вот что получилось ComboFix 10-08-04.02 — Admin 04.08.2010 23:55:23.1.1 — x86 Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.255.59 [GMT 4:00] Running from: c:documents and settingsAdminРабочий столComboFix.exe AV: Антивирус Касперского *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} . The following files were disabled during the run: c:windowssystem32urlmon.dll ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:Autorun.inf c:documents and settingsAdminApplication Dataoekx.exe c:documents and settingsAll

хорошо Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:28:09, on 04.08.2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSExplorer.EXE C:WINDOWSSOUNDMAN.EXE C:Program FilesSystemProgsPuntoSwitcherpunto.exe C:Program FilesSystemProgsTaskSwitchXPTaskSwitchXP.exe C:Program FilesSystemProgsVisualTaskTipsVisualTaskTips.exe C:Program FilesSystemProgsUberIconUberIconManager.exe C:Program FilesMail.RuAgentMAgent.exe C:Program FilesAdobeReader 9.0ReaderReader_sl.exe C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe C:Program

И второй лог сканера RSIT : Logfile of random’s system information tool 1.08 (written by random/random) Run by User at 2010-07-31 05:08:18 Microsoft Windows XP Home Edition Service Pack 3 System drive C: has 19 GB (13%) free of 145 GB Total RAM: 1014 MB (39% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved

ComboFix 10-07-30.01 — IT-Master 30.07.2010 23:01:39.1.2 — x86 Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.1023.663 [GMT 4:00] Running from: c:windowsTEMPRar$EX00.188ComboFix.exe AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Outdated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} FW: Norton AntiVirus *enabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E} * Resident AV is active WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) .

Logfile of random’s system information tool 1.08 (written by random/random) Run by Admin at 2010-07-29 17:15:37 Microsoft Windows XP Professional Service Pack 3 System drive C: has 19 GB (76%) free of 25 GB Total RAM: 511 MB (76% free) HijackThis download failed ======Registry dump====== [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper — C:Program

info.txt logfile of random’s system information tool 1.06 2010-07-29 15:54:50 ======Uninstall list====== —>C:Program FilesNeroNero 7\nerouninstallUNNERO.exe /UNINSTALL —>C:WINDOWSNuNInst.exe /UNINSTALL —>C:WINDOWSUNNeroBackItUp.exe /UNINSTALL —>C:WINDOWSUNNeroMediaHome.exe /UNINSTALL —>C:WINDOWSUNNeroShowTime.exe /UNINSTALL —>C:WINDOWSUNNeroVision.exe /UNINSTALL —>C:WINDOWSUNRecode.exe /UNINSTALL —>MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095} —>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf µTorrent—>»C:Program FilesuTorrentuTorrent.exe» /UNINSTALL ABBYY FineReader 8.0 Professional Edition—>MsiExec.exe /I{AAF80000-22B9-4CE9-98D6-2CCF359BAC07} ACDSee—>C:PROGRA~1ACDSYS~1ACDSeeUNWISE.EXE C:PROGRA~1ACDSYS~1ACDSeeINSTALL.LOG Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe Adobe Flash Player 10

Logfile of random’s system information tool 1.08 (written by random/random) Run by Наумов Роман at 2010-07-25 01:25:55 Microsoft Windows XP Professional Service Pack 3 System drive C: has 12 GB (44%) free of 27 GB Total RAM: 1022 MB (43% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 1:26:00, on 25.07.2010 Platform: Windows

ComboFix 10-07-23.04 — Наумов Роман 24.07.2010 21:57:39.5.2 — x86 Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.1022.617 [GMT 1:00] Running from: c:documents and settingsНаумов РоманРабочий столComboFix.exe AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} * Resident AV is active WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) .

И вот еще раз лог RSIT Logfile of random’s system information tool 1.08 (written by random/random) Run by Админ at 2010-07-24 18:06:27 Microsoft® Windows Vista™ Home Premium Service Pack 2 System drive C: has 5 GB (3%) free of 153 GB Total RAM: 3070 MB (51% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved