:windowssystem32z26569roj6da.ocx
c:windowssystem32z326not-a5viru93ee.dll
c:windowssystem32z3529spy734.exe
c:windowssystem32z36589irus654.cpl
c:windowssystem32z381s5eal2954.ocx
c:windowssystem32z4e9back5oor1157.dll
c:windowssystem32z5070tr9j2cb.exe
c:windowssystem32z5567vir9s5b6.ocx
c:windowssystem32z5809spy754.dll
c:windowssystem32z6596s9y407.cpl
c:windowssystem32z715spars9930.exe
c:windowssystem32z7854virus293.cpl
c:windowssystem32z8904virus95d.dll
c:windowssystem32z91spam5ot79a.ocx
c:windowssystem32z9594wor932e5.exe
c:windowssystem32z9bdstea51916.cpl
c:windowssystem32zc25backdoo95867.cpl
c:windowssystem32zf4f9ir1975.bin
c:windowsz057t95j762.ocx
c:windowsz06d5wnlo9der2089.ocx
c:windowsz255t5ie9396.ocx
c:windowsz2599spy3b09.bin
c:windowsz2e359r182.bin
c:windowsz3995h9cktool5aa.dll
c:windowsz45vir29905.exe
c:windowsz5309ddware705.bin
c:windowsz53cv951564.bin
c:windowsz5c9backdoor2315.exe
c:windowsz69255pa9bot245.cpl
c:windowsz79sp95955.dll
c:windowsz7faddw5re2923.dll
c:windowsz8279vi5us278.ocx
c:windowsz92b9ir31315.cpl
c:windowsz95c5ir3152.cpl
c:windowsz989addware9650.exe
c:windowsz995threat23765.dll
c:windowsz9eedo5nlo9der1105.ocx
c:windowsza98v59934.dll
c:windowszc5steal3097.ocx
c:windowszde4a5dware19049.ocx
c:windowszdfcsparse5509.cpl.
((((((((((((((((((((((((( Files Created from 2009-08-07 to 2009-09-07 )))))))))))))))))))))))))))))))
.2009-09-07 12:31 . 2009-09-07 12:31
d
w- C:WinSetupFromUSB
2009-09-04 14:12 . 2009-09-04 14:12
d
w- c:program filestrend micro
2009-09-04 14:12 . 2009-09-04 14:12
d
w- C:rsit
2009-09-04 13:31 . 2009-08-03 09:36 38160 —-a-w- c:windowssystem32driversmbamswissarmy.sys
2009-09-04 13:31 . 2009-09-04 13:31
d
w- c:program filesMalwarebytes’ Anti-Malware
2009-09-04 13:31 . 2009-08-03 09:36 19096 —-a-w- c:windowssystem32driversmbam.sys
2009-09-04 13:01 . 2009-09-04 13:01
d
w- c:documents and settingsAll UsersApplication DataTEMP
2009-09-04 13:01 . 2009-09-04 13:01
d
w- c:program filesAce Utilities
2009-09-04 11:15 . 2009-09-04 11:15
d
w- c:documents and settingsUserApplication DataMalwarebytes
2009-09-04 11:15 . 2009-09-04 11:15
d
w- c:documents and settingsAll UsersApplication DataMalwarebytes
2009-08-21 17:50 . 2009-08-21 18:07
d
w- c:documents and settingsUserLocal SettingsApplication Dataid Software
2009-08-21 16:03 . 2009-08-21 16:03
d-sh—w- c:windowsftpcache
2009-08-20 22:19 . 2009-08-20 22:19
d
w- c:documents and settingsUserApplication DataCodemasters
2009-08-20 19:51 . 2009-08-20 19:51
d
w- c:program filestamasoftware
2009-08-16 14:14 . 2009-08-16 14:14
d
w- c:documents and settingsAll UsersApplication DataATI
2009-08-16 14:12 . 2009-04-28 17:05 593920
w- c:windowssystem32ati2sgag.exe
2009-08-16 14:12 . 2009-08-16 14:13
d
w- c:program filesATI Technologies
2009-08-12 17:27 . 2009-08-12 17:28
d
w- c:documents and settingsUserApplication DataBraid
2009-08-09 17:33 . 2009-08-09 17:33
d
w- c:program filesMicrosoft Silverlight.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-07 12:48 . 2008-11-21 19:33
d
w- c:documents and settingsUserApplication DatauTorrent
2009-09-07 12:44 . 2008-09-10 15:19
d
w- c:documents and settingsUserApplication DataSkype
2009-09-07 12:07 . 2008-09-23 13:29
d
w- c:documents and settingsUserApplication DataskypePM
2009-09-05 10:46 . 2008-09-01 15:27 64944 —-a-w- c:documents and settingsUserLocal SettingsApplication DataGDIPFONTCACHEV1.DAT
2009-08-21 16:54 . 2008-09-01 15:33
d—h—w- c:program filesInstallShield Installation Information
2009-08-21 09:24 . 2009-08-21 09:24 0 —-a-w- c:documents and settingsUserntuser.tmp
2009-08-19 11:35 . 2009-03-05 19:53
d
w- c:documents and settingsUserApplication DataHamachi
2009-08-17 16:10 . 2009-06-25 20:40 1279456 —-a-w- c:windowssystem32aswBoot.exe
2009-08-17 16:06 . 2009-06-25 20:41 93392 —-a-w- c:windowssystem32driversaswmon.sys
2009-08-17 16:06 . 2009-06-25 20:41 94160 —-a-w- c:windowssystem32driversaswmon2.sys
2009-08-17 16:05 . 2009-06-25 20:41 114768 —-a-w- c:windowssystem32driversaswSP.sys
2009-08-17 16:05 . 2009-06-25 20:41 20560 —-a-w- c:windowssystem32driversaswFsBlk.sys
2009-08-17 16:04 . 2009-06-25 20:41 51376 —-a-w- c:windowssystem32driversaswTdi.sys
2009-08-17 16:04 . 2009-06-25 20:41 23152 —-a-w- c:windowssystem32driversaswRdr.sys
2009-08-17 16:03 . 2009-06-25 20:41 26944 —-a-w- c:windowssystem32driversaavmker4.sys
2009-08-17 16:02 . 2009-06-25 20:41 97480 —-a-w- c:windowssystem32AvastSS.scr
2009-08-16 23:39 . 2008-09-23 17:55
d
w- c:program filesArtMoney
2009-08-16 18:25 . 2008-12-05 16:39
d
w- c:documents and settingsAll UsersApplication DataElectronic Arts
2009-08-16 14:15 . 2008-10-19 08:13
d
w- c:program filesATI
2009-08-08 08:03 . 2008-09-14 13:37
d
w- c:program filesElectronic Arts
2009-08-07 20:15 . 2009-08-02 18:44
d
w- c:documents and settingsUserApplication DataGetRightToGo
2009-08-07 19:42 . 2009-08-07 19:42
d
w- c:program filesNCSoft
2009-08-05 10:22 . 2008-09-14 13:39
d
w- c:documents and settingsUserApplication DataSPORE
2009-08-02 18:17 . 2009-08-02 17:46
d
w- c:program filesCounter-Strike 1.6
2009-08-01 09:58 . 2009-07-20 21:59
d
w- c:documents and settingsUserApplication DataActivision
2009-07-31 19:21 . 2009-07-31 19:19
d
w- c:documents and settingsUserApplication DataMy Battle for Middle-earth(tm) II Files
2009-07-31 18:36 . 2009-07-31 18:35
d
w- c:documents and settingsUserApplication DataMy The Lord of the Rings, The Rise of the Witch-king Files
2009-07-30 06:43 . 2009-07-30 06:43
d
w- c:documents and settingsAll UsersApplication DataMedia Center Programs
2009-07-30 06:31 . 2009-07-30 06:31
d
w- c:documents and settingsUserApplication DataInstallShield
2009-07-21 23:19 . 2009-07-21 20:28 189488 —-a-w- c:windowssystem32PnkBstrB.exe
2009-07-21 21:06 . 2009-07-21 20:28 139016 —-a-w- c:windowssystem32driversPnkBstrK.sys
2009-07-21 20:28 . 2009-07-21 20:28 139152 —-a-w- c:documents and settingsUserApplication DataPnkBstrK.sys
2009-07-21 20:27 . 2009-07-21 20:27 794408 —-a-w- c:windowssystem32pbsvc.exe
2009-07-21 20:27 . 2009-07-21 20:27 75064 —-a-w- c:windowssystem32PnkBstrA.exe
2009-07-21 16:41 . 2008-09-10 15:18
d
r- c:program filesSkype
2009-07-21 16:41 . 2008-09-10 15:18
d
w- c:documents and settingsAll UsersApplication DataSkype
2009-07-21 16:41 . 2009-07-21 16:41
d
w- c:program filesCommon FilesSkype
2009-07-21 06:37 . 2008-10-18 13:30
d
w- c:program filesCommon FilesWise Installation Wizard
2009-07-20 21:59 . 2009-07-20 21:59
d
w- c:documents and settingsAll UsersApplication DataActivision
2009-06-14 23:13 . 2008-11-08 15:36 11312 —-a-w- c:documents and settingsLocalServiceLocal SettingsApplication DataFontCache3.0.0.0.dat
2008-10-19 08:05 . 2008-10-19 08:05 1097354 —-a-w- c:program filesApr2006_MDX1_x86_Archive.cab
2008-08-10 20:09 . 2008-08-10 20:09 141265 —-a-w- c:program filesOCT2006_XACT_x86.cab
2008-08-10 20:08 . 2008-08-10 20:08 919678 —-a-w- c:program filesApr2006_MDX1_x86.cab
2008-08-10 20:08 . 2008-08-10 20:08 1401078 —-a-w- c:program filesApr2006_d3dx9_30_x64.cab
2008-08-10 20:08 . 2008-08-10 20:08 1118469 —-a-w- c:program filesApr2006_d3dx9_30_x86.cab
2008-08-10 20:08 . 2008-08-10 20:08 1082210 —-a-w- c:program filesApr2005_d3dx9_25_x86.cab
2008-08-10 20:08 . 2008-08-10 20:08 1350602 —-a-w- c:program filesApr2005_d3dx9_25_x64.cab
2008-12-19 19:15 . 2008-09-01 15:52 67688 —-a-w- c:program filesmozilla firefoxcomponentsjar50.dll
2008-12-19 19:15 . 2008-09-01 15:52 54368 —-a-w- c:program filesmozilla firefoxcomponentsjsd3250.dll
2008-12-19 19:15 . 2008-09-01 15:52 34944 —-a-w- c:program filesmozilla firefoxcomponentsmyspell.dll
2008-12-19 19:15 . 2008-09-01 15:52 46712 —-a-w- c:program filesmozilla firefoxcomponentsspellchk.dll
2008-12-19 19:15 . 2008-09-01 15:52 172136 —-a-w- c:program filesmozilla firefoxcomponentsxpinstal.dll
.((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«Steam»=»d:program filessteamsteam.exe» [2009-06-11 1217784]
«Skype»=»c:program filesSkypePhoneSkype.exe» [2008-11-07 21633320][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«NeroFilterCheck»=»c:windowssystem32NeroCheck.exe» [2006-01-12 155648]
«ErgoMedia»=»c:progra~1KYEERGOME~1SyTray.exe» [2007-02-27 1843200]
«PAC7302_Monitor»=»c:windowsPixArtPAC7302Monitor.exe» [2006-11-03 319488]
«WheelMouse»=»c:program filesA4TechMouseAmoumain.exe» [2007-02-10 241664]
«HP Software Update»=»c:program filesHPHP Software UpdateHPWuSchd2.exe» [2005-05-11 49152]
«SunJavaUpdateSched»=»c:program filesJavajre6binjusched.exe» [2008-11-11 136600]
«MAgent»=»c:program filesMail.RuAgentMAgent.exe» [2009-04-16 6210744]
«avast!»=»c:progra~1ALWILS~1Avast4ashDisp.exe» [2009-08-17 81000]
«StartCCC»=»c:program filesATI TechnologiesATI.ACECore-StaticCLIStart.exe» [2009-04-28 61440]
«RTHDCPL»=»RTHDCPL.EXE» — c:windowsRTHDCPL.exe [2007-10-16 16855552]
«SkyTel»=»SkyTel.EXE» — c:windowsSkyTel.exe [2007-10-11 1826816][HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»c:windowssystem32CTFMON.EXE» [2008-04-14 15360]c:documents and settingsAll Usersѓ« ў®Ґ ¬ҐоЏа®Ја ¬¬лЂўв®§ Јаг§Є
Adobe Reader Speed Launch.lnk — c:program filesAdobeAcrobat 7.0Readerreader_sl.exe [2004-12-14 29696]
BTTray.lnk — c:program filesWIDCOMMЏа®Ја ¬¬®Ґ ®ЎҐбЇҐзҐЁҐ BluetoothBTTray.exe [2006-5-12 581693]
HP Digital Imaging Monitor.lnk — c:program filesHPDigital Imagingbinhpqtra08.exe [2005-5-11 282624][HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity center]
«UpdatesDisableNotify»=dword:00000001[HKLM~servicessharedaccessparametersfirewallpolicystandardprofile]
«EnableFirewall»= 0 (0x0)[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«%windir%\Network Diagnostic\xpnetdiag.exe»=
«%windir%\system32\sessmgr.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpqste08.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hposfx08.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hposid01.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe»=
«c:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe»=
«c:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpoews01.exe»=
«d:\игры\Bionic Commando Rearmed\bcr.exe»=
«c:\Program Files\uTorrent\uTorrent.exe»=
«c:\Program Files\Skype\Phone\Skype.exe»=
«d:program filesInnovaAceonlineLauncher.atm»= d:program filesInnovaAceonlineLauncher.atm:Enabled:GameExe2
«d:program filesInnovaAceonlineRes-VoipSCVoIP.exe»= d:program filesInnovaAceonlineRes-VoipSCVoIP.exe:Enabled:GameVoIPR1 appdrv01;Application Driver (01);c:windowssystem32driversappdrv01.sys [08.05.2009 0:12 3110512]
R1 aswSP;avast! Self Protection;c:windowssystem32driversaswSP.sys [26.06.2009 0:41 114768]
R2 aswFsBlk;aswFsBlk;c:windowssystem32driversaswFsBlk.sys [26.06.2009 0:41 20560]
R3 FStarForce;FStarForce;c:windowssystem32driversFStarForce.sys [25.04.2009 18:30 8704]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:windowssystem32driversklim5.sys [13.12.2007 13:28 24592]
R3 RMSPPPOE;WAN Miniport (PPP over Ethernet Protocol);c:windowssystem32driversRMSPPPOE.SYS [06.06.2008 3:09 31424]
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:windowsSystem32appdrvrem01.exe svc —> c:windowsSystem32appdrvrem01.exe svc [?]
S3 NPF;NetGroup Packet Filter Driver;c:windowssystem32driversnpf.sys [22.06.2007 0:55 42512]
S3 npggsvc;nProtect GameGuard Service;c:windowssystem32GameMon.des -service —> c:windowssystem32GameMon.des -service [?]
S3 PAC7302;Messenger 310;c:windowssystem32driversPAC7302.SYS [14.06.2007 18:34 457856]
.
— — — — ORPHANS REMOVED — — — —HKCU-Run-RGSC — d:игрыRockstar GamesRockstar Games Social ClubRGSCLauncher.exe
HKCU-Run-PlayNC Launcher — (no file)
HKCU-RunOnce-ngaj85y4.exe — c:windowssystem32ngaj85y4.exe
HKLM-Run-QuickTime Task — d:мои документыdevil may crayQuickTimeqttask.exe.
Supplementary Scan
.
uStart Page = hxxp://www.apeha.ru
IE: &Экспорт в Microsoft Excel — c:progra~1MICROS~2OFFICE11EXCEL.EXE/3000
IE: Закачать ВСЕ при помощи Download Master — c:program filesDownload Masterdmieall.htm
IE: Закачать при помощи Download Master — c:program filesDownload Masterdmie.htm
IE: Отправить через &Bluetooth — c:program filesWIDCOMMПрограммное обеспечение Bluetoothbtsendto_ie_ctx.htm
IE: Скачать все используя NetXfer — c:program filesXiNetXferNXAddList.html
IE: Скачать используя NetXfer — c:program filesXiNetXferNXAddLink.html
IE: {{7558B7E5-7B26-4201-BEDB-00D5FF534523} — c:program filesMail.RuAgentmagent.exe
IE: {{8DAE90AD-4583-4977-9DD4-4360F7A45C74} — c:program filesDownload Masterdmaster.exe
FF — ProfilePath — c:documents and settingsUserApplication DataMozillaFirefoxProfileswkb7csrt.default
FF — prefs.js: browser.startup.homepage — hxxp://no-steam.ru/
FF — component: c:documents and settingsUserApplication DataMozillaFirefoxProfileswkb7csrt.defaultextensionsDTToolbar@toolbarnet.comcomponentsDTToolbarFF.dll
FF — component: c:program filesMozilla Firefoxcomponentsxpinstal.dll
FF — component: c:program filesMozilla Firefoxextensions{B13721C7-F507-4982-B2E5-502A71474FED}componentsNPComponent.dll
.**************************************************************************
catchme 0.3.1398 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-07 16:55
Windows 5.1.2600 Service Pack 3 NTFSscanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0**************************************************************************
.
DLLs Loaded Under Running Processes
— — — — — — — > ‘winlogon.exe'(1324)
c:windowssystem32Ati2evxx.dll
.
Completion time: 2009-09-07 16:56
ComboFix-quarantined-files.txt 2009-09-07 12:56Pre-Run: 6 536 826 880 байт свободно
Post-Run: 14 691 295 232 байт свободно956
