All processes killed
========== PROCESSES ==========
Process explorer.exe killed successfully!
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{88888888-8888-8888-8888-888888888888} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{88888888-8888-8888-8888-888888888888} not found.
Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9D64F819-9380-8473-DAB2-702FCB3D7A3E} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{9D64F819-9380-8473-DAB2-702FCB3D7A3E} deleted successfully.
Registry key HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregamva deleted successfully.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{43e144e5-1c4a-11de-b841-001a4d75ec6b} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{43e144e5-1c4a-11de-b841-001a4d75ec6b} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{49a339e8-c65a-11dc-b040-f1e434541553} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{49a339e8-c65a-11dc-b040-f1e434541553} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{49a339e9-c65a-11dc-b040-f1e434541553} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{49a339e9-c65a-11dc-b040-f1e434541553} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{78e23bb6-1a09-11de-b83e-001a4d75ec6b} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{78e23bb6-1a09-11de-b83e-001a4d75ec6b} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{96202b12-9501-11dc-afdc-d301a29501d2} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{96202b12-9501-11dc-afdc-d301a29501d2} not found.
========== FILES ==========
LoadLibrary failed for C:Documents and SettingsАнтонApplication Databpfeed.dll
C:Documents and SettingsАнтонApplication Databpfeed.dll NOT unregistered.
C:Documents and SettingsАнтонApplication Databpfeed.dll moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: LocalService
->Temp folder emptied: 0 bytes
File delete failed. C:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 33170 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes
User: Администратор
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Антон
->Temp folder emptied: 7334768 bytes
->Temporary Internet Files folder emptied: 28970256 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 4228588 bytes
%systemroot%System32 .tmp files removed: 788045 bytes
Windows Temp folder emptied: 0 bytes
Session Manager Temp folder emptied: 417341752 bytes
Session Manager Tmp folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 437,51 mb
OTM by OldTimer — Version 3.0.0.2 log created on 06272009_224728
Files moved on Reboot…
Registry entries deleted on Reboot…
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Антон at 2009-06-27 23:00:29
Microsoft Windows XP Professional Service Pack 2
System drive C: has 68 GB (45%) free of 153 GB
Total RAM: 1023 MB (59% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:00:32, on 27.06.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesICQ6ToolbarICQ Service.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32PnkBstrA.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesVIAVIAudioiHDADeckHDeck.exe
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:Program FilesAuthinet.exe
C:Program FilesQuickTimeqttask.exe
C:Program FilesSamsungSamsung Media Studio 5SMSTray.exe
C:Program FilesMarkAnyContentSaferMAAgent.exe
C:Program FilesMail.RuAgentMAgent.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesICQ6.5ICQ.exe
C:Program FilesHPDigital Imagingbinhpqtra08.exe
C:Program FilesHPDigital ImagingSmart Web Printinghpswp_clipbook.exe
C:Program FilesHPDigital ImagingbinhpqSTE08.exe
C:Program FilesHPDigital Imagingbinhpqbam08.exe
C:Program FilesHPDigital Imagingbinhpqgpc01.exe
C:WINDOWSexplorer.exe
C:Program FilesInternet Exploreriexplore.exe
C:Documents and SettingsАнтонРабочий столRSIT.exe
C:Program Filestrend microАнтон.exe
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.mail.ru
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://search.qip.ru/search?query=%s&from=IE
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — c:program filesmail.rusputnikMailRuSputnik.dll
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O2 — BHO: HP Print Enhancer — {0347C33E-8762-4905-BF09-768834316C61} — C:Program FilesHPDigital ImagingSmart Web Printinghpswp_printenhancer.dll
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — c:program filesmail.rusputnikMailRuSputnik.dll
O2 — BHO: HP Smart BHO Class — {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} — C:Program FilesHPDigital ImagingSmart Web Printinghpswp_BHO.dll
O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — c:program filesmail.rusputnikMailRuSputnik.dll
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [HDAudDeck] C:Program FilesVIAVIAudioiHDADeckHDeck.exe 1
O4 — HKLM..Run: [AVP] «C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe»
O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 — HKLM..Run: [hpqSRMon] C:Program FilesHPDigital ImagingbinhpqSRMon.exe
O4 — HKLM..Run: [Insys inet] C:Program FilesAuthinet.exe
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeqttask.exe» -atboottime
O4 — HKLM..Run: [NevoDRM] «C:ИгрыNevoDRMNevoDRM.exe»
O4 — HKLM..Run: [SMSTray] C:Program FilesSamsungSamsung Media Studio 5SMSTray.exe
O4 — HKLM..Run: [MAAgent] C:Program FilesMarkAnyContentSaferMAAgent.exe
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [ICQ] «C:Program FilesICQ6.5ICQ.exe» silent
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Поиск@Mail.Ru — res://c:program filesmail.rusputnikMailRuSputnik.dll/282
O8 — Extra context menu item: Словари@Mail.Ru — res://c:program filesmail.rusputnikMailRuSputnik.dll/283
O9 — Extra button: Cтатистика Веб-Антивируса — {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} — C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0SCIEPlgn.dll
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: Расширенный выбор HP — {DDE87865-83C5-48c4-8357-2F5B1AA84522} — C:Program FilesHPDigital ImagingSmart Web Printinghpswp_BHO.dll
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O12 — Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 — HKLMSystemCCSServicesTcpip..{32DAE4F5-DA44-49F8-9DB0-E401D5C00DF7}: NameServer = 217.24.176.230,217.24.177.2
O17 — HKLMSystemCS1ServicesTcpip..{32DAE4F5-DA44-49F8-9DB0-E401D5C00DF7}: NameServer = 217.24.176.230,217.24.177.2
O17 — HKLMSystemCS2ServicesTcpip..{32DAE4F5-DA44-49F8-9DB0-E401D5C00DF7}: NameServer = 217.24.176.230,217.24.177.2
O23 — Service: Kaspersky Anti-Virus 7.0 (AVP) — Kaspersky Lab — C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: ICQ Service — Unknown owner — C:Program FilesICQ6ToolbarICQ Service.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — c:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NBService — Nero AG — C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 — Service: NMIndexingService — Nero AG — C:Program FilesCommon FilesAheadLibNMIndexingService.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
O23 — Service: TMNT.Teenage Mutant Ninja Turtles Drivers Auto Removal (pr2ajzsb) (pr2ajzsb) — Russobit-M — C:WINDOWSsystem32pr2ajzsb.exe
O23 — Service: KDS 4 Drivers Auto Removal (pr2am8ub) (pr2am8ub) — Russobit-M — C:WINDOWSsystem32pr2am8ub.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe
—
End of file — 9516 bytes
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer — C:Program FilesHPDigital ImagingSmart Web Printinghpswp_printenhancer.dll [2007-11-06 322880]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx [2001-03-02 37808]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — c:program filesmail.rusputnikMailRuSputnik.dll [2009-05-22 680624]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class — C:Program FilesHPDigital ImagingSmart Web Printinghpswp_BHO.dll [2007-11-06 542016]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2008-06-12 958712]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2009-01-13 3112736]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — c:program filesmail.rusputnikMailRuSputnik.dll [2009-05-22 680624]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2007-04-20 8429568]
«HDAudDeck»=C:Program FilesVIAVIAudioiHDADeckHDeck.exe [2008-11-11 704512]
«AVP»=C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe [2007-06-28 218376]
«HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2007-10-14 49152]
«hpqSRMon»=C:Program FilesHPDigital ImagingbinhpqSRMon.exe [2007-08-22 80896]
«Insys inet»=C:Program FilesAuthinet.exe [2008-12-09 1100288]
«QuickTime Task»=C:Program FilesQuickTimeqttask.exe [2008-11-11 77824]
«NevoDRM»=C:ИгрыNevoDRMNevoDRM.exe [2008-12-11 41984]
«SMSTray»=C:Program FilesSamsungSamsung Media Studio 5SMSTray.exe [2007-09-20 132624]
«MAAgent»=C:Program FilesMarkAnyContentSaferMAAgent.exe [2007-01-30 57344]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2009-05-22 6210744]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-17 15360]
«ICQ»=C:Program FilesICQ6.5ICQ.exe [2009-03-01 172792]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregBgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:Program FilesCommon FilesAheadLibNMBgMonitor.exe [2008-11-11 147456]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregDAEMON Tools-1033]
C:Program FilesDRToolsdaemon.exe [2008-11-11 81920]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregHDAudDeck]
C:Program FilesVIAVIAudioiHDADeckHDeck.exe [2008-11-11 704512]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNeroFilterCheck]
C:Program FilesCommon FilesAheadLibNeroCheck.exe [2008-11-11 155648]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNvMediaCenter]
NvMCTray.dll,NvTaskbarInit []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregnwiz]
nwiz.exe /install []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregQuickTime Task]
C:Program FilesQuickTimeqttask.exe [2008-11-11 77824]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRemoteControl]
C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2008-11-11 32768]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregTray Temperature]
C:PROGRA~1AWSMiniBug.exe [2008-11-11 249856]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Ускоренный запуск Adobe Reader.lnk]
C:PROGRA~1AdobeACROBA~1.0ReaderREADER~1.EXE [2008-11-11 29696]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigservices]
«wuauserv»=2
«UPS»=3
C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
HP Digital Imaging Monitor.lnk — C:Program FilesHPDigital Imagingbinhpqtra08.exe
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyklogon]
C:WINDOWSsystem32klogon.dll [2007-06-28 206088]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{88485281-8b4b-4f8d-9ede-82e29a064277}»=C:PROGRA~1MarkAnyCONTEN~1MACSMA~1.DLL [2004-11-23 192512]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesMedal of Honor Allied Assault Breakthroughmoh_Breakthrough.exe»=»C:Program FilesMedal of Honor Allied Assault Breakthroughmoh_Breakthrough.exe:*:Enabled:Medal of Honor Allied Assault(tm) Breakthrough»
«C:Program FilesMedal of Honor Allied Assault BreakthroughMOHAA.EXE»=»C:Program FilesMedal of Honor Allied Assault BreakthroughMOHAA.EXE:*:Enabled:Medal of Honor Allied Assault»
«C:Program FilesMoH Allied Assault Spearheadmoh_spearhead.exe»=»C:Program FilesMoH Allied Assault Spearheadmoh_spearhead.exe:*:Enabled:Medal of Honor Allied Assault(tm) Spearhead»
«C:Program FilesMoH Allied Assault SpearheadMOHAA.EXE»=»C:Program FilesMoH Allied Assault SpearheadMOHAA.EXE:*:Enabled:Medal of Honor Allied Assault»
«C:Program FilesRockstar GamesMidnight Club IImc2.exe»=»C:Program FilesRockstar GamesMidnight Club IImc2.exe:*:Enabled:mc2»
«C:Program FilesEa GamesNeed For Speed Underground 2speed2.exe»=»C:Program FilesEa GamesNeed For Speed Underground 2speed2.exe:*:Enabled:speed2»
«C:Documents and SettingsАнтонРабочий столМои игрыEngineImplementation_Retail.exe»=»C:Documents and SettingsАнтонРабочий столМои игрыEngineImplementation_Retail.exe:*:Enabled:A2M Game Engine»
«C:Program FilesHPDigital Imagingbinhpqtra08.exe»=»C:Program FilesHPDigital Imagingbinhpqtra08.exe:*:Enabled:hpqtra08.exe»
«C:Program FilesHPDigital Imagingbinhpqste08.exe»=»C:Program FilesHPDigital Imagingbinhpqste08.exe:*:Enabled:hpqste08.exe»
«C:Program FilesHPDigital Imagingbinhposid01.exe»=»C:Program FilesHPDigital Imagingbinhposid01.exe:*:Enabled:hposid01.exe»
«C:Program FilesHPDigital Imagingbinhpiscnapp.exe»=»C:Program FilesHPDigital Imagingbinhpiscnapp.exe:*:Enabled:hpiscnapp.exe»
«C:Program FilesHPDigital Imagingbinhpqkygrp.exe»=»C:Program FilesHPDigital Imagingbinhpqkygrp.exe:*:Enabled:hpqkygrp.exe»
«C:Program FilesOrangeBoxhl2.exe»=»C:Program FilesOrangeBoxhl2.exe:*:Enabled:hl2»
«C:Program FilesICQ6.5ICQ.exe»=»C:Program FilesICQ6.5ICQ.exe:*:Enabled:ICQ6»
«C:WINDOWSsystem32muzapp.exe»=»C:WINDOWSsystem32muzapp.exe:*:Enabled:MUZ AOD APP player»
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
======List of files/folders created in the last 1 months======
2009-06-27 22:47:28 —-D—- C:_OTM
2009-06-27 22:43:54 —-RASHD—- C:autorun.inf
2009-06-27 21:48:11 —-D—- C:Ea Games
2009-06-19 21:37:50 —-D—- C:Program Filestrend micro
2009-06-19 21:37:49 —-D—- C:rsit
2009-06-15 12:58:34 —-D—- C:Documents and SettingsАнтонApplication DataIce Age 2
2009-06-08 19:55:39 —-D—- C:Program FilesOpenAL
2009-06-08 19:54:54 —-A—- C:WINDOWSsystem32ATL80.dll
2009-06-08 19:54:47 —-A—- C:WINDOWSsystem32mfc80u.dll
2009-06-08 19:54:47 —-A—- C:WINDOWSsystem32mfc80ENU.dll
2009-06-08 19:54:47 —-A—- C:WINDOWSsystem32mfc80.dll
2009-06-08 19:54:46 —-A—- C:WINDOWSsystem32mfcm80.dll
2009-06-08 19:54:45 —-A—- C:WINDOWSsystem32mfcm80u.dll
2009-06-08 19:54:36 —-A—- C:WINDOWSsystem32msvcm80.dll
2009-06-08 19:54:28 —-A—- C:WINDOWSsystem32OpenALwEAX.exe
2009-06-08 19:54:15 —-A—- C:WINDOWSsystem32vcomp.dll
2009-05-29 22:56:48 —-D—- C:Documents and SettingsАнтонApplication DataDisney Interactive Studios
2009-05-29 22:40:16 —-D—- C:Program FilesMeet the Robinsons
2009-05-29 22:39:04 —-D—- C:Program FilesSpider-Man 3
2009-05-29 22:25:04 —-A—- C:WINDOWSsystem32Borlndmm.dll
2009-05-29 22:25:01 —-A—- C:WINDOWSsystem32msvci70d.dll
2009-05-29 22:25:00 —-A—- C:WINDOWSsystem32Msvcp60d.dll
2009-05-29 22:24:58 —-A—- C:WINDOWSsystem32msvcp70d.dll
2009-05-29 22:24:57 —-A—- C:WINDOWSsystem32msvcp71d.dll
2009-05-29 22:24:56 —-A—- C:WINDOWSsystem32msvcr70d.dll
2009-05-29 22:24:56 —-A—- C:WINDOWSsystem32msvcp80.dll
2009-05-29 22:24:54 —-A—- C:WINDOWSsystem32msvcr80.dll
2009-05-29 22:24:52 —-A—- C:WINDOWSsystem32OpenAL32.dll
2009-05-29 22:24:48 —-A—- C:WINDOWSsystem32wrap_oal.dll
2009-05-29 22:24:06 —-A—- C:WINDOWSgame.ini
======List of files/folders modified in the last 1 months======
2009-06-27 23:00:29 —-D—- C:temp
2009-06-27 22:54:01 —-D—- C:WINDOWSsystem32CatRoot2
2009-06-27 22:54:01 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2009-06-27 22:54:00 —-D—- C:Program FilesAuth
2009-06-27 22:49:12 —-D—- C:WINDOWSsystem32
2009-06-27 22:49:12 —-D—- C:WINDOWS
2009-06-27 22:43:54 —-D—- C:WINDOWSPrefetch
2009-06-27 22:03:07 —-A—- C:WINDOWSSchedLgU.Txt
2009-06-22 00:04:49 —-D—- C:Documents and SettingsАнтонApplication DataHPAppData
2009-06-21 23:58:23 —-D—- C:WINDOWSHelp
2009-06-19 21:37:50 —-RD—- C:Program Files
2009-06-15 23:02:57 —-D—- C:Documents and SettingsАнтонApplication DataMra
2009-06-08 20:19:01 —-HD—- C:WINDOWSinf
2009-06-08 20:19:01 —-D—- C:WINDOWSTemp
2009-06-08 20:18:50 —-RSD—- C:WINDOWSassembly
2009-06-08 20:18:02 —-D—- C:WINDOWSsystem32DirectX
2009-06-08 19:56:15 —-D—- C:Program Filesdirectx
2009-06-08 19:55:31 —-SHD—- C:WINDOWSInstaller
2009-06-08 19:55:06 —-HD—- C:Config.Msi
2009-06-08 19:54:52 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-06-08 19:54:08 —-D—- C:Games
2009-06-04 15:25:51 —-A—- C:WINDOWSsystem32CmdLineExt.dll
2009-06-03 13:26:31 —-HD—- C:Program FilesInstallShield Installation Information
2009-06-03 13:20:22 —-D—- C:Program FilesActivision
2009-06-02 12:42:35 —-D—- C:Program FilesЛунтик. Математика
2009-05-29 00:40:05 —-D—- C:Program FilesBuka
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2004-08-17 40448]
R1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2004-08-17 14848]
R1 klif;Klif; ??C:WINDOWSsystem32driversklif.sys []
R1 prodrv04;Star Force copy protection driver v4; C:WINDOWSSystem32driversprodrv04.sys [2008-07-23 114496]
R1 prodrv06;StarForce Protection Environment Driver v6; C:WINDOWSSystem32driversprodrv06.sys [2004-08-09 53920]
R2 hwpsgt;hwpsgt; C:WINDOWSsystem32DRIVERShwpsgt.sys [2008-05-09 137344]
R2 lemsgt;lemsgt; C:WINDOWSsystem32DRIVERSlemsgt.sys [2008-05-09 9472]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:WINDOWSsystem32DRIVERSfetnd5b.sys [2004-04-15 42496]
R3 HdAudAddService;VIA High Definition Audio Service; C:WINDOWSsystem32driversviahduaa.sys [2006-11-09 136448]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2004-10-27 138240]
R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2001-08-17 9600]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:WINDOWSsystem32DRIVERSklim5.sys [2007-04-04 24344]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2007-04-20 6739168]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-03 31616]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-03 26624]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-03 57600]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2004-08-03 20480]
R3 WpdUsb;WpdUsb; C:WINDOWSSystem32Driverswpdusb.sys [2006-10-18 38528]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSfetnd5.sys [2001-08-18 27165]
S3 FXDrv32;FXDrv32; ??D:FXDrv32.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2007-10-30 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2007-10-30 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2007-10-30 21568]
S3 MAP2A10K;MAP2A10K; C:WINDOWSsystem32driversMAP2A10K.SYS []
S3 NTSIM;NTSIM; ??C:WINDOWSsystem32ntsim.sys []
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2004-08-04 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2004-08-03 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-03 26496]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]
S3 zteusbser;ZTE USB Device for Legacy Serial Communication; C:WINDOWSsystem32DRIVERSzteusbser.sys [2007-04-10 98432]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 hpqddsvc;Служба HP CUE DeviceDiscovery; C:WINDOWSsystem32svchost.exe [2004-08-17 14336]
R2 ICQ Service;ICQ Service; C:Program FilesICQ6ToolbarICQ Service.exe [2008-06-10 222456]
R2 Net Driver HPZ12;Net Driver HPZ12; C:WINDOWSSystem32svchost.exe [2004-08-17 14336]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2007-04-20 163908]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSSystem32svchost.exe [2004-08-17 14336]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2009-01-20 66872]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2004-08-17 14336]
R3 hpqcxs08;hpqcxs08; C:WINDOWSsystem32svchost.exe [2004-08-17 14336]
S2 AVP;Kaspersky Anti-Virus 7.0; C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe [2007-06-28 218376]
S2 pr2ajzsb;TMNT.Teenage Mutant Ninja Turtles Drivers Auto Removal (pr2ajzsb); C:WINDOWSsystem32pr2ajzsb.exe [2007-03-24 407208]
S2 pr2am8ub;KDS 4 Drivers Auto Removal (pr2am8ub); C:WINDOWSsystem32pr2am8ub.exe [2007-10-04 410984]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2008-11-11 36864]
S3 IDriverT;InstallDriver Table Manager; c:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-11-11 741376]
S3 NBService;NBService; C:Program FilesNeroNero 7Nero BackItUpNBService.exe [2008-11-11 774144]
S3 NMIndexingService;NMIndexingService; C:Program FilesCommon FilesAheadLibNMIndexingService.exe [2007-01-15 266240]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2008-11-11 914944]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-11-11 122880]
EOF
