Баннер вымогающий деньги???

This topic has 21 ответ, 2 участника, and was last updated 15 years, 11 months назад by Admin.

Просмотр 7 сообщений - с 16 по 22 (из 22 всего)

← 1 2

Автор

Сообщения
27 декабря, 2008 в 2:07 пп #20600
silbermond
Participant
- Темы:3
- Сообщений:20
с установленным AVG, при попытке RSIT просканировать компьютер зависает… вообще этот ноутбук какой-то странный… 🙂

Logfile of random’s system information tool 1.05 (written by random/random)
Run by Satellite at 2008-12-27 16:03:38
Microsoft Windows XP Professional Service Pack 2
System drive C: has 87 GB (76%) free of 114 GB
Total RAM: 1022 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:03:38, on 2008.12.27
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32agrsmsvc.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe
C:WINDOWSsystem32wscntfy.exe
C:WINDOWSsystem32WgaTray.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:WINDOWSRTHDCPL.EXE
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesltmohLtmoh.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtMng.exe
C:Program FilesSynapticsSynTPSynToshiba.exe
C:Program FilesToshibaBluetooth Toshiba StackTosA2dp.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHid.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHsp.exe
C:Program FilesToshibaBluetooth Toshiba StackTosAVRC.exe
C:Program FilesToshibaBluetooth Toshiba StacktosOBEX.exe
C:Program FilesToshibaBluetooth Toshiba StacktosBtProc.exe
C:WINDOWSsystem32wuauclt.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Documents and SettingsSatelliteDesktopRSIT.exe
C:Program Filestrend microSatellite.exe

R1 — HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://go.divx.com/divx/divx6/new/en?rcv=1&dist=divxdotcom
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O2 — BHO: WormRadar.com IESiteBlocker.NavFilter — {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} — (no file)
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [syntpenh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 — HKLM..Run: [remotecontrol] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [msmsgs] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKCU..Run: [ltmoh] C:Program FilesltmohLtmoh.exe
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: Bluetooth Manager.lnk = ?
O8 — Extra context menu item: E&xport to Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O16 — DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) — http://go.microsoft.com/fwlink/?linkid=39204
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 — Service: Agere Modem Call Progress Audio (AgereModemAudio) — Agere Systems — C:WINDOWSsystem32agrsmsvc.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: TOSHIBA Bluetooth Service — TOSHIBA CORPORATION — C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe

—
End of file — 4506 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll [2008-05-30 1410344]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3ca2f312-6f6e-4b53-a66e-4e65e497c8c0}]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2007-06-28 8466432]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2007-06-28 81920]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-07-05 16380416]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«syntpenh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2007-07-25 888832]
«remotecontrol»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2003-10-31 32768]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-03 15360]
«msmsgs»=C:Program FilesMessengermsmsgs.exe [2004-10-13 1694208]
«ltmoh»=C:Program FilesltmohLtmoh.exe [2007-01-09 191552]

C:Documents and SettingsAll UsersStart MenuProgramsStartup
Bluetooth Manager.lnk — C:Program FilesToshibaBluetooth Toshiba StackTosBtMng.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
C:WINDOWSsystem32WgaLogon.dll [2008-09-05 241704]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2008-12-26 00:02:50 —-D—- C:Documents and SettingsSatelliteApplication Datavlc
2008-12-26 00:01:19 —-D—- C:Program FilesVideoLAN
2008-12-25 16:10:37 —-D—- C:_OTMoveIt
2008-12-25 11:34:16 —-D—- C:WINDOWSsystem32LogFiles
2008-12-25 11:04:18 —-D—- C:Documents and SettingsAll UsersApplication DataAvg8
2008-12-25 10:45:40 —-D—- C:Program FilesAVG
2008-12-25 00:01:54 —-D—- C:rsit
2008-12-25 00:01:54 —-D—- C:Program Filestrend micro
2008-12-25 00:00:59 —-RASHD—- C:autorun.inf
2008-12-24 22:43:40 —-D—- C:WINDOWSpss
2008-12-24 22:06:57 —-HDC—- C:WINDOWS$NtUninstallKB952069_WM9$
2008-12-24 22:06:45 —-HDC—- C:WINDOWS$NtUninstallKB956841$
2008-12-24 22:04:33 —-D—- C:Program FilesCCleaner
2008-12-24 20:56:58 —-HDC—- C:WINDOWS$NtUninstallKB956803$
2008-12-24 20:56:52 —-HDC—- C:WINDOWS$NtUninstallKB955839$
2008-12-24 20:56:44 —-HDC—- C:WINDOWS$NtUninstallKB956391$
2008-12-24 20:56:37 —-HDC—- C:WINDOWS$NtUninstallKB957095$
2008-12-24 20:56:19 —-HDC—- C:WINDOWS$NtUninstallKB958215$
2008-12-24 20:56:08 —-HDC—- C:WINDOWS$NtUninstallKB954211$
2008-12-24 20:55:59 —-HDC—- C:WINDOWS$NtUninstallKB960714$
2008-12-24 20:55:52 —-HDC—- C:WINDOWS$NtUninstallKB957097$
2008-12-24 20:55:46 —-HDC—- C:WINDOWS$NtUninstallKB938464$
2008-12-24 20:55:39 —-HDC—- C:WINDOWS$NtUninstallKB954600$
2008-12-24 20:55:33 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2008-12-24 20:55:25 —-HDC—- C:WINDOWS$NtUninstallKB955069$
2008-12-24 20:55:16 —-HDC—- C:WINDOWS$NtUninstallKB956802$
2008-12-24 20:39:38 —-D—- C:WINDOWSMinidump
2008-12-24 20:26:38 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup Files
2008-12-24 20:26:10 —-D—- C:Documents and SettingsSatelliteApplication DataWinRAR
2008-12-24 20:25:43 —-D—- C:Program FilesWinRAR
2008-12-24 18:41:39 —-A—- C:WINDOWSsystem32CbEvtSvc.exe
2008-12-24 16:34:38 —-D—- C:Program FileseMule

======List of files/folders modified in the last 1 months======

2008-12-27 15:59:39 —-D—- C:WINDOWSTemp
2008-12-27 15:57:57 —-A—- C:WINDOWSSchedLgU.Txt
2008-12-27 13:57:47 —-D—- C:WINDOWS
2008-12-26 18:18:13 —-A—- C:WINDOWSNeroDigital.ini
2008-12-26 12:31:54 —-D—- C:WINDOWSsystem32Macromed
2008-12-26 00:01:19 —-RD—- C:Program Files
2008-12-25 23:32:47 —-SD—- C:WINDOWSDownloaded Program Files
2008-12-25 23:32:46 —-HD—- C:WINDOWSinf
2008-12-25 23:32:44 —-D—- C:WINDOWSsystem32CatRoot2
2008-12-25 20:13:10 —-D—- C:WINDOWSsystem32drivers
2008-12-25 20:12:56 —-D—- C:WINDOWSsystem32
2008-12-25 20:12:51 —-D—- C:Program FilesInternet Explorer
2008-12-25 11:13:48 —-SHD—- C:WINDOWSInstaller
2008-12-25 10:45:34 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2008-12-25 10:45:33 —-D—- C:WINDOWSWinSxS
2008-12-25 09:14:37 —-D—- C:WINDOWSPrefetch
2008-12-25 02:48:07 —-D—- C:WINDOWSsystem32CatRoot_bak
2008-12-25 02:48:07 —-D—- C:WINDOWSsystem32CatRoot
2008-12-24 23:02:25 —-SH—- C:boot.ini
2008-12-24 23:02:25 —-A—- C:WINDOWSwin.ini
2008-12-24 23:02:25 —-A—- C:WINDOWSsystem.ini
2008-12-24 22:22:46 —-D—- C:Documents and Settings
2008-12-24 22:07:00 —-RSHDC—- C:WINDOWSsystem32dllcache
2008-12-24 22:06:19 —-HD—- C:WINDOWS$hf_mig$
2008-12-24 22:05:00 —-D—- C:WINDOWSDebug
2008-12-24 21:28:32 —-D—- C:WINDOWSsystem32NtmsData
2008-12-24 21:24:02 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2008-12-24 19:35:01 —-D—- C:WINDOWSHelp
2008-12-24 18:41:21 —-D—- C:Program FilesOutlook Express
2008-12-24 18:41:03 —-D—- C:Documents and SettingsSatelliteApplication DataAdobe
2008-12-24 14:40:28 —-SD—- C:Documents and SettingsSatelliteApplication DataMicrosoft
2008-12-23 09:43:58 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2008-12-12 19:33:23 —-A—- C:WINDOWSsystem32mshtml.dll
2008-12-09 15:24:38 —-A—- C:WINDOWSsystem32MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Intel Processor Driver; C:WINDOWSsystem32DRIVERSintelppm.sys [2004-08-03 36096]
R1 Tosrfcom;Bluetooth RFCOMM; C:WINDOWSSystem32Driverstosrfcom.sys [2005-08-01 64896]
R3 AgereSoftModem;TOSHIBA V92 Software Modem; C:WINDOWSsystem32DRIVERSAGRSM.sys [2006-11-28 1161888]
R3 Arp1394;1394 ARP Client Protocol; C:WINDOWSsystem32DRIVERSarp1394.sys [2004-08-04 60800]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:WINDOWSsystem32DRIVERSCmBatt.sys [2004-08-04 14080]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-01-07 138752]
R3 hidusb;Microsoft HID Class Driver; C:WINDOWSsystem32DRIVERShidusb.sys [2001-08-23 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2007-07-18 4547584]
R3 mouhid;Mouse HID Driver; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-08-23 12160]
R3 NETw4x32;Intel(R) Wireless WiFi Link Adapter Driver for Windows XP 32 Bit; C:WINDOWSsystem32DRIVERSNETw4x32.sys [2007-04-30 2206976]
R3 NIC1394;1394 Net Driver; C:WINDOWSsystem32DRIVERSnic1394.sys [2004-08-04 61824]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2007-06-28 6807328]
R3 sdbus;sdbus; C:WINDOWSsystem32DRIVERSsdbus.sys [2004-08-03 67584]
R3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2007-07-25 209312]
R3 tifm21;tifm21; C:WINDOWSsystem32driverstifm21.sys [2007-01-24 290304]
R3 tosporte;Bluetooth COM Port; C:WINDOWSsystem32DRIVERStosporte.sys [2006-10-10 41600]
R3 tosrfbd;Bluetooth RFBUS; C:WINDOWSsystem32DRIVERStosrfbd.sys [2007-04-24 113920]
R3 tosrfbnp;Bluetooth RFBNEP; C:WINDOWSSystem32Driverstosrfbnp.sys [2006-11-20 36480]
R3 tosrfec;Bluetooth ACPI; C:WINDOWSsystem32DRIVERStosrfec.sys [2006-10-23 9216]
R3 Tosrfhid;Bluetooth RFHID; C:WINDOWSsystem32DRIVERSTosrfhid.sys [2007-03-01 73728]
R3 tosrfusb;Bluetooth USB Controller; C:WINDOWSsystem32DRIVERStosrfusb.sys [2007-04-24 41856]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-03 31616]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-03 26624]
R3 usbhub;USB2 Enabled Hub; C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-03 57600]
R3 USBSTOR;USB Mass Storage Driver; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:WINDOWSsystem32DRIVERSusbuhci.sys [2004-08-03 20480]
R3 usbvideo;USB Video Device (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2004-08-04 78464]
S3 CCDECODE;Closed Caption Decoder; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2004-08-04 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:WINDOWSsystem32driversMSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:WINDOWSsystem32DRIVERSNdisIP.sys [2004-08-04 10880]
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2006-07-21 82432]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2004-08-04 15360]
S3 tosrfnds;Bluetooth Personal Area Network; C:WINDOWSsystem32DRIVERStosrfnds.sys [2005-01-06 18612]
S3 TosRfSnd;Bluetooth Audio; C:WINDOWSsystem32driverstosrfsnd.sys [2007-01-22 53376]
S3 WSTCODEC;World Standard Teletext Codec; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2004-08-04 19328]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:WINDOWSsystem32agrsmsvc.exe [2006-10-05 9216]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2007-06-28 155716]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe [2007-02-25 125048]
R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S4 CbEvtSvc;CbEvtSvc; C:WINDOWSSystem32CbEvtSvc.exe [2008-12-24 61184]

EOF
27 декабря, 2008 в 3:00 пп #20601
Admin
Keymaster
- Темы:40
- Сообщений:5676
Запустите OTMoveIt3 и в большое поле ввода (заголовок этого поля выделено желтым цветом) скопируйте следующий текст.
```
:Processes

explorer.exe



:services

CbEvtSvc



:files

C:WINDOWSSystem32CbEvtSvc.exe



:Commands

[emptytemp]

[start explorer]

[Reboot]
```
Кликните по кнопке MoveIt!. В процессе работы возможна перезагрузка компьютера.
По-завершении работы программы должен будет показан лог, вставьте его в ваш ответ.
Кроме этого к вашему ответу приложите свежий RSIT лог.
27 декабря, 2008 в 3:16 пп #20602
silbermond
Participant
- Темы:3
- Сообщений:20
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
Service CbEvtSvc stopped successfully.
Service CbEvtSvc deleted successfully.
========== FILES ==========
C:WINDOWSSystem32CbEvtSvc.exe moved successfully.
========== COMMANDS ==========
User’s Temp folder emptied.
User’s Temporary Internet Files folder emptied.
User’s Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer — Version 1.0.7.2 log created on 12272008_171226

Files moved on Reboot…
File move failed. C:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be moved on reboot.
27 декабря, 2008 в 3:17 пп #20603
silbermond
Participant
- Темы:3
- Сообщений:20
Logfile of random’s system information tool 1.05 (written by random/random)
Run by Satellite at 2008-12-27 17:17:17
Microsoft Windows XP Professional Service Pack 2
System drive C: has 87 GB (76%) free of 114 GB
Total RAM: 1022 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:17:18, on 2008.12.27
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32agrsmsvc.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe
C:WINDOWSsystem32wscntfy.exe
C:WINDOWSsystem32WgaTray.exe
C:WINDOWSExplorer.EXE
C:WINDOWSnotepad.exe
C:WINDOWSsystem32wuauclt.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:WINDOWSRTHDCPL.EXE
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesltmohLtmoh.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtMng.exe
C:Program FilesSynapticsSynTPSynToshiba.exe
C:Program FilesToshibaBluetooth Toshiba StackTosA2dp.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHid.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHsp.exe
C:Program FilesToshibaBluetooth Toshiba StackTosAVRC.exe
C:Program FilesToshibaBluetooth Toshiba StacktosOBEX.exe
C:Program FilesToshibaBluetooth Toshiba StacktosBtProc.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Documents and SettingsSatelliteDesktopRSIT.exe
C:Program Filestrend microSatellite.exe

R1 — HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://go.divx.com/divx/divx6/new/en?rcv=1&dist=divxdotcom
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O2 — BHO: WormRadar.com IESiteBlocker.NavFilter — {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} — (no file)
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [syntpenh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 — HKLM..Run: [remotecontrol] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [msmsgs] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKCU..Run: [ltmoh] C:Program FilesltmohLtmoh.exe
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: Bluetooth Manager.lnk = ?
O8 — Extra context menu item: E&xport to Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O16 — DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) — http://go.microsoft.com/fwlink/?linkid=39204
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 — Service: Agere Modem Call Progress Audio (AgereModemAudio) — Agere Systems — C:WINDOWSsystem32agrsmsvc.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: TOSHIBA Bluetooth Service — TOSHIBA CORPORATION — C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe

—
End of file — 4530 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll [2008-05-30 1410344]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3ca2f312-6f6e-4b53-a66e-4e65e497c8c0}]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2007-06-28 8466432]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2007-06-28 81920]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-07-05 16380416]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«syntpenh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2007-07-25 888832]
«remotecontrol»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2003-10-31 32768]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-03 15360]
«msmsgs»=C:Program FilesMessengermsmsgs.exe [2004-10-13 1694208]
«ltmoh»=C:Program FilesltmohLtmoh.exe [2007-01-09 191552]

C:Documents and SettingsAll UsersStart MenuProgramsStartup
Bluetooth Manager.lnk — C:Program FilesToshibaBluetooth Toshiba StackTosBtMng.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
C:WINDOWSsystem32WgaLogon.dll [2008-09-05 241704]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2008-12-26 00:02:50 —-D—- C:Documents and SettingsSatelliteApplication Datavlc
2008-12-26 00:01:19 —-D—- C:Program FilesVideoLAN
2008-12-25 16:10:37 —-D—- C:_OTMoveIt
2008-12-25 11:34:16 —-D—- C:WINDOWSsystem32LogFiles
2008-12-25 11:04:18 —-D—- C:Documents and SettingsAll UsersApplication DataAvg8
2008-12-25 10:45:40 —-D—- C:Program FilesAVG
2008-12-25 00:01:54 —-D—- C:rsit
2008-12-25 00:01:54 —-D—- C:Program Filestrend micro
2008-12-25 00:00:59 —-RASHD—- C:autorun.inf
2008-12-24 22:43:40 —-D—- C:WINDOWSpss
2008-12-24 22:06:57 —-HDC—- C:WINDOWS$NtUninstallKB952069_WM9$
2008-12-24 22:06:45 —-HDC—- C:WINDOWS$NtUninstallKB956841$
2008-12-24 22:04:33 —-D—- C:Program FilesCCleaner
2008-12-24 20:56:58 —-HDC—- C:WINDOWS$NtUninstallKB956803$
2008-12-24 20:56:52 —-HDC—- C:WINDOWS$NtUninstallKB955839$
2008-12-24 20:56:44 —-HDC—- C:WINDOWS$NtUninstallKB956391$
2008-12-24 20:56:37 —-HDC—- C:WINDOWS$NtUninstallKB957095$
2008-12-24 20:56:19 —-HDC—- C:WINDOWS$NtUninstallKB958215$
2008-12-24 20:56:08 —-HDC—- C:WINDOWS$NtUninstallKB954211$
2008-12-24 20:55:59 —-HDC—- C:WINDOWS$NtUninstallKB960714$
2008-12-24 20:55:52 —-HDC—- C:WINDOWS$NtUninstallKB957097$
2008-12-24 20:55:46 —-HDC—- C:WINDOWS$NtUninstallKB938464$
2008-12-24 20:55:39 —-HDC—- C:WINDOWS$NtUninstallKB954600$
2008-12-24 20:55:33 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2008-12-24 20:55:25 —-HDC—- C:WINDOWS$NtUninstallKB955069$
2008-12-24 20:55:16 —-HDC—- C:WINDOWS$NtUninstallKB956802$
2008-12-24 20:39:38 —-D—- C:WINDOWSMinidump
2008-12-24 20:26:38 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup Files
2008-12-24 20:26:10 —-D—- C:Documents and SettingsSatelliteApplication DataWinRAR
2008-12-24 20:25:43 —-D—- C:Program FilesWinRAR
2008-12-24 16:34:38 —-D—- C:Program FileseMule

======List of files/folders modified in the last 1 months======

2008-12-27 17:15:47 —-D—- C:WINDOWSTemp
2008-12-27 17:14:10 —-D—- C:WINDOWS
2008-12-27 17:12:45 —-A—- C:WINDOWSSchedLgU.Txt
2008-12-27 17:12:26 —-D—- C:WINDOWSsystem32
2008-12-26 18:18:13 —-A—- C:WINDOWSNeroDigital.ini
2008-12-26 12:31:54 —-D—- C:WINDOWSsystem32Macromed
2008-12-26 00:01:19 —-RD—- C:Program Files
2008-12-25 23:32:47 —-SD—- C:WINDOWSDownloaded Program Files
2008-12-25 23:32:46 —-HD—- C:WINDOWSinf
2008-12-25 23:32:44 —-D—- C:WINDOWSsystem32CatRoot2
2008-12-25 20:13:10 —-D—- C:WINDOWSsystem32drivers
2008-12-25 20:12:51 —-D—- C:Program FilesInternet Explorer
2008-12-25 11:13:48 —-SHD—- C:WINDOWSInstaller
2008-12-25 10:45:34 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2008-12-25 10:45:33 —-D—- C:WINDOWSWinSxS
2008-12-25 09:14:37 —-D—- C:WINDOWSPrefetch
2008-12-25 02:48:07 —-D—- C:WINDOWSsystem32CatRoot_bak
2008-12-25 02:48:07 —-D—- C:WINDOWSsystem32CatRoot
2008-12-24 23:02:25 —-SH—- C:boot.ini
2008-12-24 23:02:25 —-A—- C:WINDOWSwin.ini
2008-12-24 23:02:25 —-A—- C:WINDOWSsystem.ini
2008-12-24 22:22:46 —-D—- C:Documents and Settings
2008-12-24 22:07:00 —-RSHDC—- C:WINDOWSsystem32dllcache
2008-12-24 22:06:19 —-HD—- C:WINDOWS$hf_mig$
2008-12-24 22:05:00 —-D—- C:WINDOWSDebug
2008-12-24 21:28:32 —-D—- C:WINDOWSsystem32NtmsData
2008-12-24 21:24:02 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2008-12-24 19:35:01 —-D—- C:WINDOWSHelp
2008-12-24 18:41:21 —-D—- C:Program FilesOutlook Express
2008-12-24 18:41:03 —-D—- C:Documents and SettingsSatelliteApplication DataAdobe
2008-12-24 14:40:28 —-SD—- C:Documents and SettingsSatelliteApplication DataMicrosoft
2008-12-23 09:43:58 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2008-12-12 19:33:23 —-A—- C:WINDOWSsystem32mshtml.dll
2008-12-09 15:24:38 —-A—- C:WINDOWSsystem32MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Intel Processor Driver; C:WINDOWSsystem32DRIVERSintelppm.sys [2004-08-03 36096]
R1 Tosrfcom;Bluetooth RFCOMM; C:WINDOWSSystem32Driverstosrfcom.sys [2005-08-01 64896]
R3 AgereSoftModem;TOSHIBA V92 Software Modem; C:WINDOWSsystem32DRIVERSAGRSM.sys [2006-11-28 1161888]
R3 Arp1394;1394 ARP Client Protocol; C:WINDOWSsystem32DRIVERSarp1394.sys [2004-08-04 60800]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:WINDOWSsystem32DRIVERSCmBatt.sys [2004-08-04 14080]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-01-07 138752]
R3 hidusb;Microsoft HID Class Driver; C:WINDOWSsystem32DRIVERShidusb.sys [2001-08-23 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2007-07-18 4547584]
R3 mouhid;Mouse HID Driver; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-08-23 12160]
R3 NETw4x32;Intel(R) Wireless WiFi Link Adapter Driver for Windows XP 32 Bit; C:WINDOWSsystem32DRIVERSNETw4x32.sys [2007-04-30 2206976]
R3 NIC1394;1394 Net Driver; C:WINDOWSsystem32DRIVERSnic1394.sys [2004-08-04 61824]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2007-06-28 6807328]
R3 sdbus;sdbus; C:WINDOWSsystem32DRIVERSsdbus.sys [2004-08-03 67584]
R3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2007-07-25 209312]
R3 tifm21;tifm21; C:WINDOWSsystem32driverstifm21.sys [2007-01-24 290304]
R3 tosporte;Bluetooth COM Port; C:WINDOWSsystem32DRIVERStosporte.sys [2006-10-10 41600]
R3 tosrfbd;Bluetooth RFBUS; C:WINDOWSsystem32DRIVERStosrfbd.sys [2007-04-24 113920]
R3 tosrfbnp;Bluetooth RFBNEP; C:WINDOWSSystem32Driverstosrfbnp.sys [2006-11-20 36480]
R3 tosrfec;Bluetooth ACPI; C:WINDOWSsystem32DRIVERStosrfec.sys [2006-10-23 9216]
R3 Tosrfhid;Bluetooth RFHID; C:WINDOWSsystem32DRIVERSTosrfhid.sys [2007-03-01 73728]
R3 tosrfusb;Bluetooth USB Controller; C:WINDOWSsystem32DRIVERStosrfusb.sys [2007-04-24 41856]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-03 31616]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-03 26624]
R3 usbhub;USB2 Enabled Hub; C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-03 57600]
R3 USBSTOR;USB Mass Storage Driver; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:WINDOWSsystem32DRIVERSusbuhci.sys [2004-08-03 20480]
R3 usbvideo;USB Video Device (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2004-08-04 78464]
S3 CCDECODE;Closed Caption Decoder; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2004-08-04 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:WINDOWSsystem32driversMSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:WINDOWSsystem32DRIVERSNdisIP.sys [2004-08-04 10880]
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2006-07-21 82432]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2004-08-04 15360]
S3 tosrfnds;Bluetooth Personal Area Network; C:WINDOWSsystem32DRIVERStosrfnds.sys [2005-01-06 18612]
S3 TosRfSnd;Bluetooth Audio; C:WINDOWSsystem32driverstosrfsnd.sys [2007-01-22 53376]
S3 WSTCODEC;World Standard Teletext Codec; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2004-08-04 19328]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:WINDOWSsystem32agrsmsvc.exe [2006-10-05 9216]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2007-06-28 155716]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe [2007-02-25 125048]
R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]

EOF
27 декабря, 2008 в 3:22 пп #20604
Admin
Keymaster
- Темы:40
- Сообщений:5676
Всё чисто.
Как дела с компьютером ?
27 декабря, 2008 в 3:30 пп #20605
silbermond
Participant
- Темы:3
- Сообщений:20
Пока вроде ничего не выбрасывает… тьфу-тьфу-тьфу…
Большое человеческое спасибо за помощь!
28 декабря, 2008 в 4:26 пп #20606
Admin
Keymaster
- Темы:40
- Сообщений:5676
Прекрасно 🙂
Несколько завершающих действий.

Запустите программу OTMoveIT3. Кликните по кнопке CleanUp. Если появится запрос на перезагрузку компьютера, то кликните Да/Yes.
Удалите HijackThis, RSIT и другие скачанные вами сканеры и небольшие утилиты, а так же все файлы и каталоги который были созданы в процессе лечения компьютера.

Установите программу Spybot Search and Destroy, это довольно неплохая дополнительная защита.

Удалите старые точки восстановления, так как в них возможно нахождения инфицированных файлов, троянов и других вредоносных программ. Для этого кликните по иконке Мой компьютер, выберите пункт Свойства. В открывшемся окне выберите вкладку Восстановление системы. Поставьте галочку напротив пункта Отключить восстановление системы на всех дисках. Кликните по кнопке Применить. Подтвердите свои действия кликнув по кнопке OK в открывшемся диалоге. Закройте окно Свойства системы, кликнув по кнопке OK.

После загрузки компьютера выполните действия описанные выше, только в этот раз снимите галочку.

Создайте новую точку восстановления. Это поможет вам в случае необходимости загрузить текущую конфигурацию Windows и быстро излечиться от спайваре/вируса. Для этого кликните по кнопке Пуск, далее выберите пункт Стандартные, в нём Служебные и запустите программу Восстановление системы. В открывшемся окне выберите задачу Создать точку восстановления и нажмите кнопку Далее и следуйте указаниям.

Не забывайте обновлять Windows, ваши программы и особенно ваш антивирус.

Всего доброго!
Автор

Сообщения

Просмотр 7 сообщений - с 16 по 22 (из 22 всего)

← 1 2

Для ответа в этой теме необходимо авторизоваться.

Баннер вымогающий деньги???

Добро пожаловать

Поиск

Последние темы

СПАЙВАРЕ РУ

Нужна помощь?

Ссылки