Созданные ответы форума
-
Сообщения
-
я установил ещё один ХР..у меня получается 2 операционки стоит..одна работает,всё хорошо,вторая нет.
Добрый вечер ещё раз!
Если отключать сеть остаётся та же проблема
Было и раньше но не так постоянно,а теперь можно скказать каждую минуту-пять минут.Из серии в 30 минут сетевой игры,минут 10 я в пролёте в общем где то)
Игы 2..Одна сетевая через Инет,вторая просто на жёстком диске….и тож самое((((
Спасибо!Ура1111 всё пропало!!!! спасибо огромное Вам Valerij!!!!
Спасибо за ваш сайт и за Вашу помощь!!!ComboFix 09-02-05.01 — 101 2009-02-05 22:37:28.11 — NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1251.1.1049.18.1023.550 [GMT 3:00]
Running from: d:documents and settings101Рабочий столComboFix.exe
Command switches used :: d:documents and settings101Рабочий столCFScript.txt
AV: avast! antivirus 4.8.1296 [VPS 090205-0] *On-access scanning disabled* (Updated)
AV: Panda Antivirus Pro 2009 *On-access scanning disabled* (Updated)
* Created a new restore pointWARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
FILE ::
d:documents and settingsAll UsersApplication Datachmlib.dll
.((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.d:documents and settings101Local SettingsTemporary Internet Files0EB9F12C_6E6B_4c03_AEBA_8C04CFA98AA4.jpg
d:documents and settings101Local SettingsTemporary Internet Files15913497_F86C_4218_8817_F50940D1E1B2.jpg
d:documents and settings101Local SettingsTemporary Internet Files29887DDE_00B9_4011_9CF7_59511F1ECC1B.jpg
d:documents and settings101Local SettingsTemporary Internet Files35B7DFFA_884F_4fbc_8E60_DA601BDC7BF7.gif
d:documents and settings101Local SettingsTemporary Internet Files362FD6E8_8CDA_4c2a_A8AA-BDA22B321711.gif
d:documents and settings101Local SettingsTemporary Internet Files3DF04940_9866_4241_A998_0CDDFAFD147A.jpg
d:documents and settings101Local SettingsTemporary Internet Files426500D7_0FF3_426c_828D_065DBAEA0581.gif
d:documents and settings101Local SettingsTemporary Internet Files478BD4AE_2691_438d_BDCA_3485DC022700.gif
d:documents and settings101Local SettingsTemporary Internet Files5C6C645F_BAA8_4149_BFEB_2031230FF0FD.jpg
d:documents and settings101Local SettingsTemporary Internet Files61EA7D69_19D4_421a_A899_0DF4D58CD119.gif
d:documents and settings101Local SettingsTemporary Internet Files777FDAFB_83CF_4960_AA71_4E5D7BCD8E57.gif
d:documents and settings101Local SettingsTemporary Internet Files8DA878D5_E80B_4721_B75A_17EFFAF1A700.gif
d:documents and settings101Local SettingsTemporary Internet Files98F6DF79_7171_452d_9C26_C0193E12DBDF.gif
d:documents and settings101Local SettingsTemporary Internet FilesA2B240D6_0386_419e_91C5_3F7D90437CD0.gif
d:documents and settings101Local SettingsTemporary Internet FilesC75CEF8D_5AF4_4563_8594_C45A45E14E63.gif
d:documents and settings101Local SettingsTemporary Internet FilesE21285C1_40E6_435c_A69F_3387E7BD89CB.jpg
d:documents and settings101Local SettingsTemporary Internet FilesE9A4D648_ED73_4ea7_88B2_18332DBA4F3E.gif
d:documents and settingsAll UsersApplication Datachmlib.dll.
((((((((((((((((((((((((( Files Created from 2009-01-05 to 2009-02-05 )))))))))))))))))))))))))))))))
.2009-02-04 21:56 . 2009-02-04 21:56
d
d:program filesMSXML 4.0
2009-02-03 23:10 . 2009-02-03 23:10d
d:program filesAlwil Software
2009-02-03 23:09 . 2009-02-03 23:09 30,394,824 —a
D:setuprus.exe
2009-02-03 22:49 . 2009-02-05 21:15d
d:documents and settings101Application DataMra
2009-02-03 22:48 . 2009-02-03 22:48d
d:program filesMail.Ru
2009-02-03 22:47 . 2009-02-03 22:47 5,088,952 —a
D:magentsetup.exe
2009-02-03 21:58 . 2009-02-05 19:14 13,880 —a
d:windowssystem32driversCOMFiltr.sys
2009-02-03 21:56 . 2009-02-03 21:56d
D:_OTMoveIt
2009-02-03 20:31 . 2009-02-03 20:31d
d:documents and settings101Application DataSamsung
2009-02-03 20:28 . 2006-05-03 22:53 174,592 —a
d:windowssystem32framedyn.dll
2009-02-03 20:27 . 2006-07-24 16:05 5,632 —a
d:windowssystem32driversStarOpen.sys
2009-02-03 20:22 . 2009-02-03 20:28d
d:windowssystem32Samsung_USB_Drivers
2009-02-03 20:22 . 2009-02-03 20:22d
d:program filesSamsung
2009-02-03 20:22 . 2005-08-30 01:49 94,000 —a
d:windowssystem32driversssm_mdm.sys
2009-02-03 20:22 . 2005-08-30 01:47 58,320 —a
d:windowssystem32driversssm_bus.sys
2009-02-03 20:22 . 2005-08-30 01:49 8,336 —a
d:windowssystem32driversssm_mdfl.sys
2009-02-03 20:22 . 2005-08-30 01:49 6,176 —a
d:windowssystem32driversssm_cmnt.sys
2009-02-03 20:22 . 2005-08-30 01:49 6,176 —a
d:windowssystem32driversssm_cm.sys
2009-02-03 20:22 . 2005-08-30 01:47 5,840 —a
d:windowssystem32driversssm_whnt.sys
2009-02-03 20:22 . 2005-08-30 01:47 5,840 —a
d:windowssystem32driversssm_wh.sys
2009-02-03 20:22 . 2005-08-28 20:51 766 —a
d:windowssystem32Uninstall.ico
2009-02-03 01:34 . 2009-02-04 11:11d
d:program filesSpybot — Search & Destroy
2009-02-03 01:34 . 2009-02-04 11:12d
d:documents and settingsAll UsersApplication DataSpybot — Search & Destroy
2009-02-03 01:33 . 2009-02-03 01:33 16,409,960 —a
D:spybotsd162.exe
2009-02-03 00:18 . 2009-02-03 00:18 410,984 —a
d:windowssystem32deploytk.dll
2009-02-03 00:18 . 2009-02-03 00:18 73,728 —a
d:windowssystem32javacpl.cpl
2009-02-03 00:17 . 2009-02-03 00:17d
d:program filesJava
2009-02-03 00:17 . 2009-02-03 00:17 16,278,936 —a
D:jre-6u12-windows-i586-p.exe
2009-02-02 13:16 . 2009-02-02 16:05d
d:windowssystem32CatRoot_bak
2009-02-02 13:13 . 2008-06-14 20:59 272,512
d:windowssystem32driversbthport.sys
2009-02-02 13:13 . 2008-06-14 20:59 272,512
c— d:windowssystem32dllcachebthport.sys
2009-02-02 13:12 . 2009-02-02 13:12d
d:documents and settingsAll UsersApplication DataPanda Security
2009-02-02 13:12 . 2009-02-02 13:12d
d:documents and settings101Application DataPanda Security
2009-02-02 13:11 . 2008-08-14 16:47 2,017,792
c— d:windowssystem32dllcachentkrpamp.exe
2009-02-02 13:10 . 2009-02-02 13:10d
d:program filesCommon FilesPanda Security
2009-02-02 13:10 . 2009-02-02 13:10 81,751,488 —a
D:AP09promo.exe
2009-02-02 13:10 . 2008-10-24 14:10 453,632
c— d:windowssystem32dllcachemrxsmb.sys
2009-02-02 13:10 . 2008-02-07 12:03 179,640 —a
d:windowssystem32driversPavProc.sys
2009-02-02 13:10 . 2008-03-04 15:59 41,144 —a
d:windowssystem32driversShlDrv51.sys
2009-02-02 13:10 . 2008-06-19 17:24 28,544 —a
d:windowssystem32driverspavboot.sys
2009-02-02 13:00 . 2009-02-02 19:48d—h
d:windows$hf_mig$
2009-02-02 13:00 . 2005-02-25 06:36 22,752 —a
d:windowssystem32spupdsvc.exe
2009-01-30 18:32 . 2009-01-30 18:32d
d:documents and settings101Application DataMedia Player Classic
2009-01-30 18:31 . 2009-01-30 18:31d
d:program filesK-Lite Codec Pack
2009-01-30 18:31 . 2007-01-30 06:03 3,596,288 —a
d:windowssystem32qt-dx331.dll
2009-01-30 18:31 . 2007-01-20 21:26 1,565,480 —a
d:windowssystem32wmv9vcm.dll
2009-01-30 18:31 . 2007-01-30 06:03 1,044,480 —a
d:windowssystem32libdivx.dll
2009-01-30 18:31 . 2006-11-01 14:52 765,952 —a
d:windowssystem32xvidcore.dll
2009-01-30 18:31 . 2007-02-01 05:56 639,066 —a
d:windowssystem32divx.dll
2009-01-30 18:31 . 2004-01-25 18:18 217,088 —a
d:windowssystem32yv12vfw.dll
2009-01-30 18:31 . 2007-01-30 06:03 200,704 —a
d:windowssystem32ssldivx.dll
2009-01-30 18:31 . 2007-01-30 05:56 196,608 —a
d:windowssystem32dtu100.dll
2009-01-30 18:31 . 2006-11-01 14:54 180,224 —a
d:windowssystem32xvidvfw.dll
2009-01-30 18:31 . 2006-05-13 23:16 118,784 —a
d:windowssystem32ac3acm.acm
2009-01-30 18:31 . 2007-01-30 05:56 73,728 —a
d:windowssystem32dpl100.dll
2009-01-30 18:31 . 2005-02-24 18:56 547 —a
d:windowssystem32ff_vfw.dll.manifest
2009-01-30 12:32 . 2009-02-02 12:58d
d:program filesAhead
2009-01-30 12:03 . 2009-02-04 15:28d
D:кино
2009-01-25 15:41 . 2009-01-25 15:51 347 —a
d:windowsCoDUO.INI
2009-01-25 15:34 . 2009-01-25 15:34 141 —a
d:windowsRomeTW.ini
2009-01-25 15:30 . 2009-01-25 15:30d
d:program files1C
2009-01-25 14:52 . 2009-02-05 16:34d
d:program filesCall of Duty
2009-01-25 14:50 . 2009-01-25 15:26 745 —a
d:windowsCoD.INI
2009-01-21 14:49 . 2009-01-27 12:51d
D:ва
2009-01-21 14:37 . 2001-08-18 06:36 8,704 —a
d:windowssystem32kbdjpn.dll
2009-01-21 14:37 . 2001-08-18 06:36 8,704 —a—c— d:windowssystem32dllcachekbdjpn.dll
2009-01-21 14:37 . 2001-08-18 06:36 8,192 —a
d:windowssystem32kbdkor.dll
2009-01-21 14:37 . 2001-08-18 06:36 8,192 —a—c— d:windowssystem32dllcachekbdkor.dll
2009-01-21 14:37 . 2001-08-17 22:55 6,144 —a
d:windowssystem32kbd106.dll
2009-01-21 14:37 . 2001-08-17 22:55 6,144 —a
d:windowssystem32kbd101c.dll
2009-01-21 14:37 . 2001-08-17 22:55 6,144 —a
d:windowssystem32kbd101b.dll
2009-01-21 14:37 . 2001-08-17 22:55 6,144 —a—c— d:windowssystem32dllcachekbd106.dll
2009-01-21 14:37 . 2001-08-17 22:55 6,144 —a—c— d:windowssystem32dllcachekbd101c.dll
2009-01-21 14:37 . 2001-08-17 22:55 6,144 —a—c— d:windowssystem32dllcachekbd101b.dll
2009-01-21 14:37 . 2001-08-17 22:55 5,632 —a
d:windowssystem32kbd103.dll
2009-01-21 14:37 . 2001-08-17 22:55 5,632 —a—c— d:windowssystem32dllcachekbd103.dll
2009-01-18 22:08 . 2009-01-18 22:08d
d:program filesSteam
2009-01-18 22:08 . 2009-01-18 22:08d
d:program filesCounter-Strike
2009-01-18 22:06 . 2009-01-18 22:06d
D:games
2009-01-18 21:50 . 2009-02-04 17:03d
d:program filesCounter-Strike 1.6
2009-01-18 21:04 . 2009-01-18 21:04d
d:program filesAbital.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-03 17:27
d—h—w d:program filesInstallShield Installation Information
2009-02-02 10:12
d
w d:program filesPanda Security
2008-12-26 09:37
d
w d:documents and settings101Application DataAdobeUM
2008-12-26 09:35
d
w d:program filesCommon FilesAdobe
2008-12-25 14:10
d
w d:program filesRealtek Sound Manager
2008-12-25 14:10
d
w d:program filesRealtek AC97
2008-12-25 14:10
d
w d:program filesAvRack
2008-12-25 14:09
d
w d:program filesCommon FilesInstallShield
2008-12-25 11:13
d
w d:program filesCommon FilesSony Shared
2008-12-25 10:47
d
w d:documents and settings101Application Datarambler.ru
2008-12-25 10:47
d
w d:documents and settings101Application DataICQ
2008-12-25 10:35
d
w d:documents and settings101Application DataQIP.Online
2008-12-25 10:19
d
w d:documents and settings101Application DataQIP
2008-12-25 10:18
d
w d:program filesQIP
2008-12-24 20:39 682,280 —-a-w d:windowssystem32pbsvc.exe
2008-12-24 20:39 66,872 —-a-w d:windowssystem32PnkBstrA.exe
2008-12-24 20:39 22,328 —-a-w d:windowssystem32driversPnkBstrK.sys
2008-12-24 20:39 22,328 —-a-w d:documents and settings101Application DataPnkBstrK.sys
2008-12-24 20:39 107,832 —-a-w d:windowssystem32PnkBstrB.exe
2008-12-24 19:48
d
w d:documents and settingsAll UsersApplication DataBackup
2008-12-24 12:28
d
w d:program filesmicrosoft frontpage
2008-12-11 11:57 333,184 —-a-w d:windowssystem32driverssrv.sys
2008-12-01 20:52 425,984 —-a-w d:windowssystem32ATIDEMGX.dll
2008-12-01 20:51 318,464 —-a-w d:windowssystem32ati2dvag.dll
2008-12-01 20:46 11,304,960 —-a-w d:windowssystem32atioglxx.dll
2008-12-01 20:41 188,416 —-a-w d:windowssystem32atipdlxx.dll
2008-12-01 20:40 43,520 —-a-w d:windowssystem32ati2edxx.dll
2008-12-01 20:40 26,112 —-a-w d:windowssystem32Ati2mdxx.exe
2008-12-01 20:40 147,456 —-a-w d:windowssystem32Oemdspif.dll
2008-12-01 20:40 143,360 —-a-w d:windowssystem32ati2evxx.dll
2008-12-01 20:38 598,016 —-a-w d:windowssystem32ati2evxx.exe
2008-12-01 20:37 53,248 —-a-w d:windowssystem32ATIDDC.DLL
2008-12-01 20:27 4,120,384 —-a-w d:windowssystem32ati3duag.dll
2008-12-01 20:19 307,200 —-a-w d:windowssystem32atiiiexx.dll
2008-12-01 20:11 2,495,360 —-a-w d:windowssystem32ativvaxx.dll
2008-12-01 19:57 48,640 —-a-w d:windowssystem32amdpcom32.dll
2008-12-01 19:53 45,056 —-a-w d:windowssystem32amdcalrt.dll
2008-12-01 19:53 45,056 —-a-w d:windowssystem32amdcalcl.dll
2008-12-01 19:53 401,408 —-a-w d:windowssystem32atikvmag.dll
2008-12-01 19:52 86,016 —-a-w d:windowssystem32atiadlxx.dll
2008-12-01 19:52 17,408 —-a-w d:windowssystem32atitvo32.dll
2008-12-01 19:50 3,252,224 —-a-w d:windowssystem32Amdcaldd.dll
2008-12-01 19:50 286,720 —-a-w d:windowssystem32atiok3x2.dll
2008-12-01 19:45 577,536 —-a-w d:windowssystem32ati2cqag.dll
2008-12-01 11:35 593,920
w d:windowssystem32ati2sgag.exe
.
Sigcheck
2008-04-14 19:11 509440 b3b5d5855127e240c88451030aaee76e d:windowsSoftwareDistributionDownloada50daa009f8a7e7bb00fe145d2709bd7winlogon.exe
2004-09-17 15:16 503808 a975a70fcefe2a224412214320c89ded d:windowssystem32winlogon.exe
.
((((((((((((((((((((((((((((( snapshot_2009-02-03_22.29.26,48 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-02-04 18:56:51 32,768 —-a-r d:windowsInstaller{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}icon.exe
+ 2008-11-26 17:21:30 1,236,208 —-a-w d:windowssystem32aswBoot.exe
+ 2008-11-26 17:15:10 97,480 —-a-w d:windowssystem32AvastSS.scr
+ 2008-11-26 17:15:35 26,944 —-a-w d:windowssystem32driversaavmker4.sys
+ 2008-11-26 17:17:25 20,560 —-a-w d:windowssystem32driversaswFsBlk.sys
+ 2008-11-26 17:18:25 93,296 —-a-w d:windowssystem32driversaswmon.sys
+ 2008-11-26 17:18:18 94,032 —-a-w d:windowssystem32driversaswmon2.sys
+ 2008-11-26 17:16:29 23,152 —-a-w d:windowssystem32driversaswRdr.sys
+ 2008-11-26 17:17:36 111,184 —-a-w d:windowssystem32driversaswSP.sys
+ 2008-11-26 17:16:38 50,864 —-a-w d:windowssystem32driversaswTdi.sys
— 2009-02-03 19:17:26 93,480 —-a-w d:windowssystem32FNTCACHE.DAT
+ 2009-02-04 08:11:34 93,480 —-a-w d:windowssystem32FNTCACHE.DAT
— 2003-04-18 13:46:22 1,233,920 —-a-w d:windowssystem32msxml4.dll
+ 2008-09-30 13:43:34 1,286,152 —-a-w d:windowssystem32msxml4.dll
+ 2009-02-05 16:14:16 16,384 —-atw d:windowsTempPerflib_Perfdata_610.dat
+ 2009-02-05 16:14:25 16,384 —-atw d:windowsTempPerflib_Perfdata_7f4.dat
+ 2008-09-30 13:42:08 1,286,152 —-a-w d:windowsWinSxSx86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cfmsxml4.dll
+ 2008-09-30 13:45:12 91,656 —-a-w d:windowsWinSxSx86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bcebmsxml4r.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»d:windowssystem32ctfmon.exe» [2004-08-17 15360]
«SpybotSD TeaTimer»=»d:program filesSpybot — Search & DestroyTeaTimer.exe» [2009-01-26 2144088][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«APVXDWIN»=»d:program filesPanda SecurityPanda Antivirus Pro 2009APVXDWIN.EXE» [2008-12-03 869632]
«SCANINICIO»=»d:program filesPanda SecurityPanda Antivirus Pro 2009Inicio.exe» [2008-07-07 50432]
«SunJavaUpdateSched»=»d:program filesJavajre6binjusched.exe» [2009-02-03 148888]
«MAgent»=»d:program filesMail.RuAgentMAgent.exe» [2009-02-03 5600952]
«avast!»=»d:progra~1ALWILS~1Avast4ashDisp.exe» [2008-11-26 81000]
«SoundMan»=»SOUNDMAN.EXE» [2005-08-17 d:windowsSOUNDMAN.EXE][HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»d:windowssystem32CTFMON.EXE» [2004-08-17 15360][HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwinlogonnotifyavldr]
2008-03-18 16:58 58672 d:windowssystem32avldr.dll[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalPskSvcRetail]
@=»Service»[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«%windir%\system32\sessmgr.exe»=
«d:\WINDOWS\system32\PnkBstrA.exe»=
«d:\WINDOWS\system32\PnkBstrB.exe»=
«d:\Documents and Settings\101\Мои документы\квип\ICQ6.5\ICQ.exe»=
«d:\Program Files\Call of Duty\CoDUOMP.exe»=R0 pavboot;Panda boot driver;d:windowssystem32driverspavboot.sys [2009-02-02 28544]
R1 aswSP;avast! Self Protection;d:windowssystem32driversaswSP.sys [2009-02-03 111184]
R1 ShldDrv;Panda File Shield Driver;d:windowssystem32driversShlDrv51.sys [2009-02-02 41144]
R2 aswFsBlk;aswFsBlk;d:windowssystem32driversaswFsBlk.sys [2009-02-03 20560]
R2 Gwmsrv;Panda Goodware Cache Manager;d:windowssystem32svchost -k Panda —> d:windowssystem32svchost -k Panda [?]
R2 PavProc;Panda Process Protection Driver;d:windowssystem32driversPavProc.sys [2009-02-02 179640]
R2 PskSvcRetail;Panda PSK service;d:program filesPanda SecurityPanda Antivirus Pro 2009psksvc.exe [2009-02-02 28928]
R3 AvFlt;Antivirus Filter Driver;d:windowssystem32driversav5flt.sys —> d:windowssystem32driversav5flt.sys [?]
R3 ComFiltr;Panda Anti-Dialer;d:windowssystem32driversCOMFiltr.sys [2009-02-03 13880]
R3 PavSRK.sys;PavSRK.sys;??d:windowssystem32PavSRK.sys —> d:windowssystem32PavSRK.sys [?]
R3 PavTPK.sys;PavTPK.sys;??d:windowssystem32PavTPK.sys —> d:windowssystem32PavTPK.sys [?]
S3 FXDRV;FXDRV;??j:fxdrv.sys —> j:Fxdrv.sys [?][HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionsvchost]
panda REG_MULTI_SZ Gwmsrv
.
.
Supplementary Scan
.
uStart Page = hxxp://www.yandex.ru/?clid=40316
uDefault_Search_URL = hxxp://search.qip.ru
uSearchURL,(Default) = hxxp://search.qip.ru/search?query=%s&from=IE
IE: Добавить в Rambler-Закладки — d:program filesRambler AssistantramblertoolbarU1.dll/zakladki.htm
IE: Найти с помощью Рамблера — d:program filesRambler AssistantramblertoolbarU1.dll/search.htm
IE: Опубликовать в Дневнике — d:program filesRambler AssistantramblertoolbarU1.dll/planet.htm
IE: Перевести с помощью словарей Рамблера — d:program filesRambler AssistantramblertoolbarU1.dll/dic.htm
IE: {{7558B7E5-7B26-4201-BEDB-00D5FF534523} — d:program filesMail.RuAgentmagent.exe
.**************************************************************************
catchme 0.3.1367 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-05 22:38:29
Windows 5.1.2600 Service Pack 2 NTFSscanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0**************************************************************************
.
DLLs Loaded Under Running Processes
— — — — — — — > ‘winlogon.exe'(536)
d:windowssystem32Ati2evxx.dll
d:windowssystem32avldr.dll
.
Completion time: 2009-02-05 22:39:37
ComboFix-quarantined-files.txt 2009-02-05 19:39:25
ComboFix2.txt 2009-02-04 08:22:30
ComboFix3.txt 2009-02-03 20:02:14
ComboFix4.txt 2009-02-03 19:30:06
ComboFix5.txt 2009-02-05 19:36:58Pre-Run: 33 834 393 600 байт свободно
Post-Run: 33,829,720,064 байт свободно267 — E O F — 2009-02-04 18:56:52
Вот что пишет после OTMoveIt3.exe
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{916BAA20-3D33-4B93-A2DF-4AFCD0637BF8}\ not found.
Registry value HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun\MsServer not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{3824e1eb-a4da-11dd-9c88-0011d8b763a8}\ not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{7339106e-7595-11dc-9ba9-0011d8b763a8}\ not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{8bb10b18-ae36-11dc-9be8-0011d8b763a8}\ not found.
========== FILES ==========
File/Folder c:RECYCLERS-1-5-21-1482476501-1644491937-682003330-1013 not found.
File/Folder c:msfir80.exe not found.
File/Folder C:Documents and SettingsAll Users.WINDOWSApplication Dataxuplib.dll not found.
========== COMMANDS ==========
User’s Temp folder emptied.
User’s Temporary Internet Files folder emptied.
User’s Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. D:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. D:WINDOWStempe8a5b28205eaea0293c4a735946c3010PSK_PLUGINS_1 scheduled to be deleted on reboot.
File delete failed. D:WINDOWStempPerflib_Perfdata_5ac.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfullyOTMoveIt3 by OldTimer — Version 1.0.8.0 log created on 02032009_215611
Files moved on Reboot…
File move failed. D:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be moved on reboot.
File D:WINDOWStempe8a5b28205eaea0293c4a735946c3010PSK_PLUGINS_1 not found!
File D:WINDOWStempPerflib_Perfdata_5ac.dat not found!
