GMER 1.0.14.14536 — http://www.gmer.net
Autostart scan 2008-11-26 21:20:55
Windows 5.1.2600 Service Pack 3
HKLMSYSTEMCurrentControlSetControlSession ManagerSubSystems@Windows = %SystemRoot%system32csrss.exe ObjectDirectory=Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
HKLMSoftwareMicrosoftWindows NTCurrentVersionWinlogon@Userinit = C:WINDOWSsystem32userinit.exe,
HKLMSoftwareMicrosoftWindows NTCurrentVersionWinlogonNotify >>>
AtiExtEvent@DLLName = Ati2evxx.dll
dimsntfy@DLLName = %SystemRoot%System32dimsntfy.dll
HKLMSYSTEMCurrentControlSetServices >>>
Ati HotKey Poller@ = %SystemRoot%system32Ati2evxx.exe
NOD32krn@ = «C:Program FilesEsetnod32krn.exe»
OutpostFirewall@ = C:Program FilesAgnitumOutpost Firewalloutpost.exe /service /*file not found*/
WebaltaController@ = «C:Program FilesWebaltaWebaltaUpdaterService.exe» -service
HKLMSoftwareMicrosoftWindowsCurrentVersionRun >>>
@RTHDCPLRTHDCPL.EXE = RTHDCPL.EXE
@AmlMapleC:Program FilesAmlMapleAmlMaple.exe = C:Program FilesAmlMapleAmlMaple.exe
@HP Software UpdateC:Program FilesHPHP Software UpdateHPWuSchd2.exe = C:Program FilesHPHP Software UpdateHPWuSchd2.exe
@nod32kui»C:Program FilesEsetnod32kui.exe» /WAITSERVICE = «C:Program FilesEsetnod32kui.exe» /WAITSERVICE
@Outpost FirewallC:Program FilesAgnitumOutpost Firewalloutpost.exe /waitservice /*file not found*/ = C:Program FilesAgnitumOutpost Firewalloutpost.exe /waitservice /*file not found*/
@OutpostFeedBackC:Program FilesAgnitumOutpost Firewallfeedback.exe /dump:os_startup /*file not found*/ = C:Program FilesAgnitumOutpost Firewallfeedback.exe /dump:os_startup /*file not found*/
@NeroFilterCheckC:Program FilesCommon FilesAheadLibNeroCheck.exe = C:Program FilesCommon FilesAheadLibNeroCheck.exe
@Google Desktop Search»C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe» /startup = «C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe» /startup
@NevoDRM»C:Program Files????NevoDRMNevoDRM.exe» = «C:Program Files????NevoDRMNevoDRM.exe»
HKCUSoftwareMicrosoftWindowsCurrentVersionRun >>>
@CTFMON.EXEC:WINDOWSsystem32ctfmon.exe = C:WINDOWSsystem32ctfmon.exe
@VistaIconC:Program FilesVistaDriveIconVistaDrv.exe = C:Program FilesVistaDriveIconVistaDrv.exe
@Download MasterC:Program FilesDownload Masterdmaster.exe -autorun /*file not found*/ = C:Program FilesDownload Masterdmaster.exe -autorun /*file not found*/
@Google Update»C:Documents and SettingsAdminLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe» /c = «C:Documents and SettingsAdminLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe» /c
@BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»C:Program FilesCommon FilesAheadLibNMBgMonitor.exe» = «C:Program FilesCommon FilesAheadLibNMBgMonitor.exe»
@Yupdate!»C:Program FilesCommon FilesYandexYupdateyupdate.exe» = «C:Program FilesCommon FilesYandexYupdateyupdate.exe»
HKLMSoftwareMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad@WPDShServiceObj = C:WINDOWSsystem32wpdshserviceobj.dll
HKLMSoftwareMicrosoftWindowsCurrentVersionShell ExtensionsApproved >>>
@{42071714-76d4-11d1-8b24-00a0c9068ff3} /*Расширение CPL панорамирования дисплея*/deskpan.dll /*file not found*/ = deskpan.dll /*file not found*/
@{35786D3C-B075-49b9-88DD-029876E11C01} /*Portable Devices*/%SystemRoot%system32wpdshext.dll = %SystemRoot%system32wpdshext.dll
@{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8} /*Portable Devices Menu*/%SystemRoot%system32wpdshext.dll = %SystemRoot%system32wpdshext.dll
@{07C45BB1-4A8C-4642-A1F5-237E7215FF66} /*IE Microsoft BrowserBand*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{1C1EDB47-CE22-4bbb-B608-77B48F83C823} /*IE Fade Task*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{205D7A97-F16D-4691-86EF-F3075DCCA57D} /*IE Menu Desk Bar*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{3028902F-6374-48b2-8DC6-9725E775B926} /*IE AutoComplete*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{30D02401-6A81-11d0-8274-00C04FD5AE38} /*IE Search Band*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{3C374A40-BAE4-11CF-BF7D-00AA006946EE} /*Microsoft Url History Service*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{3DC7A020-0ACD-11CF-A9BB-00AA004AE837} /*The Internet*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{43886CD5-6529-41c4-A707-7B3C92C05E68} /*IE Navigation Bar*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{44C76ECD-F7FA-411c-9929-1B77BA77F524} /*IE Menu Site*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{4B78D326-D922-44f9-AF2A-07805C2A3560} /*IE Menu Band*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{6038EF75-ABFC-4e59-AB6F-12D397F6568D} /*IE Microsoft History AutoComplete List*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{692F0339-CBAA-47e6-B5B5-3B84DB604E87} /*Extensions Manager Folder*/C:WINDOWSsystem32extmgr.dll = C:WINDOWSsystem32extmgr.dll
@{6B4ECC4F-16D1-4474-94AB-5A763F2A54AE} /*IE Tracking Shell Menu*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{6CF48EF8-44CD-45d2-8832-A16EA016311B} /*IE IShellFolderBand*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{73CFD649-CD48-4fd8-A272-2070EA56526B} /*IE BandProxy*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{7BD29E00-76C1-11CF-9DD0-00A0C9034933} /*Temporary Internet Files*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{7BD29E01-76C1-11CF-9DD0-00A0C9034933} /*Temporary Internet Files*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{871C5380-42A0-1069-A2EA-08002B30309D} /*Internet Name Space*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8} /*IE MRU AutoComplete List*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E} /*IE RSS Feeder Folder*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{9D958C62-3954-4b44-8FAB-C4670C1DB4C2} /*IE Microsoft Shell Folder AutoComplete List*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{B31C5FAE-961F-415b-BAF0-E697A5178B94} /*IE Microsoft Multiple AutoComplete List Container*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{BC476F4C-D9D7-4100-8D4E-E043F6DEC409} /*Microsoft Browser Architecture*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A} /*IE Shell Rebar BandSite*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{CFBFAE00-17A6-11D0-99CB-00C04FD64497} /*Microsoft Url Search Hook*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{E6EE9AAC-F76B-4947-8260-A9F136138E11} /*IE Shell Band Site Menu*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} /*Shell DocObject Viewer*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{F2CF5485-4E02-4f68-819C-B92DE9277049} /*&Links*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E} /*IE Registry Tree Options Utility*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} /*IE User Assist*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{FBF23B40-E3F0-101B-8488-00AA003E56F8} /*InternetShortcut*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{FDE7673D-2E19-4145-8376-BBD58C4BC7BA} /*IE Custom MRU AutoCompleted List*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{FF393560-C2A7-11CF-BFF4-444553540000} /*History*/C:WINDOWSsystem32ieframe.dll = C:WINDOWSsystem32ieframe.dll
@{596AB062-B4D2-4215-9F74-E9109B0A8153} /*Свойства: Предыдущие версии*/%SystemRoot%system32twext.dll = %SystemRoot%system32twext.dll
@{9DB7A13C-F208-4981-8353-73CC61AE2783} /*Предыдущие версии*/%SystemRoot%system32twext.dll = %SystemRoot%system32twext.dll
@{00E7B358-F65B-4dcf-83DF-CD026B94BFD4} /*Autoplay for SlideShow*/(null) =
@{e82a2d71-5b2f-43a0-97b8-81be15854de8} /*ShellLink for Application References*/C:WINDOWSsystem32dfshim.dll = C:WINDOWSsystem32dfshim.dll
@{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} /*Shell Icon Handler for Application References*/C:WINDOWSsystem32dfshim.dll = C:WINDOWSsystem32dfshim.dll
@{BDEADF00-C265-11D0-BCED-00A0C90AB50F} /*Web Folders*/C:Program FilesCommon FilesMicrosoft SharedWeb FoldersMSONSEXT.DLL = C:Program FilesCommon FilesMicrosoft SharedWeb FoldersMSONSEXT.DLL
@{42042206-2D85-11D3-8CFF-005004838597} /*Microsoft Office HTML Icon Handler*/C:Program FilesMicrosoft OfficeOffice12msohevi.dll = C:Program FilesMicrosoft OfficeOffice12msohevi.dll
@{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} /*Microsoft Office Metadata Handler*/C:PROGRA~1COMMON~1MICROS~1OFFICE12msoshext.dll = C:PROGRA~1COMMON~1MICROS~1OFFICE12msoshext.dll
@{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} /*Microsoft Office Thumbnail Handler*/C:PROGRA~1COMMON~1MICROS~1OFFICE12msoshext.dll = C:PROGRA~1COMMON~1MICROS~1OFFICE12msoshext.dll
@{0006F045-0000-0000-C000-000000000046} /*Microsoft Office Outlook Custom Icon Handler*/C:PROGRA~1MICROS~2Office12OLKFSTUB.DLL = C:PROGRA~1MICROS~2Office12OLKFSTUB.DLL
@{00020D75-0000-0000-C000-000000000046} /*Microsoft Office Outlook Desktop Icon Handler*/C:PROGRA~1MICROS~2Office12MLSHEXT.DLL = C:PROGRA~1MICROS~2Office12MLSHEXT.DLL
@{B41DB860-8EE4-11D2-9906-E49FADC173CA} /*WinRAR shell extension*/C:Program FilesWinRARrarext.dll = C:Program FilesWinRARrarext.dll
@{B089FE88-FB52-11d3-BDF1-0050DA34150D} /*NOD32 Context Menu Shell Extension*/C:Program FilesEsetnodshex.dll = C:Program FilesEsetnodshex.dll
@{B327765E-D724-4347-8B16-78AE18552FC3} /*NeroDigitalIconHandler*/C:Program FilesCommon FilesAheadLibNeroDigitalExt.dll = C:Program FilesCommon FilesAheadLibNeroDigitalExt.dll
@{7F1CF152-04F8-453A-B34C-E609530A9DC8} /*NeroDigitalPropSheetHandler*/C:Program FilesCommon FilesAheadLibNeroDigitalExt.dll = C:Program FilesCommon FilesAheadLibNeroDigitalExt.dll
@{D250CF30-1CF3-4CED-AA2B-D76F5FD05C99} /*Webalta Анти-Баннер*/C:PROGRA~1WebaltaWEBALT~2.DLL = C:PROGRA~1WebaltaWEBALT~2.DLL
HKLMSoftwareClasses*shellexContextMenuHandlers >>>
ASW@{33C9E362-3EDA-4930-8AFE-5DA39A8BB77A} = C:Program FilesAgnitumOutpost Firewallop_shell.dll
NOD32 Context Menu Shell Extension@{B089FE88-FB52-11d3-BDF1-0050DA34150D} = C:Program FilesEsetnodshex.dll
WinRAR@{B41DB860-8EE4-11D2-9906-E49FADC173CA} = C:Program FilesWinRARrarext.dll
HKLMSoftwareClasses*shellexContextMenuHandlers@{EB4D3CFE-E2AA-4C6E-B2FE-2A749F95D208} = C:Program FilesNeroNero 7Nero BackItUpNBShell.dll
HKLMSoftwareClassesDirectoryshellexContextMenuHandlers >>>
ASW@{33C9E362-3EDA-4930-8AFE-5DA39A8BB77A} = C:Program FilesAgnitumOutpost Firewallop_shell.dll
WinRAR@{B41DB860-8EE4-11D2-9906-E49FADC173CA} = C:Program FilesWinRARrarext.dll
HKLMSoftwareClassesFoldershellexContextMenuHandlers >>>
ASW@{33C9E362-3EDA-4930-8AFE-5DA39A8BB77A} = C:Program FilesAgnitumOutpost Firewallop_shell.dll
NOD32 Context Menu Shell Extension@{B089FE88-FB52-11d3-BDF1-0050DA34150D} = C:Program FilesEsetnodshex.dll
WinRAR@{B41DB860-8EE4-11D2-9906-E49FADC173CA} = C:Program FilesWinRARrarext.dll
HKLMSoftwareClassesFoldershellexContextMenuHandlers@{EB4D3CFE-E2AA-4C6E-B2FE-2A749F95D208} = C:Program FilesNeroNero 7Nero BackItUpNBShell.dll
HKLMSoftwareMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects >>>
@{0347C33E-8762-4905-BF09-768834316C61}C:Program FilesHPSmart Web Printinghpswp_printenhancer.dll = C:Program FilesHPSmart Web Printinghpswp_printenhancer.dll
@{053F9267-DC04-4294-A72C-58F732D338C0}C:Program FilesHPSmart Web Printinghpswp_framework.dll = C:Program FilesHPSmart Web Printinghpswp_framework.dll
@{6C3BDD12-4B6F-44F1-87CB-4D94E1ED38A5}C:PROGRA~1WebaltaWEBALT~2.DLL = C:PROGRA~1WebaltaWEBALT~2.DLL
@{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}C:Program FilesJavajre1.6.0_06binssv.dll = C:Program FilesJavajre1.6.0_06binssv.dll
@{9961627E-4059-41B4-8E0E-A7D6B3854ADF}C:PROGRA~1DOWNLO~1dmiehlp.dll = C:PROGRA~1DOWNLO~1dmiehlp.dll
@{AA58ED58-01DD-4D91-8333-CF10577473F7}C:Documents and SettingsAdminGooglegoogletoolbar1.dll = C:Documents and SettingsAdminGooglegoogletoolbar1.dll
HKLMSoftwareMicrosoftInternet ExplorerMain >>>
@Default_Page_URLhttp://go.microsoft.com/fwlink/?LinkId=69157 = http://go.microsoft.com/fwlink/?LinkId=69157
@Start Pagehttp://go.microsoft.com/fwlink/?LinkId=69157 = http://go.microsoft.com/fwlink/?LinkId=69157
@Local Page%SystemRoot%system32blank.htm = %SystemRoot%system32blank.htm
HKCUSoftwareMicrosoftInternet ExplorerMain >>>
@Start Pagehttp://my.webalta.ru = http://my.webalta.ru
@Local PageC:WINDOWSsystem32blank.htm = C:WINDOWSsystem32blank.htm
HKLMSoftwareClassesPROTOCOLSFiltertext/xml@CLSID = C:PROGRA~1COMMON~1MICROS~1OFFICE12MSOXMLMF.DLL
HKLMSoftwareClassesPROTOCOLSHandler >>>
dvd@CLSID = C:WINDOWSsystem32msvidctl.dll
its@CLSID = C:WINDOWSsystem32itss.dll
mhtml@CLSID = %SystemRoot%system32inetcomm.dll
ms-help@CLSID = C:Program FilesCommon FilesMicrosoft SharedHelphxds.dll
ms-its@CLSID = C:WINDOWSsystem32itss.dll
tv@CLSID = C:WINDOWSsystem32msvidctl.dll
wia@CLSID = C:WINDOWSsystem32wiascr.dll
HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces{2729C846-E804-4E23-AEF5-82B14538E173} /*Подключение по локальной сети*/ >>>
@IPAddress10.25.11.110 = 10.25.11.110
@NameServer195.230.99.6 = 195.230.99.6
@DefaultGateway10.25.11.109 = 10.25.11.109
@Domain =
HKLMSYSTEMCurrentControlSetServicesWinSock2ParametersProtocol_Catalog9Catalog_Entries >>>
000000000001@PackedCatalogItem = imon.dll
000000000002@PackedCatalogItem = imon.dll
000000000003@PackedCatalogItem = imon.dll
000000000004@PackedCatalogItem = imon.dll
000000000005@PackedCatalogItem = imon.dll
HKLMSYSTEMCurrentControlSetServicesWinSock2ParametersProtocol_Catalog9Catalog_Entries 00000000011@PackedCatalogItem = imon.dll
C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка = HP Digital Imaging Monitor.lnk
—- EOF — GMER 1.0.14 —-
