Antivirus Online

[garry]

Ну собственно черный экран и надпись Antivirus Online соответственно номер и отправить смс, обсолюбтно все убито в безопасном тоже самое, могу загрузится только через LiveCD, в регистре пока не копался просто удалял временые файлы там его видимо нет, собственно прошу помощи выкладываю лог программы в двух актах….

info.txt logfile of random’s system information tool 1.06 2010-01-25 09:52:12

======Uninstall list======

#1 DVD Ripper 8.1.1—>C:Program FilesNo1 DVD Ripperuninst.exe
—>C:Program FilesNeroNero Core\nerouninstallUNNERO.exe /UNINSTALL
—>C:WINDOWSUNNeroBackItUp.exe /UNINSTALL
—>C:WINDOWSUNNeroMediaHome.exe /UNINSTALL
—>C:WINDOWSUNNeroShowTime.exe /UNINSTALL
—>C:WINDOWSUNNeroVision.exe /UNINSTALL
—>C:WINDOWSUNRecode.exe /UNINSTALL
—>msiexec /package {90120000-0015-0000-0000-0000000FF1CE} /uninstall {10B5F4EF-C4DC-47AF-913B-EAF05C69C852}
—>msiexec /package {90120000-0016-0000-0000-0000000FF1CE} /uninstall {C5060182-C90D-4314-9AE9-5C0DCF8FD1EF}
—>msiexec /package {90120000-0018-0000-0000-0000000FF1CE} /uninstall {00E877D5-CDF8-4DDC-9AE0-E541B4BB6487}
—>msiexec /package {90120000-001A-0000-0000-0000000FF1CE} /uninstall {2A33A0C2-2B09-446E-9022-1508A85ECD2D}
—>msiexec /package {90120000-001B-0000-0000-0000000FF1CE} /uninstall {3520B304-0EF8-475D-8C52-47ABCCC75FC6}
—>msiexec /package {90120000-0051-0000-0000-0000000FF1CE} /uninstall {5C395839-FBA5-49C5-923A-787665D5E128}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
µTorrent—>»C:Program FilesuTorrentuTorrent.exe» /UNINSTALL
2IP StartGuard (v1.0)—>»C:Program Files2IPStartGuardunins000.exe»
Acrobat.com—>MsiExec.exe /X{287ECFA4-719A-2143-A09B-D6A12DE54E40}
Adobe AIR—>C:Program FilesCommon FilesAdobe AIRVersions1.0ResourcesAdobe AIR Updater.exe -arp:uninstall
Adobe AIR—>MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Anchor Service CS3—>MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3—>MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Camera Raw 4.0—>MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps—>MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color — Photoshop Specific—>MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings—>MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Extra Settings—>MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings—>MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings—>MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3—>MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Flash Player ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Fonts All—>MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Linguistics CS3—>MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files—>MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3—>C:Program FilesCommon FilesAdobeInstallers719d6f144d0c086a0dfa7ff76bb9ac1Setup.exe
Adobe Photoshop CS3—>MsiExec.exe /I{3D7E3EC9-46CF-4359-9289-39CE01DFB82F}
Adobe Reader 9.1—>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A91000000001}
Adobe Setup—>MsiExec.exe /I{FF11004C-F42A-4A31-9BCF-7F5C8FDBE53C}
Adobe Type Support—>MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3—>MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client—>MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin—>MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3—>MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
AmlMaple—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFAmlMaple.inf,Uninstall
Call of Duty—>C:PROGRA~1CALLOF~1UninstallUnwise.exe /u C:PROGRA~1CALLOF~1UninstallInstall.log
Ccleaner 2.07.575—>»C:Program FilesCcleanerunins000.exe»
Citrix XenApp Web Plugin—>MsiExec.exe /X{EBFEEB3F-3E3B-4725-A4E0-376144CE4F76}
CPU-Z and GPU-Z—>C:Program FilesCPU-ZUninstall.exe
Daemon Tools LIte—>»C:Program FilesDaemon Tools LiteUninst.exe»
DameWare NT Utilities—>MsiExec.exe /I{52D862F9-F281-41B5-8806-58D4ABB8159E}
Download Master version 5.5.9.1157—>»C:Program FilesDownload Masterunins000.exe»
EA Download Manager—>C:Program FilesElectronic ArtsEADMUninstall.exe
eMule—>C:Program FileseMuleUninstall.exe
ESET NOD32 Antivirus—>MsiExec.exe /I{FBDB29C1-D297-4996-938E-F1590EF6C000}
Everest—>C:Program FilesEverestUninstall.exe
FamilyTree Version 9.7—>»C:Program FilesFamilyTreeunins000.exe»
FastStone Image Viewer 3.5—>»C:Program FilesFSImgViewerunins000.exe»
Flash Player Pro—>C:Program FilesFlash Player ProUninstall.exe
FlashBoot 1.4.0.157—>»C:Program FilesFlashBootunins000.exe»
Foxit Reader—>C:Program FilesFoxit ReaderUninstall.exe
GribUser FB2 to Any 1.0 (remove only)—>»C:Program FilesGribUserFB2 to Anyuninstall.exe»
HFS—>C:Program FilesHFSUninstall.exe
HP Wireless Assistant—>MsiExec.exe /I{CBAE4F50-9FC9-4557-AB36-9826DF3C103C}
iColorFolder 1.5.0.1—>C:Program FilesiColorFolderUninstall.exe
InfraRecorder—>C:Program FilesInfraRecorderuninstall.exe
Java(TM) 6 Update 6—>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160060}
K-Lite Mega Codec Pack 3.9.0—>»C:Program FilesK-Lite Codec Packunins000.exe»
LClock—>C:Program FilesLClockUninstall.exe
Microsoft .NET Framework 1.1 Russian Language Pack—>MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1—>MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft ActiveSync—>MsiExec.exe /I{99052DB7-9592-4522-A558-5417BBAD48EE}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7—>»C:WINDOWS$NtUninstallWdf01007$spuninstspuninst.exe»
Microsoft Office Access 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall ACCESS /dll OSETUP.DLL
Microsoft Office Access 2007—>MsiExec.exe /X{90120000-0015-0000-0000-0000000FF1CE}
Microsoft Office Access MUI (Russian) 2007—>MsiExec.exe /X{90120000-0015-0419-0000-0000000FF1CE}
Microsoft Office Excel 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall EXCEL /dll OSETUP.DLL
Microsoft Office Excel 2007—>MsiExec.exe /X{90120000-0016-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Russian) 2007—>MsiExec.exe /X{90120000-0016-0419-0000-0000000FF1CE}
Microsoft Office Outlook 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall OUTLOOK /dll OSETUP.DLL
Microsoft Office Outlook 2007—>MsiExec.exe /X{90120000-001A-0000-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Russian) 2007—>MsiExec.exe /X{90120000-001A-0419-0000-0000000FF1CE}
Microsoft Office PowerPoint 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall POWERPOINT /dll OSETUP.DLL
Microsoft Office PowerPoint 2007—>MsiExec.exe /X{90120000-0018-0000-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Russian) 2007—>MsiExec.exe /X{90120000-0018-0419-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007—>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007—>MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2007—>MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2007—>MsiExec.exe /X{90120000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2007—>MsiExec.exe /X{90120000-002C-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Visio MUI (Russian) 2007—>MsiExec.exe /X{90120000-0054-0419-0000-0000000FF1CE}
Microsoft Office Visio Professional 2007—>MsiExec.exe /X{90120000-0051-0000-0000-0000000FF1CE}
Microsoft Office Visio Профессиональный 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall VISPRO /dll OSETUP.DLL
Microsoft Office Word 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall WORD /dll OSETUP.DLL
Microsoft Office Word 2007—>MsiExec.exe /X{90120000-001B-0000-0000-0000000FF1CE}
Microsoft Office Word MUI (Russian) 2007—>MsiExec.exe /X{90120000-001B-0419-0000-0000000FF1CE}
Microsoft User-Mode Driver Framework Feature Pack 1.5—>»C:WINDOWS$NtUninstallWudf01005$spuninstspuninst.exe»
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft WSE 3.0 Runtime—>MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
Microsoft XML Parser and SDK—>MsiExec.exe /I{2AEBE10C-D819-4EBF-BC60-03BF2327D340}
Mozilla Firefox (3.5.7)—>C:Program FilesMozilla Firefoxuninstallhelper.exe
MSVC80_x86—>MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
MSXML 4.0 SP2 (KB936181)—>MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
Nero 8 Lite v8.3.2.1—>»C:Program FilesNerounins000.exe»
Nero 8—>MsiExec.exe /X{8AEA4BE2-2B52-41C0-BB7D-9F2D17AF1049}
NETBYNET DC—>»C:Program FilesNETBYNETDCunins000.exe»
NOD32 FiX—>»C:Program FilesNETBYNETDCDownloadsESET.NOD32.AntiVirus.v3.0.566.0.Final_rusESET.NOD32.AntiVirus.v3.0.566.0.Final_rusNOD32 Antivirus Systemkey+updateObsoleteunins000.exe»
Nokia Connectivity Cable Driver—>MsiExec.exe /X{15AC0C5D-A6FB-4CE2-8CD0-28179EEB5625}
Nokia Flashing Cable Driver—>MsiExec.exe /X{D99C322D-C21B-40C7-AE71-EE51AA096B6E}
Nokia PC Suite—>C:Documents and SettingsAll UsersApplication DataInstallations{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}Nokia_PC_Suite_7_1_18_0_rus_web.exe
Nokia PC Suite—>MsiExec.exe /I{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}
Nokia Software Updater—>MsiExec.exe /X{EF4F620F-F295-41D7-92C0-6B635709C850}
NVIDIA Drivers—>C:WINDOWSsystem32nvuninst.exe UninstallGUI
O&O Defrag Professional Edition—>MsiExec.exe /I{53480330-E1D1-41CA-B8F8-7F78644F7F50}
Paint.NET v3.31—>rundll32.exe advpack.dll,LaunchINFSection PaintDN.inf,Uninstall
PathClip 1.0.7.67—>C:WINDOWSsystem32Uninstall.exe
PC Connectivity Solution—>MsiExec.exe /I{D848D140-41C3-4A53-86D8-E866A100B4CD}
PDF Settings—>MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
Pivim Multibar—>C:Program FilesPivim Multibaruninstall.exe
Punto Switcher 2.95—>»C:Program FilesPunto Switcherunins000.exe»
QuickTime—>C:WINDOWSunvise32qt.exe C:WINDOWSsystem32QuickTimeUninstall.log
Radmin Server 3.2—>MsiExec.exe /X{ED87EE42-C14B-4119-8686-C3A630F2A463}
Radmin Viewer 3.2—>MsiExec.exe /X{5AFF9A56-B7EB-486D-912C-FB89C857DFAB}
Realtek High Definition Audio Driver—>RtlUpd.exe -r -m -nrg2709
Restorator 2007 v3.70 Build 1747 — Retail—>»C:Program FilesRestorator 2007unins000.exe»
Right Click Image Converter—>»C:Program FilesKristanixRight Click Image Converteruninstall.exe»
sDC++ 2.2 QWERTY—>»C:Program FilesStrongDC++unins000.exe»
Smart Install Maker 5.02—>C:Program FilesSmart Install MakerUninstall.exe
SnagIt 8—>MsiExec.exe /I{DA0BF7AB-88EB-4675-8FA1-531EAD938821}
Sun xVM VirtualBox—>MsiExec.exe /I{11C2733C-488C-4668-9F8E-46BCC1801C5B}
The KMPlayer—>C:Program FilesThe KMPlayerUninstall.exe
The Sims™ 3—>»C:Program FilesInstallShield Installation Information{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}Sims3Setup.exe» -runfromtemp -l0x0019 -removeonly
ToolTipFixer 1.0.1—>C:Program FilesNeoSmart TechnologiesToolTipFixeruninstall.exe
Total Commander—>C:Program FilesTotal CommanderUninstall.exe
Total Uninstall 5.2.0—>»C:Program FilesTotal Uninstall 5unins000.exe»
UltraISO Premium (only 32bit) v9.1.2.2465 Rus—>»C:Program FilesUltraISOunins000.exe»
Uninstall Tool 2.3.2—>»C:Program FilesUninstall Toolunins000.exe»
Vista Drive Icon—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFVistaDrv.inf,Uninstall
Vista Games 1.3 XP—>C:Program FilesVista Gamesuninst.exe
War of the Ring—>»C:Program FilesWar of the RingUninstall.exe» «C:Program FilesWar of the Ringinstall.log»
Winamp—>»C:Program FilesWinampunins000.exe»
XnView 1.93.6—>»C:Program FilesXnViewunins000.exe»
XPTweaker—>C:Program FilesXPTweakerUninstall.exe
Алиса: в погоне за мечтой—>C:PROGRA~1COMMON~1INSTAL~1Driver8INTEL3~1IDriver.exe /M{1DD99200-673C-4BA6-9596-62F9ACC0BD24}
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
Баба Яга за тридевять земель — Английский—>D:ВидеоBaba_Yaga_EnBaba_Yaga_EnglishBaba_Yaga_English.exe -u
Веселая ферма 3—>C:Program FilesAlawar.ruВеселая ферма 3Uninstall.exe
Карта Москвы MosMap v. 3.1 Lite —>C:WINDOWSsystem32UNWISE.EXE C:WINDOWSsystem32mosmap.wsi
Кредитный калькулятор версии 2.0.1.2—>»C:Program FilesCreditCalcunins000.exe»
Легенда — Наследие Драконов (с графикой, с плагинами), Версия 2—>»C:Program FilesITTerritoryDragonsunins000.exe»
Пакет драйверов Windows — Nokia Modem (10/27/2008 3.9)—>C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokia_blue_79486EC6AA0D1732FB17E5167077C07ECAE1B870nokia_bluetooth.inf
Пакет драйверов Windows — Nokia Modem (10/27/2008 7.01.0.1)—>C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokbtmdm_247189AEBF39EB69A7C75429610DFED2F2EDC1B6nokbtmdm.inf
Пакет драйверов Windows — Nokia pccsmcfd (08/22/2008 7.0.0.0)—>C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREpccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294pccsmcfd.inf
Пакет обеспечения совместимости для выпуска 2007 системы Microsoft Office—>MsiExec.exe /X{90120000-0020-0419-0000-0000000FF1CE}
Побег из Рая 1.00—>C:babyuser.ruПобег из РаяUninstall.exe
Семейный бюджет v2.4—>»C:Program FilesСемейный бюджетunins000.exe»
СОКРАТ Интернет 3.0 Полиглот—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{A1CE8874-17FC-4646-81F5-BA704330CD72}setup.exe»
Сократ Персональный 4.1—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{9CD789E2-B7CE-11D5-B7E9-00A0C9449F99}setup.exe»

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=6
«PROCESSOR_IDENTIFIER»=x86 Family 6 Model 15 Stepping 13, GenuineIntel
«PROCESSOR_REVISION»=0f0d
«NUMBER_OF_PROCESSORS»=2
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP

---

EOF

---

[garry]

Logfile of random’s system information tool 1.06 (written by random/random)
Run by SYSTEM at 2010-01-25 09:50:58
WIN_XP
System drive D: has 13 GB (32%) free of 41 GB
Total RAM: 1022 MB (76% free)

HijackThis download failed

======Scheduled tasks folder======

D:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1060284298-1708537768-1177238915-500Core.job
D:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1060284298-1708537768-1177238915-500UA.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{00C6482D-C502-44C8-8409-FCE54AD9C208}]
SnagIt Toolbar Loader — C:Program FilesTechSmithSnagIt 8SnagItBHO.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
XBTBPos00 Class — C:Program FilesPivim Multibarpivim.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} — SnagIt — C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll []
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — C:Program FilesDownload Masterdmbar.dll []
{1BB22D38-A411-4B13-A746-C2A4F4EC7344} — Pivim Multibar — C:Program FilesPivim Multibarpivim.dll []

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll,NvStartup []
«nwiz»=nwiz.exe /install []
«RTHDCPL»=RTHDCPL.EXE []
«OODefragTray»=C:WINDOWSsystem32oodtray.exe []
«NvMediaCenter»=NvMCTray.dll,NvTaskbarInit []
«NeroFilterCheck»=C:Program FilesCommon FilesNeroLibNeroCheck.exe []
«NBKeyScan»=C:Program FilesNeroNero CoreNero BackItUpNBKeyScan.exe []
«AmlMaple»=C:Program FilesAmlMapleAmlMaple.exe []
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe []
«hpWirelessAssistant»=C:Program FilesHewlett-PackardHP Wireless AssistantHPWAMain.exe []
«egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe /hide /waitservice []
«NevoDRM»=C:ИгрыNevoDRMNevoDRM.exe []

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe []
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe []
«Punto Switcher»=C:Program FilesPunto Switcherps.exe []
«louderit.exe»=C:Program FileslouderitLouderIt.exe []
«LClock»=C:Program FilesLClockLClock.exe []
«H/PC Connection Agent»=C:PROGRA~1MI3AA1~1wcescomm.exe []
«Google Update»=C:Documents and SettingsAdminLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe /c []
«BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=C:Program FilesCommon FilesNeroLibNMBgMonitor.exe []
«KillCopy»=C:WINDOWSsystem32killcopy.exe /kcresume /startup []
«Download Master»=C:Program FilesDownload Masterdmaster.exe -autorun []
«2IP StartGuard»=C:Program Files2IPStartGuardStartGuard.exe []
«PC Suite Tray»=C:Program FilesNokiaNokia PC Suite 7PCSuite.exe -onlytray []
«Rixler Software NetWork»=C:Program FilesInternet Password Recovery МастерAgent.exe -a []
«DAEMON Tools Lite»=C:Program FilesDAEMON Tools Litedaemon.exe -autorun []
«EA Core»=C:Program FilesElectronic ArtsEADMCore.exe -silent []

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
GoogleUpdateTaskUserS-1-5-21-1060284298-1708537768-1177238915-500Core.job
GoogleUpdateTaskUserS-1-5-21-1060284298-1708537768-1177238915-500UA.job
SA.DAT

C:Documents and SettingsAdminГлавное менюПрограммыАвтозагрузка
GoogleUpdateTaskUserS-1-5-21-1060284298-1708537768-1177238915-500Core.job
GoogleUpdateTaskUserS-1-5-21-1060284298-1708537768-1177238915-500UA.job
SA.DAT

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32wpdshserviceobj.dll []

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«DisableTaskMgr»=0

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoSharedDocuments»=1
«NoSMConfigurePrograms»=1

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{cd54d1df-5fd8-11de-bad2-001b2470a9c1}]
shellAutoRuncommand — G:setup.exe

======File associations======

.js — edit —
.js — open —

======List of files/folders created in the last 1 months======

2010-01-25 09:50:59 —-D—- C:Program Filestrend micro
2010-01-25 09:50:58 —-D—- D:rsit
2010-01-25 06:22:50 —-A—- D:WINDOWSntbtlog.txt
2010-01-14 18:53:13 —-D—- D:ApolloOutput

======List of files/folders modified in the last 1 months======

2010-01-25 06:22:50 —-D—- D:WINDOWS
2010-01-24 21:53:16 —-D—- D:WINDOWSTemp
2010-01-24 21:53:14 —-SHD—- D:RECYCLER
2010-01-24 17:48:04 —-A—- D:WINDOWSSchedLgU.Txt
2010-01-24 17:31:02 —-D—- D:WINDOWSsystem32
2010-01-24 17:30:48 —-D—- D:WINDOWSDebug
2010-01-23 21:59:12 —-A—- D:WINDOWSNeroDigital.ini
2010-01-18 17:48:00 —-RD—- D:Program Files
2010-01-17 12:34:45 —-A—- D:WINDOWSIE4 Error Log.txt
2010-01-14 18:28:07 —-D—- D:WINDOWSMinidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; D:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); D:WINDOWSsystem32driversRtkHDAud.sys [2008-04-17 4707328]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; D:WINDOWSsystem32DRIVERSRtenicxp.sys [2008-01-04 105856]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; D:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S1 intelppm;Драйвер Intel процессора; D:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
S1 kbdhid;Драйвер клавиатуры HID; D:WINDOWSsystem32DRIVERSkbdhid.sys [2008-05-20 14720]
S1 WmiAcpi;Интерфейс управления для ACPI Microsoft Windows; D:WINDOWSsystem32DRIVERSwmiacpi.sys [2008-05-20 8832]
S3 Arp1394;Протокол клиента 1394 ARP; D:WINDOWSsystem32DRIVERSarp1394.sys [2008-05-20 60800]
S3 CCDECODE;Closed Caption декодер; D:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-05-20 17024]
S3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); D:WINDOWSsystem32DRIVERSCmBatt.sys [2008-05-20 13952]
S3 eabfiltr;eabfiltr; D:WINDOWSsystem32DRIVERSeabfiltr.sys [2005-09-19 7808]
S3 eabusb;eabusb; D:WINDOWSsystem32DRIVERSeabusb.sys [2005-09-19 5760]
S3 HBtnKey;HBtnKey; D:WINDOWSsystem32DRIVERScpqbttn.sys [2005-09-19 9344]
S3 HidUsb;Драйвер класса HID Microsoft; D:WINDOWSsystem32DRIVERShidusb.sys [2008-05-20 10368]
S3 mouhid;Драйвер мыши HID; D:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; D:WINDOWSsystem32driversMSTEE.sys [2008-05-20 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; D:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-05-20 85248]
S3 NdisIP;Microsoft видео или ТВ подключение; D:WINDOWSsystem32DRIVERSNdisIP.sys [2008-05-20 10880]
S3 NETw4x32;Драйвер адаптера Intel(R) Wireless WiFi Link для Windows XP 32 Bit; D:WINDOWSsystem32DRIVERSNETw4x32.sys [2007-08-28 2210816]
S3 NIC1394;Сетевой драйвер 1394; D:WINDOWSsystem32DRIVERSnic1394.sys [2008-05-20 61824]
S3 nv;nv; D:WINDOWSsystem32DRIVERSnv4_mini.sys [2007-12-05 7435392]
S3 sdbus;sdbus; D:WINDOWSsystem32DRIVERSsdbus.sys [2008-04-15 79232]
S3 SLIP;BDA Slip De-Framer; D:WINDOWSsystem32DRIVERSSLIP.sys [2008-05-20 11136]
S3 streamip;BDA IPSink; D:WINDOWSsystem32DRIVERSStreamIP.sys [2008-05-20 15232]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); D:WINDOWSsystem32DRIVERSusbccgp.sys [2008-05-20 32384]
S3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; D:WINDOWSsystem32DRIVERSusbehci.sys [2008-05-20 30336]
S3 usbhub;USB2 концентратор; D:WINDOWSsystem32DRIVERSusbhub.sys [2008-05-20 59520]
S3 USBSTOR;Драйвер запоминающих устройств для USB; D:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-05-20 26368]
S3 usbvideo;USB-видеоустройство (WDM); D:WINDOWSSystem32Driversusbvideo.sys [2008-05-20 121984]
S3 WSTCODEC;World Standard Teletext кодек; D:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-05-20 19200]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; D:WINDOWSsystem32DRIVERSWudfPf.sys [2006-09-15 76544]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; D:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-15 82688]
S4 IntelIde;IntelIde; X:A386system32driversIntelIde.sys [2004-08-18 5504]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 Netprotocol;Network Protocol Driver; D:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S2 NVSvc;NVIDIA Display Driver Service; D:WINDOWSsystem32nvsvc32.exe [2007-12-05 155716]
S3 aspnet_state;ASP.NET State Service; D:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-23 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe []
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe []
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; D:WINDOWSsystem32svchost.exe [2008-04-15 14336]

---

EOF

---

[garry]

вообщем нашел решение проблемы

http://support.kaspersky.ru/viruses/common?qid=208636874

[Автор]

Сообщения