Здравствуйте, установил ComboFix вот его лог: ComboFix 09-09-14.02 — Admin 15.09.2009 6:12.2.2 — FAT32x86 Microsoft Windows XP Professional 5.1.2600.2.1251.7.1049.18.2047.1552 [GMT 4:00] Running from: c:documents and settingsAdmin.MICROSOF-760B6AРабочий столDownloadComboFix.exe AV: Антивирусная система Eset NOD32 2.70 *On-access scanning enabled* (Outdated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} * Resident AV is active WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! .

Сделала. Вот лог. НОД пока больше ничего не находит. ComboFix 09-09-06.06 — Администратор 10.09.2009 19:33.3.1 — NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.512.168 [GMT 1:00] Running from: c:documents and settingsАдминистраторРабочий столComboFix.exe Command switches used :: c:documents and settingsАдминистраторРабочий столCFScript.txt AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} FILE :: «c:windowssystem32driversyghjklvild.sys» . ((((((((((((((((((((((((((((((((((((((( Other Deletions

Сделала. Вот лог. НОД продолжает находить руткит. ComboFix 09-09-06.06 — Администратор 09.09.2009 10:46.2.1 — NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.512.284 [GMT 1:00] Running from: c:documents and settingsАдминистраторРабочий столComboFix.exe Command switches used :: c:documents and settingsАдминистраторРабочий столCFScript.txt AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} FILE :: «c:windowssystem32driversdbsejx.sys» «c:windowssystem32driverssynsenddrv.sys» «c:windowssystem32driversvabpmmgsj.sys» «c:windowssystem32driversyghjklvild.sys» . ((((((((((((((((((((((((((((((((((((((( Other

PUSHD «C:32788R22FWJFW» SET «Comspec=C:windowssystem32cmd.execf» IF NOT EXIST C:windowssystem32cmd.exe GOTO Not_NT VER 1>OsVer GREP.cfxxe -F «5.1.2» OsVer 1>XP.mac IF 0 == 0 GOTO NT SET «Ver_CF=09-09-07.05» IF NOT EXIST NircmdB.exe COPY /Y Nircmd.cfxxe NircmdB.exe ╤ъюяшЁютрэю Їрщыют: 1. PEV UZIP Licensepv_5_2_2.zip . MOVE /Y PV.exe PV.cfxxe IF NOT EXIST PEV.cfxxe COPY /Y PEV.exe PEV.cfxxe ╤ъюяшЁютрэю Їрщыют: 1.

Все вроде разобрался. Запустил программу вот вылаживаю полученный лог.файл ComboFix 09-09-06.06 — ваня 07.09.2009 23:39.1.2 — NTFSx86 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1251.7.1049.18.3069.1741 [GMT 4:00] Running from: c:usersваняDesktopComboFix.exe SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:progra~1COMMON~1{7445F~1 c:progra~1COMMON~1{7445F~1chrome.manifest c:progra~1COMMON~1{7445F~1chromecontentextensions.xul c:progra~1COMMON~1{7445F~1chromecontentlogo.png c:progra~1COMMON~1{7445F~1chromecontentmain.js c:progra~1COMMON~1{7445F~1chromecontentmain.xul c:progra~1COMMON~1{7445F~1chromecontentq.png c:progra~1COMMON~1{7445F~1chromecontentq_gray.png c:progra~1COMMON~1{7445F~1chromecontentx.png c:progra~1COMMON~1{7445F~1chromecontentx_gray.png c:progra~1COMMON~1{7445F~1defaultspreferencesmain.js c:progra~1COMMON~1{7445F~1defaultspreferencesmain.js.old c:progra~1COMMON~1{7445F~1extension.reg c:progra~1COMMON~1{7445F~1install.rdf c:program

Logfile of random’s system information tool 1.06 (written by random/random) Run by Admin at 2009-09-03 20:33:32 Microsoft Windows XP Professional Service Pack 2 System drive C: has 82 GB (72%) free of 114 GB Total RAM: 2047 MB (68% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:33:35, on 03.09.2009 Platform: Windows XP

Logfile of random’s system information tool 1.06 (written by random/random) Run by ваня at 2009-09-01 20:33:32 Microsoft® Windows Vista™ Home Premium Service Pack 1 System drive C: has 105 GB (69%) free of 152 GB Total RAM: 3069 MB (50% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:34:19, on 01.09.2009 Platform: Windows

info.txt logfile of random’s system information tool 1.06 2009-09-01 20:34:21 ======Uninstall list====== —>»C:Program FilesInstallShield Installation Information{A644254B-92F6-4970-8635-AB0775371E72}setup.exe» —u:{A644254B-92F6-4970-8635-AB0775371E72} —>C:Program FilesNeroNero8\nerouninstallUNNERO.exe /UNINSTALL —>C:WindowsUNNeroBackItUp.exe /UNINSTALL —>C:WindowsUNNeroMediaHome.exe /UNINSTALL —>C:WindowsUNNeroShowTime.exe /UNINSTALL —>C:WindowsUNNeroVision.exe /UNINSTALL —>C:WindowsUNRecode.exe /UNINSTALL —>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{622E6F16-0904-49B6-BBE1-4CC836314CCF}setup.exe» -l0x9 —>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{697AFC77-F318-4CD4-BF16-F50F4C1072DA}setup.exe» -l0x9 Activation Assistant for the 2007 Microsoft Office suites—>»C:ProgramData{174892B1-CBE7-44F5-86FF-AB555EFD73A3}Microsoft Office Activation Assistant.exe»

info.txt logfile of random’s system information tool 1.06 2009-08-30 19:58:54 ======Uninstall list====== —>C:windowsUNNeroBackItUp.exe /UNINSTALL —>C:windowsUNNeroMediaHome.exe /UNINSTALL —>C:windowsUNNeroShowTime.exe /UNINSTALL —>C:windowsUNNeroVision.exe /UNINSTALL —>C:windowsUNRecode.exe /UNINSTALL —>MsiExec /X{85EBB283-65AF-4C53-9EBE-7C0A232762F7} —>MsiExec.exe /X{69495273-FCDC-4A86-BCB7-49B504D3FB0E} —>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe AGEIA PhysX v7.03.21—>MsiExec.exe /X{85EBB283-65AF-4C53-9EBE-7C0A232762F7} CommFort 4.10a—>»C:Program FilesCommFortunins000.exe» CpuIdle (remove only)—>»D:програмыCpuIdleuninstall.exe» DirectX10 LV (Last Version)—>»C:Program FilesCommon Filesunins000.exe» EXPERTool—>RunDll32 Setupapi.dll,InstallHinfSection TB.Remove