Logfile of random’s system information tool 1.05 (written by random/random) Run by Эдуард at 2009-03-16 20:31:27 Microsoft® Windows Vista™ Ultimate Service Pack 1 System drive C: has 14 GB (36%) free of 40 GB Total RAM: 3071 MB (67% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:31:28, on 16.03.2009 Platform: Windows Vista

Log.txt Logfile of random’s system information tool 1.05 (written by random/random) Run by Роман at 2009-03-16 10:02:27 Microsoft Windows XP Professional Service Pack 2 System drive C: has 8 GB (39%) free of 20 GB Total RAM: 1023 MB (56% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:02:48, on 16.03.2009 Platform: Windows

========== PROCESSES ========== Process explorer.exe killed successfully. ========== SERVICES/DRIVERS ========== Service winsecguard stopped successfully. Service winsecguard deleted successfully. ========== FILES ========== File/Folder C:WINDOWSInfzpx2.exe not found. C:Program FilesCommon Files{6EA9B29A-C801-4F76-805F-E41ACF9ED16Z} moved successfully. ========== COMMANDS ========== User’s Temp folder emptied. User’s Temporary Internet Files folder emptied. User’s Internet Explorer cache folder emptied. Local Service Temp folder emptied. File

Добрый вечер сделал. Только теперь в инет через explorer не могу зайти ,только через мозилу. Logfile of random’s system information tool 1.05 (written by random/random) Run by С at 2009-03-12 20:50:19 Microsoft Windows XP Professional Service Pack 2 System drive C: has 21 GB (42%) free of 50 GB Total RAM: 767 MB (58% free)

Лог ComboFix ComboFix 09-03-10.03 — Administrator 2009-03-12 22:48:53.1 — NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1251.1.1049.18.2047.1379 [GMT 6:00] Running from: E:ComboFix.exe FW: Outpost Firewall Pro *disabled* * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ADS — svchost.exe: deleted 88 bytes in 2 streams. ((((((((((((((((((((((((((((((((((((((( Other Deletions

========== PROCESSES ========== Process explorer.exe killed successfully. ========== SERVICES/DRIVERS ========== Unable to stop service winsecguard . ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{064017AB-B55B-4CFD-B065-A9EE88BC19BF}\ deleted successfully. Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{73D92B2D-63D7-4107-8A41-0B14D8016BBA}\ deleted successfully. ========== FILES ========== C:WINDOWSInfzpx2.exe moved successfully. C:Documents and SettingsAll UsersApplication Datakmblib.dll unregistered successfully. C:Documents and SettingsAll UsersApplication Datakmblib.dll moved successfully. C:Program FilesCommon

Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSsystem32Ati2evxx.exe C:WINDOWSsystem32svchost.exe C:WINDOWSsystem32svchost.exe C:WINDOWSsystem32Ati2evxx.exe C:WINDOWSExplorer.EXE C:WINDOWSsystem32spoolsv.exe C:WINDOWSSOUNDMAN.EXE C:Program FilesESETESET NOD32 Antivirusegui.exe C:Program FilesUnlockerUnlockerAssistant.exe C:Program FilesMail.RuAgentMAgent.exe C:Program FilesSony EricssonMobile2Application LauncherApplication Launcher.exe C:WINDOWSsystem32ctfmon.exe C:Program FilesVistaDriveIconVistaDrv.exe C:Program FilesChameleon ClockChamClock.exe C:Program FilesCommon FilesNeroLibNMBgMonitor.exe C:Program FilesDAEMON Tools Litedaemon.exe C:Program FilesNokiaNokia PC Suite 7PCSuite.exe C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe C:Program FilesBonjourmDNSResponder.exe C:Program FilesOrbitdownloaderorbitdm.exe C:Program FilesESETESET

Здравствуйте, добро пожаловать на Spyware-ru форум. Судя по логам ваш компьютер так же заражён autorun.inf трояном. Прочитайте эту инструкцию Flash_Disinfector ещё одно оружие против autorun.inf троянов. * Отключите ваш антивирус. * Скачайте и запустите Flash_Disinfector. * По требованию программы вставьте ваш флэш диск или подключите другие внешние устройства хранения информации. Примечание: запускайте программу столько раз,

ComboFix 09-03-03.01 — d 2009-03-04 13:21:02.2 — NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1251.1.1049.18.510.83 [GMT 5:00] Running from: c:documents and settingsdРабочий столComboFix.exe AV: Panda Internet Security 2009 *On-access scanning disabled* (Updated) FW: Panda Personal Firewall 2009 *disabled* WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:windowssystem321