- This topic has 1 ответ, 2 участника, and was last updated 16 years, 2 months назад by
.
-
Сообщения
-
Добрый день , буду очень благодарен за помощь, случайно скачал файл содержащий вирус, постосянно возникает окно программы ADVANCED VIRUS REMOVER, которая просит купить ключ для устранения троянов которые она нашла, nod 32 она видимо заблокировала , как и диспечер задач и откат системы, прбовал Malwarebytes’ Anti-Malware находит 23 -24 зароженных файлы, удаляет их, но пре перезагрузке через 5 мин, они опять появляются и всё заново, заранее благодарен за помощь ,вот rsit:
Logfile of random’s system information tool 1.06 (written by random/random)
Run by 1 at 2009-07-28 17:13:08
Microsoft Windows XP Professional Service Pack 3
System drive C: has 110 GB (46%) free of 238 GB
Total RAM: 2047 MB (70% free)======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{0EEDB912-C5FA-486F-8334-57288578C627}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2009-02-27 75128][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class — C:Documents and Settings1Application DataMicrosoftInternet Explorerqipsearchbar.dll [2009-07-24 150768][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class — C:Documents and Settings1Application DataMicrosoftInternet Explorerqipsearchbar.dll [2009-07-24 150768][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4D91-8333-CF10577473F7}]
&Google[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C333CF63-767F-4831-94AC-E683D962C63C}]
CoTGT_BHO Class — C:Program FilesTGTSoftStyleXPTGT_BHO.dll [2006-05-10 65536][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88}
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2009-01-21 3117856][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-03-21 16126464]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2009-01-15 13680640]
«nwiz»=nwiz.exe /install []
«RemoteControl»=C:Program FilesASUSTeKASUSDVDPDVDServ.exe [2004-11-02 32768]
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«mouseElf»=C:PROGRA~1TWINTO~1MouseElf.EXE [2004-08-26 192512]
«LogonStudio»=C:Program FilesWinCustomizeLogonStudiologonstudio.exe [2002-09-03 987187]
«EPSON Stylus CX4100 Series»=C:WINDOWSSystem32spoolDRIVERSW32X863E_FATIAEP.EXE [2005-03-08 98304]
«PCSuiteTrayApplication»=C:PROGRA~1NokiaNOKIAP~1LAUNCH~1.EXE [2005-12-13 217088]
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2009-01-15 86016]
«ioCentre»=C:GeniusioCentregTaskBar.exe [2007-01-19 61440]
«PWRISOVM.EXE»=C:Program FilesPowerISOPWRISOVM.EXE [2009-03-15 180224]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2009-02-27 35696]
«adstopper»=C:Program FilesAdStopperAdStopperTrayApp.exe []
«nod32kui»=C:Program FilesEsetnod32kui.exe [2009-07-17 921600]
«winupdate.exe»=C:WINDOWSsystem32winupdate.exe [2009-07-28 43008][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
«AnVir Task Manager»=C:Program FilesAnVir Task ManagerAnVir.exe [2006-06-25 410624]
«MSMSGS»=C:Program FilesMessengermsmsgs.exe [2008-04-14 1695232]
«STYLEXP»=C:Program FilesTGTSoftStyleXPStyleXP.exe [2006-05-24 1372160]
«PcSync»=C:Program FilesNokiaNokia PC Suite 6PcSync2.exe [2005-11-30 1306624]
«DAEMON Tools Lite»=C:Program FilesDAEMON Tools Litedaemon.exe [2009-04-23 691656]
«Advanced Virus Remover»=C:Program FilesAdvancedVirusRemoverPAVRM.exe [2009-07-28 2178048]C:Documents and SettingsAll UsersStart MenuProgramsStartup
NaturalColorLoad.lnk — C:Program FilesSECNatural ColorNaturalColorLoad.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
UPnPMonitor — {e57ce738-33e8-4c51-8354-bb4de9d215d1} — C:WINDOWSsystem32upnpui.dll [2008-04-14 239616]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa]
«authentication packages»=msv1_0
nwprovau[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«DisableTaskMgr»=1[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF
«NoDrives»=0
«NoSetActiveDesktop»=1
«NoActiveDesktopChanges»=1[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=
«NoDrives»=
«NoSetActiveDesktop»=
«NoActiveDesktopChanges»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:GTA4Grand Theft Auto IVLaunchGTAIV.exe»=»C:GTA4Grand Theft Auto IVLaunchGTAIV.exe:*:Disabled:Grand Theft Auto IV»
«C:GTA4Grand Theft Auto IVGTAIV.exe»=»C:GTA4Grand Theft Auto IVGTAIV.exe:*:Disabled:Grand Theft Auto IV»
«E:CS1.6SteamAppssierus1condition zerohl.exe»=»E:CS1.6SteamAppssierus1condition zerohl.exe:*:Disabled:Half-Life Launcher»
«E:HellgateLauncher.exe»=»E:HellgateLauncher.exe:*:Disabled:Hellgate: London»
«E:QIPqip.exe»=»E:QIPqip.exe:*:Disabled:Quiet Internet Pager»
«E:GTA 4Rockstar Games Social ClubRGSCLauncher.exe»=»E:GTA 4Rockstar Games Social ClubRGSCLauncher.exe:*:Disabled:Rockstar Games Social Club»
«C:Program FilesAkellaSacred 2 — Fallen Angelsystemsacred2.exe»=»C:Program FilesAkellaSacred 2 — Fallen Angelsystemsacred2.exe:*:Disabled:Sacred 2»
«C:Program FilesAkellaSacred 2 — Fallen Angelsystems2gs.exe»=»C:Program FilesAkellaSacred 2 — Fallen Angelsystems2gs.exe:*:Disabled:Sacred 2 Game Server»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{84fa49ac-58a9-11de-87e2-001d7e99b205}]
shellAutoRuncommand — G:setup.exe======List of files/folders created in the last 1 months======
2009-07-28 17:13:08 —-D—- C:rsit
2009-07-28 16:51:17 —-D—- C:Program FilesAdvancedVirusRemover
2009-07-28 16:32:22 —-A—- C:WINDOWSsystem32winhelper.dll
2009-07-28 16:32:15 —-A—- C:WINDOWSsystem32winupdate.exe
2009-07-28 16:29:05 —-A—- C:WINDOWSsystem32wshirda.dll
2009-07-28 16:29:05 —-A—- C:WINDOWSsystem32irmon.dll
2009-07-28 16:29:05 —-A—- C:WINDOWSsystem32irftp.exe
2009-07-28 15:41:23 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-07-28 04:37:56 —-D—- C:Documents and Settings1Application DataMalwarebytes
2009-07-28 04:37:51 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-07-28 04:05:23 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2009-07-28 03:09:53 —-A—- C:WINDOWSsystem32winupdate.exe.vir
2009-07-27 12:49:35 —-D—- C:Ljublju.tebja.chuvak.2009.XviD.HDRip
2009-07-24 23:25:02 —-D—- C:Documents and SettingsAll UsersApplication DataActivision
2009-07-23 21:58:45 —-D—- C:Program FilesTransformers — Revenge of the Fallen
2009-07-21 22:08:58 —-A—- C:Jenny Simpson-DoubleAnalZone.com.wmv
2009-07-21 02:59:39 —-D—- C:18 мне УЖЕ !
2009-07-17 18:52:59 —-D—- C:Program FilesCommon FilesElecard
2009-07-17 18:52:58 —-D—- C:Program FilesElecard
2009-07-17 15:28:46 —-A—- C:WINDOWSsystem32imon.dll
2009-07-17 15:21:48 —-SHD—- C:RECYCLER
2009-07-16 20:45:00 —-D—- C:WINDOWStemp
2009-07-16 19:30:26 —-RASHD—- C:autorun.inf
2009-07-16 19:14:36 —-D—- C:Documents and Settings1Application DataHelp
2009-07-16 19:10:08 —-D—- C:Program FilesAd Muncher
2009-07-16 18:56:16 —-D—- C:Program FilesTrend Micro
2009-07-16 17:15:48 —-A—- C:search.ini
2009-07-16 16:36:27 —-A—- C:WINDOWSPEV.exe
2009-07-16 16:27:59 —-D—- C:WINDOWSERDNT
2009-07-16 02:15:56 —-HDC—- C:WINDOWS$NtUninstallKB973346$
2009-07-16 02:15:51 —-HDC—- C:WINDOWS$NtUninstallKB971633$
2009-07-16 02:14:44 —-HDC—- C:WINDOWS$NtUninstallKB961371$
2009-07-15 20:38:40 —-D—- C:Documents and SettingsAll UsersApplication DataESET
2009-07-15 19:33:44 —-SHD—- C:Config.Msi
2009-07-15 15:27:28 —-D—- C:Panchira.Teacher.1-2.[DVD]
2009-07-05 20:16:58 —-A—- C:WINDOWSsystem32ptpusb.dll
2009-07-05 20:16:57 —-A—- C:WINDOWSsystem32ptpusd.dll
2009-07-05 14:12:57 —-D—- C:Documents and SettingsAll UsersApplication DataDoctor Web
2009-07-05 14:12:56 —-D—- C:Program FilesDrWeb
2009-07-05 00:59:39 —-D—- C:Documents and Settings1Application DataAdSubscribe======List of files/folders modified in the last 1 months======
2009-07-28 17:04:59 —-D—- C:Program FilesMozilla Firefox
2009-07-28 17:04:57 —-D—- C:WINDOWSsystem32CatRoot2
2009-07-28 17:04:30 —-A—- C:WINDOWSLogonStudio.ini
2009-07-28 17:04:29 —-D—- C:WINDOWSsystem32
2009-07-28 17:03:11 —-A—- C:WINDOWSSchedLgU.Txt
2009-07-28 17:02:08 —-D—- C:WINDOWSnetwork diagnostic
2009-07-28 16:54:47 —-D—- C:WINDOWS
2009-07-28 16:51:17 —-RD—- C:Program Files
2009-07-28 16:30:42 —-D—- C:WINDOWSsystem32Restore
2009-07-28 16:29:11 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-07-28 16:29:06 —-D—- C:WINDOWSsystem32drivers
2009-07-28 16:29:06 —-D—- C:WINDOWSMedia
2009-07-28 16:28:55 —-HD—- C:WINDOWSinf
2009-07-28 04:13:25 —-D—- C:Documents and Settings1Application DatauTorrent
2009-07-28 03:59:51 —-SHD—- C:System Volume Information
2009-07-28 03:41:30 —-D—- C:Program FilesESET
2009-07-28 03:20:16 —-A—- C:WINDOWSNeroDigital.ini
2009-07-28 03:10:03 —-D—- C:WINDOWSPrefetch
2009-07-17 18:52:59 —-D—- C:Program FilesCommon Files
2009-07-17 18:32:19 —-D—- C:Program FilesThe KMPlayer
2009-07-16 20:41:41 —-A—- C:WINDOWSsystem.ini
2009-07-16 20:37:58 —-D—- C:Program FilesAdobe
2009-07-16 20:37:37 —-D—- C:WINDOWSAppPatch
2009-07-16 18:38:41 —-SHD—- C:WINDOWSInstaller
2009-07-16 18:38:40 —-D—- C:Program FilesGoogle
2009-07-16 18:38:39 —-D—- C:Program FilesOpenAL
2009-07-16 18:38:14 —-D—- C:VKLife
2009-07-16 18:38:02 —-D—- C:WINDOWSsystem32usmt
2009-07-16 02:15:58 —-A—- C:WINDOWSimsins.BAK
2009-07-16 02:15:55 —-HD—- C:WINDOWS$hf_mig$
2009-07-15 21:01:21 —-D—- C:Heroes of Might and Magic V
2009-07-15 20:03:32 —-D—- C:WINDOWSWinSxS
2009-07-15 19:33:58 —-SD—- C:WINDOWSTasks
2009-07-14 21:09:55 —-SD—- C:WINDOWSDownloaded Program Files
2009-07-07 19:10:56 —-A—- C:WINDOWSsystem32MRT.exe
2009-07-05 20:34:33 —-SD—- C:Documents and Settings1Application DataMicrosoft======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 appdrv01;Application Driver (01); C:WINDOWSSystem32Driversappdrv01.sys [2009-05-11 2997872]
R1 ehdrv;ehdrv; C:WINDOWSsystem32DRIVERSehdrv.sys [2009-05-14 107256]
R1 intelppm;Intel Processor Driver; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-13 36352]
R1 kbdhid;Keyboard HID Driver; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-13 14592]
R1 SCDEmu;SCDEmu; C:WINDOWSsystem32driversSCDEmu.sys [2009-03-15 56268]
R1 StyleXPHelper;StyleXPHelper; ??C:Program FilesTGTSoftStyleXPStyleXPHelper.exe []
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2001-08-23 12032]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.2.0.3; C:WINDOWSsystem32DRIVERSAegisP.sys [2008-07-17 17801]
R2 AMON;AMON; ??C:WINDOWSsystem32driversamon.sys []
R2 atksgt;atksgt; C:WINDOWSsystem32DRIVERSatksgt.sys [2009-05-09 279712]
R2 eamon;eamon; C:WINDOWSsystem32DRIVERSeamon.sys [2009-05-14 114472]
R2 irda;IrDA Protocol; C:WINDOWSsystem32DRIVERSirda.sys [2008-04-13 88192]
R2 lirsgt;lirsgt; C:WINDOWSsystem32DRIVERSlirsgt.sys [2009-05-09 25888]
R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS Compatible Transport Protocol; C:WINDOWSsystem32DRIVERSnwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;NWLink NetBIOS; C:WINDOWSsystem32DRIVERSnwlnknb.sys [2001-08-23 63232]
R2 NwlnkSpx;NWLink SPX/SPXII Protocol; C:WINDOWSsystem32DRIVERSnwlnkspx.sys [2001-08-23 55936]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller; C:WINDOWSsystem32DRIVERSatl01_xp.sys [2007-03-15 38656]
R3 BCM43XX;Linksys Wireless-G PCI Network Adapter Driver; C:WINDOWSsystem32DRIVERSbcmwl5.sys [2004-12-22 369024]
R3 FStarForce;FStarForce; C:WINDOWSsystem32DRIVERSFStarForce.sys [2009-05-11 8704]
R3 gHidPnp;USB Device Enhanced Function Driver; C:WINDOWSSystem32DriversgHidPnp.Sys [2006-07-14 14848]
R3 gMouUsb;USB Mouse Device Drv; C:WINDOWSsystem32DRIVERSgMouUsb.sys [2006-07-14 9984]
R3 GTNDIS5;GTNDIS5 NDIS Protocol Driver; ??C:WINDOWSsystem32GTNDIS5.SYS []
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2007-03-26 4395008]
R3 mouhid;Mouse HID Driver; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-08-23 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:WINDOWSsystem32DRIVERSASACPI.sys [2004-08-13 5810]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2009-01-15 6301248]
R3 NWRDR;NetWare Rdr; C:WINDOWSsystem32DRIVERSnwrdr.sys [2008-04-13 163584]
R3 Rasirda;WAN Miniport (IrDA); C:WINDOWSsystem32DRIVERSrasirda.sys [2001-08-17 19584]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-13 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-13 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-13 20608]
S3 abdv60se;abdv60se; C:WINDOWSsystem32driversabdv60se.sys []
S3 Arp1394;1394 ARP Client Protocol; C:WINDOWSsystem32DRIVERSarp1394.sys [2008-04-13 60800]
S3 BCM42RLY;BCM42RLY; ??C:WINDOWSSystem32BCM42RLY.SYS []
S3 EagleNT;EagleNT; ??C:WINDOWSsystem32driversEagleNT.sys []
S3 genmcmnUSB;USB Scroll Mouse Driver; C:WINDOWSsystem32DRIVERSgflmouhid.sys [2004-04-19 6656]
S3 irsir;Microsoft Serial Infrared Driver; C:WINDOWSsystem32DRIVERSirsir.sys [2001-08-17 18688]
S3 NIC1394;1394 Net Driver; C:WINDOWSsystem32DRIVERSnic1394.sys [2008-04-13 61824]
S3 nm;Network Monitor Driver; C:WINDOWSsystem32DRIVERSNMnt.sys [2008-04-13 40320]
S3 Nokia USB Generic;Nokia USB Generic; C:WINDOWSsystem32driversnmwcdc.sys [2005-10-13 8704]
S3 Nokia USB Modem;Nokia USB Modem; C:WINDOWSsystem32driversnmwcdcm.sys [2005-10-13 12800]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:WINDOWSsystem32driversnmwcd.sys [2005-10-13 124928]
S3 Nokia USB Port;Nokia USB Port; C:WINDOWSsystem32driversnmwcdcj.sys [2005-10-13 12800]
S3 NPF;NetGroup Packet Filter Driver; C:WINDOWSsystem32driversnpf.sys [2007-11-07 34064]
S3 upperdev;upperdev; C:WINDOWSsystem32DRIVERSusbser_lowerflt.sys []
S3 usbprint;Microsoft USB PRINTER Class; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB Mass Storage Driver; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Wdf01000; C:WINDOWSsystem32DRIVERSWdf01000.sys [2006-11-02 492000]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ekrn;ESET Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2009-05-14 731840]
R2 Irmon;Infrared Monitor; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 NOD32krn;NOD32 Kernel Service; C:Program FilesEsetnod32krn.exe [2009-07-17 507904]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2009-01-15 163908]
R2 NWCWorkstation;Client Service for NetWare; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
R2 StyleXPService;StyleXPService; C:Program FilesTGTSoftStyleXPStyleXPService.exe [2006-05-24 372736]
S2 WMP54GSSVC;WMP54GSSVC; C:Program FilesLinksys Wireless-G PCI Network Adapter with SpeedBoosterWLService.exe [2005-07-04 53307]
S3 appdrvrem01;Application Driver Auto Removal Service (01); C:WINDOWSSystem32appdrvrem01.exe [2009-05-11 316816]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-04-13 33632]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-04-13 68952]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2006-10-20 36864]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:Program FilesWinPcaprpcapd.exe [2007-11-07 92792]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]
EOF
info.txt logfile of random’s system information tool 1.06 2009-07-28 17:13:41======Uninstall list======
«Oblivion ЗОЛОТОЕ ИЗДАНИЕ» версии 1.2.0416—>»E:TES 4 Oblivionunins000.exe»
—>MsiExec /X{DD1865F0-AD73-40FB-B23E-1822E02396FF}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Reader 9.1.2 — Russian—>MsiExec.exe /I{AC76BA86-7AD7-1049-7B44-A91000000001}
ASUSDVD—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}Setup.exe» -uninstall
Attansic Ethernet Utility—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime11 0Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{1F698102-5739-441E-96F0-74F4EA540F06}setup.exe» -l0x9 -removeonly
Attansic L1 Gigabit Ethernet Driver—>rundll32.exe C:WINDOWSsystem32AttansicL1atcInst.dll,AtcUninst C:WINDOWSsystem32AttansicL1 x86 1969 1048 L1
Audacity 1.3.6 (Unicode)—>»C:Program FilesAudacity 1.3 Beta (Unicode)unins000.exe»
CCleaner (remove only)—>»C:Program FilesCCleaneruninst.exe»
Compatibility Pack for the 2007 Office system—>MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
Counter-Strike(TM)—>MsiExec.exe /I{DF5A03CC-D5AA-43D8-B948-D9903F2AF94A}
DAEMON Tools Toolbar—>C:Program FilesDAEMON Tools Toolbaruninst.exe
Devil May Cry 4 v1.1.0 Rus—>»E:Devil May Cry 4unins000.exe»
Elecard MPEG-2 Decoder&Streaming Plug-in for WMP—>»C:Program FilesElecardElecard MPEG-2 Decoder&Streaming Plug-in for WMPUninstall.exe» «C:Program FilesElecardElecard MPEG-2 Decoder&Streaming Plug-in for WMPinstall.log» -u
Empire — Total War 1.00—>E:Empire — Total WarUninstall.exe
EPSON Attach To Email—>C:Program FilesCommon FilesInstallShieldDriver8Intel 32IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime 701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{67EDD823-135A-4D59-87BD-950616D6E857}SETUP.EXE» -l0x19 -UnInstall
EPSON Easy Photo Print—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime 701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{5DA7BC15-18D3-41A0-9F59-838DA3EAEF17}SETUP.EXE» -l0x19 UNINST
EPSON File Manager—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime 701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{E86BC406-944E-41F6-ADE6-2C136734C96B}Setup.exe» -l0x19 UNINST
EPSON Image Clip Palette—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime 701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{314F6D08-A8B7-11D8-8446-0050BA1D384D}Setup.exe» -l0x19 -u
EPSON Printer Software—>C:WINDOWSSystem32spoolDRIVERSW32X863EPUPDATE.EXE /R
EPSON Scan Assistant—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime 701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}Setup.exe» -l0x19 -u
EPSON Scan—>C:Program Filesepsonescndvsetupsetup.exe /r
ESCX4700_4100 Руководство пользователя—>C:Program FilesEPSONTPMANUALESCX4700_4100_RUSUSE_GDOCUNINS.EXE
Full Tilt Poker—>»C:Program FilesInstallShield Installation Information{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}setup.exe» -runfromtemp -l0x0019 -removeonly
Grand Ages Rome 1.01—>»E:Grand Ages Romeuninst.exe»
Grand Theft Auto IV—>»C:Program FilesInstallShield Installation Information{579BA58C-F33D-4970-9953-B94B43768AC3}setup.exe» -runfromtemp -l0x0019 -removeonly
Hellgate: London—>MsiExec.exe /X{A2B4455D-1046-4732-BFBC-0821BEFC07BC}
Heroes of Might and Magic V: Владыки Севера—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{C4AC308A-38BF-44F0-879F-29E6B8ADD268}Setup.exe» -l0x19
Heroes of Might and Magic V—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{CB9A636A-AF2D-4B03-AE8B-8FE99AC197E8}Setup.exe» -l0x19
High Definition Audio Driver Package — KB888111—>»C:WINDOWS$NtUninstallKB888111WXPSP2$spuninstspuninst.exe»
Hotfix for Windows Media Format 11 SDK (KB929399)—>»C:WINDOWS$NtUninstallKB929399$spuninstspuninst.exe»
Hotfix for Windows XP (KB952287)—>»C:WINDOWS$NtUninstallKB952287$spuninstspuninst.exe»
ioCentre—>C:Program FilesInstallShield Installation Information{A2B4621B-CEB9-4E44-95FD-3500D4DB3727}setup.exe -runfromtemp -l0x0019 -removeonly
K-Lite Codec Pack 4.7.5 (Full)—>»C:Program FilesK-Lite Codec Packunins000.exe»
Linksys Wireless-G PCI Network Adapter with SpeedBooster—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{EAE4A00B-D290-4B65-8287-B82A80FC0619}setup.exe» -l0x9
LogonStudio—>C:PROGRA~1WINCUS~1LOGONS~1UNWISE.EXE C:PROGRA~1WINCUS~1LOGONS~1INSTALL.LOG
Malwarebytes’ Anti-Malware—>»C:Program FilesMalwarebytes’ Anti-Malwareunins000.exe»
Medieval II Total War : Kingdoms : Americas—>C:Program FilesInstallShield Installation Information{75983B66-804C-40D1-BA13-64DAF652A6F1}setup.exe -runfromtemp -l0x0019 -removeonly
Medieval II Total War : Kingdoms : Britannia—>C:Program FilesInstallShield Installation Information{CEDDEE73-3D36-41C2-AA40-29355D9FBD63}setup.exe -runfromtemp -l0x0019 -removeonly
Medieval II Total War : Kingdoms : Crusades—>C:Program FilesInstallShield Installation Information{02A10468-2F1C-447C-AD8E-4DEDDEA25AE2}setup.exe -runfromtemp -l0x0019 -removeonly
Medieval II Total War : Kingdoms : Teutonic—>C:Program FilesInstallShield Installation Information{7AEE1963-7001-4C37-BC20-2FAEB74AA41C}setup.exe -runfromtemp -l0x0019 -removeonly
MegaTrainer XL V1.5.8.0—>»C:Heroes of Might and Magic VMegaTrainer XLunins000.exe»
Microsoft .NET Framework 1.1 Hotfix (KB928366)—>»C:WINDOWSMicrosoft.NETFrameworkv1.1.4322Updateshotfix.exe» «C:WINDOWSMicrosoft.NETFrameworkv1.1.4322UpdatesM928366M928366Uninstall.msp»
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Language Pack — RUS—>C:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0 Language Pack — RUSinstall.exe
Microsoft .NET Framework 2.0—>C:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0install.exe
Microsoft .NET Framework 3.0 Russian Language Pack—>c:WINDOWSMicrosoft.NETFrameworkv3.0Microsoft .NET Framework 3.0 Russian Language Packsetup.exe
Microsoft .NET Framework 3.0 Russian Language Pack—>MsiExec.exe /X{855B04CC-4F7A-4FBB-B7BA-D965D23F7AD5}
Microsoft .NET Framework 3.0—>c:WINDOWSMicrosoft.NETFrameworkv3.0Microsoft .NET Framework 3.0setup.exe
Microsoft .NET Framework 3.0—>MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003}
Microsoft Games for Windows — LIVE Redistributable—>MsiExec.exe /X{FD052FB9-FE90-4438-B355-15EDC89D8FB1}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5—>»C:WINDOWS$NtUninstallWdf01005$spuninstspuninst.exe»
Microsoft Office 2003 Russian User Interface Pack—>MsiExec.exe /I{901E0419-6000-11D3-8CFE-0150048383C9}
Microsoft Office Professional Edition 2003—>MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0—>»C:WINDOWS$NtUninstallWudf01000$spuninstspuninst.exe»
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.21022—>MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.17—>MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Windows Media Video 9 VCM—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFwmv9vcm.inf, Uninstall
Microsoft WSE 3.0 Runtime—>MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
Mortal Kombat 4—>C:WINDOWSIsUninst.exe -f»c:mortal kombat 4Uninst.isu»
Mount & Blade. История героя—>C:WINDOWSIsUninstR.Exe -fe:MaBDeIsL1.isu -ce:MaBM_AND_~1.DLL
Mozilla Firefox (3.5.1)—>C:Program FilesMozilla Firefoxuninstallhelper.exe
MSXML 4.0 SP2 (KB936181)—>MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)—>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 Parser and SDK—>MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
MSXML 6.0 Parser (KB925673)—>MsiExec.exe /I{FE9126DB-5F84-495A-BB46-3C724F1C2D08}
Natural Color—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{F51D9393-BB14-4566-99BF-D6ED63AEFCD7}setup.exe»
Need for Speed™ Undercover—>MsiExec.exe /X{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}
Nero 6 Ultra Edition—>C:Program FilesAheadnerouninstallUNNERO.exe /UNINSTALL
Nokia Connectivity Cable Driver—>MsiExec.exe /X{B7757137-0A71-4A9F-8A82-1AE4A1B73420}
Nokia PC Suite—>MsiExec.exe /I{FF059F2A-62A7-4E6A-B305-559591D2769E}
NVIDIA Drivers—>C:WINDOWSsystem32nvuninst.exe UninstallGUI
NVIDIA PhysX—>MsiExec.exe /X{DD1865F0-AD73-40FB-B23E-1822E02396FF}
Oblivion — The Fighter’s Stronghold—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime11 0Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{A0A20753-92DF-4631-82B4-9CACE2FCED6A}setup.exe» -l0x9 -removeonly
Oblivion Character Manager—>»E:TES 4 OblivionOblivion Character Managerunins000.exe»
Oblivion mod manager 1.1.10—>»E:TES 4 Oblivionobmmuninstallunins000.exe»
Perfect World 1.3.4.2265—>»C:Perfect Worldunins000.exe»
PowerISO—>»C:Program FilesPowerISOuninstall.exe»
PowerPack 1.5.1—>»E:ePSXe PowerPackunins000.exe»
QIP Infium 2.0.9020 RC3—>»E:QIPunins000.exe»
Realtek High Definition Audio Driver—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}setup.exe» -l0x9 -removeonly
Rockstar Games Social Club—>»C:Program FilesInstallShield Installation Information{08B3869E-D282-424C-9AFC-870E04A4BA14}setup.exe» -runfromtemp -l0x0019 -removeonly
Sacred 2—>MsiExec.exe /I{1023383E-D9F6-478C-A965-23A4657B3C9A}
Security Update for Windows Media Player (KB952069)—>»C:WINDOWS$NtUninstallKB952069_WM9$spuninstspuninst.exe»
Security Update for Windows XP (KB923561)—>»C:WINDOWS$NtUninstallKB923561$spuninstspuninst.exe»
Security Update for Windows XP (KB923789)—>C:WINDOWSsystem32MacroMedFlashgenuinst.exe C:WINDOWSsystem32MacroMedFlashKB923789.inf
Security Update for Windows XP (KB938464)—>»C:WINDOWS$NtUninstallKB938464$spuninstspuninst.exe»
Security Update for Windows XP (KB941569)—>»C:WINDOWS$NtUninstallKB941569$spuninstspuninst.exe»
Security Update for Windows XP (KB946648)—>»C:WINDOWS$NtUninstallKB946648$spuninstspuninst.exe»
Security Update for Windows XP (KB950759)—>»C:WINDOWS$NtUninstallKB950759$spuninstspuninst.exe»
Security Update for Windows XP (KB950760)—>»C:WINDOWS$NtUninstallKB950760$spuninstspuninst.exe»
Security Update for Windows XP (KB950762)—>»C:WINDOWS$NtUninstallKB950762$spuninstspuninst.exe»
Security Update for Windows XP (KB950974)—>»C:WINDOWS$NtUninstallKB950974$spuninstspuninst.exe»
Security Update for Windows XP (KB951066)—>»C:WINDOWS$NtUninstallKB951066$spuninstspuninst.exe»
Security Update for Windows XP (KB951376-v2)—>»C:WINDOWS$NtUninstallKB951376-v2$spuninstspuninst.exe»
Security Update for Windows XP (KB951698)—>»C:WINDOWS$NtUninstallKB951698$spuninstspuninst.exe»
Security Update for Windows XP (KB951748)—>»C:WINDOWS$NtUninstallKB951748$spuninstspuninst.exe»
Security Update for Windows XP (KB952004)—>»C:WINDOWS$NtUninstallKB952004$spuninstspuninst.exe»
Security Update for Windows XP (KB952954)—>»C:WINDOWS$NtUninstallKB952954$spuninstspuninst.exe»
Security Update for Windows XP (KB953838)—>»C:WINDOWS$NtUninstallKB953838$spuninstspuninst.exe»
Security Update for Windows XP (KB953839)—>»C:WINDOWS$NtUninstallKB953839$spuninstspuninst.exe»
Security Update for Windows XP (KB954211)—>»C:WINDOWS$NtUninstallKB954211$spuninstspuninst.exe»
Security Update for Windows XP (KB954459)—>»C:WINDOWS$NtUninstallKB954459$spuninstspuninst.exe»
Security Update for Windows XP (KB954600)—>»C:WINDOWS$NtUninstallKB954600$spuninstspuninst.exe»
Security Update for Windows XP (KB955069)—>»C:WINDOWS$NtUninstallKB955069$spuninstspuninst.exe»
Security Update for Windows XP (KB956390)—>»C:WINDOWS$NtUninstallKB956390$spuninstspuninst.exe»
Security Update for Windows XP (KB956391)—>»C:WINDOWS$NtUninstallKB956391$spuninstspuninst.exe»
Security Update for Windows XP (KB956572)—>»C:WINDOWS$NtUninstallKB956572$spuninstspuninst.exe»
Security Update for Windows XP (KB956802)—>»C:WINDOWS$NtUninstallKB956802$spuninstspuninst.exe»
Security Update for Windows XP (KB956803)—>»C:WINDOWS$NtUninstallKB956803$spuninstspuninst.exe»
Security Update for Windows XP (KB956841)—>»C:WINDOWS$NtUninstallKB956841$spuninstspuninst.exe»
Security Update for Windows XP (KB957095)—>»C:WINDOWS$NtUninstallKB957095$spuninstspuninst.exe»
Security Update for Windows XP (KB957097)—>»C:WINDOWS$NtUninstallKB957097$spuninstspuninst.exe»
Security Update for Windows XP (KB958215)—>»C:WINDOWS$NtUninstallKB958215$spuninstspuninst.exe»
Security Update for Windows XP (KB958644)—>»C:WINDOWS$NtUninstallKB958644$spuninstspuninst.exe»
Security Update for Windows XP (KB958690)—>»C:WINDOWS$NtUninstallKB958690$spuninstspuninst.exe»
Security Update for Windows XP (KB959426)—>»C:WINDOWS$NtUninstallKB959426$spuninstspuninst.exe»
Security Update for Windows XP (KB960225)—>»C:WINDOWS$NtUninstallKB960225$spuninstspuninst.exe»
Security Update for Windows XP (KB960714)—>»C:WINDOWS$NtUninstallKB960714$spuninstspuninst.exe»
Security Update for Windows XP (KB960715)—>»C:WINDOWS$NtUninstallKB960715$spuninstspuninst.exe»
Security Update for Windows XP (KB960803)—>»C:WINDOWS$NtUninstallKB960803$spuninstspuninst.exe»
Security Update for Windows XP (KB961371)—>»C:WINDOWS$NtUninstallKB961371$spuninstspuninst.exe»
Security Update for Windows XP (KB961373)—>»C:WINDOWS$NtUninstallKB961373$spuninstspuninst.exe»
Security Update for Windows XP (KB961501)—>»C:WINDOWS$NtUninstallKB961501$spuninstspuninst.exe»
Security Update for Windows XP (KB963027)—>»C:WINDOWS$NtUninstallKB963027$spuninstspuninst.exe»
Security Update for Windows XP (KB968537)—>»C:WINDOWS$NtUninstallKB968537$spuninstspuninst.exe»
Security Update for Windows XP (KB969897)—>»C:WINDOWS$NtUninstallKB969897$spuninstspuninst.exe»
Security Update for Windows XP (KB969898)—>»C:WINDOWS$NtUninstallKB969898$spuninstspuninst.exe»
Security Update for Windows XP (KB970238)—>»C:WINDOWS$NtUninstallKB970238$spuninstspuninst.exe»
Security Update for Windows XP (KB971633)—>»C:WINDOWS$NtUninstallKB971633$spuninstspuninst.exe»
Security Update for Windows XP (KB973346)—>»C:WINDOWS$NtUninstallKB973346$spuninstspuninst.exe»
Security Update для Microsoft .NET Framework 2.0 (КБ928365)—>C:WINDOWSsystem32msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
Steam(TM)—>MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
StyleXP (remove only)—>»C:Program FilesTGTSoftStyleXPStyleXP-uninstall.exe»
TeamSpeak 2 RC2—>»C:Program FilesTeamspeak2_RC2unins000.exe»
The Sims™ 3—>»C:Program FilesInstallShield Installation Information{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}Sims3Setup.exe» -runfromtemp -l0x0019 -removeonly
TwinTouch LuxeMate—>C:Program FilesTwinTouch LuxeMateSetup.exe /Uninstall
Update for Windows XP (KB942763)—>»C:WINDOWS$NtUninstallKB942763$spuninstspuninst.exe»
Update for Windows XP (KB951072-v2)—>»C:WINDOWS$NtUninstallKB951072-v2$spuninstspuninst.exe»
Update for Windows XP (KB951978)—>»C:WINDOWS$NtUninstallKB951978$spuninstspuninst.exe»
Update for Windows XP (KB955839)—>»C:WINDOWS$NtUninstallKB955839$spuninstspuninst.exe»
Update for Windows XP (KB967715)—>»C:WINDOWS$NtUninstallKB967715$spuninstspuninst.exe»
WC3Banlist—>»E:Warcraft IIIWC3Banlistunins000.exe»
Windows Communication Foundation—>MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Installer 4.5 SDK—>MsiExec.exe /I{0CA21011-069B-B16A-A5CA-9ABE49DAC05C}
Windows Media Format 11 runtime—>»C:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Windows Media Format 11 runtime—>»C:WINDOWS$NtUninstallWMFDist11$spuninstspuninst.exe»
Windows Presentation Foundation Language Pack (RUS)—>MsiExec.exe /X{D83A3DFC-8528-4E31-93DC-0A41C477109C}
Windows Presentation Foundation—>MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation RU Language Pack—>MsiExec.exe /I{1C7ADED3-C371-40DF-A69D-FE0EA73DC394}
Windows Workflow Foundation—>MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
Windows XP Service Pack 3—>»C:WINDOWS$NtServicePackUninstall$spuninstspuninst.exe»
WinPcap 4.0.2—>C:Program FilesWinPcapuninstall.exe
XML Paper Specification Shared Components Language Pack 1.0—>»C:WINDOWS$NtUninstallXPSEPSCLP$spuninstspuninst.exe»
Антивирусная система NOD32—>C:Program FilesEsetSetupsetup.exe /UNINSTALL
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
ТРАНСФОРМЕРЫ — МЕСТЬ ПАДШИХ 1.0—>»C:Program FilesTransformers — Revenge of the FallenUninstallunins000.exe»
Тургор. Голос Цвета—>»C:Program FilesND GamesТургор. Голос Цветаunins000.exe»
Человек-паук 3(TM)—>C:Program FilesInstallShield Installation Information{990166FA-1ACB-4AA7-B592-4D370C7CDD1A}setup.exe -runfromtemp -l0x0419
Яндекс.Бар для Internet Explorer 4.0.0—>»C:Program FilesYandexYandexBarIEunins000.exe»======Security center information======
AV: ESET NOD32 Antivirus 4.0
======System event log======
Computer Name: COMP
Event Code: 8004
Message: Был выдан запрос на повышение роли до резервного обозревателя
для компьютера, уже являющегося основным обозревателем сети.Record Number: 25801
Source Name: MRxSmb
Time Written: 20090616214230.000000+240
Event Type: предупреждение
User:Computer Name: COMP
Event Code: 8004
Message: Был выдан запрос на повышение роли до резервного обозревателя
для компьютера, уже являющегося основным обозревателем сети.Record Number: 25800
Source Name: MRxSmb
Time Written: 20090616214200.000000+240
Event Type: предупреждение
User:Computer Name: COMP
Event Code: 8004
Message: Был выдан запрос на повышение роли до резервного обозревателя
для компьютера, уже являющегося основным обозревателем сети.Record Number: 25799
Source Name: MRxSmb
Time Written: 20090616214130.000000+240
Event Type: предупреждение
User:Computer Name: COMP
Event Code: 8004
Message: Был выдан запрос на повышение роли до резервного обозревателя
для компьютера, уже являющегося основным обозревателем сети.Record Number: 25798
Source Name: MRxSmb
Time Written: 20090616214100.000000+240
Event Type: предупреждение
User:Computer Name: COMP
Event Code: 8004
Message: Был выдан запрос на повышение роли до резервного обозревателя
для компьютера, уже являющегося основным обозревателем сети.Record Number: 25797
Source Name: MRxSmb
Time Written: 20090616214030.000000+240
Event Type: предупреждение
User:=====Application event log=====
Computer Name: COMP
Event Code: 1000
Message: Ошибка приложения oblivion.exe, версия 1.2.0.416, модуль oblivion.exe, версия 1.2.0.416, адрес 0x000cee0b.Record Number: 522
Source Name: Application Error
Time Written: 20080817230826.000000+240
Event Type: ошибка
User:Computer Name: COMP
Event Code: 4097
Message: Приложение E:TES 4 OblivionOblivion.exe вызвало ошибку
Ошибка в 17/08/2008 @ 22:25:28.687
Вызвано исключение c0000005 по адресу 005760D0 (Oblivion)Record Number: 521
Source Name: DrWatson
Time Written: 20080817222528.000000+240
Event Type: информация
User:Computer Name: COMP
Event Code: 1000
Message: Ошибка приложения oblivion.exe, версия 1.2.0.416, модуль oblivion.exe, версия 1.2.0.416, адрес 0x001760d0.Record Number: 520
Source Name: Application Error
Time Written: 20080817222526.000000+240
Event Type: ошибка
User:Computer Name: COMP
Event Code: 1002
Message: Зависшее приложение Oblivion.exe, версия 1.2.0.416, зависший модуль hungapp, версия 0.0.0.0, адрес 0x00000000.Record Number: 519
Source Name: Application Hang
Time Written: 20080817213053.000000+240
Event Type: ошибка
User:Computer Name: COMP
Event Code: 1000
Message: Ошибка приложения oblivion.exe, версия 1.2.0.416, модуль oblivion.exe, версия 1.2.0.416, адрес 0x001760d0.Record Number: 518
Source Name: Application Error
Time Written: 20080817212959.000000+240
Event Type: ошибка
User:======Environment variables======
«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=6
«PROCESSOR_IDENTIFIER»=x86 Family 6 Model 23 Stepping 6, GenuineIntel
«PROCESSOR_REVISION»=1706
«NUMBER_OF_PROCESSORS»=2
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP
«HellgateEnv»=E:Hellgate
«RGSCLauncher»=E:GTA 4Rockstar Games Social Club
«RGSC»=E:GTA 4Rockstar Games Social Club1_0_0_0
EOF
Здравствуйте, добро пожаловать на Spyware-ru форум.
Скачайте OTM by OldTimer кликнув по этой ссылке.
Запустите OTM и в большое поле ввода (заголовок этого поля выделен желтым цветом) скопируйте следующий текст.:Processes
explorer.exe
:reg
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
"winupdate.exe"=-
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
"Advanced Virus Remover"=-
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
"DisableTaskMgr"=0
:files
C:Program FilesAdvancedVirusRemover
C:WINDOWSsystem32winhelper.dll
C:WINDOWSsystem32winupdate.exe
:Commands
[emptytemp]
[start explorer]
[Reboot]Проверьте вставленный скрипт, если слева перед директивами появились пробелы, то удалите их, скрипт должен выглядеть так же как в сообщении. Кликните по кнопке MoveIt!. В процессе работы возможна перезагрузка компьютера.
По-завершении работы программы должен будет показан лог. Если лог не будет показан, то его можно найти в папке C:_OTMMovedFiles.Вставьте в ваше ответное сообщение содержимое этого лога. И приложите свежий RSIT лог.
- Для ответа в этой теме необходимо авторизоваться.
