порно информер, помогите удалить

[OlgaOlga]

ComboFix 08-12-01.03 — 1 2008-12-02 22:43:14.2 — NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1251.1.1049.18.1808 [GMT 3:00]
Running from: c:users1DesktopComboFix.exe
Command switches used :: c:users1DesktopCFScript.txt
* Created a new restore point
* Resident AV is active

FILE ::
c:windowssystem32nzilib.dll
c:windowssystem32vmelib.dll
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files0EB9F12C_6E6B_4c03_AEBA_8C04CFA98AA4.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files15913497_F86C_4218_8817_F50940D1E1B2.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files29887DDE_00B9_4011_9CF7_59511F1ECC1B.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files2A665EDD_5758_480c_8366_66DFC5F23877.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files35B7DFFA_884F_4fbc_8E60_DA601BDC7BF7.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files362FD6E8_8CDA_4c2a_A8AA-BDA22B321711.jpg
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files3DF04940_9866_4241_A998_0CDDFAFD147A.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files426500D7_0FF3_426c_828D_065DBAEA0581.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files478BD4AE_2691_438d_BDCA_3485DC022700.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files5C6C645F_BAA8_4149_BFEB_2031230FF0FD.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files61EA7D69_19D4_421a_A899_0DF4D58CD119.jpg
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files777FDAFB_83CF_4960_AA71_4E5D7BCD8E57.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files8DA878D5_E80B_4721_B75A_17EFFAF1A700.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet Files98F6DF79_7171_452d_9C26_C0193E12DBDF.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet FilesA2B240D6_0386_419e_91C5_3F7D90437CD0.jpg
c:users1AppDataLocalMicrosoftWindowsTemporary Internet FilesC75CEF8D_5AF4_4563_8594_C45A45E14E63.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet FilesE21285C1_40E6_435c_A69F_3387E7BD89CB.gif
c:users1AppDataLocalMicrosoftWindowsTemporary Internet FilesE9A4D648_ED73_4ea7_88B2_18332DBA4F3E.jpg

.
((((((((((((((((((((((((( Files Created from 2008-11-02 to 2008-12-02 )))))))))))))))))))))))))))))))
.

2008-12-02 12:34 . 2008-12-02 12:34

d

---

c:windowsWindows Folder
2008-12-02 12:34 . 2008-12-02 12:34 d

---

c:windowsSystem32IOSUBSYS
2008-12-02 12:34 . 2008-12-02 12:34 d

---

c:program filesteXet
2008-12-01 23:03 . 2008-12-01 23:03 d

---

c:users1AppDataRoamingPeerNetworking
2008-11-28 17:51 . 2008-08-05 12:49 428,544 —a

---

c:windowsSystem32EncDec.dll
2008-11-28 17:51 . 2008-08-05 12:49 293,376 —a

---

c:windowsSystem32psisdecd.dll
2008-11-28 17:51 . 2008-08-05 12:48 217,088 —a

---

c:windowsSystem32psisrndr.ax
2008-11-28 17:51 . 2008-08-05 12:48 177,664 —a

---

c:windowsSystem32mpg2splt.ax
2008-11-28 17:51 . 2008-08-05 12:48 80,896 —a

---

c:windowsSystem32MSNP.ax
2008-11-28 17:51 . 2008-04-23 07:41 57,856 —a

---

c:windowsSystem32MSDvbNP.ax
2008-11-24 00:03 . 2008-11-24 00:03 d

---

c:usersAll UsersAvira
2008-11-24 00:03 . 2008-11-24 00:03 d

---

c:programdataAvira
2008-11-24 00:03 . 2008-11-24 00:03 d

---

c:program filesAvira
2008-11-23 02:52 . 2008-11-23 19:32 d

---

C:rsit
2008-11-23 02:52 . 2008-11-23 02:52 d

---

c:program filestrend micro
2008-11-22 19:26 . 2008-11-22 19:26 317,952 —a

---

c:windowsSystem32ytllib.dll
2008-11-20 20:05 . 2008-11-20 20:05 d

---

c:users1AppDataRoamingTemplate
2008-11-14 21:56 . 2008-10-17 00:13 1,809,944 —a

---

c:windowsSystem32wuaueng.dll
2008-11-14 21:56 . 2008-10-16 23:56 1,524,736 —a

---

c:windowsSystem32wucltux.dll
2008-11-14 21:56 . 2008-10-17 00:12 561,688 —a

---

c:windowsSystem32wuapi.dll
2008-11-14 21:56 . 2008-10-16 14:08 162,064 —a

---

c:windowsSystem32wuwebv.dll
2008-11-14 21:56 . 2008-10-16 23:55 83,456 —a

---

c:windowsSystem32wudriver.dll
2008-11-14 21:56 . 2008-10-17 00:09 51,224 —a

---

c:windowsSystem32wuauclt.exe
2008-11-14 21:56 . 2008-10-17 00:09 43,544 —a

---

c:windowsSystem32wups2.dll
2008-11-14 21:56 . 2008-10-17 00:08 34,328 —a

---

c:windowsSystem32wups.dll
2008-11-14 21:56 . 2008-10-16 13:56 31,232 —a

---

c:windowsSystem32wuapp.exe
2008-11-12 20:00 . 2008-11-28 16:16 d

---

c:program filesMyCentria
2008-11-12 09:03 . 2008-09-10 06:40 1,334,272 —a

---

c:windowsSystem32msxml6.dll
2008-11-12 09:03 . 2008-09-05 08:14 1,191,936 —a

---

c:windowsSystem32msxml3.dll
2008-11-12 09:03 . 2008-08-27 04:05 212,480 —a

---

c:windowsSystem32driversmrxsmb10.sys
2008-11-09 18:16 . 2008-11-09 18:16 d

---

c:program filesffdshow
2008-11-09 18:16 . 2006-12-10 22:32 348,160 —a

---

c:windowsSystem32msvcr71.dll
2008-11-09 18:16 . 2007-04-24 16:30 60,273 —a

---

c:windowsSystem32pthreadGC2.dll
2008-11-09 18:16 . 2007-12-24 13:49 7,680 —a

---

c:windowsSystem32ff_vfw.dll
2008-11-09 18:16 . 2007-12-07 18:28 6,144 —a

---

c:windowsSystem32ff_acm.acm
2008-11-09 18:16 . 2007-07-10 17:10 547 —a

---

c:windowsSystem32ff_vfw.dll.manifest
2008-11-09 10:23 . 2008-11-09 10:23 d

---

c:program filesMSXML 4.0
2008-11-08 22:46 . 2008-11-08 22:46 d

---

c:users1AppDataRoamingvlc
2008-11-08 22:46 . 2008-11-08 22:46 d

---

c:program filesVideoLAN
2008-11-08 21:52 . 2008-11-08 21:52 d

---

c:users1AppDataRoamingSony Corporation
2008-11-08 21:47 . 2005-05-26 15:34 2,297,552 —a

---

c:windowsSystem32d3dx9_26.dll
2008-11-08 21:45 . 2008-11-08 21:45 d

---

c:program filesSony
2008-11-08 21:45 . 2006-11-02 16:57 118,520 —a

---

c:windowsSystem32PxInsI64.exe
2008-11-08 21:45 . 2006-10-18 19:43 115,960 —a

---

c:windowsSystem32PxCpyI64.exe
2008-11-08 21:44 . 2008-11-08 21:44 d

---

c:usersAll UsersSony Corporation
2008-11-08 21:44 . 2008-11-08 21:44 d

---

c:programdataSony Corporation
2008-11-08 21:19 . 2008-11-08 21:19 d

---

c:users1AppDataRoamingInstallShield
2008-11-08 20:44 . 2008-11-08 20:44 d

---

c:program filesSolo8
2008-11-08 17:04 . 2008-11-08 17:13 d

---

c:users1AppDataRoamingHP
2008-11-08 16:55 . 2008-11-08 16:55 d

---

c:usersAll UsersWEBREG
2008-11-08 16:55 . 2008-11-08 16:55 d

---

c:programdataWEBREG
2008-11-08 16:54 . 2008-11-08 16:54 d

---

c:usersAll UsersHewlett-Packard
2008-11-08 16:54 . 2008-11-08 16:54 d

---

c:programdataHewlett-Packard
2008-11-08 16:52 . 2008-11-08 16:52 d

---

c:usersAll UsersHPSSUPPLY
2008-11-08 16:52 . 2008-11-08 16:52 d

---

c:users1AppDataRoamingHPAppData
2008-11-08 16:52 . 2008-11-08 16:52 d

---

c:programdataHPSSUPPLY
2008-11-08 16:51 . 2008-11-08 16:51 d

---

c:usersAll UsersHP Product Assistant
2008-11-08 16:51 . 2008-11-08 16:51 d

---

c:programdataHP Product Assistant
2008-11-08 16:50 . 2008-11-08 16:50 d

---

c:program filesHewlett-Packard
2008-11-08 16:50 . 2008-11-08 16:50 d

---

c:program filesCommon FilesHP
2008-11-08 16:50 . 2008-11-08 16:50 d

---

c:program filesCommon FilesHewlett-Packard
2008-11-08 16:48 . 2007-03-17 19:11 569,344 —a

---

c:windowsSystem32hpotscl3.dll
2008-11-08 16:48 . 2007-03-08 07:20 364,544 —a

---

c:windowsSystem32hppldcoi.dll
2008-11-08 16:48 . 2007-03-17 19:11 303,104 —a

---

c:windowsSystem32hpovst10.dll
2008-11-08 16:48 . 2007-03-30 18:07 267,864 —a

---

c:windowsSystem32hpzids01.dll
2008-11-08 16:48 . 2007-03-28 14:01 117,760 —a

---

c:windowsSystem32hpzll5ha.dll
2008-11-08 16:47 . 2008-11-08 16:52 d

---

c:program filesHP
2008-11-08 16:46 . 2008-11-08 16:55 d

---

c:usersAll UsersHP
2008-11-08 16:46 . 2008-11-08 16:55 d

---

c:programdataHP
2008-11-08 16:46 . 2008-11-08 16:55 153,203 —a

---

c:windowshpoins14.dat
2008-11-08 00:05 . 2008-12-02 22:20 d

---

c:users1AppDataRoamingQIP.Online
2008-11-08 00:05 . 2008-11-08 00:05 d

---

c:program filesQIP.Online
2008-11-07 22:24 . 2008-11-07 22:24 d

---

c:program filesMicrosoft Visual Studio 8
2008-11-07 21:58 . 2008-11-07 21:58 d

---

c:users1AppDataRoamingOpenOffice.org
2008-11-07 21:50 . 2008-11-07 23:43 d

---

c:program filesOpenOffice.org 3
2008-11-06 11:26 . 2008-07-16 04:32 2,048 —a

---

c:windowsSystem32tzres.dll
2008-11-05 08:50 . 2008-06-26 04:45 12,240,896 —a

---

c:windowsSystem32NlsLexicons0007.dll
2008-11-05 08:50 . 2008-06-26 04:45 2,644,480 —a

---

c:windowsSystem32NlsLexicons0009.dll
2008-11-05 08:50 . 2008-06-26 06:29 801,280 —a

---

c:windowsSystem32NaturalLanguage6.dll
2008-11-04 23:28 . 2008-11-04 23:28 d

---

c:users1AppDataRoamingQIP
2008-11-04 23:27 . 2008-11-08 00:04 d

---

c:program filesQIP Infium
2008-11-04 22:32 . 2008-12-02 11:56 d

---

c:users1AppDataRoamingMra
2008-11-04 22:31 . 2008-11-04 22:32 d

---

c:program filesMail.Ru
2008-11-03 14:54 . 2008-11-08 21:56 d

---

c:users1AppDataRoamingToshiba
2008-11-03 14:35 . 2008-11-03 14:35 0 —ah

---

c:windowsSystem32driversMsft_User_WpdFs_01_00_00.Wdf
2008-11-03 14:32 . 2008-11-29 16:01 220 —a

---

c:users1AppDataRoamingwklnhst.dat
2008-11-03 06:43 . 2008-11-03 06:43 d

---

c:usersAll UsersATI
2008-11-03 06:43 . 2008-11-03 06:43 d

---

c:users1AppDataRoamingATI
2008-11-03 06:43 . 2008-11-03 06:43 d

---

c:programdataATI
2008-11-03 06:42 . 2008-11-03 06:42 dr

---

c:users1Searches
2008-11-03 06:42 . 2008-11-03 06:42 dr

---

c:users1Contacts
2008-11-03 06:42 . 2008-11-23 19:31 d—hs—- C:$RECYCLE.BIN
2008-11-03 06:41 . 2003-12-05 10:48 77,824 —a

---

c:windowsSystem32tosmreg.exe
2008-11-03 06:40 . 2008-11-03 06:40 d

---

c:windowsOptions
2008-11-03 06:32 . 2008-11-03 06:32 d

---

c:usersAll UsersToshibaEurope
2008-11-03 06:32 . 2008-11-03 06:32 d

---

c:programdataToshibaEurope
2008-11-03 06:31 . 2008-11-09 16:26 dr

---

c:users1Videos
2008-11-03 06:31 . 2008-11-04 20:38 dr

---

c:users1Saved Games
2008-11-03 06:31 . 2008-11-28 23:28 dr

---

c:users1Pictures
2008-11-03 06:31 . 2008-12-01 10:48 dr

---

c:users1Music
2008-11-03 06:31 . 2008-11-03 06:42 dr

---

c:users1Links
2008-11-03 06:31 . 2008-11-03 06:42 dr

---

c:users1Downloads
2008-11-03 06:31 . 2008-11-28 16:20 dr

---

c:users1Documents
2008-11-03 06:31 . 2006-11-02 15:37 d

---

c:users1AppDataRoamingMedia Center Programs
2008-11-03 06:31 . 2008-11-03 06:31 d—h

---

c:users1AppData
2008-11-03 06:31 . 2008-11-28 16:26 d

---

c:users1
2008-11-03 06:27 . 2008-11-03 06:27 dr

---

c:windowsSystem32configsystemprofileContacts
2008-11-03 06:19 . 2008-11-03 06:19 0 -rahs—- c:windowsSystem32driversTOSHIBA_Satellite A300_06891-RU_PSAG4E-03201.MRK
2008-11-03 06:17 . 2008-11-03 06:17 0 —a

---

c:windowsativpsrm.bin
2008-11-03 06:16 . 2008-11-03 06:16 d

---

c:program filesCamera Assistant Software for Toshiba
2008-11-03 06:16 . 2007-12-17 11:45 18,432 —a

---

c:windowsSystem32driversUVCFTR_S.SYS
2008-11-03 06:14 . 2008-11-03 06:14 d

---

c:windowsSystem32RUS
2008-11-03 06:14 . 2008-11-03 06:15 d

---

c:program filesATI Technologies
2008-11-03 06:14 . 2008-11-03 06:14 d

---

c:program filesATI
2008-11-03 06:14 . 2007-10-24 09:59 936,472 —a

---

c:windowsSystem32imsmudlg.exe
2008-11-03 06:14 . 2007-09-29 23:03 308,248 —a

---

c:windowsSystem32driversiaStor.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-28 15:11 319,456 —-a-w c:windowsDIFxAPI.dll
2008-11-23 17:13

---

d

---

w c:program filesMcAfee
2008-11-12 06:08

---

d

---

w c:programdataMicrosoft Help
2008-11-08 18:48

---

d—h—w c:program filesInstallShield Installation Information
2008-11-08 15:47

---

d

---

w c:program filesPicasa2
2008-11-07 19:27

---

d

---

w c:program filesMSBuild
2008-11-03 03:28

---

d-sh—w c:programdataШаблоны
2008-11-03 03:28

---

d-sh—w c:programdataРабочий стол
2008-11-03 03:28

---

d-sh—w c:programdataГлавное меню
2008-11-03 03:28

---

d-sh—w c:programdataИзбранное
2008-11-03 03:28

---

d-sh—w c:programdataДокументы
2008-11-03 03:20

---

d

---

w c:program filesToshiba
2008-11-03 03:14

---

d

---

w c:program filesIntel
2008-10-02 03:49 827,392 —-a-w c:windowsSystem32wininet.dll
2008-09-30 13:43 1,286,152 —-a-w c:windowsSystem32msxml4.dll
2008-09-18 05:09 3,601,464 —-a-w c:windowsSystem32ntkrnlpa.exe
2008-09-18 05:09 3,549,240 —-a-w c:windowsSystem32ntoskrnl.exe
2008-09-18 02:16 2,032,640 —-a-w c:windowsSystem32win32k.sys
2008-01-21 02:43 174 —sha-w c:program filesdesktop.ini
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE~Browser Helper Objects{6354DD1E-36A2-446B-BDAF-81BCEEBA3784}]
2008-11-22 19:26 317952 —a

---

c:windowssystem32ytllib.dll

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«ehTray.exe»=»c:windowsehomeehTray.exe» [2008-01-21 125952]
«QIP.Online»=»c:program filesQIP.Onlineqiponline.exe» [2008-10-28 3345408]
«WMPNSCFG»=»c:program filesWindows Media PlayerWMPNSCFG.exe» [2008-01-21 202240]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«SunJavaUpdateSched»=»c:program filesJavajre1.6.0_03binjusched.exe» [2007-09-25 132496]
«SynTPEnh»=»c:program filesSynapticsSynTPSynTPEnh.exe» [2007-12-06 1029416]
«ITSecMng»=»c:program filesTOSHIBABluetooth Toshiba StackItSecMng.exe» [2007-09-28 75136]
«mcagent_exe»=»c:program filesMcAfee.comAgentmcagent.exe» [2007-08-03 582992]
«Adobe Reader Speed Launcher»=»c:program filesAdobeReader 8.0ReaderReader_sl.exe» [2007-05-11 40048]
«topi»=»c:program filesTOSHIBAToshiba Online Product Informationtopi.exe» [2007-07-10 581632]
«Google Desktop Search»=»c:program filesGoogleGoogle Desktop SearchGoogleDesktop.exe» [2008-04-23 1836544]
«Desktop SMS»=»c:program filesIDMDesktop SMSDesktopSMS.exe» [2007-06-18 1507328]
«StartCCC»=»c:program filesATI TechnologiesATI.ACECore-StaticCLIStart.exe» [2006-11-10 90112]
«Camera Assistant Software»=»c:program filesCamera Assistant Software for Toshibatraybar.exe» [2007-10-25 413696]
«TPwrMain»=»c:program filesTOSHIBAPower SaverTPwrMain.EXE» [2008-01-17 431456]
«HSON»=»c:program filesTOSHIBATBSHSON.exe» [2007-10-31 54608]
«SmoothView»=»c:program filesToshibaSmoothViewSmoothView.exe» [2008-01-25 509816]
«00TCrdMain»=»c:program filesTOSHIBAFlashCardsTCrdMain.exe» [2008-01-22 712704]
«Toshiba Registration»=»c:program filesToshibaRegistrationToshibaRegistration.exe» [2007-05-04 571024]
«MAgent»=»c:program filesMail.RuAgentMAgent.exe» [2008-11-04 4412920]
«GrooveMonitor»=»c:program filesMicrosoft OfficeOffice12GrooveMonitor.exe» [2007-08-24 33648]
«HP Software Update»=»c:program filesHPHP Software UpdateHPWuSchd2.exe» [2007-03-11 49152]
«avgnt»=»c:program filesAviraAntiVir PersonalEdition Classicavgnt.exe» [2008-06-12 266497]
«RtHDVCpl»=»RtHDVCpl.exe» [2008-01-29 c:windowsRtHDVCpl.exe]
«NDSTray.exe»=»NDSTray.exe» [BU]

[HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«Picasa Media Detector»=»c:program filesPicasa2PicasaMediaDetector.exe» [2008-02-26 443968]

c:users1AppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
TRDCReminder.lnk — c:program filesToshibaTRDCReminderTRDCReminder.exe [2008-03-05 393216]
‚л१Є  нЄа ­  Ё Їа®Ја ¬¬  § ЇгбЄ  ¤«п OneNote 2007.lnk — c:program filesMicrosoft OfficeOffice12ONENOTEM.EXE [2007-12-07 101440]
€­бва㬥­в Їа®ўҐаЄЁ ­®бЁвҐ«п Picture Motion Browser.lnk — c:program filesSonySony Picture UtilityPMBCoreSPUVolumeWatcher.exe [2008-11-08 385024]

c:programdataMicrosoftWindowsStart MenuProgramsStartup
Bluetooth Manager.lnk — c:program filesToshibaBluetooth Toshiba StackTosBtMng.exe [2008-01-25 2938184]
HP Digital Imaging Monitor.lnk — c:program filesHPDigital Imagingbinhpqtra08.exe [2007-03-11 210520]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem]
«EnableUIADesktopToggle»= 0 (0x0)

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwindows]
«AppInit_DLLs»=c:progra~1GoogleGOOGLE~3GOEC62~1.DLL

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversiondrivers32]
«msacm.dvacm»= c:progra~1COMMON~1ULEADS~1viodvacm.acm
«msacm.avis»= ff_acm.acm

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoringMcAfeeAntiSpyware]
«DisableMonitoring»=dword:00000001

[HKLM~servicessharedaccessparametersfirewallpolicyDomainProfile]
«EnableFirewall»= 0 (0x0)

[HKLM~servicessharedaccessparametersfirewallpolicyFirewallRules]
«{F8200704-4DED-49E3-ABB1-D91E8A0C5F21}»= Profile=Private|Profile=Public|c:program filesCommon FilesMcafeeMNAMcNaSvc.exe:McAfee Network Agent
«{30124DDC-7D80-4AF0-A092-8FA5BB28985E}»= UDP:c:program filesMicrosoft OfficeOffice12ONENOTE.EXE:Microsoft Office OneNote
«{5DE4FBA0-C65C-46D6-B2A8-B5FEA7C725B0}»= TCP:c:program filesMicrosoft OfficeOffice12ONENOTE.EXE:Microsoft Office OneNote
«{C5421E75-FBA6-4A9A-B82E-D57A54BD15DE}»= TCP:6004|c:program filesMicrosoft OfficeOffice12outlook.exe:Microsoft Office Outlook
«{3F91A268-3C6A-4AAD-A6F6-3CDE526AD31A}»= UDP:c:program filesMicrosoft OfficeOffice12GROOVE.EXE:Microsoft Office Groove
«{F57D3DA3-70A5-465A-92FC-DC89BA708829}»= TCP:c:program filesMicrosoft OfficeOffice12GROOVE.EXE:Microsoft Office Groove

[HKLM~servicessharedaccessparametersfirewallpolicyPublicProfile]
«EnableFirewall»= 0 (0x0)

[HKLM~servicessharedaccessparametersfirewallpolicyStandardProfile]
«EnableFirewall»= 0 (0x0)

R2 ConfigFree Service;ConfigFree Service;»c:program filesTOSHIBAConfigFreeCFSvcs.exe» [2007-12-25 40960]
R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;»c:program filesTOSHIBASMARTLogServiceTosIPCSrv.exe» [2007-12-03 126976]
R3 atikmdag;atikmdag;c:windowssystem32DRIVERSatikmdag.sys [2008-04-23 3483648]
R3 FwLnk;FwLnk Driver;c:windowssystem32DRIVERSFwLnk.sys [2008-04-23 7168]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionsvchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the ‘Scheduled Tasks’ folder

2008-05-09 c:windowsTasksMcDefragTask.job
— c:progra~1mcafeemqcQcConsol.exe [2007-12-04 13:32]

2008-11-30 c:windowsTasksMcQcTask.job
— c:progra~1mcafeemqcQcConsol.exe [2007-12-04 13:32]
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-02 22:46:17
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-12-02 22:47:43
ComboFix-quarantined-files.txt 2008-12-02 19:47:40

Pre-Run: 82,672,947,200 байт свободно
Post-Run: 82,677,305,344 байт свободно

265 — E O F — 2008-11-28 14:52:20

[Admin]

Здравствуйте, добро пожаловать на Spyware-ru форум.

Я выделил ваш вопрос в отдельную тему, пожалуйста отвечайте тоже в ней.
Откройте блокнот и вставьте в него следующий текст:

Registry::

[-HKEY_LOCAL_MACHINE~Browser Helper Objects{6354DD1E-36A2-446B-BDAF-81BCEEBA3784}]



File::

c:windowssystem32ytllib.dll

Запишите получившийся файл на ваш рабочий стол под именем CFScript
Далее перетащите получившийся файл на иконку Combofix, как показано на картинке ниже.

Сombofix запуститься и выполнит процедуры описанные в созданном нами файле.
По результатам работы Combofix будет создан новый лог, его и вставьте в свой следующий ответ.
И конечно-же проверьте InternetExplorer в работе.

[Автор]

Сообщения