Созданные ответы форума
-
Сообщения
-
Да, спасибо, надеюсь получилось удалить. Я очень вам благодарен, теперь нет ни каких проблем. СПАСИБО!!!
Valeri, ОГРОМНОЕ ВАМ СПАСИБО!!! Все получилось! Наконец-то избавился от этой проги. Как мне повезло, что я попал на Ваш сайт. Еще раз огромное Вам спасибо!
ComboFix 08-10-19.04 — skif 2008-10-20 5:03:09.1 — NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1251.1.1049.18.174 [GMT -3:00]
Running from: F:ComboFix.exe
* Created a new restore point
* Resident AV is activeWARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.C:WINDOWSIE4 Error Log.txt
C:WINDOWSsystem32dao350.dll.
((((((((((((((((((((((((( Files Created from 2008-09-20 to 2008-10-20 )))))))))))))))))))))))))))))))
.2008-10-19 22:00 . 2008-10-19 22:00
d
C:Program FilesTrend Micro
2008-10-19 14:03 . 2008-10-19 14:03d
C:WINDOWSsystem32Kaspersky Lab
2008-10-19 14:03 . 2008-10-19 14:03d
C:WINDOWSLastGood
2008-10-19 14:03 . 2008-10-19 14:03d
C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2008-10-19 01:01 . 2008-10-19 01:27d
C:WINDOWSsystem32CatRoot_bak
2008-10-18 22:36 . 2008-10-18 22:36d
C:Program FilesMalwarebytes’ Anti-Malware
2008-10-18 22:36 . 2008-10-18 22:36d
C:Documents and SettingsskifApplication DataMalwarebytes
2008-10-18 22:36 . 2008-10-18 22:36d
C:Documents and SettingsAll UsersApplication DataMalwarebytes
2008-10-18 22:36 . 2008-10-16 20:25 38,496 —a
C:WINDOWSsystem32driversmbamswissarmy.sys
2008-10-18 22:36 . 2008-10-16 20:25 15,504 —a
C:WINDOWSsystem32driversmbam.sys
2008-10-18 22:29 . 2008-10-18 22:29d
C:Program FilesVS Revo Group
2008-10-18 19:36 . 2004-05-14 16:53 462,848 —a
C:WINDOWSsystem32ltkrn13n.dll
2008-10-18 19:36 . 2004-05-14 16:53 450,560 —a
C:WINDOWSsystem32ltimg13n.dll
2008-10-18 19:36 . 2004-05-14 16:53 401,408 —a
C:WINDOWSsystem32lfcmp13n.dll
2008-10-18 19:36 . 2004-05-14 16:53 299,008 —a
C:WINDOWSsystem32ltdis13n.dll
2008-10-18 19:36 . 2004-01-12 02:09 206,336 —a
C:WINDOWSsystem32ltefx13n.dll
2008-10-18 19:36 . 2004-05-14 16:53 163,840 —a
C:WINDOWSsystem32ltfil13n.dll
2008-10-18 19:36 . 2003-11-04 15:10 69,632 —a
C:WINDOWSsystem32lfgif13n.dll
2008-10-18 19:36 . 2004-05-14 16:53 57,344 —a
C:WINDOWSsystem32lfbmp13n.dll
2008-10-18 16:02 . 2008-10-18 16:02d
C:Program FilesSun
2008-10-18 14:46 . 2008-10-18 14:47d
C:Program FilesCommon FilesAdobe
2008-10-18 14:38 . 2008-10-18 14:38d
C:Documents and SettingsskifApplication DataApple Computer
2008-10-18 14:35 . 2008-10-19 04:36 54,156 —ah
C:WINDOWSQTFont.qfn
2008-10-18 14:35 . 2008-10-18 14:35 1,409 —a
C:WINDOWSQTFont.for
2008-10-18 12:38 . 2008-10-18 12:39d
C:Program FilesQuickTime
2008-10-18 12:38 . 2008-10-18 12:38d
C:Program FilesApple Software Update
2008-10-18 12:38 . 2008-10-18 12:38d
C:Documents and SettingsAll UsersApplication DataApple Computer
2008-10-18 12:38 . 2008-10-18 12:38d
C:Documents and SettingsAll UsersApplication DataApple
2008-10-18 12:37 . 2008-10-18 14:31 9,307 —a
C:WINDOWSvpd.properties
2008-10-18 12:34 . 2008-10-18 14:30d
C:Program FilesGraphisoft
2008-10-18 12:30 . 2008-06-10 02:32 73,728 —a
C:WINDOWSsystem32javacpl.cpl
2008-10-18 10:30 . 2008-10-18 10:30d
C:WINDOWSSun
2008-10-18 10:29 . 2008-10-18 16:02d
C:Program FilesJava
2008-10-18 10:27 . 2008-10-18 10:27d
C:Program FilesCommon FilesJava
2008-10-18 09:52 . 2008-10-18 09:53d
C:Program FilesMyCentria
2008-10-17 21:05 . 2008-10-17 21:05d
C:Documents and SettingsAll UsersApplication DataSolt Lake Software
2008-10-17 18:57 . 2008-10-17 18:57d
C:Program FilesWindows Media Connect 2
2008-10-17 18:55 . 2008-10-17 18:55d
C:WINDOWSsystem32LogFiles
2008-10-17 18:55 . 2008-10-17 18:56d
C:WINDOWSsystem32driversUMDF
2008-10-17 17:50 . 2008-10-17 17:50d
C:Documents and SettingsskifApplication DataMedia Player Classic
2008-10-16 13:38 . 2008-10-16 13:39d
C:Program FilesRhapsody
2008-10-15 11:37 . 2008-08-14 10:47 2,182,144
c— C:WINDOWSsystem32dllcachentoskrnl.exe
2008-10-15 11:37 . 2008-08-14 10:47 2,138,112
c— C:WINDOWSsystem32dllcachentkrnlmp.exe
2008-10-15 11:37 . 2008-08-14 10:47 2,059,520
c— C:WINDOWSsystem32dllcachentkrnlpa.exe
2008-10-15 11:37 . 2008-08-14 10:47 2,017,792
c— C:WINDOWSsystem32dllcachentkrpamp.exe
2008-10-14 06:53 . 2008-06-14 14:59 272,512
C:WINDOWSsystem32driversbthport.sys
2008-10-14 06:53 . 2008-06-14 14:59 272,512
c— C:WINDOWSsystem32dllcachebthport.sys
2008-10-14 00:15 . 2008-10-15 23:28d—h
C:WINDOWS$hf_mig$
2008-10-12 15:39 . 2008-10-12 15:39d
C:Program FilesOntrack
2008-10-11 20:30 . 2008-10-11 20:30d—s—- C:Documents and SettingsskifUserData
2008-10-11 20:10 . 2008-10-11 20:10d
C:Documents and SettingsskifContacts.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-18 12:55
d
w C:Program FilesMSN Messenger
2008-10-17 23:20
d—h—w C:Program FilesInstallShield Installation Information
2008-10-17 20:37
d
w C:Program FilesK-Lite Codec Pack
2008-10-11 23:18
d
w C:Program FilesSkype
2008-10-11 23:18
d
w C:Program FilesReal
2008-10-11 23:18
d
w C:Program FilesCommon FilesSkype
2008-10-11 23:18
d
w C:Documents and SettingsAll UsersApplication DataSkype
2008-10-11 23:08
d
w C:Documents and SettingsskifApplication DataESET
2008-10-11 23:06
d
w C:Program FilesSupport Tools
2008-10-11 23:06
d
w C:Program FilesESET
2008-10-11 23:06
d
w C:Documents and SettingsAll UsersApplication DataESET
2008-10-11 23:00
d
w C:Program FilesMicrosoft.NET
2008-10-11 22:59
d
w C:Program FilesMicrosoft Works
2008-10-11 22:50
d
w C:Program FilesGoogle
2008-10-11 22:38 315,392 —-a-w C:WINDOWSHideWin.exe
2008-10-11 22:38
d
w C:Program FilesRealtek
2008-10-11 22:37
d
w C:Program FilesNVIDIA Corporation
2008-10-11 22:36
d
w C:Documents and SettingsskifApplication DataInstallShield
2008-10-11 22:28
d
w C:Program Filesmicrosoft frontpage
2008-10-11 22:04
d
w C:Documents and SettingsskifApplication DataSkype
2008-10-11 21:02
d
w C:Program FilesSyncrosoft
2008-10-11 20:58
d
w C:Program FilesCommon FilesInstallShield
2008-10-11 20:14
d
w C:Program FilesDAEMON Tools Lite
2008-10-11 19:50
d
w C:Program Files7-Zip
2008-10-11 13:10 717,296 —-a-w C:WINDOWSsystem32driverssptd.sys
2008-10-11 13:10
d
w C:Documents and SettingsskifApplication DataDAEMON Tools
2008-10-11 12:58
d
w C:Documents and SettingsskifApplication DatapdfMachine
2008-09-15 15:40 1,846,144 —-a-w C:WINDOWSsystem32win32k.sys
2008-08-28 10:04 333,056 —-a-w C:WINDOWSsystem32driverssrv.sys
2008-08-20 05:37 659,968 —-a-w C:WINDOWSsystem32wininet.dll
2008-08-14 13:47 2,182,144 —-a-w C:WINDOWSsystem32ntoskrnl.exe
2008-08-14 13:47 2,059,520 —-a-w C:WINDOWSsystem32ntkrnlpa.exe
2008-07-25 08:34 81,920 —-a-w C:WINDOWSsystem32dpl100.dll
2008-07-25 08:34 683,520 —-a-w C:WINDOWSsystem32divx.dll
2008-07-23 16:50 3,596,288 —-a-w C:WINDOWSsystem32qt-dx331.dll
.((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»C:WINDOWSsystem32ctfmon.exe» [2004-08-18 15360]
«MsnMsgr»=»C:Program FilesMSN MessengerMsnMsgr.Exe» [2007-01-19 5674352]
«DAEMON Tools Lite»=»C:Program FilesDAEMON Tools Litedaemon.exe» [2008-08-08 490952]
«MSMSGS»=»C:Program FilesMessengermsmsgs.exe» [2004-08-17 1667584][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=»C:WINDOWSsystem32NvCpl.dll» [2006-10-31 7634944]
«NvMediaCenter»=»C:WINDOWSsystem32NvMcTray.dll» [2006-10-31 86016]
«egui»=»C:Program FilesESETESET Smart Securityegui.exe» [2008-06-10 1447168]
«SunJavaUpdateSched»=»C:Program FilesJavajre1.6.0_07binjusched.exe» [2008-06-10 144784]
«QuickTime Task»=»C:Program FilesQuickTimeqttask.exe» [2007-10-19 286720]
«Adobe Reader Speed Launcher»=»C:Program FilesAdobeReader 9.0ReaderReader_sl.exe» [2008-06-12 34672]
«nwiz»=»nwiz.exe» [2006-10-31 C:WINDOWSsystem32nwiz.exe]
«SkyTel»=»SkyTel.EXE» [2007-10-11 C:WINDOWSSkyTel.exe]
«RTHDCPL»=»RTHDCPL.EXE» [2007-10-16 C:WINDOWSRTHDCPL.exe][HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»C:WINDOWSsystem32CTFMON.EXE» [2004-08-18 15360][HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«%windir%\system32\sessmgr.exe»=
«C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe»=
«C:\Program Files\Skype\Phone\Skype.exe»=
«C:\Program Files\MSN Messenger\msnmsgr.exe»=
«C:\Program Files\MSN Messenger\livecall.exe»=R1 BIOS;BIOS;C:WINDOWSsystem32driversBIOS.sys [2005-03-16 13696]
R3 mssmbios;Драйвер Microsoft System Management BIOS;C:WINDOWSsystem32DRIVERSmssmbios.sys [2004-08-18 15488]*Newly Created Service* — PROCEXP90
.
Contents of the ‘Scheduled Tasks’ folder2008-10-18 C:WINDOWSTasksAppleSoftwareUpdate.job
— C:Program FilesApple Software UpdateSoftwareUpdate.exe [2007-08-29 14:57]
.
.
Supplementary Scan
.
FireFox -: Profile — C:Documents and SettingsskifApplication DataMozillaFirefoxProfilesdjss63p5.default
FF -: plugin — C:Program FilesRealRhapsodyPlayerEnginenprhapengine.dll
.**************************************************************************
catchme 0.3.1361 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-20 05:07:37
Windows 5.1.2600 Service Pack 2 NTFSscanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0**************************************************************************
.
Completion time: 2008-10-20 5:08:42
ComboFix-quarantined-files.txt 2008-10-20 08:08:34Pre-Run: 20 867 514 368 байт свободно
Post-Run: 22,271,934,464 байт свободно161 — E O F — 2008-10-18 05:16:15
Надеюсь всё сделал так как надо )
