- This topic has 3 ответа, 2 участника, and was last updated 16 years, 2 months назад by
.
-
Сообщения
-
Logfile of random’s system information tool 1.06 (written by random/random)
Run by user at 2009-07-26 23:23:32
Microsoft Windows XP Professional Service Pack 3
System drive C: has 13 GB (33%) free of 38 GB
Total RAM: 1023 MB (58% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:23:54, on 26.07.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesCyberlinkShared Filesbrs.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesEsetnod32kui.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:WINDOWSRTHDCPL.EXE
D:Новая папка (2)OpwareSE4.exe
C:Program FilesNetropaMultimedia KeyboardMMKeybd.exe
D:PROGRA~1TILDES~1MDICTION.EXE
D:PROGRA~1TILDES~1Pianists.exe
C:Program FilesNetropaMultimedia KeyboardTrayMon.exe
C:Program FilesNetropaOnscreen DisplayOSD.exe
C:Program FilesJavajre6binjusched.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesNetropaMultimedia Keyboardnhksrv.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesEsetnod32krn.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe
C:Program FilesCommon FilesYandexYupdateyupdate.exe
D:pc sute nokiaNokia PC Suite 7PCSuite.exe
C:Program FilesDAEMON Tools Litedaemon.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32PnkBstrA.exe
C:Program FilesCyberLinkShared filesRichVideo.exe
C:WINDOWSsystem32svchost.exe
C:Documents and SettingsuserDesktopNew Folder (2)QuickDCF2.exe
C:Program FilesNokiaNokia Home Media ServerMedia ServerTwonkyMedia.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
C:Program FilesNokiaNokia Home Media ServerMedia ServerTwonkyMediaServer.exe
C:Program FilesPC Connectivity SolutionServiceLayer.exe
C:Program FilesPC Connectivity SolutionTransportsNclUSBSrv.exe
C:Program FilesPC Connectivity SolutionTransportsNclRSSrv.exe
C:Program FilesSkypePlugin ManagerskypePM.exe
C:Program FilesOperaopera.exe
C:Documents and SettingsuserDesktopRSIT.exe
C:Program Filestrend microuser.exeR0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://search.mywebsearch.com/mywebsearch/default.jhtml?ptnrS=ZNman000&ptb=RKlC0IRNmrBnmMq2nsYQQQ
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: Tildes Birojs — {1E6700F0-0F85-40fd-8022-7EB60AB46F10} — D:Program FilesTildes Birojs 2005IEjosla.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O2 — BHO: BitComet ClickCapture — {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} — C:Program FilesBitComettoolsBitCometBHO_1.3.1.15.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.15642swg.dll
O2 — BHO: Google Dictionary Compression sdch — {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: Tildes Birojs — {1E6700F0-0F85-40fd-8022-7EB60AB46F10} — D:Program FilesTildes Birojs 2005IEjosla.dll
O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [BDRegion] C:Program FilesCyberlinkShared Filesbrs.exe
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [LanguageShortcut] «C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe»
O4 — HKLM..Run: [nod32kui] «C:Program FilesEsetnod32kui.exe» /WAITSERVICE
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 9.0ReaderReader_sl.exe»
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [SkyTel] SkyTel.EXE
O4 — HKLM..Run: [SSBkgdUpdate] «C:Program FilesCommon FilesScansoft SharedSSBkgdUpdateSSBkgdupdate.exe» -Embedding -boot
O4 — HKLM..Run: [OpwareSE4] «D:Новая папка (2)OpwareSE4.exe»
O4 — HKLM..Run: [MULTIMEDIA KEYBOARD] C:Program FilesNetropaMultimedia KeyboardMMKeybd.exe
O4 — HKLM..Run: [mdiction] D:PROGRA~1TILDES~1MDICTION.EXE
O4 — HKLM..Run: [Pianists] D:PROGRA~1TILDES~1Pianists.exe
O4 — HKLM..Run: [CheckCU] «D:PROGRA~1TILDES~1CheckCU.exe» {36E408F0-DF8A-4F9B-BF26-AED92C789F5D} Tildes Birojs 2005
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [Skype] «C:Program FilesSkypePhoneSkype.exe» /nosplash /minimized
O4 — HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 — HKCU..Run: [BitComet] «C:Program FilesBitCometBitComet.exe» /tray
O4 — HKCU..Run: [Yupdate!] «C:Program FilesCommon FilesYandexYupdateyupdate.exe»
O4 — HKCU..Run: [PC Suite Tray] «D:pc sute nokiaNokia PC Suite 7PCSuite.exe» -onlytray
O4 — HKCU..Run: [DAEMON Tools Lite] «C:Program FilesDAEMON Tools Litedaemon.exe» -autorun
O4 — HKCU..Run: [Speeder] «C:Program FilesSpeed GearSpeedGear.exe» /Minimize
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: Adobe Gamma.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O4 — Global Startup: Exif Launcher S.lnk = ?
O8 — Extra context menu item: &Translate with Tilde Computer Dictionary — res://D:Program FilesTildes Birojs 2005TDVLauncher.DLL /201
O8 — Extra context menu item: &Tulkot ar Tildes Datorvвrdnоcu — res://D:Program FilesTildes Birojs 2005TDVLauncher.DLL /201
O8 — Extra context menu item: &З&агрузить &с помощью BitComet — res://C:Program FilesBitCometBitComet.exe/AddLink.htm
O8 — Extra context menu item: &З&агрузить все видео файлы с помощью BitComet — res://C:Program FilesBitCometBitComet.exe/AddVideo.htm
O8 — Extra context menu item: &З&агрузить все с помощью BitComet — res://C:Program FilesBitCometBitComet.exe/AddAllLink.htm
O8 — Extra context menu item: Add to Google Photos Screensa&ver — res://C:WINDOWSsystem32GPhotos.scr/200
O8 — Extra context menu item: E&xport to Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O9 — Extra button: Add to VideoGet — {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} — D:VideoGetPluginsVideoGet_IE.dll
O9 — Extra ‘Tools’ menuitem: Add to &VideoGet — {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} — D:VideoGetPluginsVideoGet_IE.dll
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: BitComet — {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} — res://C:Program FilesBitComettoolsBitCometBHO_1.3.1.15.dll/206 (file missing)
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O12 — Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O16 — DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) — http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O17 — HKLMSystemCCSServicesTcpip..{FD4CF425-6F25-410C-9E97-C90ABEB1098B}: NameServer = 89.201.49.1,159.148.60.20
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O18 — Filter: x-sdch — {B1759355-3EEC-4C1E-B0F1-B719FE26E377} — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
O23 — Service: Adobe LM Service — Adobe Systems — C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 — Service: Forceware Web Interface (ForcewareWebInterface) — Apache Software Foundation — C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: Netropa NHK Server (nhksrv) — Unknown owner — C:Program FilesNetropaMultimedia Keyboardnhksrv.exe
O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — C:Program FilesEsetnod32krn.exe
O23 — Service: ForceWare IP service (nSvcIp) — NVIDIA Corporation — C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe
O23 — Service: ForceWare user log service (nSvcLog) — NVIDIA Corporation — C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared filesRichVideo.exe
O23 — Service: ServiceLayer — Nokia. — C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 — Service: TwonkyMedia — PacketVideo — C:Program FilesNokiaNokia Home Media ServerMedia ServerTwonkyMedia.exe—
End of file — 11883 bytes======Scheduled tasks folder======
C:WINDOWStasksUser_Feed_Synchronization-{052271F4-54A7-42DE-BF21-C540F1D68EC3}.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2008-06-11 61816][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2008-06-11 75128][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{1E6700F0-0F85-40fd-8022-7EB60AB46F10}]
Tildes Birojs — D:Program FilesTildes Birojs 2005IEjosla.dll [2005-06-05 177688][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll [2009-01-29 1088296][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper — C:Program FilesBitComettoolsBitCometBHO_1.3.1.15.dll [2009-01-16 656696][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll [2009-04-23 259696][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.15642swg.dll [2009-06-21 669168][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll [2009-04-23 470512][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2009-05-21 41368][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-05-21 73728][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2008-12-03 1561864]
{1E6700F0-0F85-40fd-8022-7EB60AB46F10} — Tildes Birojs — D:Program FilesTildes Birojs 2005IEjosla.dll [2005-06-05 177688]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll [2009-04-23 259696][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2008-07-26 13570048]
«nwiz»=nwiz.exe /install []
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«BDRegion»=C:Program FilesCyberlinkShared Filesbrs.exe [2008-08-21 91432]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2007-10-28 72736]
«LanguageShortcut»=C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe [2007-10-11 62760]
«nod32kui»=C:Program FilesEsetnod32kui.exe [2008-09-05 949376]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2008-06-12 34672]
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2008-07-26 86016]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2006-06-28 16248320]
«SkyTel»=C:WINDOWSSkyTel.EXE [2006-05-16 2879488]
«SSBkgdUpdate»=C:Program FilesCommon FilesScansoft SharedSSBkgdUpdateSSBkgdupdate.exe [2006-10-25 210472]
«OpwareSE4″=D:Новая папка (2)OpwareSE4.exe [2007-02-04 79400]
«MULTIMEDIA KEYBOARD»=C:Program FilesNetropaMultimedia KeyboardMMKeybd.exe [2002-07-25 167936]
«mdiction»=D:PROGRA~1TILDES~1MDICTION.EXE [2005-06-05 184320]
«Pianists»=D:PROGRA~1TILDES~1Pianists.exe [2005-06-05 165400]
«CheckCU»=D:PROGRA~1TILDES~1CheckCU.exe [2005-06-05 40960]
«SunJavaUpdateSched»=C:Program FilesJavajre6binjusched.exe [2009-05-21 148888]
«KernelFaultCheck»=C:WINDOWSsystem32dumprep 0 -k [][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
«Skype»=C:Program FilesSkypePhoneSkype.exe [2009-04-16 24264488]
«swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-03-02 68856]
«BitComet»=C:Program FilesBitCometBitComet.exe [2009-01-20 2523960]
«Yupdate!»=C:Program FilesCommon FilesYandexYupdateyupdate.exe [2008-10-20 479496]
«PC Suite Tray»=D:pc sute nokiaNokia PC Suite 7PCSuite.exe [2008-12-03 1205760]
«DAEMON Tools Lite»=C:Program FilesDAEMON Tools Litedaemon.exe [2009-04-23 691656]
«Speeder»=C:Program FilesSpeed GearSpeedGear.exe [2008-05-08 561152]C:Documents and SettingsAll UsersStart MenuProgramsStartup
Exif Launcher S.lnk — C:Documents and SettingsuserDesktopNew Folder (2)QuickDCF2.exeC:Documents and SettingsuserStart MenuProgramsStartup
Adobe Gamma.lnk — C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
C:WINDOWSsystem32WgaLogon.dll [2009-03-10 239496][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalPEVSystemStart]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalprocexp90.Sys]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworknm]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworknm.sys]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkPEVSystemStart]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkprocexp90.Sys]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWdf01000.sys]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=323
«NoDriveAutoRun»=67108863
«NoDrives»=0[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=
«NoDrives»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesCyberLinkPowerDVDPowerDVD.exe»=»C:Program FilesCyberLinkPowerDVDPowerDVD.exe:*:Enabled:CyberLink PowerDVD»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binApache.exe»=»C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binApache.exe:*:Enabled:Apache HTTP Server»
«C:Program FilesBitCometBitComet.exe»=»C:Program FilesBitCometBitComet.exe:*:Enabled:BitComet — a BitTorrent Client»
«C:Program FilesOperaopera.exe»=»C:Program FilesOperaopera.exe:*:Enabled:Opera Internet Browser»
«D:Program FilesTildes Birojs 2005TLWS.exe»=»D:Program FilesTildes Birojs 2005TLWS.exe:*:Enabled:Tilde Search Manager»
«D:Program FilesTildes Birojs 2005TildesBirojsAutoUpdate.exe»=»D:Program FilesTildes Birojs 2005TildesBirojsAutoUpdate.exe:*:Enabled:Tilde Birojs Auto Updater»
«D:hl2.exe»=»D:hl2.exe:*:Enabled:hl2»
«D:Program FilesAkella GamesTest Drive Unlimited GoldTestDriveUnlimited.exe»=»D:Program FilesAkella GamesTest Drive Unlimited GoldTestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited»
«C:Program FilesNokiaNokia Software Updaternsu_ui_client.exe»=»C:Program FilesNokiaNokia Software Updaternsu_ui_client.exe:*:Enabled:Nokia Software Updater»
«C:Program FilesCommon FilesNokiaService LayerAnsl_host_process.exe»=»C:Program FilesCommon FilesNokiaService LayerAnsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process «
«C:Program FilesMetin2_RUmetin2.bin»=»C:Program FilesMetin2_RUmetin2.bin:*:Enabled:metin2»
«C:Program FilesMaxima-5.18.1binxmaxima.exe»=»C:Program FilesMaxima-5.18.1binxmaxima.exe:*:Enabled:Tclkit, a standalone runtime for Tcl/Tk»
«D:xtcscstrike.exe»=»D:xtcscstrike.exe:*:Enabled:XTCS Counter-Strike 1.6 Final Release»
«C:Program FilesNokiaNokia Home Media ServerMedia Servertwonkymedia.exe»=»C:Program FilesNokiaNokia Home Media ServerMedia Servertwonkymedia.exe:*:Enabled:TwonkyMedia»
«C:Program FilesNokiaNokia Home Media ServerMedia Servertwonkymediaserver.exe»=»C:Program FilesNokiaNokia Home Media ServerMedia Servertwonkymediaserver.exe:*:Enabled:TwonkyMediaServer»
«C:WINDOWSsystem32PnkBstrA.exe»=»C:WINDOWSsystem32PnkBstrA.exe:*:Enabled:PnkBstrA»
«C:WINDOWSsystem32PnkBstrB.exe»=»C:WINDOWSsystem32PnkBstrB.exe:*:Enabled:PnkBstrB»
«D:codwowCoDWaW.exe»=»D:codwowCoDWaW.exe:*:Enabled:Call of Duty(R) — World at War(TM) «
«D:codwowCoDWaWmp.exe»=»D:codwowCoDWaWmp.exe:*:Enabled:Call of Duty(R) — World at War(TM) «
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»======List of files/folders created in the last 1 months======
2009-07-26 23:23:34 —-D—- C:Program Filestrend micro
2009-07-26 23:23:32 —-D—- C:rsit
2009-07-26 10:47:36 —-SHD—- C:RECYCLER
2009-07-26 10:38:33 —-D—- C:Documents and SettingsuserApplication DataMalwarebytes
2009-07-26 10:38:28 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-07-26 10:38:28 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-07-26 10:30:53 —-D—- C:ComboFix
2009-07-26 10:25:49 —-A—- C:ComboFix.txt
2009-07-26 10:11:37 —-A—- C:WINDOWSNIRCMD.exe
2009-07-22 13:53:43 —-D—- C:Documents and SettingsuserApplication Datacom.raptr.Raptr.848BBC53270CAC248E8FA0F339176201CDEB525F.1
2009-07-22 13:50:11 —-SHD—- C:WINDOWSftpcache
2009-07-22 13:49:32 —-D—- C:Program FilesCommon FilesAdobe AIR
2009-07-22 13:49:25 —-D—- C:Documents and SettingsuserApplication DataRaptr
2009-07-22 10:27:54 —-D—- C:WINDOWSwinfiles
2009-07-22 09:49:01 —-A—- C:WINDOWSsystem32pbsvc.exe
2009-07-16 18:36:43 —-D—- C:Documents and SettingsuserApplication DataSamsung
2009-07-16 18:32:09 —-A—- C:WINDOWSsystem32framedyn.dll
2009-07-16 18:28:04 —-D—- C:WINDOWSsystem32Samsung_USB_Drivers
2009-07-16 18:27:56 —-D—- C:Program FilesSamsung
2009-07-15 03:03:48 —-HDC—- C:WINDOWS$NtUninstallKB973346$
2009-07-15 03:03:39 —-HDC—- C:WINDOWS$NtUninstallKB971633$
2009-07-15 03:00:24 —-HDC—- C:WINDOWS$NtUninstallKB961371$
2009-07-08 13:29:15 —-A—- C:WINDOWSsystem32nhm_server_trace.txt
2009-07-08 13:28:49 —-D—- C:Program FilesMSXML 6.0
2009-07-08 13:25:07 —-D—- C:WINDOWSGlobalization
2009-07-07 23:07:37 —-D—- C:Program FilesPanda Security
2009-07-07 08:54:32 —-D—- C:WINDOWSERDNT
2009-07-03 00:54:21 —-A—- C:WINDOWSPrototype(TM) v1.0.0.1 + 7 Trainer.exe
2009-07-02 11:32:16 —-D—- C:Documents and SettingsuserApplication DataMixMeister Technology
2009-06-30 22:04:18 —-A—- C:WINDOWSsystem32javaws.exe
2009-06-30 22:04:18 —-A—- C:WINDOWSsystem32javaw.exe
2009-06-30 22:04:18 —-A—- C:WINDOWSsystem32java.exe
2009-06-29 17:42:07 —-N—- C:WINDOWSSetup1.exe
2009-06-29 17:42:06 —-A—- C:WINDOWSST6UNST.EXE
2009-06-29 16:21:17 —-A—- C:WINDOWSsystem32X3DAudio1_6.dll
2009-06-29 16:21:16 —-A—- C:WINDOWSsystem32d3dx10_40.dll
2009-06-29 16:21:16 —-A—- C:WINDOWSsystem32D3DCompiler_40.dll
2009-06-29 16:21:14 —-A—- C:WINDOWSsystem32xactengine3_3.dll======List of files/folders modified in the last 1 months======
2009-07-26 23:23:37 —-D—- C:WINDOWSPrefetch
2009-07-26 23:23:34 —-RD—- C:Program Files
2009-07-26 23:01:52 —-D—- C:Program FilesBitComet
2009-07-26 22:58:32 —-D—- C:WINDOWSTemp
2009-07-26 22:52:03 —-D—- C:Documents and SettingsuserApplication DataSkype
2009-07-26 22:36:17 —-D—- C:Documents and SettingsuserApplication DataskypePM
2009-07-26 22:35:47 —-A—- C:WINDOWSMsiosd.ini
2009-07-26 22:35:18 —-D—- C:WINDOWS
2009-07-26 21:32:42 —-D—- C:Program FilesMozilla Firefox
2009-07-26 19:32:52 —-D—- C:Documents and SettingsAll UsersApplication DataTest Drive Unlimited
2009-07-26 18:54:38 —-A—- C:WINDOWSSchedLgU.Txt
2009-07-26 15:18:14 —-D—- C:WINDOWSsystem32CatRoot2
2009-07-26 10:45:26 —-D—- C:WINDOWSsystem32drivers
2009-07-26 10:31:05 —-D—- C:WINDOWSsystem32
2009-07-26 10:22:35 —-A—- C:WINDOWSsystem.ini
2009-07-26 10:17:35 —-D—- C:WINDOWSAppPatch
2009-07-26 10:17:31 —-D—- C:Program FilesCommon Files
2009-07-24 12:12:45 —-A—- C:WINDOWSwinamp.ini
2009-07-22 15:36:37 —-D—- C:WINDOWSMinidump
2009-07-22 14:23:21 —-D—- C:Program FilesLineage2
2009-07-22 14:22:45 —-SHD—- C:WINDOWSInstaller
2009-07-22 14:18:41 —-HD—- C:Program FilesInstallShield Installation Information
2009-07-22 14:18:14 —-RSD—- C:WINDOWSassembly
2009-07-22 14:18:13 —-D—- C:Program FilesNokia
2009-07-22 14:18:11 —-D—- C:Program FilesCommon FilesNokia
2009-07-22 14:15:43 —-D—- C:WINDOWSWinSxS
2009-07-22 13:49:33 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2009-07-22 13:38:03 —-A—- C:WINDOWSsystem32PnkBstrB.exe
2009-07-22 11:37:16 —-D—- C:WINDOWSsystem32DirectX
2009-07-22 11:37:15 —-HD—- C:WINDOWSinf
2009-07-22 09:55:28 —-A—- C:WINDOWSSpeedGear.INI
2009-07-18 19:45:51 —-D—- C:vcs5BGEffects
2009-07-15 03:03:48 —-HD—- C:WINDOWS$hf_mig$
2009-07-15 03:03:45 —-A—- C:WINDOWSimsins.BAK
2009-07-15 03:03:41 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-07-14 21:38:48 —-A—- C:WINDOWSNeroDigital.ini
2009-07-08 13:29:43 —-D—- C:Documents and SettingsuserApplication DataNokia
2009-07-08 13:28:54 —-D—- C:Documents and SettingsAll UsersApplication DataInstallations
2009-07-08 13:28:09 —-RSD—- C:WINDOWSFonts
2009-07-07 23:38:57 —-SHD—- C:System Volume Information
2009-07-07 23:07:15 —-SD—- C:WINDOWSDownloaded Program Files
2009-07-07 18:10:56 —-A—- C:WINDOWSsystem32MRT.exe
2009-07-04 12:58:55 —-D—- C:Program FilesMetin2_RU
2009-07-03 02:15:08 —-SD—- C:Documents and SettingsuserApplication DataMicrosoft
2009-06-30 22:04:03 —-D—- C:Program FilesJava======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 msikbd2k;Multimedia Keyboard Filter Driver; C:WINDOWSSystem32DRIVERSmsikbd2k.sys [2001-12-20 6656]
R1 nod32drv;nod32drv; C:WINDOWSsystem32driversnod32drv.sys [2008-09-05 15424]
R1 StarOpen;StarOpen; C:WINDOWSsystem32driversStarOpen.sys [2006-07-24 5632]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:WINDOWSSystem32driversws2ifsl.sys [2004-08-04 12032]
R2 {95808DC4-FA4A-4C74-92FE-5B863F82066B};{95808DC4-FA4A-4C74-92FE-5B863F82066B}; ??C:Program FilesCyberLinkPowerDVD 00.fcl []
R2 AMON;AMON; C:WINDOWSsystem32driversamon.sys [2008-09-05 512096]
R3 FStarForce;FStarForce; C:WINDOWSsystem32DRIVERSFStarForce.sys [2009-02-14 8192]
R3 GEARAspiWDM;GEARAspiWDM; C:WINDOWSSystem32DriversGEARAspiWDM.sys [2006-09-19 15664]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Microsoft HID Class Driver; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2006-06-28 4304384]
R3 mouhid;Mouse HID Driver; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-08-17 12160]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2008-07-26 6097536]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:WINDOWSsystem32DRIVERSNVENETFD.sys [2006-07-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:WINDOWSsystem32DRIVERSnvnetbus.sys [2006-07-11 20480]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-13 59520]
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-04-13 17152]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:WINDOWSsystem32driversWmBEnum.sys [2004-05-13 10144]
R3 WmFilter;Logitech WingMan HID Filter Driver; C:WINDOWSsystem32driversWmFilter.sys [2004-05-13 21440]
R3 WmHidLo;Logitech WingMan USB Filter Driver; C:WINDOWSsystem32driversWmHidLo.sys [2004-05-13 14720]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:WINDOWSsystem32driversWmXlCore.sys [2004-05-13 44384]
S1 kbdhid;Keyboard HID Driver; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-13 14592]
S3 amw0evdh;amw0evdh; C:WINDOWSsystem32driversamw0evdh.sys []
S3 Arp1394;1394 ARP Client Protocol; C:WINDOWSsystem32DRIVERSarp1394.sys [2008-04-13 60800]
S3 catchme;catchme; ??C:DOCUME~1userLOCALS~1Tempcatchme.sys []
S3 NIC1394;1394 Net Driver; C:WINDOWSsystem32DRIVERSnic1394.sys [2008-04-13 61824]
S3 nm;Network Monitor Driver; C:WINDOWSsystem32DRIVERSNMnt.sys [2008-04-13 40320]
S3 nmwcd;Nokia USB Phone Parent; C:WINDOWSsystem32driversccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:WINDOWSsystem32driversccdcmbo.sys [2009-02-09 22016]
S3 npkcrypt;npkcrypt; ??C:Program FilesLineage2systemnpkcrypt.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 PRODIGY;PRODIGY; C:WINDOWSSystem32DriversPRODIGY.SYS [2006-08-29 32377]
S3 s115bus;Sony Ericsson Device 115 driver (WDM); C:WINDOWSsystem32DRIVERSs115bus.sys [2007-04-23 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter; C:WINDOWSsystem32DRIVERSs115mdfl.sys [2007-04-23 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver; C:WINDOWSsystem32DRIVERSs115mdm.sys [2007-04-23 108680]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM); C:WINDOWSsystem32DRIVERSs115mgmt.sys [2007-04-23 100488]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface; C:WINDOWSsystem32DRIVERSs115obex.sys [2007-04-23 98568]
S3 s716bus;Sony Ericsson Device 716 driver (WDM); C:WINDOWSsystem32DRIVERSs716bus.sys [2007-04-04 83208]
S3 s716mdfl;Sony Ericsson Device 716 USB WMC Modem Filter; C:WINDOWSsystem32DRIVERSs716mdfl.sys [2007-04-04 15112]
S3 s716mdm;Sony Ericsson Device 716 USB WMC Modem Driver; C:WINDOWSsystem32DRIVERSs716mdm.sys [2007-04-04 108552]
S3 s716mgmt;Sony Ericsson Device 716 USB WMC Device Management Drivers (WDM); C:WINDOWSsystem32DRIVERSs716mgmt.sys [2007-04-04 100360]
S3 s716obex;Sony Ericsson Device 716 USB WMC OBEX Interface; C:WINDOWSsystem32DRIVERSs716obex.sys [2007-04-04 98568]
S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:WINDOWSsystem32DRIVERSssm_bus.sys [2005-08-30 58320]
S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:WINDOWSsystem32DRIVERSssm_mdfl.sys [2005-08-30 8336]
S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:WINDOWSsystem32DRIVERSssm_mdm.sys [2005-08-30 94000]
S3 upperdev;upperdev; C:WINDOWSsystem32DRIVERSusbser_lowerflt.sys [2009-02-09 7808]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-13 32128]
S3 usbprint;Microsoft USB PRINTER Class; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:WINDOWSsystem32driversusbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:WINDOWSsystem32DRIVERSusbser_lowerfltj.sys [2009-02-09 7808]
S3 usbstor;USB Mass Storage Driver; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Wdf01000; C:WINDOWSsystem32DRIVERSWdf01000.sys [2008-03-27 503008]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:WINDOWSsystem32driversWmVirHid.sys [2004-05-13 5600]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-15 82688]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ForcewareWebInterface;Forceware Web Interface; C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe [2006-04-03 20543]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2009-05-21 152984]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 nhksrv;Netropa NHK Server; C:Program FilesNetropaMultimedia Keyboardnhksrv.exe [2001-08-06 28672]
R2 NOD32krn;NOD32 Kernel Service; C:Program FilesEsetnod32krn.exe [2008-09-05 552064]
R2 nSvcIp;ForceWare IP service; C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe [2006-07-13 131131]
R2 nSvcLog;ForceWare user log service; C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe [2006-07-13 65599]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2008-07-26 159812]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2009-02-27 66872]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared filesRichVideo.exe [2008-08-21 243056]
R2 TwonkyMedia;TwonkyMedia; C:Program FilesNokiaNokia Home Media ServerMedia ServerTwonkyMedia.exe [2008-07-09 102400]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
R3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2008-11-11 620544]
S3 Adobe LM Service;Adobe LM Service; C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe [2009-03-06 72704]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2006-10-20 36864]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-04-23 182768]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-10-18 913408]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]
info.txt logfile of random’s system information tool 1.06 2009-07-26 23:23:58======Uninstall list======
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
Adobe Acrobat 5.0—>C:WINDOWSISUNINST.EXE -f»C:Program FilesCommon FilesAdobeAcrobat 5.0NTUninst.isu» -c»C:Program FilesCommon FilesAdobeAcrobat 5.0NTUninst.dll»
Adobe AIR—>c:Program FilesCommon FilesAdobe AIRVersions1.0ResourcesAdobe AIR Updater.exe -arp:uninstall
Adobe AIR—>MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
Adobe Bridge 1.0—>MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000103}
Adobe Common File Installer—>MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5B39}
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Flash Player ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Help Center 1.0—>MsiExec.exe /I{E9787678-1033-0000-8E67-000000000001}
Adobe Photoshop CS2—>msiexec /I {236BB7C4-4419-42FD-0409-1E257A25E34D}
Adobe Reader 9—>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A90000000001}
Adobe Stock Photos 1.0—>MsiExec.exe /I{786C5747-1033-0000-B58E-000000000001}
AIMP MMC PRO—>D:AIMP MMC PROUnInstall.exe
AV Voice Changer Software DIAMOND 6.0—>D:PROGRA~1AVVCS6~2.0DIUNWISE.EXE D:PROGRA~1AVVCS6~2.0DIINSTALL.LOG
BitComet 1.09—>C:Program FilesBitCometuninst.exe
BS.Player PRO—>»C:Program FilesWebtehBSplayerProuninstall.exe»
Call of Duty(R) — World at War(TM) 1.2 Patch—>C:Program FilesInstallShield Installation Information{2BF0AE92-C3BC-4112-9066-1546342B1FAE}setup.exe -runfromtemp -l0x0409
Call of Duty(R) — World at War(TM) 1.3 Patch—>C:Program FilesInstallShield Installation Information{149464D9-B06F-4505-9968-FD1206F67AD3}setup.exe -runfromtemp -l0x0409
Call of Duty(R) — World at War(TM)—>C:Program FilesInstallShield Installation Information{D80A6A73-E58A-4673-AFF5-F12D7110661F}setup.exe -runfromtemp -l0x0419
Canon MP Navigator 3.1—>»C:Program FilesCanonMP Navigator 3.1Maint.exe» /UninstallRemove C:Program FilesCanonMP Navigator 3.1uninst.ini
Canon MP140 series — регистрация пользователя—>C:Program FilesCanonIJEREGMP140 seriesUNINST.EXE
Canon MP140 series—>»C:WINDOWSsystem32CanonIJ Uninstaller Information{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP140_seriesDelDrv.exe» /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP140_series /L0x0019
Canon Utilities Easy-LayoutPrint—>C:Program FilesCanonEasy-LayoutPrintuninst.exe uninst.ini
Canon Utilities Easy-PhotoPrint—>C:Program FilesCanonEasy-PhotoPrintuninst.exe uninst.ini
Counter-Strike: Source v17—>D:Uninstal.exe
Critical Update for Windows Media Player 11 (KB959772)—>»C:WINDOWS$NtUninstallKB959772_WM11$spuninstspuninst.exe»
FUJIFILM FinePixViewer S Ver.2.1—>C:Program FilesInstallShield Installation Information{88B32652-CAE0-4909-A463-5840D2689D93}SETUP.EXE -runfromtemp -l0x0009 -removeonly
GEAR 32bit Driver Installer—>MsiExec.exe /X{E89B484C-B913-49A0-959B-89E836001658}
GOM Player—>»D:GomPlayerUninstall.exe»
Google Toolbar for Internet Explorer—>»C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarManager_BDA1448D3D255554.exe» /uninstall
Google Toolbar for Internet Explorer—>MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
HijackThis 2.0.2—>»C:Program Filestrend microHijackThis.exe» /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)—>»C:WINDOWS$NtUninstallKB929399$spuninstspuninst.exe»
Hotfix for Windows Media Player 11 (KB939683)—>»C:WINDOWS$NtUninstallKB939683$spuninstspuninst.exe»
Hotfix for Windows XP (KB915800-v4)—>»C:WINDOWS$NtUninstallKB915800-v4$spuninstspuninst.exe»
Hotfix for Windows XP (KB952287)—>»C:WINDOWS$NtUninstallKB952287$spuninstspuninst.exe»
Java(TM) 6 Update 14—>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
K-Lite Codec Pack 4.1.7 (Full)—>»C:Program FilesK-Lite Codec Packunins000.exe»
Logitech Gaming Software—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime 701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{648F9C94-EC44-487B-9DA4-44ED72A082CC}setup.exe» -l0x9
Malwarebytes’ Anti-Malware—>»C:Program FilesMalwarebytes’ Anti-Malwareunins000.exe»
Maxima 5.18.1—>»C:Program FilesMaxima-5.18.1uninstunins000.exe»
Microsoft .NET Framework 1.1 Hotfix (KB928366)—>»C:WINDOWSMicrosoft.NETFrameworkv1.1.4322Updateshotfix.exe» «C:WINDOWSMicrosoft.NETFrameworkv1.1.4322UpdatesM928366M928366Uninstall.msp»
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0—>C:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0install.exe
Microsoft .NET Framework 3.0—>C:WINDOWSMicrosoft.NETFrameworkv3.0Microsoft .NET Framework 3.0setup.exe
Microsoft .NET Framework 3.0—>MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003}
Microsoft Compression Client Pack 1.0 for Windows XP—>»C:WINDOWS$NtUninstallMSCompPackV1$spuninstspuninst.exe»
Microsoft Games for Windows — LIVE —>MsiExec.exe /X{4D243BA7-9AC4-46D1-90E5-EEB88974F501}
Microsoft Games for Windows — LIVE Redistributable—>MsiExec.exe /X{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}
Microsoft Internationalized Domain Names Mitigation APIs—>»C:WINDOWS$NtServicePackUninstallIDNMitigationAPIs$spuninstspuninst.exe»
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5—>»C:WINDOWS$NtUninstallWdf01005$spuninstspuninst.exe»
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7—>»C:WINDOWS$NtUninstallWdf01007$spuninstspuninst.exe»
Microsoft National Language Support Downlevel APIs—>»C:WINDOWS$NtServicePackUninstallNLSDownlevelMapping$spuninstspuninst.exe»
Microsoft Office Professional Edition 2003—>MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.5—>»C:WINDOWS$NtUninstallWudf01005$spuninstspuninst.exe»
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.17—>MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Windows Media Video 9 VCM—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFwmv9vcm.inf, Uninstall
MixMeister Fusion Demo 7.3.2—>»D:MixMeister Fusionunins000.exe»
Mozilla ActiveX Control v1.7.12—>C:Program FilesMozilla ActiveX Control v1.7.12uninst.exe
Mozilla Firefox (3.0.12)—>C:Program FilesMozilla Firefoxuninstallhelper.exe
MSVC80_x86—>MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
MSXML 4.0 SP2 (KB954430)—>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB933579)—>MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
mTC (remove only)—>»C:Program FilesmTCmtc-uninst.exe»
Nero 6 Ultra Edition—>C:Program FilesAheadnerouninstallUNNERO.exe /UNINSTALL
NOD32 antivirus system—>C:Program FilesEsetSetupsetup.exe /UNINSTALL
NOD32 FiX—>»C:Program FilesEsetunins000.exe»
Nokia Connectivity Cable Driver—>MsiExec.exe /I{82427977-8776-4087-90CA-9F65174D3C4D}
Nokia PC Suite—>C:Documents and SettingsAll UsersApplication DataInstallations{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}Nokia_PC_Suite_7_1_18_0_rus_web.exe
Nokia PC Suite—>MsiExec.exe /I{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}
Nokia Software Updater—>MsiExec.exe /X{9F59C3AE-81B0-4EF6-9762-D674BB079705}
NSS (remove only)—>C:Program FilesNSSuninstall.exe
nullDC 1.0.0 Public Beta 1 Setup—>MsiExec.exe /I{C3FDA1E4-1E17-48D8-B4F0-C141E9FFB4BA}
NVIDIA Drivers—>C:WINDOWSsystem32nvuide.exe UninstallGUI
NVIDIA ForceWare Network Access Manager—>C:PROGRA~1COMMON~1INSTAL~1Driver9INTEL3~1IDriver.exe /M{1F6423DE-7959-4178-80E0-023C7EAA5347} /l1033
Office Keyboard—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{0208A7E3-0D30-11D4-A1FC-00508B9D1BA2}Setup.exe» -l0x9
OpenAL—>»C:Program FilesOpenALOpenALwEAX.exe» /U /S
Opera 9.63—>MsiExec.exe /X{2C0CD17D-0B06-4700-83FA-7344B868B0A2}
Panda ActiveScan 2.0—>C:Program FilesPanda SecurityActiveScan 2.0as2uninst.exe
PC Connectivity Solution—>MsiExec.exe /I{D848D140-41C3-4A53-86D8-E866A100B4CD}
Pcsx2 0.9.6—>MsiExec.exe /I{0E2B767B-EA6A-489B-BF83-8083FE1DB661}
PhotoFiltre—>»D:PhotoFiltreUninst.exe»
Picasa 3—>»D:Picasa3Uninstall.exe»
PowerDVD Ultra—>»C:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}setup.exe» -l0x000409 /z-uninstall
PunkBuster Services—>C:WINDOWSsystem32pbsvc.exe -u
Realtek High Definition Audio Driver—>RtlUpd.exe -r -m
Rockstar Games Social Club—>»C:Program FilesInstallShield Installation Information{08B3869E-D282-424C-9AFC-870E04A4BA14}setup.exe» -runfromtemp -l0x0009 -removeonly
SAMSUNG CDMA Modem Driver Set—>C:WINDOWSsystem32Samsung_USB_Drivers3SSCDUninstall.exe
SAMSUNG Mobile Composite Device Software—>C:WINDOWSsystem32Samsung_USB_Drivers6SSBCUninstall.exe
Samsung Mobile phone USB driver Software—>C:WINDOWSsystem32Samsung_USB_Drivers5SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software—>C:WINDOWSsystem32Samsung_USB_Drivers1SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software—>C:WINDOWSsystem32Samsung_USB_Drivers2SSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1050Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}setup.exe» -l0x19 -removeonly
Samsung PC Studio 3—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1050Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{C4A4722E-79F9-417C-BD72-8D359A090C97}setup.exe» -l0x19 -removeonly
Samsung Samples Installer—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1050Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{7AC15160-A49B-4A89-B181-D4619C025FFF}setup.exe» -l0x19 -removeonly
ScanSoft OmniPage SE 4—>MsiExec.exe /I{DEE88727-779B-47A9-ACEF-F87CA5F92A65}
Security Update for Windows Internet Explorer 7 (KB938127-v2)—>»C:WINDOWSie7updatesKB938127-v2-IE7spuninstspuninst.exe»
Security Update for Windows Internet Explorer 7 (KB961260)—>»C:WINDOWSie7updatesKB961260-IE7spuninstspuninst.exe»
Security Update for Windows Internet Explorer 7 (KB963027)—>»C:WINDOWSie7updatesKB963027-IE7spuninstspuninst.exe»
Security Update for Windows Internet Explorer 8 (KB969897)—>»C:WINDOWSie8updatesKB969897-IE8spuninstspuninst.exe»
Security Update for Windows Media Player (KB952069)—>»C:WINDOWS$NtUninstallKB952069_WM9$spuninstspuninst.exe»
Security Update for Windows Media Player 11 (KB936782)—>»C:WINDOWS$NtUninstallKB936782_WMP11$spuninstspuninst.exe»
Security Update for Windows Media Player 11 (KB954154)—>»C:WINDOWS$NtUninstallKB954154_WM11$spuninstspuninst.exe»
Security Update for Windows XP (KB923561)—>»C:WINDOWS$NtUninstallKB923561$spuninstspuninst.exe»
Security Update for Windows XP (KB938464)—>»C:WINDOWS$NtUninstallKB938464$spuninstspuninst.exe»
Security Update for Windows XP (KB941569)—>»C:WINDOWS$NtUninstallKB941569$spuninstspuninst.exe»
Security Update for Windows XP (KB946648)—>»C:WINDOWS$NtUninstallKB946648$spuninstspuninst.exe»
Security Update for Windows XP (KB950762)—>»C:WINDOWS$NtUninstallKB950762$spuninstspuninst.exe»
Security Update for Windows XP (KB950974)—>»C:WINDOWS$NtUninstallKB950974$spuninstspuninst.exe»
Security Update for Windows XP (KB951066)—>»C:WINDOWS$NtUninstallKB951066$spuninstspuninst.exe»
Security Update for Windows XP (KB951376-v2)—>»C:WINDOWS$NtUninstallKB951376-v2$spuninstspuninst.exe»
Security Update for Windows XP (KB951698)—>»C:WINDOWS$NtUninstallKB951698$spuninstspuninst.exe»
Security Update for Windows XP (KB951748)—>»C:WINDOWS$NtUninstallKB951748$spuninstspuninst.exe»
Security Update for Windows XP (KB952004)—>»C:WINDOWS$NtUninstallKB952004$spuninstspuninst.exe»
Security Update for Windows XP (KB952954)—>»C:WINDOWS$NtUninstallKB952954$spuninstspuninst.exe»
Security Update for Windows XP (KB953838)—>»C:WINDOWS$NtUninstallKB953838$spuninstspuninst.exe»
Security Update for Windows XP (KB953839)—>»C:WINDOWS$NtUninstallKB953839$spuninstspuninst.exe»
Security Update for Windows XP (KB954211)—>»C:WINDOWS$NtUninstallKB954211$spuninstspuninst.exe»
Security Update for Windows XP (KB954459)—>»C:WINDOWS$NtUninstallKB954459$spuninstspuninst.exe»
Security Update for Windows XP (KB954600)—>»C:WINDOWS$NtUninstallKB954600$spuninstspuninst.exe»
Security Update for Windows XP (KB955069)—>»C:WINDOWS$NtUninstallKB955069$spuninstspuninst.exe»
Security Update for Windows XP (KB956572)—>»C:WINDOWS$NtUninstallKB956572$spuninstspuninst.exe»
Security Update for Windows XP (KB956802)—>»C:WINDOWS$NtUninstallKB956802$spuninstspuninst.exe»
Security Update for Windows XP (KB956803)—>»C:WINDOWS$NtUninstallKB956803$spuninstspuninst.exe»
Security Update for Windows XP (KB956841)—>»C:WINDOWS$NtUninstallKB956841$spuninstspuninst.exe»
Security Update for Windows XP (KB957097)—>»C:WINDOWS$NtUninstallKB957097$spuninstspuninst.exe»
Security Update for Windows XP (KB958644)—>»C:WINDOWS$NtUninstallKB958644$spuninstspuninst.exe»
Security Update for Windows XP (KB958687)—>»C:WINDOWS$NtUninstallKB958687$spuninstspuninst.exe»
Security Update for Windows XP (KB958690)—>»C:WINDOWS$NtUninstallKB958690$spuninstspuninst.exe»
Security Update for Windows XP (KB959426)—>»C:WINDOWS$NtUninstallKB959426$spuninstspuninst.exe»
Security Update for Windows XP (KB960225)—>»C:WINDOWS$NtUninstallKB960225$spuninstspuninst.exe»
Security Update for Windows XP (KB960715)—>»C:WINDOWS$NtUninstallKB960715$spuninstspuninst.exe»
Security Update for Windows XP (KB960803)—>»C:WINDOWS$NtUninstallKB960803$spuninstspuninst.exe»
Security Update for Windows XP (KB961371)—>»C:WINDOWS$NtUninstallKB961371$spuninstspuninst.exe»
Security Update for Windows XP (KB961373)—>»C:WINDOWS$NtUninstallKB961373$spuninstspuninst.exe»
Security Update for Windows XP (KB961501)—>»C:WINDOWS$NtUninstallKB961501$spuninstspuninst.exe»
Security Update for Windows XP (KB968537)—>»C:WINDOWS$NtUninstallKB968537$spuninstspuninst.exe»
Security Update for Windows XP (KB969898)—>»C:WINDOWS$NtUninstallKB969898$spuninstspuninst.exe»
Security Update for Windows XP (KB970238)—>»C:WINDOWS$NtUninstallKB970238$spuninstspuninst.exe»
Security Update for Windows XP (KB971633)—>»C:WINDOWS$NtUninstallKB971633$spuninstspuninst.exe»
Security Update for Windows XP (KB973346)—>»C:WINDOWS$NtUninstallKB973346$spuninstspuninst.exe»
Skype™ 4.0—>MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
Speed Gear v6.0—>»C:Program FilesSpeed Gearunins000.exe»
Test Drive Unlimited Gold—>»d:Program FilesAkella GamesTest Drive Unlimited Golduninstunins000.exe»
Tildes Birojs 2005—>MsiExec.exe /I{36E408F0-DF8A-4F9B-BF26-AED92C789F5D}
TwonkyMedia—>C:Program FilesNokiaNokia Home Media Server\Media ServerUninstallTwonkyMedia.exe
Update for Windows Internet Explorer 8 (KB971180)—>»C:WINDOWSie8updatesKB971180-IE8spuninstspuninst.exe»
Update for Windows XP (KB951072-v2)—>»C:WINDOWS$NtUninstallKB951072-v2$spuninstspuninst.exe»
Update for Windows XP (KB951618-v2)—>»C:WINDOWS$NtUninstallKB951618-v2$spuninstspuninst.exe»
Update for Windows XP (KB951978)—>»C:WINDOWS$NtUninstallKB951978$spuninstspuninst.exe»
Update for Windows XP (KB955839)—>»C:WINDOWS$NtUninstallKB955839$spuninstspuninst.exe»
Update for Windows XP (KB967715)—>»C:WINDOWS$NtUninstallKB967715$spuninstspuninst.exe»
VideoGet—>»D:VideoGetunins000.exe»
Winamp (remove only)—>»C:Program FilesWinampUninstWA.exe»
Windows Communication Foundation—>MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Driver Package — Nokia Modem (10/27/2008 3.9)—>C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokia_blue_79486EC6AA0D1732FB17E5167077C07ECAE1B870nokia_bluetooth.inf
Windows Driver Package — Nokia Modem (10/27/2008 7.01.0.1)—>C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokbtmdm_247189AEBF39EB69A7C75429610DFED2F2EDC1B6nokbtmdm.inf
Windows Driver Package — Nokia pccsmcfd (08/22/2008 7.0.0.0)—>C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREpccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294pccsmcfd.inf
Windows Internet Explorer 7—>»C:WINDOWSie7spuninstspuninst.exe»
Windows Internet Explorer 8—>»C:WINDOWSie8spuninstspuninst.exe»
Windows Media Format 11 runtime—>»C:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Windows Media Format 11 runtime—>»C:WINDOWS$NtUninstallWMFDist11$spuninstspuninst.exe»
Windows Media Player 11—>»C:Program FilesWindows Media PlayerSetup_wm.exe» /Uninstall
Windows Media Player 11—>»C:WINDOWS$NtUninstallwmp11$spuninstspuninst.exe»
Windows Presentation Foundation—>MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation—>MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
Windows XP Service Pack 3—>»C:WINDOWS$NtServicePackUninstall$spuninstspuninst.exe»
WinRAR archiver—>C:Program FilesWinRaruninstall.exe
Z Steel Soldiers—>D:PROGRA~1ZSTEEL~1UNWISE.EXE D:PROGRA~1ZSTEEL~1INSTALL.LOG
Домашний медиасервер Nokia—>MsiExec.exe /X{DAC63ECB-4571-435F-9B19-51F54BC88109}
Домашняя Рыбалка—>»D:Домашняя Рыбалкаunins000.exe»
Московский Водила—>»D:Московский Водилаunins000.exe»
Яндекс.Бар для Internet Explorer 3.5.4—>»C:Program FilesYandexYandexBarIEunins000.exe»======Security center information======
AV: ESET NOD32 antivirus system 2.70
FW: ActiveArmor Firewall (disabled)======System event log======
Computer Name: USER-F58DB255A4
Event Code: 7036
Message: The Computer Browser service entered the stopped state.Record Number: 3353
Source Name: Service Control Manager
Time Written: 20090517202205.000000+180
Event Type: информация
User:Computer Name: USER-F58DB255A4
Event Code: 7036
Message: The Application Layer Gateway Service service entered the running state.Record Number: 3352
Source Name: Service Control Manager
Time Written: 20090517202204.000000+180
Event Type: информация
User:Computer Name: USER-F58DB255A4
Event Code: 7035
Message: The Application Layer Gateway Service service was successfully sent a start control.Record Number: 3351
Source Name: Service Control Manager
Time Written: 20090517202204.000000+180
Event Type: информация
User: NT AUTHORITYSYSTEMComputer Name: USER-F58DB255A4
Event Code: 7036
Message: The Network Location Awareness (NLA) service entered the running state.Record Number: 3350
Source Name: Service Control Manager
Time Written: 20090517202204.000000+180
Event Type: информация
User:Computer Name: USER-F58DB255A4
Event Code: 7035
Message: The Network Location Awareness (NLA) service was successfully sent a start control.Record Number: 3349
Source Name: Service Control Manager
Time Written: 20090517202204.000000+180
Event Type: информация
User: NT AUTHORITYSYSTEM=====Application event log=====
Computer Name: USER-F58DB255A4
Event Code: 7
Message: Successful auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>Record Number: 639
Source Name: crypt32
Time Written: 20090406142903.000000+180
Event Type: информация
User:Computer Name: USER-F58DB255A4
Event Code: 0
Message:
Record Number: 638
Source Name: gusvc
Time Written: 20090406132312.000000+180
Event Type: информация
User:Computer Name: USER-F58DB255A4
Event Code: 0
Message:
Record Number: 637
Source Name: gusvc
Time Written: 20090406132112.000000+180
Event Type: информация
User:Computer Name: USER-F58DB255A4
Event Code: 0
Message:
Record Number: 636
Source Name: gusvc
Time Written: 20090406115733.000000+180
Event Type: информация
User:Computer Name: USER-F58DB255A4
Event Code: 0
Message:
Record Number: 635
Source Name: gusvc
Time Written: 20090406115533.000000+180
Event Type: информация
User:======Environment variables======
Здравствуйте, добро пожаловать на Spyware-ru форум.
Вижу вы запускали Combofix, пришлите мне получившийся лог. Его вы можете найти в корне диска C, лог находится в файле combofix.txt.
Вставьте в ваше следующее сообщение содержимое этого файла.ComboFix 09-07-25.04 — user 26.07.2009 10:13.2.1 — NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1251.7.1033.18.1023.514 [GMT 3:00]
Running from: c:documents and settingsuserDesktopComboFix.exe
AV: ESET NOD32 antivirus system 2.70 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ActiveArmor Firewall *disabled* {EDC10449-64D1-46c7-A59A-EC20D662F26D}
* Resident AV is activeWARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.c:windowssystem32winio.vxd
.
((((((((((((((((((((((((( Files Created from 2009-06-26 to 2009-07-26 )))))))))))))))))))))))))))))))
.2009-07-22 12:37 . 2009-07-22 12:37
d-sh—w- c:documents and settingsNetworkServiceIETldCache
2009-07-22 10:53 . 2009-07-22 10:53
d
w- c:documents and settingsuserApplication Datacom.raptr.Raptr.848BBC53270CAC248E8FA0F339176201CDEB525F.1
2009-07-22 10:50 . 2009-07-22 10:50
d-sh—w- c:windowsftpcache
2009-07-22 10:49 . 2009-07-22 10:52 7829072 —-a-w- c:documents and settingsuserApplication DataRaptrraptr-0.3.0_20090721.exe
2009-07-22 10:49 . 2009-07-22 10:49
d
w- c:program filesCommon FilesAdobe AIR
2009-07-22 10:49 . 2009-07-22 10:53
d
w- c:documents and settingsuserApplication DataRaptr
2009-07-22 08:38 . 2009-07-22 08:38
d
w- c:documents and settingsuserLocal SettingsApplication DataActivision
2009-07-22 07:27 . 2009-07-22 07:27
d
w- c:windowswinfiles
2009-07-22 06:49 . 2009-07-22 08:36 22328 —-a-w- c:documents and settingsuserApplication DataPnkBstrK.sys
2009-07-22 06:49 . 2009-07-22 08:35 682280 —-a-w- c:windowssystem32pbsvc.exe
2009-07-16 15:36 . 2009-07-16 15:36
d
w- c:documents and settingsuserApplication DataSamsung
2009-07-16 15:32 . 2006-05-03 19:53 174592 —-a-w- c:windowssystem32framedyn.dll
2009-07-16 15:31 . 2006-07-24 13:05 5632 —-a-w- c:windowssystem32driversStarOpen.sys
2009-07-16 15:28 . 2005-08-29 22:49 94000 —-a-w- c:windowssystem32driversssm_mdm.sys
2009-07-16 15:28 . 2005-08-29 22:49 8336 —-a-w- c:windowssystem32driversssm_mdfl.sys
2009-07-16 15:28 . 2005-08-29 22:49 6176 —-a-w- c:windowssystem32driversssm_cmnt.sys
2009-07-16 15:28 . 2005-08-29 22:49 6176 —-a-w- c:windowssystem32driversssm_cm.sys
2009-07-16 15:28 . 2005-08-29 22:47 58320 —-a-w- c:windowssystem32driversssm_bus.sys
2009-07-16 15:28 . 2005-08-29 22:47 5840 —-a-w- c:windowssystem32driversssm_whnt.sys
2009-07-16 15:28 . 2005-08-29 22:47 5840 —-a-w- c:windowssystem32driversssm_wh.sys
2009-07-16 15:28 . 2009-07-16 15:31
d
w- c:windowssystem32Samsung_USB_Drivers
2009-07-16 15:27 . 2009-07-16 15:27
d
w- c:program filesSamsung
2009-07-08 18:12 . 2008-11-05 23:03
d
w- C:SDFix
2009-07-08 16:37 . 2009-07-08 16:37
d
w- c:documents and settingsLocalServiceLocal SettingsApplication DataNokia
2009-07-08 10:28 . 2009-07-08 10:28
d
w- c:program filesMSXML 6.0
2009-07-08 10:25 . 2009-07-22 11:18
d
w- c:windowsGlobalization
2009-07-07 20:07 . 2008-06-19 14:24 28544 —-a-w- c:windowssystem32driverspavboot.sys
2009-07-07 20:07 . 2009-07-07 20:07
d
w- c:program filesPanda Security
2009-07-02 21:54 . 2009-07-04 16:34 1516310 —-a-w- c:windowsPrototype(TM) v1.0.0.1 + 7 Trainer.exe
2009-07-02 08:32 . 2009-07-02 08:32
d
w- c:documents and settingsuserApplication DataMixMeister Technology
2009-07-02 08:31 . 2009-07-02 08:31 766 —-a-r- c:documents and settingsuserApplication DataMicrosoftInstaller{E89B484C-B913-49A0-959B-89E836001658}ARPPRODUCTICON.exe
2009-06-30 19:03 . 2009-06-30 19:03 152576 —-a-w- c:documents and settingsuserApplication DataSunJavajre1.6.0_14lzma.dll
2009-06-29 14:42 . 2009-06-29 14:42 253952
w- c:windowsSetup1.exe
2009-06-29 14:42 . 2009-06-29 14:42 74752 —-a-w- c:windowsST6UNST.EXE
2009-06-29 13:21 . 2009-03-16 11:18 22360 —-a-w- c:windowssystem32X3DAudio1_6.dll
2009-06-29 13:21 . 2008-10-10 01:52 452440 —-a-w- c:windowssystem32d3dx10_40.dll
2009-06-29 13:21 . 2008-10-10 01:52 2036576 —-a-w- c:windowssystem32D3DCompiler_40.dll
2009-06-29 13:21 . 2008-10-27 07:04 235856 —-a-w- c:windowssystem32xactengine3_3.dll.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-26 06:47 . 2009-02-26 17:38
d
w- c:documents and settingsuserApplication DataSkype
2009-07-26 05:07 . 2009-02-26 17:40
d
w- c:documents and settingsuserApplication DataskypePM
2009-07-26 03:49 . 2009-02-27 12:06
d
w- c:program filesBitComet
2009-07-24 17:24 . 2009-04-06 16:34
d
w- c:documents and settingsAll UsersApplication DataTest Drive Unlimited
2009-07-22 11:23 . 2009-05-30 15:58
d
w- c:program filesLineage2
2009-07-22 11:18 . 2008-09-05 11:50
d—h—w- c:program filesInstallShield Installation Information
2009-07-22 11:18 . 2009-04-13 13:55
d
w- c:program filesNokia
2009-07-22 11:18 . 2009-04-13 13:38
d
w- c:program filesCommon FilesNokia
2009-07-22 10:38 . 2009-02-27 20:01 111928 —-a-w- c:windowssystem32PnkBstrB.exe
2009-07-22 09:25 . 2009-02-27 20:01 138464 —-a-w- c:windowssystem32driversPnkBstrK.sys
2009-07-09 19:34 . 2008-09-05 16:29 94744 —-a-w- c:documents and settingsuserLocal SettingsApplication DataGDIPFONTCACHEV1.DAT
2009-07-08 10:29 . 2009-04-13 13:40
d
w- c:documents and settingsuserApplication DataNokia
2009-07-08 10:28 . 2009-04-13 13:37
d
w- c:documents and settingsAll UsersApplication DataInstallations
2009-07-04 09:58 . 2009-04-25 14:43
d
w- c:program filesMetin2_RU
2009-06-30 19:04 . 2009-04-18 17:02
d
w- c:program filesJava
2009-06-24 18:41 . 2009-06-24 18:41
d
w- c:program filesdirectx
2009-06-22 15:06 . 2009-06-22 15:06
d
w- c:program filesFargus
2009-06-16 14:36 . 2004-08-04 12:00 81920 —-a-w- c:windowssystem32fontsub.dll
2009-06-16 14:36 . 2004-08-04 12:00 119808 —-a-w- c:windowssystem32t2embed.dll
2009-06-05 11:15 . 2009-06-05 11:15
d
w- c:program filesMaxima-5.18.1
2009-06-03 19:09 . 2004-08-04 12:00 1291264 —-a-w- c:windowssystem32quartz.dll
2009-05-31 07:55 . 2009-05-31 07:55
d
w- c:program filesMozilla ActiveX Control v1.7.12
2009-05-29 21:21 . 2009-05-29 21:20
d
w- c:program filesmTC
2009-05-29 11:57 . 2009-05-29 11:57
d
w- c:documents and settingsuserApplication DataInterTrust
2009-05-29 11:57 . 2008-09-05 11:56
d
w- c:program filesCommon FilesAdobe
2009-05-21 08:33 . 2009-04-18 17:02 410984 —-a-w- c:windowssystem32deploytk.dll
2009-05-19 14:23 . 2009-05-19 14:23 3351812 —-a-w- c:documents and settingsAll UsersApplication DataInstallations{9F59C3AE-81B0-4EF6-9762-D674BB079705}InstallerCommonCustomActionsmsxml6Exec.exe
2009-05-19 14:23 . 2009-05-19 14:23 36864 —-a-w- c:documents and settingsAll UsersApplication DataInstallations{9F59C3AE-81B0-4EF6-9762-D674BB079705}InstallerCommonCustomActionsSleep.exe
2009-05-19 14:23 . 2009-05-19 14:23 3181612 —-a-w- c:documents and settingsAll UsersApplication DataInstallations{9F59C3AE-81B0-4EF6-9762-D674BB079705}InstallerCommonCustomActionsvcredistExec.exe
2009-05-19 14:22 . 2009-05-19 14:23 24503944 —-a-w- c:documents and settingsAll UsersApplication DataInstallations{9F59C3AE-81B0-4EF6-9762-D674BB079705}NokiaSoftwareUpdaterSetup_1.6.13RU.exe
2009-05-15 13:49 . 2009-04-06 16:36 107888 —-a-w- c:windowssystem32CmdLineExt.dll
2009-05-13 05:15 . 2004-08-04 12:00 915456 —-a-w- c:windowssystem32wininet.dll
2009-05-11 10:45 . 2009-05-12 13:55 51200 —-a-w- c:documents and settingsuserApplication DataMozillaFirefoxProfiles9vf96daw.defaultextensions{1835be4f-9123-479d-a452-0c062aac2f8f}componentsFFExternalAlert.dll
2009-05-11 10:45 . 2009-05-12 13:55 114688 —-a-w- c:documents and settingsuserApplication DataMozillaFirefoxProfiles9vf96daw.defaultextensions{1835be4f-9123-479d-a452-0c062aac2f8f}componentsnpmozax.dll
2009-05-09 17:54 . 2009-05-09 17:54 12862 —-a-r- c:documents and settingsuserApplication DataMicrosoftInstaller{0E2B767B-EA6A-489B-BF83-8083FE1DB661}_1EEFFF72773535163E4216.exe
2009-05-07 15:32 . 2004-08-04 12:00 345600 —-a-w- c:windowssystem32localspl.dll
2009-05-01 18:30 . 2009-05-01 18:30 3366912 —-a-w- c:windowssystem32GPhotos.scr
2009-07-22 14:09 . 2009-02-27 16:30 134648 —-a-w- c:program filesmozilla firefoxcomponentsbrwsrcmp.dll
.((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
«{91397D20-1446-11D4-8AF4-0040CA1127B6}»= «c:program filesYandexYandexBarIEyndbar.dll» [2008-12-03 1561864][HKEY_CLASSES_ROOTclsid{91397d20-1446-11d4-8af4-0040ca1127b6}]
[HKEY_CLASSES_ROOTYandex.Toolbar.1]
[HKEY_CLASSES_ROOTTypeLib{91397D13-1446-11D4-8AF4-0040CA1127B6}]
[HKEY_CLASSES_ROOTYandex.Toolbar][HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerToolbarWebbrowser]
«{91397D20-1446-11D4-8AF4-0040CA1127B6}»= «c:program filesYandexYandexBarIEyndbar.dll» [2008-12-03 1561864][HKEY_CLASSES_ROOTclsid{91397d20-1446-11d4-8af4-0040ca1127b6}]
[HKEY_CLASSES_ROOTYandex.Toolbar.1]
[HKEY_CLASSES_ROOTTypeLib{91397D13-1446-11D4-8AF4-0040CA1127B6}]
[HKEY_CLASSES_ROOTYandex.Toolbar][HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»c:windowssystem32ctfmon.exe» [2008-04-14 15360]
«Skype»=»c:program filesSkypePhoneSkype.exe» [2009-04-16 24264488]
«swg»=»c:program filesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe» [2009-03-02 68856]
«BitComet»=»c:program filesBitCometBitComet.exe» [2009-01-20 2523960]
«Yupdate!»=»c:program filesCommon FilesYandexYupdateyupdate.exe» [2008-10-20 479496]
«PC Suite Tray»=»d:pc sute nokiaNokia PC Suite 7PCSuite.exe» [2008-12-03 1205760]
«DAEMON Tools Lite»=»c:program filesDAEMON Tools Litedaemon.exe» [2009-04-23 691656]
«Speeder»=»c:program filesSpeed GearSpeedGear.exe» [2008-05-08 561152][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2008-07-26 13570048]
«NeroFilterCheck»=»c:windowssystem32NeroCheck.exe» [2001-07-09 155648]
«BDRegion»=»c:program filesCyberlinkShared Filesbrs.exe» [2008-08-21 91432]
«RemoteControl»=»c:program filesCyberLinkPowerDVDPDVDServ.exe» [2007-10-28 72736]
«LanguageShortcut»=»c:program filesCyberLinkPowerDVDLanguageLanguage.exe» [2007-10-11 62760]
«nod32kui»=»c:program filesEsetnod32kui.exe» [2008-09-05 949376]
«Adobe Reader Speed Launcher»=»c:program filesAdobeReader 9.0ReaderReader_sl.exe» [2008-06-11 34672]
«NvMediaCenter»=»c:windowssystem32NvMcTray.dll» [2008-07-26 86016]
«SSBkgdUpdate»=»c:program filesCommon FilesScansoft SharedSSBkgdUpdateSSBkgdupdate.exe» [2006-10-25 210472]
«OpwareSE4″=»d:новая папка (2)OpwareSE4.exe» [2007-02-04 79400]
«MULTIMEDIA KEYBOARD»=»c:program filesNetropaMultimedia KeyboardMMKeybd.exe» [2002-07-24 167936]
«mdiction»=»d:progra~1TILDES~1MDICTION.EXE» [2005-06-05 184320]
«Pianists»=»d:progra~1TILDES~1Pianists.exe» [2005-06-05 165400]
«CheckCU»=»d:progra~1TILDES~1CheckCU.exe» [2005-06-04 40960]
«SunJavaUpdateSched»=»c:program filesJavajre6binjusched.exe» [2009-05-21 148888]
«nwiz»=»nwiz.exe» — c:windowssystem32nwiz.exe [2008-07-26 1657376]
«RTHDCPL»=»RTHDCPL.EXE» — c:windowsRTHDCPL.EXE [2006-06-28 16248320]
«SkyTel»=»SkyTel.EXE» — c:windowsSkyTel.exe [2006-05-16 2879488][HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»c:windowssystem32CTFMON.EXE» [2008-04-14 15360]c:documents and settingsuserStart MenuProgramsStartup
Adobe Gamma.lnk — c:program filesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe [2005-3-16 113664]c:documents and settingsAll UsersStart MenuProgramsStartup
Exif Launcher S.lnk — c:documents and settingsuserDesktopNew Folder (2)QuickDCF2.exe [2009-3-13 303104][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]
@=»Driver»[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity center]
«AntiVirusOverride»=dword:00000001[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«%windir%\system32\sessmgr.exe»=
«c:\Program Files\CyberLink\PowerDVD\PowerDVD.exe»=
«%windir%\Network Diagnostic\xpnetdiag.exe»=
«c:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe»=
«c:\Program Files\BitComet\BitComet.exe»=
«c:\Program Files\Opera\opera.exe»=
«d:\Program Files\Tildes Birojs 2005\TLWS.exe»=
«d:\Program Files\Tildes Birojs 2005\TildesBirojsAutoUpdate.exe»=
«d:\hl2.exe»=
«d:\Program Files\Akella Games\Test Drive Unlimited Gold\TestDriveUnlimited.exe»=
«c:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe»=
«c:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe»=
«c:\Program Files\Metin2_RU\metin2.bin»=
«c:\Program Files\Maxima-5.18.1\bin\xmaxima.exe»=
«d:\xtcs\cstrike.exe»=
«c:\Program Files\Nokia\Nokia Home Media Server\Media Server\twonkymedia.exe»=
«c:\Program Files\Nokia\Nokia Home Media Server\Media Server\twonkymediaserver.exe»=
«c:\WINDOWS\system32\PnkBstrA.exe»=
«c:\WINDOWS\system32\PnkBstrB.exe»=
«d:\codwow\CoDWaW.exe»=
«d:\codwow\CoDWaWmp.exe»=
«c:\Program Files\Skype\Phone\Skype.exe»=[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileGloballyOpenPortsList]
«23242:TCP»= 23242:TCP:BitComet 23242 TCP
«23242:UDP»= 23242:UDP:BitComet 23242 UDPR0 pavboot;pavboot;c:windowssystem32driverspavboot.sys [07.07.2009 23:07 28544]
R1 msikbd2k;Multimedia Keyboard Filter Driver;c:windowssystem32driversMsikbd2k.sys [26.02.2009 20:34 6656]
R1 nod32drv;nod32drv;c:windowssystem32driversnod32drv.sys [05.09.2008 14:50 15424]
R2 nhksrv;Netropa NHK Server;c:program filesNetropaMultimedia Keyboardnhksrv.exe [26.02.2009 20:34 28672]
R2 TwonkyMedia;TwonkyMedia;c:program filesNokiaNokia Home Media ServerMedia ServerTwonkyMedia.exe -serviceversion 0 —> c:program filesNokiaNokia Home Media ServerMedia ServerTwonkyMedia.exe -serviceversion 0 [?]
R3 FStarForce;FStarForce;c:windowssystem32driversFStarForce.sys [14.02.2009 13:35 8192]
S3 PRODIGY;PRODIGY;c:windowssystem32driversprodigy.sys [13.04.2009 17:12 32377]
S3 s115bus;Sony Ericsson Device 115 driver (WDM);c:windowssystem32driverss115bus.sys [23.04.2007 13:54 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:windowssystem32driverss115mdfl.sys [23.04.2007 13:54 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:windowssystem32driverss115mdm.sys [23.04.2007 13:54 108680]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:windowssystem32driverss115mgmt.sys [23.04.2007 13:54 100488]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:windowssystem32driverss115obex.sys [23.04.2007 13:54 98568]
S3 s716bus;Sony Ericsson Device 716 driver (WDM);c:windowssystem32driverss716bus.sys [04.04.2007 13:43 83208]
S3 s716mdfl;Sony Ericsson Device 716 USB WMC Modem Filter;c:windowssystem32driverss716mdfl.sys [04.04.2007 13:43 15112]
S3 s716mdm;Sony Ericsson Device 716 USB WMC Modem Driver;c:windowssystem32driverss716mdm.sys [04.04.2007 13:43 108552]
S3 s716mgmt;Sony Ericsson Device 716 USB WMC Device Management Drivers (WDM);c:windowssystem32driverss716mgmt.sys [04.04.2007 13:43 100360]
S3 s716obex;Sony Ericsson Device 716 USB WMC OBEX Interface;c:windowssystem32driverss716obex.sys [04.04.2007 12:43 98568][HKEY_LOCAL_MACHINEsoftwaremicrosoftactive setupinstalled components>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
«c:windowssystem32rundll32.exe» «c:windowssystem32iedkcs32.dll»,BrandIEActiveSetup SIGNUP
.
Contents of the ‘Scheduled Tasks’ folder2009-07-26 c:windowsTasksUser_Feed_Synchronization-{052271F4-54A7-42DE-BF21-C540F1D68EC3}.job
— c:windowssystem32msfeedssync.exe [2007-08-13 01:31]
.
.
Supplementary Scan
.
uStart Page = hxxp://search.mywebsearch.com/mywebsearch/default.jhtml?ptnrS=ZNman000&ptb=RKlC0IRNmrBnmMq2nsYQQQ
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Search — http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNman000
IE: &Translate with Tilde Computer Dictionary — d:program filesTildes Birojs 2005TDVLauncher.DLL /201
IE: &Tulkot ar Tildes Datorvвrdnоcu — d:program filesTildes Birojs 2005TDVLauncher.DLL /201
IE: &З&агрузить &с помощью BitComet — c:program filesBitCometBitComet.exe/AddLink.htm
IE: &З&агрузить все видео файлы с помощью BitComet — c:program filesBitCometBitComet.exe/AddVideo.htm
IE: &З&агрузить все с помощью BitComet — c:program filesBitCometBitComet.exe/AddAllLink.htm
IE: Add to Google Photos Screensa&ver — c:windowssystem32GPhotos.scr/200
IE: E&xport to Microsoft Excel — c:progra~1MICROS~2OFFICE11EXCEL.EXE/3000
LSP: c:windowssystem32imon.dll
TCP: {FD4CF425-6F25-410C-9E97-C90ABEB1098B} = 89.201.49.1,159.148.60.20
FF — ProfilePath — c:documents and settingsuserApplication DataMozillaFirefoxProfiles9vf96daw.default
FF — prefs.js: browser.search.defaulturl — hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT692032&SearchSource=3&q={searchTerms}
FF — prefs.js: keyword.URL — hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT692032&SearchSource=2&q=
FF — component: c:documents and settingsuserApplication DataMozillaFirefoxProfiles9vf96daw.defaultextensions{1835be4f-9123-479d-a452-0c062aac2f8f}componentsFFExternalAlert.dll
FF — component: d:pc sute nokiaNokia PC Suite 7bkmrksynccomponentsBkMrkExt.dll
FF — plugin: c:program filesOperaprogrampluginsNPDocBox.dll
FF — plugin: c:program filesOperaprogrampluginsnppdf32.dll
FF — plugin: d:picasa3npPicasa3.dll
.**************************************************************************
catchme 0.3.1398 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-26 10:22
Windows 5.1.2600 Service Pack 3 NTFSscanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0**************************************************************************
[HKEY_LOCAL_MACHINESystemControlSet001Services{95808DC4-FA4A-4C74-92FE-5B863F82066B}]
«ImagePath»=»??c:program filesCyberLinkPowerDVD00.fcl»
.
LOCKED REGISTRY KEYS
[HKEY_USERSS-1-5-21-1645522239-1292428093-839522115-1003SoftwareMicrosoftSystemCertificatesAddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)[HKEY_USERSS-1-5-21-1645522239-1292428093-839522115-1003SoftwareSecuROM!CAUTION! NEVER A OR CHANGE ANY KEY*]
«??»=hex:fc,de,d3,07,53,31,b2,21,5e,d8,11,08,bb,b6,11,9b,95,f6,4e,6a,52,69,2d,
48,c5,97,1c,58,a8,f9,96,47,77,91,86,32,88,16,9a,ee,d8,43,0a,9e,b8,6c,88,ae,
«??»=hex:9a,a8,ab,4c,dd,7f,86,db,0c,97,8f,0e,ca,97,22,e0[HKEY_USERSS-1-5-21-1645522239-1292428093-839522115-1003SoftwareSecuROMLicense information*]
«datasecu»=hex:c0,15,24,60,a2,14,4d,21,0b,5a,91,78,be,a4,ca,30,91,b3,16,ae,05,
51,90,5d,3e,52,50,4c,b2,a5,34,09,c5,40,a8,d8,34,7b,f9,26,1b,cf,1f,b5,0e,eb,
«rkeysecu»=hex:0d,8a,b4,03,a3,4b,26,cc,26,63,3e,a9,61,7f,c0,df
.
DLLs Loaded Under Running Processes
— — — — — — — > ‘lsass.exe'(816)
c:windowssystem32imon.dll
.
Completion time: 2009-07-26 10:25
ComboFix-quarantined-files.txt 2009-07-26 07:25
ComboFix2.txt 2009-07-07 06:08Pre-Run: 12 403 912 704 bytes free
Post-Run: 13 398 269 952 bytes free259 — E O F — 2009-07-15 00:03
- Для ответа в этой теме необходимо авторизоваться.
