кто в автозагрузке заражен
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AlcoholAutomount"="\"C:\\Program Files (x86)\\Alcohol Soft\\Alcohol 120\\axcmd.exe\" /automount"
"Sidebar"="C:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe /autoRun"
"AceStream"="C:\\Users\\R9OL\\AppData\\Roaming\\ACEStream\\engine\\ace_engine.exe"
"Advanced SystemCare 8"="\"C:\\Program Files (x86)\\Advanced SystemCare 8\\ASCTray.exe\" /auto"
"DicterRu"="C:\\Program Files (x86)\\Dicter\\Dicter.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="\"C:\\Windows\\system32\\igfxtray.exe\""
"HotKeysCmds"="\"C:\\Windows\\system32\\hkcmd.exe\""
"Persistence"="\"C:\\Windows\\system32\\igfxpers.exe\""
"RTHDVCPL"="\"C:\\Program Files\\Realtek\\Audio\\HDA\\RAVCpl64.exe\" -s"
"IAStorIcon"="\"C:\\Program Files\\Intel\\Intel® Rapid Storage Technology\\IAStorIconLaunch.exe\" \"C:\\Program Files\\Intel\\Intel® Rapid Storage Technology\\IAStorIcon.exe\" 60"
"SynTPEnh"=hex(2):25,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,46,00,69,00,\
6c,00,65,00,73,00,25,00,5c,00,53,00,79,00,6e,00,61,00,70,00,74,00,69,00,63,\
00,73,00,5c,00,53,00,79,00,6e,00,54,00,50,00,5c,00,53,00,79,00,6e,00,54,00,\
50,00,45,00,6e,00,68,00,2e,00,65,00,78,00,65,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00
"SCM"=hex(2):43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,20,00,\
46,00,69,00,6c,00,65,00,73,00,20,00,28,00,78,00,38,00,36,00,29,00,5c,00,53,\
00,43,00,4d,00,5c,00,53,00,43,00,4d,00,2e,00,65,00,78,00,65,00,00,00
"Acronis Scheduler2 Service"="\"C:\\Program Files (x86)\\Common Files\\Acronis\\Schedule2\\schedhlp.exe\""
"BCSSync"="\"C:\\Program Files\\Microsoft Office\\Office14\\BCSSync.exe\" /DelayServices"
"AdobeAAMUpdater-1.0"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\OOBE\\PDApp\\UWA\\UpdaterStartupUtility.exe\""
"Form Pilot Pro virtual printer agent"="\"C:\\Program Files\\Form Pilot Pro\\fppragent.exe\""
"MegaFon_MegaFonInternet"="\"C:\\Program Files (x86)\\MegaFon\\MegaFon Internet\\MegaFonInternet.exe\" /minimized"
"360sd"="\"C:\\Program Files\\360\\360 Internet Security\\360sdrun.exe\""
"NvBackend"="\"C:\\Program Files (x86)\\NVIDIA Corporation\\Update Core\\NvBackend.exe\""
"ShadowPlay"="C:\\Windows\\system32\\rundll32.exe C:\\Windows\\system32\\nvspcap64.dll,ShadowPlayOnSystemStart"
Сообщение было изменено kiborgGSM: 27 Февраль 2015 - 00:58