помогите избавится от порнобанеров (Диана 3)

This topic has 3 ответа, 2 участника, and was last updated 15 years, 5 months назад by Admin.

Просмотр 4 сообщений - с 1 по 4 (из 4 всего)

Автор

Сообщения
7 апреля, 2010 в 2:05 пп #18237
35
Participant
- Темы:1
- Сообщений:3
помогите избавиться от порно баннера после сканирования
Logfile of random’s system information tool 1.06 (written by random/random)
Run by 1 at 2010-04-11 19:06:40
Microsoft® Windows Vista™ Home Basic Service Pack 1
System drive C: has 45 GB (31%) free of 143 GB
Total RAM: 3038 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:07:02, on 11.04.2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Windowssystem32taskeng.exe
C:WindowsSystem32rundll32.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesIDTWDMsttray.exe
C:Program FilesHewlett-PackardMediaDVDDVDAgent.exe
C:Program FilesHewlett-PackardTouchSmartMediaTSMAgent.exe
C:Program FilesHewlett-PackardTouchSmartMediaKernelCLMLCLMLSvc.exe
C:Program FilesHewlett-PackardHP MediaSmartSmartMenu.exe
C:Program FilesWindows DefenderMSASCui.exe
C:Program FilesHewlett-PackardHP Quick Launch ButtonsQLBCTRL.exe
C:Program FilesJavajre1.6.0_07binjusched.exe
C:Program FilesHPHP Software UpdatehpwuSchd2.exe
C:Program FilesHewlett-PackardHP Wireless AssistantHPWAMain.exe
C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe
C:Program FilesCyberLinkShared filesbrs.exe
C:Program FilesWinampwinampa.exe
C:Program FilesQuickTimeqttask.exe
C:Program FilesCommon FilesLightScribeLightScribeControlPanel.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Program FilesICQ6.5ICQ.exe
C:Program FilesYour Cottonelle PuppyYour Cottonelle Puppy.exe
C:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe
C:Program FilesClarusSamsung Auto BackupISFGuage.exe
C:Program FilesClarusSamsung Auto BackupISFRealTimeD.exe
C:Program FilesClarusSamsung Auto BackupISFTimerD.exe
C:Program FilesHewlett-PackardHP wireless AssistantWiFiMsg.EXE
C:Program FilesHewlett-PackardSharedHpqToaster.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32taskmgr.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:Windowssystem32conime.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:Program FilesSynapticsSynTPSynTPHelper.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe
C:WindowsSystem32cmd.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=ru_ru&c=91&bd=Pavilion&pf=cnnb
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = madlen.ucoz.com
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=ru_ru&c=91&bd=Pavilion&pf=cnnb
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=ru_ru&c=91&bd=Pavilion&pf=cnnb
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
R3 — URLSearchHook: MadLen.uCoz.coM Toolbar — {8dec4b69-27c4-405d-a37d-8d45c83f66ab} — C:Program FilesMadLen.uCoz.coMtbMadL.dll
O1 — Hosts: ::1 localhost
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: IEVkbdBHO — {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} — C:Program FilesKaspersky LabKaspersky Internet Security 2010ievkbd.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_07binssv.dll
O2 — BHO: AOL Toolbar BHO — {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} — C:Program FilesAOLпанель инструментов AOL 5.0aoltb.dll
O2 — BHO: (no name) — {7E853D72-626A-48EC-A868-BA8D5E23E045} — (no file)
O2 — BHO: MadLen.uCoz.coM Toolbar — {8dec4b69-27c4-405d-a37d-8d45c83f66ab} — C:Program FilesMadLen.uCoz.coMtbMadL.dll
O2 — BHO: link filter bho — {E33CF602-D945-461A-83F0-819F76A199F8} — C:Program FilesKaspersky LabKaspersky Internet Security 2010klwtbbho.dll
O3 — Toolbar: AOL Toolbar — {DE9C389F-3316-41A7-809B-AA305ED9D922} — C:Program FilesAOLпанель инструментов AOL 5.0aoltb.dll
O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O3 — Toolbar: MadLen.uCoz.coM Toolbar — {8dec4b69-27c4-405d-a37d-8d45c83f66ab} — C:Program FilesMadLen.uCoz.coMtbMadL.dll
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:Windowssystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:Windowssystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 — HKLM..Run: [SysTrayApp] %ProgramFiles%IDTWDMsttray.exe
O4 — HKLM..Run: [DVDAgent] «C:Program FilesHewlett-PackardMediaDVDDVDAgent.exe»
O4 — HKLM..Run: [TSMAgent] «C:Program FilesHewlett-PackardTouchSmartMediaTSMAgent.exe»
O4 — HKLM..Run: [CLMLServer for HP TouchSmart] «C:Program FilesHewlett-PackardTouchSmartMediaKernelCLMLCLMLSvc.exe»
O4 — HKLM..Run: [TVAgent] «C:Program FilesHewlett-PackardMediaTVTVAgent.exe»
O4 — HKLM..Run: [UCam_Menu] «C:Program FilesHewlett-PackardMediaWebcamMUITransferMUIStartMenu.exe» «C:Program FilesHewlett-PackardMediaWebcam» update «SoftwareHewlett-PackardMediaWebcam»
O4 — HKLM..Run: [SmartMenu] %ProgramFiles%Hewlett-PackardHP MediaSmartSmartMenu.exe
O4 — HKLM..Run: [UpdateLBPShortCut] «C:Program FilesCyberLinkLabelPrintMUITransferMUIStartMenu.exe» «C:Program FilesCyberLinkLabelPrint» UpdateWithCreateOnce «SoftwareCyberLinkLabelPrint2.5»
O4 — HKLM..Run: [UpdatePSTShortCut] «C:Program FilesCyberLinkDVD SuiteMUITransferMUIStartMenu.exe» «C:Program FilesCyberLinkDVD Suite» UpdateWithCreateOnce «SoftwareCyberLinkPowerStarter»
O4 — HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 — HKLM..Run: [QlbCtrl.exe] C:Program FilesHewlett-PackardHP Quick Launch ButtonsQlbCtrl.exe /Start
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 9.0ReaderReader_sl.exe»
O4 — HKLM..Run: [UpdateP2GoShortCut] «C:Program FilesCyberLinkPower2GoMUITransferMUIStartMenu.exe» «C:Program FilesCyberLinkPower2Go» UpdateWithCreateOnce «SOFTWARECyberLinkPower2Go6.0»
O4 — HKLM..Run: [UpdatePDIRShortCut] «C:Program FilesCyberLinkPowerDirectorMUITransferMUIStartMenu.exe» «C:Program FilesCyberLinkPowerDirector» UpdateWithCreateOnce «SOFTWARECyberLinkPowerDirector7.0»
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre1.6.0_07binjusched.exe»
O4 — HKLM..Run: [HP Health Check Scheduler] c:Program FilesHewlett-PackardHP Health CheckHPHC_Scheduler.exe
O4 — HKLM..Run: [HP Software Update] C:Program FilesHpHP Software UpdateHPWuSchd2.exe
O4 — HKLM..Run: [hpWirelessAssistant] C:Program FilesHewlett-PackardHP Wireless AssistantHPWAMain.exe
O4 — HKLM..Run: [RemoteControl8] «C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe»
O4 — HKLM..Run: [PDVD8LanguageShortcut] «C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe»
O4 — HKLM..Run: [BDRegion] C:Program FilesCyberlinkShared Filesbrs.exe
O4 — HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe
O4 — HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeqttask.exe» -atboottime
O4 — HKLM..Run: [2gis update client UI] «C:Program Files2gisUpdateClientWin32UpdateClientUI.exe» -minimized
O4 — HKCU..Run: [LightScribe Control Panel] C:Program FilesCommon FilesLightScribeLightScribeControlPanel.exe -hidden
O4 — HKCU..Run: [Skype] «C:Program FilesSkypePhoneSkype.exe» /nosplash /minimized
O4 — HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe
O4 — HKCU..Run: [ICQ] «C:Program FilesICQ6.5ICQ.exe» silent
O4 — HKCU..Run: [Your Cottonelle Puppy] «C:Program FilesYour Cottonelle PuppyYour Cottonelle Puppy.exe» -r
O4 — HKCU..Run: [AlcoholAutomount] «C:Program FilesAlcohol SoftAlcohol 120axcmd.exe» /automount
O4 — HKCU..Run: [AlSrvN] C:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe
O4 — HKCU..Run: [DAEMON Tools Pro Agent] «C:Program FilesDAEMON Tools ProDTProAgent.exe» -autorun
O4 — HKCU..Run: [Shell] C:Userssystems.exe
O4 — HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘NETWORK SERVICE’)
O4 — Startup: Samsung Auto Backup Guage.lnk = ?
O4 — Startup: Samsung Auto Backup Real-Time Daemon.lnk = ?
O4 — Startup: Samsung Auto Backup Scheduler.lnk = ?
O8 — Extra context menu item: &Поиск панели инструментов AOL — C:ProgramDataAOLieToolbarresourcesru-RUlocalsearch.html
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~3OFFICE11EXCEL.EXE/3000
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:PROGRA~1JavaJRE16~1.0_0binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:PROGRA~1JavaJRE16~1.0_0binssv.dll
O9 — Extra button: &Виртуальная клавиатура — {4248FE82-7FCB-46AC-B270-339F08212110} — C:Program FilesKaspersky LabKaspersky Internet Security 2010klwtbbho.dll
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~3OFFICE11REFIEBAR.DLL
O9 — Extra button: Проверка ссы&лок — {CCF151D8-D089-449F-A5A4-D9909053F20F} — C:Program FilesKaspersky LabKaspersky Internet Security 2010klwtbbho.dll
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O13 — Gopher Prefix:
O17 — HKLMSystemCCSServicesTcpip..{F6DEEE49-FE94-4D05-8EBD-035000EE39B0}: NameServer = 62.213.0.12 62.213.2.1
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — AppInit_DLLs: C:PROGRA~1KASPER~1KASPER~1mzvkbd3.dll
O23 — Service: Andrea ST Filters Service (AESTFilters) — Andrea Electronics Corporation — C:WindowsSystem32DriverStoreFileRepositorystwrt.inf_805f33deaestsrv.exe
O23 — Service: Agere Modem Call Progress Audio (AgereModemAudio) — Agere Systems — C:Windowssystem32agrsmsvc.exe
O23 — Service: Application Driver Auto Removal Service (01) (appdrvrem01) — Protection Technology — C:WindowsSystem32appdrvrem01.exe
O23 — Service: Kaspersky Internet Security (AVP) — Kaspersky Lab — C:Program FilesKaspersky LabKaspersky Internet Security 2010avp.exe
O23 — Service: Com4QLBEx — Hewlett-Packard Development Company, L.P. — C:Program FilesHewlett-PackardHP Quick Launch ButtonsCom4QLBEx.exe
O23 — Service: @dfsrres.dll,-101 (DFSR) — Корпорация Майкрософт — C:Windowssystem32DFSR.exe
O23 — Service: GameConsoleService — WildTangent, Inc. — C:Program FilesHP GamesMy HP Game ConsoleGameConsoleService.exe
7 апреля, 2010 в 2:06 пп #29309
35
Participant
- Темы:1
- Сообщений:3
O23 — Service: HP Health Check Service — Hewlett-Packard — c:Program FilesHewlett-PackardHP Health Checkhphc_service.exe
O23 — Service: hpqwmiex — Hewlett-Packard Development Company, L.P. — C:Program FilesHewlett-PackardSharedhpqwmiex.exe
O23 — Service: HP Service (hpsrv) — Hewlett-Packard Corporation — C:Windowssystem32Hpservice.exe
O23 — Service: ICQ Service — Unknown owner — C:Program FilesICQ6ToolbarICQ Service.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 — Service: LightScribeService Direct Disc Labeling Service (LightScribeService) — Hewlett-Packard Company — C:Program FilesCommon FilesLightScribeLSSrvc.exe
O23 — Service: NBService — Nero AG — C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 — Service: NVIDIA Display Driver Service (nvsvc) — NVIDIA Corporation — C:Windowssystem32nvvsvc.exe
O23 — Service: PnkBstrA — Unknown owner — C:Windowssystem32PnkBstrA.exe
O23 — Service: Recovery Service for Windows — Unknown owner — C:Program FilesSMINSTBLService.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared filesRichVideo.exe
O23 — Service: Audio Service (STacSV) — IDT, Inc. — C:WindowsSystem32DriverStoreFileRepositorystwrt.inf_805f33deSTacSV.exe
O23 — Service: TV Background Capture Service (TVBCS) (TVCapSvc) — Unknown owner — C:Program FilesHewlett-PackardMediaTVKernelTVTVCapSvc.exe
O23 — Service: TV Task Scheduler (TVTS) (TVSched) — Unknown owner — C:Program FilesHewlett-PackardMediaTVKernelTVTVSched.exe

—
End of file — 40555 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2008-06-12 75128]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class — C:Program FilesKaspersky LabKaspersky Internet Security 2010ievkbd.dll [2009-10-20 68112]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_07binssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}]
AOL Toolbar BHO — C:Program FilesAOLпанель инструментов AOL 5.0aoltb.dll [2008-07-02 1185120]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8dec4b69-27c4-405d-a37d-8d45c83f66ab}]
MadLen.uCoz.coM Toolbar — C:Program FilesMadLen.uCoz.coMtbMadL.dll [2009-12-31 2349080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class — C:Program FilesKaspersky LabKaspersky Internet Security 2010klwtbbho.dll [2009-10-20 268816]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{DE9C389F-3316-41A7-809B-AA305ED9D922} — AOL Toolbar — C:Program FilesAOLпанель инструментов AOL 5.0aoltb.dll [2008-07-02 1185120]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2008-12-09 958200]
{8dec4b69-27c4-405d-a37d-8d45c83f66ab} — MadLen.uCoz.coM Toolbar — C:Program FilesMadLen.uCoz.coMtbMadL.dll [2009-12-31 2349080]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=C:Windowssystem32NvCpl.dll [2008-09-13 13584928]
«NvMediaCenter»=C:Windowssystem32NvMcTray.dll [2008-09-13 92704]
«SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2008-06-20 1316136]
«SysTrayApp»=C:Program FilesIDTWDMsttray.exe [2008-09-11 446556]
«DVDAgent»=C:Program FilesHewlett-PackardMediaDVDDVDAgent.exe [2008-09-26 1148200]
«TSMAgent»=C:Program FilesHewlett-PackardTouchSmartMediaTSMAgent.exe [2008-09-25 1152296]
«CLMLServer for HP TouchSmart»=C:Program FilesHewlett-PackardTouchSmartMediaKernelCLMLCLMLSvc.exe [2008-09-25 189736]
«TVAgent»=C:Program FilesHewlett-PackardMediaTVTVAgent.exe [2008-09-24 206120]
«UCam_Menu»=C:Program FilesHewlett-PackardMediaWebcamMUITransferMUIStartMenu.exe [2008-06-13 210216]
«SmartMenu»=C:Program FilesHewlett-PackardHP MediaSmartSmartMenu.exe [2008-09-23 912688]
«UpdateLBPShortCut»=C:Program FilesCyberLinkLabelPrintMUITransferMUIStartMenu.exe [2008-06-13 210216]
«UpdatePSTShortCut»=C:Program FilesCyberLinkDVD SuiteMUITransferMUIStartMenu.exe [2008-09-26 210216]
«Windows Defender»=C:Program FilesWindows DefenderMSASCui.exe [2008-01-21 1008184]
«QlbCtrl.exe»=C:Program FilesHewlett-PackardHP Quick Launch ButtonsQlbCtrl.exe [2008-08-01 202032]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2008-06-12 34672]
«UpdateP2GoShortCut»=C:Program FilesCyberLinkPower2GoMUITransferMUIStartMenu.exe [2008-06-13 210216]
«UpdatePDIRShortCut»=C:Program FilesCyberLinkPowerDirectorMUITransferMUIStartMenu.exe [2008-06-13 210216]
«SunJavaUpdateSched»=C:Program FilesJavajre1.6.0_07binjusched.exe [2008-06-10 144784]
«HP Health Check Scheduler»=c:Program FilesHewlett-PackardHP Health CheckHPHC_Scheduler.exe [2008-06-16 75008]
«HP Software Update»=C:Program FilesHpHP Software UpdateHPWuSchd2.exe [2007-05-08 54840]
«hpWirelessAssistant»=C:Program FilesHewlett-PackardHP Wireless AssistantHPWAMain.exe [2008-04-15 488752]
«RemoteControl8″=C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe [2008-03-20 83240]
«PDVD8LanguageShortcut»=C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe [2007-12-14 50472]
«BDRegion»=C:Program FilesCyberlinkShared Filesbrs.exe [2008-05-19 91432]
«NeroFilterCheck»=C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2006-11-21 35328]
«QuickTime Task»=C:Program FilesQuickTimeqttask.exe [2009-07-11 98304]
«2gis update client UI»=C:Program Files2gisUpdateClientWin32UpdateClientUI.exe -minimized []

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«LightScribe Control Panel»=C:Program FilesCommon FilesLightScribeLightScribeControlPanel.exe [2008-06-09 2363392]
«Skype»=C:Program FilesSkypePhoneSkype.exe [2008-04-30 22058792]
«WMPNSCFG»=C:Program FilesWindows Media PlayerWMPNSCFG.exe [2008-01-21 202240]
«ICQ»=C:Program FilesICQ6.5ICQ.exe [2009-11-16 172792]
«Your Cottonelle Puppy»=C:Program FilesYour Cottonelle PuppyYour Cottonelle Puppy.exe [2010-01-22 2577728]
«AlcoholAutomount»=C:Program FilesAlcohol SoftAlcohol 120axcmd.exe [2009-04-24 203928]
«AlSrvN»=C:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe [2009-04-17 53248]
«DAEMON Tools Pro Agent»=C:Program FilesDAEMON Tools ProDTProAgent.exe [2009-12-18 427328]
«Shell»=C:Userssystems.exe [2010-04-06 320512]

C:Users1AppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
Samsung Auto Backup Guage.lnk — C:Program FilesClarusSamsung Auto BackupISFGuage.exe
Samsung Auto Backup Real-Time Daemon.lnk — C:Program FilesClarusSamsung Auto BackupISFRealTimeD.exe
Samsung Auto Backup Scheduler.lnk — C:Program FilesClarusSamsung Auto BackupISFTimerD.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»C:PROGRA~1KASPER~1KASPER~1mzvkbd3.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyklogon]
C:Windowssystem32klogon.dll [2009-10-20 219664]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{E54729E8-BB3D-4270-9D49-7389EA579090}»=C:Windowssystem32EZUPBH~1.DLL [2009-07-01 51656]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalPEVSystemStart]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalprocexp90.Sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkPEVSystemStart]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkprocexp90.Sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWdf01000.sys]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«DisableLockWorkstation»=0
«DisableChangePassword»=0

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«EnableLUA»=0
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«EnableUIADesktopToggle»=0
«HideFastUserSwitching»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoLogoff»=0
«NoClose»=0

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{7b0d6994-663d-11de-bded-00238bb1a67e}]
shellAutoRuncommand — H:SamsungSoftwareAPPInst.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{7b0d699a-663d-11de-bded-00238bb1a67e}]
shellAutoRuncommand — F:driverusb–ђЃј‡‘Љ•†‘†НЂЊЋ
shellopencommand — F:driverusb–ђЃј‡‘Љ•†‘†НЂЊЋ

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{fafd3b44-3a7b-11df-bd01-b613461f6ecd}]
shellAutoRuncommand — G:autorun.exe

======List of files/folders created in the last 1 months======

2010-04-11 19:06:41 —-D—- C:Program Filestrend micro
2010-04-11 19:06:40 —-D—- C:rsit
2010-04-11 18:15:18 —-D—- C:32788R22FWJFW
2010-04-10 23:45:20 —-A—- C:Windowssystem32CF30977.exe
2010-04-10 23:44:27 —-A—- C:Windowssystem32cmd.execf
2010-04-10 23:36:34 —-A—- C:Windowssystem32CF29416.exe
2010-04-10 23:35:32 —-A—- C:Windowssystem32CF29129.exe
2010-04-10 23:35:08 —-A—- C:Windowssystem32swsc.exe
2010-04-10 23:35:04 —-A—- C:Bug.txt
2010-04-03 02:46:11 —-D—- C:Program FilesНовый Диск
2010-04-03 02:44:20 —-D—- C:Users1AppDataRoamingInstallShield
2010-04-02 23:51:23 —-A—- C:Windowssystem32appdrvrem01.exe
2010-04-02 17:40:24 —-D—- C:Program FilesAkella Games
2010-04-02 16:01:17 —-D—- C:Program FilesLegacy Interactive
2010-03-29 04:15:20 —-A—- C:Windowssystem32D3DX9_42.dll
2010-03-29 04:15:20 —-A—- C:Windowssystem32d3dx10_41.dll
2010-03-29 04:15:20 —-A—- C:Windowssystem32D3DCompiler_41.dll
2010-03-29 04:15:18 —-A—- C:Windowssystem32D3DX9_41.dll
2010-03-29 04:15:17 —-A—- C:Windowssystem32XAudio2_4.dll
2010-03-29 04:15:17 —-A—- C:Windowssystem32XAPOFX1_3.dll
2010-03-29 04:15:16 —-A—- C:Windowssystem32xactengine3_4.dll
2010-03-29 04:15:16 —-A—- C:Windowssystem32X3DAudio1_6.dll
2010-03-29 04:15:09 —-A—- C:Windowssystem32d3dx10_40.dll
2010-03-29 04:15:09 —-A—- C:Windowssystem32D3DCompiler_40.dll
2010-03-29 04:15:08 —-A—- C:Windowssystem32D3DX9_40.dll
2010-03-29 04:15:07 —-A—- C:Windowssystem32XAudio2_3.dll
2010-03-29 04:15:07 —-A—- C:Windowssystem32XAPOFX1_2.dll
2010-03-29 04:15:05 —-A—- C:Windowssystem32xactengine3_3.dll
2010-03-29 04:15:05 —-A—- C:Windowssystem32X3DAudio1_5.dll
2010-03-29 04:10:44 —-HD—- C:Windowsmsdownld.tmp
2010-03-29 04:10:27 —-D—- C:Windowssystem32directx
2010-03-29 04:10:11 —-D—- C:Program FilesOpenAL
2010-03-29 04:10:11 —-A—- C:Windowssystem32wrap_oal.dll
2010-03-29 04:10:11 —-A—- C:Windowssystem32OpenAL32.dll
2010-03-29 01:50:38 —-D—- C:Program FilesDAEMON Tools Pro
2010-03-29 01:50:15 —-D—- C:Users1AppDataRoamingDAEMON Tools Pro
2010-03-29 01:50:15 —-D—- C:ProgramDataDAEMON Tools Pro
2010-03-28 23:50:38 —-D—- C:Users1AppDataRoamingHdO Adventure
2010-03-28 23:47:04 —-D—- C:Program FilesConduit
2010-03-28 23:47:03 —-D—- C:Program FilesMadLen.uCoz.coM
2010-03-28 19:33:10 —-D—- C:Program FilesMafia — Бандитский Петербург
2010-03-28 19:27:38 —-D—- C:Program FilesAlcohol Soft
2010-03-27 22:01:37 —-D—- C:Program FilesCreative
2010-03-27 21:57:14 —-D—- C:Program FilesMafia
2010-03-14 22:32:36 —-A—- C:Windowsntbtlog.txt

======List of files/folders modified in the last 1 months======

2010-04-11 19:06:46 —-D—- C:WindowsTemp
2010-04-11 19:06:41 —-RD—- C:Program Files
2010-04-11 19:01:17 —-D—- C:Windowstracing
2010-04-11 17:29:56 —-A—- C:WindowsNeroDigital.ini
2010-04-11 01:35:54 —-SHD—- C:System Volume Information
2010-04-11 01:14:22 —-RD—- C:Users
2010-04-11 01:13:52 —-D—- C:Users1AppDataRoamingYour Cottonelle Puppy
2010-04-11 01:13:52 —-D—- C:Program FilesYour Cottonelle Puppy
2010-04-11 00:37:11 —-D—- C:Windows
2010-04-11 00:36:20 —-D—- C:Program FilesBarbie as The Princess and the Pauper
2010-04-10 23:45:20 —-AD—- C:WindowsSystem32
2010-04-10 23:45:13 —-D—- C:Windowssystem32ru-RU
2010-04-10 23:45:07 —-D—- C:Windowssystem32drivers
2010-04-10 23:44:13 —-D—- C:WindowsPrefetch
2010-04-10 23:35:32 —-D—- C:ComboFix
2010-04-09 22:58:36 —-D—- C:ProgramDataKaspersky Lab
2010-04-06 22:44:58 —-D—- C:Users1AppDataRoamingICQ
2010-04-06 07:14:59 —-D—- C:Program FilesOpera
2010-04-06 07:12:58 —-D—- C:WindowsMinidump
2010-04-06 04:54:23 —-D—- C:Windowssystem32wbem
2010-04-06 04:53:37 —-D—- C:Windowssystem32config
2010-04-06 04:53:29 —-D—- C:WindowsTasks
2010-04-06 04:53:29 —-D—- C:Windowssystem32spool
2010-04-06 04:53:29 —-D—- C:Windowssystem32Msdtc
2010-04-06 04:53:29 —-D—- C:Windowssystem32catroot2
2010-04-06 04:53:29 —-D—- C:Windowsregistration
2010-04-06 04:53:29 —-D—- C:Windowsinf
2010-04-06 01:56:46 —-D—- C:WindowsLogs
2010-04-06 01:15:15 —-SD—- C:Users1AppDataRoamingMicrosoft
2010-04-06 00:55:16 —-A—- C:WindowsDjVuPro.INI
2010-04-03 19:57:06 —-HD—- C:Program FilesInstallShield Installation Information
2010-04-03 17:49:39 —-D—- C:Program FilesRealGTA3
2010-04-03 16:04:42 —-A—- C:Windowssystem32PerfStringBackup.INI
2010-04-01 19:28:25 —-D—- C:Users1AppDataRoamingSkype
2010-03-29 17:23:16 —-D—- C:Games
2010-03-29 13:56:58 —-D—- C:Program FilesuTorrent
2010-03-29 02:05:20 —-A—- C:WindowsPhotoSnapViewer.INI
2010-03-29 01:50:15 —-HD—- C:ProgramData
2010-03-28 23:25:09 —-D—- C:Program FilesChanges 2
2010-03-14 03:49:06 —-A—- C:Windowssystem32PnkBstrB.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 appdrv01;Application Driver (01); C:WindowsSystem32Driversappdrv01.sys [2010-04-02 2624624]
R1 kl1;kl1; C:Windowssystem32DRIVERSkl1.sys [2009-09-01 128016]
R1 KLIF;Kaspersky Lab Driver; C:Windowssystem32DRIVERSklif.sys [2010-02-09 311312]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:Windowssystem32DRIVERSklim6.sys [2009-11-03 21520]
R2 {55662437-DA8C-40c0-AADA-2C816A897A49};{55662437-DA8C-40c0-AADA-2C816A897A49}; ??C:Program FilesHewlett-PackardMediaDVD00.fcl [2008-09-26 59376]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; ??C:Program FilesCyberLinkPowerDVD800.fcl [2008-05-15 61424]
R2 hwpsgt;hwpsgt; C:Windowssystem32DRIVERShwpsgt.sys [2009-07-17 137344]
R2 lemsgt;lemsgt; C:Windowssystem32DRIVERSlemsgt.sys [2009-07-17 9472]
R3 Accelerometer;HP Accelerometer; C:Windowssystem32DRIVERSAccelerometer.sys [2008-03-27 34664]
R3 AgereSoftModem;Agere Systems Soft Modem; C:Windowssystem32DRIVERSAGRSM.sys [2008-02-29 1202560]
R3 BCM43XX;Драйвер сетевого адаптера Broadcom 802.11; C:Windowssystem32DRIVERSbcmwl6.sys [2009-04-17 1326584]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Microsoft); C:Windowssystem32DRIVERSCmBatt.sys [2008-01-21 14208]
R3 enecir;ENE CIR Receiver; C:Windowssystem32DRIVERSenecir.sys [2008-09-04 54784]
R3 HpqKbFiltr;HpqKbFilter Driver; C:Windowssystem32DRIVERSHpqKbFiltr.sys [2007-06-18 16768]
R3 JMCR;JMCR; C:Windowssystem32DRIVERSjmcr.sys [2008-08-07 97536]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:Windowssystem32DRIVERSklmouflt.sys [2009-10-02 19472]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:Windowssystem32driversnvhda32v.sys [2008-08-06 44576]
R3 nvlddmkm;nvlddmkm; C:Windowssystem32DRIVERSnvlddmkm.sys [2008-09-13 7391392]
R3 pfc;Padus ASPI Shell; C:Windowssystem32driverspfc.sys [2009-09-17 9856]
R3 RTL8169;Realtek 8169 NT Driver; C:Windowssystem32DRIVERSRtlh86.sys [2008-08-06 124928]
R3 STHDA;IDT High Definition Audio CODEC; C:Windowssystem32DRIVERSstwrt.sys [2008-09-11 389120]
R3 SynTP;Synaptics TouchPad Driver; C:Windowssystem32DRIVERSSynTP.sys [2008-06-20 200112]
R3 usbvideo;USB-видеоустройство (WDM); C:WindowsSystem32Driversusbvideo.sys [2008-01-21 134016]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:Windowssystem32DRIVERSwmiacpi.sys [2008-01-21 11264]
S3 afuu75m4;afuu75m4; C:Windowssystem32driversafuu75m4.sys []
S3 aj3ca47g;aj3ca47g; C:Windowssystem32driversaj3ca47g.sys []
S3 drmkaud;Звуковой дешифратор DRM ядра системы; C:Windowssystem32driversdrmkaud.sys [2008-01-21 5632]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:Windowssystem32driverserrdev.sys [2008-01-21 6656]
S3 HdAudAddService;Драйвер функции UAA для службы High Definition Audio (Microsoft), версия 1.1; C:Windowssystem32driversHdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Представитель служб потоков Microsoft; C:Windowssystem32driversMSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Посредник синхронизации потоков Microsoft; C:Windowssystem32driversMSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Представитель диспетчера качества потоков Microsoft; C:Windowssystem32driversMSPQM.sys [2008-01-21 5504]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:Windowssystem32driversMSTEE.sys [2008-01-21 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:Windowssystem32DRIVERSNETw3v32.sys [2008-01-21 2225664]
S3 sdbus;sdbus; C:Windowssystem32DRIVERSsdbus.sys [2008-01-21 88576]
S3 UIUSys;Conexant Setup API; C:Windowssystem32DRIVERSUIUSYS.SYS []
S3 usbscan;Драйвер USB-сканера; C:Windowssystem32DRIVERSusbscan.sys [2008-01-21 35328]
S3 WUDFRd;WUDFRd; C:Windowssystem32DRIVERSWUDFRd.sys [2008-01-21 83328]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:Windowssystem32DRIVERSyk60x86.sys [2006-11-02 194048]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:WindowsSystem32DriverStoreFileRepositorystwrt.inf_805f33deaestsrv.exe [2008-06-27 77824]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:Windowssystem32agrsmsvc.exe [2007-12-11 12800]
R2 ezSharedSvc;Easybits Shared Services for Windows; C:Windowssystem32svchost.exe [2008-01-21 21504]
R2 HP Health Check Service;HP Health Check Service; c:Program FilesHewlett-PackardHP Health Checkhphc_service.exe [2008-06-16 94208]
R2 hpsrv;HP Service; C:Windowssystem32Hpservice.exe [2008-03-18 19456]
R2 ICQ Service;ICQ Service; C:Program FilesICQ6ToolbarICQ Service.exe [2008-10-19 222456]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:Program FilesCommon FilesLightScribeLSSrvc.exe [2008-06-09 73728]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-20 322120]
R2 nvsvc;NVIDIA Display Driver Service; C:Windowssystem32nvvsvc.exe [2008-09-13 196608]
R2 PnkBstrA;PnkBstrA; C:Windowssystem32PnkBstrA.exe [2009-07-03 66872]
R2 Recovery Service for Windows;Recovery Service for Windows; C:Program FilesSMINSTBLService.exe [2008-10-06 365952]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared filesRichVideo.exe [2008-06-30 241734]
R2 STacSV;Audio Service; C:WindowsSystem32DriverStoreFileRepositorystwrt.inf_805f33deSTacSV.exe [2008-09-11 237650]
R2 TVCapSvc;TV Background Capture Service (TVBCS); C:Program FilesHewlett-PackardMediaTVKernelTVTVCapSvc.exe [2008-09-24 296320]
R2 TVSched;TV Task Scheduler (TVTS); C:Program FilesHewlett-PackardMediaTVKernelTVTVSched.exe [2008-09-24 116096]
R3 Com4QLBEx;Com4QLBEx; C:Program FilesHewlett-PackardHP Quick Launch ButtonsCom4QLBEx.exe [2008-04-03 193840]
R3 hpqwmiex;hpqwmiex; C:Program FilesHewlett-PackardSharedhpqwmiex.exe [2008-05-01 165192]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:WindowsSystem32appdrvrem01.exe [2010-04-02 316816]
S3 aspnet_state;Служба состояний ASP.NET; C:WindowsMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-01-21 33800]
S3 AVP;Kaspersky Internet Security; C:Program FilesKaspersky LabKaspersky Internet Security 2010avp.exe [2009-10-20 340456]
S3 GameConsoleService;GameConsoleService; C:Program FilesHP GamesMy HP Game ConsoleGameConsoleService.exe [2008-05-06 165416]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe [2004-10-22 73728]
S3 NBService;NBService; C:Program FilesNeroNero 7Nero BackItUpNBService.exe [2006-10-10 724992]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 usnjsvc;Служба Messenger Sharing Folders USN Journal Reader; C:Program FilesMSN Messengerusnsvc.exe [2007-01-19 97136]

EOF
7 апреля, 2010 в 2:07 пп #29310
35
Participant
- Темы:1
- Сообщений:3
O23 — Service: HP Health Check Service — Hewlett-Packard — c:Program FilesHewlett-PackardHP Health Checkhphc_service.exe
O23 — Service: hpqwmiex — Hewlett-Packard Development Company, L.P. — C:Program FilesHewlett-PackardSharedhpqwmiex.exe
O23 — Service: HP Service (hpsrv) — Hewlett-Packard Corporation — C:Windowssystem32Hpservice.exe
O23 — Service: ICQ Service — Unknown owner — C:Program FilesICQ6ToolbarICQ Service.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 — Service: LightScribeService Direct Disc Labeling Service (LightScribeService) — Hewlett-Packard Company — C:Program FilesCommon FilesLightScribeLSSrvc.exe
O23 — Service: NBService — Nero AG — C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 — Service: NVIDIA Display Driver Service (nvsvc) — NVIDIA Corporation — C:Windowssystem32nvvsvc.exe
O23 — Service: PnkBstrA — Unknown owner — C:Windowssystem32PnkBstrA.exe
O23 — Service: Recovery Service for Windows — Unknown owner — C:Program FilesSMINSTBLService.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared filesRichVideo.exe
O23 — Service: Audio Service (STacSV) — IDT, Inc. — C:WindowsSystem32DriverStoreFileRepositorystwrt.inf_805f33deSTacSV.exe
O23 — Service: TV Background Capture Service (TVBCS) (TVCapSvc) — Unknown owner — C:Program FilesHewlett-PackardMediaTVKernelTVTVCapSvc.exe
O23 — Service: TV Task Scheduler (TVTS) (TVSched) — Unknown owner — C:Program FilesHewlett-PackardMediaTVKernelTVTVSched.exe

—
End of file — 40555 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2008-06-12 75128]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class — C:Program FilesKaspersky LabKaspersky Internet Security 2010ievkbd.dll [2009-10-20 68112]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_07binssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}]
AOL Toolbar BHO — C:Program FilesAOLпанель инструментов AOL 5.0aoltb.dll [2008-07-02 1185120]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8dec4b69-27c4-405d-a37d-8d45c83f66ab}]
MadLen.uCoz.coM Toolbar — C:Program FilesMadLen.uCoz.coMtbMadL.dll [2009-12-31 2349080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class — C:Program FilesKaspersky LabKaspersky Internet Security 2010klwtbbho.dll [2009-10-20 268816]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{DE9C389F-3316-41A7-809B-AA305ED9D922} — AOL Toolbar — C:Program FilesAOLпанель инструментов AOL 5.0aoltb.dll [2008-07-02 1185120]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2008-12-09 958200]
{8dec4b69-27c4-405d-a37d-8d45c83f66ab} — MadLen.uCoz.coM Toolbar — C:Program FilesMadLen.uCoz.coMtbMadL.dll [2009-12-31 2349080]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=C:Windowssystem32NvCpl.dll [2008-09-13 13584928]
«NvMediaCenter»=C:Windowssystem32NvMcTray.dll [2008-09-13 92704]
«SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2008-06-20 1316136]
«SysTrayApp»=C:Program FilesIDTWDMsttray.exe [2008-09-11 446556]
«DVDAgent»=C:Program FilesHewlett-PackardMediaDVDDVDAgent.exe [2008-09-26 1148200]
«TSMAgent»=C:Program FilesHewlett-PackardTouchSmartMediaTSMAgent.exe [2008-09-25 1152296]
«CLMLServer for HP TouchSmart»=C:Program FilesHewlett-PackardTouchSmartMediaKernelCLMLCLMLSvc.exe [2008-09-25 189736]
«TVAgent»=C:Program FilesHewlett-PackardMediaTVTVAgent.exe [2008-09-24 206120]
«UCam_Menu»=C:Program FilesHewlett-PackardMediaWebcamMUITransferMUIStartMenu.exe [2008-06-13 210216]
«SmartMenu»=C:Program FilesHewlett-PackardHP MediaSmartSmartMenu.exe [2008-09-23 912688]
«UpdateLBPShortCut»=C:Program FilesCyberLinkLabelPrintMUITransferMUIStartMenu.exe [2008-06-13 210216]
«UpdatePSTShortCut»=C:Program FilesCyberLinkDVD SuiteMUITransferMUIStartMenu.exe [2008-09-26 210216]
«Windows Defender»=C:Program FilesWindows DefenderMSASCui.exe [2008-01-21 1008184]
«QlbCtrl.exe»=C:Program FilesHewlett-PackardHP Quick Launch ButtonsQlbCtrl.exe [2008-08-01 202032]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2008-06-12 34672]
«UpdateP2GoShortCut»=C:Program FilesCyberLinkPower2GoMUITransferMUIStartMenu.exe [2008-06-13 210216]
«UpdatePDIRShortCut»=C:Program FilesCyberLinkPowerDirectorMUITransferMUIStartMenu.exe [2008-06-13 210216]
«SunJavaUpdateSched»=C:Program FilesJavajre1.6.0_07binjusched.exe [2008-06-10 144784]
«HP Health Check Scheduler»=c:Program FilesHewlett-PackardHP Health CheckHPHC_Scheduler.exe [2008-06-16 75008]
«HP Software Update»=C:Program FilesHpHP Software UpdateHPWuSchd2.exe [2007-05-08 54840]
«hpWirelessAssistant»=C:Program FilesHewlett-PackardHP Wireless AssistantHPWAMain.exe [2008-04-15 488752]
«RemoteControl8″=C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe [2008-03-20 83240]
«PDVD8LanguageShortcut»=C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe [2007-12-14 50472]
«BDRegion»=C:Program FilesCyberlinkShared Filesbrs.exe [2008-05-19 91432]
«NeroFilterCheck»=C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2006-11-21 35328]
«QuickTime Task»=C:Program FilesQuickTimeqttask.exe [2009-07-11 98304]
«2gis update client UI»=C:Program Files2gisUpdateClientWin32UpdateClientUI.exe -minimized []

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«LightScribe Control Panel»=C:Program FilesCommon FilesLightScribeLightScribeControlPanel.exe [2008-06-09 2363392]
«Skype»=C:Program FilesSkypePhoneSkype.exe [2008-04-30 22058792]
«WMPNSCFG»=C:Program FilesWindows Media PlayerWMPNSCFG.exe [2008-01-21 202240]
«ICQ»=C:Program FilesICQ6.5ICQ.exe [2009-11-16 172792]
«Your Cottonelle Puppy»=C:Program FilesYour Cottonelle PuppyYour Cottonelle Puppy.exe [2010-01-22 2577728]
«AlcoholAutomount»=C:Program FilesAlcohol SoftAlcohol 120axcmd.exe [2009-04-24 203928]
«AlSrvN»=C:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe [2009-04-17 53248]
«DAEMON Tools Pro Agent»=C:Program FilesDAEMON Tools ProDTProAgent.exe [2009-12-18 427328]
«Shell»=C:Userssystems.exe [2010-04-06 320512]

C:Users1AppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
Samsung Auto Backup Guage.lnk — C:Program FilesClarusSamsung Auto BackupISFGuage.exe
Samsung Auto Backup Real-Time Daemon.lnk — C:Program FilesClarusSamsung Auto BackupISFRealTimeD.exe
Samsung Auto Backup Scheduler.lnk — C:Program FilesClarusSamsung Auto BackupISFTimerD.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»C:PROGRA~1KASPER~1KASPER~1mzvkbd3.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyklogon]
C:Windowssystem32klogon.dll [2009-10-20 219664]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{E54729E8-BB3D-4270-9D49-7389EA579090}»=C:Windowssystem32EZUPBH~1.DLL [2009-07-01 51656]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalPEVSystemStart]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalprocexp90.Sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkPEVSystemStart]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkprocexp90.Sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWdf01000.sys]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«DisableLockWorkstation»=0
«DisableChangePassword»=0

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«EnableLUA»=0
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«EnableUIADesktopToggle»=0
«HideFastUserSwitching»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoLogoff»=0
«NoClose»=0

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{7b0d6994-663d-11de-bded-00238bb1a67e}]
shellAutoRuncommand — H:SamsungSoftwareAPPInst.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{7b0d699a-663d-11de-bded-00238bb1a67e}]
shellAutoRuncommand — F:driverusb–ђЃј‡‘Љ•†‘†НЂЊЋ
shellopencommand — F:driverusb–ђЃј‡‘Љ•†‘†НЂЊЋ

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{fafd3b44-3a7b-11df-bd01-b613461f6ecd}]
shellAutoRuncommand — G:autorun.exe

======List of files/folders created in the last 1 months======

2010-04-11 19:06:41 —-D—- C:Program Filestrend micro
2010-04-11 19:06:40 —-D—- C:rsit
2010-04-11 18:15:18 —-D—- C:32788R22FWJFW
2010-04-10 23:45:20 —-A—- C:Windowssystem32CF30977.exe
2010-04-10 23:44:27 —-A—- C:Windowssystem32cmd.execf
2010-04-10 23:36:34 —-A—- C:Windowssystem32CF29416.exe
2010-04-10 23:35:32 —-A—- C:Windowssystem32CF29129.exe
2010-04-10 23:35:08 —-A—- C:Windowssystem32swsc.exe
2010-04-10 23:35:04 —-A—- C:Bug.txt
2010-04-03 02:46:11 —-D—- C:Program FilesНовый Диск
2010-04-03 02:44:20 —-D—- C:Users1AppDataRoamingInstallShield
2010-04-02 23:51:23 —-A—- C:Windowssystem32appdrvrem01.exe
2010-04-02 17:40:24 —-D—- C:Program FilesAkella Games
2010-04-02 16:01:17 —-D—- C:Program FilesLegacy Interactive
2010-03-29 04:15:20 —-A—- C:Windowssystem32D3DX9_42.dll
2010-03-29 04:15:20 —-A—- C:Windowssystem32d3dx10_41.dll
2010-03-29 04:15:20 —-A—- C:Windowssystem32D3DCompiler_41.dll
2010-03-29 04:15:18 —-A—- C:Windowssystem32D3DX9_41.dll
2010-03-29 04:15:17 —-A—- C:Windowssystem32XAudio2_4.dll
2010-03-29 04:15:17 —-A—- C:Windowssystem32XAPOFX1_3.dll
2010-03-29 04:15:16 —-A—- C:Windowssystem32xactengine3_4.dll
2010-03-29 04:15:16 —-A—- C:Windowssystem32X3DAudio1_6.dll
2010-03-29 04:15:09 —-A—- C:Windowssystem32d3dx10_40.dll
2010-03-29 04:15:09 —-A—- C:Windowssystem32D3DCompiler_40.dll
2010-03-29 04:15:08 —-A—- C:Windowssystem32D3DX9_40.dll
2010-03-29 04:15:07 —-A—- C:Windowssystem32XAudio2_3.dll
2010-03-29 04:15:07 —-A—- C:Windowssystem32XAPOFX1_2.dll
2010-03-29 04:15:05 —-A—- C:Windowssystem32xactengine3_3.dll
2010-03-29 04:15:05 —-A—- C:Windowssystem32X3DAudio1_5.dll
2010-03-29 04:10:44 —-HD—- C:Windowsmsdownld.tmp
2010-03-29 04:10:27 —-D—- C:Windowssystem32directx
2010-03-29 04:10:11 —-D—- C:Program FilesOpenAL
2010-03-29 04:10:11 —-A—- C:Windowssystem32wrap_oal.dll
2010-03-29 04:10:11 —-A—- C:Windowssystem32OpenAL32.dll
2010-03-29 01:50:38 —-D—- C:Program FilesDAEMON Tools Pro
2010-03-29 01:50:15 —-D—- C:Users1AppDataRoamingDAEMON Tools Pro
2010-03-29 01:50:15 —-D—- C:ProgramDataDAEMON Tools Pro
2010-03-28 23:50:38 —-D—- C:Users1AppDataRoamingHdO Adventure
2010-03-28 23:47:04 —-D—- C:Program FilesConduit
2010-03-28 23:47:03 —-D—- C:Program FilesMadLen.uCoz.coM
2010-03-28 19:33:10 —-D—- C:Program FilesMafia — Бандитский Петербург
2010-03-28 19:27:38 —-D—- C:Program FilesAlcohol Soft
2010-03-27 22:01:37 —-D—- C:Program FilesCreative
2010-03-27 21:57:14 —-D—- C:Program FilesMafia
2010-03-14 22:32:36 —-A—- C:Windowsntbtlog.txt

======List of files/folders modified in the last 1 months======

2010-04-11 19:06:46 —-D—- C:WindowsTemp
2010-04-11 19:06:41 —-RD—- C:Program Files
2010-04-11 19:01:17 —-D—- C:Windowstracing
2010-04-11 17:29:56 —-A—- C:WindowsNeroDigital.ini
2010-04-11 01:35:54 —-SHD—- C:System Volume Information
2010-04-11 01:14:22 —-RD—- C:Users
2010-04-11 01:13:52 —-D—- C:Users1AppDataRoamingYour Cottonelle Puppy
2010-04-11 01:13:52 —-D—- C:Program FilesYour Cottonelle Puppy
2010-04-11 00:37:11 —-D—- C:Windows
2010-04-11 00:36:20 —-D—- C:Program FilesBarbie as The Princess and the Pauper
2010-04-10 23:45:20 —-AD—- C:WindowsSystem32
2010-04-10 23:45:13 —-D—- C:Windowssystem32ru-RU
2010-04-10 23:45:07 —-D—- C:Windowssystem32drivers
2010-04-10 23:44:13 —-D—- C:WindowsPrefetch
2010-04-10 23:35:32 —-D—- C:ComboFix
2010-04-09 22:58:36 —-D—- C:ProgramDataKaspersky Lab
2010-04-06 22:44:58 —-D—- C:Users1AppDataRoamingICQ
2010-04-06 07:14:59 —-D—- C:Program FilesOpera
2010-04-06 07:12:58 —-D—- C:WindowsMinidump
2010-04-06 04:54:23 —-D—- C:Windowssystem32wbem
2010-04-06 04:53:37 —-D—- C:Windowssystem32config
2010-04-06 04:53:29 —-D—- C:WindowsTasks
2010-04-06 04:53:29 —-D—- C:Windowssystem32spool
2010-04-06 04:53:29 —-D—- C:Windowssystem32Msdtc
2010-04-06 04:53:29 —-D—- C:Windowssystem32catroot2
2010-04-06 04:53:29 —-D—- C:Windowsregistration
2010-04-06 04:53:29 —-D—- C:Windowsinf
2010-04-06 01:56:46 —-D—- C:WindowsLogs
2010-04-06 01:15:15 —-SD—- C:Users1AppDataRoamingMicrosoft
2010-04-06 00:55:16 —-A—- C:WindowsDjVuPro.INI
2010-04-03 19:57:06 —-HD—- C:Program FilesInstallShield Installation Information
2010-04-03 17:49:39 —-D—- C:Program FilesRealGTA3
2010-04-03 16:04:42 —-A—- C:Windowssystem32PerfStringBackup.INI
2010-04-01 19:28:25 —-D—- C:Users1AppDataRoamingSkype
2010-03-29 17:23:16 —-D—- C:Games
2010-03-29 13:56:58 —-D—- C:Program FilesuTorrent
2010-03-29 02:05:20 —-A—- C:WindowsPhotoSnapViewer.INI
2010-03-29 01:50:15 —-HD—- C:ProgramData
2010-03-28 23:25:09 —-D—- C:Program FilesChanges 2
2010-03-14 03:49:06 —-A—- C:Windowssystem32PnkBstrB.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 appdrv01;Application Driver (01); C:WindowsSystem32Driversappdrv01.sys [2010-04-02 2624624]
R1 kl1;kl1; C:Windowssystem32DRIVERSkl1.sys [2009-09-01 128016]
R1 KLIF;Kaspersky Lab Driver; C:Windowssystem32DRIVERSklif.sys [2010-02-09 311312]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:Windowssystem32DRIVERSklim6.sys [2009-11-03 21520]
R2 {55662437-DA8C-40c0-AADA-2C816A897A49};{55662437-DA8C-40c0-AADA-2C816A897A49}; ??C:Program FilesHewlett-PackardMediaDVD00.fcl [2008-09-26 59376]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; ??C:Program FilesCyberLinkPowerDVD800.fcl [2008-05-15 61424]
R2 hwpsgt;hwpsgt; C:Windowssystem32DRIVERShwpsgt.sys [2009-07-17 137344]
R2 lemsgt;lemsgt; C:Windowssystem32DRIVERSlemsgt.sys [2009-07-17 9472]
R3 Accelerometer;HP Accelerometer; C:Windowssystem32DRIVERSAccelerometer.sys [2008-03-27 34664]
R3 AgereSoftModem;Agere Systems Soft Modem; C:Windowssystem32DRIVERSAGRSM.sys [2008-02-29 1202560]
R3 BCM43XX;Драйвер сетевого адаптера Broadcom 802.11; C:Windowssystem32DRIVERSbcmwl6.sys [2009-04-17 1326584]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Microsoft); C:Windowssystem32DRIVERSCmBatt.sys [2008-01-21 14208]
R3 enecir;ENE CIR Receiver; C:Windowssystem32DRIVERSenecir.sys [2008-09-04 54784]
R3 HpqKbFiltr;HpqKbFilter Driver; C:Windowssystem32DRIVERSHpqKbFiltr.sys [2007-06-18 16768]
R3 JMCR;JMCR; C:Windowssystem32DRIVERSjmcr.sys [2008-08-07 97536]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:Windowssystem32DRIVERSklmouflt.sys [2009-10-02 19472]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:Windowssystem32driversnvhda32v.sys [2008-08-06 44576]
R3 nvlddmkm;nvlddmkm; C:Windowssystem32DRIVERSnvlddmkm.sys [2008-09-13 7391392]
R3 pfc;Padus ASPI Shell; C:Windowssystem32driverspfc.sys [2009-09-17 9856]
R3 RTL8169;Realtek 8169 NT Driver; C:Windowssystem32DRIVERSRtlh86.sys [2008-08-06 124928]
R3 STHDA;IDT High Definition Audio CODEC; C:Windowssystem32DRIVERSstwrt.sys [2008-09-11 389120]
R3 SynTP;Synaptics TouchPad Driver; C:Windowssystem32DRIVERSSynTP.sys [2008-06-20 200112]
R3 usbvideo;USB-видеоустройство (WDM); C:WindowsSystem32Driversusbvideo.sys [2008-01-21 134016]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:Windowssystem32DRIVERSwmiacpi.sys [2008-01-21 11264]
S3 afuu75m4;afuu75m4; C:Windowssystem32driversafuu75m4.sys []
S3 aj3ca47g;aj3ca47g; C:Windowssystem32driversaj3ca47g.sys []
S3 drmkaud;Звуковой дешифратор DRM ядра системы; C:Windowssystem32driversdrmkaud.sys [2008-01-21 5632]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:Windowssystem32driverserrdev.sys [2008-01-21 6656]
S3 HdAudAddService;Драйвер функции UAA для службы High Definition Audio (Microsoft), версия 1.1; C:Windowssystem32driversHdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Представитель служб потоков Microsoft; C:Windowssystem32driversMSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Посредник синхронизации потоков Microsoft; C:Windowssystem32driversMSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Представитель диспетчера качества потоков Microsoft; C:Windowssystem32driversMSPQM.sys [2008-01-21 5504]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:Windowssystem32driversMSTEE.sys [2008-01-21 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:Windowssystem32DRIVERSNETw3v32.sys [2008-01-21 2225664]
S3 sdbus;sdbus; C:Windowssystem32DRIVERSsdbus.sys [2008-01-21 88576]
S3 UIUSys;Conexant Setup API; C:Windowssystem32DRIVERSUIUSYS.SYS []
S3 usbscan;Драйвер USB-сканера; C:Windowssystem32DRIVERSusbscan.sys [2008-01-21 35328]
S3 WUDFRd;WUDFRd; C:Windowssystem32DRIVERSWUDFRd.sys [2008-01-21 83328]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:Windowssystem32DRIVERSyk60x86.sys [2006-11-02 194048]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:WindowsSystem32DriverStoreFileRepositorystwrt.inf_805f33deaestsrv.exe [2008-06-27 77824]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:Windowssystem32agrsmsvc.exe [2007-12-11 12800]
R2 ezSharedSvc;Easybits Shared Services for Windows; C:Windowssystem32svchost.exe [2008-01-21 21504]
R2 HP Health Check Service;HP Health Check Service; c:Program FilesHewlett-PackardHP Health Checkhphc_service.exe [2008-06-16 94208]
R2 hpsrv;HP Service; C:Windowssystem32Hpservice.exe [2008-03-18 19456]
R2 ICQ Service;ICQ Service; C:Program FilesICQ6ToolbarICQ Service.exe [2008-10-19 222456]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:Program FilesCommon FilesLightScribeLSSrvc.exe [2008-06-09 73728]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-20 322120]
R2 nvsvc;NVIDIA Display Driver Service; C:Windowssystem32nvvsvc.exe [2008-09-13 196608]
R2 PnkBstrA;PnkBstrA; C:Windowssystem32PnkBstrA.exe [2009-07-03 66872]
R2 Recovery Service for Windows;Recovery Service for Windows; C:Program FilesSMINSTBLService.exe [2008-10-06 365952]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared filesRichVideo.exe [2008-06-30 241734]
R2 STacSV;Audio Service; C:WindowsSystem32DriverStoreFileRepositorystwrt.inf_805f33deSTacSV.exe [2008-09-11 237650]
R2 TVCapSvc;TV Background Capture Service (TVBCS); C:Program FilesHewlett-PackardMediaTVKernelTVTVCapSvc.exe [2008-09-24 296320]
R2 TVSched;TV Task Scheduler (TVTS); C:Program FilesHewlett-PackardMediaTVKernelTVTVSched.exe [2008-09-24 116096]
R3 Com4QLBEx;Com4QLBEx; C:Program FilesHewlett-PackardHP Quick Launch ButtonsCom4QLBEx.exe [2008-04-03 193840]
R3 hpqwmiex;hpqwmiex; C:Program FilesHewlett-PackardSharedhpqwmiex.exe [2008-05-01 165192]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:WindowsSystem32appdrvrem01.exe [2010-04-02 316816]
S3 aspnet_state;Служба состояний ASP.NET; C:WindowsMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-01-21 33800]
S3 AVP;Kaspersky Internet Security; C:Program FilesKaspersky LabKaspersky Internet Security 2010avp.exe [2009-10-20 340456]
S3 GameConsoleService;GameConsoleService; C:Program FilesHP GamesMy HP Game ConsoleGameConsoleService.exe [2008-05-06 165416]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe [2004-10-22 73728]
S3 NBService;NBService; C:Program FilesNeroNero 7Nero BackItUpNBService.exe [2006-10-10 724992]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 usnjsvc;Служба Messenger Sharing Folders USN Journal Reader; C:Program FilesMSN Messengerusnsvc.exe [2007-01-19 97136]

EOF
9 апреля, 2010 в 2:06 пп #29311
Admin
Keymaster
- Темы:40
- Сообщений:5676
Здравствуйте, добро пожаловать на Spyware-ru форум.

Скачайте OTM by OldTimer кликнув по этой ссылке.
Запустите OTM и в большое поле ввода (заголовок этого поля выделен желтым цветом) скопируйте следующий текст.
```
:reg

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]

"Shell"=-



:files

C:Userssystems.exe



:Commands

[emptytemp]

[Reboot]
```
Проверьте вставленный скрипт, если слева перед директивами появились пробелы, то удалите их, скрипт должен выглядеть так же как в сообщении. Кликните по кнопке MoveIt!. В процессе работы возможна перезагрузка компьютера.
По-завершении работы программы должен будет показан лог. Если лог не будет показан, то его можно найти в папке C:_OTMMovedFiles.

Вставьте в ваше ответное сообщение содержимое этого лога. И приложите свежий RSIT лог.
Автор

Сообщения

Просмотр 4 сообщений - с 1 по 4 (из 4 всего)

Для ответа в этой теме необходимо авторизоваться.

помогите избавится от порнобанеров (Диана 3)

Добро пожаловать

Поиск

Последние темы

СПАЙВАРЕ РУ

Нужна помощь?

Ссылки