1) и 2) RSIT: Logfile of random’s system information tool 1.05 (written by random/random) Run by Ant-Killer at 2009-01-11 11:32:13 Microsoft Windows XP Professional Service Pack 3 System drive C: has 12 GB (25%) free of 49 GB Total RAM: 2047 MB (79% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:32:16, on

Logfile of random’s system information tool 1.05 (written by random/random) Run by Eli at 2009-01-10 15:33:22 Microsoft® Windows Vista™ Ultimate Service Pack 1 System drive C: has 163 GB (68%) free of 238 GB Total RAM: 3070 MB (54% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:33:27, on 10.1.2009 Platform: Windows Vista

[2009.01.05 18:21:26 | 00,099,840 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32dllcachehelphost.exe [2009.01.05 18:21:26 | 00,035,328 | —- | C] (Корпорация Майкрософт) — C:WINDOWSSystem32dllcachenotiflag.exe [2009.01.05 18:21:26 | 00,021,504 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32dllcachebrpinfo.dll [2009.01.05 18:21:26 | 00,011,264 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32dllcacheatrace.dll [2009.01.05 18:21:26 | 00,011,264 | —- |

Logfile of random’s system information tool 1.05 (written by random/random) Run by Наталия Новикова at 2009-01-09 19:05:37 Microsoft Windows XP Professional Service Pack 2 System drive C: has 4 GB (26%) free of 15 GB Total RAM: 511 MB (50% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:05:41, on 09.01.2009 Platform: Windows

ComboFix 09-01-08.01 — Администратор 2009-01-08 23:27:48.1 — NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1251.1.1049.18.2046.1510 [GMT 3:00] Running from: E:ComboFix.exe AV: Outpost Security Suite Pro *On-access scanning disabled* (Outdated) FW: Outpost Security Suite Pro *disabled* * Created a new restore point * Resident AV is active WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

======List of files/folders created in the last 1 months====== 2009-01-09 01:00:22 —-D—- C:rsit 2009-01-09 01:00:22 —-D—- C:Program Filestrend micro 2009-01-09 00:06:47 —-D—- C:WINDOWStemp 2009-01-09 00:06:41 —-A—- C:ComboFix.txt 2009-01-08 23:23:08 —-A—- C:WINDOWSNIRCMD.exe 2009-01-08 23:23:07 —-A—- C:WINDOWSzip.exe 2009-01-08 23:23:07 —-A—- C:WINDOWSSWREG.exe 2009-01-08 23:23:06 —-A—- C:WINDOWSgrep.exe 2009-01-08 23:23:05 —-A—- C:WINDOWSsed.exe 2009-01-08 23:23:05 —-A—- C:WINDOWSfdsv.exe 2009-01-08 23:23:04 —-A—- C:WINDOWSVFIND.exe

Logfile of random’s system information tool 1.05 (written by random/random) Run by Администратор at 2009-01-09 01:00:22 Microsoft Windows XP Professional Service Pack 3 System drive C: has 165 GB (80%) free of 206 GB Total RAM: 2046 MB (76% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 1:01:20, on 09.01.2009 Platform: Windows XP

вот лог файл комбо фикс ComboFix 09-01-05.05 — РАЗУМНЫЙ 2009-01-06 22:33:06.1 — NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1251.1.1049.18.511.267 [GMT 3:00] Running from: c:documents and settingsРАЗУМНЫЙРабочий столComboFix.exe AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Outdated) * Created a new restore point * Resident AV is active WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE

Logfile of random’s system information tool 1.05 (written by random/random) Run by Admin at 2009-01-05 21:33:30 Microsoft Windows XP Professional Service Pack 3 System drive C: has 5 GB (45%) free of 10 GB Total RAM: 767 MB (73% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:33:33, on 05.01.2009 Platform: Windows XP