faiwer Posted January 26, 2009 Report Share Posted January 26, 2009 (edited) [size=2]Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:40:46, on 26.01.2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:D:\WINXP\System32\smss.exeD:\WINXP\system32\winlogon.exeD:\WINXP\system32\services.exeD:\WINXP\system32\lsass.exeD:\WINXP\system32\svchost.exeD:\WINXP\System32\svchost.exeD:\WINXP\system32\spoolsv.exeD:\WINXP\Explorer.EXED:\WINXP\sttray.exeD:\Program Files\Eset\nod32kui.exeC:\Program Files\NET\sFosSpeed\cFosSpeed.exeD:\Program Files\COMODO\SafeSurf\cssurf.exeD:\WINXP\system32\CTFMON.EXEC:\Program Files\NET\sFosSpeed\spd.exeC:\Program Files\NET\Comodo\COMODO Internet Security\cmdagent.exeD:\Program Files\Eset\nod32krn.exeD:\WINXP\system32\nvsvc32.exeD:\WINXP\system32\STacSV.exeD:\WINXP\system32\vmnat.exeD:\WINXP\system32\vmnetdhcp.exeC:\Program Files\system\VMware Workstation\vmware-authd.exeC:\Program Files\NET\Opera AC 3.5.4\opera.exeC:\Program Files\media\AIMP2\AIMP2.exeC:\Program Files\system\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.localR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = СсылкиF2 - REG:system.ini: UserInit=D:\WINXP\system32\userinit.exe,D:\Documents and Settings\Faiwer\hqmqo.exe \sO2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - D:\Program Files\AskBarDis\bar\bin\askBar.dllO2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLLO3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - D:\Program Files\AskBarDis\bar\bin\askBar.dllO4 - HKLM\..\Run: [sigmatelSysTrayApp] sttray.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINXP\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [LogonStudio] "D:\Program Files\media\LogonStudio\logonstudio.exe" /RANDOMO4 - HKLM\..\Run: [nod32kui] "D:\Program Files\Eset\nod32kui.exe" /WAITSERVICEO4 - HKLM\..\Run: [cFosSpeed] C:\Program Files\NET\sFosSpeed\cFosSpeed.exeO4 - HKLM\..\Run: [COMODO SafeSurf] "D:\Program Files\COMODO\SafeSurf\cssurf.exe" -sO4 - HKCU\..\Run: [CTFMON.EXE] D:\WINXP\system32\ctfmon.exeO4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINXP\system32\CTFMON.EXE (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINXP\system32\CTFMON.EXE (User 'NETWORK SERVICE')O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINXP\system32\CTFMON.EXE (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINXP\system32\CTFMON.EXE (User 'Default user')O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dllO9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLLO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exeO10 - Unknown file in Winsock LSP: c:\program files\system\vmware workstation\vsocklib.dllO10 - Unknown file in Winsock LSP: c:\program files\system\vmware workstation\vsocklib.dllO16 - DPF: CryptoKit - http://127.0.0.1:4445/ckit.cabO16 - DPF: PrivateWire - http://apps.centercredit.kz/jpw.cabO18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLLO20 - AppInit_DLLs: wbsys.dll D:\WINXP\system32\guard32.dll D:\WINXP\system32\cssdll32.dllO23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\Program Files\NET\sFosSpeed\spd.exeO23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\NET\Comodo\COMODO Internet Security\cmdagent.exeO23 - Service: Журнал событий (Eventlog) - Корпорация Майкрософт - D:\WINXP\system32\services.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - D:\Program Files\Eset\nod32krn.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINXP\system32\nvsvc32.exeO23 - Service: Plug and Play (PlugPlay) - Корпорация Майкрософт - D:\WINXP\system32\services.exeO23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - D:\WINXP\system32\STacSV.exeO23 - Service: Журналы и оповещения производительности (SysmonLog) - Корпорация Майкрософт - D:\WINXP\system32\smlogsvc.exeO23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\system\VMware Workstation\vmware-ufad.exeO23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\system\VMware Workstation\vmware-authd.exeO23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - D:\WINXP\system32\vmnetdhcp.exeO23 - Service: VMware NAT Service - VMware, Inc. - D:\WINXP\system32\vmnat.exeO23 - Service: Теневое копирование тома (VSS) - Корпорация Майкрософт - D:\WINXP\System32\vssvc.exe--End of file - 5480 bytes[/size] Поймал глюк когда жму кнопку "т", когда "," когда жму ст6релку влево получаю "home", когда Del получаю Ins+Del и5ли5 же Shift+en6d+Del... и5ногда жмёт6ся кнопка "play".. и5 т6.-д.-, пользоват6ься т6акой клави5ат6урой анреал.-.-.- альт6конт6рол дел заблоки5рована,_ т6о ест6ь жму а эффект6а 0.-.-.- Edited January 26, 2009 by sco Link to comment Share on other sites More sharing options...
akoK Posted January 26, 2009 Report Share Posted January 26, 2009 Не все логи. Link to comment Share on other sites More sharing options...
faiwer Posted January 26, 2009 Author Report Share Posted January 26, 2009 а все логи я дать и не мог.. умня резет компа наступает после половины из прог в ФАК.. =( Link to comment Share on other sites More sharing options...
faiwer Posted January 26, 2009 Author Report Share Posted January 26, 2009 тему_можно_закрыть.._нарыл_свою_старую_неудобную_клаву_на_ней_етого_глюка_нету... Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now