IAT C:Documents and SettingsUserРабочий столgmer.exe[3196] @ C:WINDOWSsystem32GDI32.dll [KERNEL32.dll!GetProcAddress] [7C882FEC] C:WINDOWSsystem32kernel32.dll (Библиотека клиента Windows NT BASE API/Корпорация Майкрософт) IAT C:Documents and SettingsUserРабочий столgmer.exe[3196] @ C:WINDOWSsystem32GDI32.dll [KERNEL32.dll!LoadLibraryW] [7C882FC4] C:WINDOWSsystem32kernel32.dll (Библиотека клиента Windows NT BASE API/Корпорация Майкрософт) IAT C:Documents and SettingsUserРабочий столgmer.exe[3196] @ C:WINDOWSsystem32RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [7C882F9C] C:WINDOWSsystem32kernel32.dll (Библиотека клиента Windows NT BASE API/Корпорация Майкрософт) IAT C:Documents and SettingsUserРабочий

.text … .text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetPathFromIDListW + 15 7C9E9D91 6 Bytes [ C5, BB, 7C, 89, 45, FC ] .text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetPathFromIDListW + 1C 7C9E9D98 44 Bytes [ 45, 08, 50, 6A, 07, 8D, 45, … ] .text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetPathFromIDListW + 49 7C9E9DC5 44 Bytes [ 85, C0, 0F, 85, 19, B1, FF, … ] .text

По Вашей инструкции просканировал ПК с помощью программы OTViewIt, получил два лога: (OTViewIt.txt) OTViewIt logfile created on: 28.12.2008 10:58:39 — Run OTViewIt by OldTimer — Version 1.0.20.1 Folder = C:Documents and SettingsUserРабочий стол Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) — Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000419 |

Не вместилось. Пришлось разбить на две части. В. info.txt logfile of random’s system information tool 1.05 2008-12-28 01:26:26 ======Uninstall list====== —>C:Program FilesNeroNero 7nerouninstallUNNERO.exe /UNINSTALL —>C:WINDOWSUNNeroMediaHome.exe /UNINSTALL —>C:WINDOWSUNNeroShowTime.exe /UNINSTALL —>C:WINDOWSUNNeroVision.exe /UNINSTALL —>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{3F92ABBB-6BBF-11D5-B229-002078017FBF}SETUP.EXE» -l0x19 ControlPanelAnyText —>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{E646DCF0-5A68-11D5-B229-002078017FBF}SETUP.EXE» -l0x9 ControlPanel —>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf 7-Zip 4.57—>»C:Program Files7-ZipUninstall.exe» Access

Прошлый ComboFix.exe удалил в ручную, сейчас скачал новый и запустил. ComboFix 08-12-26.03 — Администратор 2008-12-27 18:58:51.5 — NTFSx86 Microsoft® Windows Vista™ Ultimate 6.0.6001.1.1251.1.1049.18.3326.2440 [GMT 3:00] Running from: c:usersАдминистраторDesktopComboFix.exe AV: Panda Antivirus + Firewall 2008 *On-access scanning disabled* (Outdated) FW: Panda Antivirus 2008 Personal Firewall *disabled* FW: Outpost Firewall Pro *disabled* . ((((((((((((((((((((((((( Files Created from

Спасибо с Оперов помогло ! Лог Logfile of random’s system information tool 1.05 (written by random/random) Run by Артём at 2008-12-25 13:28:13 Microsoft Windows XP Professional Service Pack 2 System drive C: has 9 GB (27%) free of 34 GB Total RAM: 1022 MB (6% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at

OTViewIt.txt: OTViewIt logfile created on: 24.12.2008 19:34:37 — Run OTViewIt by OldTimer — Version 1.0.20.1 Folder = C:ProjectsASFCode — OBGMainASF.WebASF.Dictionary.Web.UIImagesnewDict Windows Server 2003 Enterprise Edition Service Pack 2 (Version = 5.2.3790) — Type = NTServer Internet Explorer (Version = 7.0.5730.11) Locale: 00000419 | Country: Russia | Language: RUS | Date Format: dd.MM.yyyy 1,99 Gb Total

RSIT скачал и запустил, но он не доходя до конца, на этапе Listing Services and Drivers выдает ошибку: Line: -1 Error: Variable used without being declared. тем не менее log.txt создается, а info.txt нет. Вот log.txt: Logfile of random’s system information tool 1.04 (written by random/random) Run by gig at 2008-12-23 14:47:59 Microsoft(R) Windows(R) Server

Все сделала, но информер не исчез… info.txt logfile of random’s system information tool 1.04 2008-12-15 22:46:11 ======Uninstall list====== —>D:PROGRA~1COMMON~1INSTAL~1Driver9INTEL3~1IDriver.exe /M{05E64AFA-597D-46CD-B27B-774716F0EE8A} /l1033 /x —>MsiExec.exe /I{8A42F680-2DD6-11D4-9A8C-0040F6982C20} —>MsiExec.exe /I{A2529672-574A-4A99-86A5-C1770A0E31FE} —>MsiExec.exe /X{27579b3c-5470-4496-be6c-0c872674f19f} —>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 D:WINDOWSINFPCHealth.inf 1CКосмические Рейнджеры 2—>D:WINDOWSsetup_rangers_2.exe ABC of 1C:Buhgalteria—>D:WINDOWSuninst.exe -f»D:Program FilesAGgroupABCof1CDeIsL1.isu» -c»D:Program FilesAGgroupABCof1C_ISREG32.DLL» Adobe Flash Player 10 Plugin—>D:WINDOWSsystem32MacromedFlashuninstall_plugin.exe Adobe Flash Player 9 ActiveX—>D:WINDOWSsystem32MacromedFlashUninstFl.exe -q Adobe