O1 HOSTS File: (128 bytes) — C:WINDOWSSystem32driversetcHosts
O1 — Hosts: 127.0.0.1 localhost
O1 — Hosts: 88.198.72.190 css.yandex.net #AdwMtam_MicroSoft
O1 — Hosts: 127.0.0.1 vkontakte.ru
O1 — Hosts: 127.0.0.1 http://www.vkontakte.ru
O2 — BHO: (Octh Class) — {000123B4-9B42-4900-B3F7-F4B073EFC214} — C:Program FilesOrbitdownloaderorbitcth.dll (Orbitdownloader.com)
O2 — BHO: (Yahoo! Toolbar Helper) — {02478D38-C3F9-4EFB-9B51-7695ECA05670} — C:Program FilesYahoo!CompanionInstallscpn0yt.dll (Yahoo! Inc.)
O2 — BHO: (Winamp Toolbar Loader) — {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} — C:Program FilesWinamp Toolbarwinamptb.dll (AOL LLC.)
O2 — BHO: (Spybot-S&D IE Protection) — {53707962-6F74-2D53-2644-206D7942484F} — C:Program FilesSpybot — Search & DestroySDHelper.dll (Safer Networking Limited)
O2 — BHO: (Groove GFS Browser Helper) — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — D:Program FilesOffice12GrooveShellExtensions.dll (Microsoft Corporation)
O2 — BHO: (MailRuBHO Class) — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll (@Mail.Ru)
O2 — BHO: (Google Toolbar Helper) — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll ()
O2 — BHO: (Google Toolbar Notifier BHO) — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.0.926.3450swg.dll (Google Inc.)
O2 — BHO: (Google Dictionary Compression sdch) — {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_219B3E1547538286.dll (Google Inc.)
O2 — BHO: (Java(tm) Plug-In 2 SSV Helper) — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll (Sun Microsystems, Inc.)
O2 — BHO: (JQSIEStartDetectorImpl Class) — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll (Sun Microsystems, Inc.)
O3 — HKLM..Toolbar: (Спутник@Mail.Ru) — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll (@Mail.Ru)
O3 — HKLM..Toolbar: (&Google Toolbar) — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll ()
O3 — HKLM..Toolbar: (Rambler-Ассистент) — {468CD8A9-7C25-45FA-969E-3D925C689DC4} — C:Program FilesRambler AssistantramblertoolbarU0.dll (Rambler.ru)
O3 — HKLM..Toolbar: (ICQToolBar) — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll (ICQ)
O3 — HKLM..Toolbar: (Яндекс.Бар) — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll (ООО «ЯНДЕКС»)
O3 — HKLM..Toolbar: (Grab Pro) — {C55BBCD6-41AD-48AD-9953-3609C48EACC7} — C:Program FilesOrbitdownloaderGrabPro.dll ()
O3 — HKLM..Toolbar: (Winamp Toolbar) — {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} — C:Program FilesWinamp Toolbarwinamptb.dll (AOL LLC.)
O3 — HKLM..Toolbar: (Yahoo! Toolbar) — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpn0yt.dll (Yahoo! Inc.)
O3 — HKU.DEFAULT..ToolbarWebBrowser: (Яндекс.Бар) — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll (ООО «ЯНДЕКС»)
O3 — HKUS-1-5-18..ToolbarWebBrowser: (Яндекс.Бар) — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll (ООО «ЯНДЕКС»)
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (&Адрес) — {01E04581-4EEE-11D0-BFE9-00AA005B4383} — C:WINDOWSSystem32browseui.dll (Корпорация Майкрософт)
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (Спутник@Mail.Ru) — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll (@Mail.Ru)
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (&Ссылки) — {0E5CBF21-D15F-11D0-8301-00AA005B4383} — C:WINDOWSSystem32SHELL32.dll (Корпорация Майкрософт)
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (&Google Toolbar) — {2318C2B1-4965-11D4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll ()
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (Rambler-Ассистент) — {468CD8A9-7C25-45FA-969E-3D925C689DC4} — C:Program FilesRambler AssistantramblertoolbarU0.dll (Rambler.ru)
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (Яндекс.Бар) — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll (ООО «ЯНДЕКС»)
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (Grab Pro) — {C55BBCD6-41AD-48AD-9953-3609C48EACC7} — C:Program FilesOrbitdownloaderGrabPro.dll ()
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (Yahoo! Toolbar) — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpn0yt.dll (Yahoo! Inc.)
O4 — HKLM..Run: [avast!] C:Program FilesAlwil SoftwareAvast4ashDisp.exe (ALWIL Software)
O4 — HKLM..Run: [DSLAGENTEXE] C:Program FilesD-LinkDSL-200dslagent.exe ()
O4 — HKLM..Run: [DSLSTATEXE] C:Program FilesD-LinkDSL-200dslstat.exe (Conexant Systems, Inc.)
O4 — HKLM..Run: [GrooveMonitor] D:Program FilesOffice12GrooveMonitor.exe (Microsoft Corporation)
O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe (Hewlett-Packard)
O4 — HKLM..Run: [LoviVkontakte] C:Program FilesLoviVkontaktelovivkontakte.exe (Zeyfman Genady)
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe (Mail.Ru)
O4 — HKLM..Run: [NvCplDaemon] C:WINDOWSSystem32NvCpl.DLL (NVIDIA Corporation)
O4 — HKLM..Run: [NvMediaCenter] C:WINDOWSSystem32NvMCTray.DLL (NVIDIA Corporation)
O4 — HKLM..Run: [nwiz] C:WINDOWSSystem32nwiz.exe ()
O4 — HKLM..Run: [SoundMan] C:WINDOWSSOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 — HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavajre6binjusched.exe (Sun Microsystems, Inc.)
O4 — HKLM..Run: [Vetton Wallpapers] C:Downloadsvw.exe ()
O4 — HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe ()
O4 — HKUS-1-5-21-861567501-651377827-839522115-1004..Run: [ICQ] C:Program FilesICQ6.5ICQ.exe (ICQ, LLC.)
O4 — HKUS-1-5-21-861567501-651377827-839522115-1004..Run: [Orb] C:Program FilesWinamp RemotebinOrbTray.exe (Orb Networks)
O4 — HKUS-1-5-21-861567501-651377827-839522115-1004..Run: [SpybotSD TeaTimer] C:Program FilesSpybot — Search & DestroyTeaTimer.exe (Safer Networking Limited)
O4 — Startup: C:Documents and SettingsAll Users.WINDOWSГлавное менюПрограммыАвтозагрузкаHP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exe (Hewlett-Packard Development Company, L.P.)
O4 — Startup: C:Documents and SettingsAll Users.WINDOWSГлавное менюПрограммыАвтозагрузкаOrbit.lnk = C:Program FilesOrbitdownloaderorbitdm.exe (Orbitdownloader.com)
O4 — Startup: C:Documents and SettingsШуГлавное менюПрограммыАвтозагрузкаВырезка экрана и программа запуска для OneNote 2007.lnk = D:Program FilesOffice12ONENOTEM.EXE (Microsoft Corporation)
O4 — Startup: C:Documents and SettingsШуГлавное менюПрограммыАвтозагрузкаИнформер от rp5.ru.lnk = C:Program Filesrp5.rurp5.exe ()
O6 — HKLMSoftwarePoliciesMicrosoftInternet ExplorerLow Rights present
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: HonorAutoRunSetting = 1
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDrives = 0
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: dontdisplaylastusername = 0
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: legalnoticecaption =
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: legalnoticetext =
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: shutdownwithoutlogon = 1
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: undockwithoutlogon = 1
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: DisableRegistryTools = 0
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: HideLegacyLogonScripts = 0
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: HideLogoffScripts = 0
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: RunLogonScriptSync = 1
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: RunStartupScriptSync = 0
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: HideStartupScripts = 0
O7 — HKU.DEFAULTSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKU.DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 — HKUS-1-5-18SoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKUS-1-5-18SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 — HKUS-1-5-19SoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKUS-1-5-19SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 — HKUS-1-5-19_ClassesSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKUS-1-5-20SoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKUS-1-5-20SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 — HKUS-1-5-20_ClassesSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDrives = 0
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: HideLegacyLogonScripts = 0
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: HideLogoffScripts = 0
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: HideStartupScripts = 0
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: RunLogonScriptSync = 1
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: RunStartupScriptSync = 0
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004_ClassesSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O8 — Extra context menu item: &Download by Orbit — C:Program FilesOrbitdownloaderorbitmxt.dll (Orbitdownloader.com)
O8 — Extra context menu item: &Grab video by Orbit — C:Program FilesOrbitdownloaderorbitmxt.dll (Orbitdownloader.com)
O8 — Extra context menu item: &Winamp Search — C:Documents and SettingsAll Users.WINDOWSApplication DataWinamp ToolbarieToolbarresourcesen-USlocalsearch.html ()
O8 — Extra context menu item: &Экспорт в Microsoft Excel — D:Program FilesOffice12EXCEL.EXE (Microsoft Corporation)
O8 — Extra context menu item: Do&wnload selected by Orbit — C:Program FilesOrbitdownloaderorbitmxt.dll (Orbitdownloader.com)
O8 — Extra context menu item: Down&load all by Orbit — C:Program FilesOrbitdownloaderorbitmxt.dll (Orbitdownloader.com)
O8 — Extra context menu item: Добавить в Rambler-Закладки — C:Program FilesRambler AssistantramblertoolbarU0.dll (Rambler.ru)
O8 — Extra context menu item: Найти с помощью Рамблера — C:Program FilesRambler AssistantramblertoolbarU0.dll (Rambler.ru)
O8 — Extra context menu item: Перевести с помощью словарей Рамблера — C:Program FilesRambler AssistantramblertoolbarU0.dll (Rambler.ru)
O8 — Extra context menu item: Поиск@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll (@Mail.Ru)
O8 — Extra context menu item: Словари@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll (@Mail.Ru)
O9 — Extra Button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — D:Program FilesOffice12ONBttnIE.dll (Microsoft Corporation)
O9 — Extra ‘Tools’ menuitem : &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — D:Program FilesOffice12ONBttnIE.dll (Microsoft Corporation)
O9 — Extra Button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe (Mail.Ru)
O9 — Extra ‘Tools’ menuitem : Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe (Mail.Ru)
O9 — Extra Button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:Program FilesMicrosoft OfficeOFFICE11REFIEBAR.DLL (Microsoft Corporation)
O9 — Extra ‘Tools’ menuitem : Spybot — Search & Destroy Configuration — {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} — C:Program FilesSpybot — Search & DestroySDHelper.dll (Safer Networking Limited)
O9 — Extra ‘Tools’ menuitem : @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe (Microsoft Corporation)
O9 — Extra Button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe (ICQ, LLC.)
O9 — Extra ‘Tools’ menuitem : ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe (ICQ, LLC.)
O9 — Extra Button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe (Microsoft Corporation)
O9 — Extra ‘Tools’ menuitem : Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe (Microsoft Corporation)
O10 — NameSpace_Catalog5Catalog_Entries00000000001 [] — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — NameSpace_Catalog5Catalog_Entries00000000003 [] — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000001 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000002 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000003 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000004 — C:WINDOWSSystem32rsvpsp.dll (Microsoft Corporation)
O10 — Protocol_Catalog9Catalog_Entries00000000005 — C:WINDOWSSystem32rsvpsp.dll (Microsoft Corporation)
O10 — Protocol_Catalog9Catalog_Entries00000000006 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000007 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000008 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000009 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000010 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000011 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000012 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000013 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000014 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000015 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O15 — HKLM..Trusted Domains: 43 domain(s) and sub-domain(s) not assigned to a zone.
O15 — HKU.DEFAULT..Trusted Domains: 42 domain(s) and sub-domain(s) not assigned to a zone.
O15 — HKUS-1-5-18..Trusted Domains: 42 domain(s) and sub-domain(s) not assigned to a zone.
O15 — HKUS-1-5-21-861567501-651377827-839522115-1004..Trusted Domains: 42 domain(s) and sub-domain(s) not assigned to a zone.
O16 — DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 — DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 — DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O18 — ProtocolHandlerdvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} — C:WINDOWSSystem32msvidctl.dll (Корпорация Майкрософт)
O18 — ProtocolHandlergrooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} — D:Program FilesOffice12GrooveSystemServices.dll (Microsoft Corporation)
O18 — ProtocolHandlerhttpx00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandlerhttpoledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandlerhttpsx00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandlerhttpsoledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandleripp — No CLSID value found
O18 — ProtocolHandlerippx00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandlermsdaipp — No CLSID value found
O18 — ProtocolHandlermsdaippx00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandlermsdaippoledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandlerms-help {314111c7-a502-11d2-bbca-00c04f8ec294} — C:Program FilesCommon FilesMicrosoft SharedHelphxds.dll (Microsoft Corporation)
O18 — ProtocolHandlermso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} — C:Program FilesCommon FilesMicrosoft SharedWeb Components11OWC11.DLL (Microsoft Corporation)
O18 — ProtocolHandlertv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} — C:WINDOWSSystem32msvidctl.dll (Корпорация Майкрософт)
O18 — ProtocolFilter: — text/webviewhtml — C:WINDOWSSystem32SHELL32.dll (Корпорация Майкрософт)
O18 — ProtocolFilter: — text/xml — C:Program FilesCommon FilesMicrosoft SharedOFFICE11MSOXMLMF.DLL (Microsoft Corporation)
O20 — HKLM Winlogon: Shell — (Explorer.exe) — C:WINDOWSExplorer.exe (Корпорация Майкрософт)
O20 — HKLM Winlogon: UserInit — (C:WINDOWSsystem32userinit.exe) — C:WINDOWSSystem32userinit.exe (Корпорация Майкрософт)
O20 — HKLM Winlogon: UIHost — (logonui.exe) — C:WINDOWSSystem32logonui.exe (Корпорация Майкрософт)
O20 — HKLM Winlogon: VMApplet — (rundll32 shell32) — C:WINDOWSSystem32shell32.dll (Корпорация Майкрософт)
O20 — HKLM Winlogon: VMApplet — (Control_RunDLL «sysdm.cpl») — C:WINDOWSSystem32sysdm.cpl (Корпорация Майкрософт)
O20 — WinlogonNotifycrypt32chain: DllName — crypt32.dll — C:WINDOWSSystem32crypt32.dll (Корпорация Майкрософт)
O20 — WinlogonNotifycscdll: DllName — cscdll.dll — C:WINDOWSSystem32cscdll.dll (Корпорация Майкрософт)
O20 — WinlogonNotifyScCertProp: DllName — wlnotify.dll — C:WINDOWSSystem32wlnotify.dll (Корпорация Майкрософт)
O20 — WinlogonNotifySchedule: DllName — wlnotify.dll — C:WINDOWSSystem32wlnotify.dll (Корпорация Майкрософт)
O20 — WinlogonNotifysclgntfy: DllName — sclgntfy.dll — C:WINDOWSSystem32sclgntfy.dll (Корпорация Майкрософт)
O20 — WinlogonNotifySensLogn: DllName — WlNotify.dll — C:WINDOWSSystem32WlNotify.dll (Корпорация Майкрософт)
O20 — WinlogonNotifytermsrv: DllName — wlnotify.dll — C:WINDOWSSystem32wlnotify.dll (Корпорация Майкрософт)
O20 — WinlogonNotifywlballoon: DllName — wlnotify.dll — C:WINDOWSSystem32wlnotify.dll (Корпорация Майкрософт)
O21 — SSODL: CDBurn — {fbeb8a05-beee-4442-804e-409d6c4515e9} — C:WINDOWSSystem32SHELL32.dll (Корпорация Майкрософт)
O21 — SSODL: PostBootReminder — {7849596a-48ea-486e-8937-a2a3009f31a9} — C:WINDOWSSystem32SHELL32.dll (Корпорация Майкрософт)
O21 — SSODL: SysTray — {35CEC8A3-2BE6-11D2-8773-92E220524153} — C:WINDOWSSystem32stobject.dll (Корпорация Майкрософт)
O22 — SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} — Предзагрузчик Browseui — C:WINDOWSSystem32browseui.dll (Корпорация Майкрософт)
O22 — SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} — Демон кэша категорий компонентов — C:WINDOWSSystem32browseui.dll (Корпорация Майкрософт)
O24 — Desktop Components:0 (Моя текущая домашняя страница) — About:Home
O28 — HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} — C:WINDOWSSystem32shell32.dll (Корпорация Майкрософт)
O28 — HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} — D:Program FilesOffice12GrooveShellExtensions.dll (Microsoft Corporation)
O29 — HKLM SecurityProviders — (digest.dll) — C:WINDOWSSystem32digest.dll (Корпорация Майкрософт)
O29 — HKLM SecurityProviders — (msnsspc.dll) — C:WINDOWSSystem32msnsspc.dll (Корпорация Майкрософт)
O31 — SafeBoot: AlternateShell — cmd.exe
O32 — HKLM CDRom: AutoRun — 1
O32 — AutoRun File — [2007.12.06 22:09:02 | 00,000,000 | —- | M] () — C:AUTOEXEC.BAT — [ NTFS ]
O33 — MountPoints2{8c99498b-a424-11dc-8ef7-806d6172696f}Shell — «» = AutoRun
O33 — MountPoints2{8c99498b-a424-11dc-8ef7-806d6172696f}ShellAutoRuncommand — «» = E:Setup.exe — File not found
O34 — HKLM BootExecute: (autocheck) — File not found
O34 — HKLM BootExecute: (autochk) — C:WINDOWSSystem32autochk.exe (Microsoft Corporation)
O34 — HKLM BootExecute: (*) — File not found
========== Files/Folders — Created Within 30 Days ==========
[7 C:WINDOWS*.tmp files]
[2009.06.26 01:56:11 | 00,513,536 | —- | C] (OldTimer Tools) — C:Documents and SettingsШуРабочий столOTL.exe
[2009.06.22 01:56:56 | 00,000,000 | —D | C] — C:Program FilesWinamp Toolbar
[2009.06.20 04:12:17 | 00,000,000 | -HSD | C] — C:RECYCLER
[2009.06.20 02:06:50 | 00,212,480 | —- | C] (SteelWerX) — C:WINDOWSSWXCACLS.exe
[2009.06.20 02:06:50 | 00,161,792 | —- | C] (SteelWerX) — C:WINDOWSSWREG.exe
[2009.06.20 02:06:50 | 00,136,704 | —- | C] (SteelWerX) — C:WINDOWSSWSC.exe
[2009.06.20 02:06:50 | 00,098,816 | —- | C] () — C:WINDOWSsed.exe
[2009.06.20 02:06:50 | 00,089,504 | —- | C] (Smallfrogs Studio) — C:WINDOWSfdsv.exe
[2009.06.20 02:06:50 | 00,080,412 | —- | C] () — C:WINDOWSgrep.exe
[2009.06.20 02:06:50 | 00,068,096 | —- | C] () — C:WINDOWSzip.exe
[2009.06.20 02:06:50 | 00,049,152 | —- | C] () — C:WINDOWSVFIND.exe
[2009.06.20 02:06:50 | 00,028,672 | —- | C] (NirSoft) — C:WINDOWSNIRCMD.exe
[2009.06.20 01:54:43 | 02,873,584 | R— | C] () — C:Documents and SettingsШуРабочий столComboFix.exe
[2009.06.18 06:22:05 | 00,000,000 | -H-D | C] — C:WINDOWSie8
[2009.06.18 00:44:56 | 00,000,842 | —- | C] () — C:Documents and SettingsШуРабочий столСобачий рай.lnk
[2009.06.18 00:13:19 | 00,000,000 | —D | C] — C:Documents and SettingsAll Users.WINDOWSApplication DataFreshGames
[2009.06.18 00:09:32 | 00,000,871 | —- | C] () — C:Documents and SettingsШуРабочий столПереполох на ранчо.lnk
[2009.06.17 21:02:58 | 00,000,000 | —D | C] — C:Program Filestrend micro
[2009.06.17 21:02:52 | 00,000,000 | —D | C] — C:rsit
[2009.06.17 20:55:37 | 00,781,909 | —- | C] () — C:Documents and SettingsШуРабочий столRSIT.exe
[2009.06.17 05:11:57 | 00,000,000 | —D | C] — C:Program FilesSuperAX
[2009.06.17 02:45:49 | 00,000,000 | -HSD | C] — C:Recycled
[2009.06.16 23:27:14 | 00,000,000 | —D | C] — C:Documents and SettingsШуLocal SettingsApplication DataOpera
[2009.06.16 23:27:14 | 00,000,000 | —D | C] — C:Documents and SettingsШуApplication DataOpera
[2009.06.16 17:20:35 | 00,000,000 | —D | C] — C:Program FilesTrojan Remover
[2009.06.16 17:20:35 | 00,000,000 | —D | C] — C:Documents and SettingsШуМои документыSimply Super Software
[2009.06.16 17:20:35 | 00,000,000 | —D | C] — C:Documents and SettingsAll Users.WINDOWSApplication DataSimply Super Software
[2009.06.16 15:56:11 | 00,000,000 | -HSD | C] — C:RECYCLER(3)
[2009.06.16 04:01:49 | 00,000,000 | —D | C] — C:RECYCLER(2)
[2009.06.16 03:22:24 | 00,000,267 | —- | C] () — C:Boot.bak
[2009.06.16 03:22:18 | 00,260,272 | —- | C] () — C:cmldr
[2009.06.16 03:22:17 | 00,000,000 | —D | C] — C:cmdcons
[2009.06.16 03:19:06 | 00,000,000 | —D | C] — C:WINDOWSERDNT
[2009.06.16 03:18:50 | 00,000,000 | —D | C] — C:Qoobox
[2009.06.15 04:51:02 | 00,000,008 | -H— | C] () — C:Documents and SettingsШуApplication Datamicrosoft.data.xsl
[2009.06.15 01:31:05 | 00,000,000 | —D | C] — C:Program FilesSiteAccess
[2009.06.13 04:54:13 | 00,079,872 | —- | C] () — C:Documents and SettingsШуМои документыВне зоны боевых действий.doc
[2009.06.12 03:09:10 | 00,000,000 | —D | C] — C:Documents and SettingsAll Users.WINDOWSApplication DataВеселаяФерма2
[2009.06.12 03:02:50 | 00,001,541 | —- | C] () — C:Documents and SettingsШуРабочий столФабрика игр Alawar.lnk
[2009.06.12 03:02:50 | 00,000,826 | —- | C] () — C:Documents and SettingsШуРабочий столВеселая ферма 2.lnk
[2009.06.12 03:00:06 | 00,000,000 | —D | C] — C:Program FilesAlawar.ru
[2009.06.11 23:30:21 | 00,012,800 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32dllcachexpshims.dll
[2009.06.11 23:30:19 | 00,246,272 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32dllcacheieproxy.dll
[2009.06.08 03:17:53 | 00,227,840 | —- | C] (Teebo Software Solutions) — C:WINDOWSSystem32tssOfficeMenu1d.ocx
[2009.06.08 03:17:53 | 00,047,104 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32declrds.ax
[2009.06.08 03:17:52 | 00,115,016 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32MSINET.OCX
[2009.06.08 03:17:52 | 00,109,248 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32MSWINSCK.OCX
[2009.06.08 03:17:51 | 00,338,432 | —- | C] (MultiMedia Soft) — C:WINDOWSSystem323dabm7u.ocx
[2009.06.08 03:17:50 | 00,245,408 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32unicows.dll
[2009.06.08 03:17:37 | 00,000,000 | —D | C] — C:Program FilesWebTV
[2009.06.08 00:01:35 | 00,025,600 | —- | C] () — C:Documents and SettingsШуМои документыДЕВИЗ НАСТОЯЩЕЙ ЖЕНЩИНЫ.doc
[2009.06.05 17:41:04 | 00,346,624 | —- | C] () — C:Documents and SettingsШуМои документыСтефани Габриелла Герминотта.doc
[2009.06.02 01:50:28 | 00,000,000 | —D | C] — C:Program FilesLoviVkontakte
[2009.06.02 01:29:52 | 00,050,176 | —- | C] () — C:Documents and SettingsШуМои документыВлюбляйся в поступки.doc
[2009.05.30 11:42:02 | 00,061,440 | —- | C] () — C:Documents and SettingsШуМои документыДевочки.doc
[2009.05.02 22:47:09 | 00,000,038 | —- | C] () — C:WINDOWSavisplitter.INI
[2009.04.30 20:14:17 | 00,354,816 | —- | C] () — C:WINDOWSSystem32psisdecd.dll
[2009.04.28 00:05:38 | 00,755,027 | —- | C] () — C:WINDOWSSystem32xvidcore.dll
[2009.04.28 00:05:37 | 03,596,288 | —- | C] () — C:WINDOWSSystem32qt-dx331.dll
[2009.04.28 00:05:37 | 00,159,839 | —- | C] () — C:WINDOWSSystem32xvidvfw.dll
[2009.04.28 00:05:35 | 00,007,680 | —- | C] () — C:WINDOWSSystem32ff_vfw.dll
[2009.04.28 00:05:35 | 00,000,547 | —- | C] () — C:WINDOWSSystem32ff_vfw.dll.manifest
[2009.04.01 20:36:03 | 00,077,824 | R— | C] () — C:WINDOWSSystem32HPZIDS01.dll
[2008.11.06 14:42:59 | 00,005,632 | —- | C] () — C:WINDOWSSystem32driversStarOpen.sys
[2008.11.03 22:33:02 | 00,033,576 | —- | C] () — C:WINDOWSSystem32BCGPOleAcc.dll
[2008.08.11 22:34:22 | 00,000,069 | —- | C] () — C:WINDOWSNeroDigital.ini
[2008.08.05 11:43:36 | 00,019,427 | —- | C] () — C:WINDOWSwwdslcfg.ini
[2008.08.05 11:28:07 | 00,000,394 | —- | C] () — C:WINDOWSODBC.INI
[2008.08.05 11:22:26 | 00,164,352 | —- | C] () — C:WINDOWSSystem32unrar.dll
[2008.08.03 19:02:35 | 00,721,904 | —- | C] () — C:WINDOWSSystem32driverssptd.sys
[2008.08.03 19:02:20 | 00,278,728 | —- | C] () — C:WINDOWSSystem32driversatksgt.sys
[2008.08.03 19:02:19 | 00,025,416 | —- | C] () — C:WINDOWSSystem32driverslirsgt.sys
[2008.08.01 21:34:14 | 00,000,115 | —- | C] () — C:WINDOWSAWOPR.INI
[2008.08.01 20:43:44 | 00,135,168 | R— | C] () — C:WINDOWSSystem32RtlCPAPI.dll
[2008.08.01 20:43:36 | 00,000,164 | R— | C] () — C:WINDOWSavrack.ini
[2008.08.01 20:42:20 | 00,000,258 | —- | C] () — C:WINDOWSSystem32raidmgmt.ini
[2008.08.01 16:43:12 | 00,000,169 | —- | C] () — C:WINDOWSRtlRack.ini
[2008.08.01 16:39:29 | 00,034,308 | —- | C] () — C:WINDOWSSystem32BASSMOD.dll
[2008.08.01 14:34:59 | 00,002,704 | —- | C] () — C:WINDOWSWINCMD.INI
[2007.03.12 22:31:28 | 01,732,608 | —- | C] () — C:WINDOWSSystem32BCGPStyle2007Luna.dll
[2006.06.01 13:22:00 | 01,662,976 | —- | C] () — C:WINDOWSSystem32nvwdmcpl.dll
[2006.06.01 13:22:00 | 01,466,368 | —- | C] () — C:WINDOWSSystem32nview.dll
[2006.06.01 13:22:00 | 01,019,904 | —- | C] () — C:WINDOWSSystem32nvwimg.dll
[2006.06.01 13:22:00 | 00,581,632 | —- | C] () — C:WINDOWSSystem32nvhwvid.dll
[2006.06.01 13:22:00 | 00,466,944 | —- | C] () — C:WINDOWSSystem32nvshell.dll
[2006.06.01 13:22:00 | 00,286,720 | —- | C] () — C:WINDOWSSystem32nvnt4cpl.dll
[2006.06.01 13:22:00 | 00,196,608 | —- | C] () — C:WINDOWSSystem32nvapi.dll
[2006.03.02 16:00:00 | 00,000,637 | —- | C] () — C:WINDOWSwin.ini
[2006.03.02 16:00:00 | 00,000,227 | —- | C] () — C:WINDOWSsystem.ini
[2001.07.07 03:00:02 | 00,003,249 | —- | C] () — C:WINDOWSSystem32HPTCPMON.INI
========== Files — Modified Within 30 Days ==========
[4 C:WINDOWSSystem32*.tmp files]
[7 C:WINDOWS*.tmp files]
[2009.06.26 00:40:27 | 00,000,438 | -H— | M] () — C:WINDOWStasksUser_Feed_Synchronization-{7E654ACB-1BBB-4723-8E60-902208151B9F}.job
[2009.06.26 00:36:00 | 00,000,128 | —- | M] () — C:WINDOWSSystem32driversetchosts
[2009.06.26 00:35:50 | 00,001,554 | —- | M] () — C:Documents and SettingsAll Users.WINDOWSГлавное менюПрограммыАвтозагрузкаOrbit.lnk
[2009.06.26 00:35:23 | 00,063,804 | —- | M] () — C:WINDOWSSystem32nvapps.xml
[2009.06.26 00:35:15 | 00,000,006 | -H— | M] () — C:WINDOWStasksSA.DAT
[2009.06.26 00:35:07 | 00,002,048 | —S- | M] () — C:WINDOWSbootstat.dat
[2009.06.25 14:03:24 | 00,513,536 | —- | M] (OldTimer Tools) — C:Documents and SettingsШуРабочий столOTL.exe
[2009.06.25 02:45:07 | 00,002,422 | —- | M] () — C:WINDOWSSystem32wpa.dbl
[2009.06.23 01:18:37 | 00,002,463 | —- | M] () — C:Documents and SettingsШуРабочий столMicrosoft Office Word 2003.lnk
[2009.06.22 01:57:09 | 00,000,664 | —- | M] () — C:Documents and SettingsAll Users.WINDOWSРабочий столWinamp.lnk
[2009.06.20 02:12:59 | 00,000,227 | —- | M] () — C:WINDOWSsystem.ini
[2009.06.18 13:36:34 | 04,319,442 | -H— | M] () — C:Documents and SettingsШуLocal SettingsApplication DataIconCache.db
[2009.06.18 05:24:16 | 00,034,308 | —- | M] () — C:WINDOWSSystem32BASSMOD.dll
[2009.06.18 05:20:16 | 00,110,592 | —- | M] (Microsoft Corporation) — C:WINDOWSSystem32dllcachedbnetlib.dll
[2009.06.18 05:20:16 | 00,110,592 | —- | M] (Microsoft Corporation) — C:WINDOWSSystem32dbnetlib.dll
[2009.06.18 05:09:03 | 00,721,904 | —- | M] () — C:WINDOWSSystem32driverssptd.sys
[2009.06.18 00:44:56 | 00,001,541 | —- | M] () — C:Documents and SettingsШуРабочий столФабрика игр Alawar.lnk
[2009.06.18 00:44:56 | 00,000,842 | —- | M] () — C:Documents and SettingsШуРабочий столСобачий рай.lnk
[2009.06.18 00:09:32 | 00,000,871 | —- | M] () — C:Documents and SettingsШуРабочий столПереполох на ранчо.lnk
[2009.06.15 04:51:02 | 00,000,008 | -H— | M] () — C:Documents and SettingsШуApplication Datamicrosoft.data.xsl
[2009.06.15 04:20:12 | 00,048,640 | —- | M] () — C:Documents and SettingsШуLocal SettingsApplication DataDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.06.13 04:54:13 | 00,079,872 | —- | M] () — C:Documents and SettingsШуМои документыВне зоны боевых действий.doc
[2009.06.12 05:18:38 | 00,271,784 | —- | M] () — C:WINDOWSSystem32FNTCACHE.DAT
[2009.06.12 03:02:50 | 00,000,826 | —- | M] () — C:Documents and SettingsШуРабочий столВеселая ферма 2.lnk
[2009.06.08 00:01:35 | 00,025,600 | —- | M] () — C:Documents and SettingsШуМои документыДЕВИЗ НАСТОЯЩЕЙ ЖЕНЩИНЫ.doc
[2009.06.05 17:41:05 | 00,346,624 | —- | M] () — C:Documents and SettingsШуМои документыСтефани Габриелла Герминотта.doc
[2009.06.04 21:27:38 | 00,000,038 | —- | M] () — C:WINDOWSavisplitter.INI
[2009.06.02 01:29:52 | 00,050,176 | —- | M] () — C:Documents and SettingsШуМои документыВлюбляйся в поступки.doc
[2009.06.01 20:51:12 | 23,635,392 | —- | M] (Microsoft Corporation) — C:WINDOWSSystem32MRT.exe
[2009.05.30 11:42:03 | 00,061,440 | —- | M] () — C:Documents and SettingsШуМои документыДевочки.doc
========== Alternate Data Streams ==========
@Alternate Data Stream — 88 bytes -> C:WINDOWSSystem32dbnetlib.dll:SummaryInformation
