• Инструкции
    • Как использовать
      • Программы
    • Как удалить
      • Шпионское и рекламное ПО (adware и spyware)
      • Поддельное антиспайваре
      • Руткиты
      • Трояны
      • Кейлоггеры
  • Скачать программы
  • Вопросы и Ответы
  • Форумы

SPYWARE-RU.COM

Меню
  • Инструкции
    • Как использовать
      • Программы
    • Как удалить
      • Шпионское и рекламное ПО (adware и spyware)
      • Поддельное антиспайваре
      • Руткиты
      • Трояны
      • Кейлоггеры
  • Скачать программы
  • Вопросы и Ответы
  • Форумы
В начало › Trojan.packed.20819 — нужна помощь.
Adguard
 

Trojan.packed.20819 — нужна помощь.

Удаление вирусов и троянов. Защита компьютера. › Помощь в удалении вирусов, троянов, рекламы и других зловредов › Trojan.packed.20819 — нужна помощь.

  • This topic has 1 ответ, 1 участник, and was last updated 15 years назад by sdimann.
Просмотр 2 сообщений - с 1 по 2 (из 2 всего)
  • Автор
    Сообщения
  • 19 августа, 2010 в 6:03 дп #18594
    sdimann
    Participant
    • Темы:1
    • Сообщений:2
    • ☆

    Помогите пожалуйста с проблемой:
    Вирус определяется dr.web как Trojan.packed.20819, только файл вируса другой —
    C:WINDOWSsystem32driverspsboqlg.sys, удалить не удается. Процесс
    » Ключ: Сервисы: Службы терминалов Файл: svchost.exe Значение: C:WINDOWSsystem32svchost -k DcomLaunch «
    жрет 50 % процессорного времени после соединения с сетью.
    Лог RSIT:

    SITLogfile of random’s system information tool 1.08 (written by random/random)
    Run by skorobog at 2010-08-19 12:58:04
    Microsoft Windows XP Home Edition Service Pack 3
    System drive C: has 15 GB (21%) free of 69 GB
    Total RAM: 1535 MB (39% free)

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 12:58:16, on 19.08.2010
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:WINDOWSSystem32smss.exe
    C:WINDOWSsystem32winlogon.exe
    C:WINDOWSsystem32services.exe
    C:WINDOWSsystem32lsass.exe
    C:WINDOWSsystem32Ati2evxx.exe
    C:WINDOWSsystem32svchost.exe
    C:WINDOWSSystem32svchost.exe
    C:WINDOWSsystem32svchost.exe
    C:WINDOWSsystem32Ati2evxx.exe
    C:Program FilesIntelWirelessBinEvtEng.exe
    C:Program FilesIntelWirelessBinS24EvMon.exe
    C:Program FilesIntelWirelessBinWLKeeper.exe
    C:WINDOWSsystem32spoolsv.exe
    C:Program FilesAviraAntiVir Desktopsched.exe
    C:Program FilesAviraAntiVir Desktopavguard.exe
    C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
    C:Program FilesBonjourmDNSResponder.exe
    C:Program FilesIntelWirelessBinRegSrvc.exe
    C:WINDOWSsystem32svchost.exe
    C:Program FilesBitvise WinSSHDWinSSHD.exe
    C:Program FilesRealVNCVNC4WinVNC4.exe
    C:WINDOWSExplorer.EXE
    C:WINDOWSATK0100HControl.exe
    C:WINDOWSsm56hlpr.exe
    C:WINDOWSRTHDCPL.EXE
    C:WINDOWSATK0100ATKOSD.exe
    C:Program FilesASUSATK MediaDMEDIA.EXE
    C:Program FilesSynapticsSynTPSynTPEnh.exe
    C:Program FilesASUSPower4 GearBatteryLife.exe
    C:Program FilesIntelWirelessbinZCfgSvc.exe
    C:Program FilesIntelWirelessBinifrmewrk.exe
    C:Program FilesWireless Console 2wcourier.exe
    C:Program FilesATI TechnologiesATI.ACECLI.EXE
    C:Program FilesAviraAntiVir Desktopavgnt.exe
    C:Program FilesWebMoney Agentwmagent.exe
    C:Program FilesQuickTimeQTTask.exe
    C:Program FilesIntelWirelessBinDot1XCfg.exe
    C:Program FilesGoogleQuick Search BoxGoogleQuickSearchBox.exe
    C:Program FilesiTunesiTunesHelper.exe
    C:Program Files2gis3.02GISTrayNotifier.exe
    C:WINDOWSsystem32ctfmon.exe
    C:Program FilesSkypePhoneSkype.exe
    C:Program FilesBitvise WinSSHDsshdctrl.exe
    C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
    C:Program FilesSteamSteam.exe
    C:Program FilesAnVir Task ManagerAnVir.exe
    C:WINDOWSSystem32svchost.exe
    C:Program FilesiPodbiniPodService.exe
    C:Program FilesInternet Exploreriexplore.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Program FilesATI TechnologiesATI.ACEcli.exe
    C:Program FilesATI TechnologiesATI.ACEcli.exe
    C:Program FilesSkypePlugin ManagerskypePM.exe
    C:Program FilesInternet Exploreriexplore.exe
    C:Program FilesInternet Exploreriexplore.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:WINDOWSsystem32NOTEPAD.EXE
    C:Program FilesTotalcmd.6xxTOTALCMD.EXE
    G:AvirRSIT.exe
    C:Program Filestrend microskorobog.exe

    R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
    R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
    O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — c:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
    O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
    O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
    O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
    O4 — HKLM..Run: [HControl] C:WINDOWSATK0100HControl.exe
    O4 — HKLM..Run: [SMSERIAL] C:WINDOWSsm56hlpr.exe
    O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
    O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
    O4 — HKLM..Run: [ATKMEDIA] C:Program FilesASUSATK MediaDMEDIA.EXE
    O4 — HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
    O4 — HKLM..Run: [Power_Gear] C:Program FilesASUSPower4 GearBatteryLife.exe 1
    O4 — HKLM..Run: [IntelZeroConfig] «C:Program FilesIntelWirelessbinZCfgSvc.exe»
    O4 — HKLM..Run: [IntelWireless] «C:Program FilesIntelWirelessBinifrmewrk.exe» /tf Intel PROSet/Wireless
    O4 — HKLM..Run: [Wireless Console 2] C:Program FilesWireless Console 2wcourier.exe
    O4 — HKLM..Run: [ATICCC] «C:Program FilesATI TechnologiesATI.ACECLIStart.exe»
    O4 — HKLM..Run: [WinSSHD Activation State Checker] «C:Program FilesBitvise WinSSHDWinsshdActStateCheck.exe»
    O4 — HKLM..Run: [avgnt] «C:Program FilesAviraAntiVir Desktopavgnt.exe» /min
    O4 — HKLM..Run: [wmagent.exe] «C:Program FilesWebMoney Agentwmagent.exe»
    O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeQTTask.exe» -atboottime
    O4 — HKLM..Run: [Google Quick Search Box] «C:Program FilesGoogleQuick Search BoxGoogleQuickSearchBox.exe» /autorun
    O4 — HKLM..Run: [iTunesHelper] «C:Program FilesiTunesiTunesHelper.exe»
    O4 — HKLM..Run: [2Gis Update Notifier] C:Program Files2gis3.02GISTrayNotifier.exe
    O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
    O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
    O4 — HKCU..Run: [Skype] «C:Program FilesSkype\PhoneSkype.exe» /nosplash /minimized
    O4 — HKCU..Run: [Persistent WinSSHD Control Panel] «C:Program FilesBitvise WinSSHDsshdctrl.exe» -startMinimized
    O4 — HKCU..Run: [Google Update] «C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe» /c
    O4 — HKCU..Run: [swg] «C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe»
    O4 — HKCU..Run: [Steam] «C:Program FilesSteamSteam.exe» -silent
    O4 — HKCU..Run: [AnVir Task Manager] «C:Program FilesAnVir Task ManagerAnVir.exe» Minimized
    O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
    O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
    O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
    O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
    O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
    O8 — Extra context menu item: Google ВикиКомментарии… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
    O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
    O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
    O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
    O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
    O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
    O14 — IERESET.INF: START_PAGE_URL=http://www.asus.com
    O15 — Trusted Zone: *.authority.ru
    O15 — Trusted Zone: *.bankplus.ru
    O15 — Trusted Zone: *.faktura.ru
    O16 — DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) — http://dlcdnet.asus.com/pub/ASUS/misc/dlm-activex-2.2.5.0.cab
    O16 — DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) — http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1258130529031
    O16 — DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) — http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1258263018718
    O16 — DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} — http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
    O18 — Protocol: vw-wi — {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} — C:ElsaWinbinwiProt.dll
    O22 — SharedTaskScheduler: Предзагрузчик Browseui — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWSsystem32browseui.dll
    O22 — SharedTaskScheduler: Демон кэша категорий компонентов — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWSsystem32browseui.dll
    O23 — Service: 2GIS UpdateService (2GISUpdateService) — ООО ДубльГИС — C:Program Files2gis3.02GISUpdateService.exe
    O23 — Service: Avira AntiVir Планировщик (AntiVirSchedulerService) — Avira GmbH — C:Program FilesAviraAntiVir Desktopsched.exe
    O23 — Service: Avira AntiVir Guard (AntiVirService) — Avira GmbH — C:Program FilesAviraAntiVir Desktopavguard.exe
    O23 — Service: Apple Mobile Device — Apple Inc. — C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
    O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
    O23 — Service: Служба Bonjour (Bonjour Service) — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
    O23 — Service: Code Composer Studio Platinum Edition v3.3 — Texas Instruments — C:Program FilesCommon FilesTexas Instruments SharedServiceccstudio33FET.exe
    O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
    O23 — Service: Intel(R) PROSet/Wireless Event Log (EvtEng) — Intel Corporation — C:Program FilesIntelWirelessBinEvtEng.exe
    O23 — Service: Служба Google Update (gupdate) (gupdate) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
    O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
    O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
    O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
    O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
    O23 — Service: ELSA Administration Service (LcSvrAdm) — Volkswagen AG — C:ElsaWinbinLcSvrAdm.exe
    O23 — Service: ELSA Auftragsverwaltungs Service (LcSvrAuf) — Volkswagen AG — C:ElsaWinbinLcSvrAuf.exe
    O23 — Service: ELSA DBA Server (LcSvrDba) — Volkswagen AG — C:ElsaWinbinLcSvrDba.exe
    O23 — Service: ELSA Historie Server (LcSvrHis) — Volkswagen AG — C:ElsaWinbinLcSvrHis.exe
    O23 — Service: ELSA PASS Server (LcSvrPAS) — Volkswagen AG — C:ElsaWinbinLcSvrPas.exe
    O23 — Service: ELSA APOSpro Server (LcSvrSaz) — Volkswagen AG — C:ElsaWinbinLcSvrSaz.exe
    O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
    O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
    O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
    O23 — Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) — Intel Corporation — C:Program FilesIntelWirelessBinRegSrvc.exe
    O23 — Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) — Intel Corporation — C:Program FilesIntelWirelessBinS24EvMon.exe
    O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
    O23 — Service: ServiceLayer — Nokia — C:Program FilesPC Connectivity SolutionServiceLayer.exe
    O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
    O23 — Service: ELSA Vaudis Service (VSGate) — Volkswagen AG — C:ElsaWinbinVSgate.exe
    O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
    O23 — Service: WinSSHD — Bitvise — C:Program FilesBitvise WinSSHDWinSSHD.exe
    O23 — Service: VNC Server Version 4 (WinVNC4) — RealVNC Ltd. — C:Program FilesRealVNCVNC4WinVNC4.exe
    O23 — Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) — Intel(R) Corporation — C:Program FilesIntelWirelessBinWLKeeper.exe
    O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

    —
    End of file — 14655 bytes

    ======Scheduled tasks folder======

    C:WINDOWStasksAppleSoftwareUpdate.job
    C:WINDOWStasksGoogleUpdateTaskMachineCore.job
    C:WINDOWStasksGoogleUpdateTaskMachineUA.job
    C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1302075664-3005429513-2352639745-1005Core.job
    C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1302075664-3005429513-2352639745-1005UA.job
    C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1302075664-3005429513-2352639745-1006Core.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    AcroIEHlprObj Class — c:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2004-12-14 63136]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
    Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-07-19 278192]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2010-05-27 41760]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
    {2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-07-19 278192]

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
    «HControl»=C:WINDOWSATK0100HControl.exe [2006-04-17 110592]
    «SMSERIAL»=C:WINDOWSsm56hlpr.exe [2006-03-21 544768]
    «RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2006-05-04 16206848]
    «Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
    «ATKMEDIA»=C:Program FilesASUSATK MediaDMEDIA.EXE [2006-02-15 49152]
    «SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2006-05-25 786521]
    «Power_Gear»=C:Program FilesASUSPower4 GearBatteryLife.exe [2006-03-14 90112]
    «IntelZeroConfig»=C:Program FilesIntelWirelessbinZCfgSvc.exe [2006-08-02 802816]
    «IntelWireless»=C:Program FilesIntelWirelessBinifrmewrk.exe [2006-08-02 696320]
    «Wireless Console 2″=C:Program FilesWireless Console 2wcourier.exe [2005-10-17 987136]
    «ATICCC»=C:Program FilesATI TechnologiesATI.ACECLIStart.exe [2006-05-10 90112]
    «WinSSHD Activation State Checker»=C:Program FilesBitvise WinSSHDWinsshdActStateCheck.exe [2010-02-10 244992]
    «avgnt»=C:Program FilesAviraAntiVir Desktopavgnt.exe [2009-03-02 209153]
    «wmagent.exe»=C:Program FilesWebMoney Agentwmagent.exe [2009-10-19 210400]
    «QuickTime Task»=C:Program FilesQuickTimeQTTask.exe [2010-03-17 421888]
    «Google Quick Search Box»=C:Program FilesGoogleQuick Search BoxGoogleQuickSearchBox.exe [2010-05-27 126976]
    «iTunesHelper»=C:Program FilesiTunesiTunesHelper.exe [2010-06-15 141624]
    «2Gis Update Notifier»=C:Program Files2gis3.02GISTrayNotifier.exe [2010-06-04 3319640]
    «KernelFaultCheck»=C:WINDOWSsystem32dumprep 0 -k []

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
    «CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
    «Skype»=C:Program FilesSkype\PhoneSkype.exe [2010-03-09 26100520]
    «Persistent WinSSHD Control Panel»=C:Program FilesBitvise WinSSHDsshdctrl.exe [2010-02-10 3366112]
    «Google Update»=C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2010-02-11 135664]
    «swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-11-29 39408]
    «Steam»=C:Program FilesSteamSteam.exe [2010-07-21 1238352]
    «AnVir Task Manager»=C:Program FilesAnVir Task ManagerAnVir.exe [2010-06-23 3233560]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
    C:WINDOWSsystem32Ati2evxx.dll [2006-08-02 86016]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
    WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
    «dontdisplaylastusername»=0
    «legalnoticecaption»=
    «legalnoticetext»=
    «shutdownwithoutlogon»=1
    «undockwithoutlogon»=1

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
    «NoDriveTypeAutoRun»=145

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
    «HonorAutoRunSetting»=1

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
    «%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
    «C:DOCUME~1skorobogLOCALS~1Temp526.exe»=»C:DOCUME~1skorobogLOCALS~1Temp526.exe:*:C:WINDOWSjcdrive32.exe»
    «C:Program FilesSkypePlugin ManagerskypePM.exe»=»C:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
    «%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
    «C:Documents and SettingsskorobogtempTeamViewerVersion4TeamViewer.exe»=»C:Documents and SettingsskorobogtempTeamViewerVersion4TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application»
    «C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
    «C:Program FilesRealVNCVNC4winvnc4.exe»=»C:Program FilesRealVNCVNC4winvnc4.exe:*:Enabled:VNC Server»
    «C:Program FilesTotalcmd.6xxTOTALCMD.EXE»=»C:Program FilesTotalcmd.6xxTOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows»
    «C:Program FilesAltium Designer Summer 09dxp.exe»=»C:Program FilesAltium Designer Summer 09dxp.exe:*:Disabled:dxp»
    «C:Program FilesFlylinkDC++StrongDC.exe»=»C:Program FilesFlylinkDC++StrongDC.exe:*:Enabled:FlylinkDC++»
    «C:Program FilesNokiaNokia Ovi SuiteNokiaOviSuite.exe»=»C:Program FilesNokiaNokia Ovi SuiteNokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite 2»
    «C:Program FilesCommon FilesNokiaService LayerAnsl_host_process.exe»=»C:Program FilesCommon FilesNokiaService LayerAnsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process «
    «C:Program FilesBonjourmDNSResponder.exe»=»C:Program FilesBonjourmDNSResponder.exe:*:Enabled:Служба Bonjour»
    «C:Program FilesiTunesiTunes.exe»=»C:Program FilesiTunesiTunes.exe:*:Enabled:iTunes»
    «C:Program FilesSteamSteam.exe»=»C:Program FilesSteamSteam.exe:*:Enabled:Steam»
    «C:Program FilesSteamsteamappscommonr.u.s.e. free week endRuse.exe»=»C:Program FilesSteamsteamappscommonr.u.s.e. free week endRuse.exe:*:Enabled:R.U.S.E. Free Week End»
    «C:Program Files2gis3.0grym.exe»=»C:Program Files2gis3.0grym.exe:*:Enabled:ДубльГИС 3.0»
    «C:Program FilesSteamsteamappscommonleft 4 dead 2left4dead2.exe»=»C:Program FilesSteamsteamappscommonleft 4 dead 2left4dead2.exe:*:Enabled:Left 4 Dead 2»
    «C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype «
    «C:Program FilesAviraAntiVir Desktopupdate.exe»=»C:Program FilesAviraAntiVir Desktopupdate.exe:*:Enabled:update»

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
    «%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
    «%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»

    ======List of files/folders created in the last 1 months======

    2010-08-19 00:30:53 —-A—- C:WINDOWSsystem32driversvdmzodcz.sys
    2010-08-18 23:34:26 —-D—- C:rsit
    2010-08-18 23:34:26 —-D—- C:Program Filestrend micro
    2010-08-18 18:18:05 —-HDC—- C:WINDOWS$NtUninstallKB971513$
    2010-08-18 14:59:03 —-D—- C:Documents and SettingsskorobogApplication DataMalwarebytes
    2010-08-18 14:58:53 —-A—- C:WINDOWSsystem32driversmbamswissarmy.sys
    2010-08-18 14:58:51 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
    2010-08-18 14:58:51 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
    2010-08-18 14:58:51 —-A—- C:WINDOWSsystem32driversmbam.sys
    2010-08-13 20:14:06 —-HDC—- C:WINDOWS$NtUninstallKB982214$
    2010-08-13 20:13:37 —-HDC—- C:WINDOWS$NtUninstallKB2115168$
    2010-08-13 20:12:35 —-HDC—- C:WINDOWS$NtUninstallKB981852$
    2010-08-13 20:10:23 —-HDC—- C:WINDOWS$NtUninstallKB2079403$
    2010-08-13 19:48:36 —-HDC—- C:WINDOWS$NtUninstallKB2160329$
    2010-08-13 19:48:06 —-HDC—- C:WINDOWS$NtUninstallKB980436$
    2010-08-13 19:33:37 —-HDC—- C:WINDOWS$NtUninstallKB981997$
    2010-08-13 19:33:05 —-HDC—- C:WINDOWS$NtUninstallKB982665$
    2010-08-13 08:57:12 —-A—- C:WINDOWSsystem32driverspsboqlg.sys
    2010-08-03 03:00:37 —-HDC—- C:WINDOWS$NtUninstallKB2286198$
    2010-07-30 10:27:37 —-A—- C:WINDOWSUpdateClientUI.INI
    2010-07-21 01:04:25 —-D—- C:Program FilesSteam
    2010-07-20 03:08:48 —-HDC—- C:WINDOWS$NtUninstallKB2229593$

    ======List of files/folders modified in the last 1 months======

    2010-08-19 12:57:55 —-A—- C:WINDOWSWINCMD.INI
    2010-08-19 12:48:27 —-D—- C:WINDOWSTemp
    2010-08-19 12:47:25 —-D—- C:Documents and SettingsskorobogApplication DataskypePM
    2010-08-19 12:46:46 —-D—- C:Documents and SettingsskorobogApplication DataSkype
    2010-08-19 12:41:32 —-D—- C:WINDOWSsystem32CatRoot2
    2010-08-19 02:04:29 —-A—- C:WINDOWSSchedLgU.Txt
    2010-08-19 01:44:14 —-D—- C:WINDOWSsystem32drivers
    2010-08-19 01:33:32 —-D—- C:WINDOWSPrefetch
    2010-08-18 23:54:01 —-D—- C:WINDOWSsystem32
    2010-08-18 23:54:01 —-D—- C:WINDOWS
    2010-08-18 23:34:26 —-RD—- C:Program Files
    2010-08-18 18:25:05 —-RSHD—- C:WINDOWSsystem32dllcache
    2010-08-18 18:18:19 —-HD—- C:WINDOWSinf
    2010-08-18 18:14:04 —-D—- C:Program FilesRadmin
    2010-08-18 18:08:46 —-D—- C:WINDOWSMinidump
    2010-08-18 17:08:02 —-HDC—- C:WINDOWS$NtUninstallKB954459$
    2010-08-18 17:06:43 —-SHD—- C:RECYCLER
    2010-08-13 23:42:42 —-D—- C:WINDOWSMicrosoft.NET
    2010-08-13 23:42:39 —-RSD—- C:WINDOWSassembly
    2010-08-13 20:14:33 —-A—- C:WINDOWSimsins.BAK
    2010-08-13 20:14:06 —-HD—- C:WINDOWS$hf_mig$
    2010-08-13 20:09:27 —-SHD—- C:WINDOWSInstaller
    2010-08-13 20:09:27 —-D—- C:Config.Msi
    2010-08-13 20:07:05 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
    2010-08-13 20:04:05 —-D—- C:WINDOWSWinSxS
    2010-08-13 19:50:32 —-D—- C:Program FilesInternet Explorer
    2010-08-13 19:49:33 —-D—- C:WINDOWSie8updates
    2010-08-13 19:34:03 —-D—- C:Program FilesMovie Maker
    2010-08-04 01:09:31 —-A—- C:WINDOWSsystem32MRT.exe
    2010-08-01 09:44:23 —-D—- C:Documents and SettingsskorobogApplication DataAltiumDesignerSummer09
    2010-07-30 10:28:45 —-D—- C:Program Files2gis
    2010-07-28 18:09:14 —-D—- C:Documents and SettingsAll UsersApplication DataAltiumDesignerSummer09
    2010-07-27 22:27:51 —-D—- C:WINDOWSsystem32NtmsData
    2010-07-27 13:30:30 —-A—- C:WINDOWSsystem32shell32.dll
    2010-07-21 12:09:08 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
    2010-07-21 01:17:50 —-D—- C:Program FilesAnVir Task Manager
    2010-07-21 00:59:15 —-D—- C:Documents and SettingsskorobogApplication DataWebMoney
    2010-07-20 18:47:22 —-D—- C:DC++Incomplete

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R0 ohci1394;OHCI-совместимый IEEE 1394 хост-контроллер; C:WINDOWSsystem32DRIVERSohci1394.sys [2008-04-14 61696]
    R0 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2008-01-18 77696]
    R1 avgio;avgio; ??C:Program FilesAviraAntiVir Desktopavgio.sys []
    R1 avipbb;avipbb; C:WINDOWSsystem32DRIVERSavipbb.sys [2009-03-30 96104]
    R1 FileDisk;FileDisk; C:WINDOWSsystem32driversFileDisk.sys [2005-10-16 12928]
    R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-14 40704]
    R1 PQNTDrv;PQNTDrv; C:WINDOWSsystem32driversPQNTDrv.sys [2003-04-16 4228]
    R1 ssmdrv;ssmdrv; C:WINDOWSsystem32DRIVERSssmdrv.sys [2009-05-11 28520]
    R1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:WINDOWSSystem32Driverstosrfcom.sys [2005-08-01 64896]
    R1 uzmzmza0;AVZ-RK Kernel Driver; ??C:WINDOWSsystem32Driversuzmzmza0.sys []
    R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:WINDOWSsystem32DRIVERSAegisP.sys [2009-11-15 21419]
    R2 altio;altio; ??C:Program FilesAltium Designer Summer 09SystemDriversaltio.sys []
    R2 avgntflt;avgntflt; C:WINDOWSsystem32DRIVERSavgntflt.sys [2009-11-25 56816]
    R2 drpkiont;drpkiont; ??C:WINDOWSsystem32drpkiont.sys []
    R2 s24trans;WLAN Transport; C:WINDOWSsystem32DRIVERSs24trans.sys [2006-08-02 12544]
    R2 xdsfast1;XDSFast1_ISA_Bus_Driver; ??C:WINDOWSsystem32xdsfast1.sys []
    R3 Arp1394;Протокол клиента 1394 ARP; C:WINDOWSsystem32DRIVERSarp1394.sys [2008-04-14 60800]
    R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2006-08-02 1681920]
    R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:WINDOWSSYSTEM32DRIVERSGEARAspiWDM.sys [2009-05-18 26600]
    R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-13 144384]
    R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2006-05-04 4271616]
    R3 MODEMCSA;Устройство фильтрации потока Unimodem; C:WINDOWSsystem32driversMODEMCSA.sys [2001-08-17 16128]
    R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
    R3 MTsensor;ATK0100 ACPI UTILITY; C:WINDOWSsystem32DRIVERSATKACPI.sys [2005-02-17 5632]
    R3 NETw3x32;Драйвер адаптера Intel(R) PRO/Wireless 3945ABG для 32-разрядной версии Windows XP; C:WINDOWSsystem32DRIVERSNETw3x32.sys [2006-09-27 1709696]
    R3 NIC1394;Сетевой драйвер 1394; C:WINDOWSsystem32DRIVERSnic1394.sys [2008-04-14 61824]
    R3 R5BaseSmc;USB Token Holder Service; C:WINDOWSsystem32DRIVERSsmccard.sys [2010-03-31 12800]
    R3 rimmptsk;rimmptsk; C:WINDOWSsystem32DRIVERSrimmptsk.sys [2005-09-17 28672]
    R3 rimsptsk;rimsptsk; C:WINDOWSsystem32DRIVERSrimsptsk.sys [2005-09-14 50560]
    R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WINDOWSSystem32DriversRootMdm.sys [2004-08-18 5888]
    R3 sdbus;sdbus; C:WINDOWSsystem32DRIVERSsdbus.sys [2008-04-14 79232]
    R3 smserial;smserial; C:WINDOWSsystem32DRIVERSsmserial.sys [2006-03-21 889472]
    R3 SynMini;ASUS WebCam, 1.3M, USB2.0, FF; C:WINDOWSSystem32DriversSynMini.sys [2006-01-20 841110]
    R3 SynScan;ASUS WebCam Still Image; C:WINDOWSSystem32DriversSynScan.sys [2006-01-02 8278]
    R3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2006-05-25 193088]
    R3 tosporte;Bluetooth Port Driver from Toshiba; C:WINDOWSsystem32DRIVERStosporte.sys [2005-11-24 47104]
    R3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:WINDOWSSystem32Driverstosrfbd.sys [2006-02-03 108928]
    R3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:WINDOWSSystem32Driverstosrfbnp.sys [2005-12-14 37632]
    R3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:WINDOWSsystem32DRIVERSTosrfhid.sys [2006-02-08 62848]
    R3 Tosrfusb;Bluetooth USB Controller; C:WINDOWSSystem32Driverstosrfusb.sys [2006-01-31 39808]
    R3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
    R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-14 20608]
    R3 vncmirror;vncmirror; C:WINDOWSsystem32DRIVERSvncmirror.sys [2009-03-17 4608]
    S1 vdmzmza0;AVZ-BC Kernel Driver; ??C:WINDOWSsystem32Driversvdmzmza0.sys []
    S2 IWPORT;IWPORT; ??C:WINDOWSSYSTEM32DRIVERSIWPORT.SYS []
    S3 adusbser;AnyDATA USB Device for Legacy Serial Communication; C:WINDOWSsystem32DRIVERSadusbser.sys [2006-10-23 93440]
    S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-14 17024]
    S3 mos24ser;MosChip High-Speed USB MultiSerial Device Service; C:WINDOWSsystem32DRIVERSmos24ser.sys [2006-10-11 546560]
    S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2008-04-14 5504]
    S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-14 85248]
    S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-14 10880]
    S3 NDMSHLP;Device Monitor Helper Driver; ??C:Program FilesCommon FilesHHD SoftwareDevice Monitorndmshlp.sys []
    S3 nmwcd;Nokia USB Phone Parent; C:WINDOWSsystem32driversccdcmb.sys [2010-01-21 18048]
    S3 nmwcdc;Nokia USB Generic; C:WINDOWSsystem32driversccdcmbo.sys [2009-12-30 22016]
    S3 OTSysCom;OTSysCom; ??C:Program FilesLG Electronics IncLGComSpy++OTSysCom.sys []
    S3 pccsmcfd;PCCS Mode Change Filter Driver; C:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
    S3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2005-11-16 78976]
    S3 Ser2pl;Prolific Serial port driver; C:WINDOWSsystem32DRIVERSser2pl.sys [2003-07-16 43264]
    S3 sffdisk;Драйвер класса SFF Storage; C:WINDOWSsystem32DRIVERSsffdisk.sys [2008-04-14 11904]
    S3 sffp_sd;Драйвер протокола SFF Storage для SDBus; C:WINDOWSsystem32DRIVERSsffp_sd.sys [2008-04-14 11008]
    S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-14 11136]
    S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-14 15232]
    S3 token;USB Token Service; C:WINDOWSsystem32DRIVERSeps2kt1.sys [2010-03-31 21888]
    S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:WINDOWSsystem32driversToshidpt.sys [2005-07-11 3712]
    S3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:WINDOWSsystem32DRIVERStosrfnds.sys [2005-01-06 18612]
    S3 TosRfSnd;Bluetooth Audio Device (WDM) from TOSHIBA; C:WINDOWSsystem32driversTosRfSnd.sys [2005-11-11 52864]
    S3 upperdev;upperdev; C:WINDOWSsystem32DRIVERSusbser_lowerflt.sys [2009-12-30 7936]
    S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-14 32128]
    S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
    S3 usbser;USB Modem Driver; C:WINDOWSsystem32DRIVERSusbser.sys [2008-04-14 26112]
    S3 UsbserFilt;UsbserFilt; C:WINDOWSsystem32DRIVERSusbser_lowerfltj.sys [2009-12-30 7936]
    S3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:WINDOWSsystem32DRIVERSw39n51.sys []
    S3 Wdf01000;Kernel Mode Driver Frameworks service; C:WINDOWSSystem32Driverswdf01000.sys [2008-03-27 503008]
    S3 WpdUsb;WpdUsb; C:WINDOWSsystem32DRIVERSwpdusb.sys [2006-10-18 38528]
    S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-14 19200]
    S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-01-18 83328]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AntiVirSchedulerService;Avira AntiVir Планировщик; C:Program FilesAviraAntiVir Desktopsched.exe [2009-05-13 108289]
    R2 AntiVirService;Avira AntiVir Guard; C:Program FilesAviraAntiVir Desktopavguard.exe [2009-07-21 185089]
    R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe [2010-06-10 144176]
    R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2006-08-02 401408]
    R2 Bonjour Service;Служба Bonjour; C:Program FilesBonjourmDNSResponder.exe [2010-05-18 345376]
    R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:Program FilesIntelWirelessBinEvtEng.exe [2006-08-02 434176]
    R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:Program FilesIntelWirelessBinRegSrvc.exe [2006-08-02 327680]
    R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:Program FilesIntelWirelessBinS24EvMon.exe [2006-08-02 937984]
    R2 WinSSHD;WinSSHD; C:Program FilesBitvise WinSSHDWinSSHD.exe [2010-02-10 5872936]
    R2 WinVNC4;VNC Server Version 4; C:Program FilesRealVNCVNC4WinVNC4.exe [2009-03-17 1492344]
    R2 WLANKEEPER;Intel(R) PROSet/Wireless SSO Service; C:Program FilesIntelWirelessBinWLKeeper.exe [2006-08-02 290816]
    R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
    R3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2010-06-15 540472]
    S2 gupdate;Служба Google Update (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-02-11 135664]
    S3 2GISUpdateService;2GIS UpdateService; C:Program Files2gis3.02GISUpdateService.exe [2010-06-04 775512]
    S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
    S3 Code Composer Studio Platinum Edition v3.3;Code Composer Studio Platinum Edition v3.3; C:Program FilesCommon FilesTexas Instruments SharedServiceccstudio33FET.exe [2010-02-14 72704]
    S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
    S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-11-29 182768]
    S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
    S3 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2010-04-12 153376]
    S3 LcSvrAdm;ELSA Administration Service; C:ElsaWinbinLcSvrAdm.exe [2009-07-06 147456]
    S3 LcSvrAuf;ELSA Auftragsverwaltungs Service; C:ElsaWinbinLcSvrAuf.exe [2009-07-06 1306624]
    S3 LcSvrDba;ELSA DBA Server; C:ElsaWinbinLcSvrDba.exe [2009-07-06 241664]
    S3 LcSvrHis;ELSA Historie Server; C:ElsaWinbinLcSvrHis.exe [2009-07-06 217088]
    S3 LcSvrPAS;ELSA PASS Server; C:ElsaWinbinLcSvrPas.exe [2009-07-06 368640]
    S3 LcSvrSaz;ELSA APOSpro Server; C:ElsaWinbinLcSvrSaz.exe [2009-07-06 258048]
    S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2008-11-04 441712]
    S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
    S3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2010-01-26 652800]
    S3 VSGate;ELSA Vaudis Service; C:ElsaWinbinVSgate.exe [2009-07-06 81920]
    S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-11-02 914944]
    S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]


    EOF



    Второго лога нет почему-то.

    19 августа, 2010 в 6:10 дп #30892
    sdimann
    Participant
    • Темы:1
    • Сообщений:2
    • ☆

    Нашел второй лог:
    SITLogfile of random’s system information tool 1.08 (written by random/random)
    Run by skorobog at 2010-08-19 12:58:04
    Microsoft Windows XP Home Edition Service Pack 3
    System drive C: has 15 GB (21%) free of 69 GB
    Total RAM: 1535 MB (39% free)

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 12:58:16, on 19.08.2010
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:WINDOWSSystem32smss.exe
    C:WINDOWSsystem32winlogon.exe
    C:WINDOWSsystem32services.exe
    C:WINDOWSsystem32lsass.exe
    C:WINDOWSsystem32Ati2evxx.exe
    C:WINDOWSsystem32svchost.exe
    C:WINDOWSSystem32svchost.exe
    C:WINDOWSsystem32svchost.exe
    C:WINDOWSsystem32Ati2evxx.exe
    C:Program FilesIntelWirelessBinEvtEng.exe
    C:Program FilesIntelWirelessBinS24EvMon.exe
    C:Program FilesIntelWirelessBinWLKeeper.exe
    C:WINDOWSsystem32spoolsv.exe
    C:Program FilesAviraAntiVir Desktopsched.exe
    C:Program FilesAviraAntiVir Desktopavguard.exe
    C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
    C:Program FilesBonjourmDNSResponder.exe
    C:Program FilesIntelWirelessBinRegSrvc.exe
    C:WINDOWSsystem32svchost.exe
    C:Program FilesBitvise WinSSHDWinSSHD.exe
    C:Program FilesRealVNCVNC4WinVNC4.exe
    C:WINDOWSExplorer.EXE
    C:WINDOWSATK0100HControl.exe
    C:WINDOWSsm56hlpr.exe
    C:WINDOWSRTHDCPL.EXE
    C:WINDOWSATK0100ATKOSD.exe
    C:Program FilesASUSATK MediaDMEDIA.EXE
    C:Program FilesSynapticsSynTPSynTPEnh.exe
    C:Program FilesASUSPower4 GearBatteryLife.exe
    C:Program FilesIntelWirelessbinZCfgSvc.exe
    C:Program FilesIntelWirelessBinifrmewrk.exe
    C:Program FilesWireless Console 2wcourier.exe
    C:Program FilesATI TechnologiesATI.ACECLI.EXE
    C:Program FilesAviraAntiVir Desktopavgnt.exe
    C:Program FilesWebMoney Agentwmagent.exe
    C:Program FilesQuickTimeQTTask.exe
    C:Program FilesIntelWirelessBinDot1XCfg.exe
    C:Program FilesGoogleQuick Search BoxGoogleQuickSearchBox.exe
    C:Program FilesiTunesiTunesHelper.exe
    C:Program Files2gis3.02GISTrayNotifier.exe
    C:WINDOWSsystem32ctfmon.exe
    C:Program FilesSkypePhoneSkype.exe
    C:Program FilesBitvise WinSSHDsshdctrl.exe
    C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
    C:Program FilesSteamSteam.exe
    C:Program FilesAnVir Task ManagerAnVir.exe
    C:WINDOWSSystem32svchost.exe
    C:Program FilesiPodbiniPodService.exe
    C:Program FilesInternet Exploreriexplore.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Program FilesATI TechnologiesATI.ACEcli.exe
    C:Program FilesATI TechnologiesATI.ACEcli.exe
    C:Program FilesSkypePlugin ManagerskypePM.exe
    C:Program FilesInternet Exploreriexplore.exe
    C:Program FilesInternet Exploreriexplore.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
    C:WINDOWSsystem32NOTEPAD.EXE
    C:Program FilesTotalcmd.6xxTOTALCMD.EXE
    G:AvirRSIT.exe
    C:Program Filestrend microskorobog.exe

    R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
    R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
    O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — c:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
    O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
    O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
    O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
    O4 — HKLM..Run: [HControl] C:WINDOWSATK0100HControl.exe
    O4 — HKLM..Run: [SMSERIAL] C:WINDOWSsm56hlpr.exe
    O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
    O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
    O4 — HKLM..Run: [ATKMEDIA] C:Program FilesASUSATK MediaDMEDIA.EXE
    O4 — HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
    O4 — HKLM..Run: [Power_Gear] C:Program FilesASUSPower4 GearBatteryLife.exe 1
    O4 — HKLM..Run: [IntelZeroConfig] «C:Program FilesIntelWirelessbinZCfgSvc.exe»
    O4 — HKLM..Run: [IntelWireless] «C:Program FilesIntelWirelessBinifrmewrk.exe» /tf Intel PROSet/Wireless
    O4 — HKLM..Run: [Wireless Console 2] C:Program FilesWireless Console 2wcourier.exe
    O4 — HKLM..Run: [ATICCC] «C:Program FilesATI TechnologiesATI.ACECLIStart.exe»
    O4 — HKLM..Run: [WinSSHD Activation State Checker] «C:Program FilesBitvise WinSSHDWinsshdActStateCheck.exe»
    O4 — HKLM..Run: [avgnt] «C:Program FilesAviraAntiVir Desktopavgnt.exe» /min
    O4 — HKLM..Run: [wmagent.exe] «C:Program FilesWebMoney Agentwmagent.exe»
    O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeQTTask.exe» -atboottime
    O4 — HKLM..Run: [Google Quick Search Box] «C:Program FilesGoogleQuick Search BoxGoogleQuickSearchBox.exe» /autorun
    O4 — HKLM..Run: [iTunesHelper] «C:Program FilesiTunesiTunesHelper.exe»
    O4 — HKLM..Run: [2Gis Update Notifier] C:Program Files2gis3.02GISTrayNotifier.exe
    O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
    O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
    O4 — HKCU..Run: [Skype] «C:Program FilesSkype\PhoneSkype.exe» /nosplash /minimized
    O4 — HKCU..Run: [Persistent WinSSHD Control Panel] «C:Program FilesBitvise WinSSHDsshdctrl.exe» -startMinimized
    O4 — HKCU..Run: [Google Update] «C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe» /c
    O4 — HKCU..Run: [swg] «C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe»
    O4 — HKCU..Run: [Steam] «C:Program FilesSteamSteam.exe» -silent
    O4 — HKCU..Run: [AnVir Task Manager] «C:Program FilesAnVir Task ManagerAnVir.exe» Minimized
    O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
    O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
    O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
    O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
    O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
    O8 — Extra context menu item: Google ВикиКомментарии… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
    O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
    O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
    O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
    O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
    O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
    O14 — IERESET.INF: START_PAGE_URL=http://www.asus.com
    O15 — Trusted Zone: *.authority.ru
    O15 — Trusted Zone: *.bankplus.ru
    O15 — Trusted Zone: *.faktura.ru
    O16 — DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) — http://dlcdnet.asus.com/pub/ASUS/misc/dlm-activex-2.2.5.0.cab
    O16 — DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) — http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1258130529031
    O16 — DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) — http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1258263018718
    O16 — DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} — http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
    O18 — Protocol: vw-wi — {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} — C:ElsaWinbinwiProt.dll
    O22 — SharedTaskScheduler: Предзагрузчик Browseui — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWSsystem32browseui.dll
    O22 — SharedTaskScheduler: Демон кэша категорий компонентов — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWSsystem32browseui.dll
    O23 — Service: 2GIS UpdateService (2GISUpdateService) — ООО ДубльГИС — C:Program Files2gis3.02GISUpdateService.exe
    O23 — Service: Avira AntiVir Планировщик (AntiVirSchedulerService) — Avira GmbH — C:Program FilesAviraAntiVir Desktopsched.exe
    O23 — Service: Avira AntiVir Guard (AntiVirService) — Avira GmbH — C:Program FilesAviraAntiVir Desktopavguard.exe
    O23 — Service: Apple Mobile Device — Apple Inc. — C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
    O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
    O23 — Service: Служба Bonjour (Bonjour Service) — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
    O23 — Service: Code Composer Studio Platinum Edition v3.3 — Texas Instruments — C:Program FilesCommon FilesTexas Instruments SharedServiceccstudio33FET.exe
    O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
    O23 — Service: Intel(R) PROSet/Wireless Event Log (EvtEng) — Intel Corporation — C:Program FilesIntelWirelessBinEvtEng.exe
    O23 — Service: Служба Google Update (gupdate) (gupdate) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
    O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
    O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
    O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
    O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
    O23 — Service: ELSA Administration Service (LcSvrAdm) — Volkswagen AG — C:ElsaWinbinLcSvrAdm.exe
    O23 — Service: ELSA Auftragsverwaltungs Service (LcSvrAuf) — Volkswagen AG — C:ElsaWinbinLcSvrAuf.exe
    O23 — Service: ELSA DBA Server (LcSvrDba) — Volkswagen AG — C:ElsaWinbinLcSvrDba.exe
    O23 — Service: ELSA Historie Server (LcSvrHis) — Volkswagen AG — C:ElsaWinbinLcSvrHis.exe
    O23 — Service: ELSA PASS Server (LcSvrPAS) — Volkswagen AG — C:ElsaWinbinLcSvrPas.exe
    O23 — Service: ELSA APOSpro Server (LcSvrSaz) — Volkswagen AG — C:ElsaWinbinLcSvrSaz.exe
    O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
    O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
    O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
    O23 — Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) — Intel Corporation — C:Program FilesIntelWirelessBinRegSrvc.exe
    O23 — Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) — Intel Corporation — C:Program FilesIntelWirelessBinS24EvMon.exe
    O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
    O23 — Service: ServiceLayer — Nokia — C:Program FilesPC Connectivity SolutionServiceLayer.exe
    O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
    O23 — Service: ELSA Vaudis Service (VSGate) — Volkswagen AG — C:ElsaWinbinVSgate.exe
    O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
    O23 — Service: WinSSHD — Bitvise — C:Program FilesBitvise WinSSHDWinSSHD.exe
    O23 — Service: VNC Server Version 4 (WinVNC4) — RealVNC Ltd. — C:Program FilesRealVNCVNC4WinVNC4.exe
    O23 — Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) — Intel(R) Corporation — C:Program FilesIntelWirelessBinWLKeeper.exe
    O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

    —
    End of file — 14655 bytes

    ======Scheduled tasks folder======

    C:WINDOWStasksAppleSoftwareUpdate.job
    C:WINDOWStasksGoogleUpdateTaskMachineCore.job
    C:WINDOWStasksGoogleUpdateTaskMachineUA.job
    C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1302075664-3005429513-2352639745-1005Core.job
    C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1302075664-3005429513-2352639745-1005UA.job
    C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1302075664-3005429513-2352639745-1006Core.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    AcroIEHlprObj Class — c:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2004-12-14 63136]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
    Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-07-19 278192]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2010-05-27 41760]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
    {2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-07-19 278192]

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
    «HControl»=C:WINDOWSATK0100HControl.exe [2006-04-17 110592]
    «SMSERIAL»=C:WINDOWSsm56hlpr.exe [2006-03-21 544768]
    «RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2006-05-04 16206848]
    «Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
    «ATKMEDIA»=C:Program FilesASUSATK MediaDMEDIA.EXE [2006-02-15 49152]
    «SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2006-05-25 786521]
    «Power_Gear»=C:Program FilesASUSPower4 GearBatteryLife.exe [2006-03-14 90112]
    «IntelZeroConfig»=C:Program FilesIntelWirelessbinZCfgSvc.exe [2006-08-02 802816]
    «IntelWireless»=C:Program FilesIntelWirelessBinifrmewrk.exe [2006-08-02 696320]
    «Wireless Console 2″=C:Program FilesWireless Console 2wcourier.exe [2005-10-17 987136]
    «ATICCC»=C:Program FilesATI TechnologiesATI.ACECLIStart.exe [2006-05-10 90112]
    «WinSSHD Activation State Checker»=C:Program FilesBitvise WinSSHDWinsshdActStateCheck.exe [2010-02-10 244992]
    «avgnt»=C:Program FilesAviraAntiVir Desktopavgnt.exe [2009-03-02 209153]
    «wmagent.exe»=C:Program FilesWebMoney Agentwmagent.exe [2009-10-19 210400]
    «QuickTime Task»=C:Program FilesQuickTimeQTTask.exe [2010-03-17 421888]
    «Google Quick Search Box»=C:Program FilesGoogleQuick Search BoxGoogleQuickSearchBox.exe [2010-05-27 126976]
    «iTunesHelper»=C:Program FilesiTunesiTunesHelper.exe [2010-06-15 141624]
    «2Gis Update Notifier»=C:Program Files2gis3.02GISTrayNotifier.exe [2010-06-04 3319640]
    «KernelFaultCheck»=C:WINDOWSsystem32dumprep 0 -k []

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
    «CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
    «Skype»=C:Program FilesSkype\PhoneSkype.exe [2010-03-09 26100520]
    «Persistent WinSSHD Control Panel»=C:Program FilesBitvise WinSSHDsshdctrl.exe [2010-02-10 3366112]
    «Google Update»=C:Documents and SettingsskorobogLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2010-02-11 135664]
    «swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-11-29 39408]
    «Steam»=C:Program FilesSteamSteam.exe [2010-07-21 1238352]
    «AnVir Task Manager»=C:Program FilesAnVir Task ManagerAnVir.exe [2010-06-23 3233560]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
    C:WINDOWSsystem32Ati2evxx.dll [2006-08-02 86016]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
    WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
    «dontdisplaylastusername»=0
    «legalnoticecaption»=
    «legalnoticetext»=
    «shutdownwithoutlogon»=1
    «undockwithoutlogon»=1

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
    «NoDriveTypeAutoRun»=145

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
    «HonorAutoRunSetting»=1

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
    «%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
    «C:DOCUME~1skorobogLOCALS~1Temp526.exe»=»C:DOCUME~1skorobogLOCALS~1Temp526.exe:*:C:WINDOWSjcdrive32.exe»
    «C:Program FilesSkypePlugin ManagerskypePM.exe»=»C:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
    «%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
    «C:Documents and SettingsskorobogtempTeamViewerVersion4TeamViewer.exe»=»C:Documents and SettingsskorobogtempTeamViewerVersion4TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application»
    «C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
    «C:Program FilesRealVNCVNC4winvnc4.exe»=»C:Program FilesRealVNCVNC4winvnc4.exe:*:Enabled:VNC Server»
    «C:Program FilesTotalcmd.6xxTOTALCMD.EXE»=»C:Program FilesTotalcmd.6xxTOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows»
    «C:Program FilesAltium Designer Summer 09dxp.exe»=»C:Program FilesAltium Designer Summer 09dxp.exe:*:Disabled:dxp»
    «C:Program FilesFlylinkDC++StrongDC.exe»=»C:Program FilesFlylinkDC++StrongDC.exe:*:Enabled:FlylinkDC++»
    «C:Program FilesNokiaNokia Ovi SuiteNokiaOviSuite.exe»=»C:Program FilesNokiaNokia Ovi SuiteNokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite 2»
    «C:Program FilesCommon FilesNokiaService LayerAnsl_host_process.exe»=»C:Program FilesCommon FilesNokiaService LayerAnsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process «
    «C:Program FilesBonjourmDNSResponder.exe»=»C:Program FilesBonjourmDNSResponder.exe:*:Enabled:Служба Bonjour»
    «C:Program FilesiTunesiTunes.exe»=»C:Program FilesiTunesiTunes.exe:*:Enabled:iTunes»
    «C:Program FilesSteamSteam.exe»=»C:Program FilesSteamSteam.exe:*:Enabled:Steam»
    «C:Program FilesSteamsteamappscommonr.u.s.e. free week endRuse.exe»=»C:Program FilesSteamsteamappscommonr.u.s.e. free week endRuse.exe:*:Enabled:R.U.S.E. Free Week End»
    «C:Program Files2gis3.0grym.exe»=»C:Program Files2gis3.0grym.exe:*:Enabled:ДубльГИС 3.0»
    «C:Program FilesSteamsteamappscommonleft 4 dead 2left4dead2.exe»=»C:Program FilesSteamsteamappscommonleft 4 dead 2left4dead2.exe:*:Enabled:Left 4 Dead 2»
    «C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype «
    «C:Program FilesAviraAntiVir Desktopupdate.exe»=»C:Program FilesAviraAntiVir Desktopupdate.exe:*:Enabled:update»

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
    «%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
    «%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»

    ======List of files/folders created in the last 1 months======

    2010-08-19 00:30:53 —-A—- C:WINDOWSsystem32driversvdmzodcz.sys
    2010-08-18 23:34:26 —-D—- C:rsit
    2010-08-18 23:34:26 —-D—- C:Program Filestrend micro
    2010-08-18 18:18:05 —-HDC—- C:WINDOWS$NtUninstallKB971513$
    2010-08-18 14:59:03 —-D—- C:Documents and SettingsskorobogApplication DataMalwarebytes
    2010-08-18 14:58:53 —-A—- C:WINDOWSsystem32driversmbamswissarmy.sys
    2010-08-18 14:58:51 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
    2010-08-18 14:58:51 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
    2010-08-18 14:58:51 —-A—- C:WINDOWSsystem32driversmbam.sys
    2010-08-13 20:14:06 —-HDC—- C:WINDOWS$NtUninstallKB982214$
    2010-08-13 20:13:37 —-HDC—- C:WINDOWS$NtUninstallKB2115168$
    2010-08-13 20:12:35 —-HDC—- C:WINDOWS$NtUninstallKB981852$
    2010-08-13 20:10:23 —-HDC—- C:WINDOWS$NtUninstallKB2079403$
    2010-08-13 19:48:36 —-HDC—- C:WINDOWS$NtUninstallKB2160329$
    2010-08-13 19:48:06 —-HDC—- C:WINDOWS$NtUninstallKB980436$
    2010-08-13 19:33:37 —-HDC—- C:WINDOWS$NtUninstallKB981997$
    2010-08-13 19:33:05 —-HDC—- C:WINDOWS$NtUninstallKB982665$
    2010-08-13 08:57:12 —-A—- C:WINDOWSsystem32driverspsboqlg.sys
    2010-08-03 03:00:37 —-HDC—- C:WINDOWS$NtUninstallKB2286198$
    2010-07-30 10:27:37 —-A—- C:WINDOWSUpdateClientUI.INI
    2010-07-21 01:04:25 —-D—- C:Program FilesSteam
    2010-07-20 03:08:48 —-HDC—- C:WINDOWS$NtUninstallKB2229593$

    ======List of files/folders modified in the last 1 months======

    2010-08-19 12:57:55 —-A—- C:WINDOWSWINCMD.INI
    2010-08-19 12:48:27 —-D—- C:WINDOWSTemp
    2010-08-19 12:47:25 —-D—- C:Documents and SettingsskorobogApplication DataskypePM
    2010-08-19 12:46:46 —-D—- C:Documents and SettingsskorobogApplication DataSkype
    2010-08-19 12:41:32 —-D—- C:WINDOWSsystem32CatRoot2
    2010-08-19 02:04:29 —-A—- C:WINDOWSSchedLgU.Txt
    2010-08-19 01:44:14 —-D—- C:WINDOWSsystem32drivers
    2010-08-19 01:33:32 —-D—- C:WINDOWSPrefetch
    2010-08-18 23:54:01 —-D—- C:WINDOWSsystem32
    2010-08-18 23:54:01 —-D—- C:WINDOWS
    2010-08-18 23:34:26 —-RD—- C:Program Files
    2010-08-18 18:25:05 —-RSHD—- C:WINDOWSsystem32dllcache
    2010-08-18 18:18:19 —-HD—- C:WINDOWSinf
    2010-08-18 18:14:04 —-D—- C:Program FilesRadmin
    2010-08-18 18:08:46 —-D—- C:WINDOWSMinidump
    2010-08-18 17:08:02 —-HDC—- C:WINDOWS$NtUninstallKB954459$
    2010-08-18 17:06:43 —-SHD—- C:RECYCLER
    2010-08-13 23:42:42 —-D—- C:WINDOWSMicrosoft.NET
    2010-08-13 23:42:39 —-RSD—- C:WINDOWSassembly
    2010-08-13 20:14:33 —-A—- C:WINDOWSimsins.BAK
    2010-08-13 20:14:06 —-HD—- C:WINDOWS$hf_mig$
    2010-08-13 20:09:27 —-SHD—- C:WINDOWSInstaller
    2010-08-13 20:09:27 —-D—- C:Config.Msi
    2010-08-13 20:07:05 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
    2010-08-13 20:04:05 —-D—- C:WINDOWSWinSxS
    2010-08-13 19:50:32 —-D—- C:Program FilesInternet Explorer
    2010-08-13 19:49:33 —-D—- C:WINDOWSie8updates
    2010-08-13 19:34:03 —-D—- C:Program FilesMovie Maker
    2010-08-04 01:09:31 —-A—- C:WINDOWSsystem32MRT.exe
    2010-08-01 09:44:23 —-D—- C:Documents and SettingsskorobogApplication DataAltiumDesignerSummer09
    2010-07-30 10:28:45 —-D—- C:Program Files2gis
    2010-07-28 18:09:14 —-D—- C:Documents and SettingsAll UsersApplication DataAltiumDesignerSummer09
    2010-07-27 22:27:51 —-D—- C:WINDOWSsystem32NtmsData
    2010-07-27 13:30:30 —-A—- C:WINDOWSsystem32shell32.dll
    2010-07-21 12:09:08 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
    2010-07-21 01:17:50 —-D—- C:Program FilesAnVir Task Manager
    2010-07-21 00:59:15 —-D—- C:Documents and SettingsskorobogApplication DataWebMoney
    2010-07-20 18:47:22 —-D—- C:DC++Incomplete

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R0 ohci1394;OHCI-совместимый IEEE 1394 хост-контроллер; C:WINDOWSsystem32DRIVERSohci1394.sys [2008-04-14 61696]
    R0 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2008-01-18 77696]
    R1 avgio;avgio; ??C:Program FilesAviraAntiVir Desktopavgio.sys []
    R1 avipbb;avipbb; C:WINDOWSsystem32DRIVERSavipbb.sys [2009-03-30 96104]
    R1 FileDisk;FileDisk; C:WINDOWSsystem32driversFileDisk.sys [2005-10-16 12928]
    R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-14 40704]
    R1 PQNTDrv;PQNTDrv; C:WINDOWSsystem32driversPQNTDrv.sys [2003-04-16 4228]
    R1 ssmdrv;ssmdrv; C:WINDOWSsystem32DRIVERSssmdrv.sys [2009-05-11 28520]
    R1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:WINDOWSSystem32Driverstosrfcom.sys [2005-08-01 64896]
    R1 uzmzmza0;AVZ-RK Kernel Driver; ??C:WINDOWSsystem32Driversuzmzmza0.sys []
    R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:WINDOWSsystem32DRIVERSAegisP.sys [2009-11-15 21419]
    R2 altio;altio; ??C:Program FilesAltium Designer Summer 09SystemDriversaltio.sys []
    R2 avgntflt;avgntflt; C:WINDOWSsystem32DRIVERSavgntflt.sys [2009-11-25 56816]
    R2 drpkiont;drpkiont; ??C:WINDOWSsystem32drpkiont.sys []
    R2 s24trans;WLAN Transport; C:WINDOWSsystem32DRIVERSs24trans.sys [2006-08-02 12544]
    R2 xdsfast1;XDSFast1_ISA_Bus_Driver; ??C:WINDOWSsystem32xdsfast1.sys []
    R3 Arp1394;Протокол клиента 1394 ARP; C:WINDOWSsystem32DRIVERSarp1394.sys [2008-04-14 60800]
    R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2006-08-02 1681920]
    R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:WINDOWSSYSTEM32DRIVERSGEARAspiWDM.sys [2009-05-18 26600]
    R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-13 144384]
    R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2006-05-04 4271616]
    R3 MODEMCSA;Устройство фильтрации потока Unimodem; C:WINDOWSsystem32driversMODEMCSA.sys [2001-08-17 16128]
    R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
    R3 MTsensor;ATK0100 ACPI UTILITY; C:WINDOWSsystem32DRIVERSATKACPI.sys [2005-02-17 5632]
    R3 NETw3x32;Драйвер адаптера Intel(R) PRO/Wireless 3945ABG для 32-разрядной версии Windows XP; C:WINDOWSsystem32DRIVERSNETw3x32.sys [2006-09-27 1709696]
    R3 NIC1394;Сетевой драйвер 1394; C:WINDOWSsystem32DRIVERSnic1394.sys [2008-04-14 61824]
    R3 R5BaseSmc;USB Token Holder Service; C:WINDOWSsystem32DRIVERSsmccard.sys [2010-03-31 12800]
    R3 rimmptsk;rimmptsk; C:WINDOWSsystem32DRIVERSrimmptsk.sys [2005-09-17 28672]
    R3 rimsptsk;rimsptsk; C:WINDOWSsystem32DRIVERSrimsptsk.sys [2005-09-14 50560]
    R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WINDOWSSystem32DriversRootMdm.sys [2004-08-18 5888]
    R3 sdbus;sdbus; C:WINDOWSsystem32DRIVERSsdbus.sys [2008-04-14 79232]
    R3 smserial;smserial; C:WINDOWSsystem32DRIVERSsmserial.sys [2006-03-21 889472]
    R3 SynMini;ASUS WebCam, 1.3M, USB2.0, FF; C:WINDOWSSystem32DriversSynMini.sys [2006-01-20 841110]
    R3 SynScan;ASUS WebCam Still Image; C:WINDOWSSystem32DriversSynScan.sys [2006-01-02 8278]
    R3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2006-05-25 193088]
    R3 tosporte;Bluetooth Port Driver from Toshiba; C:WINDOWSsystem32DRIVERStosporte.sys [2005-11-24 47104]
    R3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:WINDOWSSystem32Driverstosrfbd.sys [2006-02-03 108928]
    R3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:WINDOWSSystem32Driverstosrfbnp.sys [2005-12-14 37632]
    R3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:WINDOWSsystem32DRIVERSTosrfhid.sys [2006-02-08 62848]
    R3 Tosrfusb;Bluetooth USB Controller; C:WINDOWSSystem32Driverstosrfusb.sys [2006-01-31 39808]
    R3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
    R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-14 20608]
    R3 vncmirror;vncmirror; C:WINDOWSsystem32DRIVERSvncmirror.sys [2009-03-17 4608]
    S1 vdmzmza0;AVZ-BC Kernel Driver; ??C:WINDOWSsystem32Driversvdmzmza0.sys []
    S2 IWPORT;IWPORT; ??C:WINDOWSSYSTEM32DRIVERSIWPORT.SYS []
    S3 adusbser;AnyDATA USB Device for Legacy Serial Communication; C:WINDOWSsystem32DRIVERSadusbser.sys [2006-10-23 93440]
    S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-14 17024]
    S3 mos24ser;MosChip High-Speed USB MultiSerial Device Service; C:WINDOWSsystem32DRIVERSmos24ser.sys [2006-10-11 546560]
    S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2008-04-14 5504]
    S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-14 85248]
    S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-14 10880]
    S3 NDMSHLP;Device Monitor Helper Driver; ??C:Program FilesCommon FilesHHD SoftwareDevice Monitorndmshlp.sys []
    S3 nmwcd;Nokia USB Phone Parent; C:WINDOWSsystem32driversccdcmb.sys [2010-01-21 18048]
    S3 nmwcdc;Nokia USB Generic; C:WINDOWSsystem32driversccdcmbo.sys [2009-12-30 22016]
    S3 OTSysCom;OTSysCom; ??C:Program FilesLG Electronics IncLGComSpy++OTSysCom.sys []
    S3 pccsmcfd;PCCS Mode Change Filter Driver; C:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
    S3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2005-11-16 78976]
    S3 Ser2pl;Prolific Serial port driver; C:WINDOWSsystem32DRIVERSser2pl.sys [2003-07-16 43264]
    S3 sffdisk;Драйвер класса SFF Storage; C:WINDOWSsystem32DRIVERSsffdisk.sys [2008-04-14 11904]
    S3 sffp_sd;Драйвер протокола SFF Storage для SDBus; C:WINDOWSsystem32DRIVERSsffp_sd.sys [2008-04-14 11008]
    S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-14 11136]
    S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-14 15232]
    S3 token;USB Token Service; C:WINDOWSsystem32DRIVERSeps2kt1.sys [2010-03-31 21888]
    S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:WINDOWSsystem32driversToshidpt.sys [2005-07-11 3712]
    S3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:WINDOWSsystem32DRIVERStosrfnds.sys [2005-01-06 18612]
    S3 TosRfSnd;Bluetooth Audio Device (WDM) from TOSHIBA; C:WINDOWSsystem32driversTosRfSnd.sys [2005-11-11 52864]
    S3 upperdev;upperdev; C:WINDOWSsystem32DRIVERSusbser_lowerflt.sys [2009-12-30 7936]
    S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-14 32128]
    S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
    S3 usbser;USB Modem Driver; C:WINDOWSsystem32DRIVERSusbser.sys [2008-04-14 26112]
    S3 UsbserFilt;UsbserFilt; C:WINDOWSsystem32DRIVERSusbser_lowerfltj.sys [2009-12-30 7936]
    S3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:WINDOWSsystem32DRIVERSw39n51.sys []
    S3 Wdf01000;Kernel Mode Driver Frameworks service; C:WINDOWSSystem32Driverswdf01000.sys [2008-03-27 503008]
    S3 WpdUsb;WpdUsb; C:WINDOWSsystem32DRIVERSwpdusb.sys [2006-10-18 38528]
    S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-14 19200]
    S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-01-18 83328]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AntiVirSchedulerService;Avira AntiVir Планировщик; C:Program FilesAviraAntiVir Desktopsched.exe [2009-05-13 108289]
    R2 AntiVirService;Avira AntiVir Guard; C:Program FilesAviraAntiVir Desktopavguard.exe [2009-07-21 185089]
    R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe [2010-06-10 144176]
    R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2006-08-02 401408]
    R2 Bonjour Service;Служба Bonjour; C:Program FilesBonjourmDNSResponder.exe [2010-05-18 345376]
    R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:Program FilesIntelWirelessBinEvtEng.exe [2006-08-02 434176]
    R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:Program FilesIntelWirelessBinRegSrvc.exe [2006-08-02 327680]
    R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:Program FilesIntelWirelessBinS24EvMon.exe [2006-08-02 937984]
    R2 WinSSHD;WinSSHD; C:Program FilesBitvise WinSSHDWinSSHD.exe [2010-02-10 5872936]
    R2 WinVNC4;VNC Server Version 4; C:Program FilesRealVNCVNC4WinVNC4.exe [2009-03-17 1492344]
    R2 WLANKEEPER;Intel(R) PROSet/Wireless SSO Service; C:Program FilesIntelWirelessBinWLKeeper.exe [2006-08-02 290816]
    R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
    R3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2010-06-15 540472]
    S2 gupdate;Служба Google Update (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-02-11 135664]
    S3 2GISUpdateService;2GIS UpdateService; C:Program Files2gis3.02GISUpdateService.exe [2010-06-04 775512]
    S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
    S3 Code Composer Studio Platinum Edition v3.3;Code Composer Studio Platinum Edition v3.3; C:Program FilesCommon FilesTexas Instruments SharedServiceccstudio33FET.exe [2010-02-14 72704]
    S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
    S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-11-29 182768]
    S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
    S3 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2010-04-12 153376]
    S3 LcSvrAdm;ELSA Administration Service; C:ElsaWinbinLcSvrAdm.exe [2009-07-06 147456]
    S3 LcSvrAuf;ELSA Auftragsverwaltungs Service; C:ElsaWinbinLcSvrAuf.exe [2009-07-06 1306624]
    S3 LcSvrDba;ELSA DBA Server; C:ElsaWinbinLcSvrDba.exe [2009-07-06 241664]
    S3 LcSvrHis;ELSA Historie Server; C:ElsaWinbinLcSvrHis.exe [2009-07-06 217088]
    S3 LcSvrPAS;ELSA PASS Server; C:ElsaWinbinLcSvrPas.exe [2009-07-06 368640]
    S3 LcSvrSaz;ELSA APOSpro Server; C:ElsaWinbinLcSvrSaz.exe [2009-07-06 258048]
    S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2008-11-04 441712]
    S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
    S3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2010-01-26 652800]
    S3 VSGate;ELSA Vaudis Service; C:ElsaWinbinVSgate.exe [2009-07-06 81920]
    S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-11-02 914944]
    S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]


    EOF


  • Автор
    Сообщения
Просмотр 2 сообщений - с 1 по 2 (из 2 всего)
  • Для ответа в этой теме необходимо авторизоваться.
Войти

Добро пожаловать

На нашем сайте размещены инструкции и программы, которые помогут вам абсолютно бесплатно и самостоятельно удалить навязчивую рекламу, вирусы и трояны.

Поиск

Последние темы

  • Странность в Malwebytes опубликовано Artem225
    5 years, 10 months назад
  • SUSPICIOUS.FakedMBR.1 что делать, помогите!!! опубликовано White
    5 years, 11 months назад
  • Помогите пожалуйста вирус замучил. опубликовано dimazons1233211
    6 years, 1 month назад
  • Замучила реклама опубликовано Данила Беспятов
    6 years, 1 month назад
  • Замучила реклама опубликовано Марк
    5 years, 11 months назад
  • Вирус S1.video.ru.net опубликовано ludovik
    6 years, 4 months назад
  • Чертов Safe Finder!!!! опубликовано kosta savo
    6 years назад
  • ESET блокирует неизвестный сайт , вход на который не осуществлялся. опубликовано trollhamaren
    6 years, 5 months назад

СПАЙВАРЕ РУ

  • О Спайваре Ру
  • Контакты
  • Реклама на сайте
  • Политика конфиденциальности
  • Правила использования

Нужна помощь?

Задайте свой вопрос прямо сейчас кликнув по следующей ссылке Задать вопрос.

Или обратитесь на наш форум, где команда Spyware-ru поможет вам. Узнайте, как попросить о помощи здесь.

Ссылки

  • Инструкции
  • Скачать программы
  • Помощь в удалении вирусов
  • Как вылечить компьютер
Copyright © 2008 - 2024 Spyware-RU.com (en)