• Инструкции
    • Как использовать
      • Программы
    • Как удалить
      • Шпионское и рекламное ПО (adware и spyware)
      • Поддельное антиспайваре
      • Руткиты
      • Трояны
      • Кейлоггеры
  • Скачать программы
  • Вопросы и Ответы
  • Форумы

SPYWARE-RU.COM
Меню
  • Инструкции
    • Как использовать
      • Программы
    • Как удалить
      • Шпионское и рекламное ПО (adware и spyware)
      • Поддельное антиспайваре
      • Руткиты
      • Трояны
      • Кейлоггеры
  • Скачать программы
  • Вопросы и Ответы
  • Форумы
В начало › Перестал обновляться Нод32
Adguard
 

Перестал обновляться Нод32

Удаление вирусов и троянов. Защита компьютера. › Помощь в удалении вирусов, троянов, рекламы и других зловредов › Перестал обновляться Нод32

  • This topic has 5 ответов, 2 участника, and was last updated 14 years, 7 months назад by Helper.
Просмотр 6 сообщений - с 1 по 6 (из 6 всего)
  • Автор
    Сообщения
  • 18 июня, 2010 в 6:13 дп #18371
    88
    Participant
    • Темы:7
    • Сообщений:24
    • ☆

    Перестал обновляться лицензионный Нод32. Пишет произошла ошибка при загрузке файлов обновления. что это? Вирус? Как бороться?

    18 июня, 2010 в 7:35 дп #29701
    88
    Participant
    • Темы:7
    • Сообщений:24
    • ☆

    Сделала, как рекомендуют. Вот результат.

    Logfile of random’s system information tool 1.06 (written by random/random)
    Run by 1 at 2010-06-18 11:33:18
    Microsoft Windows XP Professional Service Pack 3
    System drive C: has 20 GB (66%) free of 30 GB
    Total RAM: 383 MB (31% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:33:31, on 18.06.2010
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:WINDOWSSystem32smss.exe
    C:WINDOWSsystem32winlogon.exe
    C:WINDOWSsystem32services.exe
    C:WINDOWSsystem32lsass.exe
    C:WINDOWSsystem32svchost.exe
    C:WINDOWSSystem32svchost.exe
    C:WINDOWSExplorer.EXE
    C:WINDOWSsystem32spoolsv.exe
    C:WINDOWSRTHDCPL.EXE
    C:Program FilesCyberLinkPowerDVDPDVDServ.exe
    C:Program FilesHPHP Software UpdateHPWuSchd2.exe
    C:Program FilesESETESET NOD32 Antivirusegui.exe
    C:Program FilesCommon FilesNikonMonitorNkMonitor.exe
    C:WINDOWSsystem32ctfmon.exe
    C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
    C:Program FilesHPDigital Imagingbinhpqtra08.exe
    C:WINDOWSsystem32sistray.exe
    C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe
    C:Program FilesESETESET NOD32 Antivirusekrn.exe
    C:WINDOWSsystem32svchost.exe
    C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
    C:WINDOWSSystem32svchost.exe
    C:WINDOWSSystem32svchost.exe
    C:WINDOWSsystem32svchost.exe
    C:WINDOWSsystem32wscntfy.exe
    C:Program FilesHPDigital ImagingbinhpqSTE08.exe
    C:Program FilesOperaopera.exe
    D:Program FilesRSIT.exe
    C:Program Filestrend micro1.exe

    R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40316
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
    F2 — REG:system.ini: UserInit=C:WINDOWSSYSTEM32Userinit.exe,\?globalrootsystemrootsystem328rCVJ2I.exe,\?globalrootsystemrootsystem32XdssLB6.exe,\?globalrootsystemrootsystem32G4gDwDl.exe,\?globalrootsystemrootsystem32WiO5mkm.exe,
    O2 — BHO: HP Print Enhancer — {0347C33E-8762-4905-BF09-768834316C61} — C:Program FilesHPSmart Web Printinghpswp_printenhancer.dll
    O2 — BHO: HP Print Clips — {053F9267-DC04-4294-A72C-58F732D338C0} — C:Program FilesHPSmart Web Printinghpswp_framework.dll
    O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
    O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
    O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.2.4204.1700swg.dll
    O2 — BHO: Google Dictionary Compression sdch — {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_B7C5AC242193BB3E.dll
    O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
    O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
    O4 — HKLM..Run: [SkyTel] SkyTel.EXE
    O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
    O4 — HKLM..Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
    O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
    O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
    O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
    O4 — HKLM..Run: [egui] «C:Program FilesESETESET NOD32 Antivirusegui.exe» /hide /waitservice
    O4 — HKLM..Run: [ArcSoft Connection Service] C:Program FilesCommon FilesArcSoftConnection ServiceBinACDaemon.exe
    O4 — HKLM..Run: [Nikon Transfer Monitor] C:Program FilesCommon FilesNikonMonitorNkMonitor.exe
    O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
    O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
    O4 — HKCU..Run: [swg] «C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe»
    O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
    O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
    O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
    O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
    O4 — Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exe
    O4 — Global Startup: Utility Tray.lnk = C:WINDOWSsystem32sistray.exe
    O4 — Global Startup: Ускоренный запуск Adobe Reader.lnk = C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
    O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
    O8 — Extra context menu item: Google Sidewiki… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
    O9 — Extra button: Альбом клипов HP — {58ECB495-38F0-49cb-A538-10282ABF65E7} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
    O9 — Extra button: Расширенный выбор HP — {700259D7-1666-479a-93B1-3250410481E8} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
    O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
    O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
    O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
    O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
    O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
    O17 — HKLMSystemCCSServicesTcpip..{9929AFD7-A871-4379-BB43-3B69CF54309E}: NameServer = 78.36.171.200 212.48.193.36
    O23 — Service: ArcSoft Connect Daemon (ACDaemon) — ArcSoft Inc. — C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe
    O23 — Service: Eset HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe
    O23 — Service: Eset Service (ekrn) — ESET — C:Program FilesESETESET NOD32 Antivirusekrn.exe
    O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
    O23 — Service: Служба Google Update (gupdate) (gupdate) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
    O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
    O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
    O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
    O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
    O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
    O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
    O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
    O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
    O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
    O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

    —
    End of file — 8089 bytes

    ======Scheduled tasks folder======

    C:WINDOWStasksGoogleUpdateTaskMachineCore.job
    C:WINDOWStasksGoogleUpdateTaskMachineUA.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{0347C33E-8762-4905-BF09-768834316C61}]
    HP Print Enhancer — C:Program FilesHPSmart Web Printinghpswp_printenhancer.dll [2007-03-02 1298024]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{053F9267-DC04-4294-A72C-58F732D338C0}]
    HP Print Clips — C:Program FilesHPSmart Web Printinghpswp_framework.dll [2007-03-02 177768]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2005-09-24 63136]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
    Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-06-07 256112]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.2.4204.1700swg.dll [2010-06-07 761840]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
    Google Dictionary Compression sdch — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_B7C5AC242193BB3E.dll [2010-06-07 458736]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
    {2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-06-07 256112]

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
    «RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-09-19 16844800]
    «SkyTel»=C:WINDOWSSkyTel.EXE [2007-08-03 1826816]
    «Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
    «SiSPower»=SiSPower.dll,ModeAgent []
    «NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
    «RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2005-01-12 32768]
    «HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2007-03-11 49152]
    «egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe [2009-10-07 1461080]
    «ArcSoft Connection Service»=C:Program FilesCommon FilesArcSoftConnection ServiceBinACDaemon.exe [2010-03-18 207360]
    «Nikon Transfer Monitor»=C:Program FilesCommon FilesNikonMonitorNkMonitor.exe [2009-09-15 479232]
    «KernelFaultCheck»=C:WINDOWSsystem32dumprep 0 -k []

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
    «CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-06-09 15360]
    «swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2010-06-07 39408]

    C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
    HP Digital Imaging Monitor.lnk — C:Program FilesHPDigital Imagingbinhpqtra08.exe
    Utility Tray.lnk — C:WINDOWSsystem32sistray.exe
    Ускоренный запуск Adobe Reader.lnk — C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
    C:WINDOWSsystem32WgaLogon.dll [2009-03-10 265096]

    [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
    «dontdisplaylastusername»=0
    «legalnoticecaption»=
    «legalnoticetext»=
    «shutdownwithoutlogon»=1
    «undockwithoutlogon»=1

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
    «NoDriveTypeAutoRun»=145

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
    «NoDriveTypeAutoRun»=
    «HonorAutoRunSetting»=

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
    «%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
    «%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
    «%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
    «%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

    ======List of files/folders created in the last 1 months======

    2010-06-18 11:29:56 —-A—- C:Program FilesCommon Fileskeylog.txt
    2010-06-17 05:39:28 —-A—- C:WINDOWSsystem324VEq2VM.exe
    2010-06-17 05:38:33 —-A—- C:WINDOWSsystem32WiO5mkm.exe
    2010-06-17 05:38:06 —-A—- C:WINDOWSsystem32G4gDwDl.exe
    2010-06-16 00:05:15 —-A—- C:WINDOWSsystem32apexchanger.exe
    2010-06-16 00:03:15 —-D—- C:Program FilesApex Video Converter Pro
    2010-06-16 00:03:15 —-D—- C:Apex
    2010-06-15 23:19:45 —-D—- C:Program FilesCommon FilesAVSMedia
    2010-06-15 23:19:24 —-A—- C:WINDOWSsystem32msxml3a.dll
    2010-06-15 21:50:17 —-D—- C:Program Filesmp3DirectCut
    2010-06-11 21:35:23 —-D—- C:Documents and Settings1Application DataXilisoft Corporation
    2010-06-11 03:03:26 —-HDC—- C:WINDOWS$NtUninstallKB980218$
    2010-06-11 03:03:14 —-HDC—- C:WINDOWS$NtUninstallKB980195$
    2010-06-11 03:03:08 —-HDC—- C:WINDOWS$NtUninstallKB979559$
    2010-06-11 03:01:07 —-HDC—- C:WINDOWS$NtUninstallKB978695_WM9$
    2010-06-11 03:00:56 —-HDC—- C:WINDOWS$NtUninstallKB979482$
    2010-06-11 03:00:50 —-HDC—- C:WINDOWS$NtUninstallKB975562$
    2010-06-11 03:00:36 —-D—- C:WINDOWSie8updates
    2010-06-10 21:27:16 —-D—- C:Movavi files
    2010-06-10 20:37:42 —-D—- C:Program FilesMovavi Видео Конвертер 8
    2010-06-10 12:17:09 —-D—- C:Documents and Settings1Application DataMOVAVI
    2010-06-09 06:22:05 —-HDC—- C:WINDOWS$NtUninstallKB970430$
    2010-06-09 06:21:38 —-HDC—- C:WINDOWS$NtUninstallKB971737$
    2010-06-09 05:37:34 —-A—- C:WINDOWSsystem32MRT.exe
    2010-06-09 05:36:18 —-D—- C:WINDOWSWBEM
    2010-06-09 05:33:27 —-HDC—- C:WINDOWSie8
    2010-06-07 14:46:32 —-D—- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
    2010-06-07 05:31:38 —-HDC—- C:WINDOWS$NtUninstallKB952954$
    2010-06-07 05:31:31 —-HDC—- C:WINDOWS$NtUninstallKB959426$
    2010-06-07 05:31:18 —-HDC—- C:WINDOWS$NtUninstallKB960859$
    2010-06-07 05:31:00 —-HDC—- C:WINDOWS$NtUninstallKB974318$
    2010-06-07 05:30:52 —-HDC—- C:WINDOWS$NtUninstallKB951978$
    2010-06-07 05:30:44 —-HDC—- C:WINDOWS$NtUninstallKB969059$
    2010-06-07 05:30:37 —-HDC—- C:WINDOWS$NtUninstallKB981349$
    2010-06-07 05:30:27 —-HDC—- C:WINDOWS$NtUninstallKB950974$
    2010-06-07 05:30:21 —-HDC—- C:WINDOWS$NtUninstallKB975713$
    2010-06-07 05:30:14 —-HDC—- C:WINDOWS$NtUninstallKB971657$
    2010-06-07 05:30:05 —-HDC—- C:WINDOWS$NtUninstallKB978338$
    2010-06-07 05:29:58 —-HDC—- C:WINDOWS$NtUninstallKB974112$
    2010-06-07 05:29:52 —-HDC—- C:WINDOWS$NtUninstallKB961501$
    2010-06-07 05:29:45 —-HDC—- C:WINDOWS$NtUninstallKB975025$
    2010-06-07 05:29:29 —-HDC—- C:WINDOWS$NtUninstallKB952004$
    2010-06-07 05:29:22 —-HDC—- C:WINDOWS$NtUninstallKB974571$
    2010-06-07 05:29:15 —-HDC—- C:WINDOWS$NtUninstallKB975560$
    2010-06-07 05:29:04 —-HDC—- C:WINDOWS$NtUninstallKB973507$
    2010-06-07 05:28:57 —-HDC—- C:WINDOWS$NtUninstallKB977816$
    2010-06-07 05:28:23 —-HDC—- C:WINDOWS$NtUninstallKB980182$
    2010-06-07 05:27:27 —-HDC—- C:WINDOWS$NtUninstallKB974392$
    2010-06-07 05:25:35 —-HDC—- C:WINDOWS$NtUninstallKB977914$
    2010-06-07 05:23:54 —-HDC—- C:WINDOWS$NtUninstallKB951748$
    2010-06-07 05:23:37 —-HDC—- C:WINDOWS$NtUninstallKB978542$
    2010-06-07 05:23:24 —-HDC—- C:WINDOWS$NtUninstallKB956802$
    2010-06-07 05:22:52 —-HDC—- C:WINDOWS$NtUninstallKB975467$
    2010-06-07 05:21:39 —-HDC—- C:WINDOWS$NtUninstallKB968389$
    2010-06-06 18:19:24 —-D—- C:Documents and SettingsAll UsersApplication DataGoogle
    2010-06-06 18:14:16 —-A—- C:WINDOWSavisplitter.ini
    2010-06-06 18:13:55 —-A—- C:WINDOWSsystem32yv12vfw.dll
    2010-06-06 18:13:40 —-A—- C:WINDOWSsystem32ff_vfw.dll.manifest
    2010-06-06 18:13:40 —-A—- C:WINDOWSsystem32ff_vfw.dll
    2010-06-06 18:13:31 —-D—- C:Program FilesK-Lite Codec Pack
    2010-06-06 17:23:28 —-HDC—- C:WINDOWS$NtUninstallKB978262$
    2010-06-06 17:23:11 —-HDC—- C:WINDOWS$NtUninstallKB951376-v2$
    2010-06-06 17:22:54 —-HDC—- C:WINDOWS$NtUninstallKB946648$
    2010-06-06 17:22:37 —-HDC—- C:WINDOWS$NtUninstallKB956803$
    2010-06-06 17:22:20 —-HDC—- C:WINDOWS$NtUninstallKB971468$
    2010-06-06 17:21:59 —-HDC—- C:WINDOWS$NtUninstallKB979683$
    2010-06-06 17:21:42 —-HDC—- C:WINDOWS$NtUninstallKB958869$
    2010-06-06 17:21:25 —-HDC—- C:WINDOWS$NtUninstallKB980232$
    2010-06-06 17:21:04 —-HDC—- C:WINDOWS$NtUninstallKB955759$
    2010-06-06 17:20:46 —-HDC—- C:WINDOWS$NtUninstallKB968816_WM9$
    2010-06-06 17:20:30 —-HDC—- C:WINDOWS$NtUninstallKB978037$
    2010-06-06 17:20:13 —-HDC—- C:WINDOWS$NtUninstallKB954155_WM9$
    2010-06-06 17:19:57 —-HDC—- C:WINDOWS$NtUninstallKB960225$
    2010-06-06 17:19:28 —-HDC—- C:WINDOWS$NtUninstallKB956572$
    2010-06-06 17:19:08 —-HDC—- C:WINDOWS$NtUninstallKB956844$
    2010-06-06 17:18:48 —-HDC—- C:WINDOWS$NtUninstallKB973904$
    2010-06-06 17:18:25 —-HDC—- C:WINDOWS$NtUninstallKB967715$
    2010-06-06 17:18:06 —-HDC—- C:WINDOWS$NtUninstallKB970238$
    2010-06-06 17:17:45 —-HDC—- C:WINDOWS$NtUninstallKB978706$
    2010-06-06 17:17:23 —-HDC—- C:WINDOWS$NtUninstallKB960803$
    2010-06-06 17:17:06 —-HDC—- C:WINDOWS$NtUninstallKB973815$
    2010-06-06 17:16:42 —-HDC—- C:WINDOWS$NtUninstallKB969947$
    2010-06-06 16:22:49 —-D—- C:FlashVideos
    2010-06-06 08:15:39 —-HDC—- C:WINDOWS$NtUninstallKB972270$
    2010-06-06 08:15:31 —-HDC—- C:WINDOWS$NtUninstallKB956744$
    2010-06-06 08:15:20 —-HDC—- C:WINDOWS$NtUninstallKB973869$
    2010-06-06 08:15:07 —-HDC—- C:WINDOWS$NtUninstallKB941569$
    2010-06-06 08:14:28 —-HDC—- C:WINDOWS$NtUninstallKB973687$
    2010-06-06 08:14:19 —-HDC—- C:WINDOWS$NtUninstallKB950762$
    2010-06-06 08:14:09 —-HDC—- C:WINDOWS$NtUninstallKB981793$
    2010-06-06 08:13:59 —-HDC—- C:WINDOWS$NtUninstallKB978601$
    2010-06-06 08:13:52 —-HDC—- C:WINDOWS$NtUninstallKB952287$
    2010-06-06 08:13:36 —-HDC—- C:WINDOWS$NtUninstallKB973540_WM9$
    2010-06-06 08:13:30 —-HDC—- C:WINDOWS$NtUninstallKB950760$
    2010-06-06 08:13:22 —-HDC—- C:WINDOWS$NtUninstallKB952069_WM9$
    2010-06-06 08:13:13 —-HDC—- C:WINDOWS$NtUninstallKB979309$
    2010-06-06 08:13:05 —-HDC—- C:WINDOWS$NtUninstallKB958644$
    2010-06-06 08:12:23 —-HDC—- C:WINDOWS$NtUninstallKB955069$
    2010-06-06 08:11:51 —-D—- C:Program FilesMSXML 4.0
    2010-06-06 08:11:31 —-HDC—- C:WINDOWS$NtUninstallKB923561$
    2010-06-06 08:10:52 —-HDC—- C:WINDOWS$NtUninstallKB971961$
    2010-06-05 08:29:12 —-HDC—- C:WINDOWS$NtUninstallKB975561$
    2010-06-04 23:32:50 —-D—- C:WINDOWSsystem32PreInstall
    2010-06-04 23:32:48 —-N—- C:WINDOWSsystem32spmsg.dll
    2010-06-04 23:32:47 —-A—- C:WINDOWSsystem32spupdsvc.exe
    2010-06-04 23:32:45 —-HDC—- C:WINDOWS$NtUninstallKB898461$
    2010-06-04 23:32:45 —-HD—- C:WINDOWS$hf_mig$
    2010-06-04 22:08:19 —-D—- C:WINDOWSMinidump
    2010-06-03 06:38:42 —-D—- C:WINDOWSsystem32SoftwareDistribution
    2010-06-02 09:08:50 —-D—- C:Documents and Settings1Application DataMalwarebytes
    2010-06-02 09:08:31 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
    2010-05-31 01:31:49 —-D—- C:Program Filestrend micro
    2010-05-31 01:31:47 —-D—- C:rsit
    2010-05-31 00:45:58 —-D—- C:WINDOWSsystem32appmgmt
    2010-05-30 22:15:10 —-A—- C:SAFEBOOT_REPAIR.TXT
    2010-05-30 17:10:58 —-D—- C:Documents and Settings1Application DataHelp
    2010-05-27 23:55:59 —-D—- C:Program FilesQuickTime
    2010-05-27 22:58:36 —-D—- C:32788R22FWJFW(2)
    2010-05-27 22:35:36 —-D—- C:WINDOWSpss
    2010-05-26 21:00:24 —-D—- C:Program FilesCommon FilesSysAware Soft
    2010-05-23 23:05:18 —-A—- C:WINDOWSViewNX.INI
    2010-05-23 22:52:06 —-D—- C:Documents and Settings1Application DataApple Computer
    2010-05-23 22:46:32 —-D—- C:Documents and Settings1Application DataNikon
    2010-05-23 22:41:49 —-D—- C:Documents and SettingsAll UsersApplication DataSync Schema
    2010-05-23 22:40:45 —-D—- C:Program FilesCommon Filesmuvee Technologies
    2010-05-23 22:40:32 —-D—- C:Program FilesCommon FilesNikon
    2010-05-23 22:40:32 —-D—- C:Documents and SettingsAll UsersApplication DataNikon
    2010-05-23 22:40:24 —-D—- C:Program FilesNikon
    2010-05-23 22:38:54 —-D—- C:Documents and SettingsAll UsersApplication DataUltima_T15
    2010-05-23 22:38:54 —-D—- C:Documents and SettingsAll UsersApplication DataSpeech Enhancer
    2010-05-23 22:38:54 —-D—- C:Documents and SettingsAll UsersApplication DataEnterNHelp
    2010-05-23 22:34:11 —-HD—- C:Documents and SettingsAll UsersApplication DataArcSoft
    2010-05-23 22:32:59 —-D—- C:Program FilesCommon FilesArcSoft
    2010-05-23 22:32:59 —-D—- C:Program FilesArcSoft
    2010-05-23 22:29:44 —-D—- C:Documents and Settings1Application DataArcSoft
    2010-05-23 13:45:26 —-D—- C:Program FilesVirtualDub
    2010-05-22 07:17:22 —-D—- C:FlashAudio
    2010-05-22 02:09:52 —-A—- C:WINDOWSsystem32xvidvfw.dll
    2010-05-22 02:09:50 —-A—- C:WINDOWSsystem32xvidcore.dll
    2010-05-21 19:30:43 —-A—- C:WINDOWSsystem32ptpusb.dll
    2010-05-21 19:30:41 —-A—- C:WINDOWSsystem32ptpusd.dll

    ======List of files/folders modified in the last 1 months======

    2010-06-18 11:29:56 —-RD—- C:Program FilesCommon Files
    2010-06-18 11:28:22 —-D—- C:WINDOWSTemp
    2010-06-18 11:26:50 —-D—- C:WINDOWSsystem32drivers
    2010-06-18 11:26:50 —-D—- C:WINDOWSPrefetch
    2010-06-18 11:26:10 —-A—- C:WINDOWSSchedLgU.Txt
    2010-06-18 11:12:00 —-D—- C:WINDOWSsystem32CatRoot2
    2010-06-18 10:50:58 —-D—- C:WINDOWSsystem32config
    2010-06-18 10:50:47 —-D—- C:WINDOWSsystem32wbem
    2010-06-18 10:50:46 —-D—- C:WINDOWSRegistration
    2010-06-18 10:50:35 —-D—- C:WINDOWS
    2010-06-18 10:50:31 —-HD—- C:Config.Msi
    2010-06-18 10:50:30 —-SHD—- C:WINDOWSInstaller
    2010-06-18 09:27:57 —-D—- C:WINDOWSsystem32
    2010-06-17 22:47:49 —-D—- C:Program FilesMozilla Firefox
    2010-06-17 15:19:41 —-SHD—- C:System Volume Information
    2010-06-17 15:19:41 —-D—- C:WINDOWSsystem32Restore
    2010-06-16 22:27:02 —-A—- C:WINDOWSNeroDigital.ini
    2010-06-16 00:03:15 —-RD—- C:Program Files
    2010-06-14 22:37:40 —-D—- C:Program Filestotalcmd
    2010-06-14 22:32:15 —-A—- C:WINDOWSntbtlog.txt
    2010-06-11 21:58:01 —-D—- C:Program FilesXilisoft
    2010-06-11 21:32:39 —-A—- C:WINDOWSIE4 Error Log.txt
    2010-06-11 03:03:29 —-HD—- C:WINDOWSinf
    2010-06-11 03:03:28 —-RSHDC—- C:WINDOWSsystem32dllcache
    2010-06-11 03:03:23 —-A—- C:WINDOWSimsins.BAK
    2010-06-11 03:02:52 —-D—- C:Program FilesInternet Explorer
    2010-06-10 23:45:21 —-SD—- C:Documents and Settings1Application DataMicrosoft
    2010-06-10 23:22:55 —-D—- C:Documents and SettingsAll UsersApplication Dataxml_param
    2010-06-09 16:02:23 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
    2010-06-09 06:05:14 —-D—- C:WINDOWSsystem32ru-ru
    2010-06-09 06:05:13 —-D—- C:WINDOWSHelp
    2010-06-09 05:37:35 —-D—- C:WINDOWSDebug
    2010-06-09 05:36:08 —-D—- C:WINDOWSMedia
    2010-06-07 17:34:17 —-D—- C:Program FilesGoogle
    2010-06-07 14:49:05 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
    2010-06-07 14:46:56 —-SD—- C:WINDOWSTasks
    2010-06-07 05:23:41 —-D—- C:Program FilesOutlook Express
    2010-06-06 17:45:12 —-D—- C:WINDOWSAppPatch
    2010-06-06 17:22:56 —-D—- C:Program FilesMessenger
    2010-06-06 17:21:42 —-D—- C:WINDOWSWinSxS
    2010-06-05 08:29:19 —-D—- C:Program FilesMovie Maker
    2010-06-03 06:38:59 —-D—- C:WINDOWSSoftwareDistribution
    2010-06-02 09:47:25 —-D—- C:WINDOWSime
    2010-05-30 22:26:33 —-D—- C:Documents and Settings
    2010-05-30 17:12:07 —-SH—- C:boot.ini
    2010-05-30 17:12:07 —-A—- C:WINDOWSwin.ini
    2010-05-30 17:12:07 —-A—- C:WINDOWSsystem.ini
    2010-05-30 10:41:14 —-D—- C:Documents and Settings1Application DataYandex
    2010-05-27 23:55:50 —-D—- C:Program FilesOpera
    2010-05-25 22:58:26 —-HD—- C:Program FilesInstallShield Installation Information
    2010-05-23 22:38:47 —-A—- C:WINDOWSsystem32ATL71.DLL
    2010-05-23 22:38:40 —-D—- C:Program FilesCommon FilesInstallShield
    2010-05-23 22:29:17 —-D—- C:Program FilesCommon FilesMicrosoft Shared
    2010-05-22 23:21:51 —-A—- C:WINDOWSsystem32ASPRTMM1.DLL

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 easdrv;easdrv; C:WINDOWSsystem32DRIVERSeasdrv.sys [2009-10-07 54184]
    R1 epfwtdir;epfwtdir; C:WINDOWSsystem32DRIVERSepfwtdir.sys [2009-10-07 35168]
    R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-06-09 40704]
    R1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-14 14720]
    R1 SiSkp;SiSkp; C:WINDOWSsystem32DRIVERSsrvkp.sys [2008-12-03 19072]
    R1 uzezmjy3;AVZ-RK Kernel Driver; ??C:WINDOWSsystem32Driversuzezmjy3.sys []
    R2 eamon;EAMON; C:WINDOWSsystem32DRIVERSeamon.sys [2009-10-07 40824]
    R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-06-09 144384]
    R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
    R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2007-03-08 49920]
    R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2007-03-08 16496]
    R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2007-03-08 21568]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2007-09-19 4617728]
    R3 MTsensor;ATK0100 ACPI UTILITY; C:WINDOWSsystem32DRIVERSATKACPI.sys [2007-08-24 5760]
    R3 SiS315;SiS315; C:WINDOWSsystem32DRIVERSsisgrp.sys [2008-12-03 324096]
    R3 SiSGbeXP;SiS191/SiS190 Ethernet Device NDIS 5.1 Driver; C:WINDOWSsystem32DRIVERSSiSGbeXP.sys [2006-12-20 41600]
    R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-14 32128]
    R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-06-09 30208]
    R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-06-09 59520]
    R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-06-09 17152]
    R3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
    R3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
    R3 WsAudio_DeviceS(1);WsAudio_DeviceS(1); C:WINDOWSsystem32driversWsAudio_DeviceS(1).sys [2009-12-04 25704]
    R3 WsAudio_DeviceS(2);WsAudio_DeviceS(2); C:WINDOWSsystem32driversWsAudio_DeviceS(2).sys [2009-12-04 25704]
    R3 WsAudio_DeviceS(3);WsAudio_DeviceS(3); C:WINDOWSsystem32driversWsAudio_DeviceS(3).sys [2009-12-04 25704]
    R3 WsAudio_DeviceS(4);WsAudio_DeviceS(4); C:WINDOWSsystem32driversWsAudio_DeviceS(4).sys [2009-12-04 25704]
    R3 WsAudio_DeviceS(5);WsAudio_DeviceS(5); C:WINDOWSsystem32driversWsAudio_DeviceS(5).sys [2009-12-04 25704]
    S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
    S3 utezmjy3;AVZ Kernel Driver; ??C:WINDOWSsystem32Driversutezmjy3.sys []
    S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 ACDaemon;ArcSoft Connect Daemon; C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe [2010-03-18 113152]
    R2 ekrn;Eset Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2009-10-07 472280]
    R2 hpqddsvc;Служба HP CUE DeviceDiscovery; C:WINDOWSsystem32svchost.exe [2008-06-09 14336]
    R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-20 322120]
    R2 Net Driver HPZ12;Net Driver HPZ12; C:WINDOWSSystem32svchost.exe [2008-06-09 14336]
    R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSSystem32svchost.exe [2008-06-09 14336]
    R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912]
    R3 hpqcxs08;hpqcxs08; C:WINDOWSsystem32svchost.exe [2008-06-09 14336]
    S2 gupdate;Служба Google Update (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-02-16 135664]
    S3 EhttpSrv;Eset HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2009-10-07 20680]
    S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2010-06-07 182768]
    S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-04 69632]
    S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]

    EOF

    18 июня, 2010 в 4:34 пп #29702
    Helper
    Participant
    • Темы:19
    • Сообщений:712
    • ☆☆☆☆☆

    Здравствуйте,добро пожаловать на форум!
    Запустите HijackThis, для этого кликните Пуск, Выполнить, введите 

    C:Program Filestrend micro1.exe

    и нажмите Enter.
    Откроется главное меню программы HijackThis.
    Кликните по кнопке Do a system scan only.
    Далее отметьте галочкой (слева) следующие строки, если они присутствуют:


    
F2 - REG:system.ini: UserInit=C:WINDOWSSYSTEM32Userinit.exe,\?globalrootsystemrootsystem328rCVJ2I.exe,\?globalrootsystemrootsystem32XdssLB6.exe,\?globalrootsystemrootsystem32G4gDwDl.exe,\?globalrootsystemrootsystem32WiO5mkm.exe,

    Закройте все запущенные программы (включая InternetExplorer) и окна Windows.
    Кликните по кнопке Fix checked и подтвердите свои действия выбрав YES.
    Перезагрузите компьютер.
    Скачайте OTM by OldTimer или с зеркала и сохраните на рабочий стол.
    Запустите OTM (в ОС Windows Vista необходимо запускать через правую кн. мыши от имени администратора)
    временно выключите антивирус, firewall и другое защитное программное обеспечение. Выделите и скопируйте текст ниже (Ctrl+C)


    
:Processes
    
explorer.exe
    

    
:Services
    

    
:Files
    
C:Program FilesCommon Fileskeylog.txt
    
C:WINDOWSsystem324VEq2VM.exe
    
C:WINDOWSsystem32WiO5mkm.exe
    
C:WINDOWSsystem32G4gDwDl.exe
    

    
:Reg
    

    
:Commands
    
[purity]
    
[emptytemp]
    
[start explorer]
    
[Reboot]

    В OTM под панелью «Paste Instructions for Items to be Moved» (под желтой панелью) вставьте скопированный текст и нажмите кнопку «MoveIt!».

    Компьютер перезагрузится.
    Прочитайте описание программы Malwarebytes Anti-malware (MBAM).
    Скачайте и выполните сканирование вашего компьютера. Удалите всё что будет найдено. В конце работы будет показан лог. Вставьте его в ваш ответ и приложите свежий RSIT лог.

    18 июня, 2010 в 8:10 пп #29703
    88
    Participant
    • Темы:7
    • Сообщений:24
    • ☆

    Malwarebytes’ Anti-Malware 1.46
    http://www.malwarebytes.org

    Версия базы данных: 4213

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 8.0.6001.18702

    19.06.2010 0:06:35
    mbam-log-2010-06-19 (00-06-35).txt

    Тип сканирования: Полное сканирование (A:|C:|D:|E:|)
    Просканированные объекты: 177909
    Времени прошло: 28 минут, 15 секунд

    Зараженные процессы в памяти: 0
    Зараженные модули в памяти: 0
    Зараженные ключи в реестре: 0
    Зараженные параметры в реестре: 204
    Объекты реестра заражены: 0
    Зараженные папки: 0
    Зараженные файлы: 0

    Зараженные процессы в памяти:
    (Вредоносных программ не обнаружено)

    Зараженные модули в памяти:
    (Вредоносных программ не обнаружено)

    Зараженные ключи в реестре:
    (Вредоносных программ не обнаружено)

    Зараженные параметры в реестре:
    HKEY_LOCAL_MACHINESOFTWAREMicrosoftoption_1 (Rootkit.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESOFTWAREMicrosoftoption_2 (Rootkit.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESOFTWAREMicrosoftoption_3 (Rootkit.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes128.111.48.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes128.130.56.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes128.130.60.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes139.91.222.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes141.202.248.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes149.101.225.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes150.70.93.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes155.35.248.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes162.40.10.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes165.160.15.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes166.70.98.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes174.120.184.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes174.120.185.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes174.120.186.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes174.133.38.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes18.85.2.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes188.40.74.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes188.93.8.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes192.150.94.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.0.6.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.1.193.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.110.109.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.17.85.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.193.194.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.24.237.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.66.251.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.69.114.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes193.71.68.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes194.0.200.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes194.109.142.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes194.112.106.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes194.206.126.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes194.33.180.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.137.160.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.146.235.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.2.240.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.210.42.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.55.72.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.64.225.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes195.70.37.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes198.6.49.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes199.203.243.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes203.160.188.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes204.14.90.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes205.178.145.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes205.227.136.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes206.204.52.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes207.44.154.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes207.44.254.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes207.46.18.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes207.46.20.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes207.46.232.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes207.66.0.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes208.43.44.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes208.43.71.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes208.79.250.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.124.55.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.157.69.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.160.22.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.216.46.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.51.167.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.62.112.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.62.68.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes209.87.209.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes212.47.219.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes212.67.88.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes212.72.62.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes212.8.79.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes213.133.34.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes213.171.218.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes213.198.89.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes213.220.100.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes213.31.172.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.10.192.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.12.145.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.239.122.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.246.90.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.49.88.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.49.94.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.55.183.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes216.99.133.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes217.106.234.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes217.16.16.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes217.170.21.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes217.174.103.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes38.113.1.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.14.249.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.146.210.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.146.66.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.189.194.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.213.110.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.67.184.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.75.163.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes62.75.216.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes63.85.36.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.128.133.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.13.134.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.202.189.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.246.4.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.41.142.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.41.151.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.66.190.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes64.78.182.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes65.175.38.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes65.55.184.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes65.55.240.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes66.223.50.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes66.249.17.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes66.77.70.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.134.208.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.15.103.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.15.231.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.19.34.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.192.135.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.225.206.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes67.227.172.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes68.177.102.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes69.162.79.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes69.18.148.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes69.20.104.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes69.57.142.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes69.93.226.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes70.84.211.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes72.232.246.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes72.3.254.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes72.32.125.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes72.32.149.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes72.32.70.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.125.77.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.208.158.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.208.20.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.50.0.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.52.233.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.53.201.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.53.70.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.54.130.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.54.139.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.54.46.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.55.40.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.55.74.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.86.125.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes74.86.232.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes75.125.185.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes75.125.189.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes75.125.212.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes75.125.29.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes75.125.43.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes75.125.82.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes78.108.86.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes78.137.164.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes78.47.87.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes79.125.5.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes80.153.193.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes80.190.130.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes80.190.154.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes80.237.132.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes80.86.107.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes81.176.66.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes81.176.67.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes81.177.31.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes81.24.35.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes82.117.238.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes82.151.107.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes82.165.103.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes82.98.86.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes83.102.130.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes83.202.175.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes83.222.23.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes83.222.31.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes83.223.117.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes84.40.30.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes85.12.57.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes85.17.210.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes85.214.106.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes85.255.19.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes85.31.222.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.106.242.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.106.254.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.230.79.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.238.48.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.242.72.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.242.74.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.242.75.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes87.242.79.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes88.221.119.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes89.108.66.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes89.111.176.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes89.202.149.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes89.202.157.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes90.156.159.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes90.183.101.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes91.121.97.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes91.199.212.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes91.209.196.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes92.123.155.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes92.53.106.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes93.184.71.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes93.191.13.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes94.23.206.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes94.236.0.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes95.140.225.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Quarantined and deleted successfully.

    Объекты реестра заражены:
    (Вредоносных программ не обнаружено)

    Зараженные папки:
    (Вредоносных программ не обнаружено)

    Зараженные файлы:
    (Вредоносных программ не обнаружено)

    18 июня, 2010 в 8:11 пп #29704
    88
    Participant
    • Темы:7
    • Сообщений:24
    • ☆

    И еще вот это.

    Logfile of random’s system information tool 1.06 (written by random/random)
    Run by 1 at 2010-06-19 00:08:33
    Microsoft Windows XP Professional Service Pack 3
    System drive C: has 19 GB (64%) free of 30 GB
    Total RAM: 383 MB (47% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 0:08:41, on 19.06.2010
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:WINDOWSSystem32smss.exe
    C:WINDOWSsystem32winlogon.exe
    C:WINDOWSsystem32services.exe
    C:WINDOWSsystem32lsass.exe
    C:WINDOWSsystem32svchost.exe
    C:WINDOWSSystem32svchost.exe
    C:WINDOWSExplorer.EXE
    C:WINDOWSsystem32spoolsv.exe
    C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe
    C:WINDOWSsystem32svchost.exe
    C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
    C:WINDOWSSystem32svchost.exe
    C:WINDOWSSystem32svchost.exe
    C:WINDOWSsystem32svchost.exe
    C:WINDOWSRTHDCPL.EXE
    C:Program FilesCyberLinkPowerDVDPDVDServ.exe
    C:Program FilesHPHP Software UpdateHPWuSchd2.exe
    C:Program FilesCommon FilesArcSoftConnection ServiceBinACDaemon.exe
    C:Program FilesCommon FilesNikonMonitorNkMonitor.exe
    C:WINDOWSsystem32ctfmon.exe
    C:Program FilesCommon FilesArcSoftConnection ServiceBinArcCon.ac
    C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
    C:Program FilesHPDigital Imagingbinhpqtra08.exe
    C:WINDOWSsystem32sistray.exe
    C:Program FilesHPDigital ImagingbinhpqSTE08.exe
    C:Program FilesOperaopera.exe
    D:Program FilesRSIT.exe
    C:Program Filestrend micro1.exe

    R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40316
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
    F2 — REG:system.ini: UserInit=C:WINDOWSSYSTEM32Userinit.exe,\?globalrootsystemrootsystem328rCVJ2I.exe,\?globalrootsystemrootsystem32XdssLB6.exe,\?globalrootsystemrootsystem32G4gDwDl.exe,\?globalrootsystemrootsystem32WiO5mkm.exe,
    O2 — BHO: HP Print Enhancer — {0347C33E-8762-4905-BF09-768834316C61} — C:Program FilesHPSmart Web Printinghpswp_printenhancer.dll
    O2 — BHO: HP Print Clips — {053F9267-DC04-4294-A72C-58F732D338C0} — C:Program FilesHPSmart Web Printinghpswp_framework.dll
    O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
    O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
    O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.2.4204.1700swg.dll
    O2 — BHO: Google Dictionary Compression sdch — {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_B7C5AC242193BB3E.dll
    O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
    O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
    O4 — HKLM..Run: [SkyTel] SkyTel.EXE
    O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
    O4 — HKLM..Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
    O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
    O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
    O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
    O4 — HKLM..Run: [ArcSoft Connection Service] C:Program FilesCommon FilesArcSoftConnection ServiceBinACDaemon.exe
    O4 — HKLM..Run: [Nikon Transfer Monitor] C:Program FilesCommon FilesNikonMonitorNkMonitor.exe
    O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
    O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
    O4 — HKCU..Run: [swg] «C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe»
    O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
    O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
    O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
    O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
    O4 — Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exe
    O4 — Global Startup: Utility Tray.lnk = C:WINDOWSsystem32sistray.exe
    O4 — Global Startup: Ускоренный запуск Adobe Reader.lnk = C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
    O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
    O8 — Extra context menu item: Google Sidewiki… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
    O9 — Extra button: Альбом клипов HP — {58ECB495-38F0-49cb-A538-10282ABF65E7} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
    O9 — Extra button: Расширенный выбор HP — {700259D7-1666-479a-93B1-3250410481E8} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
    O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
    O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
    O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
    O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
    O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
    O17 — HKLMSystemCCSServicesTcpip..{9929AFD7-A871-4379-BB43-3B69CF54309E}: NameServer = 78.36.171.200 212.48.193.36
    O23 — Service: ArcSoft Connect Daemon (ACDaemon) — ArcSoft Inc. — C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe
    O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
    O23 — Service: Служба Google Update (gupdate) (gupdate) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
    O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
    O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
    O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
    O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
    O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
    O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
    O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
    O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
    O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
    O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

    —
    End of file — 7791 bytes

    ======Scheduled tasks folder======

    C:WINDOWStasksGoogleUpdateTaskMachineCore.job
    C:WINDOWStasksGoogleUpdateTaskMachineUA.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{0347C33E-8762-4905-BF09-768834316C61}]
    HP Print Enhancer — C:Program FilesHPSmart Web Printinghpswp_printenhancer.dll [2007-03-02 1298024]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{053F9267-DC04-4294-A72C-58F732D338C0}]
    HP Print Clips — C:Program FilesHPSmart Web Printinghpswp_framework.dll [2007-03-02 177768]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2005-09-24 63136]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
    Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-06-07 256112]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.2.4204.1700swg.dll [2010-06-07 761840]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
    Google Dictionary Compression sdch — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_B7C5AC242193BB3E.dll [2010-06-07 458736]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
    {2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-06-07 256112]

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
    «RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-09-19 16844800]
    «SkyTel»=C:WINDOWSSkyTel.EXE [2007-08-03 1826816]
    «Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
    «SiSPower»=SiSPower.dll,ModeAgent []
    «NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
    «RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2005-01-12 32768]
    «HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2007-03-11 49152]
    «ArcSoft Connection Service»=C:Program FilesCommon FilesArcSoftConnection ServiceBinACDaemon.exe [2010-03-18 207360]
    «Nikon Transfer Monitor»=C:Program FilesCommon FilesNikonMonitorNkMonitor.exe [2009-09-15 479232]
    «KernelFaultCheck»=C:WINDOWSsystem32dumprep 0 -k []

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
    «CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-06-09 15360]
    «swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2010-06-07 39408]

    C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
    HP Digital Imaging Monitor.lnk — C:Program FilesHPDigital Imagingbinhpqtra08.exe
    Utility Tray.lnk — C:WINDOWSsystem32sistray.exe
    Ускоренный запуск Adobe Reader.lnk — C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
    C:WINDOWSsystem32WgaLogon.dll [2009-03-10 265096]

    [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
    «dontdisplaylastusername»=0
    «legalnoticecaption»=
    «legalnoticetext»=
    «shutdownwithoutlogon»=1
    «undockwithoutlogon»=1

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
    «NoDriveTypeAutoRun»=145

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
    «NoDriveTypeAutoRun»=
    «HonorAutoRunSetting»=

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
    «%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
    «%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
    «%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
    «%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

    ======List of files/folders created in the last 1 months======

    2010-06-18 23:20:16 —-A—- C:WINDOWSsystem32cam9NnG.exe
    2010-06-18 22:30:56 —-A—- C:WINDOWSsystem32MUOXhxQ.exe
    2010-06-18 21:46:57 —-A—- C:WINDOWSsystem32oEXRVat.exe
    2010-06-18 21:38:43 —-A—- C:WINDOWSsystem32MHWDGA9.exe
    2010-06-18 21:07:04 —-A—- C:WINDOWSsystem32i5REoQy.exe
    2010-06-18 20:05:10 —-A—- C:WINDOWSsystem32GpVepYv.exe
    2010-06-16 00:05:15 —-A—- C:WINDOWSsystem32apexchanger.exe
    2010-06-16 00:03:15 —-D—- C:Program FilesApex Video Converter Pro
    2010-06-16 00:03:15 —-D—- C:Apex
    2010-06-15 23:19:45 —-D—- C:Program FilesCommon FilesAVSMedia
    2010-06-15 23:19:24 —-A—- C:WINDOWSsystem32msxml3a.dll
    2010-06-15 21:50:17 —-D—- C:Program Filesmp3DirectCut
    2010-06-11 21:35:23 —-D—- C:Documents and Settings1Application DataXilisoft Corporation
    2010-06-11 03:03:26 —-HDC—- C:WINDOWS$NtUninstallKB980218$
    2010-06-11 03:03:14 —-HDC—- C:WINDOWS$NtUninstallKB980195$
    2010-06-11 03:03:08 —-HDC—- C:WINDOWS$NtUninstallKB979559$
    2010-06-11 03:01:07 —-HDC—- C:WINDOWS$NtUninstallKB978695_WM9$
    2010-06-11 03:00:56 —-HDC—- C:WINDOWS$NtUninstallKB979482$
    2010-06-11 03:00:50 —-HDC—- C:WINDOWS$NtUninstallKB975562$
    2010-06-11 03:00:36 —-D—- C:WINDOWSie8updates
    2010-06-10 21:27:16 —-D—- C:Movavi files
    2010-06-10 20:37:42 —-D—- C:Program FilesMovavi Видео Конвертер 8
    2010-06-10 12:17:09 —-D—- C:Documents and Settings1Application DataMOVAVI
    2010-06-09 06:22:05 —-HDC—- C:WINDOWS$NtUninstallKB970430$
    2010-06-09 06:21:38 —-HDC—- C:WINDOWS$NtUninstallKB971737$
    2010-06-09 05:37:34 —-A—- C:WINDOWSsystem32MRT.exe
    2010-06-09 05:36:18 —-D—- C:WINDOWSWBEM
    2010-06-09 05:33:27 —-HDC—- C:WINDOWSie8
    2010-06-07 14:46:32 —-D—- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
    2010-06-07 05:31:38 —-HDC—- C:WINDOWS$NtUninstallKB952954$
    2010-06-07 05:31:31 —-HDC—- C:WINDOWS$NtUninstallKB959426$
    2010-06-07 05:31:18 —-HDC—- C:WINDOWS$NtUninstallKB960859$
    2010-06-07 05:31:00 —-HDC—- C:WINDOWS$NtUninstallKB974318$
    2010-06-07 05:30:52 —-HDC—- C:WINDOWS$NtUninstallKB951978$
    2010-06-07 05:30:44 —-HDC—- C:WINDOWS$NtUninstallKB969059$
    2010-06-07 05:30:37 —-HDC—- C:WINDOWS$NtUninstallKB981349$
    2010-06-07 05:30:27 —-HDC—- C:WINDOWS$NtUninstallKB950974$
    2010-06-07 05:30:21 —-HDC—- C:WINDOWS$NtUninstallKB975713$
    2010-06-07 05:30:14 —-HDC—- C:WINDOWS$NtUninstallKB971657$
    2010-06-07 05:30:05 —-HDC—- C:WINDOWS$NtUninstallKB978338$
    2010-06-07 05:29:58 —-HDC—- C:WINDOWS$NtUninstallKB974112$
    2010-06-07 05:29:52 —-HDC—- C:WINDOWS$NtUninstallKB961501$
    2010-06-07 05:29:45 —-HDC—- C:WINDOWS$NtUninstallKB975025$
    2010-06-07 05:29:29 —-HDC—- C:WINDOWS$NtUninstallKB952004$
    2010-06-07 05:29:22 —-HDC—- C:WINDOWS$NtUninstallKB974571$
    2010-06-07 05:29:15 —-HDC—- C:WINDOWS$NtUninstallKB975560$
    2010-06-07 05:29:04 —-HDC—- C:WINDOWS$NtUninstallKB973507$
    2010-06-07 05:28:57 —-HDC—- C:WINDOWS$NtUninstallKB977816$
    2010-06-07 05:28:23 —-HDC—- C:WINDOWS$NtUninstallKB980182$
    2010-06-07 05:27:27 —-HDC—- C:WINDOWS$NtUninstallKB974392$
    2010-06-07 05:25:35 —-HDC—- C:WINDOWS$NtUninstallKB977914$
    2010-06-07 05:23:54 —-HDC—- C:WINDOWS$NtUninstallKB951748$
    2010-06-07 05:23:37 —-HDC—- C:WINDOWS$NtUninstallKB978542$
    2010-06-07 05:23:24 —-HDC—- C:WINDOWS$NtUninstallKB956802$
    2010-06-07 05:22:52 —-HDC—- C:WINDOWS$NtUninstallKB975467$
    2010-06-07 05:21:39 —-HDC—- C:WINDOWS$NtUninstallKB968389$
    2010-06-06 18:19:24 —-D—- C:Documents and SettingsAll UsersApplication DataGoogle
    2010-06-06 18:14:16 —-A—- C:WINDOWSavisplitter.ini
    2010-06-06 18:13:55 —-A—- C:WINDOWSsystem32yv12vfw.dll
    2010-06-06 18:13:40 —-A—- C:WINDOWSsystem32ff_vfw.dll.manifest
    2010-06-06 18:13:40 —-A—- C:WINDOWSsystem32ff_vfw.dll
    2010-06-06 18:13:31 —-D—- C:Program FilesK-Lite Codec Pack
    2010-06-06 17:23:28 —-HDC—- C:WINDOWS$NtUninstallKB978262$
    2010-06-06 17:23:11 —-HDC—- C:WINDOWS$NtUninstallKB951376-v2$
    2010-06-06 17:22:54 —-HDC—- C:WINDOWS$NtUninstallKB946648$
    2010-06-06 17:22:37 —-HDC—- C:WINDOWS$NtUninstallKB956803$
    2010-06-06 17:22:20 —-HDC—- C:WINDOWS$NtUninstallKB971468$
    2010-06-06 17:21:59 —-HDC—- C:WINDOWS$NtUninstallKB979683$
    2010-06-06 17:21:42 —-HDC—- C:WINDOWS$NtUninstallKB958869$
    2010-06-06 17:21:25 —-HDC—- C:WINDOWS$NtUninstallKB980232$
    2010-06-06 17:21:04 —-HDC—- C:WINDOWS$NtUninstallKB955759$
    2010-06-06 17:20:46 —-HDC—- C:WINDOWS$NtUninstallKB968816_WM9$
    2010-06-06 17:20:30 —-HDC—- C:WINDOWS$NtUninstallKB978037$
    2010-06-06 17:20:13 —-HDC—- C:WINDOWS$NtUninstallKB954155_WM9$
    2010-06-06 17:19:57 —-HDC—- C:WINDOWS$NtUninstallKB960225$
    2010-06-06 17:19:28 —-HDC—- C:WINDOWS$NtUninstallKB956572$
    2010-06-06 17:19:08 —-HDC—- C:WINDOWS$NtUninstallKB956844$
    2010-06-06 17:18:48 —-HDC—- C:WINDOWS$NtUninstallKB973904$
    2010-06-06 17:18:25 —-HDC—- C:WINDOWS$NtUninstallKB967715$
    2010-06-06 17:18:06 —-HDC—- C:WINDOWS$NtUninstallKB970238$
    2010-06-06 17:17:45 —-HDC—- C:WINDOWS$NtUninstallKB978706$
    2010-06-06 17:17:23 —-HDC—- C:WINDOWS$NtUninstallKB960803$
    2010-06-06 17:17:06 —-HDC—- C:WINDOWS$NtUninstallKB973815$
    2010-06-06 17:16:42 —-HDC—- C:WINDOWS$NtUninstallKB969947$
    2010-06-06 16:22:49 —-D—- C:FlashVideos
    2010-06-06 08:15:39 —-HDC—- C:WINDOWS$NtUninstallKB972270$
    2010-06-06 08:15:31 —-HDC—- C:WINDOWS$NtUninstallKB956744$
    2010-06-06 08:15:20 —-HDC—- C:WINDOWS$NtUninstallKB973869$
    2010-06-06 08:15:07 —-HDC—- C:WINDOWS$NtUninstallKB941569$
    2010-06-06 08:14:28 —-HDC—- C:WINDOWS$NtUninstallKB973687$
    2010-06-06 08:14:19 —-HDC—- C:WINDOWS$NtUninstallKB950762$
    2010-06-06 08:14:09 —-HDC—- C:WINDOWS$NtUninstallKB981793$
    2010-06-06 08:13:59 —-HDC—- C:WINDOWS$NtUninstallKB978601$
    2010-06-06 08:13:52 —-HDC—- C:WINDOWS$NtUninstallKB952287$
    2010-06-06 08:13:36 —-HDC—- C:WINDOWS$NtUninstallKB973540_WM9$
    2010-06-06 08:13:30 —-HDC—- C:WINDOWS$NtUninstallKB950760$
    2010-06-06 08:13:22 —-HDC—- C:WINDOWS$NtUninstallKB952069_WM9$
    2010-06-06 08:13:13 —-HDC—- C:WINDOWS$NtUninstallKB979309$
    2010-06-06 08:13:05 —-HDC—- C:WINDOWS$NtUninstallKB958644$
    2010-06-06 08:12:23 —-HDC—- C:WINDOWS$NtUninstallKB955069$
    2010-06-06 08:11:51 —-D—- C:Program FilesMSXML 4.0
    2010-06-06 08:11:31 —-HDC—- C:WINDOWS$NtUninstallKB923561$
    2010-06-06 08:10:52 —-HDC—- C:WINDOWS$NtUninstallKB971961$
    2010-06-05 08:29:12 —-HDC—- C:WINDOWS$NtUninstallKB975561$
    2010-06-04 23:32:50 —-D—- C:WINDOWSsystem32PreInstall
    2010-06-04 23:32:48 —-N—- C:WINDOWSsystem32spmsg.dll
    2010-06-04 23:32:47 —-A—- C:WINDOWSsystem32spupdsvc.exe
    2010-06-04 23:32:45 —-HDC—- C:WINDOWS$NtUninstallKB898461$
    2010-06-04 23:32:45 —-HD—- C:WINDOWS$hf_mig$
    2010-06-04 22:08:19 —-D—- C:WINDOWSMinidump
    2010-06-03 06:38:42 —-D—- C:WINDOWSsystem32SoftwareDistribution
    2010-06-02 09:08:50 —-D—- C:Documents and Settings1Application DataMalwarebytes
    2010-06-02 09:08:31 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
    2010-05-31 01:31:49 —-D—- C:Program Filestrend micro
    2010-05-31 01:31:47 —-D—- C:rsit
    2010-05-31 00:45:58 —-D—- C:WINDOWSsystem32appmgmt
    2010-05-30 22:15:10 —-A—- C:SAFEBOOT_REPAIR.TXT
    2010-05-30 17:10:58 —-D—- C:Documents and Settings1Application DataHelp
    2010-05-27 23:55:59 —-D—- C:Program FilesQuickTime
    2010-05-27 22:58:36 —-D—- C:32788R22FWJFW(2)
    2010-05-27 22:35:36 —-D—- C:WINDOWSpss
    2010-05-26 21:00:24 —-D—- C:Program FilesCommon FilesSysAware Soft
    2010-05-23 23:05:18 —-A—- C:WINDOWSViewNX.INI
    2010-05-23 22:52:06 —-D—- C:Documents and Settings1Application DataApple Computer
    2010-05-23 22:46:32 —-D—- C:Documents and Settings1Application DataNikon
    2010-05-23 22:41:49 —-D—- C:Documents and SettingsAll UsersApplication DataSync Schema
    2010-05-23 22:40:45 —-D—- C:Program FilesCommon Filesmuvee Technologies
    2010-05-23 22:40:32 —-D—- C:Program FilesCommon FilesNikon
    2010-05-23 22:40:32 —-D—- C:Documents and SettingsAll UsersApplication DataNikon
    2010-05-23 22:40:24 —-D—- C:Program FilesNikon
    2010-05-23 22:38:54 —-D—- C:Documents and SettingsAll UsersApplication DataUltima_T15
    2010-05-23 22:38:54 —-D—- C:Documents and SettingsAll UsersApplication DataSpeech Enhancer
    2010-05-23 22:38:54 —-D—- C:Documents and SettingsAll UsersApplication DataEnterNHelp
    2010-05-23 22:34:11 —-HD—- C:Documents and SettingsAll UsersApplication DataArcSoft
    2010-05-23 22:32:59 —-D—- C:Program FilesCommon FilesArcSoft
    2010-05-23 22:32:59 —-D—- C:Program FilesArcSoft
    2010-05-23 22:29:44 —-D—- C:Documents and Settings1Application DataArcSoft
    2010-05-23 13:45:26 —-D—- C:Program FilesVirtualDub
    2010-05-22 07:17:22 —-D—- C:FlashAudio
    2010-05-22 02:09:52 —-A—- C:WINDOWSsystem32xvidvfw.dll
    2010-05-22 02:09:50 —-A—- C:WINDOWSsystem32xvidcore.dll
    2010-05-21 19:30:43 —-A—- C:WINDOWSsystem32ptpusb.dll
    2010-05-21 19:30:41 —-A—- C:WINDOWSsystem32ptpusd.dll

    ======List of files/folders modified in the last 1 months======

    2010-06-18 23:34:24 —-D—- C:WINDOWSTemp
    2010-06-18 23:32:56 —-SHD—- C:WINDOWSInstaller
    2010-06-18 23:32:56 —-HD—- C:Config.Msi
    2010-06-18 23:32:56 —-D—- C:WINDOWS
    2010-06-18 23:32:51 —-D—- C:WINDOWSsystem32
    2010-06-18 23:32:48 —-D—- C:WINDOWSsystem32drivers
    2010-06-18 23:31:55 —-A—- C:WINDOWSSchedLgU.Txt
    2010-06-18 23:23:14 —-RD—- C:Program FilesCommon Files
    2010-06-18 23:22:45 —-D—- C:WINDOWSPrefetch
    2010-06-18 22:26:10 —-RD—- C:Program Files
    2010-06-18 22:19:02 —-HD—- C:WINDOWSinf
    2010-06-18 22:16:09 —-D—- C:WINDOWSsystem32CatRoot2
    2010-06-18 21:46:27 —-D—- C:Program FilesMozilla Firefox
    2010-06-18 10:50:58 —-D—- C:WINDOWSsystem32config
    2010-06-18 10:50:47 —-D—- C:WINDOWSsystem32wbem
    2010-06-18 10:50:46 —-D—- C:WINDOWSRegistration
    2010-06-17 15:19:41 —-SHD—- C:System Volume Information
    2010-06-17 15:19:41 —-D—- C:WINDOWSsystem32Restore
    2010-06-16 22:27:02 —-A—- C:WINDOWSNeroDigital.ini
    2010-06-14 22:37:40 —-D—- C:Program Filestotalcmd
    2010-06-14 22:32:15 —-A—- C:WINDOWSntbtlog.txt
    2010-06-11 21:58:01 —-D—- C:Program FilesXilisoft
    2010-06-11 21:32:39 —-A—- C:WINDOWSIE4 Error Log.txt
    2010-06-11 03:03:28 —-RSHDC—- C:WINDOWSsystem32dllcache
    2010-06-11 03:03:23 —-A—- C:WINDOWSimsins.BAK
    2010-06-11 03:02:52 —-D—- C:Program FilesInternet Explorer
    2010-06-10 23:45:21 —-SD—- C:Documents and Settings1Application DataMicrosoft
    2010-06-10 23:22:55 —-D—- C:Documents and SettingsAll UsersApplication Dataxml_param
    2010-06-09 16:02:23 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
    2010-06-09 06:05:14 —-D—- C:WINDOWSsystem32ru-ru
    2010-06-09 06:05:13 —-D—- C:WINDOWSHelp
    2010-06-09 05:37:35 —-D—- C:WINDOWSDebug
    2010-06-09 05:36:08 —-D—- C:WINDOWSMedia
    2010-06-07 17:34:17 —-D—- C:Program FilesGoogle
    2010-06-07 14:49:05 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
    2010-06-07 14:46:56 —-SD—- C:WINDOWSTasks
    2010-06-07 05:23:41 —-D—- C:Program FilesOutlook Express
    2010-06-06 17:45:12 —-D—- C:WINDOWSAppPatch
    2010-06-06 17:22:56 —-D—- C:Program FilesMessenger
    2010-06-06 17:21:42 —-D—- C:WINDOWSWinSxS
    2010-06-05 08:29:19 —-D—- C:Program FilesMovie Maker
    2010-06-03 06:38:59 —-D—- C:WINDOWSSoftwareDistribution
    2010-06-02 09:47:25 —-D—- C:WINDOWSime
    2010-05-30 22:26:33 —-D—- C:Documents and Settings
    2010-05-30 17:12:07 —-SH—- C:boot.ini
    2010-05-30 17:12:07 —-A—- C:WINDOWSwin.ini
    2010-05-30 17:12:07 —-A—- C:WINDOWSsystem.ini
    2010-05-30 10:41:14 —-D—- C:Documents and Settings1Application DataYandex
    2010-05-27 23:55:50 —-D—- C:Program FilesOpera
    2010-05-25 22:58:26 —-HD—- C:Program FilesInstallShield Installation Information
    2010-05-23 22:38:47 —-A—- C:WINDOWSsystem32ATL71.DLL
    2010-05-23 22:38:40 —-D—- C:Program FilesCommon FilesInstallShield
    2010-05-23 22:29:17 —-D—- C:Program FilesCommon FilesMicrosoft Shared
    2010-05-22 23:21:51 —-A—- C:WINDOWSsystem32ASPRTMM1.DLL

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-06-09 40704]
    R1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-14 14720]
    R1 SiSkp;SiSkp; C:WINDOWSsystem32DRIVERSsrvkp.sys [2008-12-03 19072]
    R1 uzezmjy3;AVZ-RK Kernel Driver; ??C:WINDOWSsystem32Driversuzezmjy3.sys []
    R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-06-09 144384]
    R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
    R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2007-03-08 49920]
    R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2007-03-08 16496]
    R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2007-03-08 21568]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2007-09-19 4617728]
    R3 MTsensor;ATK0100 ACPI UTILITY; C:WINDOWSsystem32DRIVERSATKACPI.sys [2007-08-24 5760]
    R3 SiS315;SiS315; C:WINDOWSsystem32DRIVERSsisgrp.sys [2008-12-03 324096]
    R3 SiSGbeXP;SiS191/SiS190 Ethernet Device NDIS 5.1 Driver; C:WINDOWSsystem32DRIVERSSiSGbeXP.sys [2006-12-20 41600]
    R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-14 32128]
    R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-06-09 30208]
    R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-06-09 59520]
    R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-06-09 17152]
    R3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
    R3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
    R3 WsAudio_DeviceS(1);WsAudio_DeviceS(1); C:WINDOWSsystem32driversWsAudio_DeviceS(1).sys [2009-12-04 25704]
    R3 WsAudio_DeviceS(2);WsAudio_DeviceS(2); C:WINDOWSsystem32driversWsAudio_DeviceS(2).sys [2009-12-04 25704]
    R3 WsAudio_DeviceS(3);WsAudio_DeviceS(3); C:WINDOWSsystem32driversWsAudio_DeviceS(3).sys [2009-12-04 25704]
    R3 WsAudio_DeviceS(4);WsAudio_DeviceS(4); C:WINDOWSsystem32driversWsAudio_DeviceS(4).sys [2009-12-04 25704]
    R3 WsAudio_DeviceS(5);WsAudio_DeviceS(5); C:WINDOWSsystem32driversWsAudio_DeviceS(5).sys [2009-12-04 25704]
    S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
    S3 utezmjy3;AVZ Kernel Driver; ??C:WINDOWSsystem32Driversutezmjy3.sys []
    S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 ACDaemon;ArcSoft Connect Daemon; C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe [2010-03-18 113152]
    R2 hpqddsvc;Служба HP CUE DeviceDiscovery; C:WINDOWSsystem32svchost.exe [2008-06-09 14336]
    R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-20 322120]
    R2 Net Driver HPZ12;Net Driver HPZ12; C:WINDOWSSystem32svchost.exe [2008-06-09 14336]
    R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSSystem32svchost.exe [2008-06-09 14336]
    R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912]
    R3 hpqcxs08;hpqcxs08; C:WINDOWSsystem32svchost.exe [2008-06-09 14336]
    S2 gupdate;Служба Google Update (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-02-16 135664]
    S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2010-06-07 182768]
    S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-04 69632]
    S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]

    EOF

    19 июня, 2010 в 1:46 пп #29705
    Helper
    Participant
    • Темы:19
    • Сообщений:712
    • ☆☆☆☆☆

    Скачайте это:
    http://gjf.hotbox.ru/mink.pif
    Временно выключите антивирус, firewall и другое защитное программное обеспечение. Выделите и скопируйте текст ниже (Ctrl+C)Выполните скрипт:


    
begin
    
SearchRootkit(true, true);
    
SetAVZGuardStatus(True);
    
DeleteFile('C:WINDOWSsystem32GpVepYv.exe');
    
DeleteFile('C:WINDOWSsystem32i5REoQy.exe');
    
DeleteFile('C:WINDOWSsystem32MHWDGA9.exe');
    
DeleteFile('C:WINDOWSsystem32oEXRVat.exe');
    
DeleteFile('C:WINDOWSsystem32MUOXhxQ.exe');
    
DeleteFile('C:WINDOWSsystem32cam9NnG.exe');
    
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SoftwareMicrosoftWindows NTCurrentVersionWinlogon','Userinit','C:WINDOWSsystem32userinit.exe,');
    
BC_ImportDeletedList;
    
ExecuteSysClean;
    
BC_Activate;
    
RebootWindows(true);
    
end.

    После этого ПК перезагрузится-повторите логи RSIT.Нод уже обновляется?
    Как выполнить скрипт:
    Запустите скачанный файл.
    Скопируйте скрипт.
    нажмите Файл => Выполнить скрипт.
    В появившемся окошке программы нажать правую кнопку мыши и нажать Вставить.
    Нажать в AVZ кнопку — Запустить.

  • Автор
    Сообщения
Просмотр 6 сообщений - с 1 по 6 (из 6 всего)
  • Для ответа в этой теме необходимо авторизоваться.
Войти

Добро пожаловать

На нашем сайте размещены инструкции и программы, которые помогут вам абсолютно бесплатно и самостоятельно удалить навязчивую рекламу, вирусы и трояны.

Поиск

Последние темы

  • Странность в Malwebytes опубликовано Artem225
    5 years, 2 months назад
  • SUSPICIOUS.FakedMBR.1 что делать, помогите!!! опубликовано White
    5 years, 3 months назад
  • Помогите пожалуйста вирус замучил. опубликовано dimazons1233211
    5 years, 5 months назад
  • Замучила реклама опубликовано Данила Беспятов
    5 years, 6 months назад
  • Замучила реклама опубликовано Марк
    5 years, 3 months назад
  • Вирус S1.video.ru.net опубликовано ludovik
    5 years, 8 months назад
  • Чертов Safe Finder!!!! опубликовано kosta savo
    5 years, 5 months назад
  • ESET блокирует неизвестный сайт , вход на который не осуществлялся. опубликовано trollhamaren
    5 years, 9 months назад

СПАЙВАРЕ РУ

  • О Спайваре Ру
  • Контакты
  • Реклама на сайте
  • Политика конфиденциальности
  • Правила использования

Нужна помощь?

Задайте свой вопрос прямо сейчас кликнув по следующей ссылке Задать вопрос.

Или обратитесь на наш форум, где команда Spyware-ru поможет вам. Узнайте, как попросить о помощи здесь.

Ссылки

  • Инструкции
  • Скачать программы
  • Помощь в удалении вирусов
  • Как вылечить компьютер
Copyright © 2008 - 2024 Spyware-RU.com (en)