- This topic has 2 ответа, 2 участника, and was last updated 15 years, 2 months назад by
.
-
Сообщения
-
Сообщение появляется при запуске, бук и так не шустрый еле ползает. С помощью HijackThis.exe сделал лог и стартлист.
Помогите, пожалуйста, понять, что делать дальше…
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:50:15, on 31.08.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20733)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesIntelWirelessBinS24EvMon.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesCommon FilesInterVideoDeviceServiceDevSvc.exe
C:Program FilesIntelWirelessBinEvtEng.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesIntelWirelessBinRegSrvc.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe
C:Program FilesCommon FilesUlead SystemsDVDULCDRSvr.exe
C:WINDOWSsystem32UTSCSI.EXE
C:Program FilesSonyVAIO Event ServiceVESMgr.exe
C:WINDOWSsystem32wbemwmiapsrv.exe
C:WINDOWSExplorer.EXE
C:Program FilesRealtekInstallShieldAzMixerSel.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxsrvc.exe
C:WINDOWSsystem32igfxpers.exe
C:Program FilesApointApoint.exe
C:Program FilesSonyISB UtilityISBMgr.exe
C:Program FilesApointApMsgFwd.exe
C:Program FilesSonyVAIO Power ManagementSPMgr.exe
C:Program FilesHewlett-PackardOrderReminderOrderReminder.exe
C:Program FilesApointApntex.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesSonyVAIO Power ManagementOPT Drive Power Saving.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtMng.exe
C:Program FilesToshibaBluetooth Toshiba StackTosA2dp.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHid.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHsp.exe
C:Program FilesAdobeAcrobat 7.0ReaderAcroRd32.exe
H:HJTHijackThis.exeR1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.trc.local
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O1 — Hosts: 208.109.46.212 http://www.driver-soft.com
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 — BHO: IEVkbdBHO — {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} — C:Program FilesKaspersky LabKaspersky Anti-Virus 2009ievkbd.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [AzMixerSel] C:Program FilesRealtekInstallShieldAzMixerSel.exe
O4 — HKLM..Run: [IgfxTray] C:WINDOWSsystem32igfxtray.exe
O4 — HKLM..Run: [HotKeysCmds] C:WINDOWSsystem32hkcmd.exe
O4 — HKLM..Run: [Persistence] C:WINDOWSsystem32igfxpers.exe
O4 — HKLM..Run: [Apoint] C:Program FilesApointApoint.exe
O4 — HKLM..Run: [ISBMgr.exe] C:Program FilesSonyISB UtilityISBMgr.exe
O4 — HKLM..Run: [SonyPowerCfg] «C:Program FilesSonyVAIO Power ManagementSPMgr.exe»
O4 — HKLM..Run: [OPT Drive Power Saving] «C:Program FilesSonyVAIO Power ManagementOPT Drive Power Saving.EXE»
O4 — HKLM..Run: [WinampAgent] «C:Program FilesWinampwinampa.exe»
O4 — HKLM..Run: [OrderReminder] C:Program FilesHewlett-PackardOrderReminderOrderReminder.exe
O4 — HKLM..Run: [UVS11 Preload] C:Documents and SettingsВладимирМои документыПрограммыulead videostudiouvPL.exe
O4 — HKLM..Run: [AVP] «C:Program FilesKaspersky LabKaspersky Anti-Virus 2009avp.exe»
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [MSMSGS] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘Default user’)
O4 — Global Startup: Bluetooth Manager.lnk = ?
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O9 — Extra button: Статистика защиты веб-трафика — {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} — C:Program FilesKaspersky LabKaspersky Anti-Virus 2009SCIEPlgn.dll
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O20 — AppInit_DLLs: C:PROGRA~1KASPER~1KASPER~1mzvkbd3.dll
O23 — Service: Adobe LM Service — Adobe Systems — C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 — Service: Kaspersky Anti-Virus (AVP) — Kaspersky Lab — C:Program FilesKaspersky LabKaspersky Anti-Virus 2009avp.exe
O23 — Service: Capture Device Service — InterVideo Inc. — C:Program FilesCommon FilesInterVideoDeviceServiceDevSvc.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Intel(R) PROSet/Wireless Event Log (EvtEng) — Intel Corporation — C:Program FilesIntelWirelessBinEvtEng.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) — Intel Corporation — C:Program FilesIntelWirelessBinRegSrvc.exe
O23 — Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) — Intel Corporation — C:Program FilesIntelWirelessBinS24EvMon.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: ServiceLayer — Nokia. — C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: TOSHIBA Bluetooth Service — TOSHIBA CORPORATION — C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe
O23 — Service: Ulead Burning Helper (UleadBurningHelper) — Ulead Systems, Inc. — C:Program FilesCommon FilesUlead SystemsDVDULCDRSvr.exe
O23 — Service: CLCV0 (UTSCSI) — Unknown owner — C:WINDOWSsystem32UTSCSI.EXE
O23 — Service: VAIO Event Service — Sony Corporation — C:Program FilesSonyVAIO Event ServiceVESMgr.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 10116 bytes
StartupList report, 31.08.2009, 23:54:54
StartupList version: 1.52.2
Started from : H:HJTHijackThis.EXE
Detected: Windows XP SP3 (WinNT 5.01.2600)
Detected: Internet Explorer v7.00 (7.00.6000.20733)
* Using default options
==================================================Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesIntelWirelessBinS24EvMon.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesCommon FilesInterVideoDeviceServiceDevSvc.exe
C:Program FilesIntelWirelessBinEvtEng.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesIntelWirelessBinRegSrvc.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe
C:Program FilesCommon FilesUlead SystemsDVDULCDRSvr.exe
C:WINDOWSsystem32UTSCSI.EXE
C:Program FilesSonyVAIO Event ServiceVESMgr.exe
C:WINDOWSsystem32wbemwmiapsrv.exe
C:WINDOWSExplorer.EXE
C:Program FilesRealtekInstallShieldAzMixerSel.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxsrvc.exe
C:WINDOWSsystem32igfxpers.exe
C:Program FilesApointApoint.exe
C:Program FilesSonyISB UtilityISBMgr.exe
C:Program FilesApointApMsgFwd.exe
C:Program FilesSonyVAIO Power ManagementSPMgr.exe
C:Program FilesHewlett-PackardOrderReminderOrderReminder.exe
C:Program FilesApointApntex.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesSonyVAIO Power ManagementOPT Drive Power Saving.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtMng.exe
C:Program FilesToshibaBluetooth Toshiba StackTosA2dp.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHid.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHsp.exe
C:Program FilesAdobeAcrobat 7.0ReaderAcroRd32.exe
H:HJTHijackThis.exe
Listing of startup folders:Shell folders Common Startup:
[C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка]
Bluetooth Manager.lnk = ?
Checking Windows NT UserInit:[HKLMSoftwareMicrosoftWindows NTCurrentVersionWinlogon]
UserInit = C:WINDOWSsystem32userinit.exe,
Autorun entries from Registry:
HKLMSoftwareMicrosoftWindowsCurrentVersionRunAlcmtr = ALCMTR.EXE
AzMixerSel = C:Program FilesRealtekInstallShieldAzMixerSel.exe
IgfxTray = C:WINDOWSsystem32igfxtray.exe
HotKeysCmds = C:WINDOWSsystem32hkcmd.exe
Persistence = C:WINDOWSsystem32igfxpers.exe
Apoint = C:Program FilesApointApoint.exe
ISBMgr.exe = C:Program FilesSonyISB UtilityISBMgr.exe
SonyPowerCfg = «C:Program FilesSonyVAIO Power ManagementSPMgr.exe»
OPT Drive Power Saving = «C:Program FilesSonyVAIO Power ManagementOPT Drive Power Saving.EXE»
WinampAgent = «C:Program FilesWinampwinampa.exe»
OrderReminder = C:Program FilesHewlett-PackardOrderReminderOrderReminder.exe
UVS11 Preload = C:Documents and SettingsВладимирМои документыПрограммыulead videostudiouvPL.exe
AVP = «C:Program FilesKaspersky LabKaspersky Anti-Virus 2009avp.exe»
Autorun entries from Registry:
HKCUSoftwareMicrosoftWindowsCurrentVersionRunCTFMON.EXE = C:WINDOWSsystem32ctfmon.exe
MSMSGS = «C:Program FilesMessengermsmsgs.exe» /background
Load/Run keys from C:WINDOWSWIN.INI:load=*INI section not found*
run=*INI section not found*Load/Run keys from Registry:
HKLM..Windows NTCurrentVersionWinLogon: load=*Registry value not found*
HKLM..Windows NTCurrentVersionWinLogon: run=*Registry value not found*
HKLM..WindowsCurrentVersionWinLogon: load=*Registry key not found*
HKLM..WindowsCurrentVersionWinLogon: run=*Registry key not found*
HKCU..Windows NTCurrentVersionWinLogon: load=*Registry value not found*
HKCU..Windows NTCurrentVersionWinLogon: run=*Registry value not found*
HKCU..WindowsCurrentVersionWinLogon: load=*Registry key not found*
HKCU..WindowsCurrentVersionWinLogon: run=*Registry key not found*
HKCU..Windows NTCurrentVersionWindows: load=
HKCU..Windows NTCurrentVersionWindows: run=*Registry value not found*
HKLM..Windows NTCurrentVersionWindows: load=*Registry value not found*
HKLM..Windows NTCurrentVersionWindows: run=*Registry value not found*
HKLM..Windows NTCurrentVersionWindows: AppInit_DLLs=C:PROGRA~1KASPER~1KASPER~1mzvkbd3.dll
Shell & screensaver key from C:WINDOWSSYSTEM.INI:Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*Shell & screensaver key from Registry:
Shell=Explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*Policies Shell key:
HKCU..Policies: Shell=*Registry key not found*
HKLM..Policies: Shell=*Registry value not found*
Enumerating Browser Helper Objects:
(no name) — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
IEVkbdBHO — C:Program FilesKaspersky LabKaspersky Anti-Virus 2009ievkbd.dll — {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}
(no name) — C:PROGRA~1DOWNLO~1dmiehlp.dll — {9961627E-4059-41B4-8E0E-A7D6B3854ADF}
(no name) — C:Program FilesJavajre6binjp2ssv.dll — {DBC80044-A445-435b-BC74-9C25C1C588A9}
JQSIEStartDetectorImpl — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll — {E7E6F031-17CE-4C07-BC86-EABFE594F69C}
Enumerating ShellServiceObjectDelayLoad items:WPDShServiceObj: C:WINDOWSsystem32wpdshserviceobj.dll
WebCheck: C:WINDOWSsystem32webcheck.dll
PostBootReminder: C:WINDOWSsystem32SHELL32.dll
CDBurn: C:WINDOWSsystem32SHELL32.dll
SysTray: C:WINDOWSsystem32stobject.dll
End of report, 7 061 bytes
Report generated in 0,156 secondsCommand line options:
/verbose — to add additional info on each section
/complete — to include empty sections and unsuspicious data
/full — to include several rarely-important sections
/force9x — to include Win9x-only startups even if running on WinNT
/forcent — to include WinNT-only startups even if running on Win9x
/forceall — to include all Win9x and WinNT startups, regardless of platform
/history — to list version history onlyСпасибо.
Здравствуйте, добро пожаловать на Spyware-ru форум.
AzMixerSel.exe
Это компонент RealTek миксера звука (звуковой карты).
Попробуйте переустановить драйвера.
Если не поможет, то можно отключить загрузку этого компонента.
- Для ответа в этой теме необходимо авторизоваться.
