Logfile of random’s system information tool 1.05 (written by random/random)
Run by Ant-Killer at 2009-02-19 00:12:28
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0:12:29, on 19.02.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20815)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesMail.RuAgentMAgent.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesPunto Switcherpunto.exe
C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
C:OrCADlicense_managerlmgrd.exe
C:WINDOWSsystem32lkcitdl.exe
C:OrCADlicense_managerlmgrd.exe
C:WINDOWSsystem32lkads.exe
C:WINDOWSsystem32lktsrv.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe
C:Program FilesNational InstrumentsSharedSecuritynidmsrv.exe
C:WINDOWSsystem32nisvcloc.exe
C:Program FilesCyberLinkShared FilesRichVideo.exe
C:WINDOWSSystem32snmp.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSHelpzpx2.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesOperaopera.exe
C:Program FilesMalwarebytes’ Anti-Malwarembam.exe
C:rsitRSIT.exe
C:Program Filestrend microHijackThisAnt-Killer.exe
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40316
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://search.qip.ru/search?query=%s&from=IE
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = http=127.0.0.1:8600
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — (no file)
O2 — BHO: flashget urlcatch — {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} — C:Program FilesFlashGetjccatch.dll
O2 — BHO: azdlibP — {4B5DF7B5-5FAB-4547-8420-35CFF12A2263} — C:Documents and SettingsAll Users.WINDOWSApplication Dataazdlib.dll
O2 — BHO: IEVkbdBHO — {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} — (no file)
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O2 — BHO: FlashGet GetFlash Class — {F156768E-81EF-470C-9057-481BA8380DBA} — C:Program FilesFlashGetgetflash.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [Punto Switcher] C:Program FilesPunto Switcherpunto.exe
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [IE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘Default user’)
O8 — Extra context menu item: &Закачать все при помощи FlashGet — C:Program FilesFlashGetjc_all.htm
O8 — Extra context menu item: &Закачать при помощи FlashGet — C:Program FilesFlashGetjc_link.htm
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: Найти в интернете — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/282
O8 — Extra context menu item: Найти в словарях — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/283
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:WINDOWSsystem32shdocvw.dll
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: FlashGet — {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} — C:Program FilesFlashGetFlashGet.exe
O9 — Extra ‘Tools’ menuitem: FlashGet — {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} — C:Program FilesFlashGetFlashGet.exe
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O17 — HKLMSystemCCSServicesTcpip..{2238F8B2-7C1B-4F50-8446-B541F84C9E4F}: NameServer = 10.0.0.10
O17 — HKLMSystemCCSServicesTcpip..{78B076FE-17D5-4121-A567-1B96D385A841}: NameServer = 10.0.0.10
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 — Service: Acronis Scheduler2 Service (AcrSch2Svc) — Acronis — C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 — Service: Cadence License Manager — Macrovision Corporation — C:OrCADlicense_managerlmgrd.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Google Updater Service (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Lookout Citadel Server (LkCitadelServer) — National Instruments, Inc. — C:WINDOWSsystem32lkcitdl.exe
O23 — Service: National Instruments PSP Server Locator (lkClassAds) — National Instruments, Inc. — C:WINDOWSsystem32lkads.exe
O23 — Service: National Instruments Time Synchronization (lkTimeSync) — National Instruments, Inc. — C:WINDOWSsystem32lktsrv.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: National Instruments Domain Service (NIDomainService) — National Instruments, Inc. — C:Program FilesNational InstrumentsSharedSecuritynidmsrv.exe
O23 — Service: NILM License Manager — Macrovision Corporation — C:Program FilesNational InstrumentsSharedLicense ManagerBinlmgrd.exe
O23 — Service: NI Service Locator (niSvcLoc) — National Instruments Corp. — C:WINDOWSsystem32nisvcloc.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared FilesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Служба SNMP (SNMP) — Корпорация Майкрософт — C:WINDOWSSystem32snmp.exe
O23 — Service: SpIDer Guard for Windows (SPIDERNT) — Doctor Web, Ltd. — C:PROGRA~1DrWebspidernt.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Windows Security Guard (winsecguard) — Unknown owner — C:WINDOWSHelpzpx2.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe
—
End of file — 9454 bytes
======Scheduled tasks folder======
C:WINDOWStaskskzrojlee.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll [2003-05-15 50376]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]
FGCatchUrl — C:Program FilesFlashGetjccatch.dll [2007-08-06 94308]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{4B5DF7B5-5FAB-4547-8420-35CFF12A2263}]
RKAU Data Provider — C:Documents and SettingsAll Users.WINDOWSApplication Dataazdlib.dll [2009-02-17 477184]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-12-10 667336]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{F156768E-81EF-470C-9057-481BA8380DBA}]
FlashGet GetFlash Class — C:Program FilesFlashGetgetflash.dll [2007-05-18 163840]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-12-10 667336]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2008-10-16 1578248]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2008-12-10 4428472]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-15 15360]
«Punto Switcher»=C:Program FilesPunto Switcherpunto.exe [2008-10-16 735016]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2007-06-18 133632]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF
«NoDrives»=0
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=
«NoDriveAutoRun»=
«NoDrives»=
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE»=»C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«C:Program FilesFlashGetflashget.exe»=»C:Program FilesFlashGetflashget.exe:*:Enabled:Flashget»
«C:OrCADOrCAD_16.0toolsbincdnshelp.exe»=»C:OrCADOrCAD_16.0toolsbincdnshelp.exe:*:Enabled:cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsinfo.exe»=»C:OrCADOrCAD_16.0toolsbincdsinfo.exe:*:Enabled:cdsinfo (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsmps.exe»=»C:OrCADOrCAD_16.0toolsbincdsmps.exe:*:Enabled:cdsmps (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsMsgServer.exe»=»C:OrCADOrCAD_16.0toolsbincdsMsgServer.exe:*:Enabled:cdsMsgServer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsNameServer.exe»=»C:OrCADOrCAD_16.0toolsbincdsNameServer.exe:*:Enabled:cdsNameServer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsOaPathUtil.exe»=»C:OrCADOrCAD_16.0toolsbincdsOaPathUtil.exe:*:Enabled:cdsOaPathUtil (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRemote.exe»=»C:OrCADOrCAD_16.0toolsbincdsRemote.exe:*:Enabled:cdsRemote (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRemshClient.exe»=»C:OrCADOrCAD_16.0toolsbincdsRemshClient.exe:*:Enabled:cdsRemshClient (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRunHidden.exe»=»C:OrCADOrCAD_16.0toolsbincdsRunHidden.exe:*:Enabled:cdsRunHidden (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsServIpc.exe»=»C:OrCADOrCAD_16.0toolsbincdsServIpc.exe:*:Enabled:cdsServIpc (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsUnzip.exe»=»C:OrCADOrCAD_16.0toolsbincdsUnzip.exe:*:Enabled:cdsUnzip (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdswhich.exe»=»C:OrCADOrCAD_16.0toolsbincdswhich.exe:*:Enabled:cdswhich (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsZip.exe»=»C:OrCADOrCAD_16.0toolsbincdsZip.exe:*:Enabled:cdsZip (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincds_root.exe»=»C:OrCADOrCAD_16.0toolsbincds_root.exe:*:Enabled:cds_root (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclsAdminTool.exe»=»C:OrCADOrCAD_16.0toolsbinclsAdminTool.exe:*:Enabled:clsAdminTool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclsbd.exe»=»C:OrCADOrCAD_16.0toolsbinclsbd.exe:*:Enabled:clsbd (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclu.exe»=»C:OrCADOrCAD_16.0toolsbinclu.exe:*:Enabled:clu (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincmfeedback.exe»=»C:OrCADOrCAD_16.0toolsbincmfeedback.exe:*:Enabled:cmfeedback (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinconsmgr.exe»=»C:OrCADOrCAD_16.0toolsbinconsmgr.exe:*:Enabled:consmgr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbindregprint.exe»=»C:OrCADOrCAD_16.0toolsbindregprint.exe:*:Enabled:dregprint (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinemsMkError.exe»=»C:OrCADOrCAD_16.0toolsbinemsMkError.exe:*:Enabled:emsMkError (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinmpsinfo.exe»=»C:OrCADOrCAD_16.0toolsbinmpsinfo.exe:*:Enabled:mpsinfo (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinmsgHelp.exe»=»C:OrCADOrCAD_16.0toolsbinmsgHelp.exe:*:Enabled:msgHelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinnmp.exe»=»C:OrCADOrCAD_16.0toolsbinnmp.exe:*:Enabled:nmp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinnmppath.exe»=»C:OrCADOrCAD_16.0toolsbinnmppath.exe:*:Enabled:nmppath (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinswitchversion.exe»=»C:OrCADOrCAD_16.0toolsbinswitchversion.exe:*:Enabled:switchversion (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinvan.exe»=»C:OrCADOrCAD_16.0toolsbinvan.exe:*:Enabled:van (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinversionviewer.exe»=»C:OrCADOrCAD_16.0toolsbinversionviewer.exe:*:Enabled:versionviewer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturecapture.exe»=»C:OrCADOrCAD_16.0toolscapturecapture.exe:*:Enabled:capture (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturecomp16.exe»=»C:OrCADOrCAD_16.0toolscapturecomp16.exe:*:Enabled:comp16 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepcadi.exe»=»C:OrCADOrCAD_16.0toolscapturepcadi.exe:*:Enabled:pcadi (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepspiceexplorersrvr.exe»=»C:OrCADOrCAD_16.0toolscapturepspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepstswp.exe»=»C:OrCADOrCAD_16.0toolscapturepstswp.exe:*:Enabled:pstswp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscaptureregsvr32.exe»=»C:OrCADOrCAD_16.0toolscaptureregsvr32.exe:*:Enabled:regsvr32 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturesch2cap.exe»=»C:OrCADOrCAD_16.0toolscapturesch2cap.exe:*:Enabled:sch2cap (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturetutorialCAPTUTOR.EXE»=»C:OrCADOrCAD_16.0toolscapturetutorialCAPTUTOR.EXE:*:Enabled:CAPTUTOR (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbincdnshelp.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbincdnshelp.exe:*:Enabled:cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbintopicgen.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbintopicgen.exe:*:Enabled:topicgen (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbin_cdnshelp.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbin_cdnshelp.exe:*:Enabled:_cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsdfIIbinskill.exe»=»C:OrCADOrCAD_16.0toolsdfIIbinskill.exe:*:Enabled:skill (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsdfIIbinskill_g.exe»=»C:OrCADOrCAD_16.0toolsdfIIbinskill_g.exe:*:Enabled:skill_g (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinbodygen.exe»=»C:OrCADOrCAD_16.0toolsfetbinbodygen.exe:*:Enabled:bodygen (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbincpmaccess.exe»=»C:OrCADOrCAD_16.0toolsfetbincpmaccess.exe:*:Enabled:cpmaccess (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinlibaccess.exe»=»C:OrCADOrCAD_16.0toolsfetbinlibaccess.exe:*:Enabled:libaccess (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinlrm.exe»=»C:OrCADOrCAD_16.0toolsfetbinlrm.exe:*:Enabled:lrm (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinmkdefcfg.exe»=»C:OrCADOrCAD_16.0toolsfetbinmkdefcfg.exe:*:Enabled:mkdefcfg (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinnewgenasym.exe»=»C:OrCADOrCAD_16.0toolsfetbinnewgenasym.exe:*:Enabled:newgenasym (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpcbCache.exe»=»C:OrCADOrCAD_16.0toolsfetbinpcbCache.exe:*:Enabled:pcbCache (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinprojmgr.exe»=»C:OrCADOrCAD_16.0toolsfetbinprojmgr.exe:*:Enabled:projmgr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpsetup.exe»=»C:OrCADOrCAD_16.0toolsfetbinpsetup.exe:*:Enabled:psetup (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpurge.exe»=»C:OrCADOrCAD_16.0toolsfetbinpurge.exe:*:Enabled:purge (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinQPSetup.exe»=»C:OrCADOrCAD_16.0toolsfetbinQPSetup.exe:*:Enabled:QPSetup (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinrollback.exe»=»C:OrCADOrCAD_16.0toolsfetbinrollback.exe:*:Enabled:rollback (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinUniversalBrowser.exe»=»C:OrCADOrCAD_16.0toolsfetbinUniversalBrowser.exe:*:Enabled:UniversalBrowser (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinversiontool.exe»=»C:OrCADOrCAD_16.0toolsfetbinversiontool.exe:*:Enabled:versiontool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjava.exe»=»C:OrCADOrCAD_16.0toolsjrebinjava.exe:*:Enabled:java (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavacpl.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavacpl.exe:*:Enabled:javacpl (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavaw.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavaw.exe:*:Enabled:javaw (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavaws.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavaws.exe:*:Enabled:javaws (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjucheck.exe»=»C:OrCADOrCAD_16.0toolsjrebinjucheck.exe:*:Enabled:jucheck (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjusched.exe»=»C:OrCADOrCAD_16.0toolsjrebinjusched.exe:*:Enabled:jusched (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinkeytool.exe»=»C:OrCADOrCAD_16.0toolsjrebinkeytool.exe:*:Enabled:keytool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinkinit.exe»=»C:OrCADOrCAD_16.0toolsjrebinkinit.exe:*:Enabled:kinit (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinklist.exe»=»C:OrCADOrCAD_16.0toolsjrebinklist.exe:*:Enabled:klist (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinktab.exe»=»C:OrCADOrCAD_16.0toolsjrebinktab.exe:*:Enabled:ktab (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinorbd.exe»=»C:OrCADOrCAD_16.0toolsjrebinorbd.exe:*:Enabled:orbd (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinpack200.exe»=»C:OrCADOrCAD_16.0toolsjrebinpack200.exe:*:Enabled:pack200 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinpolicytool.exe»=»C:OrCADOrCAD_16.0toolsjrebinpolicytool.exe:*:Enabled:policytool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinrmid.exe»=»C:OrCADOrCAD_16.0toolsjrebinrmid.exe:*:Enabled:rmid (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinrmiregistry.exe»=»C:OrCADOrCAD_16.0toolsjrebinrmiregistry.exe:*:Enabled:rmiregistry (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinservertool.exe»=»C:OrCADOrCAD_16.0toolsjrebinservertool.exe:*:Enabled:servertool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebintnameserv.exe»=»C:OrCADOrCAD_16.0toolsjrebintnameserv.exe:*:Enabled:tnameserv (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinunpack200.exe»=»C:OrCADOrCAD_16.0toolsjrebinunpack200.exe:*:Enabled:unpack200 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutfvupdateutil.exe»=»C:OrCADOrCAD_16.0toolslayoutfvupdateutil.exe:*:Enabled:fvupdateutil (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcad.exe»=»C:OrCADOrCAD_16.0toolslayoutgcad.exe:*:Enabled:gcad (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcam.exe»=»C:OrCADOrCAD_16.0toolslayoutgcam.exe:*:Enabled:gcam (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcdin.exe»=»C:OrCADOrCAD_16.0toolslayoutgcdin.exe:*:Enabled:gcdin (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutidfin.exe»=»C:OrCADOrCAD_16.0toolslayoutidfin.exe:*:Enabled:idfin (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutipc356.exe»=»C:OrCADOrCAD_16.0toolslayoutipc356.exe:*:Enabled:ipc356 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlayout.exe»=»C:OrCADOrCAD_16.0toolslayoutlayout.exe:*:Enabled:layout (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlibcat.exe»=»C:OrCADOrCAD_16.0toolslayoutlibcat.exe:*:Enabled:libcat (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlsession.exe»=»C:OrCADOrCAD_16.0toolslayoutlsession.exe:*:Enabled:lsession (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmax2hyp.exe»=»C:OrCADOrCAD_16.0toolslayoutmax2hyp.exe:*:Enabled:max2hyp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxascb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxascb.exe:*:Enabled:maxascb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxascx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxascx.exe:*:Enabled:maxascx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxdxf.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxdxf.exe:*:Enabled:maxdxf (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxeco.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxeco.exe:*:Enabled:maxeco (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxfnetx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxfnetx.exe:*:Enabled:maxfnetx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminb.exe:*:Enabled:maxminb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminw.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminw.exe:*:Enabled:maxminw (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminx.exe:*:Enabled:maxminx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxorcad.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxorcad.exe:*:Enabled:maxorcad (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxp99x.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxp99x.exe:*:Enabled:maxp99x (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpadb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpadb.exe:*:Enabled:maxpadb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpadx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpadx.exe:*:Enabled:maxpadx (Release OrCAD 16.0)»
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:OrCADOrCAD_16.0toolsbincdnshelp.exe»=»C:OrCADOrCAD_16.0toolsbincdnshelp.exe:*:Enabled:cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsinfo.exe»=»C:OrCADOrCAD_16.0toolsbincdsinfo.exe:*:Enabled:cdsinfo (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsmps.exe»=»C:OrCADOrCAD_16.0toolsbincdsmps.exe:*:Enabled:cdsmps (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsMsgServer.exe»=»C:OrCADOrCAD_16.0toolsbincdsMsgServer.exe:*:Enabled:cdsMsgServer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsNameServer.exe»=»C:OrCADOrCAD_16.0toolsbincdsNameServer.exe:*:Enabled:cdsNameServer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsOaPathUtil.exe»=»C:OrCADOrCAD_16.0toolsbincdsOaPathUtil.exe:*:Enabled:cdsOaPathUtil (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRemote.exe»=»C:OrCADOrCAD_16.0toolsbincdsRemote.exe:*:Enabled:cdsRemote (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRemshClient.exe»=»C:OrCADOrCAD_16.0toolsbincdsRemshClient.exe:*:Enabled:cdsRemshClient (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRunHidden.exe»=»C:OrCADOrCAD_16.0toolsbincdsRunHidden.exe:*:Enabled:cdsRunHidden (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsServIpc.exe»=»C:OrCADOrCAD_16.0toolsbincdsServIpc.exe:*:Enabled:cdsServIpc (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsUnzip.exe»=»C:OrCADOrCAD_16.0toolsbincdsUnzip.exe:*:Enabled:cdsUnzip (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdswhich.exe»=»C:OrCADOrCAD_16.0toolsbincdswhich.exe:*:Enabled:cdswhich (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsZip.exe»=»C:OrCADOrCAD_16.0toolsbincdsZip.exe:*:Enabled:cdsZip (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincds_root.exe»=»C:OrCADOrCAD_16.0toolsbincds_root.exe:*:Enabled:cds_root (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclsAdminTool.exe»=»C:OrCADOrCAD_16.0toolsbinclsAdminTool.exe:*:Enabled:clsAdminTool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclsbd.exe»=»C:OrCADOrCAD_16.0toolsbinclsbd.exe:*:Enabled:clsbd (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclu.exe»=»C:OrCADOrCAD_16.0toolsbinclu.exe:*:Enabled:clu (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincmfeedback.exe»=»C:OrCADOrCAD_16.0toolsbincmfeedback.exe:*:Enabled:cmfeedback (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinconsmgr.exe»=»C:OrCADOrCAD_16.0toolsbinconsmgr.exe:*:Enabled:consmgr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbindregprint.exe»=»C:OrCADOrCAD_16.0toolsbindregprint.exe:*:Enabled:dregprint (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinemsMkError.exe»=»C:OrCADOrCAD_16.0toolsbinemsMkError.exe:*:Enabled:emsMkError (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinmpsinfo.exe»=»C:OrCADOrCAD_16.0toolsbinmpsinfo.exe:*:Enabled:mpsinfo (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinmsgHelp.exe»=»C:OrCADOrCAD_16.0toolsbinmsgHelp.exe:*:Enabled:msgHelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinnmp.exe»=»C:OrCADOrCAD_16.0toolsbinnmp.exe:*:Enabled:nmp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinnmppath.exe»=»C:OrCADOrCAD_16.0toolsbinnmppath.exe:*:Enabled:nmppath (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinswitchversion.exe»=»C:OrCADOrCAD_16.0toolsbinswitchversion.exe:*:Enabled:switchversion (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinvan.exe»=»C:OrCADOrCAD_16.0toolsbinvan.exe:*:Enabled:van (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinversionviewer.exe»=»C:OrCADOrCAD_16.0toolsbinversionviewer.exe:*:Enabled:versionviewer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturecapture.exe»=»C:OrCADOrCAD_16.0toolscapturecapture.exe:*:Enabled:capture (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturecomp16.exe»=»C:OrCADOrCAD_16.0toolscapturecomp16.exe:*:Enabled:comp16 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepcadi.exe»=»C:OrCADOrCAD_16.0toolscapturepcadi.exe:*:Enabled:pcadi (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepspiceexplorersrvr.exe»=»C:OrCADOrCAD_16.0toolscapturepspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepstswp.exe»=»C:OrCADOrCAD_16.0toolscapturepstswp.exe:*:Enabled:pstswp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscaptureregsvr32.exe»=»C:OrCADOrCAD_16.0toolscaptureregsvr32.exe:*:Enabled:regsvr32 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturesch2cap.exe»=»C:OrCADOrCAD_16.0toolscapturesch2cap.exe:*:Enabled:sch2cap (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturetutorialCAPTUTOR.EXE»=»C:OrCADOrCAD_16.0toolscapturetutorialCAPTUTOR.EXE:*:Enabled:CAPTUTOR (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbincdnshelp.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbincdnshelp.exe:*:Enabled:cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbintopicgen.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbintopicgen.exe:*:Enabled:topicgen (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbin_cdnshelp.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbin_cdnshelp.exe:*:Enabled:_cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsdfIIbinskill.exe»=»C:OrCADOrCAD_16.0toolsdfIIbinskill.exe:*:Enabled:skill (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsdfIIbinskill_g.exe»=»C:OrCADOrCAD_16.0toolsdfIIbinskill_g.exe:*:Enabled:skill_g (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinbodygen.exe»=»C:OrCADOrCAD_16.0toolsfetbinbodygen.exe:*:Enabled:bodygen (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbincpmaccess.exe»=»C:OrCADOrCAD_16.0toolsfetbincpmaccess.exe:*:Enabled:cpmaccess (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinlibaccess.exe»=»C:OrCADOrCAD_16.0toolsfetbinlibaccess.exe:*:Enabled:libaccess (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinlrm.exe»=»C:OrCADOrCAD_16.0toolsfetbinlrm.exe:*:Enabled:lrm (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinmkdefcfg.exe»=»C:OrCADOrCAD_16.0toolsfetbinmkdefcfg.exe:*:Enabled:mkdefcfg (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinnewgenasym.exe»=»C:OrCADOrCAD_16.0toolsfetbinnewgenasym.exe:*:Enabled:newgenasym (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpcbCache.exe»=»C:OrCADOrCAD_16.0toolsfetbinpcbCache.exe:*:Enabled:pcbCache (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinprojmgr.exe»=»C:OrCADOrCAD_16.0toolsfetbinprojmgr.exe:*:Enabled:projmgr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpsetup.exe»=»C:OrCADOrCAD_16.0toolsfetbinpsetup.exe:*:Enabled:psetup (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpurge.exe»=»C:OrCADOrCAD_16.0toolsfetbinpurge.exe:*:Enabled:purge (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinQPSetup.exe»=»C:OrCADOrCAD_16.0toolsfetbinQPSetup.exe:*:Enabled:QPSetup (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinrollback.exe»=»C:OrCADOrCAD_16.0toolsfetbinrollback.exe:*:Enabled:rollback (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinUniversalBrowser.exe»=»C:OrCADOrCAD_16.0toolsfetbinUniversalBrowser.exe:*:Enabled:UniversalBrowser (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinversiontool.exe»=»C:OrCADOrCAD_16.0toolsfetbinversiontool.exe:*:Enabled:versiontool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjava.exe»=»C:OrCADOrCAD_16.0toolsjrebinjava.exe:*:Enabled:java (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavacpl.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavacpl.exe:*:Enabled:javacpl (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavaw.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavaw.exe:*:Enabled:javaw (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavaws.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavaws.exe:*:Enabled:javaws (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjucheck.exe»=»C:OrCADOrCAD_16.0toolsjrebinjucheck.exe:*:Enabled:jucheck (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjusched.exe»=»C:OrCADOrCAD_16.0toolsjrebinjusched.exe:*:Enabled:jusched (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinkeytool.exe»=»C:OrCADOrCAD_16.0toolsjrebinkeytool.exe:*:Enabled:keytool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinkinit.exe»=»C:OrCADOrCAD_16.0toolsjrebinkinit.exe:*:Enabled:kinit (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinklist.exe»=»C:OrCADOrCAD_16.0toolsjrebinklist.exe:*:Enabled:klist (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinktab.exe»=»C:OrCADOrCAD_16.0toolsjrebinktab.exe:*:Enabled:ktab (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinorbd.exe»=»C:OrCADOrCAD_16.0toolsjrebinorbd.exe:*:Enabled:orbd (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinpack200.exe»=»C:OrCADOrCAD_16.0toolsjrebinpack200.exe:*:Enabled:pack200 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinpolicytool.exe»=»C:OrCADOrCAD_16.0toolsjrebinpolicytool.exe:*:Enabled:policytool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinrmid.exe»=»C:OrCADOrCAD_16.0toolsjrebinrmid.exe:*:Enabled:rmid (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinrmiregistry.exe»=»C:OrCADOrCAD_16.0toolsjrebinrmiregistry.exe:*:Enabled:rmiregistry (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinservertool.exe»=»C:OrCADOrCAD_16.0toolsjrebinservertool.exe:*:Enabled:servertool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebintnameserv.exe»=»C:OrCADOrCAD_16.0toolsjrebintnameserv.exe:*:Enabled:tnameserv (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinunpack200.exe»=»C:OrCADOrCAD_16.0toolsjrebinunpack200.exe:*:Enabled:unpack200 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutfvupdateutil.exe»=»C:OrCADOrCAD_16.0toolslayoutfvupdateutil.exe:*:Enabled:fvupdateutil (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcad.exe»=»C:OrCADOrCAD_16.0toolslayoutgcad.exe:*:Enabled:gcad (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcam.exe»=»C:OrCADOrCAD_16.0toolslayoutgcam.exe:*:Enabled:gcam (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcdin.exe»=»C:OrCADOrCAD_16.0toolslayoutgcdin.exe:*:Enabled:gcdin (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutidfin.exe»=»C:OrCADOrCAD_16.0toolslayoutidfin.exe:*:Enabled:idfin (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutipc356.exe»=»C:OrCADOrCAD_16.0toolslayoutipc356.exe:*:Enabled:ipc356 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlayout.exe»=»C:OrCADOrCAD_16.0toolslayoutlayout.exe:*:Enabled:layout (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlibcat.exe»=»C:OrCADOrCAD_16.0toolslayoutlibcat.exe:*:Enabled:libcat (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlsession.exe»=»C:OrCADOrCAD_16.0toolslayoutlsession.exe:*:Enabled:lsession (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmax2hyp.exe»=»C:OrCADOrCAD_16.0toolslayoutmax2hyp.exe:*:Enabled:max2hyp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxascb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxascb.exe:*:Enabled:maxascb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxascx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxascx.exe:*:Enabled:maxascx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxdxf.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxdxf.exe:*:Enabled:maxdxf (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxeco.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxeco.exe:*:Enabled:maxeco (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxfnetx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxfnetx.exe:*:Enabled:maxfnetx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminb.exe:*:Enabled:maxminb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminw.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminw.exe:*:Enabled:maxminw (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminx.exe:*:Enabled:maxminx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxorcad.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxorcad.exe:*:Enabled:maxorcad (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxp99x.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxp99x.exe:*:Enabled:maxp99x (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpadb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpadb.exe:*:Enabled:maxpadb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpadx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpadx.exe:*:Enabled:maxpadx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpcadb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpcadb.exe:*:Enabled:maxpcadb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpcadx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpcadx.exe:*:Enabled:maxpcadx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxprotb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxprotb.exe:*:Enabled:maxprotb (Release OrCAD 16.0)»
[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5b618b14-bfdc-11dd-bb5d-0004614509b8}]
shellAutoRuncommand — O:RECYCLERS-1-6-21-2434476501-1644491937-600003330-1213autorunme.exe
shellopencommand — O:RECYCLERS-1-6-21-2434476501-1644491937-600003330-1213autorunme.exe
======List of files/folders created in the last 1 months======
2009-02-19 00:06:44 —-A—- C:avenger.txt
2009-02-18 23:12:53 —-D—- C:ComboFix
2009-02-18 23:09:16 —-D—- C:Program FilesCommon Files{6EA9B29A-C801-4F76-805F-E41ACF9ED16Z}
2009-02-18 23:04:09 —-A—- C:WINDOWSsystem32CF27790.exe
2009-02-18 22:56:44 —-D—- C:_OTMoveIt
2009-02-17 22:03:51 —-A—- C:Documents and SettingsAll Users.WINDOWSApplication Dataazdlib.dll
2009-02-08 18:28:03 —-A—- C:WINDOWSUI.INI
2009-02-08 18:09:34 —-A—- C:WINDOWSsystem32Borlndmm.dll
2009-02-08 18:08:14 —-A—- C:WINDOWSsystem32MKScannerSetting.ini
2009-02-08 18:08:14 —-A—- C:WINDOWSsystem32MKCoInstaller.dll
2009-02-08 18:08:14 —-A—- C:WINDOWSsystem32ForgiveMe.exe
2009-02-08 18:08:14 —-A—- C:WINDOWSsystem32A2Nusd.dll
2009-02-08 18:08:14 —-A—- C:WINDOWSsystem32A2NMinidrv.ini
2009-02-08 18:08:14 —-A—- C:WINDOWSsystem32A2NMinidrv.dll
2009-02-08 13:58:20 —-A—- C:updating.exe
2009-02-07 16:21:10 —-D—- C:Documents and SettingsAnt-KillerApplication DataNero
2009-02-06 17:42:49 —-A—- C:WINDOWSsystem32winlogon2.exe
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lvkrn12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lvgl12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lvdx12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lvdlg12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltwvc12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTWND12n.DLL
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltwen12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTWEB12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltvid12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lttwn12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lttmb12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTTLB12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTSCR12n.DLL
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltnet12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltlst12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltisi12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltefx12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltdlg12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTDIS12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTDic12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTCON12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltcap12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltbar12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTAUT12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltann12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfxwd12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32lfXpm12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32lfXbm12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfwpg12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfwfx12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfvec12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lftga12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfsgi12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32lfRaw12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfras12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfpsd12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LFPNM12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfpng12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfplt12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfpdf12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfpct12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfpcd12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfmsp12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfmpg12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfmac12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lflma12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfkodak.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfitg12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfiff12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfica12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfgif12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfgbr12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lffpx7.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lffpx12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfflc12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfeps12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfdxf12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32lfdwg12N.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfdwf12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfdrw12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfdgn12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Ltwrp10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Ltkrn10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Ltimg10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Ltfil10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32LTDIS10N.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfwmf10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lftif10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfpcx10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfpct10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfmac10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lflmb10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lflma10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfimg10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lffax10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfdic10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32lfCUT12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32LFCMW12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfcmp10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfclp12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfcgm12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfcal12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfcal10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfbmp10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfawd12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfavi12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfani12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32BPEnhan.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Ltkrn12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Ltimg12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Ltfil12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lfwmf12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lftif12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lfpcx12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lflmb12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lfjbg12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32LFJ2K12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lfimg12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lffax12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32LFCMP12n.DLL
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lfbmp12n.dll
2009-02-05 11:36:17 —-A—- C:WINDOWSsystem32Vb5ko.dll
2009-02-05 02:01:42 —-A—- C:windowsupdates.exe
2009-02-04 19:49:51 —-A—- C:updates.exe
2009-01-23 08:30:14 —-A—- C:do.exe
2009-01-22 17:55:52 —-A—- C:winupdates2.exe
2009-01-22 08:19:45 —-D—- C:Program FilesQIP.Online
2009-01-21 20:52:50 —-D—- C:Program FilesCommon FilesICQ
2009-01-21 20:52:14 —-D—- C:Program FilesICQLite
2009-01-21 18:41:39 —-D—- C:Program FilesICQ6Toolbar
2009-01-21 18:41:36 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataICQ
2009-01-21 18:39:42 —-D—- C:Documents and SettingsAnt-KillerApplication DataICQ
2009-01-21 18:39:26 —-D—- C:Program FilesICQ6.5
======List of files/folders modified in the last 1 months======
2009-02-19 00:12:28 —-D—- C:rsit
2009-02-19 00:12:25 —-D—- C:WINDOWSsystem32
2009-02-19 00:07:35 —-D—- C:WINDOWSTemp
2009-02-19 00:07:31 —-D—- C:Avenger
2009-02-19 00:07:21 —-D—- C:Program FilesDrWeb
2009-02-19 00:06:44 —-D—- C:WINDOWSsystem32drivers
2009-02-19 00:06:05 —-A—- C:WINDOWSSchedLgU.Txt
2009-02-19 00:03:52 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-02-18 23:51:52 —-D—- C:Program FilesTVBrowserLITE
2009-02-18 23:37:26 —-RAD—- C:Program Files
2009-02-18 23:13:04 —-D—- C:WINDOWS
2009-02-18 23:09:16 —-D—- C:WINDOWSHelp
2009-02-18 23:09:16 —-D—- C:Program FilesCommon Files
2009-02-18 23:05:49 —-D—- C:Qoobox
2009-02-17 14:39:56 —-D—- C:Program FilesFlashGet
2009-02-15 20:05:12 —-D—- C:Documents and SettingsAnt-KillerApplication DatauTorrent
2009-02-13 14:40:58 —-D—- C:WINDOWSPrefetch
2009-02-13 00:35:38 —-D—- C:Downloads
2009-02-12 23:43:11 —-D—- C:Program FilesMozilla Firefox
2009-02-08 18:10:43 —-HD—- C:WINDOWSinf
2009-02-08 18:10:43 —-D—- C:WINDOWSsystem32CatRoot2
2009-02-08 18:09:36 —-D—- C:WINDOWSsystem
2009-02-07 16:20:37 —-D—- C:Program FilesNero
2009-02-07 16:20:25 —-SHD—- C:WINDOWSInstaller
2009-02-04 16:30:44 —-D—- C:Program FilesQIP 8030 локалка
2009-02-04 16:30:21 —-D—- C:Program FilesQIP 8030
2009-02-04 16:29:45 —-D—- C:Program FilesQIP
2009-01-22 17:55:22 —-SHD—- C:RECYCLER
2009-01-21 20:52:49 —-HD—- C:Program FilesInstallShield Installation Information
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2008-04-15 12032]
R2 acedrv11;acedrv11; ??C:WINDOWSsystem32driversacedrv11.sys []
R2 Aspi32;Aspi32; C:WINDOWSsystem32driversAspi32.sys [2002-07-17 16877]
R2 cvintdrv;cvintdrv; C:WINDOWSsystem32driverscvintdrv.sys [2006-07-27 4096]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-06-05 62336]
R2 tifsfilter;Acronis True Image FS Filter; C:WINDOWSsystem32DRIVERStifsfilt.sys [2008-12-01 44704]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2006-05-10 3964736]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
R3 MBAMSwissArmy;MBAMSwissArmy; ??C:WINDOWSsystem32driversmbamswissarmy.sys []
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2008-07-07 12160]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2006-06-01 3925920]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2006-06-17 83968]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-07-07 30336]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-07-07 17152]
R3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-07-08 25856]
R3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S2 SPIDER;SpIDer Guard File System Monitor; ??C:PROGRA~1DrWebspider.sys []
S3 a0ifdo2m;a0ifdo2m; C:WINDOWSsystem32driversa0ifdo2m.sys []
S3 ae21cbsr;ae21cbsr; C:WINDOWSsystem32driversae21cbsr.sys []
S3 GT680x;BearPaw 2448TA Plus Usb Scanner; C:WINDOWSSystem32DriversGt680x.sys [2003-02-18 17504]
S3 GVCplDrv;GVCplDrv; C:WINDOWSsystem32driversGVCplDrv.sys [2004-05-02 23040]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2007-06-18 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2007-06-18 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2008-11-04 554264]
R2 Cadence License Manager;Cadence License Manager; C:OrCADlicense_managerlmgrd.exe [2007-03-18 1327104]
R2 LkCitadelServer;Lookout Citadel Server; C:WINDOWSsystem32lkcitdl.exe [2006-06-19 688190]
R2 lkClassAds;National Instruments PSP Server Locator; C:WINDOWSsystem32lkads.exe [2006-07-25 45056]
R2 lkTimeSync;National Instruments Time Synchronization; C:WINDOWSsystem32lktsrv.exe [2006-07-25 57344]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe [2006-10-26 335872]
R2 NIDomainService;National Instruments Domain Service; C:Program FilesNational InstrumentsSharedSecuritynidmsrv.exe [2006-07-25 200704]
R2 niSvcLoc;NI Service Locator; C:WINDOWSsystem32nisvcloc.exe [2006-02-06 49152]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared FilesRichVideo.exe [2007-11-02 167936]
R2 SNMP;Служба SNMP; C:WINDOWSSystem32snmp.exe [2008-04-15 32768]
R2 winsecguard;Windows Security Guard; C:WINDOWSHelpzpx2.exe [2009-02-18 494080]
S2 SPIDERNT;SpIDer Guard for Windows; C:PROGRA~1DrWebspidernt.exe [2008-10-23 197896]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2007-10-09 36864]
S3 gusvc;Google Updater Service; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-01-17 137200]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2007-10-11 864256]
S3 LPDSVC;Сервер печати TCP/IP; C:WINDOWSsystem32tcpsvcs.exe [2008-04-15 19456]
S3 NILM License Manager;NILM License Manager; C:Program FilesNational InstrumentsSharedLicense ManagerBinlmgrd.exe [2006-06-27 1007616]
S3 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2006-06-01 155715]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 SNMPTRAP;Служба ловушек SNMP; C:WINDOWSSystem32snmptrap.exe [2008-04-15 8704]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 ICQ Service;ICQ Service; C:Program FilesICQ6ToolbarICQ Service.exe [2008-06-10 222456]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2007-10-11 122880]
S4 StarWindServiceAE;StarWind AE Service; C:Program FilesAlcohol SoftAlcohol 52StarWindStarWindServiceAE.exe [2007-05-28 275968]
EOF
