Logfile of random’s system information tool 1.06 (written by random/random)
Run by Dmitry at 2010-01-10 03:15:07
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 709 MB (7%) free of 10 GB
Total RAM: 1023 MB (52% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:15:30, on 10.01.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSSYSTEM32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSSystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSYSTEM32Ati2evxx.exe
C:WINDOWSExplorer.EXE
C:Program FilesJavajre6binjqs.exe
E:Program FilesNOD 32nod32krn.exe
C:Program FilesJavajre6binjusched.exe
C:PROGRA~1COMMON~1PCSuiteDATALA~1DATALA~1.EXE
C:Program FilesScanSoftOmniPageSE2.0OpwareSE2.exe
E:Program FilesNOD 32nod32kui.exe
C:WINDOWSsystem32rundll32.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesMail.RuAgentMAgent.exe
C:Program FilesQuickTimeqttask.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesCommon FilesARS CompanyAgentAgent.exe
C:Program FilesCommon FilesAheadLibNMBgMonitor.exe
C:WINDOWSsystem32ctfmon.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesActual Reminder 3.0 Talk + WeatherActual Reminder.exe
C:Program FilesYandexPunto Switcherpunto.exe
C:Program FilesCommon FilesAheadLibNMIndexStoreSvr.exe
C:PROGRA~1COMMON~1PCSuiteServicesSERVIC~1.EXE
C:Program FilesOperaopera.exe
C:Program FilesMicrosoft OfficeOffice10WINWORD.EXE
C:Documents and SettingsDmitryLocal SettingsApplication DataOperaOperatemporary_downloadsRSIT.exe
C:Program Filestrend microDmitry.exe
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://google.icq.com/search/search_frame.php
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://google.icq.com
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru?clid=41279
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.2.4204.1700swg.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O3 — Toolbar: Rambler-Ассистент — {468CD8A9-7C25-45FA-969E-3D925C689DC4} — C:Program FilesRambler AssistantramblertoolbarU1.dll
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [DataLayer] C:PROGRA~1COMMON~1PCSuiteDATALA~1DATALA~1.EXE
O4 — HKLM..Run: [VVSN] C:Program FilesVVSNVVSN.exe
O4 — HKLM..Run: [OpwareSE2] «C:Program FilesScanSoftOmniPageSE2.0OpwareSE2.exe»
O4 — HKLM..Run: [nod32kui] «E:Program FilesNOD 32nod32kui.exe» /WAITSERVICE
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeqttask.exe» -atboottime
O4 — HKCU..Run: [MSMSGS] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKCU..Run: [AMP Agent] C:Program FilesCommon FilesARS CompanyAgentAgent.exe
O4 — HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] «C:Program FilesCommon FilesAheadLibNMBgMonitor.exe»
O4 — HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: Actual Reminder.lnk = C:Program FilesActual Reminder 3.0 Talk + WeatherActual Reminder.exe
O4 — Startup: Punto Switcher.lnk = C:Program FilesYandexPunto Switcherpunto.exe
O4 — Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOffice10OSA.EXE
O4 — Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000
O8 — Extra context menu item: Добавить в Rambler-Закладки — res://C:Program FilesRambler AssistantramblertoolbarU1.dll/zakladki.htm
O8 — Extra context menu item: Найти с помощью Рамблера — res://C:Program FilesRambler AssistantramblertoolbarU1.dll/search.htm
O8 — Extra context menu item: Перевести с помощью словарей Рамблера — res://C:Program FilesRambler AssistantramblertoolbarU1.dll/dic.htm
O8 — Extra context menu item: Поиск@Mail.Ru — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/SEARCH.HTM
O8 — Extra context menu item: Словари@Mail.Ru — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/TRANSLATE.HTM
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Перевод — {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} — C:Program FilesX-Translator DIAMONDPROMTIE4promtie5.htm
O9 — Extra ‘Tools’ menuitem: Перевести — {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} — C:Program FilesX-Translator DIAMONDPROMTIE4promtie5.htm
O9 — Extra button: (no name) — {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} — C:Program FilesX-Translator DIAMONDPROMTIE4options.htm
O9 — Extra ‘Tools’ menuitem: Настройка параметров перевода — {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} — C:Program FilesX-Translator DIAMONDPROMTIE4options.htm
O9 — Extra button: ICQ Lite — {B863453A-26C3-4e1f-A54D-A2CD196348E9} — E:Program FilesICQLiteICQLite.exe (file missing)
O9 — Extra ‘Tools’ menuitem: ICQ Lite — {B863453A-26C3-4e1f-A54D-A2CD196348E9} — E:Program FilesICQLiteICQLite.exe (file missing)
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra button: Перевод — {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} — C:Program FilesX-Translator DIAMONDPROMTIE4promtie5.htm (HKCU)
O9 — Extra ‘Tools’ menuitem: Перевести — {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} — C:Program FilesX-Translator DIAMONDPROMTIE4promtie5.htm (HKCU)
O9 — Extra button: (no name) — {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} — C:Program FilesX-Translator DIAMONDPROMTIE4options.htm (HKCU)
O9 — Extra ‘Tools’ menuitem: Настройка перевода — {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} — C:Program FilesX-Translator DIAMONDPROMTIE4options.htm (HKCU)
O16 — DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) — http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1160824895452
O17 — HKLMSystemCCSServicesTcpip..{819C3088-5F37-4873-8832-84EB9AB2D016}: NameServer = 91.144.136.3 91.144.138.3
O20 — Winlogon Notify: reset5 — C:WINDOWSSYSTEM32reset5.dll
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSSystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — C:WINDOWSsystem32ati2sgag.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба Google Update (gupdate1ca24814b41db4e) (gupdate1ca24814b41db4e) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSSystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSSystem32mnmsrvc.exe
O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — E:Program FilesNOD 32nod32krn.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSSystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Reset 5 — Unknown owner — C:WINDOWSsystem32srvany.exe (file missing)
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Virtual CD v4 Security service (VCDSecS) — Unknown owner — E:Program Files1Systemvcdsecs.exe (file missing)
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSSystem32wbemwmiapsrv.exe
—
End of file — 10926 bytes
======Scheduled tasks folder======
C:WINDOWStasksGoogle Software Updater.job
C:WINDOWStasksGoogleUpdateTaskMachineCore.job
C:WINDOWStasksGoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2005-09-24 63136]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-07-26 623304]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.2.4204.1700swg.dll [2009-08-24 761840]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2010-01-05 41760]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2010-01-05 73728]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-07-26 623304]
{468CD8A9-7C25-45FA-969E-3D925C689DC4} — Rambler-Ассистент — C:Program FilesRambler AssistantramblertoolbarU1.dll [2009-01-14 849392]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«SunJavaUpdateSched»=C:Program FilesJavajre6binjusched.exe [2010-01-05 149280]
«DataLayer»=C:PROGRA~1COMMON~1PCSuiteDATALA~1DATALA~1.EXE [2004-08-24 986624]
«VVSN»=C:Program FilesVVSNVVSN.exe []
«OpwareSE2″=C:Program FilesScanSoftOmniPageSE2.0OpwareSE2.exe [2003-05-08 49152]
«nod32kui»=E:Program FilesNOD 32nod32kui.exe [2007-12-12 949376]
«NvCplDaemon»=C:WINDOWSSystem32NvCpl.dll [2004-07-15 4112384]
«BluetoothAuthenticationAgent»=bthprops.cpl,,BluetoothAuthenticationAgent []
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2004-11-02 32768]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2008-07-26 3110392]
«NeroFilterCheck»=C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]
«QuickTime Task»=C:Program FilesQuickTimeqttask.exe [2005-12-09 98304]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«MSMSGS»=C:Program FilesMessengermsmsgs.exe [2004-08-17 1667584]
«AMP Agent»=C:Program FilesCommon FilesARS CompanyAgentAgent.exe [2001-09-21 37376]
«BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=C:Program FilesCommon FilesAheadLibNMBgMonitor.exe [2006-11-16 139264]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2004-08-17 15360]
«swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-08-24 39408]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregDAEMON Tools]
E:Program FilesDAEMON Toolsdaemon.exe -lang 1033 []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregFineReader7NewsReaderPro]
C:Program FilesABBYY FineReader 7.0 Professional EditionAbbyyNewsReader.exe [2003-08-20 278528]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregModem Booster]
E:Program Files¦+-+¦ModemBtr.exe []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNeroFilterCheck]
C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregnod32kui]
E:Program Filesnod32kui.exe /WAITSERVICE []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNvCplDaemon]
C:WINDOWSSystem32NvCpl.dll [2004-07-15 4112384]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNvMediaCenter]
C:WINDOWSSystem32NvMcTray.dll [2004-07-15 81920]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregnwiz]
nwiz.exe /install []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregOrderReminder]
C:Program FilesHewlett-PackardOrderReminderOrderReminder.exe [2005-03-18 98304]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregOutpost Firewall]
E:Program FilesOutpost FirewallOutpost Firewalloutpost.exe /waitservice []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregOutpostFeedBack]
E:Program FilesOutpost FirewallOutpost Firewallfeedback.exe /dump:os_startup []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregPCSuiteTrayApplication]
C:PROGRA~1NokiaNOKIAP~1TRAYAP~1.EXE [2004-08-17 148992]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregQuickTime Task]
C:Program FilesQuickTimeqttask.exe [2005-12-09 98304]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRemoteControl]
C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2004-11-02 32768]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregWinampAgent]
C:Program FilesWinampUninstWA.exewinampa.exe [2007-04-23 35328]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Orbit.lnk]
E:PROGRA~1HTMLORBITD~1orbitdm.exe /H []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^QuickTV.lnk]
E:PROGRA~1AVERTV~1QuickTV.exe [2006-02-21 401408]
C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Microsoft Office.lnk — C:Program FilesMicrosoft OfficeOffice10OSA.EXE
Adobe Gamma Loader.lnk — C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
C:Documents and SettingsDmitryГлавное менюПрограммыАвтозагрузка
Actual Reminder.lnk — C:Program FilesActual Reminder 3.0 Talk + WeatherActual Reminder.exe
Punto Switcher.lnk — C:Program FilesYandexPunto Switcherpunto.exe
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSSYSTEM32Ati2evxx.dll [2007-12-05 122880]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyreset5]
C:WINDOWSSYSTEM32reset5.dll [2002-09-10 17408]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkUploadMgr]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«C:Program FilesSharemanShareman.exe»=»C:Program FilesSharemanShareman.exe:*:Enabled:Shareman»
«C:Program FilesOperaopera.exe»=»C:Program FilesOperaopera.exe:*:Enabled:Opera Internet Browser»
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
======List of files/folders created in the last 1 months======
2010-01-10 03:15:10 —-D—- C:Program Filestrend micro
2010-01-10 03:15:07 —-D—- C:rsit
2010-01-05 20:34:45 —-A—- C:WINDOWSsystem32rdtsc.dll
2010-01-05 20:34:42 —-D—- C:Program FilesSignal-COM
2010-01-05 20:24:49 —-A—- C:WINDOWSsystem32javaws.exe
2010-01-05 20:24:49 —-A—- C:WINDOWSsystem32javaw.exe
2010-01-05 20:24:49 —-A—- C:WINDOWSsystem32deploytk.dll
2010-01-05 20:24:48 —-A—- C:WINDOWSsystem32java.exe
2010-01-05 20:21:13 —-D—- C:Documents and SettingsAll UsersApplication DataYandex
2010-01-05 20:21:12 —-D—- C:Program FilesYandex
2009-12-23 22:19:25 —-D—- C:Documents and SettingsDmitryApplication DataActual Reminder
2009-12-23 22:18:38 —-D—- C:Program FilesActual Reminder 3.0 Talk + Weather
======List of files/folders modified in the last 1 months======
2010-01-10 01:51:18 —-A—- C:WINDOWSSchedLgU.Txt
2010-01-04 15:55:04 —-A—- C:WINDOWSNeroDigital.ini
2009-12-21 22:07:10 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-12-17 20:15:40 —-A—- C:WINDOWSAVerTV.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;Aavmker4; C:WINDOWSsystem32driversAavmker4.sys [2007-04-18 26888]
R1 AmdK7;Драйвер AMD K7 процессора; C:WINDOWSSystem32DRIVERSamdk7.sys [2004-08-17 41728]
R1 aswTdi;aswTdi; C:WINDOWSsystem32driversaswTdi.sys [2007-04-18 43176]
R1 nod32drv;nod32drv; C:WINDOWSsystem32driversnod32drv.sys [2007-12-12 15424]
R1 prodrv03;Star Force copy protection driver v3; ??C:WINDOWSSystem32driversprodrv03.sys []
R1 prodrv05;StarForce Protection Environment Driver v5; C:WINDOWSSystem32driversprodrv05.sys [2002-12-26 53568]
R1 prodrv06;StarForce Protection Environment Driver v6; C:WINDOWSSystem32driversprodrv06.sys [2004-08-09 53920]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2001-10-20 12032]
R2 AMON;AMON; C:WINDOWSsystem32driversamon.sys [2007-12-12 512096]
R2 aswMon2;aswMon2; C:WINDOWSsystem32driversaswMon2.sys [2007-04-18 94552]
R2 irda;ИК-протокол IrDA; C:WINDOWSSystem32DRIVERSirda.sys [2004-08-03 87424]
R3 ati2mtag;ati2mtag; C:WINDOWSSystem32DRIVERSati2mtag.sys [2007-12-05 2782208]
R3 Cap7134;Cap7134 Capture; C:WINDOWSSystem32DRIVERSCap7134.sys [2006-04-06 407072]
R3 dtscsi;dtscsi; C:WINDOWSSystem32Driversdtscsi.sys [2007-10-12 223128]
R3 ms_mpu401;Драйвер UART Microsoft MPU-401 MIDI; C:WINDOWSsystem32driversmsmpu401.sys [2001-08-17 2944]
R3 nvax;Service for NVIDIA(R) nForce(TM) Audio Enumerator; C:WINDOWSsystem32driversnvax.sys [2002-12-05 13056]
R3 NVENET;NVIDIA nForce MCP Networking Adapter Driver; C:WINDOWSSystem32DRIVERSNVENET.sys [2002-09-23 80896]
R3 nvnforce;Service for NVIDIA(R) nForce(TM) Audio; C:WINDOWSsystem32driversnvapu.sys [2002-12-05 241664]
R3 PhTVTune;Cap7134 TVTuner; C:WINDOWSSystem32DRIVERSPhTVTune.sys [2006-04-06 57120]
R3 Rasirda;Минипорт WAN (IrDA); C:WINDOWSSystem32DRIVERSrasirda.sys [2001-08-17 19584]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WINDOWSSystem32DriversRootMdm.sys [2001-10-20 5888]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSSystem32DRIVERSusbehci.sys [2004-08-03 26624]
R3 usbhub;Драйвер стандартного концентратора USB (Microsoft); C:WINDOWSSystem32DRIVERSusbhub.sys [2004-08-03 57600]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSSystem32DRIVERSusbohci.sys [2004-08-03 17024]
S3 a1xu1g74;a1xu1g74; C:WINDOWSsystem32driversa1xu1g74.sys []
S3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2007-04-18 23416]
S3 AvFlt;Antivirus Filter Driver; C:WINDOWSsystem32driversav5flt.sys []
S3 BlueletAudio;Bluetooth Audio Service; C:WINDOWSsystem32DRIVERSblueletaudio.sys [2005-02-01 20096]
S3 BT;Bluetooth PAN Network Adapter; C:WINDOWSsystem32DRIVERSbtnetdrv.sys [2004-09-21 10804]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:WINDOWSSystem32Driversbtcusb.sys [2005-04-06 23000]
S3 BthEnum;Драйвер блока запроса Bluetooth; C:WINDOWSsystem32DRIVERSBthEnum.sys [2004-08-03 17024]
S3 BTHidEnum;Bluetooth HID Enumerator; C:WINDOWSsystem32DRIVERSvbtenum.sys [2005-04-07 11860]
S3 BthPan;Bluetooth Device (Personal Area Network); C:WINDOWSsystem32DRIVERSbthpan.sys [2004-08-03 100992]
S3 BTHPORT;Драйвер порта Bluetooth; C:WINDOWSSystem32DriversBTHport.sys [2004-08-17 274688]
S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:WINDOWSSystem32DriversBTHUSB.sys [2004-08-03 18944]
S3 BTNetFilter;Bluetooth Network Filter; ??C:WINDOWSsystem32driversBTNetFilter.sys []
S3 CCDECODE;Closed Caption Decoder; C:WINDOWSSystem32DRIVERSCCDECODE.sys [2004-08-03 17024]
S3 GT680x;GrandTechICNameNT; C:WINDOWSSystem32Driversgt680x.sys [2001-11-08 18120]
S3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSSystem32DRIVERShidusb.sys [2001-08-17 9600]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:WINDOWSsystem32driversMSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:WINDOWSSystem32DRIVERSNABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:WINDOWSSystem32DRIVERSNdisIP.sys [2004-08-03 10880]
S3 Nokia USB Generic;Nokia USB Generic; C:WINDOWSsystem32driversnmwcdc.sys [2004-08-26 6262]
S3 Nokia USB Modem;Nokia USB Modem; C:WINDOWSsystem32driversnmwcdcm.sys [2004-08-26 9447]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:WINDOWSsystem32driversnmwcd.sys [2004-08-26 125813]
S3 nv;nv; C:WINDOWSSystem32DRIVERSnv4_mini.sys [2004-07-15 2459712]
S3 nv4;nv4; C:WINDOWSSystem32DRIVERSnv4.sys [2001-08-17 731648]
S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:WINDOWSsystem32DRIVERSrfcomm.sys [2004-08-03 59648]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSSystem32DRIVERSSLIP.sys [2004-08-03 11136]
S3 STIrUsb;STIrUsb.sys USB-IrDA Adapter; C:WINDOWSSystem32DRIVERSirstusb.sys [2001-09-24 30088]
S3 streamip;BDA IPSink; C:WINDOWSSystem32DRIVERSStreamIP.sys [2004-08-03 15360]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSSystem32DRIVERSusbprint.sys [2004-08-03 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSSystem32DRIVERSusbscan.sys [2004-08-03 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSSystem32DRIVERSUSBSTOR.SYS [2004-08-03 26496]
S3 VComm;Virtual Serial port driver; C:WINDOWSsystem32DRIVERSVComm.sys [2004-10-19 61312]
S3 VcommMgr;Bluetooth VComm Manager Service; C:WINDOWSSystem32DriversVcommMgr.sys [2005-03-25 82148]
S3 WSTCODEC;World Standard Teletext Codec; C:WINDOWSSystem32DRIVERSWSTCODEC.SYS [2004-08-03 19328]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSSystem32Ati2evxx.exe [2007-12-05 495616]
R2 BthServ;Bluetooth Support Service; C:WINDOWSsystem32svchost.exe [2004-08-17 14336]
R2 Irmon;Монитор инфракрасной связи; C:WINDOWSSystem32svchost.exe [2004-08-17 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2010-01-05 153376]
R2 NOD32krn;NOD32 Kernel Service; E:Program FilesNOD 32nod32krn.exe [2007-12-12 552064]
R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSSystem32wdfmgr.exe [2004-08-10 38912]
S2 ATI Smart;ATI Smart; C:WINDOWSsystem32ati2sgag.exe [2007-12-05 593920]
S2 gupdate1ca24814b41db4e;Служба Google Update (gupdate1ca24814b41db4e); C:Program FilesGoogleUpdateGoogleUpdate.exe [2009-08-24 133104]
S2 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-08-24 194032]
S2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSSystem32nvsvc32.exe [2004-07-15 114755]
S2 Reset 5;Reset 5; C:WINDOWSsystem32srvany.exe []
S2 VCDSecS;Virtual CD v4 Security service; E:Program Files1Systemvcdsecs.exe []
EOF
