Имя пользователя:
Пароль:
 

Показать сообщение отдельно

Пользователь


Сообщения: 125
Благодарности: 0

Профиль | Отправить PM | Цитировать


По-моему, победа. По крайней мере, все внешне выглядит именно так!
Вот лог (жалко, что ничего из него не понял):

ComboFix 10-10-23.02 - Konstantin 24.10.2010 21:35:18.1.1 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.383.113 [GMT 3:00]
Running from: c:\documents and settings\Konstantin\Рабочий стол\Combo-Fix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\ST6UNST.000

c:\windows\system32\kernel32.dll . . . is infected!!

.
((((((((((((((((((((((((( Files Created from 2010-09-24 to 2010-10-24 )))))))))))))))))))))))))))))))
.

2010-10-24 10:44 . 2009-10-09 20:31 315408 ----a-w- c:\windows\system32\drivers\3233581.sys
2010-10-24 08:03 . 2010-10-24 08:03 13312 ----a-w- c:\windows\system32\drivers\vdi5odg0.sys
2010-10-23 19:07 . 2010-10-23 19:07 -------- d-----w- c:\documents and settings\Konstantin\Application Data\Malwarebytes
2010-10-23 19:04 . 2010-04-29 12:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-23 19:04 . 2010-10-23 19:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-10-23 19:04 . 2010-04-29 12:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-23 19:04 . 2010-10-23 19:04 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-10-23 05:17 . 2009-10-22 10:54 37392 ----a-w- c:\windows\system32\drivers\62016502.sys
2010-10-23 05:17 . 2009-10-09 20:31 315408 ----a-w- c:\windows\system32\drivers\6201650.sys
2010-10-23 05:17 . 2009-09-25 14:59 128016 ----a-w- c:\windows\system32\drivers\62016501.sys
2010-10-23 04:56 . 2010-10-23 04:56 -------- d-----w- c:\windows\system32\wbem\Repository
2010-10-23 04:55 . 2010-10-23 04:55 -------- d-----w- c:\program files\Переводчики
2010-10-22 22:10 . 2008-04-14 18:40 26112 ----a-w- c:\windows\system32\dllcache\OLD638.tmp
2010-10-22 22:08 . 2004-08-18 12:00 31744 ----a-w- c:\windows\system32\dllcache\OLD59D.tmp
2010-10-22 22:08 . 2008-04-14 18:39 15360 ----a-w- c:\windows\system32\dllcache\OLD59A.tmp
2010-10-22 22:08 . 2004-08-18 12:00 14336 ----a-w- c:\windows\system32\dllcache\OLD597.tmp
2010-10-22 22:08 . 2004-08-18 12:00 36927 ----a-w- c:\windows\system32\dllcache\OLD594.tmp
2010-10-22 22:08 . 2008-04-14 18:39 15872 ----a-w- c:\windows\system32\dllcache\OLD591.tmp
2010-10-22 22:00 . 2004-08-18 12:00 5632 ----a-w- c:\windows\system32\dllcache\OLD480.tmp
2010-10-22 22:00 . 2004-08-18 12:00 5632 ----a-w- c:\windows\system32\dllcache\OLD47D.tmp
2010-10-22 22:00 . 2004-08-18 12:00 6144 ----a-w- c:\windows\system32\dllcache\OLD47A.tmp
2010-10-22 22:00 . 2004-08-18 12:00 5632 ----a-w- c:\windows\system32\dllcache\OLD477.tmp
2010-10-22 22:00 . 2004-08-18 12:00 6144 ----a-w- c:\windows\system32\dllcache\OLD43D.tmp
2010-10-22 21:59 . 2008-04-14 18:39 315455 ----a-w- c:\windows\system32\dllcache\OLD414.tmp
2010-10-22 21:58 . 2008-04-14 18:39 81976 ----a-w- c:\windows\system32\dllcache\OLD3ED.tmp
2010-10-22 21:58 . 2004-08-18 12:00 57398 ----a-w- c:\windows\system32\dllcache\OLD3EA.tmp
2010-10-22 21:58 . 2008-04-14 18:39 716856 ----a-w- c:\windows\system32\dllcache\OLD3E7.tmp
2010-10-22 21:37 . 2010-10-22 21:37 -------- d-----w- c:\windows\LastGood(2)
2010-10-22 18:21 . 2010-10-22 18:21 -------- d-----w- C:\__Help
2010-10-22 11:45 . 2010-10-22 11:45 -------- d-----w- C:\FOUND.003
2010-10-22 11:11 . 2010-08-17 13:17 58880 ------w- c:\windows\system32\dllcache\spoolsv.exe
2010-10-22 11:09 . 2010-07-27 06:30 8479744 ------w- c:\windows\system32\dllcache\shell32.dll
2010-10-22 11:08 . 2010-06-14 14:31 744448 ------w- c:\windows\system32\dllcache\helpsvc.exe
2010-10-22 11:07 . 2010-10-22 11:07 -------- d-----w- c:\windows\ie8updates
2010-10-22 11:06 . 2010-09-10 05:51 247808 ------w- c:\windows\system32\dllcache\ieproxy.dll
2010-10-22 11:06 . 2010-09-10 05:51 602112 ------w- c:\windows\system32\dllcache\msfeeds.dll
2010-10-22 11:06 . 2010-09-10 05:51 1986560 ------w- c:\windows\system32\dllcache\iertutil.dll
2010-10-22 11:06 . 2010-09-10 05:51 55296 ------w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-10-22 11:06 . 2010-09-10 05:51 12800 ------w- c:\windows\system32\dllcache\xpshims.dll
2010-10-22 11:06 . 2010-09-10 05:51 743424 ------w- c:\windows\system32\dllcache\iedvtool.dll
2010-10-22 11:06 . 2010-09-10 05:51 11080192 ------w- c:\windows\system32\dllcache\ieframe.dll
2010-10-22 11:04 . 2009-11-27 17:13 17920 ------w- c:\windows\system32\dllcache\msyuv.dll
2010-10-22 11:04 . 2009-11-27 17:13 1293312 ------w- c:\windows\system32\dllcache\quartz.dll
2010-10-22 11:03 . 2010-06-21 15:27 354304 ------w- c:\windows\system32\dllcache\srv.sys
2010-10-22 10:56 . 2008-10-15 16:37 337408 ------w- c:\windows\system32\dllcache\netapi32.dll
2010-10-22 09:22 . 2008-04-14 18:40 1306624 ------w- c:\windows\system32\dllcache\msxml6.dll
2010-10-22 09:22 . 2008-04-14 18:17 86016 ------w- c:\windows\system32\dllcache\msxml6r.dll
2010-10-22 09:22 . 2008-04-14 18:39 102912 ------w- c:\windows\system32\dllcache\dpcdll.dll
2010-10-22 09:22 . 2008-04-14 18:40 10752 ------w- c:\windows\system32\smtpapi.dll
2010-10-22 09:22 . 2008-04-14 18:40 9728 ------w- c:\windows\system32\rwnh.dll
2010-10-22 09:19 . 2008-04-14 18:40 294912 ------w- c:\windows\system32\dllcache\dlimport.exe
2010-10-22 09:12 . 2006-12-28 21:31 19569 ----a-w- c:\windows\003290_.tmp
2010-10-22 08:23 . 2010-10-22 08:23 -------- d-----w- C:\8c5e26121b1f26a493e721a34a
2010-10-21 19:09 . 2010-10-21 19:09 -------- d-----w- c:\documents and settings\Konstantin\DoctorWeb
2010-10-21 15:08 . 2001-10-19 18:06 26112 ----a-w- c:\windows\system32\dllcache\EXCH_seos.dll
2010-10-21 15:07 . 2004-08-18 12:00 92416 ----a-w- c:\windows\system32\dllcache\mga.sys
2010-10-21 15:06 . 2004-08-18 12:00 10129408 ----a-w- c:\windows\system32\dllcache\hwxkor.dll
2010-10-21 15:05 . 2004-08-18 12:00 19456 ----a-w- c:\windows\system32\dllcache\cprofile.exe
2010-10-21 15:04 . 2003-04-14 17:36 16384 ----a-w- c:\windows\system32\dllcache\tcptsat.dll
2010-10-21 15:04 . 2004-08-18 12:00 19968 ----a-w- c:\windows\system32\dllcache\inetsloc.dll
2010-10-21 15:04 . 2004-08-18 12:00 7680 ----a-w- c:\windows\system32\dllcache\inetmgr.exe
2010-10-21 15:04 . 2004-08-18 12:00 171520 ----a-w- c:\windows\system32\dllcache\iisui.dll
2010-10-21 15:04 . 2004-08-18 12:00 5632 ----a-w- c:\windows\system32\dllcache\iisrstap.dll
2010-10-21 15:04 . 2004-08-18 12:00 14848 ----a-w- c:\windows\system32\dllcache\iisreset.exe
2010-10-21 15:04 . 2004-08-18 12:00 6144 ----a-w- c:\windows\system32\dllcache\ftpsapi2.dll
2010-10-21 15:04 . 2003-04-14 17:36 208896 ----a-w- c:\windows\system32\dllcache\fpmmcsat.dll
2010-10-21 15:00 . 2004-08-18 12:00 16384 ----a-w- c:\windows\system32\dllcache\isignup.exe
2010-10-21 15:00 . 2004-08-18 12:00 16384 ----a-w- c:\program files\Internet Explorer\Connection Wizard\isignup.exe
2010-10-21 14:52 . 2008-04-13 21:09 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys
2010-10-21 14:37 . 2004-08-18 12:00 14043 ----a-r- c:\windows\SET4E.tmp
2010-10-21 14:37 . 2004-08-18 12:00 1086058 ----a-r- c:\windows\SET42.tmp
2010-10-21 14:37 . 2004-08-18 12:00 1014193 ----a-r- c:\windows\SET3F.tmp
2010-10-20 08:24 . 2008-04-14 18:40 221184 ----a-w- c:\windows\system32\wmpns.dll
2010-10-20 08:24 . 2010-10-20 08:24 -------- d-----w- c:\documents and settings\Гость
2010-10-15 19:12 . 2010-10-15 19:12 -------- d-----w- c:\documents and settings\Konstantin\Local Settings\Application Data\Temp
2010-10-15 06:15 . 2010-10-15 06:15 -------- d-----w- C:\FOUND.002
2010-09-30 14:07 . 2005-01-15 05:16 163840 ----a-r- c:\windows\system32\KXTDAUSB.dll
2010-09-30 14:07 . 2005-01-14 13:36 20992 ----a-r- c:\windows\system32\drivers\TEUSBMU.sys
2010-09-26 19:22 . 2010-09-26 19:22 -------- d-----w- C:\Hyundai
2010-09-26 19:21 . 2010-09-26 19:21 286720 ------w- c:\windows\Setup1.exe
2010-09-26 19:21 . 2010-09-26 19:21 73216 ----a-w- c:\windows\ST6UNST.EXE
2010-09-26 16:10 . 2010-09-26 16:10 -------- d-----w- C:\FOUND.001
2010-09-25 08:01 . 2003-03-19 11:20 1060864 ----a-w- c:\windows\system32\MFC71.dll
2010-09-25 08:01 . 2010-09-25 08:01 -------- d-----w- c:\program files\Panasonic
2010-09-25 07:59 . 2003-02-27 13:12 696320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2010-09-25 07:59 . 2002-12-05 11:10 155648 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2010-09-25 07:59 . 2002-12-02 12:22 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2010-09-25 07:59 . 2002-12-02 10:33 57344 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2010-09-25 07:59 . 2002-12-02 10:33 237568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2010-09-25 07:59 . 2010-09-25 07:59 163972 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2010-09-25 07:59 . 2010-09-25 07:59 282756 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-10 05:51 . 2007-10-10 10:34 916480 ----a-w- c:\windows\system32\wininet.dll
2010-09-10 05:51 . 2004-08-18 09:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-09-10 05:51 . 2004-08-18 09:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2010-09-02 20:26 . 2010-09-02 20:26 51716 ----a-w- c:\windows\system32\pdf995mon.dll
2010-09-02 20:26 . 2010-09-02 20:26 249856 ----a-w- c:\windows\system32\pdfmona.dll
2010-08-17 13:17 . 2007-10-10 10:27 58880 ----a-w- c:\windows\system32\spoolsv.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"pdfFactory Pro Диспетчер pdfFactory Pro v3"="c:\windows\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe" [2007-02-24 503808]
"LXSUPMON"="c:\windows\system32\LXSUPMON.EXE" [2001-10-09 818176]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"VMSnap3"="c:\windows\VMSnap3.EXE" [2006-08-30 49152]
"Domino"="c:\windows\Domino.EXE" [2006-06-28 49152]
"SoundMan"="SOUNDMAN.EXE" [2000-05-19 155648]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-04-01 5562368]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\ѓ«*ў*®Ґ ¬Ґ*о\Џа®Ја*¬¬л\Ђўв®§*Јаг§Є*\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
Update Scheduler for Proteus Professional 7.lnk - c:\program files\Proteus 7 Pro\BIN\UDSCHED.EXE [2010-6-28 66076]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DicterRu]
2010-05-20 13:43 1252864 ----a-w- c:\program files\Переводчики\Dicter\Dicter.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2010-06-03 00:50 1144104 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2005-04-01 13:16 5562368 ----a-w- c:\windows\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2005-04-01 13:16 86016 ----a-w- c:\windows\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2005-04-01 13:16 1495040 ----a-w- c:\windows\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebcamMaxAutoRun]
2010-04-30 02:41 6043888 ----a-w- c:\program files\WEB-камера\WebcamMax\WebcamMax.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"f:\\Program Files\\Загрузчики\\BitTorrent_6.4\\bittorrent.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\WINDOWS\\System32\\LEXPPS.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9828:TCP"= 9828:TCP:BitComet 9828 TCP
"9828:UDP"= 9828:UDP:BitComet 9828 UDP

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 62016502;62016502 Boot Guard Driver;c:\windows\system32\drivers\62016502.sys [23.10.2010 8:17 37392]
R1 62016501;62016501;c:\windows\system32\drivers\62016501.sys [23.10.2010 8:17 128016]
R2 DicterUpdateService;Dicter Service;c:\program files\Переводчики\Dicter\DicterService.exe [03.09.2010 20:14 468992]
R2 Iprip;Слушатель RIP;c:\windows\System32\svchost.exe -k netsvcs [18.08.2004 12:00 14336]
R2 NSHE;Guardant Emulator Driver;c:\windows\system32\drivers\NSHE.SYS [18.06.2010 9:18 97792]
R3 WWSPLIT;Willing Webcam WDM Driver;c:\windows\system32\drivers\wwsplit.sys [12.09.2010 1:40 301952]
S1 88778891;88778891;c:\windows\system32\DRIVERS\88778891.sys --> c:\windows\system32\DRIVERS\88778891.sys [?]
S2 gupdate;Служба Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [16.09.2010 9:07 136176]
S3 adatadrv;Autodata Protection Service;c:\windows\system32\DRIVERS\adatadrv.sys --> c:\windows\system32\DRIVERS\adatadrv.sys [?]
S3 TEUSBMU;Panasonic Analog PBX USB Main Unit driver;c:\windows\system32\drivers\TEUSBMU.sys [30.09.2010 17:07 20992]
S3 vaxscsi;vaxscsi;c:\windows\system32\drivers\vaxscsi.sys [01.06.2010 16:16 223128]
S3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys [28.07.2010 20:55 428160]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [01.06.2010 16:06 643072]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc REG_MULTI_SZ p2psvc p2pimsvc p2pgasvc PNRPSvc
.
Contents of the 'Scheduled Tasks' folder

2010-10-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-16 06:07]

2010-10-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-16 06:07]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
IE: &З&агрузить &с помощью BitComet - e:\program files\BitComet\BitComet.exe/AddLink.htm
IE: &З&агрузить все видео файлы с помощью BitComet - e:\program files\BitComet\BitComet.exe/AddVideo.htm
IE: &З&агрузить все с помощью BitComet - e:\program files\BitComet\BitComet.exe/AddAllLink.htm
IE: &Экспорт в Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: + Offline &Explorer: Download the link - file://f:\program files\Offline Explorer Enterprise4.5\Add_UrlO.htm
IE: + Offline E&xplorer: Download the current page - file://f:\program files\Offline Explorer Enterprise4.5\Add_AllO.htm
IE: Google ВикиКомментарии... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2D06158FAC79A790.dll/cmsidewiki.html
IE: Закачать все при помощи FlashGet - e:\program files\FlashGet\jc_all.htm
IE: Закачать при помощи FlashGet - e:\program files\FlashGet\jc_link.htm
TCP: {032C0615-A66C-40E8-93D9-D8FC4E51A6B9} = 77.121.32.2
DPF: {66D393D5-4D80-497C-9F4F-F3839E090202} - hxxp://www.pysoft.com/Downloads/WebCamPlayerOCX.cab
FF - ProfilePath - c:\documents and settings\Konstantin\Application Data\Mozilla\Firefox\Profiles\1g8om9ig.default\
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Opera\program\plugins\nppl3260.dll
FF - plugin: c:\program files\Opera\program\plugins\nprpjplug.dll

---- FIREFOX POLICIES ----
f:\program files\Ѓа*г§Ґал\FireFox 3.6.3\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
f:\program files\Ѓа*г§Ґал\FireFox 3.6.3\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
HKLM-Run-BigDog303 - c:\windows\VM303_STI.EXE
MSConfigStartUp-Rainlendar2 - c:\program files\Органайзер_Rainlendar2\Rainlendar2.exe
AddRemove-Active WebCam Viewer - c:\windows\system32\PY_UNINSTAL.EXE SOFTWARE\PySoft\Act_WebCam\Viewer
AddRemove-Manhunt_is1 - f:\game\Manhunt\unins000.exe
AddRemove-Novarm DipTrace - f:\program files\Радиолюбитель\UnInstall_15033.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-10-24 21:48
Windows 5.1.2600 Service Pack 3 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
BigDog303 = c:\windows\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)????????????????0?????????@??????????????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(3224)
c:\windows\system32\WININET.dll
c:\windows\system32\webcheck.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\LEXBCES.EXE
c:\windows\system32\LEXPPS.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\tcpsvcs.exe
f:\program files\Alcohol 120\StarWind\StarWindService.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Completion time: 2010-10-24 21:52:43 - machine was rebooted
ComboFix-quarantined-files.txt 2010-10-24 18:52

Pre-Run: 1*319*501*824 байт свободно
Post-Run: 1*343*979*520 байт свободно

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional RU" /noexecute=optin /fastdetect

Current=4 Default=4 Failed=3 LastKnownGood=6 Sets=1,2,3,4,5,6
- - End Of File - - 03B16062ACF85693CC9E62397473A57C


Цитата AlexTNT:
[list]Скачайте RSIT или отсюда. Запустите, выберите проверку файлов за последние три месяца и нажмите продолжить. Должны открыться два отчета log.txt и info.txt. Прикрепите их к следующему сообщению. Если вы их закрыли, то логи по умолчанию сохраняются в одноименной папке (RSIT) в корне системного диска. »
Вс равно выполнить?

Отправлено: 23:12, 24-10-2010 | #12