razgoneniq

All processes killed ========== OTL ========== Error: No service named LiveUpdate Notice Ex was found to stop! Service\Driver key LiveUpdate Notice Ex not found. Service HidServ stopped successfully! Service HidServ deleted successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully. File Protocol\Handler\ipp - No CLSID value found not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\ deleted successfully. File Protocol\Handler\msdaipp - No CLSID value found not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet32\ deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:0B4227B4 deleted successfully. ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== autorun.inf not found in C:\ autorun.inf not found in D:\ autorun.inf not found in E:\ C:\RECYCLER\S-1-5-21-1659004503-813497703-839522115-1003 folder moved successfully. C:\RECYCLER folder moved successfully. D:\RECYCLER\S-1-5-21-861567501-1214440339-1801674531-1003 folder moved successfully. D:\RECYCLER\S-1-5-21-776561741-2111687655-725345543-1003 folder moved successfully. D:\RECYCLER\S-1-5-21-725345543-1417001333-2146883605-1003 folder moved successfully. D:\RECYCLER\S-1-5-21-1659004503-813497703-839522115-1003 folder moved successfully. D:\RECYCLER\S-1-5-21-1482476501-1767777339-725345543-1003 folder moved successfully. D:\RECYCLER\S-1-5-21-1123561945-1004336348-839522115-1003 folder moved successfully. D:\RECYCLER folder moved successfully. E:\RECYCLER\S-1-5-21-861567501-1214440339-1801674531-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-776561741-2111687655-725345543-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-725345543-1417001333-2146883605-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-1659004503-813497703-839522115-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-1482476501-1767777339-725345543-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-1123561945-1004336348-839522115-1003 folder moved successfully. E:\RECYCLER folder moved successfully. < ipconfig /flushdns /c > Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Documents and Settings\ivoooooooooooooooooo\Desktop\cmd.bat deleted successfully. C:\Documents and Settings\ivoooooooooooooooooo\Desktop\cmd.txt deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: ivoooooooooooooooooo ->Temp folder emptied: 564197488 bytes ->Temporary Internet Files folder emptied: 3243212 bytes ->Java cache emptied: 276100 bytes ->Google Chrome cache emptied: 121951397 bytes ->Flash cache emptied: 44863 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 36425 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 15933655 bytes %systemroot%\System32 .tmp files removed: 2577 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 21258416 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 111952373 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 800.00 mb C:\WINDOWS\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully Restore point Set: OTL Restore Point (0) [EMPTYFLASH] User: All Users User: Default User User: ivoooooooooooooooooo ->Flash cache emptied: 0 bytes User: LocalService User: NetworkService Total Flash Files Cleaned = 0.00 mb OTL by OldTimer - Version 3.2.22.3 log created on 05082011_214831 Files\Folders moved on Reboot... Registry entries deleted on Reboot...

Готово какво следва?

checkup Results of screen317's Security Check version 0.99.10 Windows XP Service Pack 3 Internet Explorer 6 Out of date! `````````````````````````````` Antivirus/Firewall Check: Windows Security Center service is not running! This report may not be accurate! Windows Firewall Disabled! ESET NOD32 Antivirus Antivirus up to date! ``````````````````````````````` Anti-malware/Other Utilities Check: Malwarebytes' Anti-Malware Java 6 Update 22 Out of date Java installed! Adobe Flash Player 10.2.152.32 Adobe Reader 9.1 Out of date Adobe Reader installed! ```````````````````````````````` Process Check: objlist.exe by Laurent ``````````End of Log```````````` WVCheck Windows Validation Check Version: 1.9.12.5 Log Created On: 1932_08-05-2011 ----------------------- Windows Information ----------------------- Windows Version: Windows XP Service Pack 3 Windows Mode: Normal Systemroot Path: C:\WINDOWS WVCheck's Auto Update Check ----------------------- Auto-Update Option: Download updates and install them automatically. ----------------------- Last Success Time for Update Detection: 2011-05-08 08:04:33 Last Success Time for Update Download: 2011-04-28 04:13:03 Last Success Time for Update Installation: 2011-04-15 04:26:19 WVCheck's Registry Check Check ----------------------- Antiwpa: Not Found ----------------------- Chew7Hale: Not Found ----------------------- WVCheck's File Dump ----------------------- WVCheck found no known bad files. WVCheck's Dir Dump ----------------------- WVCheck found no known bad directories. WVCheck's Missing File Check ----------------------- WVCheck found no missing Windows files. WVCheck's MBAM Quarantine Check ----------------------- There were no bad files quarantined by MBAM. WVCheck's HOSTS File Check ----------------------- WVCheck found no bad lines in the hosts file. WVCheck's MD5 Check EXPERIMENTAL!! ----------------------- user32.dll - b26b135ff1b9f60c9388b4a7d16f600b -------- End of File, program close at 1938_08-05-2011 -------- CK CKScanner - Additional Security Risks - These are not necessarily bad c:\documents and settings\ivoooooooooooooooooo\my documents\downloads\pcm_keygen.rar c:\documents and settings\ivoooooooooooooooooo\my documents\downloads\picture collage maker keygen\keygen.exe c:\documents and settings\ivoooooooooooooooooo\my documents\downloads\picture collage maker keygen\picture collage maker v2.0.1 build 1924.txt c:\program files\man1a counter-strike source\cstrike\materials\concrete\prodwllecracked.vmt c:\program files\man1a counter-strike source\cstrike\materials\concrete\prodwllecracked.vtf c:\program files\man1a counter-strike source\hl2\materials\glass\glasswindow018a_cracked.vmt c:\program files\man1a counter-strike source\hl2\materials\glass\glasswindow018a_cracked.vtf scanner sequence 3.GL.11 ----- EOF -----

ето ги OTL.Txt Extras.Txt

Здравейте, системата ми е инфектирана и не мога да отворя dds.scr отваря се с Notepad какво да правя?