log.txt Logfile of random’s system information tool 1.08 (written by random/random) Run by Сраго at 2010-10-12 19:03:06 Microsoft® Windows Vista™ Ultimate Service Pack 2 System drive C: has 320 GB (72%) free of 442 GB Total RAM: 2046 MB (48% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 19:03:14, on 12.10.2010 Platform: Windows

Благодарю вас за оперативность! Вот что у меня записалось в логе (разбит на 2, т.к. слишком длинный): ComboFix 10-10-02.02 — Алексей 03.10.2010 19:51:32.2.2 — x86 Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.1023.522 [GMT 4:00] Running from: c:documents and settingsАлексейРабочий столComboFix.exe Command switches used :: c:documents and settingsАлексейРабочий столCFscript.txt AV: Doctor Web Anti-Virus *On-access scanning enabled* (Updated) {3454C8F1-ECBC-4180-A6F4-04632FBA762B}

EOF это не уместилось от первого лога (сообщение превысило 60000 знаков) info.txt: info.txt logfile of random’s system information tool 1.08 2010-10-03 16:26:02 ======Uninstall list====== —>C:Program FilesNeroNero 7nerouninstallUNNERO.exe /UNINSTALL —>C:WINDOWSUNNeroBackItUp.exe /UNINSTALL —>C:WINDOWSUNNeroMediaHome.exe /UNINSTALL —>C:WINDOWSUNNeroShowTime.exe /UNINSTALL —>C:WINDOWSUNNeroVision.exe /UNINSTALL —>C:WINDOWSUNRecode.exe /UNINSTALL —>msiexec /package {90120000-0016-0000-0000-0000000FF1CE} /uninstall {C5060182-C90D-4314-9AE9-5C0DCF8FD1EF} —>msiexec /package {90120000-0018-0000-0000-0000000FF1CE} /uninstall {00E877D5-CDF8-4DDC-9AE0-E541B4BB6487} —>msiexec /package {90120000-001B-0000-0000-0000000FF1CE} /uninstall {3520B304-0EF8-475D-8C52-47ABCCC75FC6} —>msiexec /package

Logfile of random’s system information tool 1.08 (written by random/random) Run by Admin at 2010-10-03 16:25:52 Microsoft Windows XP Professional Service Pack 3 System drive C: has 37 GB (78%) free of 48 GB Total RAM: 3326 MB (88% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:26:00, on 03.10.2010 Platform: Windows XP

All processes killed ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{88888888-8888-8888-8888-888888888888} deleted successfully. Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{88888888-8888-8888-8888-888888888888} not found. Registry key HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRegedit32 deleted successfully. Registry key HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupreg6074825 deleted successfully. Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{6da5be8b-098c-11de-8077-001bfc6f4206} deleted successfully. Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{6da5be8b-098c-11de-8077-001bfc6f4206} not found. Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{d6c5bda0-d9cd-11de-835a-001bfc6f4206} deleted successfully. Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{d6c5bda0-d9cd-11de-835a-001bfc6f4206} not found. ========== COMMANDS ========== [EMPTYTEMP] User:

info info.txt logfile of random’s system information tool 1.08 2010-09-27 12:23:11 ======Uninstall list====== —>MsiExec /X{F9835182-794B-4F24-902A-E2CA9D43380F} —>MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057} 3DMark Vantage—>»C:Program Files (x86)InstallShield Installation Information{C40C3C3D-97CF-44B5-836C-766E374464B3}setup.exe» -runfromtemp -l0x0009 -removeonly 3ds max 7 Additional Maps and Materials—>MsiExec.exe /I{5EB4C5CA-962C-486B-81FF-A41B7B8FFBEC} 3ds max 7 Architectural Materials—>MsiExec.exe /I{54199443-342B-4162-B10D-CAA1C211E7A6} 3ds max 7 Reference Files—>MsiExec.exe /I{E5F6E1A6-44AA-4CF7-883E-4F7FA7C4BCA5} 3ds max 7—>MsiExec.exe /I{F92AB933-9FE7-4335-92BD-D1C3BA27613C} 3dsmax ancillary install—>MsiExec.exe /I{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C} 7-Zip

почти все вышеописанные проблемы устранились, кроме обновления Malwarebytes’ Anti-Malware, пишет проверить соединение с интернет, и файрволл (он отключен) вот лог ComboFix 10-09-17.04 — Администратор 19.09.2010 14:55:04.1.4 — x86 Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.2046.1392 [GMT 4:00] Running from: c:documents and settingsАдминистраторРабочий столComboFix.exe Command switches used :: c:documents and settingsАдминистраторРабочий столWindowsXP-KB310994-SP2-Pro-BootDisk-RUS.exe AV: avast! Antivirus *On-access scanning disabled*

Logfile of random’s system information tool 1.08 (written by random/random) Run by Сергей at 2010-09-17 13:42:31 Microsoft Windows XP Professional Service Pack 3 System drive C: has 8 GB (25%) free of 31 GB Total RAM: 2046 MB (69% free) ======Scheduled tasks folder====== C:windowstasksAppleSoftwareUpdate.job C:windowstasksScheduled Update for Ask Toolbar.job C:windowstasksUser_Feed_Synchronization-{46088A3B-DED4-467C-B8F3-7CA6386186C2}.job ======Registry dump====== [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Здраствуйте, приступим к лечению. Запустите HijackThis, для этого кликните Пуск, Выполнить, введите C:Program Filestrend microuser.exe и нажмите Enter. Откроется главное меню программы HijackThis. Кликните по кнопке Do a system scan only. Далее отметьте галочкой (слева) следующие строки, если они присутствуют: R3 — URLSearchHook: (no name) — — (no file) F2 — REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,»C:Program FilesDef GroupPC