• Инструкции
    • Как использовать
      • Программы
    • Как удалить
      • Шпионское и рекламное ПО (adware и spyware)
      • Поддельное антиспайваре
      • Руткиты
      • Трояны
      • Кейлоггеры
  • Скачать программы
  • Вопросы и Ответы
  • Форумы

SPYWARE-RU.COM

Меню
  • Инструкции
    • Как использовать
      • Программы
    • Как удалить
      • Шпионское и рекламное ПО (adware и spyware)
      • Поддельное антиспайваре
      • Руткиты
      • Трояны
      • Кейлоггеры
  • Скачать программы
  • Вопросы и Ответы
  • Форумы
В начало › много вирусов
Adguard
 

много вирусов

Удаление вирусов и троянов. Защита компьютера. › Помощь в удалении вирусов, троянов, рекламы и других зловредов › много вирусов

  • This topic has 1 ответ, 2 участника, and was last updated 16 years, 4 months назад by Admin.
Просмотр 2 сообщений - с 1 по 2 (из 2 всего)
  • Автор
    Сообщения
  • 10 мая, 2009 в 6:47 пп #16654
    Rozen17
    Participant
    • Темы:1
    • Сообщений:1
    • ☆

    Running processes:
    C:WINDOWS.0System32smss.exe
    C:WINDOWS.0system32winlogon.exe
    C:WINDOWS.0system32services.exe
    C:WINDOWS.0system32lsass.exe
    C:WINDOWS.0system32svchost.exe
    C:WINDOWS.0System32svchost.exe
    C:Program FilesTGTSoftStyleXPStyleXPService.exe
    C:WINDOWS.0system32spoolsv.exe
    C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
    C:Program FilesBonjourmDNSResponder.exe
    C:WINDOWS.0system32svchost.exe
    C:Program FilesICQ6ToolbarICQ Service.exe
    C:WINDOWS.0System32svchost.exe
    C:Program FilesEsetnod32krn.exe
    C:WINDOWS.0System32svchost.exe
    C:WINDOWS.0system32svchost.exe
    C:Program FilesSynapticsSynTPSynTPEnh.exe
    C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe
    C:Program FilesHPHP Software UpdateHPWuSchd2.exe
    C:Program FilesEsetnod32kui.exe
    C:Program FilesUSB Disk Win98 DriverRes.EXE
    C:PROGRA~1MYWEBS~1bar1.binmwsoemon.exe
    C:WINDOWS.0RTHDCPL.EXE
    C:WINDOWS.0system32hkcmd.exe
    C:WINDOWS.0system32igfxpers.exe
    C:WINDOWS.0sm56hlpr.exe
    C:Program FilesCommon FilesAheadLibNMBgMonitor.exe
    C:Program FilesCommon FilesAheadLibNMIndexStoreSvr.exe
    C:WINDOWS.0system32setup2.exe
    C:Program FilesHPDigital ImagingbinhpqSTE08.exe
    C:WINDOWS.0explorer.exe
    F:все моеWiniBlueSoftWiniBlueSoft.exe
    F:все моеmagent.exe
    C:Program FilesOperaOpera.exe
    F:RSIT.exe
    C:Program Filestrend microМарина.exe

    R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.mail.ru
    R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
    R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.qip.ru
    R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.daemon-search.com/startpage
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru/ie
    R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = Root: HKCU; Subkey: SoftwareMicrosoftInternet ExplorerSearchUrl; ValueType: string; ValueName: ‘; ValueData: ‘; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
    R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,First Home Page = http://www.mail.ru/cnt/4968
    R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Windows Internet Explorer предоставлен: Mail.Ru
    R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
    R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — F:все моеMradllnewmrasearch.dll
    R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
    R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
    R3 — URLSearchHook: (no name) — {00A6FAF6-072E-44cf-8957-5838F569A31D} — C:Program FilesMyWebSearchSrchAstt1.binMWSSRCAS.DLL
    R3 — URLSearchHook: (no name) — — (no file)
    R3 — URLSearchHook: QIPBHO Class — {95289393-33EA-4F8D-B952-483415B9C955} — C:Documents and SettingsМаринаApplication DataMicrosoftInternet Explorerqipsearchbar.dll
    O2 — BHO: MyWebSearch Search Assistant BHO — {00A6FAF1-072E-44cf-8957-5838F569A31D} — C:Program FilesMyWebSearchSrchAstt1.binMWSSRCAS.DLL
    O2 — BHO: XTTBPos00 — {055FD26D-3A88-4e15-963D-DC8493744B1D} — C:PROGRA~1ICQTOO~1toolbaru.dll
    O2 — BHO: mwsBar BHO — {07B18EA1-A523-4961-B6BB-170DE4475CCA} — C:Program FilesMyWebSearchbar1.binMWSBAR.DLL (file missing)
    O2 — BHO: Winamp Toolbar BHO — {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} — C:Program FilesWinamp Toolbarwinamptb.dll
    O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
    O2 — BHO: Помощник по входу в Windows Live — {9030D464-4C02-4ABF-8ECC-5164760863C6} — C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
    O2 — BHO: TelefonitaRu Toolbar — {92dbdaed-69f5-4b84-bc09-15a599e8dbf9} — C:Program FilesTelefonitaRutbTel0.dll
    O2 — BHO: QIPBHO — {95289393-33EA-4F8D-B952-483415B9C955} — C:Documents and SettingsМаринаApplication DataMicrosoftInternet Explorerqipsearchbar.dll
    O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
    O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll
    O2 — BHO: Windows Live Toolbar Helper — {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} — C:Program FilesWindows Live Toolbarmsntb.dll (file missing)
    O2 — BHO: TGTSoft Explorer Toolbar Changer — {C333CF63-767F-4831-94AC-E683D962C63C} — C:Program FilesTGTSoftStyleXPTGT_BHO.dll
    O2 — BHO: Google Dictionary Compression sdch — {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
    O2 — BHO: (no name) — {FFFC57DB-1DE3-4303-B24D-CEE6DCDD3D86} — C:PROGRA~1MYCENT~1InfoBarMYCENT~1.DLL (file missing)
    O3 — Toolbar: PROMT — {FF284F5C-7CF9-4682-8701-D467C1DBB99F} — C:Program FilesPRMT6PRMTIEprmtie.dll
    O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
    O3 — Toolbar: My Web Search — {07B18EA9-A523-4961-B6BB-170DE4475CCA} — C:Program FilesMyWebSearchbar1.binMWSBAR.DLL (file missing)
    O3 — Toolbar: Winamp Toolbar — {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} — C:Program FilesWinamp Toolbarwinamptb.dll
    O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
    O3 — Toolbar: Windows Live Toolbar — {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} — C:Program FilesWindows Live Toolbarmsntb.dll (file missing)
    O3 — Toolbar: TelefonitaRu Toolbar — {92dbdaed-69f5-4b84-bc09-15a599e8dbf9} — C:Program FilesTelefonitaRutbTel0.dll
    O3 — Toolbar: &Save Flash — {4064EA35-578D-4073-A834-C96D82CBCF40} — F:все моеSave FlashSaveFlash.dll
    O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
    O4 — HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
    O4 — HKLM..Run: [ISUSPM Startup] C:PROGRA~1COMMON~1INSTAL~1UPDATE~1isuspm.exe -startup
    O4 — HKLM..Run: [ISUSScheduler] «C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe» -start
    O4 — HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe
    O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
    O4 — HKLM..Run: [nod32kui] «C:Program FilesEsetnod32kui.exe» /WAITSERVICE
    O4 — HKLM..Run: [USB Storage Toolbox] C:Program FilesUSB Disk Win98 DriverRes.EXE
    O4 — HKLM..Run: [System] C:WINDOWS.0system32kernelwind32.exe
    O4 — HKLM..Run: [MyWebSearch Email Plugin] C:PROGRA~1MYWEBS~1bar1.binmwsoemon.exe
    O4 — HKLM..Run: [MAgent] F:все моеMAgent.exe -LM
    O4 — HKLM..Run: [UnlockerAssistant] «C:Program FilesUnlockerUnlockerAssistant.exe»
    O4 — HKLM..Run: [C:WINDOWS.0system32kdeqx.exe] C:WINDOWS.0system32kdeqx.exe
    O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
    O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
    O4 — HKLM..Run: [igfxtray] C:WINDOWS.0system32igfxtray.exe
    O4 — HKLM..Run: [igfxhkcmd] C:WINDOWS.0system32hkcmd.exe
    O4 — HKLM..Run: [igfxpers] C:WINDOWS.0system32igfxpers.exe
    O4 — HKLM..Run: [SMSERIAL] sm56hlpr.exe
    O4 — HKLM..Run: [LogonStudio] «E:µTorrent 1.4 Build 420LogonStudiologonstudio.exe» /RANDOM
    O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeQTTask.exe» -atboottime
    O4 — HKLM..Run: [iTunesHelper] «F:µTorrent 1.4 Build 420iTunesHelper.exe»
    O4 — HKLM..Run: [20978890] C:Documents and SettingsAll Users.WINDOWS.0Application Data2097889020978890.exe
    O4 — HKLM..Run: [21002812] C:Documents and SettingsAll Users.WINDOWS.0Application Data2100281221002812.exe
    O4 — HKLM..Run: [NevoDRM] «C:ИгрыNevoDRMNevoDRM.exe»
    O4 — HKLM..Run: [WiniBlueSoft] F:все моеWiniBlueSoftWiniBlueSoft.exe -min
    O4 — HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] «C:Program FilesCommon FilesAheadLibNMBgMonitor.exe»
    O4 — HKCU..Run: [WhenUSave] «C:Program FilesSaveSave.exe»
    O4 — HKCU..Run: [MyWebSearch Email Plugin] C:PROGRA~1MYWEBS~1bar1.binmwsoemon.exe
    O4 — HKCU..Run: [STYLEXP] C:Program FilesTGTSoftStyleXPStyleXP.exe -Hide
    O4 — HKCU..Run: [MsnMsgr] «C:Program FilesWindows LiveMessengerMsnMsgr.Exe» /background
    O4 — HKCU..Run: [Uniblue RegistryBooster 2] C:Program FilesUniblueRegistryBooster 2RegistryBooster.exe /S
    O4 — HKCU..Run: [CursorFX] «E:µTorrent 1.4 Build 420StardockCursorFXCursorFX.exe»
    O4 — HKCU..Run: [Save] C:Program FilesSaveSave.exe
    O4 — HKCU..Run: [DAEMON Tools Lite] «F:все моеDAEMON Tools Litedaemon.exe» -autorun
    O4 — HKCU..Run: [setup2.exe] C:WINDOWS.0system32setup2.exe
    O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWS.0system32CTFMON.EXE (User ‘LOCAL SERVICE’)
    O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWS.0system32CTFMON.EXE (User ‘NETWORK SERVICE’)
    O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWS.0system32CTFMON.EXE (User ‘SYSTEM’)
    O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWS.0system32CTFMON.EXE (User ‘Default user’)
    O4 — Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exe
    O8 — Extra context menu item: &Search — http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZRxdm707YYRU
    O8 — Extra context menu item: &Winamp Toolbar Search — C:Documents and SettingsAll Users.WINDOWS.0Application DataWinamp ToolbarieToolbarresourcesen-USlocalsearch.html
    O8 — Extra context menu item: &Windows Live Search — res://C:Program FilesWindows Live Toolbarmsntb.dll/search.htm
    O8 — Extra context menu item: Поиск@Mail.Ru — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/282
    O8 — Extra context menu item: Словари@Mail.Ru — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/283
    O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — F:все моеmagent.exe
    O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — F:все моеmagent.exe
    O9 — Extra button: (no name) — {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} — C:Program FilesPRMT6PRMTIEprmtie5.htm
    O9 — Extra ‘Tools’ menuitem: Перевести — {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} — C:Program FilesPRMT6PRMTIEprmtie5.htm
    O9 — Extra button: (no name) — {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} — C:Program FilesPRMT6PRMTIEoptions.htm
    O9 — Extra ‘Tools’ menuitem: Настройка параметров перевода — {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} — C:Program FilesPRMT6PRMTIEoptions.htm
    O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWS.0Network Diagnosticxpnetdiag.exe
    O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWS.0Network Diagnosticxpnetdiag.exe
    O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — E:µTorrent 1.4 Build 420ICQ6.5ICQ.exe (file missing)
    O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — E:µTorrent 1.4 Build 420ICQ6.5ICQ.exe (file missing)
    O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
    O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
    O10 — Unknown file in Winsock LSP: c:windows.0system32nwprovau.dll
    O16 — DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} — http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/PopularScreenSaversFWBInitialSetup1.0.0.15-3.cab
    O17 — HKLMSystemCCSServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSoftware..Telephony: DomainName = Ангел
    O17 — HKLMSystemCCSServicesTcpip..{6F9BEA58-A010-44F4-9B16-4FB9F9635DC4}: NameServer = 85.255.115.107,85.255.112.217
    O17 — HKLMSystemCCSServicesTcpip..{7C22AE41-9B98-4F3A-89B4-E87FFDCC08BB}: NameServer = 85.255.115.107,85.255.112.217
    O17 — HKLMSystemCS1ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS1ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS2ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS2ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS3ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS3ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS4ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS4ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS5ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS5ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS6ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS6ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS7ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS7ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS8ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS8ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS9ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS9ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS10ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS10ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS11ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS11ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS12ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS12ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS13ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS13ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS14ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS14ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS15ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS15ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS16ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS16ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS17ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS17ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS18ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS18ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS19ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS19ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS20ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS20ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS21ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS21ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS22ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS22ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS23ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS23ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS24ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS24ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS25ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS25ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS26ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS26ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS27ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS27ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS28ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS28ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS29ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS29ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS30ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS30ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS31ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS31ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS32ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS32ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS33ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS33ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS34ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS34ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS35ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS35ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS36ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS36ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS37ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS37ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS38ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS38ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS39ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS39ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS40ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS40ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS41ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS41ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS42ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS42ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS43ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS43ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS44ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS44ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS45ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS45ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS46ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS46ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS47ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS47ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS48ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS48ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS49ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS49ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS50ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS50ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS51ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS51ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS52ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS52ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS53ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS53ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS54ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS54ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS55ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS55ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS56ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS56ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCS57ServicesTcpipParameters: Domain = Ангел
    O17 — HKLMSystemCS57ServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O17 — HKLMSystemCCSServicesTcpipParameters: NameServer = 85.255.115.107 85.255.112.217
    O18 — Filter: x-sdch — {B1759355-3EEC-4C1E-B0F1-B719FE26E377} — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
    O23 — Service: Adobe LM Service — Adobe Systems — C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
    O23 — Service: Apple Mobile Device — Apple Inc. — C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
    O23 — Service: Bonjour Service — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
    O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWS.0system32services.exe
    O23 — Service: Google Updater Service (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
    O23 — Service: ICQ Service — Unknown owner — C:Program FilesICQ6ToolbarICQ Service.exe
    O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe
    O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWS.0system32imapi.exe
    O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
    O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWS.0system32mnmsrvc.exe
    O23 — Service: NBService — Nero AG — C:Program FilesNeroNero 7Nero BackItUpNBService.exe
    O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — C:Program FilesEsetnod32krn.exe
    O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWS.0system32services.exe
    O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWS.0system32sessmgr.exe
    O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWS.0System32SCardSvr.exe
    O23 — Service: stllssvr — MicroVision Development, Inc. — C:Program FilesCommon FilesSureThing Sharedstllssvr.exe
    O23 — Service: StyleXPService — Unknown owner — C:Program FilesTGTSoftStyleXPStyleXPService.exe
    O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWS.0system32smlogsvc.exe
    O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWS.0System32vssvc.exe
    O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWS.0system32wbemwmiapsrv.exe

    —
    End of file — 24557 bytes

    ======Scheduled tasks folder======

    C:WINDOWS.0tasksAppleSoftwareUpdate.job
    C:WINDOWS.0tasksNorton Security Scan.job
    C:WINDOWS.0tasksПроверка обновлений для Windows Live Toolbar.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{00A6FAF1-072E-44cf-8957-5838F569A31D}]
    MyWebSearch Search Assistant BHO — C:Program FilesMyWebSearchSrchAstt1.binMWSSRCAS.DLL [2008-02-20 57344]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{055FD26D-3A88-4e15-963D-DC8493744B1D}]
    XTTBPos00 Class — C:PROGRA~1ICQTOO~1toolbaru.dll [2008-03-09 824656]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{07B18EA1-A523-4961-B6BB-170DE4475CCA}]
    mwsBar BHO — C:Program FilesMyWebSearchbar1.binMWSBAR.DLL []

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
    Winamp Toolbar BHO — C:Program FilesWinamp Toolbarwinamptb.dll [2007-12-14 1185120]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
    MailRuBHO Class — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2009-05-01 680624]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Помощник по входу в Windows Live — C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll [2007-09-20 328752]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{92dbdaed-69f5-4b84-bc09-15a599e8dbf9}]
    TelefonitaRu Toolbar — C:Program FilesTelefonitaRutbTel0.dll [2009-03-15 1883672]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{95289393-33EA-4F8D-B952-483415B9C955}]
    QIPBHO Class — C:Documents and SettingsМаринаApplication DataMicrosoftInternet Explorerqipsearchbar.dll [2009-02-12 119808]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
    Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll [2009-05-03 259696]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll [2009-04-26 668656]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
    Windows Live Toolbar Helper — C:Program FilesWindows Live Toolbarmsntb.dll []

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C333CF63-767F-4831-94AC-E683D962C63C}]
    CoTGT_BHO Class — C:Program FilesTGTSoftStyleXPTGT_BHO.dll [2006-05-10 65536]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
    Google Dictionary Compression sdch — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll [2009-05-03 470512]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{FFFC57DB-1DE3-4303-B24D-CEE6DCDD3D86}]
    C:PROGRA~1MYCENT~1InfoBarMYCENT~1.DLL []

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
    {FF284F5C-7CF9-4682-8701-D467C1DBB99F} — PROMT — C:Program FilesPRMT6PRMTIEprmtie.dll [2007-07-19 454656]
    {09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2009-05-01 680624]
    {07B18EA9-A523-4961-B6BB-170DE4475CCA} — My Web Search — C:Program FilesMyWebSearchbar1.binMWSBAR.DLL []
    {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} — Winamp Toolbar — C:Program FilesWinamp Toolbarwinamptb.dll [2007-12-14 1185120]
    {855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2008-06-12 958712]
    {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} — Windows Live Toolbar — C:Program FilesWindows Live Toolbarmsntb.dll []
    {92dbdaed-69f5-4b84-bc09-15a599e8dbf9} — TelefonitaRu Toolbar — C:Program FilesTelefonitaRutbTel0.dll [2009-03-15 1883672]
    {4064EA35-578D-4073-A834-C96D82CBCF40} — &Save Flash — F:все моеSave FlashSaveFlash.dll [2009-01-19 1105920]
    {2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll [2009-05-03 259696]

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
    «SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2006-03-03 737369]
    «ISUSPM Startup»=C:PROGRA~1COMMON~1INSTAL~1UPDATE~1isuspm.exe [2005-02-17 221184]
    «ISUSScheduler»=C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe [2005-02-17 81920]
    «NeroFilterCheck»=C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]
    «HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2007-03-11 49152]
    «nod32kui»=C:Program FilesEsetnod32kui.exe [2008-07-04 949376]
    «USB Storage Toolbox»=C:Program FilesUSB Disk Win98 DriverRes.EXE [2005-09-14 65536]
    «System»=C:WINDOWS.0system32kernelwind32.exe []
    «MyWebSearch Email Plugin»=C:PROGRA~1MYWEBS~1bar1.binmwsoemon.exe [2008-02-20 28672]
    «MAgent»=F:все моеMAgent.exe [2009-04-09 6210744]
    «UnlockerAssistant»=C:Program FilesUnlockerUnlockerAssistant.exe []
    «C:WINDOWS.0system32kdeqx.exe»=C:WINDOWS.0system32kdeqx.exe []
    «RTHDCPL»=C:WINDOWS.0RTHDCPL.EXE [2006-05-18 16207872]
    «Alcmtr»=C:WINDOWS.0ALCMTR.EXE [2005-05-04 69632]
    «igfxtray»=C:WINDOWS.0system32igfxtray.exe [2006-03-23 94208]
    «igfxhkcmd»=C:WINDOWS.0system32hkcmd.exe [2006-03-23 77824]
    «igfxpers»=C:WINDOWS.0system32igfxpers.exe [2006-03-23 118784]
    «SMSERIAL»=C:WINDOWS.0sm56hlpr.exe [2006-01-20 544768]
    «LogonStudio»=E:µTorrent 1.4 Build 420LogonStudiologonstudio.exe /RANDOM []
    «QuickTime Task»=C:Program FilesQuickTimeQTTask.exe [2008-11-04 413696]
    «iTunesHelper»=F:µTorrent 1.4 Build 420iTunesHelper.exe []
    «20978890»=C:Documents and SettingsAll Users.WINDOWS.0Application Data2097889020978890.exe []
    «21002812»=C:Documents and SettingsAll Users.WINDOWS.0Application Data2100281221002812.exe [2009-04-07 511]
    «NevoDRM»=C:ИгрыNevoDRMNevoDRM.exe [2008-12-12 41984]
    «WiniBlueSoft»=F:все моеWiniBlueSoftWiniBlueSoft.exe [2009-04-23 2791936]

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
    «BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=C:Program FilesCommon FilesAheadLibNMBgMonitor.exe [2006-11-17 139264]
    «WhenUSave»=C:Program FilesSaveSave.exe [2006-08-25 803184]
    «MyWebSearch Email Plugin»=C:PROGRA~1MYWEBS~1bar1.binmwsoemon.exe [2008-02-20 28672]
    «STYLEXP»=C:Program FilesTGTSoftStyleXPStyleXP.exe -Hide []
    «MsnMsgr»=C:Program FilesWindows LiveMessengerMsnMsgr.Exe /background []
    «Uniblue RegistryBooster 2″=C:Program FilesUniblueRegistryBooster 2RegistryBooster.exe /S []
    «CursorFX»=E:µTorrent 1.4 Build 420StardockCursorFXCursorFX.exe []
    «Save»=C:Program FilesSaveSave.exe [2006-08-25 803184]
    «DAEMON Tools Lite»=F:все моеDAEMON Tools Litedaemon.exe [2009-04-23 691656]
    «setup2.exe»=C:WINDOWS.0system32setup2.exe [2009-05-08 1097216]

    C:Documents and SettingsAll Users.WINDOWS.0Главное менюПрограммыАвтозагрузка
    HP Digital Imaging Monitor.lnk — C:Program FilesHPDigital Imagingbinhpqtra08.exe

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
    C:WINDOWS.0system32igfxdev.dll [2006-03-23 139264]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
    WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWS.0system32WPDShServiceObj.dll [2006-10-18 133632]

    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon
    «system»=kdeqx.exe []

    [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworknm]

    [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworknm.sys]

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
    «DisableCMD»=0
    «DisableTaskMgr»=1

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
    «dontdisplaylastusername»=0
    «legalnoticecaption»=
    «legalnoticetext»=
    «shutdownwithoutlogon»=1
    «undockwithoutlogon»=1

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
    «NoDriveTypeAutoRun»=145
    «NoFolderOptions»=1
    «NoDriveAutoRun»=4294967295

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
    «%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
    «C:Program FilesNeroNero 7Nero MediaHomeNeroMediaHome.exe»=»C:Program FilesNeroNero 7Nero MediaHomeNeroMediaHome.exe:*:Enabled:Nero MediaHome (1)»
    «C:Program FilesNeroNero 7Nero MediaHomeNMMediaServer.exe»=»C:Program FilesNeroNero 7Nero MediaHomeNMMediaServer.exe:*:Enabled:Nero MediaHome (2)»
    «C:Program FilesCommon FilesAheadNero WebSetupX.exe»=»C:Program FilesCommon FilesAheadNero WebSetupX.exe:*:Enabled:Nero ProductSetup»
    «C:Program FilesHPDigital Imagingbinhpqtra08.exe»=»C:Program FilesHPDigital Imagingbinhpqtra08.exe:*:Enabled:hpqtra08.exe»
    «C:Program FilesHPDigital Imagingbinhpqste08.exe»=»C:Program FilesHPDigital Imagingbinhpqste08.exe:*:Enabled:hpqste08.exe»
    «C:Program FilesHPDigital Imagingbinhpofxm08.exe»=»C:Program FilesHPDigital Imagingbinhpofxm08.exe:*:Enabled:hpofxm08.exe»
    «C:Program FilesHPDigital Imagingbinhposfx08.exe»=»C:Program FilesHPDigital Imagingbinhposfx08.exe:*:Enabled:hposfx08.exe»
    «C:Program FilesHPDigital Imagingbinhposid01.exe»=»C:Program FilesHPDigital Imagingbinhposid01.exe:*:Enabled:hposid01.exe»
    «C:Program FilesHPDigital Imagingbinhpqscnvw.exe»=»C:Program FilesHPDigital Imagingbinhpqscnvw.exe:*:Enabled:hpqscnvw.exe»
    «C:Program FilesHPDigital Imagingbinhpqkygrp.exe»=»C:Program FilesHPDigital Imagingbinhpqkygrp.exe:*:Enabled:hpqkygrp.exe»
    «C:Program FilesHPDigital Imagingbinhpzwiz01.exe»=»C:Program FilesHPDigital Imagingbinhpzwiz01.exe:*:Enabled:hpzwiz01.exe»
    «C:Program FilesHPDigital Imagingbinhpoews01.exe»=»C:Program FilesHPDigital Imagingbinhpoews01.exe:*:Enabled:hpoews01.exe»
    «C:Program FilesHPDigital Imagingbinhpqnrs08.exe»=»C:Program FilesHPDigital Imagingbinhpqnrs08.exe:*:Enabled:hpqnrs08.exe»
    «C:Program FilesCroteamSerious SamBinDedicatedServer.exe»=»C:Program FilesCroteamSerious SamBinDedicatedServer.exe:*:Enabled:DedicatedServer»
    «C:Program FilesCroteamSerious SamBinSeriousSam.exe»=»C:Program FilesCroteamSerious SamBinSeriousSam.exe:*:Enabled:SeriousSam»
    «C:Program FilesKaspersky LabKaspersky Anti-Virus 6.0avp.exe»=»C:Program FilesKaspersky LabKaspersky Anti-Virus 6.0avp.exe:*:Enabled:Kaspersky Anti-Virus»
    «C:Documents and SettingsМаринаРабочий столµTorrent 1.4 Build 420utorrent-1.4.1-beta-build-420.exe»=»C:Documents and SettingsМаринаРабочий столµTorrent 1.4 Build 420utorrent-1.4.1-beta-build-420.exe:*:Enabled:µTorrent»
    «C:Documents and SettingsМаринаМои документыµTorrent 1.4 Build 420utorrent-1.4.1-beta-build-420.exe»=»C:Documents and SettingsМаринаМои документыµTorrent 1.4 Build 420utorrent-1.4.1-beta-build-420.exe:*:Enabled:µTorrent»
    «C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
    «C:Program FilesStrongDC++(Spark edition)StrongDC.exe»=»C:Program FilesStrongDC++(Spark edition)StrongDC.exe:*:Enabled:StrongDC++»
    «C:Program FilesNeroNero 7Nero HomeNeroHome.exe»=»C:Program FilesNeroNero 7Nero HomeNeroHome.exe:*:Enabled:Nero Home»
    «F:µTorrent 1.4 Build 420magent.exe»=»F:µTorrent 1.4 Build 420magent.exe:*:Enabled:Mail.Ru Агент»
    «C:Program FilesNeroNero 7Nero ShowTimeShowTime.exe»=»C:Program FilesNeroNero 7Nero ShowTimeShowTime.exe:*:Enabled:Nero ShowTime»
    «C:Program FilesOperaOpera.exe»=»C:Program FilesOperaOpera.exe:*:Enabled:Opera Internet Browser»
    «C:Program FilesICQ6ICQ.exe»=»C:Program FilesICQ6ICQ.exe:*:Enabled:ICQ6»
    «F:µTorrent 1.4 Build 420Half Life 2hl2.exe»=»F:µTorrent 1.4 Build 420Half Life 2hl2.exe:*:Enabled:hl2»
    «D:Здеся всякие програмкиutorrent_161.exe»=»D:Здеся всякие програмкиutorrent_161.exe:*:Enabled:µTorrent»
    «%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
    «C:Program FilesWindows LiveMessengermsnmsgr.exe»=»C:Program FilesWindows LiveMessengermsnmsgr.exe:*:Enabled:Windows Live Messenger»
    «C:Program FilesWindows LiveMessengerlivecall.exe»=»C:Program FilesWindows LiveMessengerlivecall.exe:*:Enabled:Windows Live Messenger (Phone)»
    «C:Program FilesuTorrent [tfile.ru]utorrent.exe»=»C:Program FilesuTorrent [tfile.ru]utorrent.exe:*:Enabled:µTorrent»
    «C:Program FilesPetabyte.RuStrongDc2StrongDC.exe»=»C:Program FilesPetabyte.RuStrongDc2StrongDC.exe:*:Enabled:StrongDC++»
    «C:WINDOWS.0system32dpvsetup.exe»=»C:WINDOWS.0system32dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test»
    «C:WINDOWS.0system32rundll32.exe»=»C:WINDOWS.0system32rundll32.exe:*:Enabled:Запуск библиотеки DLL как приложения»
    «F:Мои игрыНовая папкаGamesSacred Underworldgameserver.exe»=»F:Мои игрыНовая папкаGamesSacred Underworldgameserver.exe:*:Enabled:Sacred Gameserver»
    «F:Мои игрыSacred Underworldgameserver.exe»=»F:Мои игрыSacred Underworldgameserver.exe:*:Enabled:Sacred Gameserver»
    «F:Мои игрыSacred Underworldsacred.exe»=»F:Мои игрыSacred Underworldsacred.exe:*:Enabled:Sacred»
    «F:SACRED 2 — FALLEN ANGELsystems2gs.exe»=»F:SACRED 2 — FALLEN ANGELsystems2gs.exe:*:Enabled:Sacred 2 — Game Server»
    «C:Program FilesBonjourmDNSResponder.exe»=»C:Program FilesBonjourmDNSResponder.exe:*:Enabled:Bonjour»
    «F:µTorrent 1.4 Build 420iTunes.exe»=»F:µTorrent 1.4 Build 420iTunes.exe:*:Enabled:iTunes»
    «F:µTorrent 1.4 Build 420ICQ6.5ICQ.exe»=»F:µTorrent 1.4 Build 420ICQ6.5ICQ.exe:*:Enabled:ICQ6»
    «C:ICQ6.5ICQ.exe»=»C:ICQ6.5ICQ.exe:*:Enabled:ICQ6»
    «C:magent.exe»=»C:magent.exe:*:Enabled:Mail.Ru Агент»
    «E:µTorrent 1.4 Build 420magent.exe»=»E:µTorrent 1.4 Build 420magent.exe:*:Enabled:Mail.Ru Агент»
    «E:µTorrent 1.4 Build 420QIP Infiuminfium.exe»=»E:µTorrent 1.4 Build 420QIP Infiuminfium.exe:*:Enabled:QIP Infium»
    «E:µTorrent 1.4 Build 420ICQ6.5ICQ.exe»=»E:µTorrent 1.4 Build 420ICQ6.5ICQ.exe:*:Enabled:ICQ6»
    «F:µTorrent 1.4 Build 420QIP Infiuminfium.exe»=»F:µTorrent 1.4 Build 420QIP Infiuminfium.exe:*:Enabled:QIP Infium»
    «C:Program FilesStaffCopStaffCop.exe»=»C:Program FilesStaffCopStaffCop.exe:*:Enabled:StaffCop»
    «C:Program FilesWinamp RemotebinOrb.exe»=»C:Program FilesWinamp RemotebinOrb.exe:*:Enabled:Orb»
    «C:Program FilesWinamp RemotebinOrbTray.exe»=»C:Program FilesWinamp RemotebinOrbTray.exe:*:Enabled:OrbTray»
    «C:Program FilesWinamp RemotebinOrbStreamerClient.exe»=»C:Program FilesWinamp RemotebinOrbStreamerClient.exe:*:Enabled:Orb Stream Client»
    «F:все моеmagent.exe»=»F:все моеmagent.exe:*:Enabled:Mail.Ru Агент»

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
    «%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
    «%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
    «C:Program FilesWindows LiveMessengermsnmsgr.exe»=»C:Program FilesWindows LiveMessengermsnmsgr.exe:*:Enabled:Windows Live Messenger»
    «C:Program FilesWindows LiveMessengerlivecall.exe»=»C:Program FilesWindows LiveMessengerlivecall.exe:*:Enabled:Windows Live Messenger (Phone)»

    ======List of files/folders created in the last 1 months======

    2009-12-28 20:41:25 —-A—- C:WINDOWS.013a4zac95oor1304.dll
    2009-12-28 02:02:09 —-A—- C:WINDOWS.056257not-a-9izus60e.dll
    2009-12-23 10:03:51 —-A—- C:WINDOWS.020433ha5zto9l7a1.exe
    2009-12-19 21:03:25 —-A—- C:WINDOWS.071z9s5ea93106.exe
    2009-12-18 16:42:36 —-A—- C:WINDOWS.0system32509aspywar9584z.dll
    2009-12-18 04:36:45 —-A—- C:WINDOWS.01z673hacktoo52f79.exe
    2009-12-14 09:38:06 —-A—- C:WINDOWS.0system328898hackt5ol35z.exe
    2009-12-14 04:56:44 —-A—- C:WINDOWS.0system32z64s5yware409.exe
    2009-12-12 07:37:38 —-A—- C:WINDOWS.0system32489cz9ief1599.dll
    2009-11-28 03:57:45 —-A—- C:WINDOWS.039119hre5t25579z.dll
    2009-11-23 16:36:29 —-A—- C:WINDOWS.0system3255bc9zyware251.exe
    2009-11-23 16:10:06 —-A—- C:WINDOWS.0system3213909spazbo55c6.dll
    2009-11-23 00:19:47 —-A—- C:WINDOWS.0system32479cspzwar52655.dll
    2009-11-20 19:27:41 —-A—- C:WINDOWS.0system32f0fspywarz4569.dll
    2009-11-18 05:08:59 —-A—- C:WINDOWS.0system327af09i542z.dll
    2009-11-17 21:18:53 —-A—- C:WINDOWS.0system3219ac95z1893.exe
    2009-11-15 14:02:37 —-A—- C:WINDOWS.01253spamzo56c9.dll
    2009-11-14 11:31:50 —-A—- C:WINDOWS.0system3261ffz951397.exe
    2009-11-14 02:11:10 —-A—- C:WINDOWS.013b9back5oorz543.dll
    2009-11-13 19:49:26 —-A—- C:WINDOWS.0system3273z9virus2d5.dll
    2009-11-13 19:34:33 —-A—- C:WINDOWS.03b0c5za9se237.exe
    2009-11-11 02:34:27 —-A—- C:WINDOWS.0system324c1fdown95aderz278.dll
    2009-10-28 05:40:26 —-A—- C:WINDOWS.094991spamzot353.exe
    2009-10-28 03:01:51 —-A—- C:WINDOWS.0system323729stea5z996.dll
    2009-10-25 22:16:55 —-A—- C:WINDOWS.047fddownlzad9r3525.exe
    2009-10-22 11:20:14 —-A—- C:WINDOWS.0system3252e9hief131z.exe
    2009-10-21 08:25:28 —-A—- C:WINDOWS.0system3244a9spywar5164z.dll
    2009-10-15 10:18:14 —-A—- C:WINDOWS.04fdzspy5ar91903.dll
    2009-10-10 18:27:40 —-A—- C:WINDOWS.0system32zf9a9ir9025.exe
    2009-10-09 04:39:51 —-A—- C:WINDOWS.0system3220576notza-viru9c.dll
    2009-10-08 01:41:15 —-A—- C:WINDOWS.0system32z95fvi52761.exe
    2009-10-04 16:28:58 —-A—- C:WINDOWS.0system329z829i5us1fe.exe
    2009-10-03 08:32:16 —-A—- C:WINDOWS.0system324195tz5eat23939.exe
    2009-09-26 23:25:57 —-A—- C:WINDOWS.0system322z079spambo576c9.exe
    2009-09-26 18:50:18 —-A—- C:WINDOWS.04ea4thr95t7z51.exe
    2009-09-22 02:49:41 —-A—- C:WINDOWS.0452f5pars9z581.dll
    2009-09-20 02:32:02 —-A—- C:WINDOWS.035d7thi5f2079z.exe
    2009-09-13 23:23:21 —-A—- C:WINDOWS.0system3264cbst5a9234z.exe
    2009-09-09 22:59:08 —-A—- C:WINDOWS.0371czhr5at163689.exe
    2009-09-02 17:38:53 —-A—- C:WINDOWS.06950thz9at26422.exe
    2009-09-02 02:38:57 —-A—- C:WINDOWS.0system32399bzpar5e2221.exe
    2009-08-28 08:58:31 —-A—- C:WINDOWS.0system323191backdo5r2269z.dll
    2009-08-21 13:18:29 —-A—- C:WINDOWS.0system325982z5ambot777.dll
    2009-08-19 22:59:43 —-A—- C:WINDOWS.0system324bb1sp5rse195z.exe
    2009-08-15 17:47:42 —-A—- C:WINDOWS.0system321z420vir9s1e95.dll
    2009-08-10 14:42:32 —-A—- C:WINDOWS.0system3215458nz9-a-vi5us752.exe
    2009-08-04 16:35:35 —-A—- C:WINDOWS.0system325604not-9-zirus3b5.dll
    2009-07-28 11:09:31 —-A—- C:WINDOWS.04zbeback5oor31419.dll
    2009-07-26 10:55:14 —-A—- C:WINDOWS.0system3232593hackzool1e65.exe
    2009-07-25 13:20:36 —-A—- C:WINDOWS.0499a5zief9.exe
    2009-07-25 00:46:37 —-A—- C:WINDOWS.021956troz35d.exe
    2009-07-19 02:38:40 —-A—- C:WINDOWS.0system326c5thiz92572.dll
    2009-07-14 19:18:38 —-A—- C:WINDOWS.0system325c5fbazkdoo92293.exe
    2009-07-12 18:14:57 —-A—- C:WINDOWS.09z195ddware2555.exe
    2009-07-12 15:11:22 —-A—- C:WINDOWS.0system323ee3z5r2959.exe
    2009-07-12 09:50:07 —-A—- C:WINDOWS.02573s9amb5t46z.dll
    2009-07-08 02:03:58 —-A—- C:WINDOWS.02z651sp9mbot422.exe
    2009-07-07 17:17:16 —-A—- C:WINDOWS.021425n95-a-virus72z.dll
    2009-07-06 03:18:32 —-A—- C:WINDOWS.04159tzreat11476.exe
    2009-07-05 18:07:35 —-A—- C:WINDOWS.020467w5zm869.dll
    2009-07-03 06:26:37 —-A—- C:WINDOWS.01z96spy4d55.exe
    2009-06-29 04:45:29 —-A—- C:WINDOWS.09593wozm5d4.exe
    2009-06-28 15:13:23 —-A—- C:WINDOWS.026950v9zus25e.exe
    2009-06-27 18:38:21 —-A—- C:WINDOWS.0system3211139not-a-5izus3589.dll
    2009-06-24 08:10:33 —-A—- C:WINDOWS.0system3226997spzmbo975a.dll
    2009-06-16 02:22:14 —-A—- C:WINDOWS.025546zot9a-virus587.exe
    2009-06-15 12:51:26 —-A—- C:WINDOWS.0system3290d9back5oorz263.exe
    2009-06-12 12:39:56 —-A—- C:WINDOWS.090532wozm14d5.dll
    2009-06-12 03:23:07 —-A—- C:WINDOWS.03580spyw9re299z.exe
    2009-06-10 17:06:59 —-A—- C:WINDOWS.0system3225z9vi910355.exe
    2009-06-09 12:23:43 —-A—- C:WINDOWS.0system3230338viru57cz9.dll
    2009-05-24 08:36:03 —-A—- C:WINDOWS.07960sp5ware5z6.exe
    2009-05-24 01:02:53 —-A—- C:WINDOWS.0412z5hief12209.dll
    2009-05-23 13:54:29 —-A—- C:WINDOWS.025359spa9bzt5a5.dll
    2009-05-23 01:57:32 —-A—- C:WINDOWS.03722spazbot4539.dll
    2009-05-19 21:44:38 —-A—- C:WINDOWS.0z540vir398.dll
    2009-05-19 11:39:32 —-A—- C:WINDOWS.031587spambo51ez9.dll
    2009-05-18 14:35:01 —-A—- C:WINDOWS.010009trojz52.exe
    2009-05-17 00:40:18 —-A—- C:WINDOWS.097340spamb5tzee.exe
    2009-05-17 00:27:59 —-A—- C:WINDOWS.028901vz5us5e9.dll
    2009-05-16 20:24:17 —-A—- C:WINDOWS.0system32439zw5rm3a9.exe
    2009-05-10 22:14:19 —-D—- C:Program Filestrend micro
    2009-05-10 22:14:16 —-D—- C:rsit
    2009-05-10 20:32:34 —-A—- C:WINDOWS.021618t9oj4z35.dll
    2009-05-08 23:52:58 —-A—- C:WINDOWS.0z2599ir1793.dll
    2009-05-08 23:52:58 —-A—- C:WINDOWS.0system323c09azdw5re9943.exe
    2009-05-08 23:52:58 —-A—- C:WINDOWS.0system3226995not-a-5izus1b.dll
    2009-05-08 23:52:58 —-A—- C:WINDOWS.095588spambotz84.dll
    2009-05-08 23:52:58 —-A—- C:WINDOWS.06524sp9wz5e3216.dll
    2009-05-08 23:52:58 —-A—- C:WINDOWS.03d44spywa95z744.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system326693virus5zb.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system326645downloade5197z.exe
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system326532do5nloade92811z.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system326532backdoo9277z.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system325ez6addware23559.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system325e8z9ir374.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system325809backdoorz600.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system32570fthrz9t289955.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system324d1295iez2306.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system323956backdoor14z6.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system3232939orz55.exe
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system3229456spam59tz8.exe
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system3225941wzrm48d.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system3225037troj5z9.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0system3223235roj9zb.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.06de9sp9rs57z8.exe
    2009-05-08 23:52:57 —-A—- C:WINDOWS.0585not-a-vir9s61z.exe
    2009-05-08 23:52:57 —-A—- C:WINDOWS.056z5spy95re3106.dll
    2009-05-08 23:52:57 —-A—- C:WINDOWS.02999not-a-vir5s77z.exe
    2009-05-08 23:52:57 —-A—- C:WINDOWS.026f2s9ywarez659.exe
    2009-05-08 23:52:57 —-A—- C:WINDOWS.02266down5oadez2029.exe
    2009-05-08 23:52:57 —-A—- C:WINDOWS.021cathrza5142529.exe
    2009-05-08 23:52:56 —-A—- C:WINDOWS.0z280sp95a1.dll
    2009-05-08 23:52:56 —-A—- C:WINDOWS.0system32579fspazse1267.dll
    2009-05-08 23:52:56 —-A—- C:WINDOWS.0system32505csteal2z89.exe
    2009-05-08 23:52:56 —-A—- C:WINDOWS.0system3247f5zownloader595.exe
    2009-05-08 23:52:56 —-A—- C:WINDOWS.0system32241945orm19z.exe
    2009-05-08 23:52:56 —-A—- C:WINDOWS.095555worm37z.dll
    2009-05-08 23:52:56 —-A—- C:WINDOWS.09339szywar51081.dll
    2009-05-08 23:52:56 —-A—- C:WINDOWS.058d9addware24z6.exe
    2009-05-08 23:52:56 —-A—- C:WINDOWS.0558spa9se1z7.exe
    2009-05-08 23:52:56 —-A—- C:WINDOWS.045cesze9l3058.exe
    2009-05-08 23:52:56 —-A—- C:WINDOWS.02z289hac9toole5.dll
    2009-05-08 23:52:56 —-A—- C:WINDOWS.020619wor91z95.exe
    2009-05-08 23:52:56 —-A—- C:WINDOWS.01z49spy55d.dll
    2009-05-08 23:52:56 —-A—- C:WINDOWS.01ba0backdoo59218z.exe
    2009-05-08 23:52:56 —-A—- C:WINDOWS.015z63virus933.exe
    2009-05-08 23:52:56 —-A—- C:WINDOWS.015305wo9z222.dll
    2009-05-08 23:52:55 —-A—- C:WINDOWS.0zd095ief2879.dll
    2009-05-08 23:52:55 —-A—- C:WINDOWS.0system326234thie9952z.exe
    2009-05-08 23:52:55 —-A—- C:WINDOWS.0system325679virz2099.exe
    2009-05-08 23:52:55 —-A—- C:WINDOWS.0system324d92thzef5033.dll
    2009-05-08 23:52:55 —-A—- C:WINDOWS.0770zdo5nloader9323.dll
    2009-05-08 23:52:55 —-A—- C:WINDOWS.0538cdowzload9r1689.dll
    2009-05-08 23:52:54 —-A—- C:WINDOWS.0202zhac5tool48b9.exe
    2009-05-08 23:52:50 —-A—- C:WINDOWS.0system32setup2.exe
    2009-05-08 23:32:51 —-A—- C:WINDOWS.0system3224416s9y25fz.exe
    2009-05-05 19:01:39 —-D—- C:Documents and SettingsAll Users.WINDOWS.0Application DataBlizzard
    2009-05-04 11:20:54 —-A—- C:WINDOWS.0system32159625orm67bz.exe
    2009-05-04 00:55:46 —-A—- C:WINDOWS.0system324c4c5py9are907z.dll
    2009-05-01 14:25:09 —-HDC—- C:WINDOWS.0ie8
    2009-04-24 16:26:27 —-A—- C:WINDOWS.0system32915955oz-a-virus277.exe
    2009-04-24 09:24:17 —-A—- C:WINDOWS.02866zspa5bot997.dll
    2009-04-18 11:11:31 —-A—- C:WINDOWS.0system327193thie91525z.exe
    2009-04-15 07:08:57 —-A—- C:WINDOWS.0system329648troz651.dll
    2009-04-15 05:34:06 —-A—- C:WINDOWS.027z85hackto9l21.exe
    2009-04-14 16:29:13 —-A—- C:WINDOWS.09c91ad5wzre2025.exe

    ======List of files/folders modified in the last 1 months======

    2009-05-10 22:43:32 —-D—- C:WINDOWS.0Temp
    2009-05-10 22:15:26 —-D—- C:WINDOWS.0Prefetch
    2009-05-10 22:14:19 —-RHD—- C:Program Files
    2009-05-10 22:05:02 —-A—- C:WINDOWS.0NeroDigital.ini
    2009-05-10 21:56:19 —-D—- C:WINDOWS.0Lhsp
    2009-05-10 20:54:50 —-A—- C:WINDOWS.0SchedLgU.Txt
    2009-05-10 20:53:13 —-D—- C:Documents and SettingsМаринаApplication DatauTorrent
    2009-05-10 18:53:16 —-D—- C:WINDOWS.0system32
    2009-05-10 18:00:04 —-D—- C:Program FilesNorton Security Scan
    2009-05-10 16:28:11 —-D—- C:Program FilesSave
    2009-05-10 00:16:51 —-D—- C:Program FilesApollo
    2009-05-08 23:58:58 —-D—- C:Program FilesCommon FilesYandex
    2009-05-08 23:52:58 —-D—- C:WINDOWS.0
    2009-05-08 23:38:51 —-SHD—- C:WINDOWS.0Installer
    2009-05-08 23:34:23 —-D—- C:Temp
    2009-05-07 16:48:16 —-A—- C:WINDOWS.0PhotoSnapViewer.INI
    2009-05-05 19:02:54 —-D—- C:Documents and SettingsМаринаApplication DataDAEMON Tools Lite
    2009-05-05 19:02:38 —-HD—- C:WINDOWS.0inf
    2009-05-05 19:02:36 —-D—- C:WINDOWS.0system32CatRoot2
    2009-05-01 19:38:23 —-D—- C:WINDOWS.0system32ru-ru
    2009-05-01 19:38:22 —-RSHDC—- C:WINDOWS.0system32dllcache
    2009-05-01 19:38:22 —-D—- C:WINDOWS.0Media
    2009-05-01 19:38:22 —-D—- C:WINDOWS.0Help
    2009-05-01 19:38:22 —-D—- C:Program FilesInternet Explorer
    2009-05-01 14:27:12 —-HD—- C:WINDOWS.0msdownld.tmp
    2009-05-01 14:09:47 —-D—- C:WINDOWS.0Minidump
    2009-04-23 23:38:51 —-HD—- C:Config.Msi
    2009-04-23 23:38:50 —-D—- C:Program FilesMicrosoft Silverlight
    2009-04-23 15:26:54 —-A—- C:WINDOWS.0DUMPb611.tmp
    2009-04-21 20:11:19 —-A—- C:WINDOWS.0DUMPb5e2.tmp
    2009-04-14 16:40:40 —-A—- C:WINDOWS.0DUMPb66f.tmp
    2009-04-12 08:00:58 —-D—- C:Documents and SettingsAll Users.WINDOWS.0Application Data20978890

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 intelppm;Драйвер Intel процессора; C:WINDOWS.0system32DRIVERSintelppm.sys [2004-08-28 40448]
    R1 nod32drv;nod32drv; C:WINDOWS.0system32driversnod32drv.sys [2008-07-04 15424]
    R1 prodrv06;StarForce Protection Environment Driver v6; C:WINDOWS.0System32driversprodrv06.sys [2004-01-27 52224]
    R1 Tcpip6;Драйвер протокола IPv6 (Microsoft); C:WINDOWS.0system32DRIVERStcpip6.sys [2006-08-16 225664]
    R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWS.0System32driversws2ifsl.sys [2004-08-18 12032]
    R2 AMON;AMON; C:WINDOWS.0system32driversamon.sys [2008-07-04 512096]
    R2 atksgt;atksgt; C:WINDOWS.0system32DRIVERSatksgt.sys [2008-03-11 271360]
    R2 irda;ИК-протокол IrDA; C:WINDOWS.0system32DRIVERSirda.sys [2004-08-04 87424]
    R2 lirsgt;lirsgt; C:WINDOWS.0system32DRIVERSlirsgt.sys [2008-03-11 18048]
    R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS-совместимый транспортный протокол; C:WINDOWS.0system32DRIVERSnwlnkipx.sys [2004-08-18 88448]
    R2 NwlnkNb;NWLink NetBIOS; C:WINDOWS.0system32DRIVERSnwlnknb.sys [2004-08-18 63232]
    R2 NwlnkSpx;Протокол NWLink SPX/SPXII; C:WINDOWS.0system32DRIVERSnwlnkspx.sys [2004-08-18 55936]
    R3 CmBatt;Драйвер AC-адаптера блока питания (Майкрософт); C:WINDOWS.0system32DRIVERSCmBatt.sys [2004-08-04 14080]
    R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:WINDOWS.0System32DriversGEARAspiWDM.sys [2008-04-17 15464]
    R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWS.0system32DRIVERSHDAudBus.sys [2005-01-07 138752]
    R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWS.0system32DRIVERShidusb.sys [2004-08-18 9600]
    R3 ialm;ialm; C:WINDOWS.0system32DRIVERSialmnt5.sys [2006-03-23 1166972]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWS.0system32driversRtkHDAud.sys [2006-05-16 4275712]
    R3 mouhid;Драйвер мыши HID; C:WINDOWS.0system32DRIVERSmouhid.sys [2004-08-18 12160]
    R3 Rasirda;Минипорт WAN (IrDA); C:WINDOWS.0system32DRIVERSrasirda.sys [2001-08-18 19584]
    R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:WINDOWS.0system32DRIVERSRtnicxp.sys [2006-01-19 80512]
    R3 smserial;smserial; C:WINDOWS.0system32DRIVERSsmserial.sys [2006-01-20 862340]
    R3 SynTP;Synaptics TouchPad Driver; C:WINDOWS.0system32DRIVERSSynTP.sys [2006-03-03 191168]
    R3 tunmp;Драйвер адаптера минипорта Microsoft Tun; C:WINDOWS.0system32DRIVERStunmp.sys [2004-08-18 12416]
    R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWS.0system32DRIVERSusbehci.sys [2004-08-04 26624]
    R3 usbhub;USB2 концентратор; C:WINDOWS.0system32DRIVERSusbhub.sys [2004-08-04 57600]
    R3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWS.0system32DRIVERSUSBSTOR.SYS [2004-08-04 26496]
    R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWS.0system32DRIVERSusbuhci.sys [2004-08-04 20480]
    R3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:WINDOWS.0system32DRIVERSw39n51.sys [2006-04-04 1429632]
    S1 StyleXPHelper;StyleXPHelper; ??C:Program FilesTGTSoftStyleXPStyleXPHelper.exe []
    S3 {FAA5C1BB-9412-4043-901A-F14040632269};{FAA5C1BB-9412-4043-901A-F14040632269}; ??C:WINDOWS.0system32driversscfsp.sys []
    S3 adndxwrk;adndxwrk; C:WINDOWS.0system32driversadndxwrk.sys []
    S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWS.0system32DRIVERSHPZid412.sys [2007-03-08 49920]
    S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWS.0system32DRIVERSHPZipr12.sys [2007-03-08 16496]
    S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWS.0system32DRIVERSHPZius12.sys [2007-03-08 21568]
    S3 MSIRCOMM;Microsoft IR Communications Driver; C:WINDOWS.0system32DRIVERSMSIRCOMM.sys [2004-08-04 22016]
    S3 nm;Драйвер сетевого монитора; C:WINDOWS.0system32DRIVERSNMnt.sys [2004-08-18 40320]
    S3 pcouffin;VSO Software pcouffin; C:WINDOWS.0System32Driverspcouffin.sys [2001-07-03 47360]
    S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet адаптер, драйвер для NT; C:WINDOWS.0system32DRIVERSRTL8139.SYS [2004-08-04 20992]
    S3 STIrUsb;STIrUsb.sys USB-IrDA Adapter; C:WINDOWS.0system32DRIVERSirstusb.sys [2001-09-24 30088]
    S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWS.0system32DRIVERSusbccgp.sys [2004-08-03 31616]
    S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWS.0system32DRIVERSusbprint.sys [2004-08-03 25856]
    S3 usbscan;Драйвер USB-сканера; C:WINDOWS.0system32DRIVERSusbscan.sys [2004-08-03 15104]
    S3 usbser;Motorola A1000 USB Modem Driver; C:WINDOWS.0system32DRIVERSusbser.sys [2004-08-03 25600]
    S3 usbsermpt;Motorola USB Modem Driver for MPT; C:WINDOWS.0system32DRIVERSusbsermpt.sys [2008-04-16 22768]


    EOF


    11 мая, 2009 в 3:27 пп #23841
    Admin
    Keymaster
    • Темы:40
    • Сообщений:5676
    • ☆☆☆☆☆

    Здравствуйте, добро пожаловать на Spyware-ru форум.

    Скачайте программу Avenger кликнув по этой ссылке и распакуйте её на Рабочий стол.
    Запустите Avenger, при это убедитесь что стоит галочка в пункте «Scan for rootkits» и нет галочки в пункте «Automatically disable any rootkits found». Уберите или поставьте галочки в случае необходимости. Кликните Execute. Появится запрос о подтверждении ваших действий, нажмите Yes.
    Avenger запуститься. В процессе работы возможны несколько перезагрузок компьютера.
    По-окончании работы будет показан лог, пожалуйста вставьте его в ваш ответ. И приложите свежий RSIT лог.

  • Автор
    Сообщения
Просмотр 2 сообщений - с 1 по 2 (из 2 всего)
  • Для ответа в этой теме необходимо авторизоваться.
Войти

Добро пожаловать

На нашем сайте размещены инструкции и программы, которые помогут вам абсолютно бесплатно и самостоятельно удалить навязчивую рекламу, вирусы и трояны.

Поиск

Последние темы

  • Странность в Malwebytes опубликовано Artem225
    5 years, 10 months назад
  • SUSPICIOUS.FakedMBR.1 что делать, помогите!!! опубликовано White
    5 years, 11 months назад
  • Помогите пожалуйста вирус замучил. опубликовано dimazons1233211
    6 years, 1 month назад
  • Замучила реклама опубликовано Данила Беспятов
    6 years, 1 month назад
  • Замучила реклама опубликовано Марк
    5 years, 11 months назад
  • Вирус S1.video.ru.net опубликовано ludovik
    6 years, 4 months назад
  • Чертов Safe Finder!!!! опубликовано kosta savo
    6 years, 1 month назад
  • ESET блокирует неизвестный сайт , вход на который не осуществлялся. опубликовано trollhamaren
    6 years, 5 months назад

СПАЙВАРЕ РУ

  • О Спайваре Ру
  • Контакты
  • Реклама на сайте
  • Политика конфиденциальности
  • Правила использования

Нужна помощь?

Задайте свой вопрос прямо сейчас кликнув по следующей ссылке Задать вопрос.

Или обратитесь на наш форум, где команда Spyware-ru поможет вам. Узнайте, как попросить о помощи здесь.

Ссылки

  • Инструкции
  • Скачать программы
  • Помощь в удалении вирусов
  • Как вылечить компьютер
Copyright © 2008 - 2024 Spyware-RU.com (en)