Созданные ответы форума
-
Сообщения
-
Valeri, благодарю за проявленное внимание к моей проблеме с системой! Высылаю вам логи RootRepeal и MBAM.
ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Start Time: 2009/12/27 14:14
Program Version: Version 1.3.5.0
Windows Version: Windows XP SP3
==================================================Drivers
Name: dump_atapi.sys
Image Path: C:WINDOWSSystem32Driversdump_atapi.sys
Address: 0xEDD1E000 Size: 98304 File Visible: No Signed: —
Status: —Name: dump_WMILIB.SYS
Image Path: C:WINDOWSSystem32Driversdump_WMILIB.SYS
Address: 0xF79DB000 Size: 8192 File Visible: No Signed: —
Status: —Name: PCI_PNP6046
Image Path: DriverPCI_PNP6046
Address: 0x00000000 Size: 0 File Visible: No Signed: —
Status: —Name: rootrepeal.sys
Image Path: C:WINDOWSsystem32driversrootrepeal.sys
Address: 0xEBA6A000 Size: 49152 File Visible: No Signed: —
Status: —Name: sptd
Image Path: Driversptd
Address: 0x00000000 Size: 0 File Visible: No Signed: —
Status: —Name: spya.sys
Image Path: spya.sys
Address: 0xF725D000 Size: 1052672 File Visible: No Signed: —
Status: —Hidden/Locked Files
Path: C:hiberfil.sys
Status: Locked to the Windows API!Path: C:Documents and SettingsАняLocal SettingsTemporary Internet FilesContent.IE51VGLKQ6Xmbam.check[1].database
Status: Visible to the Windows API, but not on disk.Path: C:Documents and SettingsАняLocal SettingsTemporary Internet FilesContent.IE51VGLKQ6Xnews[1].txt
Status: Visible to the Windows API, but not on disk.Path: C:Documents and SettingsАняLocal SettingsTemporary Internet FilesContent.IE57G2G1PFWrules[1].ref
Status: Visible to the Windows API, but not on disk.Path: C:Documents and SettingsАняLocal SettingsTemporary Internet FilesContent.IE5ICNQ1I9Wmbam.check[1].program
Status: Visible to the Windows API, but not on disk.SSDT
#: 041 Function Name: NtCreateKey
Status: Hooked by «spya.sys» at address 0xf725e0e0#: 071 Function Name: NtEnumerateKey
Status: Hooked by «spya.sys» at address 0xf727cca4#: 073 Function Name: NtEnumerateValueKey
Status: Hooked by «spya.sys» at address 0xf727d032#: 119 Function Name: NtOpenKey
Status: Hooked by «spya.sys» at address 0xf725e0c0#: 160 Function Name: NtQueryKey
Status: Hooked by «spya.sys» at address 0xf727d10a#: 177 Function Name: NtQueryValueKey
Status: Hooked by «spya.sys» at address 0xf727cf8a#: 247 Function Name: NtSetValueKey
Status: Hooked by «spya.sys» at address 0xf727d19cStealth Objects
Object: Hidden Code [Driver: Ntfs, IRP_MJ_CREATE]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_CLOSE]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_READ]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_WRITE]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_QUERY_INFORMATION]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_SET_INFORMATION]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_QUERY_EA]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_SET_EA]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_FLUSH_BUFFERS]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_QUERY_VOLUME_INFORMATION]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_SET_VOLUME_INFORMATION]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_DIRECTORY_CONTROL]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_FILE_SYSTEM_CONTROL]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_SHUTDOWN]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_LOCK_CONTROL]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_CLEANUP]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_QUERY_SECURITY]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_SET_SECURITY]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_QUERY_QUOTA]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_SET_QUOTA]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Ntfs, IRP_MJ_PNP]
Process: System Address: 0x865df1f8 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_CREATE]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_CLOSE]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_READ]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_WRITE]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_QUERY_INFORMATION]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_SET_INFORMATION]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_QUERY_EA]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_SET_EA]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_FLUSH_BUFFERS]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_QUERY_VOLUME_INFORMATION]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_SET_VOLUME_INFORMATION]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_DIRECTORY_CONTROL]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_FILE_SYSTEM_CONTROL]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_SHUTDOWN]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_LOCK_CONTROL]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_CLEANUP]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Fastfat, IRP_MJ_PNP]
Process: System Address: 0x85f88500 Size: 121Object: Hidden Code [Driver: Cdrom, IRP_MJ_CREATE]
Process: System Address: 0x862fa1f8 Size: 121Object: Hidden Code [Driver: Cdrom, IRP_MJ_CLOSE]
Process: System Address: 0x862fa1f8 Size: 121Object: Hidden Code [Driver: Cdrom, IRP_MJ_READ]
Process: System Address: 0x862fa1f8 Size: 121Object: Hidden Code [Driver: Cdrom, IRP_MJ_WRITE]
Process: System Address: 0x862fa1f8 Size: 121Object: Hidden Code [Driver: Cdrom, IRP_MJ_FLUSH_BUFFERS]
Process: System Address: 0x862fa1f8 Size: 121Object: Hidden Code [Driver: Cdrom, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x862fa1f8 Size: 121Object: Hidden Code [Driver: Cdrom, IRP_MJ_INTERNAL_DEVICE_CONTROL]
Process: System Address: 0x862fa1f8 Size: 121Object: Hidden Code [Driver: Cdrom, IRP_MJ_SHUTDOWN]
Process: System Address: 0x862fa1f8 Size: 121Object: Hidden Code [Driver: Cdrom, IRP_MJ_POWER]
Process: System Address: 0x862fa1f8 Size: 121Object: Hidden Code [Driver: Cdrom, IRP_MJ_SYSTEM_CONTROL]
Process: System Address: 0x862fa1f8 Size: 121Object: Hidden Code [Driver: Cdrom, IRP_MJ_PNP]
Process: System Address: 0x862fa1f8 Size: 121Object: Hidden Code [Driver: dmio, IRP_MJ_CREATE]
Process: System Address: 0x8655e1f8 Size: 121Object: Hidden Code [Driver: dmio, IRP_MJ_CLOSE]
Process: System Address: 0x8655e1f8 Size: 121Object: Hidden Code [Driver: dmio, IRP_MJ_READ]
Process: System Address: 0x8655e1f8 Size: 121Object: Hidden Code [Driver: dmio, IRP_MJ_WRITE]
Process: System Address: 0x8655e1f8 Size: 121Object: Hidden Code [Driver: dmio, IRP_MJ_FLUSH_BUFFERS]
Process: System Address: 0x8655e1f8 Size: 121Object: Hidden Code [Driver: dmio, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x8655e1f8 Size: 121Object: Hidden Code [Driver: dmio, IRP_MJ_INTERNAL_DEVICE_CONTROL]
Process: System Address: 0x8655e1f8 Size: 121Object: Hidden Code [Driver: dmio, IRP_MJ_SHUTDOWN]
Process: System Address: 0x8655e1f8 Size: 121Object: Hidden Code [Driver: dmio, IRP_MJ_POWER]
Process: System Address: 0x8655e1f8 Size: 121Object: Hidden Code [Driver: dmio, IRP_MJ_SYSTEM_CONTROL]
Process: System Address: 0x8655e1f8 Size: 121Object: Hidden Code [Driver: dmio, IRP_MJ_PNP]
Process: System Address: 0x8655e1f8 Size: 121Object: Hidden Code [Driver: prodrv06ȅఌ扏济Volume{69603, IRP_MJ_CREATE]
Process: System Address: 0xe18aa608 Size: 1371Object: Hidden Code [Driver: prodrv06ȅఌ扏济Volume{69603, IRP_MJ_CLOSE]
Process: System Address: 0xe18aa608 Size: 1371Object: Hidden Code [Driver: prodrv06ȅఌ扏济Volume{69603, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0xe18aa608 Size: 1371Object: Hidden Code [Driver: usbohci, IRP_MJ_CREATE]
Process: System Address: 0x863811f8 Size: 121Object: Hidden Code [Driver: usbohci, IRP_MJ_CLOSE]
Process: System Address: 0x863811f8 Size: 121Object: Hidden Code [Driver: usbohci, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x863811f8 Size: 121Object: Hidden Code [Driver: usbohci, IRP_MJ_INTERNAL_DEVICE_CONTROL]
Process: System Address: 0x863811f8 Size: 121Object: Hidden Code [Driver: usbohci, IRP_MJ_POWER]
Process: System Address: 0x863811f8 Size: 121Object: Hidden Code [Driver: usbohci, IRP_MJ_SYSTEM_CONTROL]
Process: System Address: 0x863811f8 Size: 121Object: Hidden Code [Driver: usbohci, IRP_MJ_PNP]
Process: System Address: 0x863811f8 Size: 121Object: Hidden Code [Driver: a5szq2b0Ѕ扏济Ёం扏楄, IRP_MJ_CREATE]
Process: System Address: 0x861d71f8 Size: 121Object: Hidden Code [Driver: a5szq2b0Ѕ扏济Ёం扏楄, IRP_MJ_CLOSE]
Process: System Address: 0x861d71f8 Size: 121Object: Hidden Code [Driver: a5szq2b0Ѕ扏济Ёం扏楄, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x861d71f8 Size: 121Object: Hidden Code [Driver: a5szq2b0Ѕ扏济Ёం扏楄, IRP_MJ_INTERNAL_DEVICE_CONTROL]
Process: System Address: 0x861d71f8 Size: 121Object: Hidden Code [Driver: a5szq2b0Ѕ扏济Ёం扏楄, IRP_MJ_POWER]
Process: System Address: 0x861d71f8 Size: 121Object: Hidden Code [Driver: a5szq2b0Ѕ扏济Ёం扏楄, IRP_MJ_SYSTEM_CONTROL]
Process: System Address: 0x861d71f8 Size: 121Object: Hidden Code [Driver: a5szq2b0Ѕ扏济Ёం扏楄, IRP_MJ_PNP]
Process: System Address: 0x861d71f8 Size: 121Object: Hidden Code [Driver: Ftdisk, IRP_MJ_CREATE]
Process: System Address: 0x865e11f8 Size: 121Object: Hidden Code [Driver: Ftdisk, IRP_MJ_READ]
Process: System Address: 0x865e11f8 Size: 121Object: Hidden Code [Driver: Ftdisk, IRP_MJ_WRITE]
Process: System Address: 0x865e11f8 Size: 121Object: Hidden Code [Driver: Ftdisk, IRP_MJ_FLUSH_BUFFERS]
Process: System Address: 0x865e11f8 Size: 121Object: Hidden Code [Driver: Ftdisk, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x865e11f8 Size: 121Object: Hidden Code [Driver: Ftdisk, IRP_MJ_INTERNAL_DEVICE_CONTROL]
Process: System Address: 0x865e11f8 Size: 121Object: Hidden Code [Driver: Ftdisk, IRP_MJ_SHUTDOWN]
Process: System Address: 0x865e11f8 Size: 121Object: Hidden Code [Driver: Ftdisk, IRP_MJ_CLEANUP]
Process: System Address: 0x865e11f8 Size: 121Object: Hidden Code [Driver: Ftdisk, IRP_MJ_POWER]
Process: System Address: 0x865e11f8 Size: 121Object: Hidden Code [Driver: Ftdisk, IRP_MJ_SYSTEM_CONTROL]
Process: System Address: 0x865e11f8 Size: 121Object: Hidden Code [Driver: Ftdisk, IRP_MJ_PNP]
Process: System Address: 0x865e11f8 Size: 121Object: Hidden Code [Driver: prohlp02, IRP_MJ_CREATE]
Process: System Address: 0xe101ad60 Size: 673Object: Hidden Code [Driver: prohlp02, IRP_MJ_CLOSE]
Process: System Address: 0xe101ad60 Size: 673Object: Hidden Code [Driver: prohlp02, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0xe101ad60 Size: 673Object: Hidden Code [Driver: NetBT, IRP_MJ_CREATE]
Process: System Address: 0x856a01f8 Size: 121Object: Hidden Code [Driver: NetBT, IRP_MJ_CLOSE]
Process: System Address: 0x856a01f8 Size: 121Object: Hidden Code [Driver: NetBT, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x856a01f8 Size: 121Object: Hidden Code [Driver: NetBT, IRP_MJ_INTERNAL_DEVICE_CONTROL]
Process: System Address: 0x856a01f8 Size: 121Object: Hidden Code [Driver: NetBT, IRP_MJ_CLEANUP]
Process: System Address: 0x856a01f8 Size: 121Object: Hidden Code [Driver: NetBT, IRP_MJ_PNP]
Process: System Address: 0x856a01f8 Size: 121Object: Hidden Code [Driver: usbehci, IRP_MJ_CREATE]
Process: System Address: 0x863741f8 Size: 121Object: Hidden Code [Driver: usbehci, IRP_MJ_CLOSE]
Process: System Address: 0x863741f8 Size: 121Object: Hidden Code [Driver: usbehci, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x863741f8 Size: 121Object: Hidden Code [Driver: usbehci, IRP_MJ_INTERNAL_DEVICE_CONTROL]
Process: System Address: 0x863741f8 Size: 121Object: Hidden Code [Driver: usbehci, IRP_MJ_POWER]
Process: System Address: 0x863741f8 Size: 121Object: Hidden Code [Driver: usbehci, IRP_MJ_SYSTEM_CONTROL]
Process: System Address: 0x863741f8 Size: 121Object: Hidden Code [Driver: usbehci, IRP_MJ_PNP]
Process: System Address: 0x863741f8 Size: 121Object: Hidden Code [Driver: apfdjwqaȅః扏济apfdjwqaȃఐ卆浩, IRP_MJ_CREATE]
Process: System Address: 0x861c8490 Size: 121Object: Hidden Code [Driver: apfdjwqaȅః扏济apfdjwqaȃఐ卆浩, IRP_MJ_CLOSE]
Process: System Address: 0x861c8490 Size: 121Object: Hidden Code [Driver: apfdjwqaȅః扏济apfdjwqaȃఐ卆浩, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x861c8490 Size: 121Object: Hidden Code [Driver: apfdjwqaȅః扏济apfdjwqaȃఐ卆浩, IRP_MJ_INTERNAL_DEVICE_CONTROL]
Process: System Address: 0x861c8490 Size: 121Object: Hidden Code [Driver: apfdjwqaȅః扏济apfdjwqaȃఐ卆浩, IRP_MJ_POWER]
Process: System Address: 0x861c8490 Size: 121Object: Hidden Code [Driver: apfdjwqaȅః扏济apfdjwqaȃఐ卆浩, IRP_MJ_SYSTEM_CONTROL]
Process: System Address: 0x861c8490 Size: 121Object: Hidden Code [Driver: apfdjwqaȅః扏济apfdjwqaȃఐ卆浩, IRP_MJ_PNP]
Process: System Address: 0x861c8490 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CREATE]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CREATE_NAMED_PIPE]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CLOSE]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_READ]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_WRITE]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_INFORMATION]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_INFORMATION]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_EA]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_EA]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_FLUSH_BUFFERS]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_VOLUME_INFORMATION]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_VOLUME_INFORMATION]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_DIRECTORY_CONTROL]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_FILE_SYSTEM_CONTROL]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_INTERNAL_DEVICE_CONTROL]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SHUTDOWN]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_LOCK_CONTROL]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CLEANUP]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CREATE_MAILSLOT]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_SECURITY]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_SECURITY]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_POWER]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SYSTEM_CONTROL]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_DEVICE_CHANGE]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_QUOTA]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_QUOTA]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: MRxSmb, IRP_MJ_PNP]
Process: System Address: 0x856801f8 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_CREATE]
Process: System Address: 0x85f5b500 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_CLOSE]
Process: System Address: 0x85f5b500 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_READ]
Process: System Address: 0x85f5b500 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_QUERY_INFORMATION]
Process: System Address: 0x85f5b500 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_SET_INFORMATION]
Process: System Address: 0x85f5b500 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_QUERY_VOLUME_INFORMATION]
Process: System Address: 0x85f5b500 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_DIRECTORY_CONTROL]
Process: System Address: 0x85f5b500 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_FILE_SYSTEM_CONTROL]
Process: System Address: 0x85f5b500 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x85f5b500 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_SHUTDOWN]
Process: System Address: 0x85f5b500 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_LOCK_CONTROL]
Process: System Address: 0x85f5b500 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_CLEANUP]
Process: System Address: 0x85f5b500 Size: 121Object: Hidden Code [Driver: CdfsЅᰆ훨薇鎨鎨燴蓞嫀, IRP_MJ_PNP]
Process: System Address: 0x85f5b500 Size: 121==EOF==
Malwarebytes’ Anti-Malware 1.42
Версия базы данных: 3438
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.112009-12-27 14:01:22
mbam-log-2009-12-27 (14-01-22).txtТип проверки: Полная (C:|D:|)
Проверено объектов: 210656
Прошло времени: 27 minute(s), 58 second(s)Заражено процессов в памяти: 0
Заражено модулей в памяти: 0
Заражено ключей реестра: 0
Заражено значений реестра: 0
Заражено параметров реестра: 0
Заражено папок: 0
Заражено файлов: 0Заражено процессов в памяти:
(Вредоносные программы не обнаружены)Заражено модулей в памяти:
(Вредоносные программы не обнаружены)Заражено ключей реестра:
(Вредоносные программы не обнаружены)Заражено значений реестра:
(Вредоносные программы не обнаружены)Заражено параметров реестра:
(Вредоносные программы не обнаружены)Заражено папок:
(Вредоносные программы не обнаружены)Заражено файлов:
(Вредоносные программы не обнаружены)Logfile of random’s system information tool 1.06 (written by random/random)
Run by Аня at 2009-12-23 16:10:40
Microsoft Windows XP Professional Service Pack 3
System drive C: has 28 GB (40%) free of 70 GB
Total RAM: 1023 MB (43% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:10, on 2009-12-23
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.21148)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesUnlockerUnlockerAssistant.exe
C:WINDOWSSOUNDMAN.EXE
C:Program FilesScanSoftOmniPageSE2.0OpwareSE2.exe
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:Program FilesESETESET Smart Securityegui.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesuTorrentuTorrent.exe
C:Program FilesWIDCOMMПрограммное обеспечение BluetoothBTTray.exe
C:Program FilesMcAfee Security Scan1.0.150SSScheduler.exe
C:Program FilesYandexPunto Switcherpunto.exe
C:PROGRA~1WIDCOMMBLUETO~1BTSTAC~1.EXE
C:Program FilesABBYY FineReader 9.0NetworkLicenseServer.exe
C:Program FilesWIDCOMMПрограммное обеспечение Bluetoothbinbtwdins.exe
C:Program FilesESETESET Smart Securityekrn.exe
C:WINDOWSsystem32PnkBstrA.exe
C:WINDOWSsystem32PnkBstrB.exe
C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesUniblueRegistryBoosterregistrybooster.exe
C:Program FilesUniblueSpeedUpMyPCSUMP.exe
C:Program FilesDAEMON Tools Litedaemon.exe
C:Program FilesOperaopera.exe
C:Program FilesMail.RuAgentmagent.exe
C:Documents and SettingsАняРабочий столRSIT.exe
C:Program Filestrend microАня.exeR0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {A3BC75A2-1F87-4686-AA43-5347D756017C} — (no file)
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: WormRadar.com IESiteBlocker.NavFilter — {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} — (no file)
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — (no file)
O2 — BHO: (no name) — {A3BC75A2-1F87-4686-AA43-5347D756017C} — (no file)
O3 — Toolbar: Easy-WebPrint — {327C2873-E90D-4c37-AA9D-10AC9BABA46C} — C:Program FilesCanonEasy-WebPrintToolband.dll
O3 — Toolbar: (no name) — {09900DE8-1DCA-443F-9243-26FF581438AF} — (no file)
O3 — Toolbar: PROMT — {FF284F5C-7CF9-4682-8701-D467C1DBB99F} — C:Program FilesPRMT78PRMTIEprmtie.dll
O4 — HKLM..Run: [UnlockerAssistant] «C:Program FilesUnlockerUnlockerAssistant.exe»
O4 — HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 — HKLM..Run: [PSDrvCheck] C:WINDOWSsystem32PSDrvCheck.exe
O4 — HKLM..Run: [OpwareSE2] «C:Program FilesScanSoftOmniPageSE2.0OpwareSE2.exe»
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [GrooveMonitor] «C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe»
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [egui] «C:Program FilesESETESET Smart Securityegui.exe» /hide /waitservice
O4 — HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [uTorrent] «C:Program FilesuTorrentuTorrent.exe»
O4 — HKCU..Run: [UniblueSpeedUpMyPC] C:Program FilesUniblueSpeedUpMyPCLauncher.exe
O4 — HKCU..RunOnce: [UniblueRegistryBooster] «C:Program FilesUniblueRegistryBoosterlauncher.exe» delay 20000
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: Punto Switcher.lnk = C:Program FilesYandexPunto Switcherpunto.exe
O4 — Startup: Вырезка экрана и программа запуска для OneNote 2007.lnk = C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE
O4 — Global Startup: BTTray.lnk = ?
O4 — Global Startup: McAfee Security Scan.lnk = ?
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: (no name) — {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} — C:Program FilesPRMT78PRMTIEprmtie5.htm
O9 — Extra ‘Tools’ menuitem: Перевести — {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} — C:Program FilesPRMT78PRMTIEprmtie5.htm
O9 — Extra button: (no name) — {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} — C:Program FilesPRMT78PRMTIEoptions.htm
O9 — Extra ‘Tools’ menuitem: Настройка параметров перевода — {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} — C:Program FilesPRMT78PRMTIEoptions.htm
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O14 — IERESET.INF: START_PAGE_URL=http://philka.ru
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:Program FilesMicrosoft OfficeOffice12GrooveSystemServices.dll
O18 — Protocol: linkscanner — {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} — (no file)
O23 — Service: ABBYY FineReader 9.0 Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) — ABBYY (BIT Software) — C:Program FilesABBYY FineReader 9.0NetworkLicenseServer.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: Bluetooth Service (btwdins) — Broadcom Corporation. — C:Program FilesWIDCOMMПрограммное обеспечение Bluetoothbinbtwdins.exe
O23 — Service: Eset HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET Smart SecurityEHttpSrv.exe
O23 — Service: Eset Service (ekrn) — ESET — C:Program FilesESETESET Smart Securityekrn.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
O23 — Service: PnkBstrB — Unknown owner — C:WINDOWSsystem32PnkBstrB.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Rocket Division Software — C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 8696 bytes======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-22 62080][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2009-02-12 2217848][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A3BC75A2-1F87-4686-AA43-5347D756017C}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} — Easy-WebPrint — C:Program FilesCanonEasy-WebPrintToolband.dll [2004-08-26 405504]
{09900DE8-1DCA-443F-9243-26FF581438AF}
{FF284F5C-7CF9-4682-8701-D467C1DBB99F} — PROMT — C:Program FilesPRMT78PRMTIEprmtie.dll [2007-07-19 454656][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«UnlockerAssistant»=C:Program FilesUnlockerUnlockerAssistant.exe [2009-10-26 15872]
«SoundMan»=C:WINDOWSSOUNDMAN.EXE [2005-07-22 81920]
«PSDrvCheck»=C:WINDOWSsystem32PSDrvCheck.exe [2003-08-28 396800]
«OpwareSE2″=C:Program FilesScanSoftOmniPageSE2.0OpwareSE2.exe [2003-05-08 49152]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2009-12-18 8745656]
«GrooveMonitor»=C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2008-10-25 31072]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-01-11 39792]
«egui»=C:Program FilesESETESET Smart Securityegui.exe [2007-12-21 1443072][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
«uTorrent»=C:Program FilesuTorrentuTorrent.exe [2009-12-10 289584]
«UniblueSpeedUpMyPC»=C:Program FilesUniblueSpeedUpMyPCLauncher.exe [2009-04-29 614696][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce]
«UniblueRegistryBooster»=C:Program FilesUniblueRegistryBoosterlauncher.exe [2009-12-02 60208]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
BTTray.lnk — C:Program FilesWIDCOMMПрограммное обеспечение BluetoothBTTray.exe
McAfee Security Scan.lnk — C:Program FilesMcAfee Security Scan1.0.150SSScheduler.exeC:Documents and SettingsАняГлавное менюПрограммыАвтозагрузка
Punto Switcher.lnk — C:Program FilesYandexPunto Switcherpunto.exe
Вырезка экрана и программа запуска для OneNote 2007.lnk — C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2006-10-29 86016][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2009-02-12 2217848][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalPSEXESVC]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkPSEXESVC]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«Start_NotifyNewApps»=0
«NoDriveAutoRun»=FFFFFFFF
«NoDrives»=0[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=
«NoDrives»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE»=»C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE»=»C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE:*:Enabled:Microsoft Office Groove»
«C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE»=»C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE:*:Enabled:Microsoft Office OneNote»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesMail.RuAgentmagent.exe»=»C:Program FilesMail.RuAgentmagent.exe:*:Enabled:Mail.Ru Агент»
«C:Program FilesNetMeetingconf.exe»=»C:Program FilesNetMeetingconf.exe:*:Enabled:Windows® NetMeeting®»
«C:WINDOWSsystem32PnkBstrA.exe»=»C:WINDOWSsystem32PnkBstrA.exe:*:Enabled:PnkBstrA»
«C:WINDOWSsystem32PnkBstrB.exe»=»C:WINDOWSsystem32PnkBstrB.exe:*:Enabled:PnkBstrB»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5c350666-93ae-11dc-858c-0013d39962da}]
shellAutocommand — pcjhvyj.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL pcjhvyj.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{a576edcb-eb90-11dc-85cc-0013d39962da}]
shellAutocommand — infrom.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL infrom.exe======File associations======
.bat — edit —
.cmd — edit —
.inf — open —
.ini — open — notepad.exe %1
.js — edit —
.reg — edit —
.txt — open — notepad.exe %1
.vbs — edit —======List of files/folders created in the last 1 months======
2009-12-23 15:49:26 —-D—- C:rsit
2009-12-23 15:49:26 —-D—- C:Program Filestrend micro
2009-12-23 15:09:49 —-HDC—- C:Documents and SettingsAll UsersApplication Data{C4C0E335-EDDF-46A0-A57D-F3802AE44275}
2009-12-23 14:29:08 —-D—- C:Documents and SettingsAll UsersApplication DataDriverScanner
2009-12-21 21:55:56 —-D—- C:WINDOWStemp
2009-12-21 21:55:08 —-A—- C:WINDOWSsystem32CF7257.exe
2009-12-21 21:13:54 —-D—- C:Program FilesESET
2009-12-21 21:09:40 —-A—- C:WINDOWSSchedLgU.Txt
2009-12-21 20:58:44 —-A—- C:WINDOWSsystem32CF28991.exe
2009-12-21 20:52:03 —-A—- C:WINDOWSsystem32CF27671.exe
2009-12-19 21:09:46 —-HDC—- C:WINDOWS$NtUninstallXPSEPSCLP$
2009-12-19 18:33:22 —-A—- C:WINDOWSsystem32sol.exe
2009-12-19 18:33:21 —-A—- C:WINDOWSsystem32winmine.exe
2009-12-19 18:33:21 —-A—- C:WINDOWSsystem32mshearts.exe
2009-12-19 18:33:21 —-A—- C:WINDOWSsystem32freecell.exe
2009-12-19 17:51:01 —-D—- C:Documents and SettingsАняApplication DataUniblue
2009-12-19 17:50:57 —-D—- C:Program FilesUniblue
2009-12-19 17:34:28 —-D—- C:WINDOWSERUNT
2009-12-19 17:22:20 —-A—- C:WINDOWSsystem32swsc.exe
2009-12-19 17:16:01 —-D—- C:Documents and SettingsАняApplication DataDesktopicon
2009-12-19 17:16:00 —-D—- C:Program FilesUnlocker
2009-12-19 16:53:10 —-A—- C:WINDOWSsystem32CF6372.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSzip.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSVFIND.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSSWXCACLS.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSSWSC.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSSWREG.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSsed.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSNIRCMD.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSgrep.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSfdsv.exe
2009-12-19 16:45:37 —-A—- C:WINDOWSsystem32CF4919.exe
2009-12-19 16:43:04 —-A—- C:WINDOWSsystem32CF4406.exe
2009-12-19 16:31:41 —-SHD—- C:RECYCLER
2009-12-19 16:27:06 —-A—- C:WINDOWSPEV.exe
2009-12-19 16:12:14 —-D—- C:WINDOWSpss
2009-12-19 12:48:08 —-A—- C:WINDOWSnotepad.exe
2009-12-19 12:23:31 —-D—- C:Documents and SettingsAll UsersApplication DataZILLAbar
2009-12-19 12:15:45 —-D—- C:Documents and SettingsАняApplication DataSTOPzilla!
2009-12-19 12:15:36 —-D—- C:Program FilesSTOPzilla!
2009-12-18 22:59:43 —-D—- C:WINDOWSERDNT
2009-12-18 22:43:37 —-D—- C:Documents and SettingsAll UsersApplication DataSITEguard
2009-12-18 22:43:02 —-D—- C:Program FilesCommon FilesiS3
2009-12-18 22:43:01 —-D—- C:Documents and SettingsAll UsersApplication DataSTOPzilla!
2009-12-18 22:30:22 —-RASHD—- C:autorun.inf
2009-12-18 21:16:16 —-D—- C:Documents and SettingsАняApplication DataMalwarebytes
2009-12-18 21:16:10 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-12-18 21:16:10 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-12-18 18:20:19 —-D—- C:Documents and SettingsАняApplication DataAVG8
2009-12-18 17:46:23 —-HD—- C:$AVG
2009-12-18 17:46:12 —-A—- C:WINDOWSsystem32avgrsstx.dll
2009-12-18 17:45:59 —-D—- C:Documents and SettingsAll UsersApplication DataAVG Security Toolbar
2009-12-18 17:45:42 —-D—- C:Documents and SettingsAll UsersApplication Dataavg9
2009-12-18 15:24:40 —-D—- C:Program FilesMail.Ru
2009-12-18 15:19:14 —-D—- C:Documents and SettingsАняApplication DataMra
2009-12-12 21:46:29 —-D—- C:WINDOWSie8updates
2009-12-12 21:44:27 —-A—- C:WINDOWSsystem32ieencode.dll
2009-12-12 21:30:11 —-D—- C:Documents and SettingsАняApplication DataMozilla
2009-12-12 21:29:58 —-D—- C:Program FilesMozilla Firefox
2009-12-10 19:36:06 —-D—- C:Documents and SettingsAll UsersApplication DataWinZip
2009-12-10 19:36:03 —-D—- C:Program FilesWinZip
2009-12-10 19:21:18 —-D—- C:Program FilesAbsolute MP3 Splitter
2009-12-10 19:16:19 —-D—- C:Program FilesAudio Convertor Plus
2009-12-10 19:13:05 —-D—- C:Documents and SettingsАняApplication DataSteinberg
2009-12-10 19:12:41 —-A—- C:WINDOWSsystem32nspm6.dll
2009-12-10 19:12:41 —-A—- C:WINDOWSsystem32nspm5.dll
2009-12-10 19:12:40 —-A—- C:WINDOWSsystem32PSDrvCheck.exe
2009-12-10 19:12:40 —-A—- C:WINDOWSsystem32nspp6.dll
2009-12-10 19:12:39 —-A—- C:WINDOWSsystem32nsppx.dll
2009-12-10 19:12:39 —-A—- C:WINDOWSsystem32nspa6.dll
2009-12-10 19:12:37 —-A—- C:WINDOWSsystem32nsp.dll
2009-12-10 19:12:36 —-D—- C:Program FilesVOB
2009-12-10 19:12:36 —-A—- C:WINDOWSsystem32nspw7.dll
2009-12-10 19:12:33 —-D—- C:Program FilesPinnacle
2009-12-10 16:55:16 —-D—- C:Program FilesAudio MP3 Converter
2009-12-10 16:54:04 —-A—- C:WINDOWSsystem32NCTWMAFile2.dll
2009-12-10 16:54:03 —-A—- C:WINDOWSsystem32NCTWMAFile.dll
2009-12-10 16:54:03 —-A—- C:WINDOWSsystem32NCTAudioPlayer.dll
2009-12-10 16:54:01 —-A—- C:WINDOWSsystem32NCTAudioInformation2.dll
2009-12-10 16:53:57 —-A—- C:WINDOWSsystem32NCTAudioFile.dll
2009-12-10 16:53:56 —-A—- C:WINDOWSsystem32lame_enc.dll
2009-12-10 16:53:54 —-A—- C:WINDOWSsystem32msvcr70.dll
2009-12-10 16:53:47 —-D—- C:Program Files4U Computing
2009-12-10 16:51:50 —-D—- C:Program FilesXilisoft
2009-12-10 13:07:20 —-D—- C:Program FilesLitexMedia
2009-12-10 12:51:47 —-D—- C:Documents and SettingsАняApplication DataSonic Foundry
2009-12-10 12:51:24 —-A—- C:WINDOWSsystem32wmv8dmoe.dll
2009-12-10 12:51:24 —-A—- C:WINDOWSsystem32wmv8dmod.dll
2009-12-10 12:51:23 —-A—- C:WINDOWSsystem32wmvdmoe.dll
2009-12-10 12:51:23 —-A—- C:WINDOWSsystem32wmvcore2.dll
2009-12-10 00:15:33 —-HDC—- C:WINDOWS$NtUninstallKB970430$
2009-12-10 00:15:28 —-HDC—- C:WINDOWS$NtUninstallKB974318$
2009-12-10 00:14:57 —-HDC—- C:WINDOWS$NtUninstallKB973904$
2009-12-10 00:13:47 —-HDC—- C:WINDOWS$NtUninstallKB974392$
2009-12-10 00:13:40 —-HDC—- C:WINDOWS$NtUninstallKB971737$
2009-12-09 15:35:18 —-D—- C:Program FilesMetaTrader — Alpari
2009-12-06 23:52:45 —-D—- C:Program FilesOpera
2009-12-03 13:00:13 —-A—- C:WINDOWSsystem32nvuide.exe
2009-12-03 12:02:47 —-D—- C:Documents and SettingsАняApplication DataHelp
2009-12-03 11:47:28 —-D—- C:Documents and SettingsАняApplication DataThinstall
2009-12-02 12:36:13 —-D—- C:Program FilesIKEA HomePlanner
2009-12-02 12:35:57 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2009-12-02 11:49:32 —-A—- C:WINDOWSsystem32PnkBstrB.exe
2009-12-02 11:49:30 —-A—- C:WINDOWSsystem32PnkBstrA.exe
2009-12-02 11:49:29 —-A—- C:WINDOWSsystem32pbsvc.exe
2009-11-27 21:09:48 —-D—- C:Program FilesEA GAMES
2009-11-26 13:49:33 —-RHD—- C:Documents and SettingsАняApplication DataSecuROM
2009-11-26 13:49:32 —-A—- C:WINDOWSsystem32CmdLineExt.dll
2009-11-26 13:33:02 —-D—- C:WINDOWSRegisteredPackages
2009-11-26 13:32:30 —-A—- C:WINDOWSsystem32psisdecd.dll
2009-11-26 13:32:24 —-A—- C:WINDOWSsystem32dxdllreg.exe
2009-11-25 12:16:17 —-HDC—- C:WINDOWS$NtUninstallKB976098-v2$
2009-11-25 12:16:09 —-HDC—- C:WINDOWS$NtUninstallKB973687$
2009-11-25 12:05:09 —-D—- C:WINDOWSMinidump
2009-11-24 17:40:08 —-D—- C:Program FilesDAEMON Tools Lite
2009-11-24 17:39:37 —-D—- C:Documents and SettingsАняApplication DataDAEMON Tools
2009-11-24 14:46:33 —-D—- C:Program FilesРуссобит-М======List of files/folders modified in the last 1 months======
2009-12-23 16:10:42 —-D—- C:Temp
2009-12-23 16:02:12 —-D—- C:Documents and SettingsАняApplication DatauTorrent
2009-12-23 16:00:44 —-D—- C:WINDOWSPrefetch
2009-12-23 15:49:26 —-RD—- C:Program Files
2009-12-23 15:09:55 —-SHD—- C:WINDOWSInstaller
2009-12-23 14:33:46 —-D—- C:WINDOWSsystem32config
2009-12-23 14:29:37 —-D—- C:WINDOWS
2009-12-23 14:27:54 —-SD—- C:Documents and SettingsАняApplication DataMicrosoft
2009-12-22 21:12:57 —-D—- C:WINDOWSsystem32CatRoot2
2009-12-21 21:55:14 —-D—- C:WINDOWSsystem32
2009-12-21 21:14:36 —-HD—- C:WINDOWSinf
2009-12-21 21:14:36 —-D—- C:WINDOWSsystem32drivers
2009-12-21 21:06:08 —-SH—- C:boot.ini
2009-12-21 21:06:08 —-A—- C:WINDOWSwin.ini
2009-12-21 21:06:08 —-A—- C:WINDOWSsystem.ini
2009-12-21 20:58:50 —-SHD—- C:System Volume Information
2009-12-21 20:58:50 —-D—- C:WINDOWSsystem32Restore
2009-12-19 21:41:22 —-D—- C:WINDOWSMicrosoft.NET
2009-12-19 21:09:42 —-RSD—- C:WINDOWSassembly
2009-12-19 21:09:33 —-D—- C:WINDOWSsystem32ru-ru
2009-12-19 21:09:32 —-D—- C:WINDOWSsystem32XPSViewer
2009-12-19 19:03:46 —-HDC—- C:WINDOWS$NtUninstallKB967715$
2009-12-19 19:03:15 —-D—- C:WINDOWSsecurity
2009-12-19 18:33:34 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-12-19 18:33:29 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-12-19 18:33:28 —-D—- C:WINDOWSHelp
2009-12-19 18:31:40 —-D—- C:WINDOWSsystem32inetsrv
2009-12-19 01:16:26 —-D—- C:WINDOWSrepair
2009-12-18 22:43:02 —-D—- C:Program FilesCommon Files
2009-12-18 22:18:38 —-D—- C:WINDOWSDebug
2009-12-18 22:15:08 —-D—- C:WINDOWSime
2009-12-18 20:43:29 —-SHD—- C:WINDOWSCSC
2009-12-18 19:51:09 —-D—- C:Documents and Settings
2009-12-18 17:45:37 —-D—- C:WINDOWSWinSxS
2009-12-18 17:45:37 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2009-12-16 21:48:41 —-D—- C:WINDOWSMedia
2009-12-16 21:48:41 —-D—- C:Program FilesInternet Explorer
2009-12-16 16:56:15 —-SD—- C:WINDOWSTasks
2009-12-13 17:45:27 —-HD—- C:WINDOWS$hf_mig$
2009-12-11 20:40:29 —-D—- C:Documents and SettingsAll UsersApplication DataNOS
2009-12-10 19:12:43 —-RSD—- C:WINDOWSFonts
2009-12-10 00:15:22 —-D—- C:Documents and SettingsAll UsersApplication DataMicrosoft Help
2009-12-09 11:59:41 —-D—- C:Program FilesReflexiveArcade
2009-12-07 09:18:29 —-D—- C:WINDOWSnetwork diagnostic
2009-12-07 00:10:26 —-D—- C:Program FilesABBYY FineReader 9.0
2009-12-03 12:02:48 —-D—- C:Program FilesmIRC (VsevNet)
2009-12-02 12:03:28 —-HD—- C:Program FilesInstallShield Installation Information
2009-12-02 11:51:04 —-D—- C:WINDOWSsystem32DirectX
2009-12-02 11:49:29 —-D—- C:WINDOWSsystem32LogFiles
2009-12-02 11:44:10 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2009-12-01 23:06:19 —-A—- C:WINDOWSsystem32mrt.exe======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 easdrv;easdrv; C:WINDOWSsystem32DRIVERSeasdrv.sys [2007-12-21 30216]
R1 epfwtdi;epfwtdi; C:WINDOWSsystem32DRIVERSepfwtdi.sys [2007-12-21 53768]
R1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-14 14720]
R1 prodrv06;StarForce Protection Environment Driver v6; C:WINDOWSSystem32driversprodrv06.sys [2004-01-26 52224]
R2 BTSERIAL;Bluetooth Serial Driver; ??C:WINDOWSsystem32driversbtserial.sys []
R2 BTSLBCSP;Bluetooth Port Client Driver; ??C:WINDOWSsystem32driversbtslbcsp.sys []
R2 eamon;EAMON; C:WINDOWSsystem32DRIVERSeamon.sys [2007-12-21 39944]
R2 epfw;epfw; C:WINDOWSsystem32DRIVERSepfw.sys [2007-12-21 71176]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2006-12-04 62336]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2005-07-26 3644032]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2006-10-29 1681920]
R3 btaudio;Аудиоустройство Bluetooth; C:WINDOWSsystem32driversbtaudio.sys [2006-05-12 401664]
R3 BTDriver;Драйвер виртуальной связи Bluetooth; C:WINDOWSsystem32DRIVERSbtport.sys [2006-05-12 30363]
R3 BTKRNL;Нумератор шины Bluetooth; C:WINDOWSsystem32DRIVERSbtkrnl.sys [2006-05-12 1342602]
R3 BTWDNDIS;Сервер доступа к локальной сети Bluetooth; C:WINDOWSsystem32DRIVERSbtwdndis.sys [2006-05-12 148168]
R3 btwmodem;Модем Bluetooth; C:WINDOWSsystem32DRIVERSbtwmodem.sys [2006-05-12 30189]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:WINDOWSSystem32Driversbtwusb.sys [2006-05-12 57320]
R3 Epfwndis;Eset Personal Firewall; C:WINDOWSsystem32DRIVERSEpfwndis.sys [2007-12-21 30728]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-13 10368]
R3 MODEMCSA;Устройство фильтрации потока Unimodem; C:WINDOWSsystem32driversMODEMCSA.sys [2001-08-18 16128]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2006-12-21 12160]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:WINDOWSsystem32DRIVERSNVENETFD.sys [2006-10-29 33408]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:WINDOWSsystem32DRIVERSnvnetbus.sys [2006-10-29 12928]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-13 30208]
R3 usbhub;Драйвер стандартного концентратора USB (Microsoft); C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-13 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-04-13 17152]
R3 USR1806V;U.S. Robotics Voice Modem Driver 1806; C:WINDOWSsystem32DRIVERSUSR1806V.SYS [2001-08-18 794399]
S1 ASPI32;ASPI32; C:WINDOWSsystem32driversASPI32.sys []
S1 efskjlmn;efskjlmn; C:WINDOWSsystem32driversefskjlmn.sys []
S1 haminpog;haminpog; C:WINDOWSsystem32drivershaminpog.sys []
S1 hntagdda;hntagdda; C:WINDOWSsystem32drivershntagdda.sys []
S1 skaydrma;skaydrma; C:WINDOWSsystem32driversskaydrma.sys []
S1 snnamuse;snnamuse; C:WINDOWSsystem32driverssnnamuse.sys []
S3 afrog2xg;afrog2xg; C:WINDOWSsystem32driversafrog2xg.sys []
S3 ark9xtk4;ark9xtk4; C:WINDOWSsystem32driversark9xtk4.sys []
S3 esihdrv;esihdrv; ??C:Tempesihdrv.sys []
S3 GMSIPCI;GMSIPCI; ??E:INSTALLGMSIPCI.SYS []
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-13 32128]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-13 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-13 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 Licensing Service; C:Program FilesABBYY FineReader 9.0NetworkLicenseServer.exe [2007-11-02 566560]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2006-10-29 401408]
R2 btwdins;Bluetooth Service; C:Program FilesWIDCOMMПрограммное обеспечение Bluetoothbinbtwdins.exe [2006-05-12 258103]
R2 ekrn;Eset Service; C:Program FilesESETESET Smart Securityekrn.exe [2007-12-21 468224]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2009-12-02 66872]
R2 PnkBstrB;PnkBstrB; C:WINDOWSsystem32PnkBstrB.exe [2009-12-02 107832]
R2 StarWindServiceAE;StarWind AE Service; C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe [2007-05-28 275968]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;Eset HTTP Server; C:Program FilesESETESET Smart SecurityEHttpSrv.exe [2007-12-21 19200]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-11-02 914944]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]
EOF
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Аня at 2009-12-23 16:10:40
Microsoft Windows XP Professional Service Pack 3
System drive C: has 28 GB (40%) free of 70 GB
Total RAM: 1023 MB (43% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:10, on 2009-12-23
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.21148)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesUnlockerUnlockerAssistant.exe
C:WINDOWSSOUNDMAN.EXE
C:Program FilesScanSoftOmniPageSE2.0OpwareSE2.exe
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:Program FilesESETESET Smart Securityegui.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesuTorrentuTorrent.exe
C:Program FilesWIDCOMMПрограммное обеспечение BluetoothBTTray.exe
C:Program FilesMcAfee Security Scan1.0.150SSScheduler.exe
C:Program FilesYandexPunto Switcherpunto.exe
C:PROGRA~1WIDCOMMBLUETO~1BTSTAC~1.EXE
C:Program FilesABBYY FineReader 9.0NetworkLicenseServer.exe
C:Program FilesWIDCOMMПрограммное обеспечение Bluetoothbinbtwdins.exe
C:Program FilesESETESET Smart Securityekrn.exe
C:WINDOWSsystem32PnkBstrA.exe
C:WINDOWSsystem32PnkBstrB.exe
C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesUniblueRegistryBoosterregistrybooster.exe
C:Program FilesUniblueSpeedUpMyPCSUMP.exe
C:Program FilesDAEMON Tools Litedaemon.exe
C:Program FilesOperaopera.exe
C:Program FilesMail.RuAgentmagent.exe
C:Documents and SettingsАняРабочий столRSIT.exe
C:Program Filestrend microАня.exeR0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {A3BC75A2-1F87-4686-AA43-5347D756017C} — (no file)
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: WormRadar.com IESiteBlocker.NavFilter — {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} — (no file)
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — (no file)
O2 — BHO: (no name) — {A3BC75A2-1F87-4686-AA43-5347D756017C} — (no file)
O3 — Toolbar: Easy-WebPrint — {327C2873-E90D-4c37-AA9D-10AC9BABA46C} — C:Program FilesCanonEasy-WebPrintToolband.dll
O3 — Toolbar: (no name) — {09900DE8-1DCA-443F-9243-26FF581438AF} — (no file)
O3 — Toolbar: PROMT — {FF284F5C-7CF9-4682-8701-D467C1DBB99F} — C:Program FilesPRMT78PRMTIEprmtie.dll
O4 — HKLM..Run: [UnlockerAssistant] «C:Program FilesUnlockerUnlockerAssistant.exe»
O4 — HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 — HKLM..Run: [PSDrvCheck] C:WINDOWSsystem32PSDrvCheck.exe
O4 — HKLM..Run: [OpwareSE2] «C:Program FilesScanSoftOmniPageSE2.0OpwareSE2.exe»
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [GrooveMonitor] «C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe»
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [egui] «C:Program FilesESETESET Smart Securityegui.exe» /hide /waitservice
O4 — HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [uTorrent] «C:Program FilesuTorrentuTorrent.exe»
O4 — HKCU..Run: [UniblueSpeedUpMyPC] C:Program FilesUniblueSpeedUpMyPCLauncher.exe
O4 — HKCU..RunOnce: [UniblueRegistryBooster] «C:Program FilesUniblueRegistryBoosterlauncher.exe» delay 20000
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: Punto Switcher.lnk = C:Program FilesYandexPunto Switcherpunto.exe
O4 — Startup: Вырезка экрана и программа запуска для OneNote 2007.lnk = C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE
O4 — Global Startup: BTTray.lnk = ?
O4 — Global Startup: McAfee Security Scan.lnk = ?
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: (no name) — {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} — C:Program FilesPRMT78PRMTIEprmtie5.htm
O9 — Extra ‘Tools’ menuitem: Перевести — {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} — C:Program FilesPRMT78PRMTIEprmtie5.htm
O9 — Extra button: (no name) — {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} — C:Program FilesPRMT78PRMTIEoptions.htm
O9 — Extra ‘Tools’ menuitem: Настройка параметров перевода — {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} — C:Program FilesPRMT78PRMTIEoptions.htm
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O14 — IERESET.INF: START_PAGE_URL=http://philka.ru
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:Program FilesMicrosoft OfficeOffice12GrooveSystemServices.dll
O18 — Protocol: linkscanner — {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} — (no file)
O23 — Service: ABBYY FineReader 9.0 Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) — ABBYY (BIT Software) — C:Program FilesABBYY FineReader 9.0NetworkLicenseServer.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: Bluetooth Service (btwdins) — Broadcom Corporation. — C:Program FilesWIDCOMMПрограммное обеспечение Bluetoothbinbtwdins.exe
O23 — Service: Eset HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET Smart SecurityEHttpSrv.exe
O23 — Service: Eset Service (ekrn) — ESET — C:Program FilesESETESET Smart Securityekrn.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
O23 — Service: PnkBstrB — Unknown owner — C:WINDOWSsystem32PnkBstrB.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Rocket Division Software — C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 8696 bytes======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-22 62080][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2009-02-12 2217848][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A3BC75A2-1F87-4686-AA43-5347D756017C}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} — Easy-WebPrint — C:Program FilesCanonEasy-WebPrintToolband.dll [2004-08-26 405504]
{09900DE8-1DCA-443F-9243-26FF581438AF}
{FF284F5C-7CF9-4682-8701-D467C1DBB99F} — PROMT — C:Program FilesPRMT78PRMTIEprmtie.dll [2007-07-19 454656][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«UnlockerAssistant»=C:Program FilesUnlockerUnlockerAssistant.exe [2009-10-26 15872]
«SoundMan»=C:WINDOWSSOUNDMAN.EXE [2005-07-22 81920]
«PSDrvCheck»=C:WINDOWSsystem32PSDrvCheck.exe [2003-08-28 396800]
«OpwareSE2″=C:Program FilesScanSoftOmniPageSE2.0OpwareSE2.exe [2003-05-08 49152]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2009-12-18 8745656]
«GrooveMonitor»=C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2008-10-25 31072]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-01-11 39792]
«egui»=C:Program FilesESETESET Smart Securityegui.exe [2007-12-21 1443072][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
«uTorrent»=C:Program FilesuTorrentuTorrent.exe [2009-12-10 289584]
«UniblueSpeedUpMyPC»=C:Program FilesUniblueSpeedUpMyPCLauncher.exe [2009-04-29 614696][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce]
«UniblueRegistryBooster»=C:Program FilesUniblueRegistryBoosterlauncher.exe [2009-12-02 60208]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
BTTray.lnk — C:Program FilesWIDCOMMПрограммное обеспечение BluetoothBTTray.exe
McAfee Security Scan.lnk — C:Program FilesMcAfee Security Scan1.0.150SSScheduler.exeC:Documents and SettingsАняГлавное менюПрограммыАвтозагрузка
Punto Switcher.lnk — C:Program FilesYandexPunto Switcherpunto.exe
Вырезка экрана и программа запуска для OneNote 2007.lnk — C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2006-10-29 86016][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2009-02-12 2217848][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalPSEXESVC]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkPSEXESVC]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«Start_NotifyNewApps»=0
«NoDriveAutoRun»=FFFFFFFF
«NoDrives»=0[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=
«NoDrives»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE»=»C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE»=»C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE:*:Enabled:Microsoft Office Groove»
«C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE»=»C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE:*:Enabled:Microsoft Office OneNote»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesMail.RuAgentmagent.exe»=»C:Program FilesMail.RuAgentmagent.exe:*:Enabled:Mail.Ru Агент»
«C:Program FilesNetMeetingconf.exe»=»C:Program FilesNetMeetingconf.exe:*:Enabled:Windows® NetMeeting®»
«C:WINDOWSsystem32PnkBstrA.exe»=»C:WINDOWSsystem32PnkBstrA.exe:*:Enabled:PnkBstrA»
«C:WINDOWSsystem32PnkBstrB.exe»=»C:WINDOWSsystem32PnkBstrB.exe:*:Enabled:PnkBstrB»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5c350666-93ae-11dc-858c-0013d39962da}]
shellAutocommand — pcjhvyj.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL pcjhvyj.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{a576edcb-eb90-11dc-85cc-0013d39962da}]
shellAutocommand — infrom.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL infrom.exe======File associations======
.bat — edit —
.cmd — edit —
.inf — open —
.ini — open — notepad.exe %1
.js — edit —
.reg — edit —
.txt — open — notepad.exe %1
.vbs — edit —======List of files/folders created in the last 1 months======
2009-12-23 15:49:26 —-D—- C:rsit
2009-12-23 15:49:26 —-D—- C:Program Filestrend micro
2009-12-23 15:09:49 —-HDC—- C:Documents and SettingsAll UsersApplication Data{C4C0E335-EDDF-46A0-A57D-F3802AE44275}
2009-12-23 14:29:08 —-D—- C:Documents and SettingsAll UsersApplication DataDriverScanner
2009-12-21 21:55:56 —-D—- C:WINDOWStemp
2009-12-21 21:55:08 —-A—- C:WINDOWSsystem32CF7257.exe
2009-12-21 21:13:54 —-D—- C:Program FilesESET
2009-12-21 21:09:40 —-A—- C:WINDOWSSchedLgU.Txt
2009-12-21 20:58:44 —-A—- C:WINDOWSsystem32CF28991.exe
2009-12-21 20:52:03 —-A—- C:WINDOWSsystem32CF27671.exe
2009-12-19 21:09:46 —-HDC—- C:WINDOWS$NtUninstallXPSEPSCLP$
2009-12-19 18:33:22 —-A—- C:WINDOWSsystem32sol.exe
2009-12-19 18:33:21 —-A—- C:WINDOWSsystem32winmine.exe
2009-12-19 18:33:21 —-A—- C:WINDOWSsystem32mshearts.exe
2009-12-19 18:33:21 —-A—- C:WINDOWSsystem32freecell.exe
2009-12-19 17:51:01 —-D—- C:Documents and SettingsАняApplication DataUniblue
2009-12-19 17:50:57 —-D—- C:Program FilesUniblue
2009-12-19 17:34:28 —-D—- C:WINDOWSERUNT
2009-12-19 17:22:20 —-A—- C:WINDOWSsystem32swsc.exe
2009-12-19 17:16:01 —-D—- C:Documents and SettingsАняApplication DataDesktopicon
2009-12-19 17:16:00 —-D—- C:Program FilesUnlocker
2009-12-19 16:53:10 —-A—- C:WINDOWSsystem32CF6372.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSzip.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSVFIND.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSSWXCACLS.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSSWSC.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSSWREG.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSsed.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSNIRCMD.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSgrep.exe
2009-12-19 16:45:47 —-A—- C:WINDOWSfdsv.exe
2009-12-19 16:45:37 —-A—- C:WINDOWSsystem32CF4919.exe
2009-12-19 16:43:04 —-A—- C:WINDOWSsystem32CF4406.exe
2009-12-19 16:31:41 —-SHD—- C:RECYCLER
2009-12-19 16:27:06 —-A—- C:WINDOWSPEV.exe
2009-12-19 16:12:14 —-D—- C:WINDOWSpss
2009-12-19 12:48:08 —-A—- C:WINDOWSnotepad.exe
2009-12-19 12:23:31 —-D—- C:Documents and SettingsAll UsersApplication DataZILLAbar
2009-12-19 12:15:45 —-D—- C:Documents and SettingsАняApplication DataSTOPzilla!
2009-12-19 12:15:36 —-D—- C:Program FilesSTOPzilla!
2009-12-18 22:59:43 —-D—- C:WINDOWSERDNT
2009-12-18 22:43:37 —-D—- C:Documents and SettingsAll UsersApplication DataSITEguard
2009-12-18 22:43:02 —-D—- C:Program FilesCommon FilesiS3
2009-12-18 22:43:01 —-D—- C:Documents and SettingsAll UsersApplication DataSTOPzilla!
2009-12-18 22:30:22 —-RASHD—- C:autorun.inf
2009-12-18 21:16:16 —-D—- C:Documents and SettingsАняApplication DataMalwarebytes
2009-12-18 21:16:10 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-12-18 21:16:10 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-12-18 18:20:19 —-D—- C:Documents and SettingsАняApplication DataAVG8
2009-12-18 17:46:23 —-HD—- C:$AVG
2009-12-18 17:46:12 —-A—- C:WINDOWSsystem32avgrsstx.dll
2009-12-18 17:45:59 —-D—- C:Documents and SettingsAll UsersApplication DataAVG Security Toolbar
2009-12-18 17:45:42 —-D—- C:Documents and SettingsAll UsersApplication Dataavg9
2009-12-18 15:24:40 —-D—- C:Program FilesMail.Ru
2009-12-18 15:19:14 —-D—- C:Documents and SettingsАняApplication DataMra
2009-12-12 21:46:29 —-D—- C:WINDOWSie8updates
2009-12-12 21:44:27 —-A—- C:WINDOWSsystem32ieencode.dll
2009-12-12 21:30:11 —-D—- C:Documents and SettingsАняApplication DataMozilla
2009-12-12 21:29:58 —-D—- C:Program FilesMozilla Firefox
2009-12-10 19:36:06 —-D—- C:Documents and SettingsAll UsersApplication DataWinZip
2009-12-10 19:36:03 —-D—- C:Program FilesWinZip
2009-12-10 19:21:18 —-D—- C:Program FilesAbsolute MP3 Splitter
2009-12-10 19:16:19 —-D—- C:Program FilesAudio Convertor Plus
2009-12-10 19:13:05 —-D—- C:Documents and SettingsАняApplication DataSteinberg
2009-12-10 19:12:41 —-A—- C:WINDOWSsystem32nspm6.dll
2009-12-10 19:12:41 —-A—- C:WINDOWSsystem32nspm5.dll
2009-12-10 19:12:40 —-A—- C:WINDOWSsystem32PSDrvCheck.exe
2009-12-10 19:12:40 —-A—- C:WINDOWSsystem32nspp6.dll
2009-12-10 19:12:39 —-A—- C:WINDOWSsystem32nsppx.dll
2009-12-10 19:12:39 —-A—- C:WINDOWSsystem32nspa6.dll
2009-12-10 19:12:37 —-A—- C:WINDOWSsystem32nsp.dll
2009-12-10 19:12:36 —-D—- C:Program FilesVOB
2009-12-10 19:12:36 —-A—- C:WINDOWSsystem32nspw7.dll
2009-12-10 19:12:33 —-D—- C:Program FilesPinnacle
2009-12-10 16:55:16 —-D—- C:Program FilesAudio MP3 Converter
2009-12-10 16:54:04 —-A—- C:WINDOWSsystem32NCTWMAFile2.dll
2009-12-10 16:54:03 —-A—- C:WINDOWSsystem32NCTWMAFile.dll
2009-12-10 16:54:03 —-A—- C:WINDOWSsystem32NCTAudioPlayer.dll
2009-12-10 16:54:01 —-A—- C:WINDOWSsystem32NCTAudioInformation2.dll
2009-12-10 16:53:57 —-A—- C:WINDOWSsystem32NCTAudioFile.dll
2009-12-10 16:53:56 —-A—- C:WINDOWSsystem32lame_enc.dll
2009-12-10 16:53:54 —-A—- C:WINDOWSsystem32msvcr70.dll
2009-12-10 16:53:47 —-D—- C:Program Files4U Computing
2009-12-10 16:51:50 —-D—- C:Program FilesXilisoft
2009-12-10 13:07:20 —-D—- C:Program FilesLitexMedia
2009-12-10 12:51:47 —-D—- C:Documents and SettingsАняApplication DataSonic Foundry
2009-12-10 12:51:24 —-A—- C:WINDOWSsystem32wmv8dmoe.dll
2009-12-10 12:51:24 —-A—- C:WINDOWSsystem32wmv8dmod.dll
2009-12-10 12:51:23 —-A—- C:WINDOWSsystem32wmvdmoe.dll
2009-12-10 12:51:23 —-A—- C:WINDOWSsystem32wmvcore2.dll
2009-12-10 00:15:33 —-HDC—- C:WINDOWS$NtUninstallKB970430$
2009-12-10 00:15:28 —-HDC—- C:WINDOWS$NtUninstallKB974318$
2009-12-10 00:14:57 —-HDC—- C:WINDOWS$NtUninstallKB973904$
2009-12-10 00:13:47 —-HDC—- C:WINDOWS$NtUninstallKB974392$
2009-12-10 00:13:40 —-HDC—- C:WINDOWS$NtUninstallKB971737$
2009-12-09 15:35:18 —-D—- C:Program FilesMetaTrader — Alpari
2009-12-06 23:52:45 —-D—- C:Program FilesOpera
2009-12-03 13:00:13 —-A—- C:WINDOWSsystem32nvuide.exe
2009-12-03 12:02:47 —-D—- C:Documents and SettingsАняApplication DataHelp
2009-12-03 11:47:28 —-D—- C:Documents and SettingsАняApplication DataThinstall
2009-12-02 12:36:13 —-D—- C:Program FilesIKEA HomePlanner
2009-12-02 12:35:57 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2009-12-02 11:49:32 —-A—- C:WINDOWSsystem32PnkBstrB.exe
2009-12-02 11:49:30 —-A—- C:WINDOWSsystem32PnkBstrA.exe
2009-12-02 11:49:29 —-A—- C:WINDOWSsystem32pbsvc.exe
2009-11-27 21:09:48 —-D—- C:Program FilesEA GAMES
2009-11-26 13:49:33 —-RHD—- C:Documents and SettingsАняApplication DataSecuROM
2009-11-26 13:49:32 —-A—- C:WINDOWSsystem32CmdLineExt.dll
2009-11-26 13:33:02 —-D—- C:WINDOWSRegisteredPackages
2009-11-26 13:32:30 —-A—- C:WINDOWSsystem32psisdecd.dll
2009-11-26 13:32:24 —-A—- C:WINDOWSsystem32dxdllreg.exe
2009-11-25 12:16:17 —-HDC—- C:WINDOWS$NtUninstallKB976098-v2$
2009-11-25 12:16:09 —-HDC—- C:WINDOWS$NtUninstallKB973687$
2009-11-25 12:05:09 —-D—- C:WINDOWSMinidump
2009-11-24 17:40:08 —-D—- C:Program FilesDAEMON Tools Lite
2009-11-24 17:39:37 —-D—- C:Documents and SettingsАняApplication DataDAEMON Tools
2009-11-24 14:46:33 —-D—- C:Program FilesРуссобит-М======List of files/folders modified in the last 1 months======
2009-12-23 16:10:42 —-D—- C:Temp
2009-12-23 16:02:12 —-D—- C:Documents and SettingsАняApplication DatauTorrent
2009-12-23 16:00:44 —-D—- C:WINDOWSPrefetch
2009-12-23 15:49:26 —-RD—- C:Program Files
2009-12-23 15:09:55 —-SHD—- C:WINDOWSInstaller
2009-12-23 14:33:46 —-D—- C:WINDOWSsystem32config
2009-12-23 14:29:37 —-D—- C:WINDOWS
2009-12-23 14:27:54 —-SD—- C:Documents and SettingsАняApplication DataMicrosoft
2009-12-22 21:12:57 —-D—- C:WINDOWSsystem32CatRoot2
2009-12-21 21:55:14 —-D—- C:WINDOWSsystem32
2009-12-21 21:14:36 —-HD—- C:WINDOWSinf
2009-12-21 21:14:36 —-D—- C:WINDOWSsystem32drivers
2009-12-21 21:06:08 —-SH—- C:boot.ini
2009-12-21 21:06:08 —-A—- C:WINDOWSwin.ini
2009-12-21 21:06:08 —-A—- C:WINDOWSsystem.ini
2009-12-21 20:58:50 —-SHD—- C:System Volume Information
2009-12-21 20:58:50 —-D—- C:WINDOWSsystem32Restore
2009-12-19 21:41:22 —-D—- C:WINDOWSMicrosoft.NET
2009-12-19 21:09:42 —-RSD—- C:WINDOWSassembly
2009-12-19 21:09:33 —-D—- C:WINDOWSsystem32ru-ru
2009-12-19 21:09:32 —-D—- C:WINDOWSsystem32XPSViewer
2009-12-19 19:03:46 —-HDC—- C:WINDOWS$NtUninstallKB967715$
2009-12-19 19:03:15 —-D—- C:WINDOWSsecurity
2009-12-19 18:33:34 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-12-19 18:33:29 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-12-19 18:33:28 —-D—- C:WINDOWSHelp
2009-12-19 18:31:40 —-D—- C:WINDOWSsystem32inetsrv
2009-12-19 01:16:26 —-D—- C:WINDOWSrepair
2009-12-18 22:43:02 —-D—- C:Program FilesCommon Files
2009-12-18 22:18:38 —-D—- C:WINDOWSDebug
2009-12-18 22:15:08 —-D—- C:WINDOWSime
2009-12-18 20:43:29 —-SHD—- C:WINDOWSCSC
2009-12-18 19:51:09 —-D—- C:Documents and Settings
2009-12-18 17:45:37 —-D—- C:WINDOWSWinSxS
2009-12-18 17:45:37 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2009-12-16 21:48:41 —-D—- C:WINDOWSMedia
2009-12-16 21:48:41 —-D—- C:Program FilesInternet Explorer
2009-12-16 16:56:15 —-SD—- C:WINDOWSTasks
2009-12-13 17:45:27 —-HD—- C:WINDOWS$hf_mig$
2009-12-11 20:40:29 —-D—- C:Documents and SettingsAll UsersApplication DataNOS
2009-12-10 19:12:43 —-RSD—- C:WINDOWSFonts
2009-12-10 00:15:22 —-D—- C:Documents and SettingsAll UsersApplication DataMicrosoft Help
2009-12-09 11:59:41 —-D—- C:Program FilesReflexiveArcade
2009-12-07 09:18:29 —-D—- C:WINDOWSnetwork diagnostic
2009-12-07 00:10:26 —-D—- C:Program FilesABBYY FineReader 9.0
2009-12-03 12:02:48 —-D—- C:Program FilesmIRC (VsevNet)
2009-12-02 12:03:28 —-HD—- C:Program FilesInstallShield Installation Information
2009-12-02 11:51:04 —-D—- C:WINDOWSsystem32DirectX
2009-12-02 11:49:29 —-D—- C:WINDOWSsystem32LogFiles
2009-12-02 11:44:10 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2009-12-01 23:06:19 —-A—- C:WINDOWSsystem32mrt.exe======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 easdrv;easdrv; C:WINDOWSsystem32DRIVERSeasdrv.sys [2007-12-21 30216]
R1 epfwtdi;epfwtdi; C:WINDOWSsystem32DRIVERSepfwtdi.sys [2007-12-21 53768]
R1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-14 14720]
R1 prodrv06;StarForce Protection Environment Driver v6; C:WINDOWSSystem32driversprodrv06.sys [2004-01-26 52224]
R2 BTSERIAL;Bluetooth Serial Driver; ??C:WINDOWSsystem32driversbtserial.sys []
R2 BTSLBCSP;Bluetooth Port Client Driver; ??C:WINDOWSsystem32driversbtslbcsp.sys []
R2 eamon;EAMON; C:WINDOWSsystem32DRIVERSeamon.sys [2007-12-21 39944]
R2 epfw;epfw; C:WINDOWSsystem32DRIVERSepfw.sys [2007-12-21 71176]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2006-12-04 62336]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2005-07-26 3644032]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2006-10-29 1681920]
R3 btaudio;Аудиоустройство Bluetooth; C:WINDOWSsystem32driversbtaudio.sys [2006-05-12 401664]
R3 BTDriver;Драйвер виртуальной связи Bluetooth; C:WINDOWSsystem32DRIVERSbtport.sys [2006-05-12 30363]
R3 BTKRNL;Нумератор шины Bluetooth; C:WINDOWSsystem32DRIVERSbtkrnl.sys [2006-05-12 1342602]
R3 BTWDNDIS;Сервер доступа к локальной сети Bluetooth; C:WINDOWSsystem32DRIVERSbtwdndis.sys [2006-05-12 148168]
R3 btwmodem;Модем Bluetooth; C:WINDOWSsystem32DRIVERSbtwmodem.sys [2006-05-12 30189]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:WINDOWSSystem32Driversbtwusb.sys [2006-05-12 57320]
R3 Epfwndis;Eset Personal Firewall; C:WINDOWSsystem32DRIVERSEpfwndis.sys [2007-12-21 30728]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-13 10368]
R3 MODEMCSA;Устройство фильтрации потока Unimodem; C:WINDOWSsystem32driversMODEMCSA.sys [2001-08-18 16128]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2006-12-21 12160]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:WINDOWSsystem32DRIVERSNVENETFD.sys [2006-10-29 33408]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:WINDOWSsystem32DRIVERSnvnetbus.sys [2006-10-29 12928]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-13 30208]
R3 usbhub;Драйвер стандартного концентратора USB (Microsoft); C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-13 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-04-13 17152]
R3 USR1806V;U.S. Robotics Voice Modem Driver 1806; C:WINDOWSsystem32DRIVERSUSR1806V.SYS [2001-08-18 794399]
S1 ASPI32;ASPI32; C:WINDOWSsystem32driversASPI32.sys []
S1 efskjlmn;efskjlmn; C:WINDOWSsystem32driversefskjlmn.sys []
S1 haminpog;haminpog; C:WINDOWSsystem32drivershaminpog.sys []
S1 hntagdda;hntagdda; C:WINDOWSsystem32drivershntagdda.sys []
S1 skaydrma;skaydrma; C:WINDOWSsystem32driversskaydrma.sys []
S1 snnamuse;snnamuse; C:WINDOWSsystem32driverssnnamuse.sys []
S3 afrog2xg;afrog2xg; C:WINDOWSsystem32driversafrog2xg.sys []
S3 ark9xtk4;ark9xtk4; C:WINDOWSsystem32driversark9xtk4.sys []
S3 esihdrv;esihdrv; ??C:Tempesihdrv.sys []
S3 GMSIPCI;GMSIPCI; ??E:INSTALLGMSIPCI.SYS []
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-13 32128]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-13 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-13 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 Licensing Service; C:Program FilesABBYY FineReader 9.0NetworkLicenseServer.exe [2007-11-02 566560]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2006-10-29 401408]
R2 btwdins;Bluetooth Service; C:Program FilesWIDCOMMПрограммное обеспечение Bluetoothbinbtwdins.exe [2006-05-12 258103]
R2 ekrn;Eset Service; C:Program FilesESETESET Smart Securityekrn.exe [2007-12-21 468224]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2009-12-02 66872]
R2 PnkBstrB;PnkBstrB; C:WINDOWSsystem32PnkBstrB.exe [2009-12-02 107832]
R2 StarWindServiceAE;StarWind AE Service; C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe [2007-05-28 275968]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;Eset HTTP Server; C:Program FilesESETESET Smart SecurityEHttpSrv.exe [2007-12-21 19200]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-11-02 914944]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]
EOF
info.txt logfile of random’s system information tool 1.06 2009-12-23 15:49:38
======Uninstall list======
—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {926CC8AE-8414-43DF-8EB4-CF26D9C3C663}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
4U WMA MP3 Converter 5.6.0—>»C:Program Files4U ComputingWMA MP3 Converterunins000.exe»
ABBYY FineReader 9.0 Professional Edition—>MsiExec.exe /I{F9000000-0001-0000-0000-074957833700}
Absolute MP3 Splitter version 2.5—>»C:Program FilesAbsolute MP3 Splitterunins000.exe»
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)—>MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
Adobe AIR—>C:Program FilesCommon FilesAdobe AIRVersions1.0ResourcesAdobe AIR Updater.exe -arp:uninstall
Adobe AIR—>MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Reader 8 — Russian—>MsiExec.exe /I{AC76BA86-7AD7-1049-7B44-A81200000003}
All To MP3 Converter 1.5—>»C:Program FilesLitexMediaAll To MP3 Converterunins000.exe»
ArcSoft PhotoStudio 5.5—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{85309D89-7BE9-4094-BB17-24999C6118FC}SETUP.EXE» -l0x9
ATI Display Driver—>rundll32 C:WINDOWSsystem32atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Audio Convertor Plus version 2.18—>»C:Program FilesAudio Convertor Plusunins000.exe»
Audio MP3 Converter 2.42—>»C:Program FilesAudio MP3 Converterunins000.exe»
BootSkin—>C:PROGRA~1StardockWINCUS~1BootSkinUNWISE.EXE C:PROGRA~1StardockWINCUS~1BootSkinINSTALL.LOG
Canon MP Navigator 2.0—>»C:Program FilesCanonMP Navigator 2.0Maint.exe» /UninstallRemove C:Program FilesCanonMP Navigator 2.0uninst.ini
Canon MP150—>»C:WINDOWSsystem32CanonMP Uninstaller Information{CA9A3609-3ECC-4574-8824-A8161A71A603}DelDrv.exe» /U:{CA9A3609-3ECC-4574-8824-A8161A71A603} /L0x0019
Canon Utilities Easy-PhotoPrint—>C:Program FilesCanonEasy-PhotoPrintuninst.exe uninst.ini
CCleaner (remove only)—>»C:Program FilesCCleaneruninst.exe»
Corel Uninstaller—>C:WINDOWSCoreluninst32.exe
Easy-WebPrint—>C:WINDOWSIsUninst.exe -f»C:Program FilesCanonEasy-WebPrintUninst.isu»
eBay Icon—>C:Documents and SettingsАняApplication DataDesktopiconuninst.exe
ESET Smart Security—>MsiExec.exe /I{A1350B64-1AF8-497B-AC07-307DF67FB8D4}
GameSpy Arcade—>C:PROGRA~1GAMESP~1UNWISE.EXE C:PROGRA~1GAMESP~1INSTALL.LOG
HijackThis 2.0.2—>»C:Program Filestrend microHijackThis.exe» /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=»»
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=»»
Hotfix for Windows Media Format 11 SDK (KB929399)—>»C:WINDOWS$NtUninstallKB929399$spuninstspuninst.exe»
Ice Breaker—>»C:Program FilesIce Breakerunins000.exe»
IKEA Home Planner—>MsiExec.exe /I{B3276CB1-20B6-4AF9-AAEC-E72C83816495}
K-Lite Codec Pack 3.5.0 Full—>»C:Program FilesK-Lite Codec Packunins000.exe»
L&H TTS3000 Russian—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSRUR.inf, Uninstall
Lernout & Hauspie TruVoice American English TTS Engine—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFtv_enua.inf, Uninstall
Mail.Ru Агент 5.6 (сборка 3270, для всех пользователей)—>C:Program FilesMail.RuAgentmagentsetup.exe -uninstalllm
Malwarebytes’ Anti-Malware—>»C:Program FilesMalwarebytes’ Anti-Malwareunins000.exe»
McAfee Security Scan—>»C:Program FilesMcAfee Security Scanuninstall.exe»
MetaTrader — Alpari 4.00—>»C:Program FilesMetaTrader — AlpariUninstall.exe» «C:Program FilesMetaTrader — Alpariinstall.log»
Microsoft .NET Framework 1.1 Russian Language Pack—>MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
Microsoft .NET Framework 1.1 Security Update (KB953297)—>»C:WINDOWSMicrosoft.NETFrameworkv1.1.4322Updateshotfix.exe» «C:WINDOWSMicrosoft.NETFrameworkv1.1.4322UpdatesM953297M953297Uninstall.msp»
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack — RUS—>MsiExec.exe /I{34AB2437-1B34-3E2D-9DE8-3E2D35335B3F}
Microsoft .NET Framework 2.0 Service Pack 2—>MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack — RUS—>MsiExec.exe /I{CFF15B94-E062-3701-869A-4CDF4590461E}
Microsoft .NET Framework 3.0 Service Pack 2—>MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack — rus—>MsiExec.exe /I{95E44F11-19F0-39EA-A894-792E054AA1CF}
Microsoft .NET Framework 3.5 SP1—>C:WINDOWSMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 SP1setup.exe
Microsoft .NET Framework 3.5 SP1—>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP—>»C:WINDOWS$NtUninstallMSCompPackV1$spuninstspuninst.exe»
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Access MUI (Russian) 2007—>MsiExec.exe /X{90120000-0015-0419-0000-0000000FF1CE}
Microsoft Office Enterprise 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007—>MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Russian) 2007—>MsiExec.exe /X{90120000-0016-0419-0000-0000000FF1CE}
Microsoft Office Groove MUI (Russian) 2007—>MsiExec.exe /X{90120000-00BA-0419-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Russian) 2007—>MsiExec.exe /X{90120000-0044-0419-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Russian) 2007—>MsiExec.exe /X{90120000-00A1-0419-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Russian) 2007—>MsiExec.exe /X{90120000-001A-0419-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Russian) 2007—>MsiExec.exe /X{90120000-0018-0419-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007—>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007—>MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2007—>MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2007—>MsiExec.exe /X{90120000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2007—>MsiExec.exe /X{90120000-002C-0419-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Publisher MUI (Russian) 2007—>MsiExec.exe /X{90120000-0019-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Word MUI (Russian) 2007—>MsiExec.exe /X{90120000-001B-0419-0000-0000000FF1CE}
Microsoft User-Mode Driver Framework Feature Pack 1.0—>»C:WINDOWS$NtUninstallWudf01000$spuninstspuninst.exe»
Microsoft Visual C++ 2005 ATL Update kb973923 — x86 8.0.50727.4053—>MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
mIRC (VsevNet)—>»C:Program FilesmIRC (VsevNet)uninstall.exe»
Mozilla Firefox (3.5.6)—>C:Program FilesMozilla Firefoxuninstallhelper.exe
MSXML 4.0 SP2 (KB954430)—>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)—>MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 4.0 SP2 Parser and SDK—>MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
MSXML 6 Service Pack 2 (KB954459)—>MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
Need for Speed™ Most Wanted—>C:Program FilesEA GAMESNeed for Speed Most WantedEAUninstall.exe
NOD32 v3.x FiX 1.1 by TemDono (Free Updates — Expire in 2050)—>»C:Program FilesESETESET Smart Securityunins000.exe»
NVIDIA Drivers—>C:WINDOWSsystem32nvuide.exe UninstallGUI
OmniPage SE 2.0—>MsiExec.exe /I{79D5997E-BF79-48BB-8B41-9BE59C15C2D7}
Opera 10.01—>MsiExec.exe /X{12F9942A-E85D-44A6-B054-0B3BC9009625}
PunkBuster Services—>C:WINDOWSsystem32pbsvc.exe -u
Punto Switcher 3.1—>C:Program FilesYandexPunto Switcheruninstall.exe
Security Update for 2007 Microsoft Office System (KB969559)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB973704)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {E626DC89-A787-4553-9BB3-DC2EC7E1593F}
Security Update for CAPICOM (KB931906)—>MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)—>MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB973593)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7D6255E3-3423-4D8B-A328-F6F8D28DD5FE}
Security Update for Microsoft Office Outlook 2007 (KB972363)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {120BE9A0-9B09-4855-9E0C-7DEE45CB03C0}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office Publisher 2007 (KB969693)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7BE67088-1EB3-4569-8E75-DDAFBF61BC4E}
Security Update for Microsoft Office system 2007 (972581)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB969613)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office system 2007 (KB974234)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Security Update for Microsoft Office Word 2007 (KB969604)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
Sonic Foundry Sound Forge 6.0d—>MsiExec.exe /I{7F1C5D75-E232-4C2B-A394-E5FB7FBB3D66}
Uniblue RegistryBooster 2010—>»C:Program FilesUniblueRegistryBoosterunins000.exe»
Uniblue SpeedUpMyPC 2009—>»C:Documents and SettingsAll UsersApplication Data{C4C0E335-EDDF-46A0-A57D-F3802AE44275}speedupmypc2009.exe» REMOVE=TRUE MODIFY=FALSE
Uniblue SpeedUpMyPC 2009—>C:Documents and SettingsAll UsersApplication Data{C4C0E335-EDDF-46A0-A57D-F3802AE44275}speedupmypc2009.exe
Unlocker 1.8.8—>C:Program FilesUnlockeruninst.exe
Update for 2007 Microsoft Office System (KB967642)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=»»
Update for Microsoft Office InfoPath 2007 (KB976416)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7}
Update for Outlook 2007 Junk Email Filter (kb976884)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {FB60F280-C70F-4174-BADB-471412AA42F0}
WIDCOMM Bluetooth Software—>MsiExec.exe /X{3F4EC965-28EF-45C3-B063-04B25D4E9679}
WinAmp—>C:Program FilesWinAmpUninstWA.exe
Windows Imaging Component—>»C:WINDOWS$NtUninstallWIC$spuninstspuninst.exe»
Windows Media Format 11 runtime—>»C:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Windows Media Format 11 runtime—>»C:WINDOWS$NtUninstallWMFDist11$spuninstspuninst.exe»
Windows Media Player 11—>»C:WINDOWS$NtUninstallwmp11$spuninstspuninst.exe»
Windows Presentation Foundation—>MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows XP Service Pack 3—>»C:WINDOWS$NtServicePackUninstall$spuninstspuninst.exe»
WinZip 11.1—>MsiExec.exe /X{CD95F661-A5C4-44F5-A6AA-ECDD91C240B5}
XML Paper Specification Shared Components Language Pack 1.0—>»C:WINDOWS$NtUninstallXPSEPSCLP$spuninstspuninst.exe»
X-Translator Discovery ERRE—>MsiExec.exe /I{F6F323AF-0123-474E-AFE0-F3F26556162C}
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
Жанна Д’Арк—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll
Игры для всей семьи 7—>C:Program FilesInstallShield Installation Information{45D09783-044D-4186-ADF6-F3E2A69F1955}Setup.exe -runfromtemp -l0x0019 -removeonly
Исправление для Windows XP (KB952287)—>»C:WINDOWS$NtUninstallKB952287$spuninstspuninst.exe»
Исправление для Windows XP (KB961118)—>»C:WINDOWS$NtUninstallKB961118$spuninstspuninst.exe»
Исправление для Windows XP (KB970653-v3)—>»C:WINDOWS$NtUninstallKB970653-v3$spuninstspuninst.exe»
Исправление для Windows XP (KB976098-v2)—>»C:WINDOWS$NtUninstallKB976098-v2$spuninstspuninst.exe»
Исправление для проигрывателя Windows Media 11 — (KB939683)—>»C:WINDOWS$NtUninstallKB939683$spuninstspuninst.exe»
Критическое обновление для проигрывателя Windows Media 11 — (KB959772)—>»C:WINDOWS$NtUninstallKB959772_WM11$spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB938127)—>»C:WINDOWSie7updatesKB938127-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB938127-v2)—>»C:WINDOWSie7updatesKB938127-v2-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB956390)—>»C:WINDOWSie7updatesKB956390-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB958215)—>»C:WINDOWSie7updatesKB958215-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB960714)—>»C:WINDOWSie7updatesKB960714-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB961260)—>»C:WINDOWSie7updatesKB961260-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB963027)—>»C:WINDOWSie7updatesKB963027-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB969897)—>»C:WINDOWSie7updatesKB969897-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB972260)—>»C:WINDOWSie7updatesKB972260-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB974455)—>»C:WINDOWSie7updatesKB974455-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB976325)—>»C:WINDOWSie7updatesKB976325-IE7spuninstspuninst.exe»
Обновление безопасности для Windows XP — (KB941569)—>»C:WINDOWS$NtUninstallKB941569$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB923561)—>»C:WINDOWS$NtUninstallKB923561$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB938464)—>»C:WINDOWS$NtUninstallKB938464$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB938464-v2)—>»C:WINDOWS$NtUninstallKB938464-v2$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB946648)—>»C:WINDOWS$NtUninstallKB946648$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB950762)—>»C:WINDOWS$NtUninstallKB950762$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB950974)—>»C:WINDOWS$NtUninstallKB950974$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB951066)—>»C:WINDOWS$NtUninstallKB951066$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB951376-v2)—>»C:WINDOWS$NtUninstallKB951376-v2$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB951698)—>»C:WINDOWS$NtUninstallKB951698$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB951748)—>»C:WINDOWS$NtUninstallKB951748$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB952004)—>»C:WINDOWS$NtUninstallKB952004$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB952954)—>»C:WINDOWS$NtUninstallKB952954$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB954211)—>»C:WINDOWS$NtUninstallKB954211$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB954459)—>»C:WINDOWS$NtUninstallKB954459$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB954600)—>»C:WINDOWS$NtUninstallKB954600$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB955069)—>»C:WINDOWS$NtUninstallKB955069$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956391)—>»C:WINDOWS$NtUninstallKB956391$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956572)—>»C:WINDOWS$NtUninstallKB956572$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956744)—>»C:WINDOWS$NtUninstallKB956744$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956802)—>»C:WINDOWS$NtUninstallKB956802$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956803)—>»C:WINDOWS$NtUninstallKB956803$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956841)—>»C:WINDOWS$NtUninstallKB956841$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956844)—>»C:WINDOWS$NtUninstallKB956844$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB957095)—>»C:WINDOWS$NtUninstallKB957095$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB957097)—>»C:WINDOWS$NtUninstallKB957097$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958644)—>»C:WINDOWS$NtUninstallKB958644$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958687)—>»C:WINDOWS$NtUninstallKB958687$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958690)—>»C:WINDOWS$NtUninstallKB958690$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958869)—>»C:WINDOWS$NtUninstallKB958869$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB959426)—>»C:WINDOWS$NtUninstallKB959426$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960225)—>»C:WINDOWS$NtUninstallKB960225$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960715)—>»C:WINDOWS$NtUninstallKB960715$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960803)—>»C:WINDOWS$NtUninstallKB960803$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960859)—>»C:WINDOWS$NtUninstallKB960859$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB961371)—>»C:WINDOWS$NtUninstallKB961371$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB961373)—>»C:WINDOWS$NtUninstallKB961373$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB961501)—>»C:WINDOWS$NtUninstallKB961501$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB968537)—>»C:WINDOWS$NtUninstallKB968537$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB969059)—>»C:WINDOWS$NtUninstallKB969059$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB969898)—>»C:WINDOWS$NtUninstallKB969898$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB969947)—>»C:WINDOWS$NtUninstallKB969947$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB970238)—>»C:WINDOWS$NtUninstallKB970238$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB970430)—>»C:WINDOWS$NtUninstallKB970430$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971486)—>»C:WINDOWS$NtUninstallKB971486$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971557)—>»C:WINDOWS$NtUninstallKB971557$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971633)—>»C:WINDOWS$NtUninstallKB971633$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971657)—>»C:WINDOWS$NtUninstallKB971657$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971961)—>»C:WINDOWS$NtUninstallKB971961$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973346)—>»C:WINDOWS$NtUninstallKB973346$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973354)—>»C:WINDOWS$NtUninstallKB973354$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973507)—>»C:WINDOWS$NtUninstallKB973507$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973525)—>»C:WINDOWS$NtUninstallKB973525$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973869)—>»C:WINDOWS$NtUninstallKB973869$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973904)—>»C:WINDOWS$NtUninstallKB973904$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB974112)—>»C:WINDOWS$NtUninstallKB974112$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB974318)—>»C:WINDOWS$NtUninstallKB974318$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB974392)—>»C:WINDOWS$NtUninstallKB974392$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB974571)—>»C:WINDOWS$NtUninstallKB974571$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB975025)—>»C:WINDOWS$NtUninstallKB975025$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB975467)—>»C:WINDOWS$NtUninstallKB975467$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media — (KB952069)—>»C:WINDOWS$NtUninstallKB952069_WM9$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media — (KB954155)—>»C:WINDOWS$NtUninstallKB954155_WM9$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media — (KB968816)—>»C:WINDOWS$NtUninstallKB968816_WM9$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media — (KB973540)—>»C:WINDOWS$NtUninstallKB973540_WM9$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media 11 — (KB936782)—>»C:WINDOWS$NtUninstallKB936782_WMP11$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media 11 — (KB954154)—>»C:WINDOWS$NtUninstallKB954154_WM11$spuninstspuninst.exe»
Обновление для Windows Internet Explorer 7 (KB976749)—>»C:WINDOWSie7updatesKB976749-IE7spuninstspuninst.exe»
Обновление для Windows XP (KB951072-v2)—>»C:WINDOWS$NtUninstallKB951072-v2$spuninstspuninst.exe»
Обновление для Windows XP (KB951978)—>»C:WINDOWS$NtUninstallKB951978$spuninstspuninst.exe»
Обновление для Windows XP (KB955839)—>»C:WINDOWS$NtUninstallKB955839$spuninstspuninst.exe»
Обновление для Windows XP (KB967715)—>»C:WINDOWS$NtUninstallKB967715$spuninstspuninst.exe»
Обновление для Windows XP (KB968389)—>»C:WINDOWS$NtUninstallKB968389$spuninstspuninst.exe»
Обновление для Windows XP (KB971737)—>»C:WINDOWS$NtUninstallKB971737$spuninstspuninst.exe»
Обновление для Windows XP (KB973687)—>»C:WINDOWS$NtUninstallKB973687$spuninstspuninst.exe»
Обновление для Windows XP (KB973815)—>»C:WINDOWS$NtUninstallKB973815$spuninstspuninst.exe»
Проигрыватель Windows Media 11—>»C:Program FilesWindows Media PlayerSetup_wm.exe» /Uninstall
Языковой пакет Microsoft .NET Framework 3.5 — RUS—>C:WINDOWSMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 Language Pack — russetup.exe======Security center information======
AV: AVG Anti-Virus Free
AV: ESET Smart Security 3.0
FW: ESET Personal firewall======System event log======
Computer Name: PHILKA
Event Code: 6006
Message: Служба журнала событий остановлена.Record Number: 26612
Source Name: EventLog
Time Written: 20091205224616.000000+180
Event Type: информация
User:Computer Name: PHILKA
Event Code: 7036
Message: Служба «Ati HotKey Poller» перешла в состояние Остановлена.Record Number: 26611
Source Name: Service Control Manager
Time Written: 20091205224608.000000+180
Event Type: информация
User:Computer Name: PHILKA
Event Code: 26
Message: Всплывающее окно приложения: Mafia: Game.exe — Ошибка приложения : Инструкция по адресу «0x1005ab0f» обратилась к памяти по адресу «0x00000000». Память не может быть «read».«ОК» — завершение приложения
Record Number: 26610
Source Name: Application Popup
Time Written: 20091205190729.000000+180
Event Type: информация
User:Computer Name: PHILKA
Event Code: 4201
Message: Система обнаружила, что сетевой адаптер DEVICETCPIP_{BF105F2A-1A5E-4306-8C3E-A77CF6DD3B00} был подключен к сети,
и инициировала нормальную работу через этот сетевой адаптер.Record Number: 26609
Source Name: Tcpip
Time Written: 20091205190700.000000+180
Event Type: информация
User:Computer Name: PHILKA
Event Code: 7036
Message: Служба «Служба загрузки изображений (WIA)» перешла в состояние Работает.Record Number: 26608
Source Name: Service Control Manager
Time Written: 20091205190659.000000+180
Event Type: информация
User:=====Application event log=====
Computer Name: PHILKA
Event Code: 4096
Message:
Record Number: 2204
Source Name: H+BEDV AntiVir
Time Written: 20090329132217.000000+240
Event Type: информация
User: NT AUTHORITYSYSTEMComputer Name: PHILKA
Event Code: 4113
Message:
Record Number: 2203
Source Name: H+BEDV AntiVir
Time Written: 20090328235848.000000+180
Event Type: предупреждение
User: NT AUTHORITYSYSTEMComputer Name: PHILKA
Event Code: 1800
Message: Служба центра обеспечения безопасности Windows запущена.Record Number: 2202
Source Name: SecurityCenter
Time Written: 20090328215523.000000+180
Event Type: информация
User:Computer Name: PHILKA
Event Code: 0
Message:
Record Number: 2201
Source Name: btwdins
Time Written: 20090328215516.000000+180
Event Type: информация
User:Computer Name: PHILKA
Event Code: 4096
Message:
Record Number: 2200
Source Name: H+BEDV AntiVir
Time Written: 20090328215508.000000+180
Event Type: информация
User: NT AUTHORITYSYSTEM======Environment variables======
«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=15
«PROCESSOR_IDENTIFIER»=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
«PROCESSOR_REVISION»=2f02
«NUMBER_OF_PROCESSORS»=1
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemDrive%Temp
«TMP»=%SystemDrive%Temp
EOF
