PC DEFENDER

This topic has 44 ответа, 2 участника, and was last updated 14 years, 9 months назад by Helper.

Просмотр 15 сообщений - с 1 по 15 (из 45 всего)

1 2 3 →

Автор

Сообщения
6 августа, 2010 в 11:21 дп #18529
Аноним
Гость
- Темы:532
- Сообщений:1553
доброго времени суток. такая проблемка.
устанавливала НОД, перезагрузила систему, и вылезла эта долбаная программа. сразу перестала работать мозила, не запускается реестр. из ДЗ удалить ее не могу, появляется опять. нашла папку с этой программой. из 5 файлов удалилось только 2. теперь ничего не помогает! 😥
что мне делать?
6 августа, 2010 в 11:25 дп #30557
Helper
Participant
- Темы:19
- Сообщений:712
Здравствуйте.Подготовьте логи:
viewtopic.php?f=3&t=2
6 августа, 2010 в 12:19 пп #30559
Аноним
Гость
- Темы:532
- Сообщений:1553
log.txt

Logfile of random’s system information tool 1.08 (written by random/random)
Run by Админ at 2010-08-06 16:02:58
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 14 GB (14%) free of 105 GB
Total RAM: 2037 MB (35% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:06:27, on 06.08.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Windowssystem32taskeng.exe
C:Windowssystem32conime.exe
C:Program FilesWindows DefenderMSASCui.exe
C:Program FilesSonyWireless Switch Setting UtilitySwitcher.exe
C:WindowsSystem32hkcmd.exe
C:WindowsSystem32igfxpers.exe
C:Program FilesApointApoint.exe
C:Program FilessonyISB UtilityISBMgr.exe
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesApointApMsgFwd.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:WindowsSystem32mobsync.exe
C:Program FilesSweetIMMessengerSweetIM.exe
C:Program FilesApointApvfb.exe
C:Program FilesApointApntex.exe
C:Program FilesWindows Media Playerwmplayer.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesESETESET NOD32 Antivirusegui.exe
C:Windowsehomeehtray.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Windowssystem32wbemunsecapp.exe
C:Windowsehomeehmsas.exe
C:Program FilesICQ7.2ICQ.exe
C:Program FilesFlockflockflock.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesMozilla Firefoxplugin-container.exe
C:Program FilesMalwarebytes’ Anti-Malwarembam.exe
C:UsersАдминDesktopRSIT.exe
C:Program Filestrend microАдмин.exe
C:Windowssystem32SearchFilterHost.exe

R1 — HKCUSoftwareMicrosoftInternet Explorer,SearchURL = http://yandex.ru/yandsearch?clid=123046&text=%s
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.yandex.ru/?clid=123048
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=123048
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ru.msn.com/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://home.sweetim.com
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru/ie
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = Root: HKCU; Subkey: SoftwareMicrosoftInternet ExplorerSearchUrl; ValueType: string; ValueName: ‘; ValueData: ‘; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = 80:80
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — c:program filesmail.rusputnikMailRuSputnik.dll
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
O1 — Hosts: ::1 localhost
O2 — BHO: HP Print Clips — {053F9267-DC04-4294-A72C-58F732D338C0} — C:Program FilesHPSmart Web Printinghpswp_framework.dll
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: AskBar BHO — {201f27d4-3704-41d6-89c1-aa35e39143ed} — C:Program FilesAskBarDisbarbinaskBar.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — C:PROGRA~1SkypePhoneIEPluginSKYPEI~1.DLL
O2 — BHO: RealPlayer Download and Record Plugin for Internet Explorer — {3049C3E9-B461-4BC5-8870-4C09146192CA} — C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0binssv.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — c:program filesmail.rusputnikMailRuSputnik.dll
O2 — BHO: Update Timer — {963B125B-8B21-49A2-A3A8-E37092276531} — C:Program FilesGet-Styles 2.0utilsupdatebho.dll
O2 — BHO: script helper for ie — {9B5FB65F-631E-4564-ABF2-AD71845B28E0} — C:Program FilesGet-Styles 2.0iejsloader.dll
O2 — BHO: QIPBHO — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:UsersАдминAppDataRoamingMicrosoftInternet Explorerqipsearchbar.dll
O2 — BHO: SWEETIE — {EEE6C35C-6118-11DC-9C72-001320C79847} — C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — c:program filesmail.rusputnikMailRuSputnik.dll
O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O3 — Toolbar: Ask Toolbar — {3041d03e-fd4b-44e0-b742-2d9b88305f98} — C:Program FilesAskBarDisbarbinaskBar.dll
O3 — Toolbar: SweetIM Toolbar for Internet Explorer — {EEE6C35B-6118-11DC-9C72-001320C79847} — C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll
O3 — Toolbar: Get-Styles toolbar v3 — {5BCDC9E9-A980-4B53-B2E8-60CFF484DA61} — C:Program FilesGet-Styles 2.0ietoolbar.dll
O4 — HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 — HKLM..Run: [IgfxTray] C:Windowssystem32igfxtray.exe
O4 — HKLM..Run: [HotKeysCmds] C:Windowssystem32hkcmd.exe
O4 — HKLM..Run: [Persistence] C:Windowssystem32igfxpers.exe
O4 — HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 — HKLM..Run: [Apoint] C:Program FilesApointApoint.exe
O4 — HKLM..Run: [ISBMgr.exe] «C:Program FilesSonyISB UtilityISBMgr.exe»
O4 — HKLM..Run: [GrooveMonitor] «C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe»
O4 — HKLM..Run: [Google Desktop Search] «C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe» /startup
O4 — HKLM..Run: [Adobe Photo Downloader] «C:Program FilesAdobePhotoshop Album Starter Edition3.2Appsapdproxy.exe»
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [TkBellExe] «C:Program FilesCommon FilesRealUpdate_OBrealsched.exe» -osboot
O4 — HKLM..Run: [AppleSyncNotifier] C:Program FilesCommon FilesAppleMobile Device SupportbinAppleSyncNotifier.exe
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [SweetIM] C:Program FilesSweetIMMessengerSweetIM.exe
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [AdobeAAMUpdater-1.0] «C:Program FilesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe»
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeQTTask.exe» -atboottime
O4 — HKLM..Run: [iTunesHelper] «C:Program FilesiTunesiTunesHelper.exe»
O4 — HKLM..Run: [egui] «C:Program FilesESETESET NOD32 Antivirusegui.exe» /hide /waitservice
O4 — HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exe
O4 — HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe
O4 — HKCU..Run: [ICQ] ~»C:Program FilesICQ7.2ICQ.exe» silent loginmode=4
O4 — HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘NETWORK SERVICE’)
O4 — Startup: Adobe Gamma.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~3Office12EXCEL.EXE/3000
O8 — Extra context menu item: Поиск@Mail.Ru — res://c:program filesmail.rusputnikMailRuSputnik.dll/282
O8 — Extra context menu item: Словари@Mail.Ru — res://c:program filesmail.rusputnikMailRuSputnik.dll/283
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0binssv.dll
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 — Extra button: Альбом клипов HP — {58ECB495-38F0-49cb-A538-10282ABF65E7} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 — Extra button: Расширенный выбор HP — {700259D7-1666-479a-93B1-3250410481E8} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 — Extra button: ICQ7.2 — {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} — C:Program FilesICQ7.2ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ7.2 — {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} — C:Program FilesICQ7.2ICQ.exe
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:PROGRA~1SkypePhoneIEPluginSKYPEI~1.DLL
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~3Office12REFIEBAR.DLL
O18 — Protocol: base64 — {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} — C:Program FilesGet-Styles 2.0ietdataprotocol.dll
O18 — Protocol: chrome — {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} — C:Program FilesGet-Styles 2.0ietdataprotocol.dll
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:Program FilesMicrosoft OfficeOffice12GrooveSystemServices.dll
O18 — Protocol: prox — {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} — C:Program FilesGet-Styles 2.0ietdataprotocol.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — AppInit_DLLs: C:PROGRA~1GoogleGOOGLE~4GOEC62~1.DLL
O22 — SharedTaskScheduler: Component Categories cache daemon — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:Windowssystem32browseui.dll
O23 — Service: Apple Mobile Device — Apple Inc. — C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
O23 — Service: Служба Bonjour (Bonjour Service) — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: @dfsrres.dll,-101 (DFSR) — Корпорация Майкрософт — C:Windowssystem32DFSR.exe
O23 — Service: ESET HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe
O23 — Service: ESET Service (ekrn) — ESET — C:Program FilesESETESET NOD32 Antivirusekrn.exe
O23 — Service: FLEXnet Licensing Service — Macrovision Europe Ltd. — C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 — Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) — Google — C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe
O23 — Service: Служба Google Update (gupdate1c9cbd35cdc840) (gupdate1c9cbd35cdc840) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
O23 — Service: Event Log Watch (LogWatch) — CA — C:CA_LICLogWatNT.exe
O23 — Service: MSCSPTISRV — Sony Corporation — C:Program FilesCommon FilesSony SharedAvLibMSCSPTISRV.exe
O23 — Service: Nero BackItUp Scheduler 4.0 — Unknown owner — C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe (file missing)
O23 — Service: Sony Ericsson OMSI download service (OMSI download service) — Unknown owner — C:Program FilesSony EricssonSony Ericsson PC SuiteSupServ.exe
O23 — Service: PACSPTISVR — Unknown owner — C:Program FilesCommon FilesSony SharedAvLibPACSPTISVR.exe
O23 — Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) — Protection Technology (StarForce) — C:Windowssystem32sfrem01.exe
O23 — Service: SonicStage Back-End Service — Sony Corporation — C:Program FilesCommon FilesSony SharedAvLibSsBeSvc.exe
O23 — Service: Sony SPTI Service (SPTISRV) — Sony Corporation — C:Program FilesCommon FilesSony SharedAvLibSPTISRV.exe
O23 — Service: SonicStage SCSI Service (SSScsiSV) — Sony Corporation — C:Program FilesCommon FilesSony SharedAvLibSSScsiSV.exe
O23 — Service: Start BT in service — Unknown owner — C:Program FilesIVT CorporationBlueSoleilStartSkysolSvc.exe
O23 — Service: VAIO Entertainment TV Device Arbitration Service — Sony Corporation — C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCsVzHardwareResourceManagerVzHardwareResourceManager.exe
O23 — Service: VAIO Event Service — Sony Corporation — C:Program FilessonyVAIO Event ServiceVESMgr.exe
O23 — Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerVMISrv.exe
O23 — Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe
O23 — Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe
O23 — Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformVmGateway.exe
O23 — Service: VAIO Media Content Collection (VAIOMediaPlatform-UCLS-AppServer) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerUCLS.exe
O23 — Service: VAIO Media Content Collection (HTTP) (VAIOMediaPlatform-UCLS-HTTP) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe
O23 — Service: VAIO Media Content Collection (UPnP) (VAIOMediaPlatform-UCLS-UPnP) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe
O23 — Service: VAIO Entertainment UPnP Client Adapter (Vcsw) — Sony Corporation — C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVCSWVCSW.exe
O23 — Service: VAIO Entertainment Database Service (VzCdbSvc) — Sony Corporation — C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCdbVzCdbSvc.exe
O23 — Service: VAIO Entertainment File Import Service (VzFw) — Sony Corporation — C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCdbVzFw.exe
O23 — Service: XAudioService — Conexant Systems, Inc. — C:Windowssystem32DRIVERSxaudio.exe

—
End of file — 15763 bytes

======Scheduled tasks folder======

C:WindowstasksGoogleUpdateTaskMachineCore.job
C:WindowstasksGoogleUpdateTaskMachineUA.job
C:WindowstasksUser_Feed_Synchronization-{6FDA5319-9A9C-4106-9D39-8D46B5B01DA9}.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips — C:Program FilesHPSmart Web Printinghpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO — C:Program FilesAskBarDisbarbinaskBar.dll [2008-09-29 325000]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) — C:PROGRA~1SkypePhoneIEPluginSKYPEI~1.DLL [2007-02-09 751144]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer — C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll [2009-05-03 312928]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0binssv.dll [2007-03-06 501384]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — c:program filesmail.rusputnikMailRuSputnik.dll [2009-07-14 826032]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{963B125B-8B21-49A2-A3A8-E37092276531}]
TimerBHO Class — C:Program FilesGet-Styles 2.0utilsupdatebho.dll [2009-12-01 125952]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9B5FB65F-631E-4564-ABF2-AD71845B28E0}]
WitBHO Class — C:Program FilesGet-Styles 2.0iejsloader.dll [2010-05-31 226016]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class — C:UsersАдминAppDataRoamingMicrosoftInternet Explorerqipsearchbar.dll [2009-07-14 150768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper — C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll [2009-10-19 1345336]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — c:program filesmail.rusputnikMailRuSputnik.dll [2009-07-14 826032]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2009-10-27 1014520]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} — Ask Toolbar — C:Program FilesAskBarDisbarbinaskBar.dll [2008-09-29 325000]
{EEE6C35B-6118-11DC-9C72-001320C79847} — SweetIM Toolbar for Internet Explorer — C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll [2009-10-19 1345336]
{5BCDC9E9-A980-4B53-B2E8-60CFF484DA61} — Get-Styles toolbar v3 — C:Program FilesGet-Styles 2.0ietoolbar.dll [2010-05-31 130272]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«Windows Defender»=C:Program FilesWindows DefenderMSASCui.exe [2008-01-19 1008184]
«IgfxTray»=C:Windowssystem32igfxtray.exe [2007-01-24 98304]
«HotKeysCmds»=C:Windowssystem32hkcmd.exe [2007-01-24 106496]
«Persistence»=C:Windowssystem32igfxpers.exe [2007-01-24 81920]
«RtHDVCpl»=C:WindowsRtHDVCpl.exe [2007-02-06 4317184]
«Apoint»=C:Program FilesApointApoint.exe [2007-01-12 118784]
«ISBMgr.exe»=C:Program FilesSonyISB UtilityISBMgr.exe [2007-01-22 321656]
«GrooveMonitor»=C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2008-10-25 31072]
«Google Desktop Search»=C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe [2009-12-21 30192]
«Adobe Photo Downloader»=C:Program FilesAdobePhotoshop Album Starter Edition3.2Appsapdproxy.exe [2007-03-09 63712]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2004-11-02 32768]
«TkBellExe»=C:Program FilesCommon FilesRealUpdate_OBrealsched.exe [2009-05-03 198160]
«AppleSyncNotifier»=C:Program FilesCommon FilesAppleMobile Device SupportbinAppleSyncNotifier.exe [2009-08-13 177440]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2009-07-14 7975608]
«SweetIM»=C:Program FilesSweetIMMessengerSweetIM.exe [2009-10-20 111928]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-10-15 39792]
«AdobeAAMUpdater-1.0″=C:Program FilesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe [2010-05-26 500208]
«QuickTime Task»=C:Program FilesQuickTimeQTTask.exe [2010-03-18 421888]
«iTunesHelper»=C:Program FilesiTunesiTunesHelper.exe [2010-06-15 141624]
«egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe [2010-04-07 2145000]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ehTray.exe»=C:WindowsehomeehTray.exe [2008-01-19 125952]
«WMPNSCFG»=C:Program FilesWindows Media PlayerWMPNSCFG.exe [2008-01-19 202240]
«ICQ»=~C:Program FilesICQ7.2ICQ.exe silent loginmode=4 []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregBitTorrent DNA]
C:UsersАдминProgram FilesDNAbtdna.exe [2009-11-15 323392]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregHP Software Update]
C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2007-03-11 49152]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNeroCheck]
C:Windowssystem32NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSeaMonkey Quick Launch]
C:Program Filesmozilla.orgSeaMonkeySeaMonkey.exe [2007-11-28 151552]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSony Ericsson PC Suite]
C:Program FilesSony EricssonSony Ericsson PC SuiteSEPCSuite.exe [2009-09-24 434176]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregVKontakte]
C:Program FilesAgent VkontakteAgentVkontakte.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Canon LBP2900 Окно состояния.lnk]
C:WindowsSystem32spooldriversw32x863CNAB4LAK.EXE [2007-01-16 50848]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:PROGRA~1HPDIGITA~1binhpqtra08.exe [2007-03-11 210520]

C:UsersАдминAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
Adobe Gamma.lnk — C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLs»=»C:PROGRA~1GoogleGOOGLE~4GOEC62~1.DLL»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
C:Windowssystem32igfxdev.dll [2007-01-24 212992]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyVESWinlogon]
C:Windowssystem32VESWinlogon.dll [2007-02-13 98304]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfPf]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfRd]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfSvc]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfUsbccidDriver]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«EnableLUA»=0
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«EnableUIADesktopToggle»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«BindDirectlyToPropertySetStorage»=0

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«C:Program FilesBitTorrentbittorrent.exe»=»C:Program FilesBitTorrentbittorrent.exe:*:Enabled:BitTorrent»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]

======List of files/folders created in the last 1 months======

2010-08-06 16:03:00 —-D—- C:Program Filestrend micro
2010-08-06 16:02:58 —-D—- C:rsit
2010-08-06 15:10:26 —-D—- C:Avenger
2010-08-06 15:10:26 —-A—- C:avenger.txt
2010-08-06 14:15:53 —-A—- C:WindowsisRS-000.tmp
2010-08-06 13:48:20 —-A—- C:WindowsFreshOffice CRM Uninstall Log.txt
2010-08-06 13:14:27 —-D—- C:Program FilesDef Group
2010-08-06 13:03:00 —-D—- C:ProgramDataESET
2010-08-06 13:00:58 —-D—- C:UsersАдминAppDataRoamingnod32 updater
2010-07-09 16:11:28 —-D—- C:Program FilesiPod
2010-07-09 16:11:24 —-D—- C:ProgramData{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-07-09 16:11:24 —-D—- C:Program FilesiTunes
2010-07-07 11:57:33 —-D—- C:Windowspss
2010-07-07 11:26:35 —-D—- C:Program FilesCCleaner

======List of files/folders modified in the last 1 months======

2010-08-06 16:06:26 —-D—- C:WindowsTemp
2010-08-06 16:05:37 —-D—- C:Windowstracing
2010-08-06 16:03:00 —-RD—- C:Program Files
2010-08-06 15:15:08 —-D—- C:UsersАдминAppDataRoamingICQ
2010-08-06 15:11:16 —-D—- C:Windows
2010-08-06 15:10:33 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2010-08-06 15:10:26 —-D—- C:Windowssystem32drivers
2010-08-06 14:53:21 —-D—- C:WindowsSystem32
2010-08-06 13:50:57 —-D—- C:Program FilesGoogle
2010-08-06 13:49:02 —-D—- C:Windowssystem32Tasks
2010-08-06 13:47:49 —-D—- C:ProgramDataGoogle
2010-08-06 13:47:27 —-SHD—- C:WindowsInstaller
2010-08-06 13:47:27 —-D—- C:UsersАдминAppDataRoamingGoogle
2010-08-06 13:45:14 —-D—- C:WindowsPrefetch
2010-08-06 13:44:48 —-D—- C:Windowsinf
2010-08-06 13:44:16 —-D—- C:Program FilesCommon FilesACD Systems
2010-08-06 13:44:15 —-HD—- C:ProgramData
2010-08-06 13:41:49 —-D—- C:Program FilesWebMoney Advisor
2010-08-06 13:39:48 —-D—- C:UsersАдминAppDataRoamingYandex
2010-08-06 13:39:24 —-RSD—- C:WindowsFonts
2010-08-06 13:37:43 —-D—- C:Program FilesMozilla Firefox
2010-08-06 12:54:21 —-D—- C:Program FilesESET
2010-08-06 12:52:53 —-D—- C:Windowssystem32catroot
2010-08-06 12:50:07 —-D—- C:UsersАдминAppDataRoamingBitTorrent
2010-08-06 00:00:36 —-SHD—- C:System Volume Information
2010-08-03 18:44:26 —-A—- C:Windowssystem32PerfStringBackup.INI
2010-08-03 00:37:50 —-D—- C:UsersАдминAppDataRoamingApple Computer
2010-07-25 15:23:59 —-D—- C:UsersАдминAppDataRoamingDNA
2010-07-19 02:41:44 —-D—- C:Windowssystem32catroot2
2010-07-09 16:11:26 —-D—- C:Program FilesCommon FilesApple
2010-07-09 16:05:14 —-D—- C:Program FilesQuickTime
2010-07-09 15:55:42 —-D—- C:Program FilesBonjour
2010-07-09 15:46:43 —-D—- C:Program FilesSafari
2010-07-07 20:31:35 —-D—- C:WindowsMinidump
2010-07-07 20:31:35 —-D—- C:WindowsDebug

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTHidEnum;Bluetooth HID Enumerator; C:WindowsSystem32Driversvbtenum.sys [2007-03-05 20880]
R0 BTHidMgr;Bluetooth HID Manager Service; C:WindowsSystem32DriversBTHidMgr.sys [2007-03-05 35600]
R0 prohlp02;StarForce Protection Helper Driver v2; C:WindowsSystem32driversprohlp02.sys [2004-01-26 95552]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:WindowsSystem32driversprosync1.sys [2003-09-06 6944]
R0 PxHelp20;PxHelp20; C:WindowsSystem32DriversPxHelp20.sys [2007-01-09 43528]
R0 sfhlp01;StarForce Protection Helper Driver; C:WindowsSystem32driverssfhlp01.sys [2003-12-01 4832]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:Windowssystem32driverssfhlp02.sys [2006-05-10 6656]
R0 sfsync04;StarForce Protection Synchronization Driver (version 4.x); C:Windowssystem32driverssfsync04.sys [2006-05-10 52224]
R1 DMICall;Sony DMI Call service; C:Windowssystem32DRIVERSDMICall.sys [2006-10-18 10216]
R1 ehdrv;ehdrv; C:Windowssystem32DRIVERSehdrv.sys [2010-04-07 114984]
R1 prodrv06;StarForce Protection Environment Driver v6; C:WindowsSystem32driversprodrv06.sys [2004-01-26 52224]
R2 eamonm;eamonm; C:Windowssystem32DRIVERSeamonm.sys [2010-04-07 133512]
R2 epfwwfpr;epfwwfpr; C:Windowssystem32DRIVERSepfwwfpr.sys [2010-04-07 96896]
R2 Hardlock;Hardlock; ??C:Windowssystem32drivershardlock.sys [2004-07-14 676864]
R2 irda;ИК-протокол IrDA; C:Windowssystem32DRIVERSirda.sys [2008-01-19 95744]
R2 mdmxsdk;mdmxsdk; C:Windowssystem32DRIVERSmdmxsdk.sys [2007-01-10 12672]
R2 XAudio;XAudio; C:Windowssystem32DRIVERSxaudio.sys [2007-01-10 8192]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:Windowssystem32DRIVERSApfiltr.sys [2007-01-12 140800]
R3 athr;Atheros Extensible Wireless LAN device driver; C:Windowssystem32DRIVERSathr.sys [2006-12-28 509440]
R3 BlueletAudio;Bluetooth Audio Service; C:Windowssystem32DRIVERSblueletaudio.sys [2007-03-05 34576]
R3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:Windowssystem32DRIVERSBlueletSCOAudio.sys [2007-03-05 27792]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:Windowssystem32DRIVERSGEARAspiWDM.sys [2009-05-18 26600]
R3 HSF_DPV;HSF_DPV; C:Windowssystem32DRIVERSHSX_DPV.sys [2007-01-10 986624]
R3 HSXHWAZL;HSXHWAZL; C:Windowssystem32DRIVERSHSXHWAZL.sys [2007-01-10 206848]
R3 igfx;igfx; C:Windowssystem32DRIVERSigdkmd32.sys [2007-01-24 1478144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:Windowssystem32driversRTKVHDA.sys [2007-02-06 1668456]
R3 MBAMSwissArmy;MBAMSwissArmy; ??C:Windowssystem32driversmbamswissarmy.sys [2010-04-29 38224]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:Windowssystem32DRIVERSseehcri.sys [2008-01-09 27632]
R3 SNC;Sony Firmware Extension Parser Device; C:WindowsSystem32DriversSonyNC.sys [2007-02-06 27520]
R3 ti21sony;ti21sony; C:Windowssystem32driversti21sony.sys [2007-02-08 807424]
R3 VComm;Virtual Serial port driver; C:Windowssystem32DRIVERSVComm.sys [2007-03-05 34448]
R3 VcommMgr;Bluetooth VComm Manager Service; C:WindowsSystem32DriversVcommMgr.sys [2007-03-05 44304]
R3 winachsf;winachsf; C:Windowssystem32DRIVERSHSX_CNXT.sys [2007-01-10 659968]
R3 WUDFRd;WUDFRd; C:Windowssystem32DRIVERSWUDFRd.sys [2008-01-19 83328]
S0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:Windowssystem32driverssfdrv01.sys [2006-05-10 51200]
S3 BT;Bluetooth PAN Network Adapter; C:Windowssystem32DRIVERSbtnetdrv.sys [2007-03-05 18320]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:WindowsSystem32Driversbtcusb.sys [2007-03-05 39184]
S3 Dot4;Драйвер MS IEEE-1284.4; C:Windowssystem32DRIVERSDot4.sys [2008-01-19 131584]
S3 Dot4Print;Драйвер класса принтеров для IEEE-1284.4; C:Windowssystem32DRIVERSDot4Prt.sys [2008-01-19 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:Windowssystem32DRIVERSdot4usb.sys [2008-01-19 36864]
S3 drmkaud;Звуковой дешифратор DRM ядра системы; C:Windowssystem32driversdrmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Драйвер функции UAA для службы High Definition Audio (Microsoft), версия 1.1; C:Windowssystem32driversHdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:Windowssystem32DRIVERSVSTAZL3.SYS [2006-11-02 200704]
S3 irsir;Драйвер для инфракрасного последовательного порта Microsoft; C:Windowssystem32DRIVERSirsir.sys [2008-01-19 20992]
S3 MSKSSRV;Представитель служб потоков Microsoft; C:Windowssystem32driversMSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Посредник синхронизации потоков Microsoft; C:Windowssystem32driversMSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Представитель диспетчера качества потоков Microsoft; C:Windowssystem32driversMSPQM.sys [2008-01-19 5504]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:Windowssystem32driversMSTEE.sys [2008-01-19 6016]
S3 NETw3v32;Драйвер адаптера Intel(R) PRO/Wireless 3945ABG для 32-разрядной версии Windows Vista; C:Windowssystem32DRIVERSNETw3v32.sys [2007-01-24 1786880]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WindowsSystem32DriversRootMdm.sys [2008-01-19 8192]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:Windowssystem32DRIVERSs116bus.sys [2007-04-03 83336]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:Windowssystem32DRIVERSs116mdfl.sys [2007-04-03 15112]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:Windowssystem32DRIVERSs116mdm.sys [2007-04-03 108680]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSs116mgmt.sys [2007-04-03 100488]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:Windowssystem32DRIVERSs116nd5.sys [2007-04-03 23176]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:Windowssystem32DRIVERSs116obex.sys [2007-04-03 98696]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:Windowssystem32DRIVERSs116unic.sys [2007-04-03 99080]
S3 s117bus;Sony Ericsson Device 117 driver (WDM); C:Windowssystem32DRIVERSs117bus.sys [2007-06-25 82984]
S3 s117mdfl;Sony Ericsson Device 117 USB WMC Modem Filter; C:Windowssystem32DRIVERSs117mdfl.sys [2007-06-25 14888]
S3 s117mdm;Sony Ericsson Device 117 USB WMC Modem Driver; C:Windowssystem32DRIVERSs117mdm.sys [2007-06-25 108456]
S3 s117mgmt;Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSs117mgmt.sys [2007-06-25 100264]
S3 s117nd5;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS); C:Windowssystem32DRIVERSs117nd5.sys [2007-06-25 22952]
S3 s117obex;Sony Ericsson Device 117 USB WMC OBEX Interface; C:Windowssystem32DRIVERSs117obex.sys [2007-06-25 98344]
S3 s117unic;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM); C:Windowssystem32DRIVERSs117unic.sys [2007-06-25 98856]
S3 s816bus;Sony Ericsson Device 816 driver (WDM); C:Windowssystem32DRIVERSs816bus.sys [2007-06-19 81832]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter; C:Windowssystem32DRIVERSs816mdfl.sys [2007-06-19 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver; C:Windowssystem32DRIVERSs816mdm.sys [2007-06-19 107304]
S3 s816mgmt;Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSs816mgmt.sys [2007-06-19 99112]
S3 s816nd5;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS); C:Windowssystem32DRIVERSs816nd5.sys [2007-06-19 21928]
S3 s816obex;Sony Ericsson Device 816 USB WMC OBEX Interface; C:Windowssystem32DRIVERSs816obex.sys [2007-06-19 97320]
S3 s816unic;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM); C:Windowssystem32DRIVERSs816unic.sys [2007-06-19 97704]
S3 ss_bus;Samsung Mobile USB Device 1.0 driver (WDM); C:Windowssystem32DRIVERSss_bus.sys [2004-09-17 52384]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:Windowssystem32DRIVERSss_mdfl.sys [2004-09-17 6064]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:Windowssystem32DRIVERSss_mdm.sys [2004-09-17 84512]
S3 usbscan;Драйвер USB-сканера; C:Windowssystem32DRIVERSusbscan.sys [2008-01-19 35328]
S3 w810bus;Sony Ericsson W810 Driver driver (WDM); C:Windowssystem32DRIVERSw810bus.sys [2006-02-20 58288]
S3 w810mdfl;Sony Ericsson W810 USB WMC Modem Filter; C:Windowssystem32DRIVERSw810mdfl.sys [2006-02-20 8336]
S3 w810mdm;Sony Ericsson W810 USB WMC Modem Driver; C:Windowssystem32DRIVERSw810mdm.sys [2006-02-20 94064]
S3 w810mgmt;Sony Ericsson W810 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSw810mgmt.sys [2006-02-20 85408]
S3 w810obex;Sony Ericsson W810 USB WMC OBEX Interface; C:Windowssystem32DRIVERSw810obex.sys [2006-02-20 83344]
S3 WpdUsb;WpdUsb; C:Windowssystem32DRIVERSwpdusb.sys [2009-10-01 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe [2010-06-10 144176]
R2 Bonjour Service;Служба Bonjour; C:Program FilesBonjourmDNSResponder.exe [2010-05-18 345376]
R2 ekrn;ESET Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2010-04-07 810120]
R2 hpqddsvc;Служба HP CUE DeviceDiscovery; C:Windowssystem32svchost.exe [2008-01-19 21504]
R2 Irmon;@%SystemRoot%System32irmon.dll,-2000; C:Windowssystem32svchost.exe [2008-01-19 21504]
R2 LogWatch;Event Log Watch; C:CA_LICLogWatNT.exe [2007-12-15 75016]
R2 MSSQL$VAIO_VEDB;SQL Server (VAIO_VEDB); C:Program FilesMicrosoft SQL ServerMSSQL.1MSSQLBinnsqlservr.exe [2009-05-27 29262680]
R2 Net Driver HPZ12;Net Driver HPZ12; C:WindowsSystem32svchost.exe [2008-01-19 21504]
R2 OMSI download service;Sony Ericsson OMSI download service; C:Program FilesSony EricssonSony Ericsson PC SuiteSupServ.exe [2009-04-30 90112]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WindowsSystem32svchost.exe [2008-01-19 21504]
R2 SQLBrowser;SQL Server Browser; C:Program FilesMicrosoft SQL Server90Sharedsqlbrowser.exe [2008-11-24 239968]
R2 SQLWriter;SQL Server VSS Writer; C:Program FilesMicrosoft SQL Server90Sharedsqlwriter.exe [2008-11-24 87904]
R2 VAIO Event Service;VAIO Event Service; C:Program FilessonyVAIO Event ServiceVESMgr.exe [2007-02-13 182392]
R2 VzCdbSvc;VAIO Entertainment Database Service; C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCdbVzCdbSvc.exe [2006-11-28 172032]
R2 VzFw;VAIO Entertainment File Import Service; C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCdbVzFw.exe [2006-11-28 135168]
R2 XAudioService;XAudioService; C:Windowssystem32DRIVERSxaudio.exe [2007-01-10 386560]
R3 hpqcxs08;hpqcxs08; C:Windowssystem32svchost.exe [2008-01-19 21504]
R3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2010-06-15 540472]
R3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVCSWVCSW.exe [2006-11-28 274432]
S2 gupdate1c9cbd35cdc840;Служба Google Update (gupdate1c9cbd35cdc840); C:Program FilesGoogleUpdateGoogleUpdate.exe [2009-05-03 133104]
S2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe []
S2 sfrem01;SF FrontLine Drivers Auto Removal (v1); C:Windowssystem32sfrem01.exe [2006-05-10 353912]
S3 EhttpSrv;ESET HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2010-04-07 33560]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2008-09-23 654848]
S3 FontCache;@%systemroot%system32FntCache.dll,-100; C:Windowssystem32svchost.exe [2008-01-19 21504]
S3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589; C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe [2009-12-21 30192]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-04-30 182768]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe [2004-10-22 73728]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2008-10-25 65888]
S3 MSCSPTISRV;MSCSPTISRV; C:Program FilesCommon FilesSony SharedAvLibMSCSPTISRV.exe [2006-12-14 45056]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 PACSPTISVR;PACSPTISVR; C:Program FilesCommon FilesSony SharedAvLibPACSPTISVR.exe [2006-12-14 57344]
S3 SonicStage Back-End Service;SonicStage Back-End Service; C:Program FilesCommon FilesSony SharedAvLibSsBeSvc.exe [2007-01-24 112184]
S3 SPTISRV;Sony SPTI Service; C:Program FilesCommon FilesSony SharedAvLibSPTISRV.exe [2006-12-14 69632]
S3 SSScsiSV;SonicStage SCSI Service; C:Program FilesCommon FilesSony SharedAvLibSSScsiSV.exe [2007-01-24 75320]
S3 Start BT in service;Start BT in service; C:Program FilesIVT CorporationBlueSoleilStartSkysolSvc.exe [2007-04-21 52080]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCsVzHardwareResourceManagerVzHardwareResourceManager.exe [2007-01-10 73728]
S3 VAIOMediaPlatform-IntegratedServer-AppServer;VAIO Media Integrated Server; C:Program FilessonyVAIO Media Integrated ServerVMISrv.exe [2007-01-16 2523136]
S3 VAIOMediaPlatform-IntegratedServer-HTTP;VAIO Media Integrated Server (HTTP); C:Program FilessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe [2007-01-08 397312]
S3 VAIOMediaPlatform-IntegratedServer-UPnP;VAIO Media Integrated Server (UPnP); C:Program FilessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe [2007-01-16 1089536]
S3 VAIOMediaPlatform-Mobile-Gateway;VAIO Media Gateway Server; C:Program FilessonyVAIO Media Integrated ServerPlatformVmGateway.exe [2007-01-08 491520]
S3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection; C:Program FilessonyVAIO Media Integrated ServerUCLS.exe [2007-01-10 745472]
S3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP); C:Program FilessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe [2007-01-08 397312]
S3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP); C:Program FilessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe [2007-01-16 1089536]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:Program FilesMicrosoft SQL Server90Sharedsqladhlp90.exe [2008-11-24 45408]

EOF
6 августа, 2010 в 12:19 пп #30560
Аноним
Гость
- Темы:532
- Сообщений:1553
info.txt

info.txt logfile of random’s system information tool 1.08 2010-08-06 16:06:42

======Uninstall list======

—>C:Program FilesCommon FilesRealUpdate_OBr1puninst.exe RealNetworks|RealPlayer|6.0
—>C:Windowssystem32MacromedFlashuninstall_activeX.exe
—>Dummy
—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{55B781F0-060E-11D4-99D7-00C04FCCB775}Setup.exe» -l0x19
—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{C183A21C-395A-490F-99D4-CCAB35E32859}Setup.exe» -l0x19
µTorrent—>»C:Program FilesuTorrentuTorrent.exe» /UNINSTALL
32 Bit HP CIO Components Installer—>MsiExec.exe /I{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}
ACE Mega CoDecS Pack—>»C:Program FilesACE Mega CoDecS Packunins000.exe»
Activation Assistant for the 2007 Microsoft Office suites—>»C:ProgramData{623D32E9-0C62-4453-AD44-98B31F52A5E1}Microsoft Office Activation Assistant.exe» REMOVE=TRUE MODIFY=FALSE
Adobe Anchor Service CS3—>MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3—>MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3—>MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting—>MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0—>MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps—>MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color — Photoshop Specific—>MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings—>MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Recommended Settings—>MsiExec.exe /I{BD087F50-46B2-43E4-BD73-5DB3DC20B47C}
Adobe Color JA Extra Settings—>MsiExec.exe /I{D92B72E2-C854-4738-8ED6-4C3661CC17AE}
Adobe Color NA Extra Settings—>MsiExec.exe /I{6179A7D2-A668-4F1D-BC9A-DCC6A10C7871}
Adobe Common File Installer—>MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5B39}
Adobe Community Help—>msiexec /qb /x {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Community Help—>MsiExec.exe /I{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Default Language CS3—>MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3—>MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2—>C:Program FilesCommon FilesAdobeInstallers3e054d2218e7aa282c2369d939e58ffSetup.exe
Adobe ExtendScript Toolkit 2—>MsiExec.exe /I{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}
Adobe Flash Builder 4—>C:Program FilesCommon FilesAdobeOOBEPDAppcorePDApp.exe —appletID=»DWA_UI» —appletVersion=»1.0″ —mode=»Uninstall» —mediaSignature=»{177E1CA1-14CC-4398-AB15-A5746EFE8F22}»
Adobe Flash Player 10 ActiveX—>MsiExec.exe /X{20B3FD5B-A987-406B-A5B5-CDE3CA1EF4E1}
Adobe Flash Player 10 Plugin—>C:Windowssystem32MacromedFlashFlashUtil10h_Plugin.exe -maintain plugin
Adobe Fonts All—>MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3—>MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3—>MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files—>MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS2—>msiexec /I {236BB7C4-4419-42FD-0409-1E257A25E34D}
Adobe Photoshop CS3—>C:Program FilesCommon FilesAdobeInstallersd5fe1f44895aadff2baacf24fe1402Setup.exe
Adobe Photoshop CS3—>MsiExec.exe /I{FD0399AC-A38B-4D4B-8164-D7B73AC24030}
Adobe Reader 8.1.3—>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81300000003}
Adobe Setup—>MsiExec.exe /I{30981FCD-4150-4AB4-BAC5-75C9E914347D}
Adobe Setup—>MsiExec.exe /I{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}
Adobe Stock Photos CS3—>MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support—>MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3—>MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client—>MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin—>MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3—>MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
Adobe® Photoshop® Album Starter Edition 3.2—>MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61}
Advertising Center—>MsiExec.exe /X{b2ec4a38-b545-4a00-8214-13fe0e915e6d}
Alps Pointing-device for VAIO—>C:Program FilesApointUninstap.exe ADDREMOVE
Apple Application Support—>MsiExec.exe /I{B2D328BE-45AD-4D92-96F9-2151490A203E}
Apple Mobile Device Support—>MsiExec.exe /I{85991ED2-010C-4930-96FA-52F43C2CE98A}
Apple Software Update—>MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Ask Toolbar—>»C:Program FilesAskBarDisunins000.exe»
Avanquest update—>»C:Program FilesInstallShield Installation Information{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}Setup.exe» -runfromtemp -l0x0009 -removeonly
Bluesoleil3.2.2.8 Release 070421—>MsiExec.exe /X{8E9D738A-2C30-4574-90FE-E6B4F6065D48}
Bonjour—>MsiExec.exe /X{0CB9668D-F979-4F31-B8B8-67FE90F929F8}
CA AllFusion Process Modeler r7—>MsiExec.exe /I{F7399CE5-FD4E-4B2C-BE93-DE19A1EB98C8}
CCleaner—>»C:Program FilesCCleaneruninst.exe»
CheckXML—>»C:Program FilesCheckXMLuninstall.exe»
Click to DVD 2.0.05 Menu Data—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1050Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{9E407618-D9CD-4F39-9490-9ED45294073D}setup.exe» -l0x9 -removeonly
Click to DVD 2.6.00—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{E809063C-51A3-4269-8984-D1EB742F2151}setup.exe» -l0x9 -removeonly
Cosmix 1.0—>C:Windowsiun505.exe C:Program FilesCosmixirunin.ini
DjVu Browser Plug-in 3.5—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{105CFC7C-6992-11D5-BD9D-000102C10FD8}Setup.exe»
Flock 1.0—>C:Program FilesFlockuninst.exe
FreshOffice CRM—>»C:WindowsFreshOffice CRMuninstall.exe» «/U:C:Program FilesFreshOffice CRM 3.5.5 LIGHTirunin.xml»
GDR 4053 for SQL Server Database Services 2005 ENU (KB970892)—>C:WindowsSQL9_KB970892_ENUHotfix.exe /Uninstall
Get Styles for Opera—>C:Program FilesGet-Styles 2.0opuninstall.exe
Get-Styles for Chrome—>C:Program FilesGet-Styles 2.0chuninstall.exe
Get-Styles for IE—>C:Program FilesGet-Styles 2.0ieuninstall.exe
Get-Styles для ВКонтакте—>C:Program FilesGet-Styles 2.0utilsuninstall.exe
Google Chrome—>»C:Program FilesGoogleChromeApplication5.0.375.125Installersetup.exe» —uninstall —system-level
Google Desktop—>C:Program FilesGoogleGoogle Desktop SearchGoogleDesktopSetup.exe -uninstall
Google Earth Plug-in—>MsiExec.exe /X{961034C0-58DF-11DF-97FD-005056806466}
Google Earth—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}setup.exe» -l0x9 -removeonly
Google Talk (remove only)—>»C:Program FilesGoogleGoogle Talkuninstall.exe»
Google Update Helper—>MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HASP HL Device Driver—>C:WindowsSystem32UNWISE.EXE C:WindowsSystem32hdd32.log
HDAUDIO SoftV92 Data Fax Modem with SmartCP—>C:Program FilesCONEXANTCNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200HXFSETUP.EXE -U -ISnSZIRXz.inf
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)—>C:Windowssystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=»»
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)—>C:Windowssystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=»»
HP Customer Participation Program 9.0—>C:Program FilesHPDigital ImagingExtCapUninstallhpzscr01.exe -datfile hpqhsc01.dat
HP Imaging Device Functions 9.0—>C:Program FilesHPDigital ImagingDeviceManagementhpzscr01.exe -datfile hpqbud01.dat
HP OCR Software 9.0—>C:Program FilesHPDigital ImagingOCRhpzscr01.exe -datfile hpqbud11.dat
HP Photosmart All-In-One Software 9.0—>C:Program FilesHPDigital Imaging{B22C19AE-6A67-4f28-B541-5AE72FB17A25}setuphpzscr01.exe -datfile hposcr15.dat
HP Photosmart Essential 2.01—>C:Program FilesHPDigital ImagingPhotoSmartEssentialhpzscr01.exe -datfile hpqbud13.dat
HP Smart Web Printing—>MsiExec.exe /X{415CDA53-9100-476F-A7B2-476691E117C7}
HP Solution Center 9.0—>C:Program FilesHPDigital ImagingeSupporthpzscr01.exe -datfile hpqbud05.dat
HP Update—>MsiExec.exe /X{8C6027FD-53DC-446D-BB75-CACD7028A134}
HPSSupply—>MsiExec.exe /X{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}
IBM Rational Rose Enterprise Edition—>MsiExec.exe /I{22D66ACE-E0A1-482E-B797-0A6A377D3E91}
ICQ Toolbar—>C:Program FilesICQ6ToolbarICQUnToolbar.exe
ICQ7.2—>»C:Program FilesInstallShield Installation Information{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}ICQ7.exe» -runfromtemp -l0x0009 -removeonly
Image Editor—>MsiExec.exe /I{ABE0D78C-FC68-4678-8A4C-918E2C0576B7}
Imikimi Plugin—>»C:Program FilesImikimiuninstall.exe»
iTunes—>MsiExec.exe /I{7AB3A249-FB81-416B-917A-A2A10E74C503}
Java(TM) SE Runtime Environment 6—>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
LAN-Express AS IEEE 802.11 Wireless LAN—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1050Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{FCCB0B43-7A6D-49A4-A5B3-B10F592F4EB6}setup.exe» -l0x19 -removeonly
LogonStudio Vista—>C:PROGRA~1StardockOBJECT~1LOGONS~1UNWISE.EXE C:PROGRA~1StardockOBJECT~1LOGONS~1INSTALL.LOG
Magic ASCII Studio Version 2.2 Full—>»C:Program FilesMagic ASCII Studiounins000.exe»
Mail.Ru Агент 5.5 (сборка 2830, для всех пользователей)—>C:Program FilesMail.RuAgentmagentsetup.exe -uninstalllm
Mail.Ru Спутник 2.1.0.4—>c:program filesmail.rusputnikSputnikInstaller.exe -uninstall
Malwarebytes’ Anti-Malware—>»C:Program FilesMalwarebytes’ Anti-Malwareunins000.exe»
Microsoft .NET Framework 1.1 Security Update (KB953297)—>»C:WindowsMicrosoft.NETFrameworkv1.1.4322Updateshotfix.exe» «C:WindowsMicrosoft.NETFrameworkv1.1.4322UpdatesM953297M953297Uninstall.msp»
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 3.5 Language Pack SP1 — rus—>MsiExec.exe /I{2744791F-4E7C-32F5-AB40-AEC6A6C86DBF}
Microsoft .NET Framework 3.5 SP1—>c:WindowsMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 SP1setup.exe
Microsoft .NET Framework 3.5 SP1—>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-006E-0419-0000-0000000FF1CE} /uninstall {37317C49-30C4-412C-B0B9-D95090F330D8}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-006E-0419-0000-0000000FF1CE} /uninstall {37317C49-30C4-412C-B0B9-D95090F330D8}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-00A1-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-00A1-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Access MUI (Russian) 2007—>MsiExec.exe /X{90120000-0015-0419-0000-0000000FF1CE}
Microsoft Office Enterprise 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007—>MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel 2007 Help Обновление (KB963678)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {420938DB-BF97-4664-BE29-0C68B4802C00}
Microsoft Office Excel 2007 Help Обновление (KB963678)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {420938DB-BF97-4664-BE29-0C68B4802C00}
Microsoft Office Excel MUI (Russian) 2007—>MsiExec.exe /X{90120000-0016-0419-0000-0000000FF1CE}
Microsoft Office Groove MUI (Russian) 2007—>MsiExec.exe /X{90120000-00BA-0419-0000-0000000FF1CE}
Microsoft Office Home and Student 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007—>MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Russian) 2007—>MsiExec.exe /X{90120000-0044-0419-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Russian) 2007—>MsiExec.exe /X{90120000-00A1-0419-0000-0000000FF1CE}
Microsoft Office Outlook 2007 Help Обновление (KB963677)—>msiexec /package {90120000-001A-0419-0000-0000000FF1CE} /uninstall {E9D6C0F9-9879-4FC4-8E13-BF0D3953E0E6}
Microsoft Office Outlook MUI (Russian) 2007—>MsiExec.exe /X{90120000-001A-0419-0000-0000000FF1CE}
Microsoft Office Powerpoint 2007 Help Обновление (KB963669)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {BD1C2AC7-63F3-4C75-8B44-DE3D700B3BC8}
Microsoft Office Powerpoint 2007 Help Обновление (KB963669)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {BD1C2AC7-63F3-4C75-8B44-DE3D700B3BC8}
Microsoft Office PowerPoint MUI (Russian) 2007—>MsiExec.exe /X{90120000-0018-0419-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007—>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007—>MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2007—>MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2007—>MsiExec.exe /X{90120000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2007—>MsiExec.exe /X{90120000-002C-0419-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0419-0000-0000000FF1CE} /uninstall {57A92C5E-E76A-49CC-9EC2-A7B6CE1255EA}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0419-0000-0000000FF1CE} /uninstall {57A92C5E-E76A-49CC-9EC2-A7B6CE1255EA}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0422-0000-0000000FF1CE} /uninstall {6F177D09-F21D-4F50-9436-353972D1D232}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0422-0000-0000000FF1CE} /uninstall {6F177D09-F21D-4F50-9436-353972D1D232}
Microsoft Office Publisher MUI (Russian) 2007—>MsiExec.exe /X{90120000-0019-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Word 2007 Help Обновление (KB963665)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {D3A002FB-0F62-4840-80AD-2D2C63F83449}
Microsoft Office Word 2007 Help Обновление (KB963665)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {D3A002FB-0F62-4840-80AD-2D2C63F83449}
Microsoft Office Word MUI (Russian) 2007—>MsiExec.exe /X{90120000-001B-0419-0000-0000000FF1CE}
Microsoft Plus! for Windows XP—>MsiExec.exe /I{EEC2DAFD-5558-40AC-8E9C-5005C8F810E8}
Microsoft Silverlight—>MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Express Edition (VAIO_VEDB)—>MsiExec.exe /I{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}
Microsoft SQL Server 2005—>»c:Program FilesMicrosoft SQL Server90Setup BootstrapARPWrapper.exe» /Remove
Microsoft SQL Server Native Client—>MsiExec.exe /I{BD68F46D-8A82-4664-8E68-F87C55BDEFD4}
Microsoft SQL Server Setup Support Files (English)—>MsiExec.exe /X{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}
Microsoft SQL Server VSS Writer—>MsiExec.exe /I{56B4002F-671C-49F4-984C-C760FE3806B5}
Microsoft Visual C++ 2005 ATL Update kb973923 — x86 8.0.50727.4053—>MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works—>MsiExec.exe /I{737E2345-2897-4B75-9C9B-D541F7394D6B}
Microsoft_VC80_ATL_x86—>MsiExec.exe /I{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}
Microsoft_VC80_CRT_x86—>MsiExec.exe /I{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}
Microsoft_VC80_MFC_x86—>MsiExec.exe /I{D1A19B02-817E-4296-A45B-07853FD74D57}
Microsoft_VC80_MFCLOC_x86—>MsiExec.exe /I{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}
Microsoft_VC90_ATL_x86—>MsiExec.exe /I{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}
Microsoft_VC90_CRT_x86—>MsiExec.exe /I{08D2E121-7F6A-43EB-97FD-629B44903403}
Microsoft_VC90_MFC_x86—>MsiExec.exe /I{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}
MobileMe Control Panel—>MsiExec.exe /I{3AC54383-31D1-4907-961B-B12CBB1D0AE8}
MSXML 4.0 SP2 (KB936181)—>MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833)—>MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
MSXML 4.0 SP2 (KB954430)—>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)—>MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
neroxml—>MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Norton Internet Security—>C:Program FilesNortonInstaller{0C55C096-0F1D-4F28-AAA2-85EF591126E7}NISA5E82D0216.0.0.125InstStub.exe /X
OpenMG Limited Patch 4.7-07-13-24-01—>C:Program FilesCommon FilesSony SharedOpenMGHotFixesHotFix4.7-07-13-24-01HotFixSetupsetup.exe /u
OpenMG Secure Module 4.7.00—>C:PROGRA~1COMMON~1INSTAL~1Driver1150INTEL3~1IDriver.exe /M{CCD663AE-610D-4BDF-AAB0-E914B044527D} UNINSTALL
Opera 9.64—>MsiExec.exe /X{E1BBBAC5-2857-4155-82A6-54492CE88620}
PC Defender—>MsiExec.exe /X{456A3B12-8FE6-41AE-9E5C-5E55F0712C09}
PDF Settings—>MsiExec.exe /I{293D5729-7C01-4FA4-A4DE-BB6A1587BBB9}
Picasa 2—>»C:Program FilesPicasa2Uninstall.exe»
PicJet Studio 2.5—>»C:Program FilesPicJet Studio 2.5unins000.exe»
Power MP3 Cutter Joiner 1.11—>»C:Program FilesSagasoftPower MP3 Cutter Joinerunins000.exe»
PowerDVD—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}Setup.exe» -uninstall
QuickTime—>MsiExec.exe /I{3D9892BB-A751-4E48-ADC8-E4289956CE1D}
RealPlayer—>C:Program FilesCommon FilesRealUpdate_OBr1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver—>RtlUpd.exe -r -m
Safari—>MsiExec.exe /I{AFAC914D-9E83-4A89-8ABE-427521C82CCF}
Samsung Mobie USB Driver Installer—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1050Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}setup.exe» -l0x19 -removeonly
SAMSUNG Mobile USB Modem 1.0 Software—>C:Program FilesSAMSUNGSAMSUNG Mobile USB Modem 1.0SS_Uninstall.exe
Samsung Mobile USB Modem Software—>C:Windowssystem32Samsung_Mobile_USB_DriversSSM_Uninstall.exe
Samsung PC Studio 2.0 Internet Access—>MsiExec.exe /I{DE71DFB6-D64C-40AA-8756-F74ABE8354FE}
Samsung PC Studio 2.0 PIM & File Manager—>MsiExec.exe /I{4513F51E-3D1B-4791-B652-4C8B263ACD07}
Samsung PC Studio PC Sync—>MsiExec.exe /X{0E197776-07D7-4896-B0B4-DD6141A656FA}
SeaMonkey (1.1.7)—>C:WindowsSeaMonkeyUninstall.exe /ua «1.1.7 (en)»
Security Update for 2007 Microsoft Office System (KB969559)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969559)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB976321)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7F207DCA-3399-40CB-A968-6E5991B1421A}
Security Update for 2007 Microsoft Office System (KB976321)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7F207DCA-3399-40CB-A968-6E5991B1421A}
Security Update for 2007 Microsoft Office System (KB978380)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {667A88D1-0369-4070-A62A-70672D68A9BF}
Security Update for 2007 Microsoft Office System (KB978380)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {667A88D1-0369-4070-A62A-70672D68A9BF}
Security Update for CAPICOM (KB931906)—>MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)—>MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB978382)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6DE3DABF-0203-426B-B330-7287D1003E86}
Security Update for Microsoft Office Excel 2007 (KB978382)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6DE3DABF-0203-426B-B330-7287D1003E86}
Security Update for Microsoft Office Outlook 2007 (KB972363)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {120BE9A0-9B09-4855-9E0C-7DEE45CB03C0}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office Publisher 2007 (KB980470)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {34573F17-DADE-4D0D-835F-A54A1DE8AC1F}
Security Update for Microsoft Office system 2007 (972581)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (972581)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB969613)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office system 2007 (KB969613)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office system 2007 (KB974234)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office system 2007 (KB974234)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Setting Utility Series—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{59452470-A902-477F-9338-9B88101681BD}setup.exe» -l0x19 UNINSTALL -removeonly
Skype 3.0—>»C:Program FilesSkypePhoneunins000.exe»
Skype add-on for IE—>rundll32 «C:Program FilesSkypePhoneIEPluginSkypeIEPlugin.dll»,FriendlyUnregisterServer 0
Skype Plugin Manager—>MsiExec.exe /I{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03}
SonicStage 4.3—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime101Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{A0EB195B-5876-48E6-879D-33D4B2102610}setup.exe» -l0x9 UNINSTALL -removeonly
Sony Ericsson Media Manager 1.1—>MsiExec.exe /X{F9001BAC-4C59-413C-9B8C-090A694457FB}
Sony Ericsson PC Suite 6.009.00—>»C:Program FilesInstallShield Installation Information{2FFE93F0-BB72-4E52-8761-354D1AAA9387}ISAdmin.exe» -runfromtemp -l0x0019 -removeonly
Sony Utilities DLL—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{EF3D45BB-2260-4008-88EA-492E7744A9DF}setup.exe» -l0x9 -removeonly
Sony Video Shared Library—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime110Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{01FDC9FC-4D4F-4DB0-ACD1-D3E8E1D52902}setup.exe» -l0x9 -removeonly
sWall 1.0—>»C:Program FilessWallunins000.exe»
SweetIM for Messenger 2.8—>MsiExec.exe /X{DF6F459C-8B89-4F88-B63F-A2E136BB6B79}
SweetIM Toolbar for Internet Explorer 3.6—>MsiExec.exe /X{31CF6C0E-51F0-41D2-B088-A6A143C4303C}
Total Commander 7.02a PowerPack—>»C:Program FilesTotal Commanderuninstall.exe»
Uniblue RegistryBooster—>»C:Program FilesUniblueRegistryBoosterunins000.exe»
Update for 2007 Microsoft Office System (KB967642)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for 2007 Microsoft Office System (KB967642)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for 2007 Microsoft Office System (KB981715)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {661B3F32-FFE4-4606-AE3A-DFA11DCC0D79}
Update for 2007 Microsoft Office System (KB981715)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {661B3F32-FFE4-4606-AE3A-DFA11DCC0D79}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)—>C:Windowssystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=»»
Update for Microsoft Office InfoPath 2007 (KB976416)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7}
Update for Microsoft Office InfoPath 2007 (KB976416)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7}
Update for Microsoft Office OneNote 2007 (KB980729)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {329050A9-EF80-40F9-B633-74508F54C1FF}
Update for Microsoft Office OneNote 2007 (KB980729)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {329050A9-EF80-40F9-B633-74508F54C1FF}
Update for Microsoft Office Word 2007 (KB974561)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0CDDBAA2-2111-4A0E-A1B0-76C40C635331}
Update for Microsoft Office Word 2007 (KB974561)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0CDDBAA2-2111-4A0E-A1B0-76C40C635331}
Update for Outlook 2007 Junk Email Filter (kb981726)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {2C69BACE-1151-41C0-8C8D-F6026D510BD4}
VAIO Aqua Breeze Wallpaper—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{97BCD719-6ECB-458F-97D6-F38D2E07375E}setup.exe» -l0x9 -removeonly
VAIO Control Center—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{FC37C108-821D-4EDE-8F40-D5B497586805}setup.exe» -l0x19 -removeonly
VAIO Cozy Orange Wallpaper—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{2A2FF7F5-6F0E-4A5D-A881-39365E718BD6}setup.exe» -l0x9 -removeonly
VAIO Entertainment Platform—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime110Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{6B1F20F2-6321-4669-A58C-33DF8E7517FF}setup.exe» -l0x9 -removeonly
VAIO Event Service—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{F0D85ADD-DD61-4B43-87A0-6DA52A211A8B}setup.exe» -l0x19 -removeonly
VAIO Hardware Diagnostics—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{A947C2B3-7445-42C4-9063-EE704CACCB22}Setup.exe» -l0x19
VAIO Media 6.0—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{560F6B2E-F0DF-44E5-8190-A4A161F0E205}setup.exe» -l0x9 UNINSTALL -removeonly
VAIO Media AC3 Decoder 1.0—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{2063C2E8-3812-4BBD-9998-6610F80C1DD4}Setup.exe» -l0x9 UNINSTALL
VAIO Media Content Collection 6.0—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{500162A0-4DD5-460A-BAFD-895AAE48C532}setup.exe» -l0x9 UNINSTALL -removeonly
VAIO Media Integrated Server 6.0—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{785EB1D4-ECEC-4195-99B4-73C47E187721}setup.exe» -l0x9 UNINSTALL -removeonly
VAIO Media Redistribution 6.0—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{5855C127-1F20-404D-B7FB-1FD84D7EAB5E}setup.exe» -l0x9 UNINSTALL -removeonly
VAIO Media Registration Tool 6.0—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{AF9A04EB-7D8E-41DE-9EDE-4AB9BB2B71B6}setup.exe» -l0x9 UNINSTALL -removeonly
VAIO Original Screen Saver—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{1BEF9285-5530-426B-A5F1-5836B95C7EB1}Setup.exe» -l0x19
VAIO Photo 2007—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{5E343EF6-D27C-4CFC-9FAE-9AAFB541BCEE}setup.exe» -l0x9 -removeonly
VAIO Power Management—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{9E319E96-ED8E-4B01-9775-C521A1869A25}setup.exe» -l0x19 UNINSTALL -removeonly
VAIO Tender Green Wallpaper—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{934A3213-1CB6-4264-84A2-EE080C017BCA}setup.exe» -l0x9 -removeonly
VAIO Update 3—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{48820099-ED7D-424B-890C-9A82EF00656D}setup.exe» -l0x19 -removeonly
VAIO Video & Photo Suite—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime110Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{68A69CFF-130D-4CDE-AB0E-7374ECB144C8}setup.exe» -l0x19 -removeonly
Windows Media Player Firefox Plugin—>MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinDVD for VAIO—>C:Program FilesInstallShield Installation Information{20471B27-D702-4FE8-8DEC-0702CC8C0A85}setup.exe -runfromtemp -l0x0419
WinRAR archiver—>C:Program FilesWinRARuninstall.exe
Wireless Switch Setting Utility—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{2A0F3EF9-68EE-49E9-A05B-ED5B82DF63E5}setup.exe» -l0x19 -removeonly
Zuma Deluxe RA—>C:PROGRA~1ZUMADE~1UNWISE.EXE C:PROGRA~1ZUMADE~1INSTALL.LOG
Анна и Уилл. Тайны Времени—>C:Program FilesAlawar.ruАнна и Уилл. Тайны ВремениUninstall.exe
Город самоцветов 1.0—>C:Program FilesAlawar.ruГород самоцветовUninstall.exe
За 80 дней вокруг света 1.0—>C:Program FilesAlawar.ruЗа 80 дней вокруг светаUninstall.exe
Записки волшебника. Заколдованный город—>C:Program FilesAlawar.ruЗаписки волшебника. Заколдованный городUninstall.exe
Ивановский Propiseц 3.50—>C:Program FilesИвановский Propiseцuninst.exe
Камень судьбы—>C:Program FilesAlawar.ruКамень судьбыUninstall.exe
Код Энигма. Секретный Фарватер—>C:WindowsIsUn0419.exe -f»C:Program FilesGMX MediaEnigma Rising TideUninst.isu»
Кулинарные тайны—>C:Program FilesAlawar.ruКулинарные тайныUninstall.exe
Модные штучки 1.0—>C:Program FilesAlawar.ruМодные штучкиUninstall.exe
Натали Брукс. Тайна наследства—>C:Program FilesAlawar.ruНатали Брукс. Тайна наследстваUninstall.exe
Папарацци. Охота за сенсацией 1.0—>C:Program FilesAlawar.ruПапарацци. Охота за сенсациейUninstall.exe
Программа «Восстановление данных VAIO»—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}setup.exe» -l0x19 -removeonly
Птички на проводе 1.0—>C:Program FilesAlawar.ruПтички на проводеUninstall.exe
Птички пираты—>C:Program FilesAlawar.ruПтички пиратыUninstall.exe
Сборник иконок 17.0—>C:Program FilesUmnikSoft.comSIco17uninstall.exe
Секрет Да Винчи—>C:Program FilesAlawar.ruСекрет Да ВинчиUninstall.exe
Сприлл. Тайна Бермудского треугольника—>C:Program FilesAlawar.ruСприлл. Тайна Бермудского треугольникаUninstall.exe
Храм инков 1.0—>C:Program FilesAlawar.ruХрам инковUninstall.exe
Языковой пакет Microsoft .NET Framework 3.5 SP1 — RUS—>c:WindowsMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 Language Pack SP1 — russetup.exe

======Security center information======

AS: Защитник Windows

======System event log======

Computer Name: Светлана
Event Code: 101
Message: Driver has encountered an internal error
Record Number: 921994196
Source Name: yukonwlh
Time Written: 20100203114538.914000-000
Event Type: Ошибка
User:

Computer Name: Светлана
Event Code: 101
Message: Driver has encountered an internal error
Record Number: 921994195
Source Name: yukonwlh
Time Written: 20100203114538.914000-000
Event Type: Ошибка
User:

Computer Name: Светлана
Event Code: 101
Message: Driver has encountered an internal error
Record Number: 921994194
Source Name: yukonwlh
Time Written: 20100203114538.914000-000
Event Type: Ошибка
User:

Computer Name: Светлана
Event Code: 101
Message: Driver has encountered an internal error
Record Number: 921994193
Source Name: yukonwlh
Time Written: 20100203114538.914000-000
Event Type: Ошибка
User:

Computer Name: Светлана
Event Code: 101
Message: Driver has encountered an internal error
Record Number: 921994192
Source Name: yukonwlh
Time Written: 20100203114538.913000-000
Event Type: Ошибка
User:

=====Application event log=====

Computer Name: Светлана
Event Code: 20222
Message: CoID={04CED0C3-3163-4827-BEFC-E68FE9A14BA2}: Пользователь СВЕТЛАНААдмин пытается установить связь с сервером удаленного доступа для подключения VPN-подключение при помощи следующего устройства:
Server address/Phone Number = vpn.tvoynet.ru
Device = Минипорт WAN (L2TP)
Port = VPN0-1
MediaType = VPN.
Record Number: 118484
Source Name: RasClient
Time Written: 20090515175256.000000-000
Event Type: Сведения
User:

Computer Name: Светлана
Event Code: 20222
Message: CoID={04CED0C3-3163-4827-BEFC-E68FE9A14BA2}: Пользователь СВЕТЛАНААдмин пытается установить связь с сервером удаленного доступа для подключения VPN-подключение при помощи следующего устройства:
Server address/Phone Number = vpn.tvoynet.ru
Device = Минипорт WAN (PPTP)
Port = VPN1-1
MediaType = VPN.
Record Number: 118483
Source Name: RasClient
Time Written: 20090515175256.000000-000
Event Type: Сведения
User:

Computer Name: Светлана
Event Code: 20221
Message: CoID={04CED0C3-3163-4827-BEFC-E68FE9A14BA2}: Пользователь СВЕТЛАНААдмин начал выполнять подключение VPN, используя профиль подключения per-user с именем VPN-подключение. Параметры подключения:
Dial-in User = 242155
VpnStrategy = PPTP then L2TP
DataEncryption = Requested
PrerequisiteEntry =
CompartmentsEnabled = No
AutoLogon = No
UseRasCredentials = Yes
CustomAuthKey =
AuthRestriction Mask = 0x00000220
RasIpv4DefaultGateway = Yes
Ipv4AddressAssignment = By Server
Ipv4DNSServerAssignment = By Server
RasIpv6DefaultGateway = Yes
Ipv6DNSServerAssignment = By Server
IpDnsFlags =
IpNBTEnabled = Yes
UseFlags = Private Connection
IpSecFlags = No Pre-shared key
ConnectOnWinlogon = No.
Record Number: 118482
Source Name: RasClient
Time Written: 20090515175256.000000-000
Event Type: Сведения
User:

Computer Name: Светлана
Event Code: 17895
Message: CPU time stamp frequency has changed from 687824 to 1662511 ticks per millisecond. The new frequency will be used.
Record Number: 118481
Source Name: MSSQL$VAIO_VEDB
Time Written: 20090515150119.000000-000
Event Type: Сведения
User:

Computer Name: Светлана
Event Code: 17895
Message: CPU time stamp frequency has changed from 975164 to 687824 ticks per millisecond. The new frequency will be used.
Record Number: 118480
Source Name: MSSQL$VAIO_VEDB
Time Written: 20090515144519.000000-000
Event Type: Сведения
User:

=====Security event log=====

Computer Name: Светлана
Event Code: 4672
Message: Новому сеансу входа назначены специальные привилегии.

Субъект:
ИД безопасности: S-1-5-18
Имя учетной записи: SYSTEM
Домен учетной записи: NT AUTHORITY
Код входа: 0x3e7

Привилегии: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 56436
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090814162211.900937-000
Event Type: Аудит выполнен успешно
User:

Computer Name: Светлана
Event Code: 4624
Message: Вход с учетной записью выполнен успешно.

Субъект:
ИД безопасности: S-1-5-18
Имя учетной записи: СВЕТЛАНА$
Домен учетной записи: MOBILE_BOOK
Код входа: 0x3e7

Тип входа: 5

Новый вход:
ИД безопасности: S-1-5-18
Имя учетной записи: SYSTEM
Домен учетной записи: NT AUTHORITY
Код входа: 0x3e7
GUID входа: {00000000-0000-0000-0000-000000000000}

Сведения о процессе:
Идентификатор процесса: 0x2b8
Имя процесса: C:WindowsSystem32services.exe

Сведения о сети:
Имя рабочей станции:
Сетевой адрес источника: —
Порт источника: —

Сведения о проверке подлинности:
Процесс входа: Advapi
Пакет проверки подлинности: Negotiate
Промежуточные службы: —
Имя пакета (только NTLM): —
Длина ключа: 0

Данное событие возникает при создании сеанса входа. Оно создается в системе, вход в которую выполнен.

Поля «Субъект» указывают на учетную запись локальной системы, запросившую вход. Обычно это служба, например служба «Сервер», или локальный процесс, такой как Winlogon.exe или Services.exe.

В поле «Тип входа» указан тип выполненного входа. Самыми распространенными являются типы 2 (интерактивный) и 3 (сетевой).

Поля «Новый вход» указывают на учетную запись, для которой создан новый сеанс входа, то есть на учетную запись, с которой выполнен вход.

В полях, которые относятся к сети, указан источник запроса на удаленный вход. Имя рабочей станции доступно не всегда, и в некоторых случаях это поле может оставаться незаполненным.

Поля сведений о проверке подлинности содержат подробные данные о конкретном запросе на вход.
— GUID входа — это уникальный идентификатор, который позволяет сопоставить данное событие с событием KDC.
— В поле «Промежуточные службы» указано, какие промежуточные службы участвовали в данном запросе на вход.
— Поле «Имя пакета» указывает на подпротокол, использованный с протоколами NTLM.
— Поле «Длина ключа» содержит длину созданного ключа сеанса. Это поле может иметь значение «0», если ключ сеанса не запрашивался.
Record Number: 56435
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090814162211.900937-000
Event Type: Аудит выполнен успешно
User:

Computer Name: Светлана
Event Code: 4648
Message: Выполнена попытка входа в систему с явным указанием учетных данных.

Субъект:
ИД безопасности: S-1-5-18
Имя учетной записи: СВЕТЛАНА$
Домен учетной записи: MOBILE_BOOK
Код входа: 0x3e7
GUID входа: {00000000-0000-0000-0000-000000000000}

Были использованы учетные данные следующей учетной записи:
Имя учетной записи: SYSTEM
Домен учетной записи: NT AUTHORITY
GUID входа: {00000000-0000-0000-0000-000000000000}

Целевой сервер:
Имя целевого сервера: localhost
Дополнительные сведения: localhost

Сведения о процессе:
Идентификатор процесса: 0x2b8
Имя процесса: C:WindowsSystem32services.exe

Сведения о сети:
Сетевой адрес: —
Порт: —

Данное событие возникает, когда процесс пытается выполнить вход с учетной записью, явно указав ее учетные данные. Это обычно происходит при использовании конфигураций пакетного типа, например назначенных задач, или выполнении команды RUNAS.
Record Number: 56434
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090814162211.900937-000
Event Type: Аудит выполнен успешно
User:

Computer Name: Светлана
Event Code: 4672
Message: Новому сеансу входа назначены специальные привилегии.

Субъект:
ИД безопасности: S-1-5-18
Имя учетной записи: SYSTEM
Домен учетной записи: NT AUTHORITY
Код входа: 0x3e7

Привилегии: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 56433
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090814162211.885337-000
Event Type: Аудит выполнен успешно
User:

Computer Name: Светлана
Event Code: 4624
Message: Вход с учетной записью выполнен успешно.

Субъект:
ИД безопасности: S-1-5-18
Имя учетной записи: СВЕТЛАНА$
Домен учетной записи: MOBILE_BOOK
Код входа: 0x3e7

Тип входа: 5

Новый вход:
ИД безопасности: S-1-5-18
Имя учетной записи: SYSTEM
Домен учетной записи: NT AUTHORITY
Код входа: 0x3e7
GUID входа: {00000000-0000-0000-0000-000000000000}

Сведения о процессе:
Идентификатор процесса: 0x2b8
Имя процесса: C:WindowsSystem32services.exe

Сведения о сети:
Имя рабочей станции:
Сетевой адрес источника: —
Порт источника: —

Сведения о проверке подлинности:
Процесс входа: Advapi
Пакет проверки подлинности: Negotiate
Промежуточные службы: —
Имя пакета (только NTLM): —
Длина ключа: 0

Данное событие возникает при создании сеанса входа. Оно создается в системе, вход в которую выполнен.

Поля «Субъект» указывают на учетную запись локальной системы, запросившую вход. Обычно это служба, например служба «Сервер», или локальный процесс, такой как Winlogon.exe или Services.exe.

В поле «Тип входа» указан тип выполненного входа. Самыми распространенными являются типы 2 (интерактивный) и 3 (сетевой).

Поля «Новый вход» указывают на учетную запись, для которой создан новый сеанс входа, то есть на учетную запись, с которой выполнен вход.

В полях, которые относятся к сети, указан источник запроса на удаленный вход. Имя рабочей станции доступно не всегда, и в некоторых случаях это поле может оставаться незаполненным.

Поля сведений о проверке подлинности содержат подробные данные о конкретном запросе на вход.
— GUID входа — это уникальный идентификатор, который позволяет сопоставить данное событие с событием KDC.
— В поле «Промежуточные службы» указано, какие промежуточные службы участвовали в данном запросе на вход.
— Поле «Имя пакета» указывает на подпротокол, использованный с протоколами NTLM.
— Поле «Длина ключа» содержит длину созданного ключа сеанса. Это поле может иметь значение «0», если ключ сеанса не запрашивался.
Record Number: 56432
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090814162211.885337-000
Event Type: Аудит выполнен успешно
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesMicrosoft SQL Server90Toolsbinn;C:Program FilesCommon FilesAdobeAGL;C:Program FilesRationalcommon;C:Program FilesQuickTimeQTSystem
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
«PROCESSOR_ARCHITECTURE»=x86
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP
«USERNAME»=SYSTEM
«windir»=%SystemRoot%
«PROCESSOR_LEVEL»=6
«PROCESSOR_IDENTIFIER»=x86 Family 6 Model 15 Stepping 2, GenuineIntel
«PROCESSOR_REVISION»=0f02
«NUMBER_OF_PROCESSORS»=2
«configsetroot»=%SystemRoot%ConfigSetRoot
«asl.log»=Destination=file;OnFirstLog=command,environment,parent
«CLASSPATH»=.;C:Program FilesJavajre1.6.0libextQTJava.zip
«QTJAVA»=C:Program FilesJavajre1.6.0libextQTJava.zip

EOF
6 августа, 2010 в 12:40 пп #30561
Helper
Participant
- Темы:19
- Сообщений:712
Скачайте OTM by OldTimer или с зеркала и сохраните на рабочий стол.
Запустите OTM (в ОС Windows Vista необходимо запускать через правую кн. мыши от имени администратора)
временно выключите антивирус, firewall и другое защитное программное обеспечение. Выделите и скопируйте текст ниже (Ctrl+C)
```
:Processes

explorer.exe



:Services



:Files

C:Program FilesWindows Defender



:Reg

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]

"Windows Defender"=-



:Commands

[purity]

[emptytemp]

[start explorer]

[Reboot]
```
В OTM под панелью «Paste Instructions for Items to be Moved» (под желтой панелью) вставьте скопированный текст и нажмите кнопку «MoveIt!».

Компьютер перезагрузится.
Он должен исчезнут, однако кое-что может остаться.Обязательно повторите логи RSIT.
AgentVkontakte.exe
НУЖНО?
6 августа, 2010 в 12:44 пп #30562
Аноним
Гость
- Темы:532
- Сообщений:1553
АгенВконтакте скачивала. но не пользуюсь …
6 августа, 2010 в 1:01 пп #30563
Аноним
Гость
- Темы:532
- Сообщений:1553
не появилась больше эта программа ))) огромное спасибо )))
вывелся только log.txt

Logfile of random’s system information tool 1.08 (written by random/random)
Run by Админ at 2010-08-06 16:59:47
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 14 GB (14%) free of 105 GB
Total RAM: 2037 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:59:54, on 06.08.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Windowssystem32taskeng.exe
C:Program FilesSonyWireless Switch Setting UtilitySwitcher.exe
C:WindowsSystem32mobsync.exe
C:Program FilesWindows DefenderMSASCui.exe
C:Program FilesWindows Media Playerwmplayer.exe
C:WindowsSystem32hkcmd.exe
C:WindowsSystem32igfxpers.exe
C:Program FilesApointApoint.exe
C:Program FilessonyISB UtilityISBMgr.exe
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:Program FilesApointApMsgFwd.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:Program FilesSweetIMMessengerSweetIM.exe
C:Program FilesApointApntex.exe
C:Program FilesApointApvfb.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Program FilesICQ7.2ICQ.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesESETESET NOD32 Antivirusegui.exe
C:Windowsehomeehtray.exe
C:Windowssystem32wbemunsecapp.exe
C:Windowsehomeehmsas.exe
C:Program FilesFlockflockflock.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesMozilla Firefoxplugin-container.exe
C:Windowssystem32SearchFilterHost.exe
C:UsersАдминDesktopRSIT.exe
C:Program Filestrend microАдмин.exe

R1 — HKCUSoftwareMicrosoftInternet Explorer,SearchURL = http://yandex.ru/yandsearch?clid=123046&text=%s
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.yandex.ru/?clid=123048
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=123048
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ru.msn.com/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://home.sweetim.com
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru/ie
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = Root: HKCU; Subkey: SoftwareMicrosoftInternet ExplorerSearchUrl; ValueType: string; ValueName: ‘; ValueData: ‘; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = 80:80
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — c:program filesmail.rusputnikMailRuSputnik.dll
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
O1 — Hosts: ::1 localhost
O2 — BHO: HP Print Clips — {053F9267-DC04-4294-A72C-58F732D338C0} — C:Program FilesHPSmart Web Printinghpswp_framework.dll
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: AskBar BHO — {201f27d4-3704-41d6-89c1-aa35e39143ed} — C:Program FilesAskBarDisbarbinaskBar.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — C:PROGRA~1SkypePhoneIEPluginSKYPEI~1.DLL
O2 — BHO: RealPlayer Download and Record Plugin for Internet Explorer — {3049C3E9-B461-4BC5-8870-4C09146192CA} — C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0binssv.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — c:program filesmail.rusputnikMailRuSputnik.dll
O2 — BHO: Update Timer — {963B125B-8B21-49A2-A3A8-E37092276531} — C:Program FilesGet-Styles 2.0utilsupdatebho.dll
O2 — BHO: script helper for ie — {9B5FB65F-631E-4564-ABF2-AD71845B28E0} — C:Program FilesGet-Styles 2.0iejsloader.dll
O2 — BHO: QIPBHO — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:UsersАдминAppDataRoamingMicrosoftInternet Explorerqipsearchbar.dll
O2 — BHO: SWEETIE — {EEE6C35C-6118-11DC-9C72-001320C79847} — C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — c:program filesmail.rusputnikMailRuSputnik.dll
O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O3 — Toolbar: Ask Toolbar — {3041d03e-fd4b-44e0-b742-2d9b88305f98} — C:Program FilesAskBarDisbarbinaskBar.dll
O3 — Toolbar: SweetIM Toolbar for Internet Explorer — {EEE6C35B-6118-11DC-9C72-001320C79847} — C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll
O3 — Toolbar: Get-Styles toolbar v3 — {5BCDC9E9-A980-4B53-B2E8-60CFF484DA61} — C:Program FilesGet-Styles 2.0ietoolbar.dll
O4 — HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 — HKLM..Run: [IgfxTray] C:Windowssystem32igfxtray.exe
O4 — HKLM..Run: [HotKeysCmds] C:Windowssystem32hkcmd.exe
O4 — HKLM..Run: [Persistence] C:Windowssystem32igfxpers.exe
O4 — HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 — HKLM..Run: [Apoint] C:Program FilesApointApoint.exe
O4 — HKLM..Run: [ISBMgr.exe] «C:Program FilesSonyISB UtilityISBMgr.exe»
O4 — HKLM..Run: [GrooveMonitor] «C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe»
O4 — HKLM..Run: [Google Desktop Search] «C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe» /startup
O4 — HKLM..Run: [Adobe Photo Downloader] «C:Program FilesAdobePhotoshop Album Starter Edition3.2Appsapdproxy.exe»
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [TkBellExe] «C:Program FilesCommon FilesRealUpdate_OBrealsched.exe» -osboot
O4 — HKLM..Run: [AppleSyncNotifier] C:Program FilesCommon FilesAppleMobile Device SupportbinAppleSyncNotifier.exe
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [SweetIM] C:Program FilesSweetIMMessengerSweetIM.exe
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [AdobeAAMUpdater-1.0] «C:Program FilesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe»
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeQTTask.exe» -atboottime
O4 — HKLM..Run: [iTunesHelper] «C:Program FilesiTunesiTunesHelper.exe»
O4 — HKLM..Run: [egui] «C:Program FilesESETESET NOD32 Antivirusegui.exe» /hide /waitservice
O4 — HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exe
O4 — HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe
O4 — HKCU..Run: [ICQ] ~»C:Program FilesICQ7.2ICQ.exe» silent loginmode=4
O4 — HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘NETWORK SERVICE’)
O4 — Startup: Adobe Gamma.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~3Office12EXCEL.EXE/3000
O8 — Extra context menu item: Поиск@Mail.Ru — res://c:program filesmail.rusputnikMailRuSputnik.dll/282
O8 — Extra context menu item: Словари@Mail.Ru — res://c:program filesmail.rusputnikMailRuSputnik.dll/283
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0binssv.dll
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 — Extra button: Альбом клипов HP — {58ECB495-38F0-49cb-A538-10282ABF65E7} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 — Extra button: Расширенный выбор HP — {700259D7-1666-479a-93B1-3250410481E8} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 — Extra button: ICQ7.2 — {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} — C:Program FilesICQ7.2ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ7.2 — {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} — C:Program FilesICQ7.2ICQ.exe
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:PROGRA~1SkypePhoneIEPluginSKYPEI~1.DLL
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~3Office12REFIEBAR.DLL
O18 — Protocol: base64 — {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} — C:Program FilesGet-Styles 2.0ietdataprotocol.dll
O18 — Protocol: chrome — {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} — C:Program FilesGet-Styles 2.0ietdataprotocol.dll
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:Program FilesMicrosoft OfficeOffice12GrooveSystemServices.dll
O18 — Protocol: prox — {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} — C:Program FilesGet-Styles 2.0ietdataprotocol.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — AppInit_DLLs: C:PROGRA~1GoogleGOOGLE~4GOEC62~1.DLL
O22 — SharedTaskScheduler: Component Categories cache daemon — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:Windowssystem32browseui.dll
O23 — Service: Apple Mobile Device — Apple Inc. — C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
O23 — Service: Служба Bonjour (Bonjour Service) — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: @dfsrres.dll,-101 (DFSR) — Корпорация Майкрософт — C:Windowssystem32DFSR.exe
O23 — Service: ESET HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe
O23 — Service: ESET Service (ekrn) — ESET — C:Program FilesESETESET NOD32 Antivirusekrn.exe
O23 — Service: FLEXnet Licensing Service — Macrovision Europe Ltd. — C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 — Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) — Google — C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe
O23 — Service: Служба Google Update (gupdate1c9cbd35cdc840) (gupdate1c9cbd35cdc840) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
O23 — Service: Event Log Watch (LogWatch) — CA — C:CA_LICLogWatNT.exe
O23 — Service: MSCSPTISRV — Sony Corporation — C:Program FilesCommon FilesSony SharedAvLibMSCSPTISRV.exe
O23 — Service: Nero BackItUp Scheduler 4.0 — Unknown owner — C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe (file missing)
O23 — Service: Sony Ericsson OMSI download service (OMSI download service) — Unknown owner — C:Program FilesSony EricssonSony Ericsson PC SuiteSupServ.exe
O23 — Service: PACSPTISVR — Unknown owner — C:Program FilesCommon FilesSony SharedAvLibPACSPTISVR.exe
O23 — Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) — Protection Technology (StarForce) — C:Windowssystem32sfrem01.exe
O23 — Service: SonicStage Back-End Service — Sony Corporation — C:Program FilesCommon FilesSony SharedAvLibSsBeSvc.exe
O23 — Service: Sony SPTI Service (SPTISRV) — Sony Corporation — C:Program FilesCommon FilesSony SharedAvLibSPTISRV.exe
O23 — Service: SonicStage SCSI Service (SSScsiSV) — Sony Corporation — C:Program FilesCommon FilesSony SharedAvLibSSScsiSV.exe
O23 — Service: Start BT in service — Unknown owner — C:Program FilesIVT CorporationBlueSoleilStartSkysolSvc.exe
O23 — Service: VAIO Entertainment TV Device Arbitration Service — Sony Corporation — C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCsVzHardwareResourceManagerVzHardwareResourceManager.exe
O23 — Service: VAIO Event Service — Sony Corporation — C:Program FilessonyVAIO Event ServiceVESMgr.exe
O23 — Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerVMISrv.exe
O23 — Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe
O23 — Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe
O23 — Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformVmGateway.exe
O23 — Service: VAIO Media Content Collection (VAIOMediaPlatform-UCLS-AppServer) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerUCLS.exe
O23 — Service: VAIO Media Content Collection (HTTP) (VAIOMediaPlatform-UCLS-HTTP) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe
O23 — Service: VAIO Media Content Collection (UPnP) (VAIOMediaPlatform-UCLS-UPnP) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe
O23 — Service: VAIO Entertainment UPnP Client Adapter (Vcsw) — Sony Corporation — C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVCSWVCSW.exe
O23 — Service: VAIO Entertainment Database Service (VzCdbSvc) — Sony Corporation — C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCdbVzCdbSvc.exe
O23 — Service: VAIO Entertainment File Import Service (VzFw) — Sony Corporation — C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCdbVzFw.exe
O23 — Service: XAudioService — Conexant Systems, Inc. — C:Windowssystem32DRIVERSxaudio.exe

—
End of file — 15677 bytes

======Scheduled tasks folder======

C:WindowstasksGoogleUpdateTaskMachineCore.job
C:WindowstasksGoogleUpdateTaskMachineUA.job
C:WindowstasksUser_Feed_Synchronization-{6FDA5319-9A9C-4106-9D39-8D46B5B01DA9}.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips — C:Program FilesHPSmart Web Printinghpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO — C:Program FilesAskBarDisbarbinaskBar.dll [2008-09-29 325000]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) — C:PROGRA~1SkypePhoneIEPluginSKYPEI~1.DLL [2007-02-09 751144]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer — C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll [2009-05-03 312928]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0binssv.dll [2007-03-06 501384]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — c:program filesmail.rusputnikMailRuSputnik.dll [2009-07-14 826032]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{963B125B-8B21-49A2-A3A8-E37092276531}]
TimerBHO Class — C:Program FilesGet-Styles 2.0utilsupdatebho.dll [2009-12-01 125952]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9B5FB65F-631E-4564-ABF2-AD71845B28E0}]
WitBHO Class — C:Program FilesGet-Styles 2.0iejsloader.dll [2010-05-31 226016]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class — C:UsersАдминAppDataRoamingMicrosoftInternet Explorerqipsearchbar.dll [2009-07-14 150768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper — C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll [2009-10-19 1345336]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — c:program filesmail.rusputnikMailRuSputnik.dll [2009-07-14 826032]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2009-10-27 1014520]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} — Ask Toolbar — C:Program FilesAskBarDisbarbinaskBar.dll [2008-09-29 325000]
{EEE6C35B-6118-11DC-9C72-001320C79847} — SweetIM Toolbar for Internet Explorer — C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll [2009-10-19 1345336]
{5BCDC9E9-A980-4B53-B2E8-60CFF484DA61} — Get-Styles toolbar v3 — C:Program FilesGet-Styles 2.0ietoolbar.dll [2010-05-31 130272]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«Windows Defender»=C:Program FilesWindows DefenderMSASCui.exe [2008-01-19 1008184]
«IgfxTray»=C:Windowssystem32igfxtray.exe [2007-01-24 98304]
«HotKeysCmds»=C:Windowssystem32hkcmd.exe [2007-01-24 106496]
«Persistence»=C:Windowssystem32igfxpers.exe [2007-01-24 81920]
«RtHDVCpl»=C:WindowsRtHDVCpl.exe [2007-02-06 4317184]
«Apoint»=C:Program FilesApointApoint.exe [2007-01-12 118784]
«ISBMgr.exe»=C:Program FilesSonyISB UtilityISBMgr.exe [2007-01-22 321656]
«GrooveMonitor»=C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2008-10-25 31072]
«Google Desktop Search»=C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe [2009-12-21 30192]
«Adobe Photo Downloader»=C:Program FilesAdobePhotoshop Album Starter Edition3.2Appsapdproxy.exe [2007-03-09 63712]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2004-11-02 32768]
«TkBellExe»=C:Program FilesCommon FilesRealUpdate_OBrealsched.exe [2009-05-03 198160]
«AppleSyncNotifier»=C:Program FilesCommon FilesAppleMobile Device SupportbinAppleSyncNotifier.exe [2009-08-13 177440]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2009-07-14 7975608]
«SweetIM»=C:Program FilesSweetIMMessengerSweetIM.exe [2009-10-20 111928]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-10-15 39792]
«AdobeAAMUpdater-1.0″=C:Program FilesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe [2010-05-26 500208]
«QuickTime Task»=C:Program FilesQuickTimeQTTask.exe [2010-03-18 421888]
«iTunesHelper»=C:Program FilesiTunesiTunesHelper.exe [2010-06-15 141624]
«egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe [2010-04-07 2145000]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ehTray.exe»=C:WindowsehomeehTray.exe [2008-01-19 125952]
«WMPNSCFG»=C:Program FilesWindows Media PlayerWMPNSCFG.exe [2008-01-19 202240]
«ICQ»=~C:Program FilesICQ7.2ICQ.exe silent loginmode=4 []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregBitTorrent DNA]
C:UsersАдминProgram FilesDNAbtdna.exe [2009-11-15 323392]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregHP Software Update]
C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2007-03-11 49152]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNeroCheck]
C:Windowssystem32NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSeaMonkey Quick Launch]
C:Program Filesmozilla.orgSeaMonkeySeaMonkey.exe [2007-11-28 151552]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSony Ericsson PC Suite]
C:Program FilesSony EricssonSony Ericsson PC SuiteSEPCSuite.exe [2009-09-24 434176]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregVKontakte]
C:Program FilesAgent VkontakteAgentVkontakte.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Canon LBP2900 Окно состояния.lnk]
C:WindowsSystem32spooldriversw32x863CNAB4LAK.EXE [2007-01-16 50848]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:PROGRA~1HPDIGITA~1binhpqtra08.exe [2007-03-11 210520]

C:UsersАдминAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
Adobe Gamma.lnk — C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLs»=»C:PROGRA~1GoogleGOOGLE~4GOEC62~1.DLL»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
C:Windowssystem32igfxdev.dll [2007-01-24 212992]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyVESWinlogon]
C:Windowssystem32VESWinlogon.dll [2007-02-13 98304]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfPf]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfRd]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfSvc]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfUsbccidDriver]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«EnableLUA»=0
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«EnableUIADesktopToggle»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«BindDirectlyToPropertySetStorage»=0

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«C:Program FilesBitTorrentbittorrent.exe»=»C:Program FilesBitTorrentbittorrent.exe:*:Enabled:BitTorrent»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]

======List of files/folders created in the last 1 months======

2010-08-06 16:47:22 —-D—- C:_OTM
2010-08-06 16:03:00 —-D—- C:Program Filestrend micro
2010-08-06 16:02:58 —-D—- C:rsit
2010-08-06 15:10:26 —-D—- C:Avenger
2010-08-06 15:10:26 —-A—- C:avenger.txt
2010-08-06 13:48:20 —-A—- C:WindowsFreshOffice CRM Uninstall Log.txt
2010-08-06 13:14:27 —-D—- C:Program FilesDef Group
2010-08-06 13:03:00 —-D—- C:ProgramDataESET
2010-08-06 13:00:58 —-D—- C:UsersАдминAppDataRoamingnod32 updater
2010-07-09 16:11:28 —-D—- C:Program FilesiPod
2010-07-09 16:11:24 —-D—- C:ProgramData{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-07-09 16:11:24 —-D—- C:Program FilesiTunes
2010-07-07 11:57:33 —-D—- C:Windowspss
2010-07-07 11:26:35 —-D—- C:Program FilesCCleaner

======List of files/folders modified in the last 1 months======

2010-08-06 16:59:52 —-D—- C:WindowsTemp
2010-08-06 16:57:50 —-D—- C:Windowstracing
2010-08-06 16:50:06 —-D—- C:Windows
2010-08-06 16:03:00 —-RD—- C:Program Files
2010-08-06 15:15:08 —-D—- C:UsersАдминAppDataRoamingICQ
2010-08-06 15:10:33 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2010-08-06 15:10:26 —-D—- C:Windowssystem32drivers
2010-08-06 14:53:21 —-D—- C:WindowsSystem32
2010-08-06 13:50:57 —-D—- C:Program FilesGoogle
2010-08-06 13:49:02 —-D—- C:Windowssystem32Tasks
2010-08-06 13:47:49 —-D—- C:ProgramDataGoogle
2010-08-06 13:47:27 —-SHD—- C:WindowsInstaller
2010-08-06 13:47:27 —-D—- C:UsersАдминAppDataRoamingGoogle
2010-08-06 13:45:14 —-D—- C:WindowsPrefetch
2010-08-06 13:44:48 —-D—- C:Windowsinf
2010-08-06 13:44:16 —-D—- C:Program FilesCommon FilesACD Systems
2010-08-06 13:44:15 —-HD—- C:ProgramData
2010-08-06 13:41:49 —-D—- C:Program FilesWebMoney Advisor
2010-08-06 13:39:48 —-D—- C:UsersАдминAppDataRoamingYandex
2010-08-06 13:39:24 —-RSD—- C:WindowsFonts
2010-08-06 13:37:43 —-D—- C:Program FilesMozilla Firefox
2010-08-06 12:54:21 —-D—- C:Program FilesESET
2010-08-06 12:52:53 —-D—- C:Windowssystem32catroot
2010-08-06 12:50:07 —-D—- C:UsersАдминAppDataRoamingBitTorrent
2010-08-06 00:00:36 —-SHD—- C:System Volume Information
2010-08-03 18:44:26 —-A—- C:Windowssystem32PerfStringBackup.INI
2010-08-03 00:37:50 —-D—- C:UsersАдминAppDataRoamingApple Computer
2010-07-25 15:23:59 —-D—- C:UsersАдминAppDataRoamingDNA
2010-07-19 02:41:44 —-D—- C:Windowssystem32catroot2
2010-07-09 16:11:26 —-D—- C:Program FilesCommon FilesApple
2010-07-09 16:05:14 —-D—- C:Program FilesQuickTime
2010-07-09 15:55:42 —-D—- C:Program FilesBonjour
2010-07-09 15:46:43 —-D—- C:Program FilesSafari
2010-07-07 20:31:35 —-D—- C:WindowsMinidump
2010-07-07 20:31:35 —-D—- C:WindowsDebug

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTHidEnum;Bluetooth HID Enumerator; C:WindowsSystem32Driversvbtenum.sys [2007-03-05 20880]
R0 BTHidMgr;Bluetooth HID Manager Service; C:WindowsSystem32DriversBTHidMgr.sys [2007-03-05 35600]
R0 prohlp02;StarForce Protection Helper Driver v2; C:WindowsSystem32driversprohlp02.sys [2004-01-26 95552]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:WindowsSystem32driversprosync1.sys [2003-09-06 6944]
R0 PxHelp20;PxHelp20; C:WindowsSystem32DriversPxHelp20.sys [2007-01-09 43528]
R0 sfhlp01;StarForce Protection Helper Driver; C:WindowsSystem32driverssfhlp01.sys [2003-12-01 4832]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:Windowssystem32driverssfhlp02.sys [2006-05-10 6656]
R0 sfsync04;StarForce Protection Synchronization Driver (version 4.x); C:Windowssystem32driverssfsync04.sys [2006-05-10 52224]
R1 DMICall;Sony DMI Call service; C:Windowssystem32DRIVERSDMICall.sys [2006-10-18 10216]
R1 ehdrv;ehdrv; C:Windowssystem32DRIVERSehdrv.sys [2010-04-07 114984]
R1 prodrv06;StarForce Protection Environment Driver v6; C:WindowsSystem32driversprodrv06.sys [2004-01-26 52224]
R2 eamonm;eamonm; C:Windowssystem32DRIVERSeamonm.sys [2010-04-07 133512]
R2 epfwwfpr;epfwwfpr; C:Windowssystem32DRIVERSepfwwfpr.sys [2010-04-07 96896]
R2 Hardlock;Hardlock; ??C:Windowssystem32drivershardlock.sys [2004-07-14 676864]
R2 irda;ИК-протокол IrDA; C:Windowssystem32DRIVERSirda.sys [2008-01-19 95744]
R2 mdmxsdk;mdmxsdk; C:Windowssystem32DRIVERSmdmxsdk.sys [2007-01-10 12672]
R2 XAudio;XAudio; C:Windowssystem32DRIVERSxaudio.sys [2007-01-10 8192]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:Windowssystem32DRIVERSApfiltr.sys [2007-01-12 140800]
R3 athr;Atheros Extensible Wireless LAN device driver; C:Windowssystem32DRIVERSathr.sys [2006-12-28 509440]
R3 BlueletAudio;Bluetooth Audio Service; C:Windowssystem32DRIVERSblueletaudio.sys [2007-03-05 34576]
R3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:Windowssystem32DRIVERSBlueletSCOAudio.sys [2007-03-05 27792]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:Windowssystem32DRIVERSGEARAspiWDM.sys [2009-05-18 26600]
R3 HSF_DPV;HSF_DPV; C:Windowssystem32DRIVERSHSX_DPV.sys [2007-01-10 986624]
R3 HSXHWAZL;HSXHWAZL; C:Windowssystem32DRIVERSHSXHWAZL.sys [2007-01-10 206848]
R3 igfx;igfx; C:Windowssystem32DRIVERSigdkmd32.sys [2007-01-24 1478144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:Windowssystem32driversRTKVHDA.sys [2007-02-06 1668456]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:Windowssystem32DRIVERSseehcri.sys [2008-01-09 27632]
R3 SNC;Sony Firmware Extension Parser Device; C:WindowsSystem32DriversSonyNC.sys [2007-02-06 27520]
R3 ti21sony;ti21sony; C:Windowssystem32driversti21sony.sys [2007-02-08 807424]
R3 VComm;Virtual Serial port driver; C:Windowssystem32DRIVERSVComm.sys [2007-03-05 34448]
R3 VcommMgr;Bluetooth VComm Manager Service; C:WindowsSystem32DriversVcommMgr.sys [2007-03-05 44304]
R3 winachsf;winachsf; C:Windowssystem32DRIVERSHSX_CNXT.sys [2007-01-10 659968]
R3 WUDFRd;WUDFRd; C:Windowssystem32DRIVERSWUDFRd.sys [2008-01-19 83328]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:Windowssystem32DRIVERSyk60x86.sys [2007-01-29 195072]
S0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:Windowssystem32driverssfdrv01.sys [2006-05-10 51200]
S3 BT;Bluetooth PAN Network Adapter; C:Windowssystem32DRIVERSbtnetdrv.sys [2007-03-05 18320]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:WindowsSystem32Driversbtcusb.sys [2007-03-05 39184]
S3 Dot4;Драйвер MS IEEE-1284.4; C:Windowssystem32DRIVERSDot4.sys [2008-01-19 131584]
S3 Dot4Print;Драйвер класса принтеров для IEEE-1284.4; C:Windowssystem32DRIVERSDot4Prt.sys [2008-01-19 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:Windowssystem32DRIVERSdot4usb.sys [2008-01-19 36864]
S3 drmkaud;Звуковой дешифратор DRM ядра системы; C:Windowssystem32driversdrmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Драйвер функции UAA для службы High Definition Audio (Microsoft), версия 1.1; C:Windowssystem32driversHdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:Windowssystem32DRIVERSVSTAZL3.SYS [2006-11-02 200704]
S3 irsir;Драйвер для инфракрасного последовательного порта Microsoft; C:Windowssystem32DRIVERSirsir.sys [2008-01-19 20992]
S3 MSKSSRV;Представитель служб потоков Microsoft; C:Windowssystem32driversMSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Посредник синхронизации потоков Microsoft; C:Windowssystem32driversMSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Представитель диспетчера качества потоков Microsoft; C:Windowssystem32driversMSPQM.sys [2008-01-19 5504]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:Windowssystem32driversMSTEE.sys [2008-01-19 6016]
S3 NETw3v32;Драйвер адаптера Intel(R) PRO/Wireless 3945ABG для 32-разрядной версии Windows Vista; C:Windowssystem32DRIVERSNETw3v32.sys [2007-01-24 1786880]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WindowsSystem32DriversRootMdm.sys [2008-01-19 8192]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:Windowssystem32DRIVERSs116bus.sys [2007-04-03 83336]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:Windowssystem32DRIVERSs116mdfl.sys [2007-04-03 15112]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:Windowssystem32DRIVERSs116mdm.sys [2007-04-03 108680]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSs116mgmt.sys [2007-04-03 100488]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:Windowssystem32DRIVERSs116nd5.sys [2007-04-03 23176]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:Windowssystem32DRIVERSs116obex.sys [2007-04-03 98696]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:Windowssystem32DRIVERSs116unic.sys [2007-04-03 99080]
S3 s117bus;Sony Ericsson Device 117 driver (WDM); C:Windowssystem32DRIVERSs117bus.sys [2007-06-25 82984]
S3 s117mdfl;Sony Ericsson Device 117 USB WMC Modem Filter; C:Windowssystem32DRIVERSs117mdfl.sys [2007-06-25 14888]
S3 s117mdm;Sony Ericsson Device 117 USB WMC Modem Driver; C:Windowssystem32DRIVERSs117mdm.sys [2007-06-25 108456]
S3 s117mgmt;Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSs117mgmt.sys [2007-06-25 100264]
S3 s117nd5;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS); C:Windowssystem32DRIVERSs117nd5.sys [2007-06-25 22952]
S3 s117obex;Sony Ericsson Device 117 USB WMC OBEX Interface; C:Windowssystem32DRIVERSs117obex.sys [2007-06-25 98344]
S3 s117unic;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM); C:Windowssystem32DRIVERSs117unic.sys [2007-06-25 98856]
S3 s816bus;Sony Ericsson Device 816 driver (WDM); C:Windowssystem32DRIVERSs816bus.sys [2007-06-19 81832]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter; C:Windowssystem32DRIVERSs816mdfl.sys [2007-06-19 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver; C:Windowssystem32DRIVERSs816mdm.sys [2007-06-19 107304]
S3 s816mgmt;Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSs816mgmt.sys [2007-06-19 99112]
S3 s816nd5;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS); C:Windowssystem32DRIVERSs816nd5.sys [2007-06-19 21928]
S3 s816obex;Sony Ericsson Device 816 USB WMC OBEX Interface; C:Windowssystem32DRIVERSs816obex.sys [2007-06-19 97320]
S3 s816unic;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM); C:Windowssystem32DRIVERSs816unic.sys [2007-06-19 97704]
S3 ss_bus;Samsung Mobile USB Device 1.0 driver (WDM); C:Windowssystem32DRIVERSss_bus.sys [2004-09-17 52384]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:Windowssystem32DRIVERSss_mdfl.sys [2004-09-17 6064]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:Windowssystem32DRIVERSss_mdm.sys [2004-09-17 84512]
S3 usbscan;Драйвер USB-сканера; C:Windowssystem32DRIVERSusbscan.sys [2008-01-19 35328]
S3 w810bus;Sony Ericsson W810 Driver driver (WDM); C:Windowssystem32DRIVERSw810bus.sys [2006-02-20 58288]
S3 w810mdfl;Sony Ericsson W810 USB WMC Modem Filter; C:Windowssystem32DRIVERSw810mdfl.sys [2006-02-20 8336]
S3 w810mdm;Sony Ericsson W810 USB WMC Modem Driver; C:Windowssystem32DRIVERSw810mdm.sys [2006-02-20 94064]
S3 w810mgmt;Sony Ericsson W810 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSw810mgmt.sys [2006-02-20 85408]
S3 w810obex;Sony Ericsson W810 USB WMC OBEX Interface; C:Windowssystem32DRIVERSw810obex.sys [2006-02-20 83344]
S3 WpdUsb;WpdUsb; C:Windowssystem32DRIVERSwpdusb.sys [2009-10-01 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe [2010-06-10 144176]
R2 Bonjour Service;Служба Bonjour; C:Program FilesBonjourmDNSResponder.exe [2010-05-18 345376]
R2 ekrn;ESET Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2010-04-07 810120]
R2 hpqddsvc;Служба HP CUE DeviceDiscovery; C:Windowssystem32svchost.exe [2008-01-19 21504]
R2 Irmon;@%SystemRoot%System32irmon.dll,-2000; C:Windowssystem32svchost.exe [2008-01-19 21504]
R2 LogWatch;Event Log Watch; C:CA_LICLogWatNT.exe [2007-12-15 75016]
R2 MSSQL$VAIO_VEDB;SQL Server (VAIO_VEDB); C:Program FilesMicrosoft SQL ServerMSSQL.1MSSQLBinnsqlservr.exe [2009-05-27 29262680]
R2 Net Driver HPZ12;Net Driver HPZ12; C:WindowsSystem32svchost.exe [2008-01-19 21504]
R2 OMSI download service;Sony Ericsson OMSI download service; C:Program FilesSony EricssonSony Ericsson PC SuiteSupServ.exe [2009-04-30 90112]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WindowsSystem32svchost.exe [2008-01-19 21504]
R2 SQLBrowser;SQL Server Browser; C:Program FilesMicrosoft SQL Server90Sharedsqlbrowser.exe [2008-11-24 239968]
R2 SQLWriter;SQL Server VSS Writer; C:Program FilesMicrosoft SQL Server90Sharedsqlwriter.exe [2008-11-24 87904]
R2 VAIO Event Service;VAIO Event Service; C:Program FilessonyVAIO Event ServiceVESMgr.exe [2007-02-13 182392]
R2 VzCdbSvc;VAIO Entertainment Database Service; C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCdbVzCdbSvc.exe [2006-11-28 172032]
R2 VzFw;VAIO Entertainment File Import Service; C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCdbVzFw.exe [2006-11-28 135168]
R2 XAudioService;XAudioService; C:Windowssystem32DRIVERSxaudio.exe [2007-01-10 386560]
R3 hpqcxs08;hpqcxs08; C:Windowssystem32svchost.exe [2008-01-19 21504]
R3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2010-06-15 540472]
R3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVCSWVCSW.exe [2006-11-28 274432]
S2 gupdate1c9cbd35cdc840;Служба Google Update (gupdate1c9cbd35cdc840); C:Program FilesGoogleUpdateGoogleUpdate.exe [2009-05-03 133104]
S2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe []
S2 sfrem01;SF FrontLine Drivers Auto Removal (v1); C:Windowssystem32sfrem01.exe [2006-05-10 353912]
S3 EhttpSrv;ESET HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2010-04-07 33560]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2008-09-23 654848]
S3 FontCache;@%systemroot%system32FntCache.dll,-100; C:Windowssystem32svchost.exe [2008-01-19 21504]
S3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589; C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe [2009-12-21 30192]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-04-30 182768]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe [2004-10-22 73728]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2008-10-25 65888]
S3 MSCSPTISRV;MSCSPTISRV; C:Program FilesCommon FilesSony SharedAvLibMSCSPTISRV.exe [2006-12-14 45056]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 PACSPTISVR;PACSPTISVR; C:Program FilesCommon FilesSony SharedAvLibPACSPTISVR.exe [2006-12-14 57344]
S3 SonicStage Back-End Service;SonicStage Back-End Service; C:Program FilesCommon FilesSony SharedAvLibSsBeSvc.exe [2007-01-24 112184]
S3 SPTISRV;Sony SPTI Service; C:Program FilesCommon FilesSony SharedAvLibSPTISRV.exe [2006-12-14 69632]
S3 SSScsiSV;SonicStage SCSI Service; C:Program FilesCommon FilesSony SharedAvLibSSScsiSV.exe [2007-01-24 75320]
S3 Start BT in service;Start BT in service; C:Program FilesIVT CorporationBlueSoleilStartSkysolSvc.exe [2007-04-21 52080]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCsVzHardwareResourceManagerVzHardwareResourceManager.exe [2007-01-10 73728]
S3 VAIOMediaPlatform-IntegratedServer-AppServer;VAIO Media Integrated Server; C:Program FilessonyVAIO Media Integrated ServerVMISrv.exe [2007-01-16 2523136]
S3 VAIOMediaPlatform-IntegratedServer-HTTP;VAIO Media Integrated Server (HTTP); C:Program FilessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe [2007-01-08 397312]
S3 VAIOMediaPlatform-IntegratedServer-UPnP;VAIO Media Integrated Server (UPnP); C:Program FilessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe [2007-01-16 1089536]
S3 VAIOMediaPlatform-Mobile-Gateway;VAIO Media Gateway Server; C:Program FilessonyVAIO Media Integrated ServerPlatformVmGateway.exe [2007-01-08 491520]
S3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection; C:Program FilessonyVAIO Media Integrated ServerUCLS.exe [2007-01-10 745472]
S3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP); C:Program FilessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe [2007-01-08 397312]
S3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP); C:Program FilessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe [2007-01-16 1089536]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:Program FilesMicrosoft SQL Server90Sharedsqladhlp90.exe [2008-11-24 45408]

EOF
6 августа, 2010 в 1:27 пп #30558
Helper
Participant
- Темы:19
- Сообщений:712
Запустите OTM (в ОС Windows Vista необходимо запускать через правую кн. мыши от имени администратора)
временно выключите антивирус, firewall и другое защитное программное обеспечение. Выделите и скопируйте текст ниже (Ctrl+C)
```
:Processes

explorer.exe



:Services



:Files

C:Program FilesWindows DefenderMSASCui.exe

C:Program FilesWindows Defender



:Reg

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]

"Windows Defender"=-



:Commands

[purity]

[emptytemp]

[start explorer]

[Reboot]
```
В OTM под панелью «Paste Instructions for Items to be Moved» (под желтой панелью) вставьте скопированный текст и нажмите кнопку «MoveIt!».

Компьютер перезагрузится.

Прочитайте описание программы Malwarebytes Anti-malware (MBAM).
Скачайте и выполните сканирование вашего компьютера. Удалите всё что будет найдено.
В конце работы будет показан лог, его содержимое вставьте в ваш ответ.После повторить логи РСИТ.
6 августа, 2010 в 1:36 пп #30564
Helper
Participant
- Темы:19
- Сообщений:712
ProxyServer = 80:80
Сами писали?
6 августа, 2010 в 1:46 пп #30565
Аноним
Гость
- Темы:532
- Сообщений:1553
сама ничего не писала )))
6 августа, 2010 в 1:57 пп #30566
Helper
Participant
- Темы:19
- Сообщений:712
Тогда перед созданием логов:
Запустите HijackThis, для этого кликните Пуск, Выполнить, введите
```
C:Program Filestrend microАдмин.exe
```
и нажмите Enter.
Откроется главное меню программы HijackThis.
Кликните по кнопке Do a system scan only.
Далее отметьте галочкой (слева) следующие строки, если они присутствуют:
```
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = 80:80

R3 - URLSearchHook: (no name) - - (no file)
```
Закройте все запущенные программы (включая InternetExplorer) и окна Windows.
Кликните по кнопке Fix и подтвердите свои действия выбрав YES.Перезагрузите компьютер.
6 августа, 2010 в 2:11 пп #30567
Аноним
Гость
- Темы:532
- Сообщений:1553
МВАМ еще сканирует. как закончит, все сделаю )
6 августа, 2010 в 3:07 пп #30568
Аноним
Гость
- Темы:532
- Сообщений:1553
МВАМ выдал:
инф. объектов 0
время 19.34
Run-Time eroe ’13
Type mismatch
‘
запустила программу HijackThis. нашла нужные строчки. отметила, перезагрузилась.
после этого вылезли окна:
1. AppleSyncNotifier.exeм не запущен. т.к. не удалось найти компонент CoreFoundatio.dll
2. StarForce Protection заблокирован из-за пробем совместимости
3. Консоль учетных записей пользователей отключилась.

логи:
log.txt

Logfile of random’s system information tool 1.08 (written by random/random)
Run by Админ at 2010-08-06 19:06:46
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 14 GB (13%) free of 105 GB
Total RAM: 2037 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:07:04, on 06.08.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program FilesWindows DefenderMSASCui.exe
C:WindowsSystem32hkcmd.exe
C:WindowsSystem32igfxpers.exe
C:Program FilesApointApoint.exe
C:Program FilessonyISB UtilityISBMgr.exe
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:Program FilesApointApMsgFwd.exe
C:Windowssystem32taskeng.exe
C:Program FilesSweetIMMessengerSweetIM.exe
C:Program FilesSonyWireless Switch Setting UtilitySwitcher.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesESETESET NOD32 Antivirusegui.exe
C:Windowsehomeehtray.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Program FilesApointApvfb.exe
C:Program FilesApointApntex.exe
C:WindowsSystem32mobsync.exe
C:Program FilesICQ7.2ICQ.exe
C:Program FilesWindows Media Playerwmplayer.exe
C:Windowsehomeehmsas.exe
C:Windowssystem32wbemunsecapp.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesFlockflockflock.exe
C:Program FilesMozilla Firefoxplugin-container.exe
C:Windowssystem32wuauclt.exe
C:UsersАдминDesktopRSIT.exe
C:Program Filestrend microАдмин.exe
C:Windowssystem32SearchFilterHost.exe

R1 — HKCUSoftwareMicrosoftInternet Explorer,SearchURL = http://yandex.ru/yandsearch?clid=123046&text=%s
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.yandex.ru/?clid=123048
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=123048
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ru.msn.com/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://home.sweetim.com
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru/ie
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = Root: HKCU; Subkey: SoftwareMicrosoftInternet ExplorerSearchUrl; ValueType: string; ValueName: ‘; ValueData: ‘; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — c:program filesmail.rusputnikMailRuSputnik.dll
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
O1 — Hosts: ::1 localhost
O2 — BHO: HP Print Clips — {053F9267-DC04-4294-A72C-58F732D338C0} — C:Program FilesHPSmart Web Printinghpswp_framework.dll
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: AskBar BHO — {201f27d4-3704-41d6-89c1-aa35e39143ed} — C:Program FilesAskBarDisbarbinaskBar.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — C:PROGRA~1SkypePhoneIEPluginSKYPEI~1.DLL
O2 — BHO: RealPlayer Download and Record Plugin for Internet Explorer — {3049C3E9-B461-4BC5-8870-4C09146192CA} — C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0binssv.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — c:program filesmail.rusputnikMailRuSputnik.dll
O2 — BHO: Update Timer — {963B125B-8B21-49A2-A3A8-E37092276531} — C:Program FilesGet-Styles 2.0utilsupdatebho.dll
O2 — BHO: script helper for ie — {9B5FB65F-631E-4564-ABF2-AD71845B28E0} — C:Program FilesGet-Styles 2.0iejsloader.dll
O2 — BHO: QIPBHO — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:UsersАдминAppDataRoamingMicrosoftInternet Explorerqipsearchbar.dll
O2 — BHO: SWEETIE — {EEE6C35C-6118-11DC-9C72-001320C79847} — C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — c:program filesmail.rusputnikMailRuSputnik.dll
O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O3 — Toolbar: Ask Toolbar — {3041d03e-fd4b-44e0-b742-2d9b88305f98} — C:Program FilesAskBarDisbarbinaskBar.dll
O3 — Toolbar: SweetIM Toolbar for Internet Explorer — {EEE6C35B-6118-11DC-9C72-001320C79847} — C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll
O3 — Toolbar: Get-Styles toolbar v3 — {5BCDC9E9-A980-4B53-B2E8-60CFF484DA61} — C:Program FilesGet-Styles 2.0ietoolbar.dll
O4 — HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 — HKLM..Run: [IgfxTray] C:Windowssystem32igfxtray.exe
O4 — HKLM..Run: [HotKeysCmds] C:Windowssystem32hkcmd.exe
O4 — HKLM..Run: [Persistence] C:Windowssystem32igfxpers.exe
O4 — HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 — HKLM..Run: [Apoint] C:Program FilesApointApoint.exe
O4 — HKLM..Run: [ISBMgr.exe] «C:Program FilesSonyISB UtilityISBMgr.exe»
O4 — HKLM..Run: [GrooveMonitor] «C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe»
O4 — HKLM..Run: [Google Desktop Search] «C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe» /startup
O4 — HKLM..Run: [Adobe Photo Downloader] «C:Program FilesAdobePhotoshop Album Starter Edition3.2Appsapdproxy.exe»
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [TkBellExe] «C:Program FilesCommon FilesRealUpdate_OBrealsched.exe» -osboot
O4 — HKLM..Run: [AppleSyncNotifier] C:Program FilesCommon FilesAppleMobile Device SupportbinAppleSyncNotifier.exe
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [SweetIM] C:Program FilesSweetIMMessengerSweetIM.exe
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [AdobeAAMUpdater-1.0] «C:Program FilesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe»
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeQTTask.exe» -atboottime
O4 — HKLM..Run: [iTunesHelper] «C:Program FilesiTunesiTunesHelper.exe»
O4 — HKLM..Run: [egui] «C:Program FilesESETESET NOD32 Antivirusegui.exe» /hide /waitservice
O4 — HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exe
O4 — HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe
O4 — HKCU..Run: [ICQ] ~»C:Program FilesICQ7.2ICQ.exe» silent loginmode=4
O4 — HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘NETWORK SERVICE’)
O4 — Startup: Adobe Gamma.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~3Office12EXCEL.EXE/3000
O8 — Extra context menu item: Поиск@Mail.Ru — res://c:program filesmail.rusputnikMailRuSputnik.dll/282
O8 — Extra context menu item: Словари@Mail.Ru — res://c:program filesmail.rusputnikMailRuSputnik.dll/283
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0binssv.dll
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 — Extra button: Альбом клипов HP — {58ECB495-38F0-49cb-A538-10282ABF65E7} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 — Extra button: Расширенный выбор HP — {700259D7-1666-479a-93B1-3250410481E8} — C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 — Extra button: ICQ7.2 — {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} — C:Program FilesICQ7.2ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ7.2 — {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} — C:Program FilesICQ7.2ICQ.exe
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:PROGRA~1SkypePhoneIEPluginSKYPEI~1.DLL
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~3Office12REFIEBAR.DLL
O18 — Protocol: base64 — {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} — C:Program FilesGet-Styles 2.0ietdataprotocol.dll
O18 — Protocol: chrome — {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} — C:Program FilesGet-Styles 2.0ietdataprotocol.dll
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:Program FilesMicrosoft OfficeOffice12GrooveSystemServices.dll
O18 — Protocol: prox — {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} — C:Program FilesGet-Styles 2.0ietdataprotocol.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — AppInit_DLLs: C:PROGRA~1GoogleGOOGLE~4GOEC62~1.DLL
O22 — SharedTaskScheduler: Component Categories cache daemon — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:Windowssystem32browseui.dll
O23 — Service: Apple Mobile Device — Apple Inc. — C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
O23 — Service: Служба Bonjour (Bonjour Service) — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: @dfsrres.dll,-101 (DFSR) — Корпорация Майкрософт — C:Windowssystem32DFSR.exe
O23 — Service: ESET HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe
O23 — Service: ESET Service (ekrn) — ESET — C:Program FilesESETESET NOD32 Antivirusekrn.exe
O23 — Service: FLEXnet Licensing Service — Macrovision Europe Ltd. — C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 — Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) — Google — C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe
O23 — Service: Служба Google Update (gupdate1c9cbd35cdc840) (gupdate1c9cbd35cdc840) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
O23 — Service: Event Log Watch (LogWatch) — CA — C:CA_LICLogWatNT.exe
O23 — Service: MSCSPTISRV — Sony Corporation — C:Program FilesCommon FilesSony SharedAvLibMSCSPTISRV.exe
O23 — Service: Nero BackItUp Scheduler 4.0 — Unknown owner — C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe (file missing)
O23 — Service: Sony Ericsson OMSI download service (OMSI download service) — Unknown owner — C:Program FilesSony EricssonSony Ericsson PC SuiteSupServ.exe
O23 — Service: PACSPTISVR — Unknown owner — C:Program FilesCommon FilesSony SharedAvLibPACSPTISVR.exe
O23 — Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) — Protection Technology (StarForce) — C:Windowssystem32sfrem01.exe
O23 — Service: SonicStage Back-End Service — Sony Corporation — C:Program FilesCommon FilesSony SharedAvLibSsBeSvc.exe
O23 — Service: Sony SPTI Service (SPTISRV) — Sony Corporation — C:Program FilesCommon FilesSony SharedAvLibSPTISRV.exe
O23 — Service: SonicStage SCSI Service (SSScsiSV) — Sony Corporation — C:Program FilesCommon FilesSony SharedAvLibSSScsiSV.exe
O23 — Service: Start BT in service — Unknown owner — C:Program FilesIVT CorporationBlueSoleilStartSkysolSvc.exe
O23 — Service: VAIO Entertainment TV Device Arbitration Service — Sony Corporation — C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCsVzHardwareResourceManagerVzHardwareResourceManager.exe
O23 — Service: VAIO Event Service — Sony Corporation — C:Program FilessonyVAIO Event ServiceVESMgr.exe
O23 — Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerVMISrv.exe
O23 — Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe
O23 — Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe
O23 — Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformVmGateway.exe
O23 — Service: VAIO Media Content Collection (VAIOMediaPlatform-UCLS-AppServer) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerUCLS.exe
O23 — Service: VAIO Media Content Collection (HTTP) (VAIOMediaPlatform-UCLS-HTTP) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe
O23 — Service: VAIO Media Content Collection (UPnP) (VAIOMediaPlatform-UCLS-UPnP) — Sony Corporation — C:Program FilessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe
O23 — Service: VAIO Entertainment UPnP Client Adapter (Vcsw) — Sony Corporation — C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVCSWVCSW.exe
O23 — Service: VAIO Entertainment Database Service (VzCdbSvc) — Sony Corporation — C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCdbVzCdbSvc.exe
O23 — Service: VAIO Entertainment File Import Service (VzFw) — Sony Corporation — C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCdbVzFw.exe
O23 — Service: XAudioService — Conexant Systems, Inc. — C:Windowssystem32DRIVERSxaudio.exe

—
End of file — 15573 bytes

======Scheduled tasks folder======

C:WindowstasksGoogleUpdateTaskMachineCore.job
C:WindowstasksGoogleUpdateTaskMachineUA.job
C:WindowstasksUser_Feed_Synchronization-{6FDA5319-9A9C-4106-9D39-8D46B5B01DA9}.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips — C:Program FilesHPSmart Web Printinghpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO — C:Program FilesAskBarDisbarbinaskBar.dll [2008-09-29 325000]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) — C:PROGRA~1SkypePhoneIEPluginSKYPEI~1.DLL [2007-02-09 751144]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer — C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll [2009-05-03 312928]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0binssv.dll [2007-03-06 501384]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — c:program filesmail.rusputnikMailRuSputnik.dll [2009-07-14 826032]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{963B125B-8B21-49A2-A3A8-E37092276531}]
TimerBHO Class — C:Program FilesGet-Styles 2.0utilsupdatebho.dll [2009-12-01 125952]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9B5FB65F-631E-4564-ABF2-AD71845B28E0}]
WitBHO Class — C:Program FilesGet-Styles 2.0iejsloader.dll [2010-05-31 226016]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class — C:UsersАдминAppDataRoamingMicrosoftInternet Explorerqipsearchbar.dll [2009-07-14 150768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper — C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll [2009-10-19 1345336]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — c:program filesmail.rusputnikMailRuSputnik.dll [2009-07-14 826032]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2009-10-27 1014520]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} — Ask Toolbar — C:Program FilesAskBarDisbarbinaskBar.dll [2008-09-29 325000]
{EEE6C35B-6118-11DC-9C72-001320C79847} — SweetIM Toolbar for Internet Explorer — C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll [2009-10-19 1345336]
{5BCDC9E9-A980-4B53-B2E8-60CFF484DA61} — Get-Styles toolbar v3 — C:Program FilesGet-Styles 2.0ietoolbar.dll [2010-05-31 130272]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«Windows Defender»=C:Program FilesWindows DefenderMSASCui.exe [2008-01-19 1008184]
«IgfxTray»=C:Windowssystem32igfxtray.exe [2007-01-24 98304]
«HotKeysCmds»=C:Windowssystem32hkcmd.exe [2007-01-24 106496]
«Persistence»=C:Windowssystem32igfxpers.exe [2007-01-24 81920]
«RtHDVCpl»=C:WindowsRtHDVCpl.exe [2007-02-06 4317184]
«Apoint»=C:Program FilesApointApoint.exe [2007-01-12 118784]
«ISBMgr.exe»=C:Program FilesSonyISB UtilityISBMgr.exe [2007-01-22 321656]
«GrooveMonitor»=C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2008-10-25 31072]
«Google Desktop Search»=C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe [2009-12-21 30192]
«Adobe Photo Downloader»=C:Program FilesAdobePhotoshop Album Starter Edition3.2Appsapdproxy.exe [2007-03-09 63712]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2004-11-02 32768]
«TkBellExe»=C:Program FilesCommon FilesRealUpdate_OBrealsched.exe [2009-05-03 198160]
«AppleSyncNotifier»=C:Program FilesCommon FilesAppleMobile Device SupportbinAppleSyncNotifier.exe [2009-08-13 177440]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2009-07-14 7975608]
«SweetIM»=C:Program FilesSweetIMMessengerSweetIM.exe [2009-10-20 111928]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-10-15 39792]
«AdobeAAMUpdater-1.0″=C:Program FilesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe [2010-05-26 500208]
«QuickTime Task»=C:Program FilesQuickTimeQTTask.exe [2010-03-18 421888]
«iTunesHelper»=C:Program FilesiTunesiTunesHelper.exe [2010-06-15 141624]
«egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe [2010-04-07 2145000]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ehTray.exe»=C:WindowsehomeehTray.exe [2008-01-19 125952]
«WMPNSCFG»=C:Program FilesWindows Media PlayerWMPNSCFG.exe [2008-01-19 202240]
«ICQ»=~C:Program FilesICQ7.2ICQ.exe silent loginmode=4 []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregBitTorrent DNA]
C:UsersАдминProgram FilesDNAbtdna.exe [2009-11-15 323392]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregHP Software Update]
C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2007-03-11 49152]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNeroCheck]
C:Windowssystem32NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSeaMonkey Quick Launch]
C:Program Filesmozilla.orgSeaMonkeySeaMonkey.exe [2007-11-28 151552]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSony Ericsson PC Suite]
C:Program FilesSony EricssonSony Ericsson PC SuiteSEPCSuite.exe [2009-09-24 434176]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregVKontakte]
C:Program FilesAgent VkontakteAgentVkontakte.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Canon LBP2900 Окно состояния.lnk]
C:WindowsSystem32spooldriversw32x863CNAB4LAK.EXE [2007-01-16 50848]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:PROGRA~1HPDIGITA~1binhpqtra08.exe [2007-03-11 210520]

C:UsersАдминAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
Adobe Gamma.lnk — C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLs»=»C:PROGRA~1GoogleGOOGLE~4GOEC62~1.DLL»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
C:Windowssystem32igfxdev.dll [2007-01-24 212992]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyVESWinlogon]
C:Windowssystem32VESWinlogon.dll [2007-02-13 98304]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfPf]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfRd]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfSvc]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfUsbccidDriver]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«EnableLUA»=0
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«EnableUIADesktopToggle»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«BindDirectlyToPropertySetStorage»=0

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«C:Program FilesBitTorrentbittorrent.exe»=»C:Program FilesBitTorrentbittorrent.exe:*:Enabled:BitTorrent»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]

======List of files/folders created in the last 1 months======

2010-08-06 16:47:22 —-D—- C:_OTM
2010-08-06 16:03:00 —-D—- C:Program Filestrend micro
2010-08-06 16:02:58 —-D—- C:rsit
2010-08-06 15:10:26 —-D—- C:Avenger
2010-08-06 15:10:26 —-A—- C:avenger.txt
2010-08-06 13:48:20 —-A—- C:WindowsFreshOffice CRM Uninstall Log.txt
2010-08-06 13:14:27 —-D—- C:Program FilesDef Group
2010-08-06 13:03:00 —-D—- C:ProgramDataESET
2010-08-06 13:00:58 —-D—- C:UsersАдминAppDataRoamingnod32 updater
2010-07-09 16:11:28 —-D—- C:Program FilesiPod
2010-07-09 16:11:24 —-D—- C:ProgramData{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-07-09 16:11:24 —-D—- C:Program FilesiTunes
2010-07-07 11:57:33 —-D—- C:Windowspss
2010-07-07 11:26:35 —-D—- C:Program FilesCCleaner

======List of files/folders modified in the last 1 months======

2010-08-06 19:07:05 —-D—- C:Windowstracing
2010-08-06 19:07:05 —-D—- C:WindowsTemp
2010-08-06 18:34:27 —-D—- C:UsersАдминAppDataRoamingICQ
2010-08-06 18:20:46 —-D—- C:Windowssystem32catroot
2010-08-06 18:20:39 —-D—- C:Windowswinsxs
2010-08-06 18:13:24 —-D—- C:Windowssystem32catroot2
2010-08-06 16:50:06 —-D—- C:Windows
2010-08-06 16:03:00 —-RD—- C:Program Files
2010-08-06 15:10:33 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2010-08-06 15:10:26 —-D—- C:Windowssystem32drivers
2010-08-06 14:53:21 —-D—- C:WindowsSystem32
2010-08-06 13:50:57 —-D—- C:Program FilesGoogle
2010-08-06 13:49:02 —-D—- C:Windowssystem32Tasks
2010-08-06 13:47:49 —-D—- C:ProgramDataGoogle
2010-08-06 13:47:27 —-SHD—- C:WindowsInstaller
2010-08-06 13:47:27 —-D—- C:UsersАдминAppDataRoamingGoogle
2010-08-06 13:45:14 —-D—- C:WindowsPrefetch
2010-08-06 13:44:48 —-D—- C:Windowsinf
2010-08-06 13:44:16 —-D—- C:Program FilesCommon FilesACD Systems
2010-08-06 13:44:15 —-HD—- C:ProgramData
2010-08-06 13:41:49 —-D—- C:Program FilesWebMoney Advisor
2010-08-06 13:39:48 —-D—- C:UsersАдминAppDataRoamingYandex
2010-08-06 13:39:24 —-RSD—- C:WindowsFonts
2010-08-06 13:37:43 —-D—- C:Program FilesMozilla Firefox
2010-08-06 12:54:21 —-D—- C:Program FilesESET
2010-08-06 12:50:07 —-D—- C:UsersАдминAppDataRoamingBitTorrent
2010-08-06 00:00:36 —-SHD—- C:System Volume Information
2010-08-03 18:44:26 —-A—- C:Windowssystem32PerfStringBackup.INI
2010-08-03 00:37:50 —-D—- C:UsersАдминAppDataRoamingApple Computer
2010-07-25 15:23:59 —-D—- C:UsersАдминAppDataRoamingDNA
2010-07-09 16:11:26 —-D—- C:Program FilesCommon FilesApple
2010-07-09 16:05:14 —-D—- C:Program FilesQuickTime
2010-07-09 15:55:42 —-D—- C:Program FilesBonjour
2010-07-09 15:46:43 —-D—- C:Program FilesSafari
2010-07-07 20:31:35 —-D—- C:WindowsMinidump
2010-07-07 20:31:35 —-D—- C:WindowsDebug

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTHidEnum;Bluetooth HID Enumerator; C:WindowsSystem32Driversvbtenum.sys [2007-03-05 20880]
R0 BTHidMgr;Bluetooth HID Manager Service; C:WindowsSystem32DriversBTHidMgr.sys [2007-03-05 35600]
R0 prohlp02;StarForce Protection Helper Driver v2; C:WindowsSystem32driversprohlp02.sys [2004-01-26 95552]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:WindowsSystem32driversprosync1.sys [2003-09-06 6944]
R0 PxHelp20;PxHelp20; C:WindowsSystem32DriversPxHelp20.sys [2007-01-09 43528]
R0 sfhlp01;StarForce Protection Helper Driver; C:WindowsSystem32driverssfhlp01.sys [2003-12-01 4832]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:Windowssystem32driverssfhlp02.sys [2006-05-10 6656]
R0 sfsync04;StarForce Protection Synchronization Driver (version 4.x); C:Windowssystem32driverssfsync04.sys [2006-05-10 52224]
R1 DMICall;Sony DMI Call service; C:Windowssystem32DRIVERSDMICall.sys [2006-10-18 10216]
R1 ehdrv;ehdrv; C:Windowssystem32DRIVERSehdrv.sys [2010-04-07 114984]
R1 prodrv06;StarForce Protection Environment Driver v6; C:WindowsSystem32driversprodrv06.sys [2004-01-26 52224]
R2 eamonm;eamonm; C:Windowssystem32DRIVERSeamonm.sys [2010-04-07 133512]
R2 epfwwfpr;epfwwfpr; C:Windowssystem32DRIVERSepfwwfpr.sys [2010-04-07 96896]
R2 Hardlock;Hardlock; ??C:Windowssystem32drivershardlock.sys [2004-07-14 676864]
R2 irda;ИК-протокол IrDA; C:Windowssystem32DRIVERSirda.sys [2008-01-19 95744]
R2 mdmxsdk;mdmxsdk; C:Windowssystem32DRIVERSmdmxsdk.sys [2007-01-10 12672]
R2 XAudio;XAudio; C:Windowssystem32DRIVERSxaudio.sys [2007-01-10 8192]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:Windowssystem32DRIVERSApfiltr.sys [2007-01-12 140800]
R3 athr;Atheros Extensible Wireless LAN device driver; C:Windowssystem32DRIVERSathr.sys [2006-12-28 509440]
R3 BlueletAudio;Bluetooth Audio Service; C:Windowssystem32DRIVERSblueletaudio.sys [2007-03-05 34576]
R3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:Windowssystem32DRIVERSBlueletSCOAudio.sys [2007-03-05 27792]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:Windowssystem32DRIVERSGEARAspiWDM.sys [2009-05-18 26600]
R3 HSF_DPV;HSF_DPV; C:Windowssystem32DRIVERSHSX_DPV.sys [2007-01-10 986624]
R3 HSXHWAZL;HSXHWAZL; C:Windowssystem32DRIVERSHSXHWAZL.sys [2007-01-10 206848]
R3 igfx;igfx; C:Windowssystem32DRIVERSigdkmd32.sys [2007-01-24 1478144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:Windowssystem32driversRTKVHDA.sys [2007-02-06 1668456]
R3 MBAMSwissArmy;MBAMSwissArmy; ??C:Windowssystem32driversmbamswissarmy.sys [2010-04-29 38224]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:Windowssystem32DRIVERSseehcri.sys [2008-01-09 27632]
R3 SNC;Sony Firmware Extension Parser Device; C:WindowsSystem32DriversSonyNC.sys [2007-02-06 27520]
R3 ti21sony;ti21sony; C:Windowssystem32driversti21sony.sys [2007-02-08 807424]
R3 VComm;Virtual Serial port driver; C:Windowssystem32DRIVERSVComm.sys [2007-03-05 34448]
R3 VcommMgr;Bluetooth VComm Manager Service; C:WindowsSystem32DriversVcommMgr.sys [2007-03-05 44304]
R3 winachsf;winachsf; C:Windowssystem32DRIVERSHSX_CNXT.sys [2007-01-10 659968]
R3 WUDFRd;WUDFRd; C:Windowssystem32DRIVERSWUDFRd.sys [2008-01-19 83328]
S0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:Windowssystem32driverssfdrv01.sys [2006-05-10 51200]
S3 BT;Bluetooth PAN Network Adapter; C:Windowssystem32DRIVERSbtnetdrv.sys [2007-03-05 18320]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:WindowsSystem32Driversbtcusb.sys [2007-03-05 39184]
S3 Dot4;Драйвер MS IEEE-1284.4; C:Windowssystem32DRIVERSDot4.sys [2008-01-19 131584]
S3 Dot4Print;Драйвер класса принтеров для IEEE-1284.4; C:Windowssystem32DRIVERSDot4Prt.sys [2008-01-19 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:Windowssystem32DRIVERSdot4usb.sys [2008-01-19 36864]
S3 drmkaud;Звуковой дешифратор DRM ядра системы; C:Windowssystem32driversdrmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Драйвер функции UAA для службы High Definition Audio (Microsoft), версия 1.1; C:Windowssystem32driversHdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:Windowssystem32DRIVERSVSTAZL3.SYS [2006-11-02 200704]
S3 irsir;Драйвер для инфракрасного последовательного порта Microsoft; C:Windowssystem32DRIVERSirsir.sys [2008-01-19 20992]
S3 MSKSSRV;Представитель служб потоков Microsoft; C:Windowssystem32driversMSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Посредник синхронизации потоков Microsoft; C:Windowssystem32driversMSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Представитель диспетчера качества потоков Microsoft; C:Windowssystem32driversMSPQM.sys [2008-01-19 5504]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:Windowssystem32driversMSTEE.sys [2008-01-19 6016]
S3 NETw3v32;Драйвер адаптера Intel(R) PRO/Wireless 3945ABG для 32-разрядной версии Windows Vista; C:Windowssystem32DRIVERSNETw3v32.sys [2007-01-24 1786880]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WindowsSystem32DriversRootMdm.sys [2008-01-19 8192]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:Windowssystem32DRIVERSs116bus.sys [2007-04-03 83336]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:Windowssystem32DRIVERSs116mdfl.sys [2007-04-03 15112]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:Windowssystem32DRIVERSs116mdm.sys [2007-04-03 108680]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSs116mgmt.sys [2007-04-03 100488]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:Windowssystem32DRIVERSs116nd5.sys [2007-04-03 23176]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:Windowssystem32DRIVERSs116obex.sys [2007-04-03 98696]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:Windowssystem32DRIVERSs116unic.sys [2007-04-03 99080]
S3 s117bus;Sony Ericsson Device 117 driver (WDM); C:Windowssystem32DRIVERSs117bus.sys [2007-06-25 82984]
S3 s117mdfl;Sony Ericsson Device 117 USB WMC Modem Filter; C:Windowssystem32DRIVERSs117mdfl.sys [2007-06-25 14888]
S3 s117mdm;Sony Ericsson Device 117 USB WMC Modem Driver; C:Windowssystem32DRIVERSs117mdm.sys [2007-06-25 108456]
S3 s117mgmt;Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSs117mgmt.sys [2007-06-25 100264]
S3 s117nd5;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS); C:Windowssystem32DRIVERSs117nd5.sys [2007-06-25 22952]
S3 s117obex;Sony Ericsson Device 117 USB WMC OBEX Interface; C:Windowssystem32DRIVERSs117obex.sys [2007-06-25 98344]
S3 s117unic;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM); C:Windowssystem32DRIVERSs117unic.sys [2007-06-25 98856]
S3 s816bus;Sony Ericsson Device 816 driver (WDM); C:Windowssystem32DRIVERSs816bus.sys [2007-06-19 81832]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter; C:Windowssystem32DRIVERSs816mdfl.sys [2007-06-19 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver; C:Windowssystem32DRIVERSs816mdm.sys [2007-06-19 107304]
S3 s816mgmt;Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSs816mgmt.sys [2007-06-19 99112]
S3 s816nd5;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS); C:Windowssystem32DRIVERSs816nd5.sys [2007-06-19 21928]
S3 s816obex;Sony Ericsson Device 816 USB WMC OBEX Interface; C:Windowssystem32DRIVERSs816obex.sys [2007-06-19 97320]
S3 s816unic;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM); C:Windowssystem32DRIVERSs816unic.sys [2007-06-19 97704]
S3 ss_bus;Samsung Mobile USB Device 1.0 driver (WDM); C:Windowssystem32DRIVERSss_bus.sys [2004-09-17 52384]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:Windowssystem32DRIVERSss_mdfl.sys [2004-09-17 6064]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:Windowssystem32DRIVERSss_mdm.sys [2004-09-17 84512]
S3 usbscan;Драйвер USB-сканера; C:Windowssystem32DRIVERSusbscan.sys [2008-01-19 35328]
S3 w810bus;Sony Ericsson W810 Driver driver (WDM); C:Windowssystem32DRIVERSw810bus.sys [2006-02-20 58288]
S3 w810mdfl;Sony Ericsson W810 USB WMC Modem Filter; C:Windowssystem32DRIVERSw810mdfl.sys [2006-02-20 8336]
S3 w810mdm;Sony Ericsson W810 USB WMC Modem Driver; C:Windowssystem32DRIVERSw810mdm.sys [2006-02-20 94064]
S3 w810mgmt;Sony Ericsson W810 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSw810mgmt.sys [2006-02-20 85408]
S3 w810obex;Sony Ericsson W810 USB WMC OBEX Interface; C:Windowssystem32DRIVERSw810obex.sys [2006-02-20 83344]
S3 WpdUsb;WpdUsb; C:Windowssystem32DRIVERSwpdusb.sys [2009-10-01 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe [2010-06-10 144176]
R2 Bonjour Service;Служба Bonjour; C:Program FilesBonjourmDNSResponder.exe [2010-05-18 345376]
R2 ekrn;ESET Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2010-04-07 810120]
R2 hpqddsvc;Служба HP CUE DeviceDiscovery; C:Windowssystem32svchost.exe [2008-01-19 21504]
R2 Irmon;@%SystemRoot%System32irmon.dll,-2000; C:Windowssystem32svchost.exe [2008-01-19 21504]
R2 LogWatch;Event Log Watch; C:CA_LICLogWatNT.exe [2007-12-15 75016]
R2 MSSQL$VAIO_VEDB;SQL Server (VAIO_VEDB); C:Program FilesMicrosoft SQL ServerMSSQL.1MSSQLBinnsqlservr.exe [2009-05-27 29262680]
R2 Net Driver HPZ12;Net Driver HPZ12; C:WindowsSystem32svchost.exe [2008-01-19 21504]
R2 OMSI download service;Sony Ericsson OMSI download service; C:Program FilesSony EricssonSony Ericsson PC SuiteSupServ.exe [2009-04-30 90112]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WindowsSystem32svchost.exe [2008-01-19 21504]
R2 SQLBrowser;SQL Server Browser; C:Program FilesMicrosoft SQL Server90Sharedsqlbrowser.exe [2008-11-24 239968]
R2 SQLWriter;SQL Server VSS Writer; C:Program FilesMicrosoft SQL Server90Sharedsqlwriter.exe [2008-11-24 87904]
R2 VAIO Event Service;VAIO Event Service; C:Program FilessonyVAIO Event ServiceVESMgr.exe [2007-02-13 182392]
R2 VzCdbSvc;VAIO Entertainment Database Service; C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCdbVzCdbSvc.exe [2006-11-28 172032]
R2 VzFw;VAIO Entertainment File Import Service; C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCdbVzFw.exe [2006-11-28 135168]
R2 XAudioService;XAudioService; C:Windowssystem32DRIVERSxaudio.exe [2007-01-10 386560]
R3 hpqcxs08;hpqcxs08; C:Windowssystem32svchost.exe [2008-01-19 21504]
R3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2010-06-15 540472]
R3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVCSWVCSW.exe [2006-11-28 274432]
S2 gupdate1c9cbd35cdc840;Служба Google Update (gupdate1c9cbd35cdc840); C:Program FilesGoogleUpdateGoogleUpdate.exe [2009-05-03 133104]
S2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe []
S2 sfrem01;SF FrontLine Drivers Auto Removal (v1); C:Windowssystem32sfrem01.exe [2006-05-10 353912]
S3 EhttpSrv;ESET HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2010-04-07 33560]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2008-09-23 654848]
S3 FontCache;@%systemroot%system32FntCache.dll,-100; C:Windowssystem32svchost.exe [2008-01-19 21504]
S3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589; C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe [2009-12-21 30192]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-04-30 182768]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe [2004-10-22 73728]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2008-10-25 65888]
S3 MSCSPTISRV;MSCSPTISRV; C:Program FilesCommon FilesSony SharedAvLibMSCSPTISRV.exe [2006-12-14 45056]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 PACSPTISVR;PACSPTISVR; C:Program FilesCommon FilesSony SharedAvLibPACSPTISVR.exe [2006-12-14 57344]
S3 SonicStage Back-End Service;SonicStage Back-End Service; C:Program FilesCommon FilesSony SharedAvLibSsBeSvc.exe [2007-01-24 112184]
S3 SPTISRV;Sony SPTI Service; C:Program FilesCommon FilesSony SharedAvLibSPTISRV.exe [2006-12-14 69632]
S3 SSScsiSV;SonicStage SCSI Service; C:Program FilesCommon FilesSony SharedAvLibSSScsiSV.exe [2007-01-24 75320]
S3 Start BT in service;Start BT in service; C:Program FilesIVT CorporationBlueSoleilStartSkysolSvc.exe [2007-04-21 52080]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:Program FilesCommon FilesSony SharedVAIO Entertainment PlatformVzCsVzHardwareResourceManagerVzHardwareResourceManager.exe [2007-01-10 73728]
S3 VAIOMediaPlatform-IntegratedServer-AppServer;VAIO Media Integrated Server; C:Program FilessonyVAIO Media Integrated ServerVMISrv.exe [2007-01-16 2523136]
S3 VAIOMediaPlatform-IntegratedServer-HTTP;VAIO Media Integrated Server (HTTP); C:Program FilessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe [2007-01-08 397312]
S3 VAIOMediaPlatform-IntegratedServer-UPnP;VAIO Media Integrated Server (UPnP); C:Program FilessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe [2007-01-16 1089536]
S3 VAIOMediaPlatform-Mobile-Gateway;VAIO Media Gateway Server; C:Program FilessonyVAIO Media Integrated ServerPlatformVmGateway.exe [2007-01-08 491520]
S3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection; C:Program FilessonyVAIO Media Integrated ServerUCLS.exe [2007-01-10 745472]
S3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP); C:Program FilessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe [2007-01-08 397312]
S3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP); C:Program FilessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe [2007-01-16 1089536]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:Program FilesMicrosoft SQL Server90Sharedsqladhlp90.exe [2008-11-24 45408]

EOF
6 августа, 2010 в 3:19 пп #30569
Helper
Participant
- Темы:19
- Сообщений:712
Вирус все еще живет у вас в системе.
такой лог сделайте
6 августа, 2010 в 4:14 пп #30570
Аноним
Гость
- Темы:532
- Сообщений:1553
скачала, следовала инструкциям.
значит так, во время выполнения вылезло окно .что прекращена работа PEV.cfxxe

log.txt

ComboFix 10-08-05.07 — Админ 06.08.2010 19:45:32.1.2 — x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1251.7.1049.18.2037.1297 [GMT 4:00]
Running from: c:usersАдминDesktopComboFix.exe
SP: Защитник Windows *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Resident AV is active

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:program filesDef Group
c:program filesMail.RuAgentMradllnewmrasearch.dll
c:program filesWebMoney Advisor
c:program filesWebMoney Advisorwmadvisor.dll
c:programdatahpe957B.dll
c:programdataMicrosoftNetworkDownloaderqmgr0.dat
c:programdataMicrosoftNetworkDownloaderqmgr1.dat
c:usersАдминAppDataRoaminggamedel.exe
c:usersАдминAppDataRoamingMicrosoftInternet ExplorerqiPSearchbar.dll
c:usersАдминFavoritesASCIIaas_en.exe
c:usersАдминFavoritesBluesoleil_3.2_VoIP_Multilingual_070421instmsia.exe
c:usersАдминFavoritesBluesoleil_3.2_VoIP_Multilingual_070421instmsiw.exe
c:usersАдминFavoritesBluesoleil_3.2_VoIP_Multilingual_070421setup.exe
c:usersАдминFavoritesProgram FilesCoding Workshopcwtone.exe
c:usersАдминFavoritesProgram FilesCoding Workshopgnmid4cw.exe
c:usersАдминFavoritesProgram FilesCoding WorkshopUNWISE.EXE
c:usersАдминFavoritesProgrammesAdobe Acrobat Reader 6.0.2AdbeRdr602_rus_full.exe
c:usersАдминFavoritesProgrammesCoding Workshop Ringtone Converter 4.5.1setup.exe
c:usersАдминFavoritesProgrammesCssMagicV1.8.exe
c:usersАдминFavoritesProgrammesCursorManiaSetup2.1.50.3-3.exe
c:usersАдминFavoritesProgrammesExpress2.exe
c:usersАдминFavoritesProgrammesflashpaste_pro_4.0_rus.exe
c:usersАдминFavoritesProgrammeshddinsp.exe
c:usersАдминFavoritesProgrammeshidownload.exe
c:usersАдминFavoritesProgrammesinstall_flash_player.exe
c:usersАдминFavoritesProgrammesIvPropisec_Setup.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! Digital Media EditionCommonMicrosoft SharedMicrosoft Plus!MPAProductActivation.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionAlarm ClockAlarmClock.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionAnalog RecorderAnalogRecorder.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionAudio ConverterAudioConverter.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionCDLMCDLM.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionDancerDancer.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionParty Modepartymode.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionPhotoStoryPhotoStory.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionSync & GoSyncAndGo.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionTour.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionWMP9RedistMPSetupXP.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! Digital Media EditionSetup 2.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPCD Label MakerCDPrint.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPCommonMicrosoft SharedMicrosoft Plus!PlusApp.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPCommonMicrosoft SharedMicrosoft Plus!RegWiz.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPCommonMicrosoft SharedSpeechsapisvr.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPGamesHyperBowlHyperbowl.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPGamesRussian SquareRussSqr.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPGamesThe Labyrinth Plus! EditionTheLabyrinth.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPinstmsia.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPinstmsiw.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPMP3 Audio ConverterAudioConverter.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPPersonal DJPersonDJ.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPsetup.exe
c:usersАдминFavoritesProgrammesMicrosoft Plus! for Windows XPVoice CommandMpSpeak.exe
c:usersАдминFavoritesProgrammesMMPoly.exe
c:usersАдминFavoritesProgrammesMobile Music Polyphonicmobile-music-polyphonic.exe
c:usersАдминFavoritesProgrammesmyproxy-лекарство.exe
c:usersАдминFavoritesProgrammesmyproxy_4.exe
c:usersАдминFavoritesProgrammeso90w_8238.exe
c:usersАдминFavoritesProgrammesoffice2007Enterprise.WWose.exe
c:usersАдминFavoritesProgrammesoffice2007Office.ru-ruDW20.EXE
c:usersАдминFavoritesProgrammesoffice2007Office.ru-rudwtrig20.exe
c:usersАдминFavoritesProgrammesoffice2007setup.exe
c:usersАдминFavoritesProgrammesow32ruru850.exe
c:usersАдминFavoritesProgrammesSAFlashPlayer5.exe
c:usersАдминFavoritesProgrammesSAFlashPlayer6.exe
c:usersАдминFavoritesProgrammessend-to-phone_setup.exe
c:usersАдминFavoritesProgrammessetup_light.exe
c:usersАдминFavoritesProgrammesSGH Flasher DumperSetup.exe
c:usersАдминFavoritesProgrammesSmaller Animals ThumbNailer v7.12.1.4setup.exe
c:usersАдминFavoritesProgrammesStatistXP10.exe
c:usersАдминFavoritesProgrammesSylpheed-2.2.7-win32_setup.exe
c:usersАдминFavoritesProgrammesWallpaperMobilesetup.exe
c:usersАдминFavoritesProgrammesпароCoding Workshop Ringtone Converter 4.5.1setup.exe
c:usersАдминFavoriteswm2.exe
c:usersАдминFavoriteswmacc.exe
c:usersАдминFavoriteswrar351 CEU.exe
c:users9226~1FAVORI~1ASCIIaas_en.exe
c:users9226~1FAVORI~1Bluesoleil_3.2_VoIP_Multilingual_070421instmsia.exe
c:users9226~1FAVORI~1Bluesoleil_3.2_VoIP_Multilingual_070421instmsiw.exe
c:users9226~1FAVORI~1Bluesoleil_3.2_VoIP_Multilingual_070421setup.exe
c:users9226~1FAVORI~1Program FilesCoding Workshopcwtone.exe
c:users9226~1FAVORI~1Program FilesCoding Workshopgnmid4cw.exe
c:users9226~1FAVORI~1Program FilesCoding WorkshopUNWISE.EXE
c:users9226~1FAVORI~1ProgrammesAdobe Acrobat Reader 6.0.2AdbeRdr602_rus_full.exe
c:users9226~1FAVORI~1ProgrammesCoding Workshop Ringtone Converter 4.5.1setup.exe
c:users9226~1FAVORI~1ProgrammesCssMagicV1.8.exe
c:users9226~1FAVORI~1ProgrammesCursorManiaSetup2.1.50.3-3.exe
c:users9226~1FAVORI~1ProgrammesExpress2.exe
c:users9226~1FAVORI~1Programmesflashpaste_pro_4.0_rus.exe
c:users9226~1FAVORI~1Programmeshddinsp.exe
c:users9226~1FAVORI~1Programmeshidownload.exe
c:users9226~1FAVORI~1Programmesinstall_flash_player.exe
c:users9226~1FAVORI~1ProgrammesIvPropisec_Setup.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! Digital Media EditionCommonMicrosoft SharedMicrosoft Plus!MPAProductActivation.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionAlarm ClockAlarmClock.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionAnalog RecorderAnalogRecorder.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionAudio ConverterAudioConverter.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionCDLMCDLM.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionDancerDancer.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionParty Modepartymode.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionPhotoStoryPhotoStory.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionSync & GoSyncAndGo.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionTour.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! Digital Media Editionprogram filesMicrosoft Plus! Digital Media EditionWMP9RedistMPSetupXP.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! Digital Media EditionSetup 2.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPCD Label MakerCDPrint.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPCommonMicrosoft SharedMicrosoft Plus!PlusApp.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPCommonMicrosoft SharedMicrosoft Plus!RegWiz.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPCommonMicrosoft SharedSpeechsapisvr.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPGamesHyperBowlHyperbowl.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPGamesRussian SquareRussSqr.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPGamesThe Labyrinth Plus! EditionTheLabyrinth.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPinstmsia.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPinstmsiw.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPMP3 Audio ConverterAudioConverter.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPPersonal DJPersonDJ.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPsetup.exe
c:users9226~1FAVORI~1ProgrammesMicrosoft Plus! for Windows XPVoice CommandMpSpeak.exe
c:users9226~1FAVORI~1ProgrammesMMPoly.exe
c:users9226~1FAVORI~1ProgrammesMobile Music Polyphonicmobile-music-polyphonic.exe
c:users9226~1FAVORI~1Programmesmyproxy-лекарство.exe
c:users9226~1FAVORI~1Programmesmyproxy_4.exe
c:users9226~1FAVORI~1Programmeso90w_8238.exe
c:users9226~1FAVORI~1Programmesoffice2007Enterprise.WWose.exe
c:users9226~1FAVORI~1Programmesoffice2007Office.ru-ruDW20.EXE
c:users9226~1FAVORI~1Programmesoffice2007Office.ru-rudwtrig20.exe
c:users9226~1FAVORI~1Programmesoffice2007setup.exe
c:users9226~1FAVORI~1Programmesow32ruru850.exe
c:users9226~1FAVORI~1ProgrammesSAFlashPlayer5.exe
c:users9226~1FAVORI~1ProgrammesSAFlashPlayer6.exe
c:users9226~1FAVORI~1Programmessend-to-phone_setup.exe
c:users9226~1FAVORI~1Programmessetup_light.exe
c:users9226~1FAVORI~1ProgrammesSGH Flasher DumperSetup.exe
c:users9226~1FAVORI~1ProgrammesSmaller Animals ThumbNailer v7.12.1.4setup.exe
c:users9226~1FAVORI~1ProgrammesStatistXP10.exe
c:users9226~1FAVORI~1ProgrammesSylpheed-2.2.7-win32_setup.exe
c:users9226~1FAVORI~1ProgrammesWallpaperMobilesetup.exe
c:users9226~1FAVORI~1ProgrammesпароCoding Workshop Ringtone Converter 4.5.1setup.exe
c:users9226~1FAVORI~1wm2.exe
c:users9226~1FAVORI~1wmacc.exe
c:users9226~1FAVORI~1wrar351 CEU.exe
c:windowssystem32AutoRun.inf

BITS: Possible infected sites

hxxp://soft.export.yandex.ru
.
((((((((((((((((((((((((( Files Created from 2010-07-06 to 2010-08-06 )))))))))))))))))))))))))))))))
.

2025-12-08 01:06 . 2004-07-22 11:51 2333776 —-a-w- c:usersАдминICQLite.exe
2025-12-08 01:05 . 2005-04-25 05:33 819200 —-a-w- c:usersАдминSAFlashPlayer6.exe
2025-12-08 01:02 . 2007-12-25 20:49

d

w- c:usersАдминACD Systems
2010-08-06 16:05 . 2010-08-06 16:05

d

w- c:usersDefaultAppDataLocaltemp
2010-08-06 12:47 . 2010-08-06 12:47

d

w- C:_OTM
2010-08-06 12:03 . 2010-08-06 15:06

d

w- c:program filestrend micro
2010-08-06 12:02 . 2010-08-06 12:06

d

w- C:rsit
2010-08-06 10:55 . 2010-08-06 10:55

d

w- c:usersАдминAppDataLocalESET
2010-08-06 09:00 . 2010-08-06 09:00

d

w- c:usersАдминAppDataRoamingnod32 updater
2010-08-02 16:33 . 2010-08-02 16:34

d

w- c:usersМама.СВЕТЛАНАПереславль 2010
2010-07-25 19:35 . 2010-07-25 19:35 122880 —-a-w- c:usersАдминAppDataRoamingRealUpdatesetup3.12RUPinst_configcompat.dll
2010-07-25 11:34 . 2010-07-25 11:34 452104 —-a-w- c:usersАдминAppDataRoamingRealUpdatesetup3.12setup.exe
2010-07-09 12:11 . 2010-07-09 12:11

d

w- c:program filesiPod
2010-07-09 12:11 . 2010-07-09 12:13

d

w- c:programdata{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-07-09 12:11 . 2010-07-09 12:13

d

w- c:program filesiTunes
2010-07-09 11:51 . 2010-07-09 11:51 72504 —-a-w- c:programdataApple ComputerInstaller CacheiTunes 9.2.0.61SetupAdmin.exe
2010-07-09 11:42 . 2010-07-09 11:42 71992 —-a-w- c:programdataApple ComputerInstaller CacheSafari 5.33.16.0SetupAdmin.exe
2010-07-09 09:34 . 2010-07-09 09:35

d

w- c:usersАдминdwhelper

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-06 16:05 . 2007-12-01 04:38 4718592 —-a-w- c:usersАдминntuser.dat
2010-08-06 15:48 . 2006-11-09 07:21 711856 —-a-w- c:windowssystem32perfh019.dat
2010-08-06 15:48 . 2006-11-09 07:21 148664 —-a-w- c:windowssystem32perfc019.dat
2010-08-06 15:39 . 2008-09-11 11:26

d

w- c:usersАдминAppDataRoamingICQ
2010-08-06 15:30 . 2008-07-24 09:09 3932160 —ha-w- c:usersПапаntuser.dat
2010-08-06 15:28 . 2008-07-23 10:42 3407872 —ha-w- c:usersМама.СВЕТЛАНАntuser.dat
2010-08-06 15:28 . 2008-07-19 12:20 1310720 —ha-w- c:usersМамаNTUSER.DAT
2010-08-06 11:10 . 2009-12-16 19:22

d

w- c:program filesMalwarebytes’ Anti-Malware
2010-08-06 09:50 . 2007-03-06 12:48

d

w- c:program filesGoogle
2010-08-06 09:47 . 2007-12-01 04:38

d

w- c:usersАдминAppDataRoamingGoogle
2010-08-06 09:44 . 2008-03-16 11:05

d

w- c:program filesCommon FilesACD Systems
2010-08-06 09:39 . 2009-08-08 13:57

d

w- c:usersАдминAppDataRoamingYandex
2010-08-06 09:00 . 2010-08-06 09:00

d

w- c:usersАдминAppDataRoamingnod32 updater
2010-08-06 08:54 . 2007-12-23 11:45

d

w- c:program filesESET
2010-08-06 08:50 . 2009-05-12 04:27

d

w- c:usersАдминAppDataRoamingBitTorrent
2010-08-02 20:37 . 2009-05-24 16:36

d

w- c:usersАдминAppDataRoamingApple Computer
2010-07-31 11:47 . 2008-07-24 09:10 106040 —-a-w- c:usersПапаAppDataLocalGDIPFONTCACHEV1.DAT
2010-07-25 19:35 . 2010-07-25 19:35 122880 —-a-w- c:usersАдминAppDataRoamingRealUpdatesetup3.12RUPinst_configcompat.dll
2010-07-25 11:34 . 2010-07-25 11:34 452104 —-a-w- c:usersАдминAppDataRoamingRealUpdatesetup3.12setup.exe
2010-07-25 11:23 . 2009-05-12 04:27

d

w- c:usersАдминAppDataRoamingDNA
2010-07-09 12:11 . 2009-05-24 16:30

d

w- c:program filesCommon FilesApple
2010-07-09 12:05 . 2009-06-26 12:07

d

w- c:program filesQuickTime
2010-07-09 11:55 . 2008-09-23 11:21

d

w- c:program filesBonjour
2010-07-09 11:46 . 2009-05-24 16:14

d

w- c:program filesSafari
2010-07-07 16:49 . 2007-12-01 04:38 106040 —-a-w- c:usersАдминAppDataLocalGDIPFONTCACHEV1.DAT
2010-07-07 07:26 . 2010-07-07 07:26

d

w- c:program filesCCleaner
2010-06-30 17:49 . 2010-06-30 17:49

d

w- c:programdataFriday’s games
2010-06-30 17:49 . 2010-06-12 15:41

d

w- c:program filesAlawar.ru
2010-06-30 17:47 . 2010-06-30 17:45

d

w- c:usersАдминAppDataRoamingSprillBermudeRus
2010-06-28 18:32 . 2010-06-28 18:32

d

w- c:programdataПтички Пираты
2010-06-28 16:30 . 2010-03-06 20:55 439816 —-a-w- c:usersАдминAppDataRoamingRealUpdatesetup3.10setup.exe
2010-06-27 05:33 . 2010-06-27 05:33

d

w- c:usersАдминAppDataRoamingGaijin Ent
2010-06-24 15:36 . 2010-06-22 13:14

d

w- c:program filesICQ7.2
2010-06-24 15:35 . 2007-03-06 08:06

d—h—w- c:program filesInstallShield Installation Information
2010-06-23 15:15 . 2008-07-23 10:43 106040 —-a-w- c:usersМама.СВЕТЛАНАAppDataLocalGDIPFONTCACHEV1.DAT
2010-06-22 13:20 . 2009-04-23 11:14

d

w- c:program filesICQ6.5
2010-06-19 16:53 . 2010-06-19 16:53

d

w- c:programdataPlayrix Entertainment
2010-06-19 14:11 . 2010-06-19 14:11

d

w- c:programdataBC Soft Games
2010-06-12 15:42 . 2010-06-12 15:42

d

w- c:programdataRumbic Studio
2010-06-08 20:49 . 2008-01-02 01:00

d

w- c:program filesMicrosoft Silverlight
2010-05-21 10:14 . 2009-10-03 08:51 221568

w- c:windowssystem32MpSigStub.exe
2010-05-18 12:35 . 2010-05-18 12:35 91424 —-a-w- c:windowssystem32dnssd.dll
2010-05-18 12:35 . 2010-05-18 12:35 197920 —-a-w- c:windowssystem32dnssdX.dll
2010-05-18 12:35 . 2010-05-18 12:35 107808 —-a-w- c:windowssystem32dns-sd.exe
2009-12-21 11:18 . 2008-12-09 21:11 119808 —-a-w- c:program filesmozilla firefoxcomponentsGoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE~Browser Helper Objects{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-09-29 13:24 325000 —-a-w- c:program filesAskBarDisbarbinaskBar.dll

[HKEY_LOCAL_MACHINE~Browser Helper Objects{963B125B-8B21-49A2-A3A8-E37092276531}]
2009-12-01 07:28 125952 —-a-w- c:program filesGet-Styles 2.0utilsupdatebho.dll

[HKEY_LOCAL_MACHINE~Browser Helper Objects{9B5FB65F-631E-4564-ABF2-AD71845B28E0}]
2010-05-31 05:14 226016 —-a-w- c:program filesGet-Styles 2.0iejsloader.dll

[HKEY_LOCAL_MACHINE~Browser Helper Objects{EEE6C35C-6118-11DC-9C72-001320C79847}]
2009-10-19 13:15 1345336 —-a-w- c:program filesSweetIMToolbarsInternet ExplorermgToolbarIE.dll

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
«{3041d03e-fd4b-44e0-b742-2d9b88305f98}»= «c:program filesAskBarDisbarbinaskBar.dll» [2008-09-29 325000]
«{EEE6C35B-6118-11DC-9C72-001320C79847}»= «c:program filesSweetIMToolbarsInternet ExplorermgToolbarIE.dll» [2009-10-19 1345336]
«{5BCDC9E9-A980-4B53-B2E8-60CFF484DA61}»= «c:program filesGet-Styles 2.0ietoolbar.dll» [2010-05-31 130272]

[HKEY_CLASSES_ROOTclsid{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOTTypeLib{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CLASSES_ROOTclsid{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOTSWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOTTypeLib{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOTSWEETIE.IEToolbar]

[HKEY_CLASSES_ROOTclsid{5bcdc9e9-a980-4b53-b2e8-60cff484da61}]
[HKEY_CLASSES_ROOTScriptedStar.Bar.2]
[HKEY_CLASSES_ROOTTypeLib{B124F09B-1B6C-431D-BE2D-DBA6864A8897}]
[HKEY_CLASSES_ROOTScriptedStar.Bar]

[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerToolbarWebbrowser]
«{EEE6C35B-6118-11DC-9C72-001320C79847}»= «c:program filesSweetIMToolbarsInternet ExplorermgToolbarIE.dll» [2009-10-19 1345336]
«{3041D03E-FD4B-44E0-B742-2D9B88305F98}»= «c:program filesAskBarDisbarbinaskBar.dll» [2008-09-29 325000]

[HKEY_CLASSES_ROOTclsid{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOTSWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOTTypeLib{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOTSWEETIE.IEToolbar]

[HKEY_CLASSES_ROOTclsid{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOTTypeLib{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«ehTray.exe»=»c:windowsehomeehTray.exe» [2008-01-19 125952]
«WMPNSCFG»=»c:program filesWindows Media PlayerWMPNSCFG.exe» [2008-01-19 202240]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«Windows Defender»=»c:program filesWindows DefenderMSASCui.exe» [2008-01-19 1008184]
«IgfxTray»=»c:windowssystem32igfxtray.exe» [2007-01-24 98304]
«HotKeysCmds»=»c:windowssystem32hkcmd.exe» [2007-01-24 106496]
«Persistence»=»c:windowssystem32igfxpers.exe» [2007-01-24 81920]
«RtHDVCpl»=»RtHDVCpl.exe» [2007-02-06 4317184]
«Apoint»=»c:program filesApointApoint.exe» [2007-01-12 118784]
«ISBMgr.exe»=»c:program filesSonyISB UtilityISBMgr.exe» [2007-01-22 321656]
«GrooveMonitor»=»c:program filesMicrosoft OfficeOffice12GrooveMonitor.exe» [2008-10-25 31072]
«Google Desktop Search»=»c:program filesGoogleGoogle Desktop SearchGoogleDesktop.exe» [2009-12-21 30192]
«Adobe Photo Downloader»=»c:program filesAdobePhotoshop Album Starter Edition3.2Appsapdproxy.exe» [2007-03-09 63712]
«RemoteControl»=»c:program filesCyberLinkPowerDVDPDVDServ.exe» [2004-11-02 32768]
«TkBellExe»=»c:program filesCommon FilesRealUpdate_OBrealsched.exe» [2009-05-03 198160]
«AppleSyncNotifier»=»c:program filesCommon FilesAppleMobile Device SupportbinAppleSyncNotifier.exe» [2009-08-13 177440]
«MAgent»=»c:program filesMail.RuAgentMAgent.exe» [2009-07-13 7975608]
«SweetIM»=»c:program filesSweetIMMessengerSweetIM.exe» [2009-10-20 111928]
«Adobe Reader Speed Launcher»=»c:program filesAdobeReader 8.0ReaderReader_sl.exe» [2008-10-14 39792]
«AdobeAAMUpdater-1.0″=»c:program filesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe» [2010-05-26 500208]
«QuickTime Task»=»c:program filesQuickTimeQTTask.exe» [2010-03-18 421888]
«iTunesHelper»=»c:program filesiTunesiTunesHelper.exe» [2010-06-15 141624]
«egui»=»c:program filesESETESET NOD32 Antivirusegui.exe» [2010-04-07 2145000]

c:usersЏ Ї AppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
‚лаҐ§Є нЄа Ё Їа®Ја ¬¬ § ЇгбЄ ¤«п OneNote 2007.lnk — c:program filesMicrosoft OfficeOffice12ONENOTEM.EXE [2009-2-26 97680]

c:usersЂ¤¬ЁAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
Adobe Gamma.lnk — c:program filesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe [2005-3-16 113664]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem]
«EnableLUA»= 0 (0x0)
«EnableUIADesktopToggle»= 0 (0x0)

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwinlogonnotifyVESWinlogon]
2007-02-13 12:19 98304 —-a-w- c:windowsSystem32VESWinlogon.dll

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwindows]
«AppInit_DLLs»=c:progra~1GoogleGOOGLE~4GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinDefend]
@=»Service»

[HKLM~startupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Canon LBP2900 Окно состояния.lnk]
path=c:programdataMicrosoftWindowsStart MenuProgramsStartupCanon LBP2900 Окно состояния.lnk
backup=c:windowspssCanon LBP2900 Окно состояния.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM~startupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:programdataMicrosoftWindowsStart MenuProgramsStartupHP Digital Imaging Monitor.lnk
backup=c:windowspssHP Digital Imaging Monitor.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregBitTorrent DNA]
2009-11-15 13:18 323392 —-a-w- c:usersАдминProgram FilesDNAbtdna.exe

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregHP Software Update]
2007-03-11 17:34 49152 —-a-w- c:program filesHPHP Software UpdatehpwuSchd2.exe

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNeroCheck]
2001-07-09 07:50 155648 —-a-w- c:windowsSystem32NeroCheck.exe

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSeaMonkey Quick Launch]
2007-11-28 09:14 151552

w- c:program filesmozilla.orgSeaMonkeyseamonkey.exe

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSony Ericsson PC Suite]
2009-09-24 10:41 434176 —-a-w- c:program filesSony EricssonSony Ericsson PC SuiteSEPCSuite.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionrun-]
«QIP2005″=c:program filesQIPqip.exe
«Skype»=»c:program filesSkypePhoneSkype.exe» /nosplash /minimized

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionrun-]
«nod32kui»=»c:program filesEsetnod32kui.exe» /WAITSERVICE

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity center]
«AntiVirusOverride»=dword:00000001

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoring]
«DisableMonitoring»=dword:00000001

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoringSymantecAntiVirus]
«DisableMonitoring»=dword:00000001

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoringSymantecFirewall]
«DisableMonitoring»=dword:00000001

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerSvc]
«VistaSp2″=hex(b):3f,72,0f,74,2d,65,ca,01

R2 gupdate1c9cbd35cdc840;Служба Google Update (gupdate1c9cbd35cdc840);c:program filesGoogleUpdateGoogleUpdate.exe [2009-05-03 133104]
R2 OMSI download service;Sony Ericsson OMSI download service;c:program filesSony EricssonSony Ericsson PC SuiteSupServ.exe [2009-04-30 90112]
R3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589;c:program filesGoogleGoogle Desktop SearchGoogleDesktop.exe [2009-12-21 30192]
R3 MBAMSwissArmy;MBAMSwissArmy;c:windowssystem32driversmbamswissarmy.sys [2010-04-29 38224]
R3 s816bus;Sony Ericsson Device 816 driver (WDM);c:windowssystem32DRIVERSs816bus.sys [2007-06-19 81832]
R3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter;c:windowssystem32DRIVERSs816mdfl.sys [2007-06-19 13864]
R3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver;c:windowssystem32DRIVERSs816mdm.sys [2007-06-19 107304]
R3 s816mgmt;Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM);c:windowssystem32DRIVERSs816mgmt.sys [2007-06-19 99112]
R3 s816nd5;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS);c:windowssystem32DRIVERSs816nd5.sys [2007-06-19 21928]
R3 s816obex;Sony Ericsson Device 816 USB WMC OBEX Interface;c:windowssystem32DRIVERSs816obex.sys [2007-06-19 97320]
R3 s816unic;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM);c:windowssystem32DRIVERSs816unic.sys [2007-06-19 97704]
R3 Start BT in service;Start BT in service;c:program filesIVT CorporationBlueSoleilStartSkysolSvc.exe [2007-04-21 52080]
R3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection;c:program filessonyVAIO Media Integrated ServerUCLS.exe [2007-01-10 745472]
R3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP);c:program filessonyVAIO Media Integrated ServerPlatformSV_Httpd.exe [2007-01-08 397312]
R3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP);c:program filessonyVAIO Media Integrated ServerPlatformUPnPFramework.exe [2007-01-16 1089536]
S1 ehdrv;ehdrv;c:windowssystem32DRIVERSehdrv.sys [2010-04-07 114984]
S2 eamonm;eamonm;c:windowssystem32DRIVERSeamonm.sys [2010-04-07 133512]
S2 ekrn;ESET Service;c:program filesESETESET NOD32 Antivirusekrn.exe [2010-04-07 810120]
S2 epfwwfpr;epfwwfpr;c:windowssystem32DRIVERSepfwwfpr.sys [2010-04-07 96896]
S2 LogWatch;Event Log Watch;c:ca_licLogWatNT.exe [2007-12-15 75016]
S2 MSSQL$VAIO_VEDB;SQL Server (VAIO_VEDB);c:program filesMicrosoft SQL ServerMSSQL.1MSSQLBinnsqlservr.exe [2009-05-26 29262680]
S3 seehcri;Sony Ericsson seehcri Device Driver;c:windowssystem32DRIVERSseehcri.sys [2008-01-09 27632]
S3 ti21sony;ti21sony;c:windowssystem32driversti21sony.sys [2007-02-08 807424]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionsvchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contents of the ‘Scheduled Tasks’ folder

2010-08-06 c:windowsTasksGoogleUpdateTaskMachineCore.job
— c:program filesGoogleUpdateGoogleUpdate.exe [2009-05-03 09:38]

2010-08-06 c:windowsTasksGoogleUpdateTaskMachineUA.job
— c:program filesGoogleUpdateGoogleUpdate.exe [2009-05-03 09:38]

2010-08-06 c:windowsTasksUser_Feed_Synchronization-{6FDA5319-9A9C-4106-9D39-8D46B5B01DA9}.job
— c:windowssystem32msfeedssync.exe [2009-09-27 07:33]
.
.

Supplementary Scan

.
uStart Page = hxxp://www.yandex.ru/?clid=123048
uDefault_Search_URL = hxxp://search.qip.ru
mStart Page = hxxp://home.sweetim.com
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://search.qip.ru/ie
uSearchURL,(Default) = Root: HKCU; Subkey: SoftwareMicrosoftInternet ExplorerSearchUrl; ValueType: string; ValueName: ‘; ValueData: ‘; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
IE: &Экспорт в Microsoft Excel — c:progra~1MICROS~3Office12EXCEL.EXE/3000
IE: Поиск@Mail.Ru — c:program filesmail.rusputnikMailRuSputnik.dll/282
IE: Словари@Mail.Ru — c:program filesmail.rusputnikMailRuSputnik.dll/283
IE: {{7558B7E5-7B26-4201-BEDB-00D5FF534523} — c:program filesMail.RuAgentmagent.exe
Handler: base64 — {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} — c:program filesGet-Styles 2.0ietdataprotocol.dll
Handler: chrome — {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} — c:program filesGet-Styles 2.0ietdataprotocol.dll
Handler: prox — {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} — c:program filesGet-Styles 2.0ietdataprotocol.dll
FF — ProfilePath — c:usersАдминAppDataRoamingMozillaFirefoxProfilesyx6vrkj5.default
FF — prefs.js: browser.search.defaulturl — hxxp://search.sweetim.com/search.asp?src=2&q=
FF — prefs.js: browser.search.selectedEngine — Google
FF — prefs.js: browser.startup.homepage — hxxp://yandex.ru/?clid=123049
FF — prefs.js: keyword.URL — hxxp://yandex.ru/yandsearch?clid=123045&text=
FF — prefs.js: network.proxy.type — 2
FF — component: c:usersАдминAppDataRoamingMozillaFirefoxProfilesyx6vrkj5.defaultextensionslazarus@interclue.complatformWINNT_x86-msvccomponentsWeaveCrypto.dll
FF — plugin: c:program filesGoogleGoogle Earthpluginnpgeplugin.dll
FF — plugin: c:program filesGoogleUpdate1.2.183.29npGoogleOneClick8.dll
FF — plugin: c:program filesJavajre1.6.0binnpjpi160.dll
FF — plugin: c:program filesMozilla Firefoxpluginsnpkimi.dll
FF — HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} — c:windowsMicrosoft.NETFrameworkv3.5Windows Presentation FoundationDotNetAssistantExtension

—- FIREFOX POLICIES —-
c:program filesMozilla Firefoxgreprefsall.js — pref(«ui.use_native_colors», true);
c:program filesMozilla Firefoxgreprefsall.js — pref(«network.IDN.whitelist.lu», true);
c:program filesMozilla Firefoxgreprefsall.js — pref(«network.IDN.whitelist.nu», true);
c:program filesMozilla Firefoxgreprefsall.js — pref(«network.IDN.whitelist.nz», true);
c:program filesMozilla Firefoxgreprefsall.js — pref(«network.IDN.whitelist.xn--mgbaam7a8h», true);
c:program filesMozilla Firefoxgreprefsall.js — pref(«network.IDN.whitelist.xn--mgberp4a5d4ar», true);
c:program filesMozilla Firefoxgreprefsall.js — pref(«network.IDN.whitelist.xn--p1ai», true);
c:program filesMozilla Firefoxgreprefsall.js — pref(«network.IDN.whitelist.xn--mgbayh7gpa», true);
c:program filesMozilla Firefoxgreprefsall.js — pref(«network.IDN.whitelist.tel», true);
c:program filesMozilla Firefoxgreprefsall.js — pref(«network.auth.force-generic-ntlm», false);
c:program filesMozilla Firefoxgreprefsall.js — pref(«network.proxy.type», 5);
c:program filesMozilla Firefoxgreprefsall.js — pref(«network.buffer.cache.count», 24);
c:program filesMozilla Firefoxgreprefsall.js — pref(«network.buffer.cache.size», 4096);
c:program filesMozilla Firefoxgreprefsall.js — pref(«dom.ipc.plugins.timeoutSecs», 45);
c:program filesMozilla Firefoxgreprefsall.js — pref(«svg.smil.enabled», false);
c:program filesMozilla Firefoxgreprefsall.js — pref(«accelerometer.enabled», true);
c:program filesMozilla Firefoxgreprefssecurity-prefs.js — pref(«security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref», true);
c:program filesMozilla Firefoxgreprefssecurity-prefs.js — pref(«security.ssl.renego_unrestricted_hosts», «»);
c:program filesMozilla Firefoxgreprefssecurity-prefs.js — pref(«security.ssl.treat_unsafe_negotiation_as_broken», false);
c:program filesMozilla Firefoxgreprefssecurity-prefs.js — pref(«security.ssl.require_safe_negotiation», false);
c:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name», «chrome://browser/locale/browser.properties»);
c:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description», «chrome://browser/locale/browser.properties»);
c:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«plugins.update.notifyUser», false);
c:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«dom.ipc.plugins.enabled.nptest.dll», true);
c:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«dom.ipc.plugins.enabled.npswf32.dll», true);
c:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«dom.ipc.plugins.enabled.npctrl.dll», true);
c:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«dom.ipc.plugins.enabled.npqtplugin.dll», true);
c:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«dom.ipc.plugins.enabled», false);
.
— — — — ORPHANS REMOVED — — — —

HKCU-Run-ICQ — ~c:program filesICQ7.2ICQ.exe
MSConfigStartUp-VKontakte — c:program filesAgent VkontakteAgentVkontakte.exe
AddRemove-Get-Styles for Chrome — c:program filesGet-Styles 2.0chuninstall.exe
AddRemove-Magic ASCII Studio_is1 — c:program filesMagic ASCII Studiounins000.exe
AddRemove-NIS — c:program filesNortonInstaller{0C55C096-0F1D-4F28-AAA2-85EF591126E7}NISA5E82D0216.0.0.125InstStub.exe
AddRemove-Picasa2 — c:program filesPicasa2Uninstall.exe
AddRemove-QIP 2005 — c:program filesQIPunins000.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-06 20:05
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll >>UNKNOWN [0x86507918]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
DriverDisk -> CLASSPNP.SYS @ 0x83362d24
DriverACPI -> acpi.sys @ 0x82a9ed68
Driveratapi -> 0x86507918
IoDeviceObjectType ->DeviceHarddisk0DR0 ->Warning: possible MBR rootkit infection !
user & kernel MBR OK

**************************************************************************
.

LOCKED REGISTRY KEYS

[HKEY_LOCAL_MACHINEsystemControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}000AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
«BlindDial»=dword:00000000
«MSCurrentCountry»=dword:000000b8

[HKEY_LOCAL_MACHINEsystemControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}001AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
«BlindDial»=dword:00000001

[HKEY_LOCAL_MACHINEsystemControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}002AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
«BlindDial»=dword:00000000

[HKEY_LOCAL_MACHINEsystemControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}003AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
«BlindDial»=dword:00000000

[HKEY_LOCAL_MACHINEsystemControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}004AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
«BlindDial»=dword:00000000

[HKEY_LOCAL_MACHINEsystemControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}005AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
«BlindDial»=dword:00000000

[HKEY_LOCAL_MACHINEsystemControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}006AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
«BlindDial»=dword:00000000

[HKEY_LOCAL_MACHINEsystemControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}007AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
«BlindDial»=dword:00000000

[HKEY_LOCAL_MACHINEsystemControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}008AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
«BlindDial»=dword:00000000

[HKEY_LOCAL_MACHINEsystemControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}009AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
«BlindDial»=dword:00000000
.
Completion time: 2010-08-06 20:10:42
ComboFix-quarantined-files.txt 2010-08-06 16:10

Pre-Run: 15 087 235 072 байт свободно
Post-Run: 16 591 724 544 байт свободно

— — End Of File — — 0CDC002C03B5CA431F7119A352687EC8
Автор

Сообщения

Просмотр 15 сообщений - с 1 по 15 (из 45 всего)

1 2 3 →

Для ответа в этой теме необходимо авторизоваться.

PC DEFENDER

Добро пожаловать

Поиск

Последние темы

СПАЙВАРЕ РУ

Нужна помощь?

Ссылки