Созданные ответы форума
-
Сообщения
-
ЛОГ с PC
Logfile of random’s system information tool 1.08 (written by random/random)
Run by Admin at 2010-11-02 17:56:06
Microsoft Windows XP Professional Service Pack 3
System drive C: has 41 GB (66%) free of 62 GB
Total RAM: 1023 MB (65% free)HijackThis download failed
======Scheduled tasks folder======
C:WINDOWStasksPCConfidential.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2010-09-22 75200][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader — C:Program FilesWinamp Toolbarwinamptb.dll [2009-05-06 1262888][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class — C:Documents and SettingsAdminApplication DataMicrosoftInternet Explorerqipsearchbar.dll [2010-04-12 149968][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} — Winamp Toolbar — C:Program FilesWinamp Toolbarwinamptb.dll [2009-05-06 1262888]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«StartCCC»=C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2009-08-13 98304]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2009-04-30 17881088]
«EEventManager»=C:PROGRA~1EPSONS~1EVENTM~1EEventManager.exe [2008-05-07 591696]
«HPDJ Taskbar Utility»=C:WINDOWSsystem32spooldriversw32x863hpztsb04.exe [2006-01-13 196608]
«HPHmon03″=C:WINDOWSsystem32hphmon03.exe [2006-01-13 311296]
«AdobeCS4ServiceManager»=C:Program FilesCommon FilesAdobeCS4ServiceManagerCS4ServiceManager.exe [2008-08-14 611712]
«Bonus.SSR.FR10″=C:Program FilesABBYY FineReader 10Bonus.ScreenshotReader.exe [2010-01-22 941320]
«conime.exe»=C:WINDOWSsystem32conime.exe [2008-04-15 27648]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2010-09-23 35760]
«Adobe ARM»=C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2010-09-20 932288][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-15 15360][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupreggames]
C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1451games.exe [][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigservices]
«wuauserv»=2
«wscsvc»=2
«SharedAccess»=2[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2009-08-14 155648][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:WINDOWSsystem32wmpks2.exe»=»C:WINDOWSsystem32wmpks2.exe:*:Enabled:LAN Router»
«C:WINDOWSsystem32wmpksw.exe»=»C:WINDOWSsystem32wmpksw.exe:*:Enabled:LAN Router»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:WINDOWSsystem32wЛОГ с ноутбука
Logfile of random’s system information tool 1.08 (written by random/random)
Run by 1111 at 2010-11-02 15:48:04
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 18 GB (46%) free of 38 GB
Total RAM: 447 MB (25% free)======Scheduled tasks folder======
C:WINDOWStasksGoogleUpdateTaskMachineCore1cb739e691184a0.job
C:WINDOWStasksMP Scheduled Scan.job======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2010-09-22 75200][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{69D72956-317C-44bd-B369-8E44D4EF9801}]
SafeOnline BHO — C:WINDOWSsystem32PxSecure.dll [2010-06-11 61952][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.5.0_09binssv.dll [2006-10-12 434279][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-10-25 297648][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.6.5805.1910swg.dll [2010-10-25 843832][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2008-06-12 958712]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} — Winamp Toolbar — C:Program FilesWinamp Toolbarwinamptb.dll [2009-05-06 1262888]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-10-25 297648][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«AtiPTA»=C:WINDOWSsystem32atiptaxx.exe [2005-11-23 344064]
«Windows Defender»=C:Program FilesWindows DefenderMSASCui.exe [2006-11-03 866584]
«Windows Messenger»=C:WINDOWSmsmsgs.exe []
«runsql»=C:WINDOWSrunsql.exe []
«netsv32″=C:WINDOWSsv.exe []
«net64″=C:WINDOWSsvhoster.exe []
«netw»=C:WINDOWSsvw.exe []
«netc»=C:WINDOWSsvc.exe []
«services»=C:WINDOWSservices.exe []
«HPDJ Taskbar Utility»=C:WINDOWSsystem32spooldriversw32x863hpztsb04.exe [2006-01-13 196608]
«UpdateWin»=C:WINDOWSsystem323ivxDSAudioDecoderd.exe []
«HPHmon03″=C:WINDOWSsystem32hphmon03.exe [2006-01-13 311296]
«conime.exe»=C:WINDOWSsystem32conime.exe [2004-08-18 27648]
«Microsoft Driver Setup»=C:WINDOWSsystem32Jnstm.exe []
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2010-09-23 35760]
«Adobe ARM»=C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2010-09-20 932288][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun]
«Microsoft Driver Setup»=C:WINDOWSsystem32Jnstm.exe [][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-18 15360]
«UpdateWin»=C:WINDOWSsystem323ivxDSAudioDecoderd.exe []
«QIP Internet Guardian»=C:Documents and Settings1111Application DataQipGuardQipGuard.exe [2010-03-12 184272][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAGRSMMSG]
C:WINDOWSAGRSMMSG.exe [2004-04-13 88363][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregLtMoh]
C:Program FilesltmohLtmoh.exe [2003-09-05 184320][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregMSMSGS]
C:Program FilesMessengermsmsgs.exe [2004-10-13 1694208][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNeroFilterCheck]
C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRemoteControl]
C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2004-03-17 32768][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSunJavaUpdateSched]
C:Program FilesJavajre1.5.0_09binjusched.exe [2006-10-12 49263][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^MultiLex Universal Hotkeys.lnk]
C:PROGRA~1MEDIAL~1MULTIL~1.5HKML_SRV.exe [2002-01-14 110592][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigservices]
«wuauserv»=2
«Schedule»=2
«Samsung Update Plus»=2
«mnmsrvc»=3
«MDM»=2C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
TabUserW.exe.lnk — C:WINDOWSsystem32WTabletTabUserW.exeC:Documents and Settings1111Главное менюПрограммыАвтозагрузка
Adobe Gamma.lnk — C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLs»=» «[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2006-02-22 61440][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}»=C:PROGRA~1WINDOW~4MpShHook.dll [2006-11-03 83224][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesICQLiteICQLite.exe»=»C:Program FilesICQLiteICQLite.exe:*:Enabled:ICQ Lite»
«C:Program FilesOperaopera.exe»=»C:Program FilesOperaopera.exe:*:Enabled:Opera Internet Browser»
«C:Program FilesOpera 10.50 Betaopera.exe»=»C:Program FilesOpera 10.50 Betaopera.exe:*:Enabled:Opera Internet Browser»
«C:Program FilesSkypePlugin ManagerskypePM.exe»=»C:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:WINDOWSsystem32wmpsrx.exe»=»C:WINDOWSsystem32wmpsrx.exe:*:Enabled:LAN Router»
«C:WINDOWSsystem32wmpkpl.exe»=»C:WINDOWSsystem32wmpkpl.exe:*:Enabled:LAN Router»
«C:WINDOWSSystem3281.scr»=»C:WINDOWSSystem3281.scr:*:C:WINDOWSsystem32Jnstm.exe»
«C:WINDOWSSystem3223.scr»=»C:WINDOWSSystem3223.scr:*:C:WINDOWSsystem32Jnstm.exe»
«C:WINDOWSsystem32wmpkrw.exe»=»C:WINDOWSsystem32wmpkrw.exe:*:Enabled:LAN Router»
«C:Program FilesGoogleGoogle Talkgoogletalk.exe»=»C:Program FilesGoogleGoogle Talkgoogletalk.exe:*:Enabled:Google Talk»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:WINDOWSsystem32wmpsrx.exe»=»C:WINDOWSsystem32wmpsrx.exe:*:Enabled:LAN Router»
«C:WINDOWSsystem32wmpkpl.exe»=»C:WINDOWSsystem32wmpkpl.exe:*:Enabled:LAN Router»
«C:WINDOWSsystem32wmpkrw.exe»=»C:WINDOWSsystem32wmpkrw.exe:*:Enabled:LAN Router»======List of files/folders created in the last 3 months======
2010-11-02 15:48:08 —-D—- C:Program Filestrend micro
2010-10-29 00:26:24 —-D—- C:rsit
2010-10-28 22:18:49 —-A—- C:WINDOWSsystem32driversmbamswissarmy.sys
2010-10-28 22:18:48 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2010-10-28 22:18:47 —-D—- C:Program
